Pontedilana vulnerabilities
Products
Newest
- pontedilana php-weasyprint PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option 6.5 Medium
- pontedilana php-weasyprint PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass) 8.1 High
- pontedilana php-weasyprint PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc) 8.2 High
- pontedilana php-weasyprint PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles 3.0 Low