Kozea vulnerabilities
9 published CVEs name Kozea among the affected products.
- 9Published CVEs9 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107378
CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>
Kozea · CairoSVG
High8.7 - CVE-2026-106443
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
Kozea · WeasyPrint
High8.8 - CVE-2026-55073
WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF
Kozea · WeasyPrint
Medium6.2 - CVE-2026-49452
WeasyPrint: CSS Injection via Presentational Hints
Kozea · WeasyPrint
Medium6.5 - CVE-2026-31899
CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification
Kozea · CairoSVG
High7.5 - CVE-2025-68616
WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
Kozea · WeasyPrint
High7.5 - CVE-2024-28184
WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
Kozea · WeasyPrint
High7.4 - CVE-2023-27586
CairoSVG improperly processes SVG files loaded from external resources
Kozea · CairoSVG
Critical9.9 - CVE-2021-21236
Regular Expression Denial of Service in CairoSVG
Kozea · CairoSVG
Medium5.7