librsvg2 vulnerabilities
CVEs whose affected-version data names the librsvg2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-18090Medium· 6.1A flaw was found in gdk-pixbuf
A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon…
▾ SunlitRed Hat · gdk-pixbuf2EPSS 0.17%via NVD
CVE-2025-4373Medium· 4.8A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
▾ SunlitRed Hat · glibEPSS 0.53%via NVD