Fedora 40 : weasyprint (2024-baa87269ba)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-baa87269ba advisory. update to 61.2 to fix CVE-2024-28184 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

CVE-2024-28184

WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if urlfetcher is configured to prevent access to files and URLs. This vulnerability has been patched in...

CVE-2024-28184

CVE-2024-28184 — WeasyPrint is affected in versions up to 61.1, where the PDF generation may attach content from arbitrary files and URLs to the output document, even when url_fetcher is configured to block access. The issue’s root cause is in the PDF rendering logic that allows unintended inclus...

CVE-2024-28184 WeasyPrint allows the attachment of arbitrary files and URLs to a PDF

WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if urlfetcher is configured to prevent access to files and URLs. This vulnerability has been patched in...

WeasyPrint allows the attachment of arbitrary files and URLs to a PDF

Impact Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if urlfetcher is configured to prevent access to files and URLs. Patches Fixed by 734ee8e that’s included in 61.2 Workarounds - Check that no PDF...

GHSA-35JJ-WX47-4W8R WeasyPrint allows the attachment of arbitrary files and URLs to a PDF

Impact Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if urlfetcher is configured to prevent access to files and URLs. Patches Fixed by 734ee8e that’s included in 61.2 Workarounds - Check that no PDF...