CVE-2021-21236

CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on
Cairo. In CairoSVG before version 2.5.1, there is a regular expression
denial of service (REDoS) vulnerability. When processing SVG files, the
python package CairoSVG uses two regular expressions which are vulnerable
to Regular Expression Denial of Service (REDoS). If an attacker provides a
malicious SVG, it can make cairosvg get stuck processing the file for a
very long time. This is fixed in version 2.5.1. See Referenced GitHub
advisory for more information.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979597&gt;