Known vulnerabilities in librsvg (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:librsvg_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting librsvg (Debian package) librsvg (Debian package) is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38633
CWE-22 Medium
No
No
2.50.3+dfsg-1+deb11u1, 2.54.7+dfsg-1~deb12u1 28.07.2023 SB2023072832
SB2023072902
SB2023080153
and 13 more
#VU24813 - Resource Management Errors
CVE-2016-4348
CWE-399 Medium
No
No
2.40.5-1+deb8u2, 2.40.12-1 31.01.2020 SB2016052002
SB2016052004
#VU24812 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2015-7558
CWE-835 Medium
No
No
2.40.5-1+deb8u2, 2.40.12-1 31.01.2020 SB2016052001
SB2016052004
SB2016062310