← Database

CVE-2026-31899

HIGH CVSS: 7.5 Published: 2026-03-13 Modified: 2026-06-17

Description

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input.

Affected Platforms

Courtbouillon Cairosvg

Weakness Type

CWE-674

References