Gotenberg has incomplete fix for ExifTool arbitrary file write: case-insensitive bypass and missing HardLink/SymLink tags in github.com/gotenberg/gotenberg

Description

References

• gotenberg/gotenberg security advisory · ADVISORY
• gotenberg/gotenberg commit 15050a3 · WEB

Autres vulnérabilités de github.com/gotenberg/gotenberg/v7

• CVE-2026-45742ÉLEVÉE 7.5Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go s…
• CVE-2026-45741ÉLEVÉE 7.5Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg/gotenberg/outbound.go does …
• CVE-2026-44829ÉLEVÉE 8.8Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filep…
• CVE-2026-55229ÉLEVÉE 7.5Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.34.0, Gotenberg's /forms/libreoffice/convert endpoint allows a special…
• CVE-2026-42597MOYENNE 5.9Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the /forms/chromium/convert/url and /forms/chromium/screenshot/u…