What’s Vulnerable › Products

Kozea WeasyPrint vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Kozea WeasyPrint version is affected

Latest Kozea WeasyPrint vulnerabilities

• CVE-2026-106443 — WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE (CVSS 8.8)
• CVE-2026-55073 — WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF (CVSS 6.2)
• CVE-2026-49452 — WeasyPrint: CSS Injection via Presentational Hints (CVSS 6.5)
• CVE-2025-68616 — WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect (CVSS 7.5)
• CVE-2024-28184 — WeasyPrint allows the attachment of arbitrary files and URLs to a PDF (CVSS 7.4)