Design/Logic Flaw

2024-03-0901:15:00

PRIOn knowledge base

www.prio-n.com

weasyprint

pdf documents

vulnerability

patched

version 61.2

file content

0.0004 Low

EPSS

Percentile

15.8%

JSON

WeasyPrint helps web developers to create PDF documents. Since version 61.0, there’s a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if url_fetcher is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2.