Boletines de Vulnerabilidades

CVE-2026-36576

   
Software afectado DOCKER
 
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-36576