Vulnerabilities

TI-2026-24451 CVE-2026-31899 · GHSA-f38f-5xpm-9r7c

CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

HIGH 72

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00556 Published 2026-03-13 Fixed in 2.9.0 CWE-674

TI-2023-12296 CVE-2023-27586 · GHSA-rwmf-w63j-p7gv

MEDIUM 50

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00722 Published 2023-03-20 Fixed in 2.7.0 CWE-20

TI-2021-04339 CVE-2021-21236 · GHSA-hq37-853p-g5cf

LOW 28

CairoSVG is a Python (pypi) package.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01368 Published 2021-01-06 Fixed in 2.5.1 CWE-400