PT-2026-29948 · Go · Github.Com/Gotenberg/Gotenberg/V7+1

Published 2026-04-02 · Updated 2026-04-02

OSV

Gotenberg has Chromium deny-list bypass via case-insensitive URL scheme (bypass of GHSA-rh2x-ccvw-q7r3) in github.com/gotenberg/gotenberg

Related Identifiers

GO-2026-4905

Affected Products

Github.Com/Gotenberg/Gotenberg/V7

Github.Com/Gotenberg/Gotenberg/V8

References · 6

• https://osv.dev/vulnerability/GO-2026-4905 · Vendor Advisory
• https://github.com/gotenberg/gotenberg/releases/tag/v8.29.0 · Note
• https://github.com/gotenberg/gotenberg/commit/06b2b2e10c52b58135edbfe82e94d599eb0c5a11 · Note
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rh2x-ccvw-q7r3 · Note
• https://github.com/gotenberg/gotenberg/commit/8625a4e899eb75e6fcf46d28394334c7fd79fff5 · Note
• https://github.com/gotenberg/gotenberg/security/advisories/GHSA-jjwv-57xh-xr6r · Note