CVE-2026-61749

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author report or label templates can cause WeasyPrint report rendering to retrieve attacker-selected resources through the HTTP and HTTPS URL schemes or the local file URI scheme. The...

CVE-2026-61749: Exposure of Sensitive Information to an Unauthorized Actor

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author report or label templates can cause WeasyPrint report rendering to retrieve attacker-selected resources through the HTTP and HTTPS URL schemes or the local file URI scheme. The...

weasyprint Has Server-Side Request Forgery (SSRF)

Summaryurlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input.Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

GHSA-JF6Q-CHMF-3H3V weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

PT-2026-89206

Name of the Vulnerable Software and Affected Versions WeasyPrint versions prior to 70.0 Description Server-side applications using WeasyPrint to render untrusted input may experience a bypass of the url fetcher mechanism, which is designed to restrict resource loading such as blocking file:// or...