Most recent entries from all

EUVD-2026-22106

fkie_cve-2021-21236

CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.

GHSA-hq37-853p-g5cf — Regular Expression Denial of Service in CairoSVG

Affected: PyPI: CairoSVG

# Doyensec Vulnerability Advisory

* Regular Expression Denial of Service (REDoS) in cairosvg * Affected Product: CairoSVG v2.0.0+ * Vendor: https://github.com/Kozea * Severity: Medium * Vulnerability Class: Denial of Service * Author(s): Ben Caller ([Doyensec](https://doyensec.com))

## Summary

When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time.

## Technical description

The vulnerable regular expressions are

https://github.com/Kozea/CairoSVG/blob/9c4a982b9a021280ad90e89707eacc1d114e4ac4/cairosvg/colors.py#L190-L191

The section between 'rgb(' and the final ')' contains multiple overlapping groups.

Since all three infinitely repeating groups accept spaces, a long string of spaces causes catastrophic backtracking when it is not followed by a closing parenthesis.

The complexity is cubic, so doubling the length of the malicious string of spaces makes processing take 8 times as long.

## Reproduction steps

Create a malicious SVG of the form:

with the following code:

'<svg width="1" height="1"><rect fill="rgb(' + (' ' * 3456) + ';"/></svg>'

Note that there is no closing parenthesis before the semi-colon.

Run cairosvg e.g.:

cairosvg cairo-redos.svg -o x.png

and notice t…

gsd-2021-21236

openSUSE-SU-2023:0260-1 — Security update for python-CairoSVG

Security update for python-CairoSVG

PYSEC-2021-5

Affected: PyPI: cairosvg

UBUNTU-CVE-2021-21236

Affected: Ubuntu:16.04:LTS: cairosvg, Ubuntu:18.04:LTS: cairosvg, Ubuntu:20.04:LTS: cairosvg, Ubuntu:22.04:LTS: cairosvg, Ubuntu:24.04:LTS: cairosvg, Ubuntu:25.10: cairosvg, Ubuntu:26.04:LTS: cairosvg