7.4
High
CVE-2024-28184 WeasyPrint helps web developers to create PDF documents
Description
WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WeasyPrint 61.0 | 61.0 → 61.1 | No fix stated |
References
- github.com github.com
- github.com github.com
- lists.fedoraproject.org lists.fedoraproject.org
Timeline
- Published
- Last modified
Other CVEs of WeasyPrint
The 5 CVEs of WeasyPrint →
CVE-2026-106443
WeasyPrint helps web developers to create PDF documents
8.8
High
CVE-2026-55073
WeasyPrint helps web developers to create PDF documents
6.2
Medium
CVE-2026-49452
WeasyPrint helps web developers to create PDF documents
6.5
Medium
CVE-2025-68616
WeasyPrint helps web developers to create PDF documents
7.5
High