VYPR

bentopdf

by GitHub

CVEs (1)

  • CVE-2026-77581HigSep 24, 2026
    risk 0.49cvss 8.6epss —

    BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReservedHost() to validate a supplied hostname separately from the DNS resolution used by…