PT-2024-21182 · Xhtml2Pdf +1 · Xhtml2Pdf +1

Name of the Vulnerable Software and Affected Versions: xhtml2pdf version 0.2.13 Description: The issue allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string to the getcolor function in utils.py. This can be exploited by providing a specifically...