Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/14 3:30 p.m.13 views

CVE-2026-42592 Gotenberg: DNS rebinding bypasses SSRF validation on Chromium URL conversion routes

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, FilterOutboundURL resolves the hostname, checks the resolved IPs against the private-address deny-list, and returns only the error. It discards the resolved addresses. Chromium later performs its own DNS resolution when i...

5.3CVSS6AI score
SaveExploits0References3
Rows per page
Query Builder