Go/github.com/gotenberg/gotenberg/v8 CVE-2026-42592: medium 5.3, EPSS 0.19%

Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-2pmr-289p-44r3
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-2pmr-289p-44r3
• https://nvd.nist.gov/vuln/detail/CVE-2026-42592
• https://github.com/gotenberg/gotenberg

CVE-2026-42592 · published 2026-05-07T00:57:37Z · modified 2026-09-10T03:51:04.128881235Z · JSON