Vulnerabilities

TI-2026-69644 CVE-2026-107378 · GHSA-c3jg-qh8m-j3h2

Inefficient path parsing in CairoSVG enables denial of service

HIGH 77

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00383 Published 2026-10-08 Fixed in 2.9.1 CWE-407

TI-2026-68895 CVE-2026-106443 · GHSA-r543-q48m-4c9j

MEDIUM 42

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00915 Published 2026-10-06 Fixed in 70.0 CWE-20

TI-2026-39778 CVE-2026-55073 · GHSA-jf6q-chmf-3h3v

MEDIUM 61

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00225 Published 2026-09-14 Fixed in 70.0 CWE-918

TI-2026-36607 CVE-2026-49452 · GHSA-jhhc-3hcp-qhm5

HIGH 68

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00372 Published 2026-08-18 Fixed in 69.0 CWE-74

TI-2026-24451 CVE-2026-31899 · GHSA-f38f-5xpm-9r7c

HIGH 72

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2026-03-13 Fixed in 2.9.0 CWE-674

TI-2025-42134 CVE-2025-68616 · GHSA-983w-rhvv-gwmv

HIGH 72

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-01-19 Partial fix · 68.0 CWE-601

TI-2024-18760 CVE-2024-28184 · GHSA-35jj-wx47-4w8r

LOW 34

WeasyPrint helps web developers to create PDF documents.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00737 Published 2024-03-09 Fixed in 61.2 CWE-829

TI-2023-12296 CVE-2023-27586 · GHSA-rwmf-w63j-p7gv

MEDIUM 50

CairoSVG is an SVG converter based on Cairo, a 2D graphics library.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00722 Published 2023-03-20 Fixed in 2.7.0 CWE-20

TI-2021-04339 CVE-2021-21236 · GHSA-hq37-853p-g5cf

LOW 28

CairoSVG is a Python (pypi) package.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01368 Published 2021-01-06 Fixed in 2.5.1 CWE-400