CVE-2025-68616

WeasyPrint CVE-2025-68616 describes a Server-Side Request Forgery (SSRF) protection bypass in the default_url_fetcher, allowing redirects via urllib to reach internal resources (e.g., localhost or cloud metadata) even when a developer blocks access with a custom url_fetcher. The issue affects Wea...