Description
wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wallabag | wallabag | 2.0.0 – ≤ 2.6.14 | — |
Medium · 6.4
CVE-2026-82081
EUVD-2026-67400GHSA-4g28-pcv2-qj5h
wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.
Published Aug 28, 2026 · Updated Aug 28, 2026 · Assigned by mitre