CVE WATCH / VULNERABILITY DETAIL

CVE-2026-114610

MEDIUMCVSS 6.5NVD feed

Published 22 October 2026 · tracked since 23 October 2026

Description

fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() passes nested SVG <use> references to GraphicsContext.add_item(), whose default clone=True deep-copy behavior copies the complete referenced graphics tree during FPDF.image() processing. Repeating refe

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools