CairoSVG 安全漏洞

CairoSVG is an SVG format conversion tool developed by Kozea. CairoSVG has a security vulnerability that stems from the recursive element being enlarged, which can lead to exponential denial-of-service attacks and result in CPU exhaustion...

PT-2026-25365

Name of the Vulnerable Software and Affected Versions CairoSVG versions prior to 2.9.0 Description CairoSVG is an SVG converter based on Cairo, a 2D graphics library. A denial of service can occur due to recursive element amplification within the cairosvg/defs.py file, specifically in the use...

EUVD-2021-0039

Malware in sbrugna...

EUVD-2023-0051

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-21236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of servic...

Linux Distros Unpatched Vulnerability : CVE-2023-27586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files....

OPENSUSE-SU-2024:13218-1 python310-CairoSVG-2.7.1-1.1 on GA media

These are all security issues fixed in the python310-CairoSVG-2.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 15 Security Update : python-CairoSVG (openSUSE-SU-2023:0272-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0272-1 advisory. - CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression...

openSUSE 15 Security Update : python-CairoSVG (openSUSE-SU-2023:0260-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0260-1 advisory. - CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression...

Security update for python-CairoSVG (moderate)

openSUSE Security Update: Security update for python-CairoSVG Announcement ID: openSUSE-SU-2023:0272-1 Rating: moderate References: 1180648 1209538 Cross-References: CVE-2021-21236 CVE-2023-27586 CVSS scores: CVE-2021-21236 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-27586 NVD...

OPENSUSE-SU-2023:0272-1 Security update for python-CairoSVG

This update for python-CairoSVG fixes the following issues: - CVE-2023-27586: Don't allow fetching external files unless explicitly asked for. boo1209538 - Update to version 2.5.2 Fix marker path scale - Update to version 2.5.1 boo1180648, CVE-2021-21236: Security fix: When processing SVG files,...

OPENSUSE-SU-2023:0260-1 Security update for python-CairoSVG

This update for python-CairoSVG fixes the following issues: - CVE-2023-27586: Don't allow fetching external files unless explicitly asked for. boo1209538 - Update to version 2.5.2 Fix marker path scale - Update to version 2.5.1 boo1180648, CVE-2021-21236: Security fix: When processing SVG files,...

Security update for python-CairoSVG (moderate)

openSUSE Security Update: Security update for python-CairoSVG Announcement ID: openSUSE-SU-2023:0260-1 Rating: moderate References: 1180648 1209538 Cross-References: CVE-2021-21236 CVE-2023-27586 CVSS scores: CVE-2021-21236 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-27586 NVD...

The vulnerability of the SVG converter CairoSVG, related to insufficient validation of incoming requests, allows a attacker to perform an SSRF attack or cause a service failure.

The vulnerability of the CairoSVG SVG converter is related to insufficient validation of incoming requests during the processing of SVG files. Exploiting this vulnerability can allow an attacker to perform a SSRF attack or cause service failures...

ROS-20230411-01

The CairoSVG SVG converter vulnerability is related to insufficient validation of user input during the SVG file processing. Exploitation of the vulnerability could allow an attacker acting remotely, access sensitive data located on a local network or send malicious requests to other servers from...

Mageia: Security Advisory (MGASA-2023-0126)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0126 Updated python-cairosvg packages fix security vulnerability

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service...

Updated python-cairosvg packages fix security vulnerability

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service...

Debian: Security Advisory (DSA-5382-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5382-1 : cairosvg - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5382 advisory. It was reported that cairosvg, a SVG converter based on Cairo, can send requests to external hosts when processing specially crafted SVG files with external file resource...