CVE-2026-55073 | WeasyPrint up to 69.0 URL Fetch init.py write_pdf xmp_metadata/stylesheets server-side request forgery

September 9, 2026 Yanac

A vulnerability was found in WeasyPrint up to 69.0. It has been declared as problematic. This affects the function write_pdf of the file weasyprint/pdf/__init__.py of the component URL Fetch. Such manipulation of the argument xmp_metadata/stylesheets leads to server-side request forgery.

This vulnerability is documented as CVE-2026-55073. The attack can be executed remotely. There is not any exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More