| Package | Affected versions | Patched versions |
|---|---|---|
| inkscape | ≥ 1.1, < 1.3 | 1.3 |
A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free