Поиск уязвимостей
Количество 7
Количество 7
GHSA-hq37-853p-g5cf
Regular Expression Denial of Service in CairoSVG
CVE-2021-21236
CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.
CVE-2021-21236
CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.
CVE-2021-21236
CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter base ...
openSUSE-SU-2023:0272-1
Security update for python-CairoSVG
openSUSE-SU-2023:0260-1
Security update for python-CairoSVG
ALT-PU-2024-1459
ALT-PU-2024-1459: package `python3-module-cairosvg` update to version 2.7.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-hq37-853p-g5cf Regular Expression Denial of Service in CairoSVG | CVSS3: 7.5 | 1% Низкий | почти 6 лет назад |
 | CVE-2021-21236 CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information. | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
 | CVE-2021-21236 CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information. | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
| CVE-2021-21236 CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter base ... | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
 | openSUSE-SU-2023:0272-1 Security update for python-CairoSVG | около 3 лет назад | ||
| openSUSE-SU-2023:0260-1 Security update for python-CairoSVG | около 3 лет назад | ||
| ALT-PU-2024-1459 ALT-PU-2024-1459: package `python3-module-cairosvg` update to version 2.7.1-alt1 | CVSS3: 9.9 | почти 3 года назад |
Уязвимостей на страницу