Skip to content
OpenAdvisories

Package · Debian

weasyprint

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-55073

    WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF

    WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher and pass attacker-influenced values to HTML.write_pdf() can have the restriction bypassed through the xmp_metadata or sty…

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2026-49452

    WeasyPrint: CSS Injection via Presentational Hints

    WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py when presentational_hints=True. The background attribute is inserted into a ba…

    Kozea WeasyPrint weasyprint weasyprint Debian Ubuntu PyPI