Weasyprint

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-68616 Jan 19, 16:15 PyPI HIGH POC PATCH GHSA This Week

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `default_url_fetcher`. The vulnerability allows attackers to access internal network resources (such as `localhost` services or cloud metadata endpoints) even when a developer has implemented a custom `url_fetcher` to block such access. This occurs because the underlying `urllib` library follows HTTP redirects automatically without re-va...

SSRF Open Redirect Weasyprint

NVD GitHub VulDB

CVSS 3.1

7.5

EPSS

0.1%

CVE-2024-28184 Mar 09, 01:15 PyPI HIGH PATCH This Week

WeasyPrint helps web developers to create PDF documents. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Fedora Weasyprint Fedoraproject

NVD GitHub

CVSS 3.1

7.4

EPSS

0.6%

CVE-2025-68616 PyPI

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

SSRF Open Redirect Weasyprint

NVD GitHub VulDB

CVE-2024-28184 PyPI

EPSS 1% CVSS 7.4

HIGH PATCH This Week

WeasyPrint helps web developers to create PDF documents. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Fedora Weasyprint +1

NVD GitHub