VDB

GCVE-110-MAGEIA-2021-149

GCVE-110-MAGEIA-2021-149
Advisory Published
Vulnetix · Advisory published March 21, 2021
When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time (CVE-2021-21236).

Affected Products

VendorProductVersionsPlatforms
Mageiapython-cairosvg0 (affected), 2.2.1-1.1.mga7 (unaffected), 0 (affected), 2.2.1-1.1.mga7 (unaffected)
Mageialibx110 (affected), 1.7.0-1.2.mga8 (unaffected)
Mageialibx111.6.12-1.2.mga7 (unaffected), 0 (affected)

Browse GCVE Records

74,108 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›