All products

weasyprint

PyPI · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCECVE-2026-106443 · GHSA-R543-Q48M-4C9JVersion ranges need review. weasyprint PyPI High Fix reported
weasyprint Has Server-Side Request Forgery (SSRF)CVE-2026-55073 · GHSA-JF6Q-CHMF-3H3VVersion ranges need review. weasyprint PyPI Medium Fix reported
WeasyPrint allows the attachment of arbitrary files and URLs to a PDFCVE-2024-28184 · GHSA-35JJ-WX47-4W8RVersion ranges need review. weasyprint PyPI High Fix reported
WeasyPrint has CSS Injection via Presentational HintsCVE-2026-49452 · GHSA-JHHC-3HCP-QHM5Version ranges need review. weasyprint PyPI Medium No fix reported
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP RedirectCVE-2025-68616 · GHSA-983W-RHVV-GWMVVersion ranges need review. weasyprintRed Hat Ansible Automation Platform 2/ansible-automation-platform-tech-preview/automation-dashboard-rhel9 PyPIRed Hat High Fix reported