Filtered by vendor Kozea Subscriptions
Filtered by product Cairosvg Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-31899 2 Courtbouillon, Kozea 2 Cairosvg, Cairosvg 2026-03-18 7.5 High
CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive <use> element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input.