TH
Product
thorvg
by thorvg · last CVE Oct 27, 2026
2
CVEs
0
On KEV
4.3
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add thorvg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58496
New
4.3–Oct 27
ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API
Affected: < 1.0.7
CVE-2026-45729
4.3
0%
Jun 1
ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input
Affected: < 1.0.5
Showing 2