Path Traversal

WeasyPrint is vulnerable to Path Traversal. The vulnerability is due to improper validation mechanisms in the url_fetcher function, which fails to restrict the inclusion of arbitrary local files and URLs in the generated PDF documents. This flaw allowing an attacker to include or traverse to files and directories outside the intended scope, potentially leading to unauthorized access or disclosure of sensitive information.