Go/github.com/gotenberg/gotenberg/v8 CVE-2026-35458: unknown, EPSS 0.50%

Gotenberg Vulnerable to ReDoS via extraHttpHeaders scope feature in github.com/gotenberg/gotenberg

Action: Upgrade github.com/gotenberg/gotenberg/v8 to 8.30.0 or later.

go get github.com/gotenberg/gotenberg/v8@v8.30.0

Affected

Fixed versions

Sources

• osv: GO-2026-5372#Go/github.com/gotenberg/gotenberg/v8
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-fmwg-qcqh-m992
• https://nvd.nist.gov/vuln/detail/CVE-2026-35458
• https://github.com/gotenberg/gotenberg/commit/cfb48d9af48cb236244eabe5c67fe1d30fb3fe25

CVE-2026-35458 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:38.157822609Z · JSON