Threats tagged 'brew-pdfly-cve-2026-114609'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.8	CVE-2026-114609Pdfly: fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content Medium5.82026-10-27GCVE DatabaseCVE-2026-114609 The pdfly library (fpdf2) implicitly dereferences image resource references when rendering content, which can lead to outbound HTTP(S) requests or local file access attempts if untrusted input is processed. This affects applications that render untrusted HTML, SVG, or image paths without sanitization. The issue can enable Server-Side Request Forgery (SSRF) and limited local file access depending on the image parsing success. A fix is available in version 0.5.1_25. Report on CVE-2026-114609 Vulnerability #brew-pdfly-cve-2026-114609 #homebrew	GCVE Database	2026-10-27

Page 1 of 1