Security update for python-CairoSVG (moderate)

openSUSE security update: security update for python-cairosvg ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20886-1 Rating: moderate References: bsc1259690 Cross-References: CVE-2026-31899 CVSS scores: CVE-2026-31899 SUSE : 5.5...

Fedora 44 : python-cairosvg (2026-448e26a9c8)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-448e26a9c8 advisory. Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c...

Updated python-cairosvg packages fix security vulnerability

CairoSVG vulnerable to Exponential DoS via recursive element amplification. CVE-2026-31899...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-CairoSVG (SUSE-SU-2026:1421-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1421-1 advisory. This update for python-CairoSVG fixes the following issue: - CVE-2026-31899: denial of service via...

Fedora: Security Advisory (FEDORA-2026-ec61ca906c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-a2778fcae6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : python-cairosvg (2026-ec61ca906c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ec61ca906c advisory. Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c...

Linux Distros Unpatched Vulnerability : CVE-2026-31899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplificatio...

CVE-2026-31899

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input...

aksharify (0.2.0), chem-eclipse (0.1.0) +54 more potentially affected by CVE-2026-31899 via cairosvg (>=2.1.3, <=2.8.2)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-31899 Source advisory: OSV:PYSEC-2026-2122...

buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-31899 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-31899 Source advisory: OSV:PYSEC-2026-2122...

aksharify (0.2.0), buildbot-badges (>=1.7.0, <=1.8.2) +57 more potentially affected by CVE-2026-31899 via cairosvg (>=0.5.0, <=2.8.2)

cairosvg PYPI version =0.5.0, =1.7.0, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =2025.12.7 - espjhome 2025.7.5 - evoclearn-plt 0.1.0 - grail-app 0.0.1.dev0 and more Source cves: CVE-2026-31899 Source advisory: MEND:CVE-2026-31899...

CVE-2026-31899

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input...

aksharify (0.2.0), chem-eclipse (0.1.0) +54 more potentially affected by CVE-2026-31899 via cairosvg (>=2.1.3, <=2.8.2)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-31899 Source advisory: SNYK:PYTHON-CAIROSVG-15610289...

aksharify (0.2.0), chem-eclipse (0.1.0) +54 more potentially affected by CVE-2026-31899 via cairosvg (>=2.1.3, <=2.8.2)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-31899 Source advisory: GHSA-F38F-5XPM-9R7C...

aksharify (0.2.0), chem-eclipse (0.1.0) +54 more potentially affected by CVE-2026-31899 via cairosvg (>=2.1.3, <=2.8.2)

cairosvg PYPI version =2.1.3, =0.1.0, =0.20.7, =1.0.0b1, =1.5.3, =1.5.3, =1.5.3, =0.0.2, =2025.5.0b2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-31899 Source advisory: OSV:GHSA-F38F-5XPM-9R7C...