Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

php-weasyprint — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in php-weasyprint, with AI-generated Chinese analysis, references, and POCs.

Vendor: pontedilana

CVE IDTitleCVSSSeverityPublished
CVE-2026-49359 PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option CWE-918 6.5 Medium2026-06-19
CVE-2026-49286 PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass) CWE-502 8.1 High2026-06-19
CVE-2026-49260 PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc) CWE-78 8.2 High2026-06-19
CVE-2026-49358 PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles CWE-73 3.0 Low2026-06-19

All 4 known CVE vulnerabilities affecting php-weasyprint with full Chinese analysis, references, and POCs where available.