Vulnerabilities for CairoSVG

First version without a known vulnerability: 2.9.0

Details

• GHSA-f38f-5xpm-9r7c2026-03-13

  CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

  Fixed in: 2.9.0

• GHSA-rwmf-w63j-p7gv2023-03-20

  CairoSVG improperly processes SVG files loaded from external resources

  Fixed in: 2.7.0, 12d31c653c0254fa9d9853f66b04ea46e7397255, 33007d4af9195e2bfb2ff9af064c4c2d8e4b2b53

• GHSA-hq37-853p-g5cf2021-01-06

  Regular Expression Denial of Service in CairoSVG

  Fixed in: 2.5.1, cfc9175e590531d90384aa88845052de53d94bf3