Skip to content
Kozea vulnerabilities
Newest
-
kozea cairosvg
CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>
CVE-2026-107378
Fix available
8.7 High
-
kozea weasyprint
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
CVE-2026-106443
Fix available
8.8 High
-
kozea weasyprint
WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF
CVE-2026-55073
Fix available
6.2 Medium
-
kozea weasyprint
WeasyPrint: CSS Injection via Presentational Hints
CVE-2026-49452
Fix available
6.5 Medium
-
courtbouillon cairosvg
CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification
CVE-2026-31899
Public exploitFix available
7.5 High
-
kozea weasyprint, red hat ansible automation platform 2 +1 more
WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
CVE-2025-68616
Public exploitFix available
7.5 High
-
kozea weasyprint, fedoraproject fedora +1 more
WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
CVE-2024-28184
Fix available
7.4 High
-
courtbouillon cairosvg
CairoSVG improperly processes SVG files loaded from external resources
CVE-2023-27586
Fix available
9.9 Critical
-
courtbouillon cairosvg
Regular Expression Denial of Service in CairoSVG
CVE-2021-21236
Fix available
5.7 Medium