WE
Product
WeasyPrint
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add WeasyPrint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106443 | 8.8 | Oct 6 | WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE Affected: < 70.0 |
| CVE-2025-68616 | 7.5 | Jan 19 | WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect Affected: < 68.0 |
| CVE-2024-28184 | 7.4 | Mar 9 | WeasyPrint helps web developers to create PDF documents Affected: 61.0 before 61.2 |
| CVE-2026-49452 | 6.5 | Aug 18 | WeasyPrint: CSS Injection via Presentational Hints Affected: < 69.0 |
| CVE-2026-55073 | 6.2 | Sep 14 | WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF Affected: < 70.0 |
Showing 5
