SUSE SLED15 / SLES15 Security Update : python-CairoSVG (SUSE-SU-2026:4949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4949-1 advisory. This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with...

openSUSE 16 Security Update : python-CairoSVG (openSUSE-SU-2026:22182-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22182-1 advisory. This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments...

[SECURITY] Fedora 45 Update: python-cairosvg-2.9.1-1.fc45

CairoSVG is a SVG 1.1 to PNG, PDF, PS and SVG converter which can also be used as a Python library...

CLEANSTART-2024-BA11082 CairoSVG is a Python (pypi) package

Security vulnerability affects the py3-cairosvg package. CairoSVG is a Python pypi package...

Security update for python-CairoSVG (important)

openSUSE security update: security update for python-cairosvg ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22182-1 Rating: important References: bsc1284832 Cross-References: CVE-2026-107378 CVSS scores: CVE-2026-107378 SUSE : 7.5...

Fedora 45 : python-cairosvg (2026-6805620549)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6805620549 advisory. Update to 2.9.1 upstream release CVE-2026-107378 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Security update for python-CairoSVG

This update for python-CairoSVG fixes the following issue: CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption bsc1284832. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...

SUSE-SU-2026:4949-1 Security update for python-CairoSVG

This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption bsc1284832...

CVE-2026-31899

CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG Keywords: CVE-2026-31899, CairoSVG, exponential DoS, SVG bomb, recursive use element, denial of service, XML amplification, Python SVG vulnerability, CWE-400, uncontrolled resource consumption, billion laughs SVG Tabl...

Security update for python-CairoSVG

This update for python-CairoSVG fixes the following issue: CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption bsc1284832. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods lik...

OPENSUSE-SU-2026:22182-1 Security update for python-CairoSVG

This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption bsc1284832...

python313-CairoSVG-2.9.1-1.1 on GA media (moderate)

python313-CairoSVG-2.9.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:12111-1 Rating: moderate Cross-References: CVE-2026-107378 CVSS scores: CVE-2026-107378 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-107378 SUSE : 8.7...

[SECURITY] Fedora 43 Update: python-cairosvg-2.9.1-1.fc43

CairoSVG is a SVG 1.1 to PNG, PDF, PS and SVG converter which can also be used as a Python library...

Fedora 43 : python-cairosvg (2026-0a3e8cc0a0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0a3e8cc0a0 advisory. Update to 2.9.1 upstream release CVE-2026-107378 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

ROOT-APP-PYPI-CVE-2026-31899 CVE-2026-31899 in cairosvg - Patched by Root

Root has patched CVE-2026-31899 in the cairosvg package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-107378 CVE-2026-107378 in cairosvg - Patched by Root

Root has patched CVE-2026-107378 in the cairosvg package for Root:PyPI. Multiple fixed versions available...

[SECURITY] Fedora 44 Update: python-cairosvg-2.9.1-1.fc44

CairoSVG is a SVG 1.1 to PNG, PDF, PS and SVG converter which can also be used as a Python library...

Fedora 44 : python-cairosvg (2026-72e46336ad)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-72e46336ad advisory. Update to 2.9.1 upstream release CVE-2026-107378 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

SummaryRendering an untrusted SVG whose contains many segments is On² CPU. A single under 1 MiB burns tens of seconds. Two independent On² sites in cairosvg/path.py:1. Tokenizer — the path-data parser consumes the d string with a while string: loop that repeatedly slices/re-scans the remaining...

PYSEC-2026-4204 CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

Summary Rendering an untrusted SVG whose contains many segments is On² CPU. A single under 1 MiB burns tens of seconds. Two independent On² sites in cairosvg/path.py: 1. Tokenizer — the path-data parser consumes the d string with a while string: loop that repeatedly slices/re-scans the remaining...