CVE-2026-114609 | py-pdf fpdf2 up to 2.8.7 Shared Image Loader FPDF.image/FPDF.write_html server-side request forgery

October 22, 2026 Yanac

A vulnerability was found in py-pdf fpdf2 up to 2.8.7. It has been rated as problematic. This issue affects the function FPDF.image/FPDF.write_html of the component Shared Image Loader. This manipulation causes server-side request forgery.

This vulnerability is handled as CVE-2026-114609. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More