CVE-2026-27018 in gotenberg
Resumen (Inglés)
Gotenberg is an API for converting document formats. Prior to version 8.29.0, the fix introduced for CVE-2024-21527 can be bypassed using mixed-case or uppercase URL schemes. This issue has been patched in version 8.29.0.
Divulgación
2026-03-31
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354232 | gotenberg Chromium Deny-List recorrido de directorios | 22 | No está definido | Arreglo oficial | CVE-2026-27018 |