CVE-2026-16770

creationtimestamp| type| source ---|---|--- 2026-08-13 04:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16770 2026-08-13 13:50:13+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxrxlctru2t 2026-08-14 09:00:44+00:00| seen|...

CVE-2026-16770 PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...