Fedora 40 : weasyprint (2024-baa87269ba)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-baa87269ba advisory. update to 61.2 to fix CVE-2024-28184 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora: Security Advisory (FEDORA-2024-baa87269ba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-28184

CVE-2024-28184 — WeasyPrint is affected in versions up to 61.1, where the PDF generation may attach content from arbitrary files and URLs to the output document, even when url_fetcher is configured to block access. The issue’s root cause is in the PDF rendering logic that allows unintended inclus...