Vulnerabilities

TI-2026-36532 CVE-2026-49359 · GHSA-x8g9-h984-pc36

PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option

MEDIUM 62

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00422 Published 2026-06-19 Fixed in 2.6.0 CWE-918

TI-2026-36472 CVE-2026-49286 · GHSA-2fmj-p74r-3wjm

HIGH 70

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00735 Published 2026-06-19 Fixed in 2.6.0 CWE-502

TI-2026-36455 CVE-2026-49260 · GHSA-f5gc-qxf8-mh9g

HIGH 71

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0021 Published 2026-06-19 Fixed in 2.5.1 CWE-78

TI-2026-36531 CVE-2026-49358 · GHSA-5g9f-cwwg-4p8g

MEDIUM 48

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page.

CVSS 3.1LOW 3.0 Local High privileges No interaction EPSS 0.00166 Published 2026-06-19 Fixed in 2.6.0 CWE-73