CVE-2025-68616

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `default_url_fetcher`. The vulnerability allows attackers to access internal network resources (such as `localhost` services or cloud metadata endpoints) even when a developer has implemented a custom `url_fetcher` to block such access. This occurs because the underlying `urllib` library follows HTTP redirects automatically without re-validating the new destination against the developer's security policy. Version 68.0 contains a patch for the issue.

• CWE-601
• CWE-918
• CWE-918
• CWE-918

• https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565Patch
• https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmvExploit, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2025-68616
• https://bugzilla.redhat.com/show_bug.cgi?id=2430858
• https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmvExploit, Third Party Advisory
• https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68616.json

Published

Jan 19, 2026

Last Modified

Jul 15, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-68608Missing Authorization vulnerability in DeluxeThemes Userpro …7.5
• CVE-2025-68609A vulnerability in Palantir's Aries service allowed unauthen…6.6
• CVE-2025-6861A vulnerability was found in SourceCodester Best Salon Manag…8.8
• CVE-2025-68613n8n is an open source workflow automation platform. Versions…8.8
• CVE-2025-68614LibreNMS is an auto-discovering PHP/MySQL/SNMP based network…5.4
• CVE-2025-68615net-snmp is a SNMP application library, tools and daemon. Pr…9.8
• CVE-2025-68617FluidSynth is a software synthesizer based on the SoundFont …7
• CVE-2025-68618ImageMagick is free and open-source software used for editin…7.5
• CVE-2025-68619Signal K Server is a server application that runs on a centr…7.2
• CVE-2025-6862A vulnerability classified as critical has been found in Sou…8.8
• CVE-2025-68620Signal K Server is a server application that runs on a centr…9.1
• CVE-2025-68621Trilium Notes is an open-source, cross-platform hierarchical…7.4