pontedilana vulnerabilities
4 published CVEs name pontedilana among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-49359
PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option
pontedilana · php-weasyprint
Medium6.5 - CVE-2026-49286
PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass)
pontedilana · php-weasyprint
High8.1 - CVE-2026-49260
PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)
pontedilana · php-weasyprint
High8.2 - CVE-2026-49358
PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles
pontedilana · php-weasyprint
Low3.0