Stirling-tools vulnerabilities

Products

• Stirling-pdf 19

Newest

• stirling-tools stirling-pdf Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read CVE-2026-119343 6.8 MediumOctober 30, 2026
• stirling-tools stirling-pdf Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass CVE-2026-119342 5.3 MediumOctober 30, 2026
• stirling-tools stirling-pdf Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders CVE-2026-113606 7.1 HighOctober 20, 2026
• stirling-tools stirling-pdf Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database CVE-2026-113605 8.6 HighOctober 20, 2026
• stirling-tools stirling-pdf Stirling-PDF: Remote Code Execution via H2 CVE-2026-85714 9.1 CriticalOctober 14, 2026
• stirling-tools stirling-pdf Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint CVE-2026-57485 8.5 HighAugust 17, 2026
• stirling-tools stirling-pdf Stirling PDF: Stored XSS in Info Summary CVE-2026-33437 8.1 HighAugust 17, 2026
• stirling-tools stirling-pdf Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess CVE-2026-71270 8.6 HighAugust 5, 2026
• stirling pdf, stirling-tools stirling-pdf +1 more Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author) CVE-2026-41580 6.1 MediumJuly 15, 2026
• stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 more Stirling-PDF: Reflected XSS through crafted filename in file upload functionality CVE-2026-33436 3.1 LowApril 17, 2026
• stirling pdf, stirling-tools stirling-pdf +1 more Stirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML Export CVE-2026-34071 5.4 MediumMarch 26, 2026
• stirling pdf, stirling-tools stirling-pdf +1 more Stirling-PDF vulnerable to DoS via add-watermark CVE-2026-33438 6.5 MediumMarch 26, 2026
• stirling pdf, stirling-tools stirling-pdf +1 more Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction CVE-2026-27625 8.1 HighMarch 20, 2026
• stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 more Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf CVE-2025-55161 8.6 HighAugust 11, 2025
• stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 more Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf CVE-2025-55150 8.6 HighAugust 11, 2025
• stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 more Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf CVE-2025-55151 8.6 HighAugust 11, 2025
• stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 more Stirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability CVE-2025-46568 7.7 HighMay 1, 2025
• stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 more Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF CVE-2024-52286 2.0 LowNovember 11, 2024
• stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 more Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting CVE-2024-9075 2.3 LowSeptember 21, 2024