CVE-2025-68616

High

Advisory

Published 19 Jan 2026In the index since 8 Sept 2026

WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
weasyprintpypi	62.3, 67.0	68.0	2
weasyprintdeb	62.3-1	no fix listed	1

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 11 container images this version deploys carry CVE-2025-68616.

Container image	Digest	Package	Fixed in
quay.io/ortelius/ms-sbom-export :main-v10.0.933-g2e222e	f43bdaa51598	weasyprint@67.0	68.0

11,160

1 of the 2 container images this version deploys carry CVE-2025-68616.

Container image	Digest	Package	Fixed in
inventree/inventree :1.5.4	a946ec09da3e	weasyprint@62.3-1 weasyprint@62.3	no fix listed 68.0

5,788

2 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
inventree/inventree :1.5.4	a946ec09da3e	weasyprint@62.3-1 weasyprint@62.3	no fix listed 68.0	1
quay.io/ortelius/ms-sbom-export :main-v10.0.933-g2e222e	f43bdaa51598	weasyprint@67.0	68.0	1