critical9.8
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call.
Impact
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Svglib Project | Svglib | through 0.9.3 |