402 matches found
Gotenberg < 8.31.0 - Server-Side Request Forgery
Gotenberg before 8.31.0 is vulnerable to server-side request forgery SSRF due to insufficient validation of URLs in the downloadFrom API. An unauthenticated attacker can exploit the flaw by providing specially crafted IPv4-mapped IPv6 addresses such as http://::ffff:127.0.0.1 that bypass the...
Gotenberg - Command Injection
Gotenberg 8.31.0 contains a command injection caused by lack of validation on JSON metadata keys in /forms/pdfengines/metadata/write endpoint, letting unauthenticated attackers execute OS commands, exploit requires crafted HTTP request. id: CVE-2026-42589 info: name: Gotenberg - Command Injection...
Gotenberg <= 8.30.1 - Server Side Request Forgery
Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...
Gotenberg < 8.34.0 - Local File Disclosure
Gotenberg before 8.34.0 allows SSRF and limited local file disclosure via its /forms/libreoffice/convert endpoint. When LibreOffice is used to convert user-uploaded DOCX files, external relationships within the document such as a:blip r:link TargetMode="External" can instruct LibreOffice to fetch...
Gotenberg <= 8.30.1 - Remote Code Execution
Gotenberg through 8.30.1 sanitizes only the keys of the JSON metadata submitted to the PDF metadata write endpoint, leaving the values unvalidated. A newline inside a metadata value is written straight to the ExifTool process standard input, where it terminates the current argument and starts a n...
POC_CVE-2026-42589
POCCVE-2026-42589 Local reproduction lab and nuclei template draft for CVE-2026-42589 affecting Gotenberg. Summary CVE-2026-42589 is an unauthenticated remote code execution issue in Gotenberg caused by metadata key newline injection in: POST /forms/pdfengines/metadata/write Affected Gotenberg...
CVE-2026-55385
The InvoiceShelf web and mobile application is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.4.0 . The root cause lies in PDFConfigurationRequest.php, which only performs syntactic validation on the owner-controlled gotenberg_host setting. Consequently, GotenbergPDFDrive...
CVE-2026-55385 InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenberghost setting only as a syntactically valid URL...
CVE-2026-55385 InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenberghost setting only as a syntactically valid URL...
PT-2026-114212
Name of the Vulnerable Software and Affected Versions InvoiceShelf versions prior to 2.4.0 Description In PDFConfigurationRequest.php, the gotenberg host setting is only validated as a syntactically valid URL. Subsequently, the loadView function in GotenbergPDFDriver sends a multipart HTTP reques...
VulnCheck KEV: CVE-2026-42596
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, the default deny-lists used by Gotenberg's downloadFrom feature and webhook feature are bypassable. Because the filter is regex-based and case-sensitive, an unauthenticated attacker can supply URLs such as...
CLEANSTART-2026-CD04274 Security fix for GHSA-hrxh-6v49-42gf applied in: aws-network-policy-agent 1.2.7-r0, fabric-peer 3.1.5-r1, gotenberg 8.33.0-r0, step 0.30.2-r4, kube-state-metrics-fips 2.20.0-r4, eks-distro-kube-apiserver 1.36.8-r0, eks-distro-kube-apiserver-fips 1.36.8-r0
GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KW79982 Security fix for GHSA-259r-337f-4rfw applied in: aws-network-policy-agent 1.1.6-r4, caddy 2.11.4-r1, fabric-peer 2.5.16-r2, fabric-peer 3.1.5-r1, gotenberg 8.33.0-r0, kubernetes-dns-node-cache 1.23.1-r2, step 0.30.2-r4
GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-XR03943 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the gotenberg package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence AI and large language model LLM infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet. The financially motivated...
Exploit for Argument Injection in Thecodingmachine Gotenberg
CVE-2026-40281 A Working PoC For CVE-2026-40281 Gotenberg E...
Exploit for Argument Injection in Thecodingmachine Gotenberg
🔥 GOTENBERG RCE CHAIN CVE-2026-42589 + CVE-2026-40281 !...
Exploit for Argument Injection in Thecodingmachine Gotenberg
CVE-2026-40281 Gotenberg --- 📖 Table of...