Kozea WeasyPrint

• CVE-2026-106443 High 8.8 WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE 0.9%
• CVE-2026-55073 Medium 6.2 WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF 0.2%
• CVE-2026-49452 Medium 6.5 WeasyPrint: CSS Injection via Presentational Hints 0.4%
• CVE-2025-68616 High 7.5 WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect 0.7%
• CVE-2024-28184 High 7.4 WeasyPrint allows the attachment of arbitrary files and URLs to a PDF 0.7%