https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T23:41:37.986424+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-weasyprint-cve-2024-28184 BREW-weasyprint-CVE-2024-28184 — WeasyPrint allows the attachment of arbitrary files and URLs to a PDF 2026-10-08T23:41:37.990596+00:00

Affected: Homebrew: weasyprint

### Impact Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs.

### Patches Fixed by 734ee8e that’s included in 61.2

### Workarounds - Check that no PDF attachment is defined in source HTML. - Launch WeasyPrint in a sandbox that prevents access to the filesystem and the network.

 https://cve.radiocsirt.org/vuln/euvd-2026-217367 EUVD-2026-217367 2026-10-08T23:41:37.990685+00:00 EUVD-2026-217367 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28184 fkie_cve-2024-28184 2026-10-08T23:41:37.990705+00:00

WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2.

 https://cve.radiocsirt.org/vuln/ghsa-35jj-wx47-4w8r GHSA-35jj-wx47-4w8r — WeasyPrint allows the attachment of arbitrary files and URLs to a PDF 2026-10-08T23:41:37.990729+00:00

Affected: PyPI: weasyprint

### Impact Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs.

### Patches Fixed by 734ee8e that’s included in 61.2

### Workarounds - Check that no PDF attachment is defined in source HTML. - Launch WeasyPrint in a sandbox that prevents access to the filesystem and the network.

 https://cve.radiocsirt.org/vuln/gsd-2024-28184 gsd-2024-28184 2026-10-08T23:41:37.990754+00:00 gsd-2024-28184 https://cve.radiocsirt.org/vuln/pysec-2026-2033 PYSEC-2026-2033 — WeasyPrint allows the attachment of arbitrary files and URLs to a PDF 2026-10-08T23:41:37.990766+00:00

Affected: PyPI: weasyprint

### Impact Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs.

### Patches Fixed by 734ee8e that’s included in 61.2

### Workarounds - Check that no PDF attachment is defined in source HTML. - Launch WeasyPrint in a sandbox that prevents access to the filesystem and the network.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-28184 UBUNTU-CVE-2024-28184 2026-10-08T23:41:37.990787+00:00

Affected: Ubuntu:20.04:LTS: weasyprint, Ubuntu:22.04:LTS: weasyprint, Ubuntu:24.04:LTS: weasyprint, Ubuntu:25.10: weasyprint, Ubuntu:26.04:LTS: weasyprint

WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2.