Поиск уязвимостей
Количество 13
Количество 13
openSUSE-SU-2023:0272-1
Security update for python-CairoSVG
openSUSE-SU-2023:0260-1
Security update for python-CairoSVG
ALT-PU-2024-1459
ALT-PU-2024-1459: package `python3-module-cairosvg` update to version 2.7.1-alt1
CVE-2021-21236
CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.
CVE-2021-21236
CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.
CVE-2021-21236
CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter base ...
CVE-2023-27586
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default.
CVE-2023-27586
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default.
CVE-2023-27586
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Pr ...
GHSA-hq37-853p-g5cf
Regular Expression Denial of Service in CairoSVG
GHSA-rwmf-w63j-p7gv
CairoSVG improperly processes SVG files loaded from external resources
BDU:2023-02149
Уязвимость SVG-конвертера CairoSVG, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю осуществить SSRF-атаку или вызвать отказ в обслуживании
ROS-20230411-01
Уязвимость CairoSVG
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2023:0272-1 Security update for python-CairoSVG | около 3 лет назад | ||
| openSUSE-SU-2023:0260-1 Security update for python-CairoSVG | около 3 лет назад | ||
| ALT-PU-2024-1459 ALT-PU-2024-1459: package `python3-module-cairosvg` update to version 2.7.1-alt1 | CVSS3: 9.9 | почти 3 года назад | |
 | CVE-2021-21236 CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information. | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
 | CVE-2021-21236 CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information. | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
| CVE-2021-21236 CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter base ... | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
| CVE-2023-27586 CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default. | CVSS3: 7.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-27586 CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default. | CVSS3: 7.1 | 1% Низкий | больше 3 лет назад |
| CVE-2023-27586 CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Pr ... | CVSS3: 7.1 | 1% Низкий | больше 3 лет назад |
| GHSA-hq37-853p-g5cf Regular Expression Denial of Service in CairoSVG | CVSS3: 7.5 | 1% Низкий | почти 6 лет назад |
| GHSA-rwmf-w63j-p7gv CairoSVG improperly processes SVG files loaded from external resources | CVSS3: 9.9 | 1% Низкий | больше 3 лет назад |
 | BDU:2023-02149 Уязвимость SVG-конвертера CairoSVG, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю осуществить SSRF-атаку или вызвать отказ в обслуживании | CVSS3: 9.9 | 1% Низкий | больше 3 лет назад |
 | ROS-20230411-01 Уязвимость CairoSVG | CVSS3: 7.1 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу