VYPR

Catalyst::View::Wkhtmltopdf

by Perl Foundation

CVEs (1)

  • CVE-2026-16766Jul 25, 2026
    risk 0.00cvss epss 0.01

    Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the page_size,…