Wegow vulnerabilities

CVEs whose affected-version data names the Wegow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101300High· 7.1

today

Server-Side Request Forgery in Wegow PDF export

Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the <svg> parameter of the POST request genera…

▾ TwilightWegow Technologies · Wegowvia CVEORG