CVE-2025-68616
2 advisories.
PyPI/weasyprint CVE-2025-68616: high 7.5
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
Action: Upgrade weasyprint to 68.0 or later.
pip install weasyprint==68.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 68.0 | - |
Fixed versions
| 68.0 |
Sources
- osv: GHSA-983w-rhvv-gwmv
- https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
- https://nvd.nist.gov/vuln/detail/CVE-2025-68616
- https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
- https://access.redhat.com/security/cve/CVE-2025-68616
- https://bugzilla.redhat.com/show_bug.cgi?id=2430858
- https://github.com/Kozea/WeasyPrint
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68616.json
CVE-2025-68616 · published · modified · JSON
PyPI/weasyprint CVE-2025-68616: high 7.5
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
Action: Upgrade weasyprint to 68.0 or later.
pip install weasyprint==68.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 68.0 | - |
Fixed versions
| 68.0 |
Sources
- osv: PYSEC-2026-2034
- https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
- https://nvd.nist.gov/vuln/detail/CVE-2025-68616
- https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
- https://access.redhat.com/security/cve/CVE-2025-68616
- https://bugzilla.redhat.com/show_bug.cgi?id=2430858
- https://github.com/Kozea/WeasyPrint
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68616.json
- https://pypi.org/project/weasyprint
- https://github.com/advisories/GHSA-983w-rhvv-gwmv
CVE-2025-68616 · published · modified · JSON