Skip to content
OpenAdvisories

Package · PyPI

xhtml2pdf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-25885

    xhtml2pdf Denial of Service via crafted string

    An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted string.

    xhtml2pdf xhtml2pdf xhtml2pdf Debian Ubuntu PyPI