Skip to content
OpenAdvisories

Vendor

Kozea

9 known vulnerabilities.

Products

WeasyPrint 5 CairoSVG 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-31899 Public exploit

    CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

    CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive <use> element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input.

    Kozea CairoSVG cairosvg cairosvg Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2025-68616 Public exploit

    WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

    WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `default_url_fetcher`. The vulnerability allows attackers to access internal network resources (such …

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI