KKozea

Products

Exploited and recent CVEs

• CVE-2026-107378 High 8.7 CairoSVG: Quadratic-time DoS parsing a crafted SVG <path> 0.4%
• CVE-2026-106443 High 8.8 WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE 0.9%
• CVE-2026-55073 Medium 6.2 WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF 0.2%
• CVE-2026-49452 Medium 6.5 WeasyPrint: CSS Injection via Presentational Hints 0.4%
• CVE-2026-31899 High 7.5 CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification 0.5%
• CVE-2025-68616 High 7.5 WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect 0.7%
• CVE-2024-28184 High 7.4 WeasyPrint allows the attachment of arbitrary files and URLs to a PDF 0.7%
• CVE-2023-27586 Critical 9.9 CairoSVG improperly processes SVG files loaded from external resources 0.7%
• CVE-2021-21236 Medium 5.7 Regular Expression Denial of Service in CairoSVG 1.4%