{"action":"Upgrade cairosvg to 2.7.0 or later.","affected":[{"fixed":"2.7.0","introduced":"0"}],"component":"cairosvg","cve_ids":["CVE-2023-27586"],"ecosystem":"PyPI","epss":0.00722,"exploited":false,"fixed_versions":["2.7.0"],"ghsa_id":"GHSA-rwmf-w63j-p7gv","id":"tcs_01M5KFYTCAADYWN7HQJ5ZK2BCT","modified_at":"2026-09-10T03:49:57.000722156Z","published_at":"2023-03-20T21:27:15Z","references":["https://osv.dev/vulnerability/GHSA-rwmf-w63j-p7gv","https://github.com/Kozea/CairoSVG/security/advisories/GHSA-rwmf-w63j-p7gv","https://nvd.nist.gov/vuln/detail/CVE-2023-27586","https://github.com/Kozea/CairoSVG/commit/12d31c653c0254fa9d9853f66b04ea46e7397255","https://github.com/Kozea/CairoSVG/commit/33007d4af9195e2bfb2ff9af064c4c2d8e4b2b53","https://github.com/Kozea/CairoSVG","https://github.com/Kozea/CairoSVG/releases/tag/2.7.0","https://github.com/pypa/advisory-database/tree/main/vulns/cairosvg/PYSEC-2023-9.yaml"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-rwmf-w63j-p7gv","url":"https://osv.dev/vulnerability/GHSA-rwmf-w63j-p7gv"}],"summary":"CairoSVG improperly processes SVG files loaded from external resources"}