Vulnerability DatabaseCVE-2020-14161

CVE-2020-14161:
Chainguard vulnerability analysis and mitigation

It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /convert/html endpoint.

Source: NVD

Related Chainguard vulnerabilities:

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-62593	CRITICAL	9.4	Chainguard	ray	No	Yes	Nov 26, 2025
CVE-2025-66031	HIGH	8.7	JavaScript	opensearch-dashboards-2-fips	No	Yes	Nov 26, 2025
CVE-2025-66201	HIGH	8.6	Chainguard	librechat	No	Yes	Nov 29, 2025
CVE-2025-66030	MEDIUM	6.3	JavaScript	kubeflow-pipelines	No	Yes	Nov 26, 2025
CVE-2025-3261	MEDIUM	6.2	Java	thingsboard	No	Yes	Nov 27, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."

David EstlickCISO

"Wiz provides a single pane of glass to see what is going on in our cloud environments."

Adam FletcherChief Security Officer

"We know that if Wiz identifies something as critical, it actually is."

Greg PoniatowskiHead of Threat and Vulnerability Management