CVE-2026-31899

Publication date

2026-03-13 19:38:43

Family

GitHub_M

State

PUBLISHED

Description

CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive element amplification in cairosvg/defs.py. This causes CPU exhaustion from a small input.