SUSE CVE-2026-40281

Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the metadata write endpoint validates metadata keys for control characters but leaves metadata values unsanitized. A newline character in a metadata value splits the ExifTool stdin line into two separate...

CVE-2026-40281

creationtimestamp| type| source ---|---|--- 2026-05-06 21:50:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7onz4kgp2n 2026-05-07 01:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla4iyvhh22o 2026-05-11 16:07:14+00:00| seen|...

PT-2026-36917

Name of the Vulnerable Software and Affected Versions Gotenberg versions prior to 8.31.0 Description Gotenberg is a Docker-powered stateless API for PDF files. The metadata write endpoint /forms/pdfengines/metadata/write validates metadata keys for control characters but fails to sanitize metadat...