xhtml2pdf vulnerabilities (Debian)

2 vulnerabilities.

• xhtml2pdf Debian xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name CVE-2026-110642 Fix available 8.5 HighOctober 14, 2026
• xhtml2pdf Debian xhtml2pdf Denial of Service via crafted string CVE-2024-25885 Fix available 7.5 HighOctober 8, 2024