p PatchFirst

CVE-2026-49358

CVE-2026-49358 · PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `AbstractGenerator::$temporaryFiles` is a public array, and `removeTemporaryFiles()` — invoked from `__destruct()` and from a registered shutdown function — calls `unlink()` on every entry without verifying that the path is contained within the temporary folder. Any code holding a reference to a generator instance can push an arbitrary path into the array and have it deleted on script shutdown. This mirrors the KnpLabs/snappy issue GHSA-87qc-37cw-84h4. PhpWeasyPrint version 2.6.0 contains a patch for the issue.

CVSS 3.0 · Baja · EPSS 0,2% · Corrección disponible

Publicación
Actualización

Pila tecnológica: php

Productos y versiones afectados

  • php-weasyprint

    Versiones
    • < 2.6.0: Afectada

    Sin corrección publicada

  • pontedilana/php-weasyprint Packagist

    Versiones
    • 0.10.0
    • 0.10.1
    • 0.11.0
    • 0.12.0
    • 0.13.0
    • 0.9.0
    • 1.0.0
    • 1.0.1
    • 1.1.0
    • 1.1.1
    • 1.2.0
    • 1.3.0
    • 1.4.0
    • 1.5.0
    • 2.0.0
    • 2.1.0
    • 2.2.0
    • 2.3.0
    • 2.4.0
    • 2.5.0
    • 2.5.1
    Intervalos de versiones afectados
    • ECOSYSTEM: < 2.6.0

    Actualiza a 2.6.0

Fuentes originales

Comprueba tu servidor →