[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2OI4rDnvQS3qNn9GY6IuVgZ1OfNgqS1o2JaBv59GpeQ":3,"g5a-ex:google\u002Frendertron@*":88,"g5a-family:google\u002Frendertron":90},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":65,"seoMetadata":66,"meta":85},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"google","rendertron",6,5,0,"2021-02-23",[14,18,20,22,24,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.0",4,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"1.1.0",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"1.1.1",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"2.0.0",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"3.0.0",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.0","Rendertron by Google is a technology product with 6 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34,35],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},[37,45,49,53,59],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":44},"CVE-2017-18354","Rendertron 1.0.0 allows for alternative protocols such as 'file:\u002F\u002F' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker.","2018-12-17",7.5,"v3.0","High",0.01199,{"cveId":46,"description":47,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":48},"CVE-2017-18353","Rendertron 1.0.0 includes an _ah\u002Fstop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.",0.01151,{"cveId":50,"description":51,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":52},"CVE-2017-18355","Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the \"_where\" attribute of package.json files.",0.01089,{"cveId":54,"description":55,"publishedDate":40,"cvssScore":56,"cvssVersion":42,"severity":57,"isKev":17,"epssScore":58},"CVE-2017-18352","Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.",6.1,"Medium",0.00588,{"cveId":60,"description":61,"publishedDate":12,"cvssScore":62,"cvssVersion":63,"severity":57,"isKev":17,"epssScore":64},"CVE-2020-8902","Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are to upgrade your rendertron to version 3.0.0, or, if you cannot update, to secure the infrastructure to limit the headless chrome's access to your internal domain.",4.3,"v3.1",0.00325,[],{"title":67,"metaDescription":68,"keywords":69,"structuredData":70},"Rendertron by Google - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Rendertron by Google covering 6 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rendertron vulnerabilities, Rendertron security, Rendertron CVE, Google Rendertron, Rendertron threat intelligence, Google security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":71,"@type":72,"name":73,"description":68,"url":74,"manufacturer":75,"applicationCategory":79,"softwareVersion":80,"mainEntity":81},"https:\u002F\u002Fschema.org","SoftwareApplication","Rendertron","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fgoogle\u002Frendertron",{"@type":76,"name":77,"url":78},"Organization","Google","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fgoogle","Security Software","6 versions tracked",{"@type":82,"name":83,"description":84,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rendertron Security Vulnerabilities","Security vulnerabilities affecting Rendertron by Google",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":86,"apiVersion":87},"2026-10-28T15:54:58.281Z","3.0",{"rows":89,"total":11,"capped":17,"failed":11},[],[]]