github.com/gotenberg/gotenberg/v7 vulnerabilities
CVEs whose affected-version data names the github.com/gotenberg/gotenberg/v7 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-42597Medium· 5.9Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme
Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme
▾ Sunlitgotenberg · github.com/gotenberg/gotenberg/v8EPSS 0.28%via OSV
CVE-2026-27018HighGotenberg has Chromium deny-list bypass via case-insensitive URL scheme (bypass of GHSA-rh2x-ccvw-q7r3)
Gotenberg has Chromium deny-list bypass via case-insensitive URL scheme (bypass of GHSA-rh2x-ccvw-q7r3)
▾ Twilightgotenberg · github.com/gotenberg/gotenberg/v8EPSS 1.7%via OSV