What’s Vulnerable › Products

pontedilana php-weasyprint vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your pontedilana php-weasyprint version is affected

Latest pontedilana php-weasyprint vulnerabilities

• CVE-2026-49359 — PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option (CVSS 6.5)
• CVE-2026-49286 — PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass) (CVSS 8.1)
• CVE-2026-49260 — PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc) (CVSS 8.2)
• CVE-2026-49358 — PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles (CVSS 3.0)