CVE-2026-107378

Name of the Vulnerable Software and Affected Versions CairoSVG versions prior to 2.9.1

Description Rendering an attacker-controlled SVG containing a path with many segments can lead to quadratic CPU consumption. This occurs due to two issues in cairosvg/path.py: the path tokenizer repeatedly slices and rescans the remaining path data, and the draw markers() function drains node.vertices using pop(0), which is a linear-time operation. These issues can be triggered via the svg2png, svg2pdf, and svg2ps APIs, allowing a small SVG file (under 1 MiB) to consume substantial CPU resources and cause a denial of service to the rendering application.

Recommendations Update CairoSVG to version 2.9.1.