← Volver al buscador de CVEs

CVE-2026-36576

docker-wkhtmltopdf-aas

Descripción

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

CVSS 9.8EPSS 1.4909999999999999%Riesgo 1.11
Ver fuente
Publicación
2026-06-03 16:16:28
Versiones afectadas
unknown
Tipo
Core software
Última modificación
2026-07-22 19:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H