Server-side Request Forgery (SSRF)

Overview weasyprint is a The Awesome Document Factory Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the writepdf stylesheet and XMP metadata loading paths in weasyprint/document.py and weasyprint/pdf/init.py. An attacker can make the rendering process...