Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/07 12:57 a.m.27 views

Gotenberg has a Server-Side Request Forgery (SSRF) Issue

Summary The SSRF hardening shipped in v8.31.0 only covers outbound URLs that Gotenberg's Go code handles — Chromium asset fetches, webhook delivery, and download-from. The LibreOffice conversion endpoint /forms/libreoffice/convert passes uploaded documents directly to LibreOffice without inspecti...

8.2CVSS5.9AI score0.00245EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder