VYPR

rpm package

almalinux/rsvg-pixbuf-loader

pkg:rpm/almalinux/rsvg-pixbuf-loader

Vulnerabilities (1)

  • CVE-2026-96889HigSep 23, 2026
    affected < 2.57.1-9.el10_2.10fixed 2.57.1-9.el10_2.10

    A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by th