Description
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.
Critical · 9.8
CVE-2026-36576
EUVD-2026-34099GHSA-v5gc-8cqm-ww2h
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to e…
Published Jun 3, 2026 · Updated Jun 3, 2026 · Assigned by mitre