Lucene search

Regular Expression Denial of Service in CairoSVG

🗓️ 06 Jan 2021 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

Uncontrolled Resource Consumption vulnerability in CairoSVG softwar

Reporter	Title	Published	Views	Family All 19
UbuntuCve	CVE-2021-21236	6 Jan 202100:00	–	ubuntucve
ArchLinux	[ASA-202101-12] python-cairosvg: denial of service	12 Jan 202100:00	–	archlinux
Mageia	Updated python-cairosvg packages fix security vulnerability	21 Mar 202113:43	–	mageia
OSV	PYSEC-2021-5	6 Jan 202117:15	–	osv
OSV	CVE-2021-21236	6 Jan 202117:15	–	osv
OSV	Regular Expression Denial of Service in CairoSVG	6 Jan 202116:57	–	osv
Prion	Design/Logic Flaw	6 Jan 202117:15	–	prion
Debian CVE	CVE-2021-21236	6 Jan 202117:15	–	debiancve
AlpineLinux	CVE-2021-21236	6 Jan 202117:15	–	alpinelinux
Cvelist	CVE-2021-21236 Regular Expression Denial of Service in CairoSVG	6 Jan 202117:00	–	cvelist

Vulners

Node

pypi cairosvgRange<2.5.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21236
github	www.github.com/advisories/GHSA-hq37-853p-g5cf
github	www.github.com/Kozea/CairoSVG/security/advisories/GHSA-hq37-853p-g5cf
github	www.github.com/Kozea/CairoSVG/commit/cfc9175e590531d90384aa88845052de53d94bf3
github	www.github.com/Kozea/CairoSVG
github	www.github.com/Kozea/CairoSVG/releases/tag/2.5.1
github	www.github.com/pypa/advisory-database/tree/main/vulns/cairosvg/PYSEC-2021-5.yaml
pypi	www.pypi.org/project/CairoSVG

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jan 2021 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS24.3

CVSS35.5

EPSS0.001