pontedilana/php-weasyprint vulnerabilities (Packagist)
4 vulnerabilities.
pontedilana/php-weasyprintPackagistPhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option6.5 Mediumpontedilana/php-weasyprintPackagistPhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass)8.1 Highpontedilana/php-weasyprintPackagistPhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)8.2 Highpontedilana/php-weasyprintPackagistPhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles3.0 Low