—

GO-2026-5587

Gotenberg has incomplete fix for ExifTool arbitrary file write: case-insensitive bypass and missing HardLink/SymLink tags in github.com/gotenberg/gotenberg

Details

Gotenberg has incomplete fix for ExifTool arbitrary file write: case-insensitive bypass and missing HardLink/SymLink tags in github.com/gotenberg/gotenberg

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/gotenberg/gotenberg/v7

Introduced in: 0

No fixed version published yet for github.com/gotenberg/gotenberg/v7 (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/gotenberg/gotenberg/v8

Introduced in: 0 Fixed in: 8.30.0

Fix go get github.com/gotenberg/gotenberg/v8@v8.30.0

References

https://github.com/gotenberg/gotenberg/security/advisories/GHSA-qmwh-9m9c-h36m [ADVISORY]
https://github.com/gotenberg/gotenberg/commit/15050a311b73d76d8b9223bafe7fa7ba71240011 [WEB]