Vulnerability · Published Jan 19, 2026 · Assigned by GitHub_M

CVE-2025-68616WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

High 7.5

In plain English

A high-severity open redirect in WeasyPrint from Kozea. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.7%top 46.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `default_url_fetcher`. The vulnerability allows attackers to access internal network resources (such as `localhost` services or cloud metadata endpoints) even when a developer has implemented a custom `url_fetcher` to block such access. This occurs because the underlying `urllib` library follows HTTP redirects automatically without re-validating the new destination against the developer's security policy. Version 68.0 contains a patch for the issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	weasyprint	no fix listed	DEBIAN-CVE-2025-68616
Debian:13	weasyprint	no fix listed	DEBIAN-CVE-2025-68616
Debian:14	weasyprint	69.0-1	DEBIAN-CVE-2025-68616
PyPI	weasyprint	68.0	GHSA-983w-rhvv-gwmv
PyPI	weasyprint	68.0	PYSEC-2026-2034
Ubuntu:22.04:LTS	weasyprint	no fix listed	UBUNTU-CVE-2025-68616
Ubuntu:24.04:LTS	weasyprint	no fix listed	UBUNTU-CVE-2025-68616
Ubuntu:25.10	weasyprint	no fix listed	UBUNTU-CVE-2025-68616
Ubuntu:26.04:LTS	weasyprint	no fix listed	UBUNTU-CVE-2025-68616
Ubuntu:26.10	weasyprint	no fix listed	UBUNTU-CVE-2025-68616

Affected products (as reported)

Vendor	Product	Versions
Kozea	WeasyPrint	< 68.0

Weakness: CWE-601, CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv x_refsource_CONFIRM
https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565 x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2025-68616 vdb-entry, x_refsource_REDHAT
RHBZ#2430858 issue-tracking, x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68616.json x_sadp-csaf-vex