Skip to contentStirling-tools Stirling-pdf vulnerabilities
- stirling-tools stirling-pdfStirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file readCVE-2026-1193436.8 Medium
- stirling-tools stirling-pdfStirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypassCVE-2026-1193425.3 Medium
- stirling-tools stirling-pdfStirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing FoldersCVE-2026-1136067.1 High
- stirling-tools stirling-pdfStirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-databaseCVE-2026-1136058.6 High
- stirling-tools stirling-pdfStirling-PDF: Remote Code Execution via H2CVE-2026-857149.1 Critical
- stirling-tools stirling-pdfStirling-PDF: Internal Service Account API Key Disclosure via Pipeline EndpointCVE-2026-574858.5 High
- stirling-tools stirling-pdfStirling PDF: Stored XSS in Info SummaryCVE-2026-334378.1 High
- stirling-tools stirling-pdfStirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint SubprocessCVE-2026-712708.6 High
- stirling pdf, stirling-tools stirling-pdf +1 moreStirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author)CVE-2026-415806.1 Medium
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF: Reflected XSS through crafted filename in file upload functionalityCVE-2026-334363.1 Low
- stirling pdf, stirling-tools stirling-pdf +1 moreStirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML ExportCVE-2026-340715.4 Medium
- stirling pdf, stirling-tools stirling-pdf +1 moreStirling-PDF vulnerable to DoS via add-watermarkCVE-2026-334386.5 Medium
- stirling pdf, stirling-tools stirling-pdf +1 moreStirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP ExtractionCVE-2026-276258.1 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdfCVE-2025-551618.6 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF SSRF vulnerability on /api/v1/convert/html/pdfCVE-2025-551508.6 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF SSRF vulnerability on /api/v1/convert/file/pdfCVE-2025-551518.6 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read VulnerabilityCVE-2025-465687.7 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreSelf Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDFCVE-2024-522862.0 Low
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-Tools Stirling-PDF Markdown-to-PDF cross site scriptingCVE-2024-90752.3 Low