Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115729— @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass

Quick assessment

Affected
pdfme common
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 5.5.10 至 6.2.6（不含）版本中存在服务端请求伪造（SSRF）漏洞。该漏洞允许攻击者绕过 函数中 的拒绝列表（denylist）。攻击者可通过提供使用 IPv4 映射的 IPv6 地址、 、NAT64 或 localhost 别名主机名的 链接，利用生成的文档读取回环地址、内部网络资源或云元数据服务的响应。

CVSS 6.8 · Medium

Possible ATT&CK Techniques 1 AI

T1091 · Replication Through Removable Media
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-115729

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
@pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass the isUrlSafeToFetch denylist in getB64BasePdf. Attackers can supply basePdf URLs using IPv4-mapped IPv6, [::], NAT64 or localhost alias hostnames to read loopback, internal or cloud metadata responses through generated documents.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
pdfme common 5.5.10 ~ 6.2.6 -

II. Public POCs for CVE-2026-115729

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115729

请登录查看更多情报信息。

Other References for CVE-2026-115729 (1)

Other References for CVE-2026-115729 (3)

IV. Related Vulnerabilities

Same product: common
Same vendor: pdfme
Same weakness: CWE-918

V. Comments for CVE-2026-115729

No comments yet

Leave a comment