← Back to CVE search

CVE-2026-36576

docker-wkhtmltopdf-aas

Description

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

CVSS 9.8EPSS 1.4909999999999999%Risk 1.11
View source
Published
2026-06-03 16:16:28
Affected versions
unknown
Type
Core software
Last modified
2026-07-22 19:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H