一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-71270 [HIGH] – Stirling-PDF’s POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not up

未分类
📑 文章目录

Stirling-PDF’s POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints (html/pdf, file/pdf, markdown/pdf).