Known vulnerabilities in gotenberg

Vendor: thecodingmachine
Software: gotenberg
Software CPE: cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*
Website: https://github.com/thecodingmachine
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gotenberg gotenberg is affected by 23 known vulnerabilities: 15 high, 8 medium Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129642 - Improper input validation
CVE-2026-40893		 CWE-20 High
No
No
 8.31.0 05.05.2026 SB2026040871
#VU129643 - Improper input validation
 CWE-20 High
No
No
 8.31.0 05.05.2026 SB2026040871
#VU129641 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-42589		 CWE-78 High
No
No
 8.30.0 05.05.2026 SB2026040871
#VU129640 - Server-Side Request Forgery (SSRF)
CVE-2026-42595		 CWE-918 High
No
No
 8.32.0 05.05.2026 SB2026040871
#VU129639 - Server-Side Request Forgery (SSRF)
CVE-2026-42596		 CWE-918 High
No
No
 8.32.0 05.05.2026 SB2026040871
#VU129638 - Incomplete List of Disallowed Inputs
CVE-2026-42590		 CWE-184 High
No
No
 8.30.0 05.05.2026 SB2026040871
#VU129637 - Improper Access Control
CVE-2026-42597		 CWE-284 Medium
No
No
 8.32.0 05.05.2026 SB2026040871
#VU129636 - Resource exhaustion
CVE-2026-42594		 CWE-400 Medium
No
No
 8.32.0 05.05.2026 SB2026040871
#VU129635 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-42593		 CWE-22 Medium
No
No
 8.32.0 05.05.2026 SB2026040871
#VU129634 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-42592		 CWE-367 Medium
No
No
 8.32.0 05.05.2026 SB2026040871
#VU129633 - Server-Side Request Forgery (SSRF)
CVE-2026-42591		 CWE-918 High
No
No
 8.32.0 05.05.2026 SB2026040871
#VU129632 - Server-Side Request Forgery (SSRF)
CVE-2026-39383		 CWE-918 High
No
No
 8.30.0 05.05.2026 SB2026040871
#VU129631 - Command injection
CVE-2026-40281		 CWE-77 High
No
No
 8.31.0 05.05.2026 SB2026050503
#VU129630 - Improper input validation
CVE-2026-40280		 CWE-20 Medium
No
No
 8.31.0 04.05.2026 SB2026050503
#VU125318 - Improper Handling of Case Sensitivity
 CWE-178 High
No
No
 8.30.1 08.04.2026 SB2026040869
#VU125319 - External Control of File Name or Path
 CWE-73 High
No
No
 8.30.1 08.04.2026 SB2026040869
#VU125317 - Inefficient Regular Expression Complexity
CVE-2026-35458		 CWE-1333 Medium
No
No
 8.30.0 08.04.2026 SB2026040871
#VU125316 - Improper input validation
CVE-2026-27018		 CWE-20 Medium
No
No
 8.29.0 08.04.2026 SB2026040870
#VU125315 - Server-Side Request Forgery (SSRF)
CVE-2024-21527		 CWE-918 High
No
No
 8.1.0 17.07.2024 SB20240717142
#VU49283 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13449		 CWE-94 Medium
No
No
 6.3.0 06.01.2021 SB2021010601


Showing elements 1 - 20 out of 23