Lucene search
GoogleOSV:CVE-2023-27586HistoryMar 20, 2023 - 4:15 p.m.
CVE-2023-27586
2023-03-2016:15:13
Google
osv.dev
4
0.001 Low
EPSS
Percentile
34.4%
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG’s ability to access other files online by default.
Related
ubuntucve
ubuntucve
CVE-2023-27586
2023-03-20 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: python-cairosvg-2.7.0-1.fc36
2023-03-30 01:16:04
[SECURITY] Fedora 38 Update: python-cairosvg-2.7.0-1.fc38
2023-03-30 00:22:58
[SECURITY] Fedora 37 Update: python-cairosvg-2.7.0-1.fc37
2023-03-23 01:34:53
debiancve
debiancve
CVE-2023-27586
2023-03-20 16:15:13
osv
osv
PYSEC-2023-9
2023-03-20 16:15:00
cairosvg - security update
2023-04-05 00:00:00
CairoSVG improperly processes SVG files loaded from external resources
2023-03-20 21:27:15
nessus
nessus
Fedora 36 : python-cairosvg (2023-064525b17b)
2023-03-29 00:00:00
Debian DSA-5382-1 : cairosvg - security update
2023-04-06 00:00:00
Fedora 37 : python-cairosvg (2023-ab86bdbce6)
2023-03-23 00:00:00
veracode
veracode
Server-side Request Forgery (SSRF)
2023-03-22 00:44:11
gitlab
gitlab
Server-Side Request Forgery (SSRF)
2023-03-20 00:00:00
openvas
openvas
Fedora: Security Advisory for python-cairosvg (FEDORA-2023-e4a4ea43d8)
2023-03-30 00:00:00
Fedora: Security Advisory for python-cairosvg (FEDORA-2023-ab86bdbce6)
2023-03-23 00:00:00
Mageia: Security Advisory (MGASA-2023-0126)
2023-04-07 00:00:00
mageia
mageia
Updated python-cairosvg packages fix security vulnerability
2023-04-07 00:20:12
cve
cve
CVE-2023-27586
2023-03-20 16:15:13
debian
debian
[SECURITY] [DSA 5382-1] cairosvg security update
2023-04-05 20:18:08
github
github
CairoSVG improperly processes SVG files loaded from external resources
2023-03-20 21:27:15
prion
prion
Server side request forgery (ssrf)
2023-03-20 16:15:00
redos
redos
ROS-20230411-01
2023-04-11 00:00:00
cvelist
cvelist
alpinelinux
alpinelinux
CVE-2023-27586
2023-03-20 16:15:13