Vulnerabilidades en Stirling-Tools
19 resultadosCVE-2026-85714CRITICALStirling-PDF: Remote Code Execution via H2EPSS 3.4%CVE-2025-55161HIGHStirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdfEPSS 2.2%CVE-2025-55150HIGHStirling-PDF SSRF vulnerability on /api/v1/convert/html/pdfEPSS 1.8%CVE-2026-113605HIGHStirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-databaseEPSS 0.7%CVE-2024-52286LOWSelf Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDFEPSS 0.5%CVE-2025-46568HIGHStirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read VulnerabilityEPSS 0.5%CVE-2026-27625HIGHStirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP ExtractionEPSS 0.5%CVE-2024-9075LOWStirling-Tools Stirling-PDF Markdown-to-PDF cross site scriptingEPSS 0.4%CVE-2026-119342MEDIUMStirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypassEPSS 0.4%CVE-2026-71270HIGHStirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint SubprocessEPSS 0.4%CVE-2026-57485HIGHStirling-PDF: Internal Service Account API Key Disclosure via Pipeline EndpointEPSS 0.4%CVE-2026-33438MEDIUMStirling-PDF vulnerable to DoS via add-watermarkEPSS 0.4%CVE-2026-33437HIGHStirling PDF: Stored XSS in Info SummaryEPSS 0.4%CVE-2025-55151HIGHStirling-PDF SSRF vulnerability on /api/v1/convert/file/pdfEPSS 0.4%CVE-2026-113606HIGHStirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing FoldersEPSS 0.4%CVE-2026-119343MEDIUMStirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file readEPSS 0.3%CVE-2026-34071MEDIUMStirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML ExportEPSS 0.3%CVE-2026-41580MEDIUMStirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author)EPSS 0.3%CVE-2026-33436LOWStirling-PDF: Reflected XSS through crafted filename in file upload functionalityEPSS 0.2%