Skip to content
OpenAdvisories

Package · Debian

weasyprint

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-106443

    WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

    WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img URLs, CSS image values, SVG image references, and data URIs to Pillow's generic image dispatcher wi…

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI
  • High 7.5
    CVE-2025-68616 Public exploit

    WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

    WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `default_url_fetcher`. The vulnerability allows attackers to access internal network resources (such …

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI
  • High 7.4
    CVE-2024-28184

    WeasyPrint allows the attachment of arbitrary files and URLs to a PDF

    WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URL…

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI