Go/github.com/gotenberg/gotenberg/v7 CVE-2026-39383: high 7.2, EPSS 0.24%

Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL in github.com/gotenberg/gotenberg

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5155
• nvd: CVE-2026-39383
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-5vh4-rgv7-p9g4
• https://github.com/gotenberg/gotenberg/releases/tag/v8.31.0

CVE-2026-39383 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:13.449992135Z · JSON