Canvg

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Canvg records in CISA KEV

No Canvg vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Canvg · all components

TI-2025-19207 CVE-2025-25977 · GHSA-v2mw-5mch-w8c5

HIGH 82

An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00713 Published 2025-03-10 Fixed in 4.0.3, 3.0.11 CWE-1321