VDB
KO

GO-2026-5244

Gotenberg has an SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes in github.com/gotenberg/gotenberg

Details

Gotenberg has an SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes in github.com/gotenberg/gotenberg

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/gotenberg/gotenberg/v7
Introduced in: 0

No fixed version published yet for github.com/gotenberg/gotenberg/v7 (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/gotenberg/gotenberg/v8
Introduced in: 0

No fixed version published yet for github.com/gotenberg/gotenberg/v8 (go modules). Pin to a known-safe version or switch to an alternative.

References