CVE-2020-14161: Thecodingmachine Gotenberg

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /convert/html endpoint.

Affected products

• Thecodingmachine Gotenberg: up to and including 6.2.1

Published 2021-08-26. Last modified 2026-06-17.