alam00000 bentopdf

• CVE-2026-102354 Medium 6.8 BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker 0.2%
• CVE-2026-63630 Low 3.4 BentoPDF: Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests 0.4%
• CVE-2026-77581 High 8.6 BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass 0.3%
• CVE-2026-41653 High 7.0 BentoPDF: Stored XSS via Markdown Editor Leading to Persistent File Exfiltration 0.4%