{"action":"Upgrade weasyprint to 61.2-1 or later.","affected":[{"fixed":"61.2-1","introduced":"0"}],"component":"weasyprint","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["61.2-1"],"id":"tcs_01M5NKDA83P5DTC7NHWWY7F3C5","modified_at":"2026-09-15T09:03:12.223096577Z","published_at":"2024-03-09T01:15:07.573Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-28184","https://security-tracker.debian.org/tracker/CVE-2024-28184"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-28184#Debian:14/weasyprint","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-28184"}],"summary":"WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `ur"}