What’s Vulnerable › Products

alam00000 bentopdf vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your alam00000 bentopdf version is affected

Latest alam00000 bentopdf vulnerabilities

• CVE-2026-102354 — BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker (CVSS 6.8)
• CVE-2026-77581 — BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass (CVSS 8.6)
• CVE-2026-63630 — BentoPDF: Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests (CVSS 3.4)
• CVE-2026-41653 — BentoPDF: Stored XSS via Markdown Editor Leading to Persistent File Exfiltration (CVSS 7.0)