Linux Distros Unpatched Vulnerability : CVE-2026-110642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped...

OPENSUSE-SU-2026:12160-1 python313-xhtml2pdf-0.2.24-1.1 on GA media

These are all security issues fixed in the python313-xhtml2pdf-0.2.24-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-110642

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

CVE-2026-110642

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

UBUNTU-CVE-2026-110642

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

adstoolbox (2025.12.2.2), aequitas (>=0.26.0, <=0.42.0) +47 more potentially affected by CVE-2026-110642 via xhtml2pdf (>=0.0.6, <=0.2.18)

xhtml2pdf PYPI version =0.0.6, =0.26.0, =2.3.1, =0.3.0, =1.0.0, =1.0.0, =1.0.3, =1.0.3, =1.3.1, =1.3.3 and more Source cves: CVE-2026-110642 Source advisory: SNYK:PYTHON-XHTML2PDF-20969951...

Command Injection

Overview xhtml2pdf is a PDF generator using HTML and CSS Affected versions of this package are vulnerable to Command Injection in the startViewer function in xhtml2pdf/pisa.py, whose fallback path interpolates the file name into a shell string as os.system'open "%s"' % filename after os.startfile...

CVE-2026-110642

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

DEBIAN-CVE-2026-110642

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

CVE-2026-110642

A flaw was found in xhtml2pdf. This vulnerability allows an attacker to execute arbitrary commands by convincing a user to process a file with a specially crafted name while using the viewer option. Because the software fails to properly sanitize the file name before passing it to the operating...

CVE-2026-110642 xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

creme-crm (2.8.6) potentially affected by CVE-2026-110642 via xhtml2pdf (0.2.18)

xhtml2pdf PYPI version 0.2.18 is affected by a known vulnerability. The following packages have a transitive dependency on xhtml2pdf and may be impacted: - creme-crm 2.8.6 Source cves: CVE-2026-110642 Source advisory: MEND:CVE-2026-110642...

CVE-2026-110642

The xhtml2pdf library before version 0.2.19 contains an OS command injection vulnerability in the pisa.startViewer() function. The root cause is the interpolation of unescaped file names into os.system. An attacker can execute arbitrary commands as the invoking user by providing an input file nam...

CVE-2026-110642

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

EUVD-2026-101270

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

CVE-2026-110642 xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

CVE-2026-110642

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

CVE-2026-110642: Improper Neutralization of Special Elements used in an OS Command

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...

PT-2026-114084

Name of the Vulnerable Software and Affected Versions xhtml2pdf versions prior to 0.2.19 Description An OS command injection issue exists in the pisa.startViewer function. This occurs when unescaped file names are interpolated into os.system, allowing attackers to execute arbitrary commands as th...

aequitas (>=0.26.0, <=0.42.0), ap-rss-reader (0.0.3) +32 more potentially affected by CVE-2024-25885 via xhtml2pdf (>=0.0.6, <=0.2.16)

xhtml2pdf PYPI version =0.0.6, =0.26.0, =2.3.1, =0.3.0, =1.0.0, =1.0.0, =1.0.3, =1.0.3, =0.1.2, =0.1.132, =0.1.137 and more Source cves: CVE-2024-25885 Source advisory: OSV:PYSEC-2026-2056...