cairosvg vulnerabilities (Root)

2 vulnerabilities.

• cairosvg Root CairoSVG: Quadratic-time DoS parsing a crafted SVG <path> CVE-2026-107378 Fix available 8.7 HighOctober 8, 2026
• cairosvg Root CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification CVE-2026-31899 Public exploitFix available 7.5 HighMarch 13, 2026