{"action":"Upgrade librsvg to 2.40.12 or later.","affected":[{"fixed":"2.40.12","introduced":"0"}],"component":"librsvg","cve_ids":["CVE-2015-7558"],"ecosystem":"crates.io","epss":0.02369,"exploited":false,"fixed_versions":["2.40.12"],"ghsa_id":"GHSA-j984-q4qc-6qxf","id":"tcs_01M5KF0ZS229AXA83WS8FRCWZG","modified_at":"2023-11-08T03:58:00.613061Z","published_at":"2022-05-17T03:50:02Z","references":["https://osv.dev/vulnerability/GHSA-j984-q4qc-6qxf","https://nvd.nist.gov/vuln/detail/CVE-2015-7558","https://bugzilla.redhat.com/show_bug.cgi?id=1268243","https://git.gnome.org/browse/librsvg/commit/?id=a51919f7e1ca9c535390a746fbf6e28c8402dc61","https://github.com/GNOME/librsvg","http://www.debian.org/security/2016/dsa-3584","http://www.openwall.com/lists/oss-security/2015/12/21/5","http://www.openwall.com/lists/oss-security/2016/04/30/3"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-j984-q4qc-6qxf","url":"https://osv.dev/vulnerability/GHSA-j984-q4qc-6qxf"}],"summary":"librsvg DoS via Cyclic References"}