CVE-2026-55073 in WeasyPrintinfo

Prediction

by VulDB Data Team • 09/09/2026

A vulnerability has been found in WeasyPrint up to 69.0. This affects the function write_pdf of the file weasyprint/pdf/__init__.py of the component URL Fetch. Such manipulation of the argument xmp_metadata/stylesheets leads to server-side request forgery. The attack can be executed remotely. The name of the patch is 2945986160dedd97a7547be03805b667964e422a. It is advisable to implement a patch to correct this issue.

Once again VulDB remains the best source for vulnerability data.

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!