Skip to content
OpenAdvisories

Package · PyPI

skia-python

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    GHSA-2mhw-8qcg-gr96

    skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version

    ### Impact The Linux wheels for skia-python vendor a vulnerable version of libfreetype that is affected by CVE-2025-27363 [1]. The root cause is a chain of unfortunate events: 1. skia-python builds wheels using pinned pypa/cibuildwheel@2.21.3 [2] 2. cibuildwh…

    skia-python PyPI