CVE-2025-55150 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization...

CVE-2025-55150

Stirling-PDF prior to version 1.1.0 is affected by an SSRF vulnerability in the HTML-to-PDF conversion path. Specifically, the /api/v1/convert/html/pdf endpoint uses a sanitizer during HTML processing that can be bypassed, allowing the backend to trigger requests to external resources via a third...