Skip to content
Threat Feed
Subscribe

Vendor

CairoSVG

1 brief RSS
medium advisory

CairoSVG Quadratic-Time Denial of Service

CairoSVG versions 2.9.0 and earlier are vulnerable to a CPU-exhaustion denial-of-service attack due to O(n²) complexity in SVG path-data parsing and marker rendering.

CairoSVG
1t 1c