CVE-2024-28184
2 advisories.
PyPI/weasyprint CVE-2024-28184: high 7.4, EPSS 0.74%
WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
Action: Upgrade weasyprint to 61.2 or later.
pip install weasyprint==61.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 61.0 | 61.2 | - |
Fixed versions
| 61.2 |
Sources
- osv: GHSA-35jj-wx47-4w8r
- https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-35jj-wx47-4w8r
- https://nvd.nist.gov/vuln/detail/CVE-2024-28184
- https://github.com/Kozea/WeasyPrint/commit/734ee8e2dc84ff3090682f3abff056d0907c8598
- https://github.com/Kozea/WeasyPrint
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLQZMOEDY72TS43HDXOBVID2VYCTWIH6
CVE-2024-28184 · published · modified · JSON
PyPI/weasyprint CVE-2024-28184: high 7.4, EPSS 0.74%
WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
Action: Upgrade weasyprint to 61.2 or later.
pip install weasyprint==61.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 61.0 | 61.2 | - |
Fixed versions
| 61.2 |
Sources
- osv: PYSEC-2026-2033
- https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-35jj-wx47-4w8r
- https://nvd.nist.gov/vuln/detail/CVE-2024-28184
- https://github.com/Kozea/WeasyPrint/commit/734ee8e2dc84ff3090682f3abff056d0907c8598
- https://github.com/Kozea/WeasyPrint
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLQZMOEDY72TS43HDXOBVID2VYCTWIH6
- https://pypi.org/project/weasyprint
- https://github.com/advisories/GHSA-35jj-wx47-4w8r
CVE-2024-28184 · published · modified · JSON