Skip to content
OpenAdvisories
Critical DSA-5382-1 1 CVE

cairosvg - security update

Published Apr 5, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 cairosvg 2.5.0-1.1+deb11u1

Vulnerabilities 1

  • Critical 9.9
    CVE-2023-27586

    CairoSVG improperly processes SVG files loaded from external resources

    CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-sid…

    Kozea CairoSVG cairosvg cairosvg Debian Ubuntu Alpine PyPI