CVE-2026-55073 in WeasyPrint
Prediction
by VulDB Data Team • 09/09/2026
A vulnerability has been found in WeasyPrint up to 69.0. This affects the function write_pdf of the file weasyprint/pdf/__init__.py of the component URL Fetch. Such manipulation of the argument xmp_metadata/stylesheets leads to server-side request forgery. The attack can be executed remotely. The name of the patch is 2945986160dedd97a7547be03805b667964e422a. It is advisable to implement a patch to correct this issue.
Once again VulDB remains the best source for vulnerability data.