pypi skia-python vulnerabilities

Latest pypi skia-python CVEs

Newest publication first

1. GHSA-2mhw-8qcg-gr96 skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version

   Published 2026-03-19

   High·CVSS 8.1

   Impact The Linux wheels for skia-python vendor a vulnerable version of libfreetype that is affected by CVE-2025-27363 [1]. The root cause is a chain of unfortunate events: skia-python builds wheels using pinned pypa/cibuildwheel@2.21.3 [2] cibuildwheel 2.21.3 in turn pins manylin...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.