Stirling-Tools Stirling-PDF

• CVE-2026-119343 Medium 6.8 Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read 0.3%
• CVE-2026-119342 Medium 5.3 Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass 0.4%
• CVE-2026-113606 High 7.1 Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders 0.4%
• CVE-2026-113605 High 7.2 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database 0.7%
• CVE-2026-85714 Critical 9.1 Stirling-PDF: Remote Code Execution via H2 3.4%
• CVE-2026-57485 High 8.5 Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint 0.4%
• CVE-2026-33437 High 8.1 Stirling PDF: Stored XSS in Info Summary 0.4%
• CVE-2026-71270 High 8.6 Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess 0.4%
• CVE-2026-41580 Medium 6.1 Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author) 0.3%
• CVE-2026-33436 Low 3.1 Stirling-PDF: Reflected XSS through crafted filename in file upload functionality 0.2%
• CVE-2026-34071 Medium 5.4 Stirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML Export 0.3%
• CVE-2026-33438 Medium 6.5 Stirling-PDF vulnerable to DoS via add-watermark 0.4%
• CVE-2026-27625 High 8.1 Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction 0.5%
• CVE-2025-55161 High 8.6 Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf 2.2%
• CVE-2025-55150 High 8.6 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf 1.8%
• CVE-2025-55151 High 8.6 Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf 0.4%
• CVE-2025-46568 High 7.7 Stirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability 0.5%
• CVE-2024-52286 Low 2.0 Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF 0.5%
• CVE-2024-9075 Low 2.6 Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting 0.4%