Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Stirling-PDF — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Stirling-PDF, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of security vulnerabilities affecting Stirling-PDF, categorized under software weakness types and relevant security tags. It collects detailed records of identified flaws, including but not limited to cross-site scripting, improper input validation, and access control issues, spanning from the product's initial release to the present day. By centralizing this data, the page allows security professionals and developers to efficiently track vendor advisories as they are issued, helping them stay informed about emerging threats and required mitigations. Users can also utilize this resource to understand the broader context of specific weakness classes within the Stirling-PDF ecosystem, analyzing patterns in defect frequency and severity over time. Furthermore, the page serves as a historical archive, enabling investigators to look up a product’s vulnerability history to assess long-term security posture and compliance trends. This aggregation supports risk management by providing a clear view of known issues, facilitating faster remediation decisions, and aiding in the evaluation of third-party software reliability. The information is structured to support both manual review and automated scanning processes, ensuring that stakeholders have access to consistent and up-to-date vulnerability intelligence without the need to consult multiple disparate sources. All entries are linked to official tracking identifiers for verification, ensuring accuracy and traceability in security reporting and audit activities.

Vendor: Stirling-Tools

CVE ID Title CVSS Severity Published
CVE-2026-57485 Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint CWE-200 8.5 High 2026-08-17
CVE-2026-33437 Stirling PDF: Stored XSS in Info Summary CWE-79 8.1 High 2026-08-17
CVE-2026-71270 Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess CWE-918 8.6 High 2026-08-05
CVE-2026-41580 Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author) CWE-79 6.1 Medium 2026-07-15
CVE-2026-33436 Stirling-PDF: Reflected XSS through crafted filename in file upload functionality CWE-20 3.1 Low 2026-04-17
CVE-2026-34071 Stirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML Export CWE-79 5.4 Medium 2026-03-26
CVE-2026-33438 Stirling-PDF vulnerable to DoS via add-watermark CWE-770 6.5 Medium 2026-03-26
CVE-2026-27625 Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction CWE-22 8.1 High 2026-03-20
CVE-2025-55161 Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf CWE-918 8.6 High 2025-08-11
CVE-2025-55150 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf CWE-918 8.6 High 2025-08-11
CVE-2025-55151 Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf CWE-918 8.6 High 2025-08-11
CVE-2025-46568 Stirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability CWE-918 7.5AI High AI 2025-05-01
CVE-2024-52286 Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF CWE-20 6.1AI Medium AI 2024-11-11
CVE-2024-9075 Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting CWE-79 2.6 Low 2024-09-21

All 14 known CVE vulnerabilities affecting Stirling-PDF with full Chinese analysis, references, and POCs where available.