Vulnerabilities

TI-2026-25833 CVE-2026-33436

Stirling-PDF: Reflected XSS through crafted filename in file upload functionality

MEDIUM 60

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00168 Published 2026-04-17 Fixed in 2.0.0 CWE-116

TI-2025-34843 CVE-2025-55161

HIGH 75

Stirling-PDF is a locally hosted web application that performs various operations on PDF files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02196 Published 2025-08-11 Fixed in 1.1.0 CWE-918

TI-2025-34833 CVE-2025-55150

HIGH 75

Stirling-PDF is a locally hosted web application that performs various operations on PDF files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0179 Published 2025-08-11 Fixed in 1.1.0 CWE-918

TI-2025-34834 CVE-2025-55151

HIGH 75

Stirling-PDF is a locally hosted web application that performs various operations on PDF files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00393 Published 2025-08-11 Fixed in 1.1.0 CWE-918

TI-2025-29281 CVE-2025-46568

HIGH 73

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.005 Published 2025-05-01 Fixed in 0.45.0 CWE-918

TI-2024-08425 CVE-2024-9075 · GHSA-qgcm-qv34-px5h

LOW 12

A vulnerability was found in Stirling-Tools Stirling-PDF up to 0.28.3.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00434 Published 2024-09-21 No fix listed CWE-79