WE
Product
WeasyPrint
by Kozea · last CVE Oct 6, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch

Add WeasyPrint to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-106443
8.8
1%
Oct 6
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
Affected: < 70.0
CVE-2025-68616
7.5
1%
Jan 19
WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
Affected: < 68.0
CVE-2024-28184
7.4
1%
Mar 9
WeasyPrint helps web developers to create PDF documents
Affected: 61.0 before 61.2
CVE-2026-49452
6.5
0%
Aug 18
WeasyPrint: CSS Injection via Presentational Hints
Affected: < 69.0
CVE-2026-55073
6.2
0%
Sep 14
WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF
Affected: < 70.0
Showing 5