VDB
CVE-2025-68616
CVE-2025-68616
PUBLISHED
CVSS 7.5 HIGH
WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
EPSS 0.70% · 52.6th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.70%
52.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | weasyprint | 0, 0 |
| kozea | weasyprint | 0, 0 |
| Kozea | WeasyPrint | < 68.0, < 68.0 |
Timeline
- Jan 19, 2026 PoC Published
- Jan 19, 2026 CVE Published
- Jan 19, 2026 PoC Published
- Jan 20, 2026 EPSS Score
- Jan 24, 2026 EPSS Score
- Jan 27, 2026 EPSS Score
- Jan 31, 2026 EPSS Score
- Feb 1, 2026 Security Advisory
- Feb 4, 2026 EPSS Score
- Feb 7, 2026 EPSS Score
- Feb 11, 2026 EPSS Score
- Feb 15, 2026 EPSS Score