| id: GO-2024-2996 |
| modules: |
| - module: github.com/gotenberg/gotenberg/v7 |
| vulnerable_at: 7.10.2 |
| - module: github.com/gotenberg/gotenberg/v8 |
| versions: |
| - fixed: 8.1.0 |
| vulnerable_at: 8.0.3 |
| summary: CVE-2024-21527 in github.com/gotenberg/gotenberg |
| cves: |
| - CVE-2024-21527 |
| credits: |
| - Filip Ochnik |
| references: |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-21527 |
| - fix: https://github.com/gotenberg/gotenberg/commit/ad152e62e5124b673099a9103eb6e7f933771794 |
| - web: https://gist.github.com/filipochnik/bc88a3d1cc17c07cec391ee98e1e6356 |
| - web: https://github.com/gotenberg/gotenberg/releases/tag/v8.1.0 |
| - web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGGOTENBERG-7537081 |
| - web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESCHROMIUM-7537082 |
| - web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESWEBHOOK-7537083 |
| source: |
| id: CVE-2024-21527 |
| created: 2024-07-23T17:00:15.373291-04:00 |
| review_status: UNREVIEWED |
