Lucene search
GitHub_MCVELIST:CVE-2023-27586HistoryMar 20, 2023 - 3:23 p.m.
CVE-2023-27586 CairoSVG improperly processes SVG files loaded from external resources
2023-03-2015:23:31
CWE-20
CWE-918
GitHub_M
raw.githubusercontent.com
2
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG’s ability to access other files online by default.
Related
nessus
nessus
Fedora 37 : python-cairosvg (2023-ab86bdbce6)
2023-03-23 00:00:00
Fedora 36 : python-cairosvg (2023-064525b17b)
2023-03-29 00:00:00
Debian DSA-5382-1 : cairosvg - security update
2023-04-06 00:00:00
debian
debian
[SECURITY] [DSA 5382-1] cairosvg security update
2023-04-05 20:18:08
openvas
openvas
Fedora: Security Advisory for python-cairosvg (FEDORA-2023-ab86bdbce6)
2023-03-23 00:00:00
Fedora: Security Advisory for python-cairosvg (FEDORA-2023-e4a4ea43d8)
2023-03-30 00:00:00
Debian: Security Advisory (DSA-5382-1)
2023-04-06 00:00:00
cve
cve
CVE-2023-27586
2023-03-20 16:15:13
osv
osv
cairosvg - security update
2023-04-05 00:00:00
CairoSVG improperly processes SVG files loaded from external resources
2023-03-20 21:27:15
PYSEC-2023-9
2023-03-20 16:15:00
github
github
CairoSVG improperly processes SVG files loaded from external resources
2023-03-20 21:27:15
gitlab
gitlab
Server-Side Request Forgery (SSRF)
2023-03-20 00:00:00
mageia
mageia
Updated python-cairosvg packages fix security vulnerability
2023-04-07 00:20:12
fedora
fedora
[SECURITY] Fedora 38 Update: python-cairosvg-2.7.0-1.fc38
2023-03-30 00:22:58
[SECURITY] Fedora 37 Update: python-cairosvg-2.7.0-1.fc37
2023-03-23 01:34:53
[SECURITY] Fedora 36 Update: python-cairosvg-2.7.0-1.fc36
2023-03-30 01:16:04
veracode
veracode
Server-side Request Forgery (SSRF)
2023-03-22 00:44:11
prion
prion
Server side request forgery (ssrf)
2023-03-20 16:15:00
ubuntucve
ubuntucve
CVE-2023-27586
2023-03-20 00:00:00
debiancve
debiancve
CVE-2023-27586
2023-03-20 16:15:13
redos
redos
ROS-20230411-01
2023-04-11 00:00:00
alpinelinux
alpinelinux
CVE-2023-27586
2023-03-20 16:15:13