Known vulnerabilities in librsvg (Alpine package)
Vendor:
Alpine Linux Development Team
Software:
librsvg (Alpine package)
Software CPE:
cpe:2.3:o:alpine:librsvg_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website:
https://alpinelinux.org/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
2.26.0-r0
2.32.0-r0
2.34.0-r0
2.34.1-r0
2.36.1-r0
2.36.3-r0
2.40.0-r1
2.40.2-r0
2.40.9-r1
2.26.0-r2
2.26.0-r1
2.26.3-r3
2.26.3-r2
2.37.0-r0
2.37.0-r1
2.40.5-r0
2.40.12-r0
2.40.21-r0
2.40.20-r0
2.46.3-r0
2.46.4-r0
2.46.2-r0
2.48.7-r0
2.48.3-r0
2.48.2-r0
2.48.1-r0
2.48.0-r0
2.46.4-r1
2.48.8-r0
2.48.6-r0
2.48.5-r0
2.50.0-r0
2.50.1-r0
2.40.13-r0
2.40.15-r0
2.40.16-r1
2.40.16-r2
2.40.16-r0
2.40.17-r0
2.40.19-r0
2.48.9-r0
2.50.2-r0
2.50.3-r0
2.48.10-r0
2.50.4-r0
2.48.4-r0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU25011 - Resource exhaustion CVE-2019-20446 |
CWE-400 | Medium | 2.40.21-r0 | 06.02.2020 |
SB2020013122 SB2020031517 SB2020022622 and 14 more |
||
| #VU24818 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2013-1881 |
CWE-611 | Medium | 2.37.0-r1 | 01.02.2020 |
SB2013101001 SB2015102002 SB2014020301 and 2 more |
||
| #VU24812 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2015-7558 |
CWE-835 | Medium | 2.40.12-r0 | 31.01.2020 |
SB2016052001 SB2016052004 SB2016062310 |
||
| #VU33981 - Improper input validation CVE-2010-0405 |
CWE-20 | Medium | 2.26.0-r2 | 28.09.2010 |
SB2010092801 SB2010092202 SB2010092203 and 3 more |