CVE-2025-26240

The JazzCore python-pdfkit 1.0.0 library contains a vulnerability in the from_string method. This flaw allows for the execution of JavaScript code within the server application's context and the exfiltration of local files . Technical details indicate that this is a path traversal vulnerability. ...