xhtml2pdf has 2 CVEs on record between 2024 and 2026. 1 was published in the last 90 days. The median CVSS is 6.5 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Weakness classes
Products
- xhtml2pdf 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
xhtml2pdf vulnerabilities
CVEs affecting xhtml2pdf, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-110642High· 7.8xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os.system
xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name co…
▾ Twilightxhtml2pdf · xhtml2pdfEPSS 1.1%via NVD
CVE-2024-25885Medium· 5.3xhtml2pdf Denial of Service via crafted string
xhtml2pdf Denial of Service via crafted string
▾ Sunlitxhtml2pdf · xhtml2pdfEPSS 0.64%via OSV