openSUSE-SU-2026:22182-1
openSUSE-SU-2026:22182-1 · Security update for python-CairoSVG
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption (bsc#1284832).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python-cairosvg openSUSE:Leap 16.0
- Affected ranges
- ECOSYSTEM: < 2.7.1-160000.4.1
Update to 2.7.1-160000.4.1