Lucene search
+L

3 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•14 views

Astra Linux – Vulnerability in cairosvg

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG, there was exponential denial of service due to recursive elements being amplified in the cairosvg/defs.py file. This caused CPU exhaustion with even small inputs...

7.5CVSS7.1AI score0.00535EPSS
SaveExploits2References2
osv_debian
osv_debian
•added 2026/03/13 7:54 p.m.•15 views

DEBIAN-CVE-2026-31899

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input...

7.5CVSS7.2AI score0.00535EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2026/03/13 7:38 p.m.•19 views

CVE-2026-31899 CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input...

7.5CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder