Kozea Weasyprint
4 CVEs affecting Kozea Weasyprint. Latest disclosed: 2026-09-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68616 | High | 7.5 | 2026-01-19 | WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `… |
CVE-2024-28184 | High | 7.4 | 2024-03-09 | WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs… |
CVE-2026-49452 | Medium | 6.5 | 2026-08-18 | WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasy… |
CVE-2026-55073 | Medium | 6.2 | 2026-09-14 | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher and pass attacker-inf… |