PHPWeasyPrint Arbitrary File Deletion Fix (Pre-Auth/Path Traversal)

github.com 2026-06-19查看中文 →

Security AdvisoryHighPontedilana/php-weasyprint

Affected:

pontedilana/php-weasyprint 2.7.0.2.0.0

Referenced CVEs: CVE-2026-49358 · 3.0

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Multi-Vendor Online Grocery Management System V1.0 IDOR Vulnerability Advisory and PoC 2026-07-05 SQL Column Injection in Multi-Vendor Grocery System Registration Endpoint (PoC + Fix) 2026-07-05 Multi-Vendor Online Grocery Management System V1.0 SQL Injection via cancel_order Parameter 2026-07-05 SQL Injection in Multi-Vendor Online Grocery Management System 1.0 via save_shop_type Parameter 2026-07-05 Multi-Vendor Online Grocery Management System 1.0 Unauthenticated Admin Account Creation 2026-07-05

Offline Archive

Offline screenshot & PDF are Pro-exclusive