Skip to content
OpenAdvisories

Vendor

Kozea

9 known vulnerabilities.

Products

WeasyPrint 5 CairoSVG 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-55073

    WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF

    WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher and pass attacker-influenced values to HTML.write_pdf() can have the restriction bypassed through the xmp_metadata or sty…

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2026-49452

    WeasyPrint: CSS Injection via Presentational Hints

    WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py when presentational_hints=True. The background attribute is inserted into a ba…

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI
  • Medium 5.7
    CVE-2021-21236

    Regular Expression Denial of Service in CairoSVG

    CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular …

    Kozea CairoSVG cairosvg cairosvg Debian Ubuntu Alpine PyPI