| Gotenberg has an SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixesCVE-2026-45741 · GHSA-86M8-88FQ-XFXPVersion ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
No fix reported |
|
| Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routesCVE-2026-42592 · GHSA-2PMR-289P-44R3Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
Medium
|
No fix reported |
|
| Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// schemeCVE-2026-42597 · GHSA-G924-CJX7-2RJWVersion ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
Medium
|
Fix reported |
|
| Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List BypassCVE-2026-42595 · GHSA-CHWH-F6GM-R836Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg's ExifTool group-prefix syntax bypasses dangerous-tag blocklistCVE-2026-42590 · GHSA-7V3R-M9C8-R855Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
No fix reported |
|
| Gotenberg has case-insensitive URL scheme that bypasses webhook and downloadFrom deny-list SSRF protectionCVE-2026-40280 · GHSA-5Q7P-7JGV-WW56Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg has Chromium deny-list bypass via case-insensitive URL scheme (bypass of GHSA-rh2x-ccvw-q7r3)CVE-2026-27018 · GHSA-JJWV-57XH-XR6RVersion ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg has incomplete fix for ExifTool arbitrary file write: case-insensitive bypass and missing HardLink/SymLink tagsGHSA-QMWH-9M9C-H36M · GO-2026-5587Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg has ExifTool stdin argument injection via metadata value newlines (bypass of key sanitization fix)CVE-2026-40281 · GHSA-Q7R4-HC83-HF2QVersion ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
Critical
|
Fix reported |
|
| Gotenberg has Unauthenticated RCE via ExifTool Metadata Key InjectionCVE-2026-42589 · GHSA-RQGH-GXV4-6657Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
Critical
|
No fix reported |
|
| Gotenberg has a Server-Side Request Forgery (SSRF) IssueCVE-2026-42591 · GHSA-RM4C-XJ6X-49MWVersion ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
No fix reported |
|
| Gotenberg has a Race Condition via Multipart `downloadFrom` HandlingCVE-2026-45742 · GHSA-VP73-VJW8-8F32Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg has path traversal in zip entry name via Windows-style separators in upload filenameCVE-2026-44829 · GHSA-HWC4-GMRW-5222Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg has an unauthenticated denial of service via echo.Context pool reuse in webhook async goroutineCVE-2026-42594 · GHSA-R33J-C622-R6QPVersion ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg Vulnerable to ReDoS via extraHttpHeaders scope featureCVE-2026-35458 · GHSA-FMWG-QCQH-M992Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg: SSRF via LibreOffice document processingCVE-2026-55229 · GHSA-2MRG-35HW-X3X9Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
Fix reported |
|
| Gotenberg has arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routesCVE-2026-42593 · GHSA-3CV5-Q585-H563Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
Medium
|
No fix reported |
|
| Gotenberg has an ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names that Allows Arbitrary File Rename and MoveCVE-2026-40893 · GHSA-62P3-HVXX-FXG4Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
High
|
No fix reported |
|
| Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URLCVE-2026-39383 · GHSA-5VH4-RGV7-P9G4Version ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
Medium
|
Fix reported |
|
| Gotenberg vulnerable to unauthenticated SSRF via default deny-list bypass in downloadFrom and webhookCVE-2026-42596 · GHSA-4VMC-GM8V-M35HVersion ranges need review. |
github.com/gotenberg/gotenberg/v7github.com/gotenberg/gotenberg/v8 |
Go |
Critical
|
Fix reported |
|
