CVE-2026-35458

Go/github.com/gotenberg/gotenberg/v8 CVE-2026-35458: high

Gotenberg Vulnerable to ReDoS via extraHttpHeaders scope feature

Action: Upgrade github.com/gotenberg/gotenberg/v8 to 8.30.0 or later.

go get github.com/gotenberg/gotenberg/v8@v8.30.0

Affected

Fixed versions

Sources

• osv: GHSA-fmwg-qcqh-m992
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-fmwg-qcqh-m992
• https://nvd.nist.gov/vuln/detail/CVE-2026-35458
• https://github.com/gotenberg/gotenberg/commit/cfb48d9af48cb236244eabe5c67fe1d30fb3fe25
• https://github.com/gotenberg/gotenberg

CVE-2026-35458 · published 2026-04-07T18:16:19Z · modified 2026-06-25T19:56:12.045282564Z · JSON

Go/github.com/gotenberg/gotenberg/v7 CVE-2026-35458: unknown

Gotenberg Vulnerable to ReDoS via extraHttpHeaders scope feature in github.com/gotenberg/gotenberg

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5372
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-fmwg-qcqh-m992
• https://nvd.nist.gov/vuln/detail/CVE-2026-35458
• https://github.com/gotenberg/gotenberg/commit/cfb48d9af48cb236244eabe5c67fe1d30fb3fe25

CVE-2026-35458 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:38.157822609Z · JSON

Go/github.com/gotenberg/gotenberg/v8 CVE-2026-35458: unknown

Gotenberg Vulnerable to ReDoS via extraHttpHeaders scope feature in github.com/gotenberg/gotenberg

Action: Upgrade github.com/gotenberg/gotenberg/v8 to 8.30.0 or later.

go get github.com/gotenberg/gotenberg/v8@v8.30.0

Affected

Fixed versions

Sources

• osv: GO-2026-5372#Go/github.com/gotenberg/gotenberg/v8
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-fmwg-qcqh-m992
• https://nvd.nist.gov/vuln/detail/CVE-2026-35458
• https://github.com/gotenberg/gotenberg/commit/cfb48d9af48cb236244eabe5c67fe1d30fb3fe25

CVE-2026-35458 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:38.157822609Z · JSON