[Git][security-tracker-team/security-tracker][master] Add CVE-2026-107378/cairosvg

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6837b8b5 by Salvatore Bonaccorso at 2026-10-09T18:28:24+02:00
Add CVE-2026-107378/cairosvg

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -689,7 +689,9 @@ CVE-2026-107380 (savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-
 CVE-2026-107379 (savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitiz ...)
 	NOT-FOR-US: darylldoyle svg-sanitizer
 CVE-2026-107378 (CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Pr ...)
-	TODO: check
+	- cairosvg 2.9.0-1
+	NOTE: https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c
+	NOTE: Fixed by: https://github.com/Kozea/CairoSVG/commit/6dde8685ed3f19837767bce7a13a5491e3d0e0bf (2.9.0)
 CVE-2026-107377 (datamodel-code-generator generates Python data models from schema defi ...)
 	TODO: check
 CVE-2026-107376 (webonyx graphql-php is a PHP implementation of the GraphQL specificati ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6837b8b5183d53f12cb5ba3d0837aa8da2744075

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6837b8b5183d53f12cb5ba3d0837aa8da2744075
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/a8750e04/attachment.htm>