CVE-2026-107378 - CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>
CVE ID :CVE-2026-107378 Published : Oct. 8, 2026, 6:17 p.m. | 1 hour, 12 minutes ago Description :CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to 2.9.1, rendering an attacker-controlled SVG with a path containing many segments can cause quadratic CPU consumption...