Skip to content

2.5.1

Choose a tag to compare

@endelwar endelwar released this 25 May 08:32
· 14 commits to develop since this release

Security

  • Fix potential shell-command injection through the WeasyPrint binary path: buildCommand() now verifies the binary is executable on the unescaped path and shell-escapes it before use
  • Update symfony/process minimal version to mitigate CVE-2026-24739