Skip to content
OpenAdvisories

Vendor

pontedilana

4 known vulnerabilities.

Products

php-weasyprint 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-49359

    PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option

    PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/php-weasyprint` fetches the content of option values server-side via `file_get_contents()` when the value looks like a URL, without restric…

    pontedilana php-weasyprint pontedilana/php-weasyprint Packagist