PyPI/skia-python: high 8.1
skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version
Action: Upgrade skia-python to 144.0.post1 or later.
pip install skia-python==144.0.post1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 144.0.post1 | - |
Fixed versions
| 144.0.post1 |
Sources
- osv: GHSA-2mhw-8qcg-gr96
- https://github.com/kyamagu/skia-python/security/advisories/GHSA-2mhw-8qcg-gr96
- https://nvd.nist.gov/vuln/detail/CVE-2025-27363
- https://github.com/kyamagu/skia-python
published · modified · JSON