WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF (CVE-2026-55073) | HOL Guard CVE

Medium · CVSS 6.2CVE-2026-55073GHSA-JF6Q-CHMF-3H3V

WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF

Answer in brief

CVE-2026-55073 records a Medium severity (CVSS 6.2) vulnerability in WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF. The current sources do not mark it as known exploited. The current feed maps Kozea/WeasyPrint (generic), weasyprint (pip), weasyprint (pypi). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 14, 2026Updated Sep 14, 2026Source checked Sep 14, 2026First seen by HOL Sep 9, 2026Material review Sep 14, 2026

Upstream Advisory

Key facts

Risk: Medium · CVSS 6.2
Exploitation: Not marked as known exploited
Affected software: 3 mapped packages or products
Fix availability: Available

Why this deserves its current priority

CVSS is 6.2. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Kozea/WeasyPrint (generic), weasyprint (pip), weasyprint (pypi). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Kozea/WeasyPrintgeneric	< 70.0	Not reported
weasyprintpip	<70.0	70.0
weasyprintpypi	>=0 <70.0	70.0

Recommended response

Check inventory. Check lockfiles and deployed manifests for Kozea/WeasyPrint, weasyprint, weasyprint.
Review the reported fix. Update weasyprint to 70.0; weasyprint to 70.0 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 14, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 14, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 9, 2026

Sources and claim methodology

Upstream source description

WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher and pass attacker-influenced values to HTML.write_pdf() can have the restriction bypassed through the xmp_metadata or stylesheets options. In weasyprint/pdf/init.py, xmp_metadata calls select_source() without the document url_fetcher, allowing an accessible local file to be read and embedded verbatim in the output PDF. In weasyprint/document.py, stylesheets constructs CSS() without the document url_fetcher, allowing local or internal resource loading and propagating the permissive fetcher through nested CSS imports and url() references. The stylesheets channel applies fetched resources but does not by itself disclose stylesheet comments verbatim. This issue is fixed in version 70.0.

Quoted source text, attributed separately from HOL analysis.