Threats tagged 'ghsa-wqw6-wpr3-45rh'

fpdf2 versions from 2.5.0 up to but not including 2.8.8 contain a vulnerability where nested SVG <use> references cause exponential growth in memory and CPU usage during PDF image processing. This can lead to resource exhaustion and process failure with a MemoryError. The issue arises from deep-copying referenced SVG graphics trees, allowing a crafted small SVG to consume excessive resources without external dependencies or special configurations.