CVE-2020-10799: Svglib Project Svglib

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call.

Affected products

• Svglib Project Svglib: up to and including 0.9.3

Published 2020-03-20. Last modified 2026-06-17.