3 matches found
EUVD-2026-19651
Gotenberg Vulnerable to ReDoS via extraHttpHeaders scope feature...
8.7CVSS5.9AI score0.00497EPSS
SaveExploits1References3
CVE-2026-35458
Gotenberg is an API for converting document formats. In 8.29.1 and earlier, Gotenberg uses dlclark/regexp2 to compile user-supplied scope patterns without setting a proper timeout. Users with access to features using this logic can hang workers indefinitely...
9.8CVSS0.00497EPSS
SaveExploits1References1
PT-2026-30852
Name of the Vulnerable Software and Affected Versions Gotenberg versions 8.29.1 and earlier Description Gotenberg uses the dlclark/regexp2 library to compile user-supplied scope patterns without a timeout. This allows users with access to features utilizing this logic to potentially hang workers...
9.8CVSS5.9AI score0.00497EPSS
SaveExploits1
20