blob: 5e8cc4b78ff73e730d842ba1e1a52cb104580a1e [file]
id: GO-2026-5669
modules:
- module: github.com/gotenberg/gotenberg/v7
vulnerable_at: 7.10.2
- module: github.com/gotenberg/gotenberg/v8
versions:
- introduced: 8.10.0
- fixed: 8.33.0
vulnerable_at: 8.32.0
summary: Gotenberg has a Race Condition via Multipart `downloadFrom` Handling in github.com/gotenberg/gotenberg
cves:
- CVE-2026-45742
ghsas:
- GHSA-vp73-vjw8-8f32
references:
- advisory: https://github.com/gotenberg/gotenberg/security/advisories/GHSA-vp73-vjw8-8f32
- web: https://github.com/gotenberg/gotenberg/releases/tag/v8.33.0
source:
id: GHSA-vp73-vjw8-8f32
created: 2026-06-25T15:46:23.398567416-04:00
review_status: UNREVIEWED