K
Vendor security profile
kozea
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit4
Patch rate%40
Avg. CVSS7.5
12-month vulnerability rate
0
0
1
0
0
0
0
0
0
1
1
2
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%80
Public exploit
2Patch available
0Partial
1Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
8.7
CVE-2026-107378
CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>
K
Patch status unknownEPSS %0
8.8
CVE-2026-106443
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
K
Patch status unknownEPSS %1
6.2
CVE-2026-55073
WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF
K
Patch verifiedEPSS %0
6.5
CVE-2026-49452
WeasyPrint: CSS Injection via Presentational Hints
K
WorkaroundEPSS %0
7.5
CVE-2025-68616
Open redirect in Kozea Weasyprint
K
Patch verifiedEPSS %1