Skip to content
OpenAdvisories

Package · Debian

fpdf2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-114610

    fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

    fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() passes nested SVG <use> references to GraphicsContext.add_item(), whose default clone=True deep-copy behavior copies the complete referenced graphics tree durin…

    py-pdf fpdf2 fpdf2 fpdf2 Debian PyPI
  • Medium 5.8
    CVE-2026-114609

    fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

    fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTP(S) URLs and raw local paths supplied through FPDF.image(), FPDF.write_html() HTML <img src> values, SVG <image href> or…

    py-pdf fpdf2 fpdf2 fpdf2 Debian PyPI