https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 20:25:15 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:5081 <p><strong>Affected:</strong> AlmaLinux:9: librsvg2, AlmaLinux:9: librsvg2-devel, AlmaLinux:9: librsvg2-tools</p> <p>The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.</p> <p>Security Fix(es):</p> <p>* librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: librsvg2, AlmaLinux:9: librsvg2-devel, AlmaLinux:9: librsvg2-tools</p> <p>The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.</p> <p>Security Fix(es):</p> <p>* librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:5081 https://cve.radiocsirt.org/vuln/bdu:2023-05427 bdu:2023-05427 https://cve.radiocsirt.org/vuln/bdu:2023-05427 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-8982 EUVD-2026-8982 https://cve.radiocsirt.org/vuln/euvd-2026-8982 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38633 <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38633 https://cve.radiocsirt.org/vuln/ghsa-jf6v-gw88-w63q <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> https://cve.radiocsirt.org/vuln/ghsa-jf6v-gw88-w63q https://cve.radiocsirt.org/vuln/gsd-2023-38633 gsd-2023-38633 https://cve.radiocsirt.org/vuln/gsd-2023-38633 https://cve.radiocsirt.org/vuln/oesa-2023-1582 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: librsvg2, openEuler:20.03-LTS-SP3: librsvg2, openEuler:22.03-LTS: librsvg2, openEuler:22.03-LTS-SP1: librsvg2, openEuler:22.03-LTS-SP2: librsvg2</p> <p>An SVG library based on cairo. Security Fix(es): A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&amp;quot;.?../../../../../../../../../../etc/passwd&amp;quot; in an xi:include element.(CVE-2023-38633)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: librsvg2, openEuler:20.03-LTS-SP3: librsvg2, openEuler:22.03-LTS: librsvg2, openEuler:22.03-LTS-SP1: librsvg2, openEuler:22.03-LTS-SP2: librsvg2</p> <p>An SVG library based on cairo. Security Fix(es): A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&amp;quot;.?../../../../../../../../../../etc/passwd&amp;quot; in an xi:include element.(CVE-2023-38633)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1582 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13500-1 <p>gdk-pixbuf-loader-rsvg-2.57.0-4.1 on GA media</p> <p>gdk-pixbuf-loader-rsvg-2.57.0-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13500-1 https://cve.radiocsirt.org/vuln/rhsa-2023:4809 <p>librsvg: Arbitrary file read when xinclude href has special characters</p> <p>librsvg: Arbitrary file read when xinclude href has special characters</p> https://cve.radiocsirt.org/vuln/rhsa-2023:4809 https://cve.radiocsirt.org/vuln/suse-su-2023:3208-1 <p>Security update for librsvg</p> <p>Security update for librsvg</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3208-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-38633 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: librsvg, Ubuntu:22.04:LTS: librsvg</p> <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: librsvg, Ubuntu:22.04:LTS: librsvg</p> <p>A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=&#34;.?../../../../../../../../../../etc/passwd&#34; in an xi:include element.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-38633 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1859 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in librsvg ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in librsvg ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1859