Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/14 3:32 p.m.9 views

CVE-2026-42594 Gotenberg: Unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handler returns ErrAsyncProcess and Echo recycles the context back to its sync.Pool. When a concurrent...

7.5CVSS6AI score0.00348EPSS
SaveExploits1References3
Rows per page
Query Builder