Known vulnerabilities in librsvg2 (Red Hat package)

Vendor: Red Hat Inc.
Software: librsvg2 (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:librsvg2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting librsvg2 (Red Hat package) librsvg2 (Red Hat package) is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38633		 CWE-22 Medium
No
No
 2.50.7-1.el9_0.1, 2.50.7-1.el9_2.1 28.07.2023 SB2023072832
SB2023072902
SB2023080153
and 13 more
#VU25011 - Resource exhaustion
CVE-2019-20446		 CWE-400 Medium
No
No
 2.42.7-4.el8 06.02.2020 SB2020013122
SB2020031517
SB2020022622
and 14 more