Stirling-PDF’s POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints (html/pdf, file/pdf, markdown/pdf).
2026年9月4日
CVE-2026-71270 [HIGH] – Stirling-PDF’s POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not up
📑 文章目录



