Product
Gotenberg versions 8.31.0 through 8.37.x contain a server-side request forgery vulnerability in the IsPublicIP function, allowing unauthenticated attackers to bypass private IP restrictions via IPv6 zone identifiers to access internal network services.