Known vulnerabilities in gotenberg - page 2

Vendor: thecodingmachine
Software: gotenberg
Software CPE: cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*
Website: https://github.com/thecodingmachine
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gotenberg gotenberg is affected by 30 known vulnerabilities: 16 high, 14 medium Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU162922 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 8.38.0 09.11.2026 SB20261109157
#VU162921 - Exposure of resource to wrong sphere
 CWE-668 Medium
No
No
 8.38.0 09.11.2026 SB20261109157
#VU162920 - Resource exhaustion
 CWE-400 Medium
No
No
 8.38.0 09.11.2026 SB20261109157
#VU162919 - Server-Side Request Forgery (SSRF)
CVE-2026-55229		 CWE-918 Medium
No
No
 8.34.0 09.11.2026 SB20261109156
#VU162918 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-44829		 CWE-22 High
No
No
 8.33.0 09.11.2026 SB20261109155
#VU162917 - Incomplete List of Disallowed Inputs
CVE-2026-45741		 CWE-184 Medium
No
No
 8.33.0 09.11.2026 SB20261109155
#VU162916 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-45742		 CWE-362 Medium
No
No
 8.33.0 09.11.2026 SB20261109155
#VU49286 - Incorrect Default Permissions
CVE-2020-13452		 CWE-276 High
No
No
 6.3.0 06.01.2021 SB2021010601
#VU49285 - Incomplete cleanup
CVE-2020-13451		 CWE-459 High
No
No
 6.3.0 06.01.2021 SB2021010601
#VU49284 - Unrestricted Upload of File with Dangerous Type
CVE-2020-13450		 CWE-434 High
No
No
 6.3.0 06.01.2021 SB2021010601


Showing elements 21 - 40 out of 30