Skip navigation

Skip to main content

  • Home
  • Your apps
  • Your integrations
Engineering Blog
OverviewSubscribe
Discover more
UI/UXBackendMachine LearningInfrastructureSecurityEngineering PracticesData Platform
About Canva⁠(opens in a new tab or window)
Category

SVG


When URL parsers disagree (CVE-2023-38633)

Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.

Zac SimsSep 5, 2023
Read more

© 2025 All Rights Reserved. Canva®
Privacy policyTerms