<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: stirling-tools-stirling-pdf</title><description>Every new CVE for stirling-tools-stirling-pdf.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119343: Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read</title><link>https://agentprime.io/advisories/CVE-2026-119343/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119343/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 20:31:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119342: Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass</title><link>https://agentprime.io/advisories/CVE-2026-119342/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119342/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 20:28:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-113606: Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders</title><link>https://agentprime.io/advisories/CVE-2026-113606/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-113606/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:40:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-113605: Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database</title><link>https://agentprime.io/advisories/CVE-2026-113605/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-113605/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:40:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85714: Stirling-PDF: Remote Code Execution via H2</title><link>https://agentprime.io/advisories/CVE-2026-85714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85714/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 18:22:21 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-57485: Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-57485/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57485/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 19:31:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33437: Stirling PDF: Stored XSS in Info Summary</title><link>https://agentprime.io/advisories/CVE-2026-33437/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33437/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 17:58:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71270: Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess</title><link>https://agentprime.io/advisories/CVE-2026-71270/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71270/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 12:26:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41580: Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author)</title><link>https://agentprime.io/advisories/CVE-2026-41580/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41580/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jul 2026 14:56:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33436: Stirling-PDF: Reflected XSS through crafted filename in file upload functionality</title><link>https://agentprime.io/advisories/CVE-2026-33436/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33436/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Apr 2026 20:29:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34071: Stirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML Export</title><link>https://agentprime.io/advisories/CVE-2026-34071/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34071/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 17:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33438: Stirling-PDF vulnerable to DoS via add-watermark</title><link>https://agentprime.io/advisories/CVE-2026-33438/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33438/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 16:58:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27625: Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction</title><link>https://agentprime.io/advisories/CVE-2026-27625/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27625/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 08:44:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55161: Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf</title><link>https://agentprime.io/advisories/CVE-2025-55161/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55161/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Aug 2025 22:28:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55150: Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf</title><link>https://agentprime.io/advisories/CVE-2025-55150/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55150/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Aug 2025 21:57:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55151: Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf</title><link>https://agentprime.io/advisories/CVE-2025-55151/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55151/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Aug 2025 21:56:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46568: Stirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-46568/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46568/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 May 2025 17:20:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-52286: Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF</title><link>https://agentprime.io/advisories/CVE-2024-52286/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-52286/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Nov 2024 19:14:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-9075: Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting</title><link>https://agentprime.io/advisories/CVE-2024-9075/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9075/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 21 Sep 2024 23:00:06 GMT</pubDate><category>CVE</category></item></channel></rss>