Kozea

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Kozea records in CISA KEV

No Kozea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weasyprint 2 records HIGH

Records

9 records

TI-2026-69644 CVE-2026-107378 · GHSA-c3jg-qh8m-j3h2

Inefficient path parsing in CairoSVG enables denial of service

HIGH 77

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00383 Published 2026-10-08 Fixed in 2.9.1 CWE-407

TI-2026-24451 CVE-2026-31899 · GHSA-f38f-5xpm-9r7c

CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

HIGH 72

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2026-03-13 Fixed in 2.9.0 CWE-674

TI-2025-42134 CVE-2025-68616 · GHSA-983w-rhvv-gwmv

WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

HIGH 72

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-01-19 Partial fix · 68.0 CWE-601

TI-2026-36607 CVE-2026-49452 · GHSA-jhhc-3hcp-qhm5

WeasyPrint: CSS Injection via Presentational Hints

HIGH 68

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00372 Published 2026-08-18 Fixed in 69.0 CWE-74

TI-2026-39778 CVE-2026-55073 · GHSA-jf6q-chmf-3h3v

WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF

MEDIUM 61

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00225 Published 2026-09-14 Fixed in 70.0 CWE-918

TI-2023-12296 CVE-2023-27586 · GHSA-rwmf-w63j-p7gv

CairoSVG improperly processes SVG files loaded from external resources

MEDIUM 50

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00722 Published 2023-03-20 Fixed in 2.7.0 CWE-20

TI-2026-68895 CVE-2026-106443 · GHSA-r543-q48m-4c9j

WeasyPrint passes EPS images to Ghostscript, risking code execution

MEDIUM 42

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00915 Published 2026-10-06 Fixed in 70.0 CWE-20

TI-2024-18760 CVE-2024-28184 · GHSA-35jj-wx47-4w8r

WeasyPrint allows the attachment of arbitrary files and URLs to a PDF

LOW 34

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00737 Published 2024-03-09 Fixed in 61.2 CWE-829

TI-2021-04339 CVE-2021-21236 · GHSA-hq37-853p-g5cf

Regular Expression Denial of Service in CairoSVG

LOW 28

CairoSVG is a Python (pypi) package.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01368 Published 2021-01-06 Fixed in 2.5.1 CWE-400

Open these records in search →

Critical	1
High	5
Medium	3
Low	0
No CVSS	0