CVE-2026-110642

The xhtml2pdf library before version 0.2.19 contains an OS command injection vulnerability in the pisa.startViewer() function. The root cause is the interpolation of unescaped file names into os.system. An attacker can execute arbitrary commands as the invoking user by providing an input file nam...