Skip to content
OpenAdvisories

Vendor

Kozea

9 known vulnerabilities.

Products

WeasyPrint 5 CairoSVG 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2023-27586

    CairoSVG improperly processes SVG files loaded from external resources

    CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-sid…

    Kozea CairoSVG cairosvg cairosvg Debian Ubuntu Alpine PyPI