Vulnerabilities

TI-2026-30134 CVE-2026-41580

Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author)

MEDIUM 60

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00271 Published 2026-07-15 Fixed in 2.0.0 CWE-79

TI-2026-26396 CVE-2026-34071

MEDIUM 60

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00271 Published 2026-03-26 No fix listed CWE-79

TI-2026-25835 CVE-2026-33438

MEDIUM 62

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00413 Published 2026-03-26 Fixed in 2.5.2 CWE-770

TI-2026-22007 CVE-2026-27625

HIGH 68

Stirling-PDF is a locally hosted web application that performs various operations on PDF files.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0048 Published 2026-03-20 Fixed in 2.5.2 CWE-22