| Package | Affected versions | Patched versions |
|---|---|---|
| inkscape | < 0.48.4 | 0.48.4 |
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free