Go/github.com/gotenberg/gotenberg/v8 CVE-2026-44829: high 8.8, EPSS 0.50%

Gotenberg has path traversal in zip entry name via Windows-style separators in upload filename

Action: Upgrade github.com/gotenberg/gotenberg/v8 to 8.33.0 or later.

go get github.com/gotenberg/gotenberg/v8@v8.33.0

Affected

Fixed versions

Sources

• osv: GHSA-hwc4-gmrw-5222
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-hwc4-gmrw-5222
• https://github.com/gotenberg/gotenberg
• https://github.com/gotenberg/gotenberg/releases/tag/v8.33.0

CVE-2026-44829 · published 2026-05-29T16:38:24Z · modified 2026-06-25T23:11:05.529587981Z · JSON