Aller au contenu
Se connecter
7.5 Élevée

CVE-2026-31899 CairoSVG is an SVG converter based on Cairo, a 2D graphics library

Description

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive <use> element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input.

Produits et versions touchés

Produit Versions touchées Corrigé en
CairoSVG 2.9 premières → < 2.9.0 2.9.0

Autres CVE de CairoSVG

Les 4 CVE de CairoSVG →
CVE-2026-107378 CairoSVG is an SVG converter based on Cairo, a 2D graphics library 8.7 Élevée CVE-2023-27586 CairoSVG is an SVG converter based on Cairo, a 2D graphics library 9.9 Critique CVE-2021-21236 CairoSVG is a Python (pypi) package 5.7 Moyenne
Suivre cette CVE