tocsin

CVE-2026-39383

3 advisories.

Go/github.com/gotenberg/gotenberg/v8 CVE-2026-39383: high 8.6, EPSS 0.31%

Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL

Action: Upgrade github.com/gotenberg/gotenberg/v8 to 8.31.0 or later.

go get github.com/gotenberg/gotenberg/v8@v8.31.0

Affected

introducedfixedlast affected
8.29.18.31.0-

Fixed versions

8.31.0

Sources

CVE-2026-39383 · published · modified · JSON

Go/github.com/gotenberg/gotenberg/v7 CVE-2026-39383: unknown, EPSS 0.31%

Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL in github.com/gotenberg/gotenberg

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-39383 · published · modified · JSON

Go/github.com/gotenberg/gotenberg/v8 CVE-2026-39383: unknown, EPSS 0.31%

Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL in github.com/gotenberg/gotenberg

Action: Upgrade github.com/gotenberg/gotenberg/v8 to 8.31.0 or later.

go get github.com/gotenberg/gotenberg/v8@v8.31.0

Affected

introducedfixedlast affected
8.29.18.31.0-

Fixed versions

8.31.0

Sources

CVE-2026-39383 · published · modified · JSON