Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/inkscape@0.47.0-2
purl pkg:deb/debian/inkscape@0.47.0-2
Next non-vulnerable version 1.0.2-4
Latest non-vulnerable version 1.4-6
Risk 3.5
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-anp8-sd12-hfer
Aliases:
CVE-2021-42704
1.0.2-4
Affected by 0 other vulnerabilities.
VCID-eje6-en8b-vugw
Aliases:
CVE-2021-42702
1.0.2-4
Affected by 0 other vulnerabilities.
VCID-ezdb-4gcc-1yav
Aliases:
CVE-2021-42700
1.0.2-4
Affected by 0 other vulnerabilities.
VCID-jdsd-6fg8-7ka5
Aliases:
CVE-2012-5656
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.
0.48.3.1-1.3
Affected by 3 other vulnerabilities.
VCID-z28w-zhn3-fkbk
Aliases:
CVE-2012-6076
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts.
0.48.3.1-1.3
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T10:47:52.796386+00:00 Debian Oval Importer Affected by VCID-z28w-zhn3-fkbk https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T08:58:26.529781+00:00 Debian Oval Importer Affected by VCID-eje6-en8b-vugw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T07:24:06.107507+00:00 Debian Oval Importer Affected by VCID-ezdb-4gcc-1yav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T05:20:25.819198+00:00 Debian Oval Importer Affected by VCID-jdsd-6fg8-7ka5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T03:42:52.648410+00:00 Debian Oval Importer Affected by VCID-anp8-sd12-hfer https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0