{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3axhtml2pdfxhtml2pdf/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:xhtml2pdf:xhtml2pdf:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-110642"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["xhtml2pdf (\u003c 0.2.19)"],"_cs_severities":["high"],"_cs_tags":["command-injection","vulnerability","rce"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe xhtml2pdf Python library contains an OS command injection vulnerability in the pisa.startViewer() function, tracked as CVE-2026-110642. The vulnerability arises from improper sanitization of file names when using the -s or --start-viewer command-line arguments. Specifically, the pisa.startViewer() function utilizes the os.system() call to process file paths, which allows for the interpolation of shell metacharacters and double quotes. An attacker who can influence the filename provided to the tool can escape the intended context and execute arbitrary OS commands with the privileges of the user running the xhtml2pdf utility. This flaw affects all versions of xhtml2pdf prior to 0.2.19. Defenders should identify applications or automation pipelines that utilize this library and upgrade to version 0.2.19 or later immediately.\u003c/p\u003e\n","date_modified":"2026-10-14T16:37:53Z","date_published":"2026-10-14T16:37:53Z","id":"https://feed.craftedsignal.io/briefs/2026-10-xhtml2pdf-command-injection/","summary":"The xhtml2pdf library before version 0.2.19 contains an OS command injection vulnerability in the pisa.startViewer() function allowing arbitrary command execution via crafted filenames.","title":"OS Command Injection in xhtml2pdf","url":"https://feed.craftedsignal.io/briefs/2026-10-xhtml2pdf-command-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:xhtml2pdf:xhtml2pdf:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}