a2grunnerp (>=0.1.0, <=0.1.8), agentfoundry (>=1.3.9, <=1.5.95) +207 more potentially affected by CVE-2025-26240 via pdfkit (1.0.0)

pdfkit PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfkit and may be impacted: - a2grunnerp =0.1.0, =1.3.9, =1.2.0, =1.1.3, =0.1.35, =0.1.0, =0.0.1, =0.0.1, =0.5.3, =0.5.5, =0.1.17, =0.2.0, =0.1.0, =0.1.1 and more Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), agentfoundry (>=1.3.9, <=1.5.95) +207 more potentially affected by CVE-2025-26240 via pdfkit (1.0.0)

pdfkit PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfkit and may be impacted: - a2grunnerp =0.1.0, =1.3.9, =1.2.0, =1.1.3, =0.1.35, =0.1.0, =0.0.1, =0.0.1, =0.5.3, =0.5.5, =0.1.17, =0.2.0, =0.1.0, =0.1.1 and more Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), agentfoundry (>=1.3.9, <=1.5.95) +207 more potentially affected by CVE-2025-26240 via pdfkit (1.0.0)

pdfkit PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfkit and may be impacted: - a2grunnerp =0.1.0, =1.3.9, =1.2.0, =1.1.3, =0.1.35, =0.1.0, =0.0.1, =0.0.1, =0.5.3, =0.5.5, =0.1.17, =0.2.0, =0.1.0, =0.1.1 and more Source cves:...

antipetros-discordbot (>=0.1.0, <=0.1.7), auto-fill-in (0.0.1) +16 more potentially affected by CVE-2025-26240 via pdfkit (0.6.1)

pdfkit PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pdfkit and may be impacted: - antipetros-discordbot =0.1.0, =0.20.7, =0.1.0a0, =0.1.0, =0.1.2, =0.0.1, =0.0.1, =0.1.0, =0.0.1a1, =1.0.0, =1.3.1, =1.3.2 and more Source cves:...

DEBIAN-CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...

CVE-2025-26240

The JazzCore python-pdfkit 1.0.0 library contains a vulnerability in the from_string method. This flaw allows for the execution of JavaScript code within the server application's context and the exfiltration of local files . Technical details indicate that this is a path traversal vulnerability. ...