Log in Start free

Vulnerability · Published Mar 20, 2023 · Assigned by GitHub_M

CVE-2023-27586CairoSVG improperly processes SVG files loaded from external resources

Critical 9.9

In plain English

A critical-severity improper input validation in CairoSVG from Kozea. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.9Critical
Exploit odds (30 days)0.7%top 45.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20py3-cairosvg2.7.0-r0ALPINE-CVE-2023-27586
Alpine:v3.21py3-cairosvg2.7.0-r0ALPINE-CVE-2023-27586
Alpine:v3.22py3-cairosvg2.7.0-r0ALPINE-CVE-2023-27586
Alpine:v3.23py3-cairosvg2.7.0-r0ALPINE-CVE-2023-27586
Alpine:v3.24py3-cairosvg2.7.0-r0ALPINE-CVE-2023-27586
Debian:12cairosvg2.5.2-1.1DEBIAN-CVE-2023-27586
Debian:13cairosvg2.5.2-1.1DEBIAN-CVE-2023-27586
Debian:14cairosvg2.5.2-1.1DEBIAN-CVE-2023-27586
PyPIcairosvg2.7.0PYSEC-2023-9
PyPIcairosvg2.7.0GHSA-rwmf-w63j-p7gv
Ubuntu:22.04:LTScairosvgno fix listedUBUNTU-CVE-2023-27586
Ubuntu:25.10cairosvgno fix listedUBUNTU-CVE-2023-27586
Ubuntu:26.10cairosvgno fix listedUBUNTU-CVE-2023-27586

Affected products (as reported)

VendorProductVersions
Kozea CairoSVG < 2.7.0

Weakness: CWE-20, CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

References