xhtml2pdf

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

xhtml2pdf records in CISA KEV

No xhtml2pdf vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74136 CVE-2026-110642 · GHSA-p77q-xqj7-2552

OS command injection in xhtml2pdf via startViewer file names

MEDIUM 41

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os.system.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0113 Published 2026-10-14 Partial fix · 0.2.19 CWE-78

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0