← Database

CVE-2026-35458

CRITICAL CVSS: 9.8 Published: 2026-04-07 Modified: 2026-06-17

Description

Gotenberg is an API for converting document formats. In 8.29.1 and earlier, Gotenberg uses dlclark/regexp2 to compile user-supplied scope patterns without setting a proper timeout. Users with access to features using this logic can hang workers indefinitely.

Affected Platforms

Thecodingmachine Gotenberg

Weakness Type

CWE-1333

References