CyberSecBulletin

Pontedilana vulnerabilities

We track 2 vulnerabilities in Pontedilana products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 19, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Pontedilana vulnerabilities

  • 8.1 High severity

    php-weasyprint: Deserialization of Untrusted Data

    CVE-2026-49286Pontedilana

    PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/php-weasyprint` guarded the output filename against the `phar://` stream wrapper with a case-sensitive blacklist. PHP stream wrappers are ca

  • 8.2 High severity

    php-weasyprint: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-49260Pontedilana

    PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.5.1, `pontedilana/php-weasyprint` builds the shell command for WeasyPrint by passing the binary path through `escapeshellarg()` first and then checking the *q