Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceFEDORA-2026-a2778fcae6

FEDORA-2026-a2778fcae6

UNKNOWN

python-cairosvg-2.9.0-1.fc42

Published Apr 15, 2026

Modified 6 days ago

Fix available

Details

Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c

Exponential DoS via recursive <use> element amplification

Affected Packages

python-cairosvg

Fedora 42

Fixed in:

2.9.0-1.fc42

python3-cairosvg

Fedora 42

Fixed in:

2.9.0-1.fc42

References

https://bugzilla.redhat.com/show_bug.cgi?id=2447854

Related

Ecosystems

Timeline

PublishedApr 15, 2026

ModifiedApr 16, 2026

FEDORA-2026-a2778fcae6 | Mondoo Vulnerability Intelligence