Detections
Analytics

SCA: security update for WeasyPrint (GHSA-r543-q48m-4c9j)

high Tenable Cloud Security Plugin ID 473650

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in
 weasyprint/images.py passes fetched image bytes from HTML img URLs, CSS image values, SVG image
 references, and data URIs to Pillow's generic image dispatcher without excluding EPS or PostScript
 formats. On hosts with Ghostscript installed, Pillow EpsImagePlugin invokes the interpreter for attacker-
 controlled PostScript, which can produce interpreter-permitted effects and can lead to remote code
 execution when the installed Ghostscript version has a usable sandbox bypass. Hosts without Ghostscript do
 not reach this rasterization path. This issue is fixed in version 70.0. (CVE-2026-106443)

Solution

Update the WeasyPrint library and its related packages to version 70.0 or later.

See Also

https://github.com/advisories/GHSA-r543-q48m-4c9j

Plugin Details

Severity: High

ID: 473650

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/7/2026

Updated: 10/7/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.41

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-106443

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/7/2026

Vulnerability Publication Date: 10/6/2026

Reference Information

CVE: CVE-2026-106443

cwe: CWE-20