Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/07 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2025-68616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery SSRF protection bypass exists in WeasyPrint's...

7.5CVSS5.5AI score0.00447EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.4 views

openSUSE 16 Security Update : python-weasyprint (openSUSE-SU-2026:20069-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20069-1 advisory. Changes in python-weasyprint: - CVE-2025-68616: Fixed a server-side request forgery in default fetcher boo1256936. Tenable has extracted the preceding...

7.5CVSS5.5AI score0.00447EPSS
Exploits2References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/01/21 12:0 a.m.5 views

Security update for python-weasyprint (important)

openSUSE security update: security update for python-weasyprint ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20069-1 Rating: important References: bsc1256936 Cross-References: CVE-2025-68616 CVSS scores: CVE-2025-68616 SUSE : 7.5...

7.5CVSS5.5AI score0.00447EPSS
Exploits2References1
OSV
OSV
added 2026/01/20 11:40 p.m.4 views

OPENSUSE-SU-2026:20069-1 Security update for python-weasyprint

This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2025-68616: Fixed a server-side request forgery in default fetcher boo1256936...

7.5CVSS5.8AI score0.00447EPSS
Exploits2References2
Github Security Blog
Github Security Blog
added 2026/01/20 4:29 p.m.13 views

WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

Summary A Server-Side Request Forgery SSRF Protection Bypass exists in WeasyPrint's defaulturlfetcher. The vulnerability allows attackers to access internal network resources such as localhost services or cloud metadata endpoints even when a developer has implemented a custom urlfetcher to block...

7.5CVSS5.8AI score0.00447EPSS
Exploits2References4Affected Software1
Debian CVE
Debian CVE
added 2026/01/19 3:20 p.m.6 views

CVE-2025-68616

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery SSRF protection bypass exists in WeasyPrint's defaulturlfetcher. The vulnerability allows attackers to access internal network resources such as localhost services or cloud metadata...

7.5CVSS5.4AI score0.00447EPSS
Exploits2
Rows per page
Query Builder