High severity7.4NVD Advisory· Published Mar 9, 2024· Updated Jun 17, 2026
CVE-2024-28184
CVE-2024-28184
Description
WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if url_fetcher is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
weasyprintPyPI | >= 61.0, < 61.2 | 61.2 |
Affected products
4cpe:2.3:a:kozea:weasyprint:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kozea:weasyprint:*:*:*:*:*:*:*:*range: >=61.0,<61.2
- (no CPE)range: >= 61.0, <= 61.1
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- github.com/Kozea/WeasyPrint/commit/734ee8e2dc84ff3090682f3abff056d0907c8598nvdPatchWEB
- github.com/Kozea/WeasyPrint/security/advisories/GHSA-35jj-wx47-4w8rnvdVendor AdvisoryWEB
- github.com/advisories/GHSA-35jj-wx47-4w8rghsaADVISORY
- lists.fedoraproject.org/archives/list/[email protected]/message/ZLQZMOEDY72TS43HDXOBVID2VYCTWIH6/nvdMailing ListThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2024-28184ghsaADVISORY
- lists.fedoraproject.org/archives/list/[email protected]/message/ZLQZMOEDY72TS43HDXOBVID2VYCTWIH6ghsaWEB
News mentions
0No linked articles in our index yet.