kozea/cairosvg Security Advisories | GitStock

high2026-10-08

CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

GHSA-c3jg-qh8m-j3h2 · CVE-2026-107378

high2026-03-13

CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification

GHSA-f38f-5xpm-9r7c · CVE-2026-31899

high2023-03-20

CairoSVG improperly processes SVG files loaded from external resources

GHSA-rwmf-w63j-p7gv · CVE-2023-27586