受影响的版本系列
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2026-126799 | Gotenberg 8.31.0 before 8.38.0 SSRF via IPv6 Zone Identifiers in IsPublicIP | ≥ 8.31.0 < 8.38.0 | 6.9 | — | 2026-11-12 | |
| CVE-2026-44829 | Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filename | * | 8.8 | — | 2026-08-19 | |
| CVE-2026-45742 | Gotenberg: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | * | 7.5 | — | 2026-08-19 | |
| CVE-2026-45741 | Gotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes | * | 7.5 | — | 2026-08-19 | |
| CVE-2026-55229 | Gotenberg: SSRF via LibreOffice document processing | * | 7.5 | — | 2026-07-11 | |
| CVE-2026-42590 | Gotenberg: ExifTool group-prefix syntax bypasses dangerous-tag blocklist | * | 8.2 | — | 2026-05-15 | |
| CVE-2026-42597 | Gotenberg: Chromium URL conversion routes read arbitrary files under /tmp via file:// scheme | * | 5.9 | — | 2026-05-15 | |
| CVE-2026-42595 | Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass | * | 8.6 | — | 2026-05-15 | |
| CVE-2026-42594 | Gotenberg: Unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine | * | 7.5 | — | 2026-05-15 | |
| CVE-2026-42593 | Gotenberg: Arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routes | * | 5.3 | — | 2026-05-15 | |
| CVE-2026-42592 | Gotenberg: DNS rebinding bypasses SSRF validation on Chromium URL conversion routes | * | 5.3 | — | 2026-05-15 | |
| CVE-2026-42591 | Gotenberg: Server-Side Request Forgery (SSRF) in github.com/gotenberg/gotenberg/v8 | * | 8.2 | — | 2026-05-15 | |
| CVE-2026-42596 | Gotenberg: Unauthenticated SSRF via default deny-list bypass in downloadFrom and webhook | * | 9.4 | — | 2026-05-15 | |
| CVE-2026-40893 | Gotenberg: ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names Allows Arbitrary File Rename a... | * | 8.2 | — | 2026-05-15 | |
| CVE-2026-42589 | Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection | * | 9.8 | — | 2026-05-15 | |
| CVE-2026-40281 | Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values | * | 10.0 | — | 2026-05-07 | |
| CVE-2026-39383 | Gotenberg unauthenticated blind SSRF via unfiltered webhook URL | * | 6.9 | — | 2026-05-06 | |
| CVE-2026-40280 | Gotenberg SSRF via case-insensitive URL scheme bypass in webhook and downloadFrom deny-lists | * | 7.8 | — | 2026-05-06 | |
| CVE-2026-35458 | Gotenberg has a ReDoS via extraHttpHeaders scope feature | * | 8.7 | — | 2026-04-07 | |
| CVE-2026-27018 | Gotenberg: Chromium deny-list bypass via case-insensitive URL scheme | * | 7.8 | — | 2026-03-31 | |
| CVE-2024-21527 | Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package... | * | 8.8 | — | 2024-07-19 | |
| CVE-2020-14160 | An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in... | * | — | — | 2021-08-26 | |
| CVE-2020-14161 | It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via t... | * | — | — | 2021-08-26 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。