BentoPDF

bentopdf.com
BentoPDF

A self-hosted toolkit for simple and advanced operations to edit, sign and prepare your PDF files from within your browser. All processing happens locally on your device.

Open Source

BentoPDF Source Code

Author

alam00000

Description

The Privacy First PDF Toolkit

#adobe-acrobat#docker#hacktoberfest#javascript#jpgtopdf#pdf#pdf-converter#pdf-editor#pdf-generation#pdf-ocr#pdf-tools#pdf-viewer#pdf-viewer-component#pdffiller#pdfjs#privacy#self-hosted#self-hosting#toolkit#typescript

Homepage

https://bentopdf.com/

Repository

  • LicenseAGPL-3.0
  • Created12 Oct 25
  • Primary languageJavaScript
  • Size303,345 KB
  • Stars16,354
  • Forks1,457
  • Watchers16,354

Language Usage

Language Usage

Project Health

  • Last commit3 hours ago
  • Open issues165
  • Latest releasev2.8.11

Recent Commits

  • Alam(09 Nov 26)

    Merge pull request #978 from alam00000/chore/update-sponsors docs: update sponsors

  • alam00000(09 Nov 26)

    docs: update sponsors

  • alam00000(08 Nov 26)

    update terms for hyper and kura

  • alam00000(08 Nov 26)

    fix(workflow): pass wasmUrl to pdf.js so JPEG2000 pages stop rendering blank, and fix Remove Blank Pages node failing on every PDF

  • Alam(06 Nov 26)

    Merge pull request #942 from alam00000/dependabot/npm_and_yarn/i18next-http-backend-4.0.4 build(deps): bump i18next-http-backend from 4.0.2 to 4.0.4

  • alam00000(04 Nov 26)

    Add Vultr logo to sponsors section in README

  • alam00000(04 Nov 26)

    Apply landing redesign styles to simple mode homepage

  • alam00000(03 Nov 26)

    Tighten commercial license terms and Hyper Compress bundle conditions

  • alam00000(02 Nov 26)

    Host funding manifest on bentopdf.com for FLOSS/fund

  • alam00000(02 Nov 26)

    Add funding.json and funding manifest URL for project sponsorship

  • alam00000(31 Oct 26)

    Release v2.8.11

  • Alam(31 Oct 26)

    Merge pull request #919 from kelseyjmw/fix-crop-scroll Fix crop scroll

  • alam00000(31 Oct 26)

    revert ICLA.md changes

  • alam00000(31 Oct 26)

    add support for GFM inline math delimiters

  • Alam(31 Oct 26)

    Merge pull request #964 from alam00000/chore/update-pdf-engine build(deps): bump PDF engine and viewer to 3f6b6114b166

  • alam00000(31 Oct 26)

    build(deps): bump PDF engine and viewer to 3f6b6114b166

  • Alam(31 Oct 26)

    Merge pull request #953 from alam00000/dependabot/npm_and_yarn/follow-redirects-1.16.2 build(deps): bump follow-redirects from 1.16.1 to 1.16.2

  • Alam(31 Oct 26)

    Merge pull request #950 from PeterDaveHello/zh-TW Improve Traditional Chinese (zh-TW) translations

  • alam00000(31 Oct 26)

    Merge branch 'main' into zh-TW

  • Alam(31 Oct 26)

    Merge pull request #961 from alam00000/ads-checkout Ads checkout

  • alam00000(31 Oct 26)

    feat(ads): update ad review timeline

  • alam00000(31 Oct 26)

    feat(ads): collect ad details at Dodo checkout

  • Alam(30 Oct 26)

    Merge pull request #960 from alam00000/chore/update-pdf-engine build(deps): bump PDF engine and viewer to 1b5d842415eb

  • alam00000(30 Oct 26)

    build(deps): bump PDF engine and viewer to 1b5d842415eb

  • alam00000(30 Oct 26)

    docs(i18n): translate the new Multi Tool FAQ and docs

  • alam00000(30 Oct 26)

    feat(multi-tool): replace the page grid with the pdfium organizer

  • alam00000(30 Oct 26)

    feat(editor): match the viewer theme to the site colors

  • alam00000(30 Oct 26)

    docs(docker): list the measurement feature IDs

  • Alam(30 Oct 26)

    Merge pull request #959 from alam00000/chore/update-pdf-engine build(deps): bump PDF engine and viewer to 938c717a91e3

  • alam00000(30 Oct 26)

    build(deps): bump PDF engine and viewer to 938c717a91e3

BentoPDF Security

Security Advisories (6)

  • mediumPatchedCVSS 6.8

    GHSA-v77x-cvmx-ggp4Service worker cache poisoning: a crafted edit-pdf-text link replaces same-origin worker scripts

  • mediumPatchedCVSS 4.3

    GHSA-qch9-77q9-j7p6Annotation PDF viewer loads cross-origin PDFs and hash-supplied fetch/exfil URLs with no origin check (CWE-346.)

  • mediumPatchedCVSS 6.8

    CVE-2026-102354SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker

  • mediumPatched

    CVE-2026-77581SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass

  • lowPatchedCVSS 3.4

    CVE-2026-63630Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests

  • highPatched

    CVE-2026-41653Stored XSS in BentoPDF

BentoPDF Docker

Container Info

bentopdf

PDF toolkit that runs in your browser, so files never leave your machine. Merge, split, compress, convert, sign and edit. Source: https://github.com/alam00000/bentopdf

#Documents#Tools

Run Command

docker run -d \
  -p 8090:8080/tcp \
  --restart=unless-stopped \
  ghcr.io/alam00000/bentopdf-simple:latest

Compose File

version: 3.8
services:
  bentopdf:
    image: "ghcr.io/alam00000/bentopdf-simple:latest"
    ports:
      - "8090:8080/tcp"
    restart: unless-stopped

Port List

  • 8090:8080/tcp

BentoPDF Socials

BentoPDF Reviews

More Document Tools

⚠️ This section is still a work in progress ⚠️
Check back soon, or help us complete it by submiting a pull request on GitHub.
Or submit an entry here

About the Data: BentoPDF

Change History

Edit BentoPDF Data

You can edit BentoPDF's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

API

You can access BentoPDF's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/bentopdf

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share BentoPDF

Help your friends compare Document Tools, and pick privacy-respecting software and services.
Share BentoPDF and Awesome Privacy with your network!