Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the downloadFrom and webhook processes. An attacker can access internal network resources and potentially exfiltrate sensitive information or interact with internal-only services by supplying special...

CVE-2026-42592

creationtimestamp| type| source ---|---|--- 2026-04-30 18:31:41+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-2pmr-289p-44r3...

CVE-2026-42590

creationtimestamp| type| source ---|---|--- 2026-04-30 18:31:11+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-7v3r-m9c8-r855...