Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kzys-kvs5-wqgv
SummaryCairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.
Aliases
0
alias CVE-2021-21236
1
alias GHSA-hq37-853p-g5cf
2
alias PYSEC-2021-5
Fixed_packages
0
url pkg:pypi/cairosvg@2.5.1
purl pkg:pypi/cairosvg@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.5.1
Affected_packages
0
url pkg:pypi/cairosvg@0.1
purl pkg:pypi/cairosvg@0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.1
1
url pkg:pypi/cairosvg@0.1.1
purl pkg:pypi/cairosvg@0.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.1.1
2
url pkg:pypi/cairosvg@0.1.2
purl pkg:pypi/cairosvg@0.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.1.2
3
url pkg:pypi/cairosvg@0.2
purl pkg:pypi/cairosvg@0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.2
4
url pkg:pypi/cairosvg@0.3
purl pkg:pypi/cairosvg@0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.3
5
url pkg:pypi/cairosvg@0.3.1
purl pkg:pypi/cairosvg@0.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.3.1
6
url pkg:pypi/cairosvg@0.4
purl pkg:pypi/cairosvg@0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.4
7
url pkg:pypi/cairosvg@0.4.1
purl pkg:pypi/cairosvg@0.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.4.1
8
url pkg:pypi/cairosvg@0.4.2
purl pkg:pypi/cairosvg@0.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.4.2
9
url pkg:pypi/cairosvg@0.4.3
purl pkg:pypi/cairosvg@0.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.4.3
10
url pkg:pypi/cairosvg@0.4.4
purl pkg:pypi/cairosvg@0.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.4.4
11
url pkg:pypi/cairosvg@0.5
purl pkg:pypi/cairosvg@0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@0.5
12
url pkg:pypi/cairosvg@1.0
purl pkg:pypi/cairosvg@1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0
13
url pkg:pypi/cairosvg@1.0.1
purl pkg:pypi/cairosvg@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.1
14
url pkg:pypi/cairosvg@1.0.2
purl pkg:pypi/cairosvg@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.2
15
url pkg:pypi/cairosvg@1.0.3
purl pkg:pypi/cairosvg@1.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.3
16
url pkg:pypi/cairosvg@1.0.4
purl pkg:pypi/cairosvg@1.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.4
17
url pkg:pypi/cairosvg@1.0.5
purl pkg:pypi/cairosvg@1.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.5
18
url pkg:pypi/cairosvg@1.0.6
purl pkg:pypi/cairosvg@1.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.6
19
url pkg:pypi/cairosvg@1.0.7
purl pkg:pypi/cairosvg@1.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.7
20
url pkg:pypi/cairosvg@1.0.8
purl pkg:pypi/cairosvg@1.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.8
21
url pkg:pypi/cairosvg@1.0.9
purl pkg:pypi/cairosvg@1.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.9
22
url pkg:pypi/cairosvg@1.0.10
purl pkg:pypi/cairosvg@1.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.10
23
url pkg:pypi/cairosvg@1.0.11
purl pkg:pypi/cairosvg@1.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.11
24
url pkg:pypi/cairosvg@1.0.12
purl pkg:pypi/cairosvg@1.0.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.12
25
url pkg:pypi/cairosvg@1.0.13
purl pkg:pypi/cairosvg@1.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.13
26
url pkg:pypi/cairosvg@1.0.14
purl pkg:pypi/cairosvg@1.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.14
27
url pkg:pypi/cairosvg@1.0.15
purl pkg:pypi/cairosvg@1.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.15
28
url pkg:pypi/cairosvg@1.0.16
purl pkg:pypi/cairosvg@1.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.16
29
url pkg:pypi/cairosvg@1.0.17
purl pkg:pypi/cairosvg@1.0.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.17
30
url pkg:pypi/cairosvg@1.0.18
purl pkg:pypi/cairosvg@1.0.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.18
31
url pkg:pypi/cairosvg@1.0.19
purl pkg:pypi/cairosvg@1.0.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.19
32
url pkg:pypi/cairosvg@1.0.20
purl pkg:pypi/cairosvg@1.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.20
33
url pkg:pypi/cairosvg@1.0.21
purl pkg:pypi/cairosvg@1.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.21
34
url pkg:pypi/cairosvg@1.0.22
purl pkg:pypi/cairosvg@1.0.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@1.0.22
35
url pkg:pypi/cairosvg@2.0.0rc1
purl pkg:pypi/cairosvg@2.0.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.0rc1
36
url pkg:pypi/cairosvg@2.0.0rc2
purl pkg:pypi/cairosvg@2.0.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.0rc2
37
url pkg:pypi/cairosvg@2.0.0rc3
purl pkg:pypi/cairosvg@2.0.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.0rc3
38
url pkg:pypi/cairosvg@2.0.0rc4
purl pkg:pypi/cairosvg@2.0.0rc4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.0rc4
39
url pkg:pypi/cairosvg@2.0.0rc5
purl pkg:pypi/cairosvg@2.0.0rc5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.0rc5
40
url pkg:pypi/cairosvg@2.0.0rc6
purl pkg:pypi/cairosvg@2.0.0rc6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.0rc6
41
url pkg:pypi/cairosvg@2.0.0
purl pkg:pypi/cairosvg@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.0
42
url pkg:pypi/cairosvg@2.0.1
purl pkg:pypi/cairosvg@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.1
43
url pkg:pypi/cairosvg@2.0.2
purl pkg:pypi/cairosvg@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.2
44
url pkg:pypi/cairosvg@2.0.3
purl pkg:pypi/cairosvg@2.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.0.3
45
url pkg:pypi/cairosvg@2.1.0
purl pkg:pypi/cairosvg@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.1.0
46
url pkg:pypi/cairosvg@2.1.1
purl pkg:pypi/cairosvg@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.1.1
47
url pkg:pypi/cairosvg@2.1.2
purl pkg:pypi/cairosvg@2.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.1.2
48
url pkg:pypi/cairosvg@2.1.3
purl pkg:pypi/cairosvg@2.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.1.3
49
url pkg:pypi/cairosvg@2.2.0
purl pkg:pypi/cairosvg@2.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.2.0
50
url pkg:pypi/cairosvg@2.2.1
purl pkg:pypi/cairosvg@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.2.1
51
url pkg:pypi/cairosvg@2.3.0
purl pkg:pypi/cairosvg@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.3.0
52
url pkg:pypi/cairosvg@2.3.1
purl pkg:pypi/cairosvg@2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.3.1
53
url pkg:pypi/cairosvg@2.4.0
purl pkg:pypi/cairosvg@2.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.4.0
54
url pkg:pypi/cairosvg@2.4.1
purl pkg:pypi/cairosvg@2.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.4.1
55
url pkg:pypi/cairosvg@2.4.2
purl pkg:pypi/cairosvg@2.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.4.2
56
url pkg:pypi/cairosvg@2.5.0
purl pkg:pypi/cairosvg@2.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rp7-t37q-kff1
1
vulnerability VCID-kzys-kvs5-wqgv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/cairosvg@2.5.0
References
0
reference_url https://github.com/Kozea/CairoSVG/commit/cfc9175e590531d90384aa88845052de53d94bf3
reference_id
reference_type
scores
url https://github.com/Kozea/CairoSVG/commit/cfc9175e590531d90384aa88845052de53d94bf3
1
reference_url https://github.com/Kozea/CairoSVG/releases/tag/2.5.1
reference_id
reference_type
scores
url https://github.com/Kozea/CairoSVG/releases/tag/2.5.1
2
reference_url https://github.com/Kozea/CairoSVG/security/advisories/GHSA-hq37-853p-g5cf
reference_id
reference_type
scores
url https://github.com/Kozea/CairoSVG/security/advisories/GHSA-hq37-853p-g5cf
3
reference_url https://pypi.org/project/CairoSVG/
reference_id
reference_type
scores
url https://pypi.org/project/CairoSVG/
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kzys-kvs5-wqgv