CVE-2025-56590

The Apryse HTML2PDF SDK (versions through 11.10 ) contains a vulnerability in the InsertFromURL() function. This flaw allows an attacker to execute arbitrary operating system commands on the local server. To remediate this issue, users are recommended to update to a version beyond 11.10 .

CVE-2025-56589

The Apryse HTML2PDF SDK (versions through 11.6.0 ) contains a Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability within the InsertFromHtmlString() function. These flaws could enable an attacker to read local files on the server or initiate arbitrary HTTP requests to...