KO
Vendor
Kozea
7
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107378 | CA CairoSVG Kozea | 8.7 | Oct 8 | CairoSVG: Quadratic-time DoS parsing a crafted SVG <path> |
| CVE-2026-106443 | WE WeasyPrint Kozea | 8.8 | Oct 6 | WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE |
| CVE-2026-55073 | WE WeasyPrint Kozea | 6.2 | Sep 14 | WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF |
| CVE-2026-49452 | WE WeasyPrint Kozea | 6.5 | Aug 18 | WeasyPrint: CSS Injection via Presentational Hints |
| CVE-2026-31899 | CA CairoSVG Kozea | 7.5 | Mar 13 | CairoSVG vulnerable to Exponential DoS via recursive <use> element amplification |
| CVE-2025-68616 | WE WeasyPrint Kozea | 7.5 | Jan 19 | WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect |
| CVE-2024-28184 | WE Weasyprint Kozea | 7.4 | Mar 9 | WeasyPrint helps web developers to create PDF documents |
