Skip to content
OpenAdvisories

Archive

6 May 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-40281 Public exploit Scanner template

    Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values

    Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the metadata write endpoint validates metadata keys for control characters but leaves metadata values unsanitized. A newline character in a metadata value splits the Ex…