CVE-2026-49452

WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...

DEBIAN-CVE-2026-49452

WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...

CVE-2026-49452

WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...

UBUNTU-CVE-2026-49452

WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...

actpdf (>=0.1.0, <=0.12.0), agenticmem (>=0.1.4.1, <=0.1.5.0) +182 more potentially affected by CVE-2026-49452 via weasyprint (>=0.28.0, <=68.1.0)

weasyprint PYPI version =0.28.0, =0.1.0, =0.1.4.1, =0.5.0, =0.1.1, =0.1.1, =0.1.0, =0.2.4, =0.1.2, =0.5.0, =1.1.0, =1.2.0 and more Source cves: CVE-2026-49452 Source advisory: MEND:CVE-2026-49452...

openSUSE 16 Security Update : python-weasyprint (openSUSE-SU-2026:21364-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21364-1 advisory. Changes in python-weasyprint: - CVE-2026-49452: CSS Injection via Presentational Hints bsc1270401 Tenable has extracted the preceding description block...

agenticmem (>=0.1.4.1, <=0.1.5.0), biomni-bridge (>=0.3.1, <=0.3.3) +27 more potentially affected by CVE-2026-49452 via weasyprint (66.0.0)

weasyprint PYPI version 66.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - agenticmem =0.1.4.1, =0.3.1, =1.0.1, =0.1.2, =2025.1.0b3, =2026.3.0b2, =1.2.15, =2025.1.0b3, =1.0.3, =0.1.0, =1.59.6rc0, =1.67.5 and more...

coreason-scribe (>=0.1.0, <=0.3.0), django-afip (>=5.0.0, <=14.1.0) +8 more potentially affected by CVE-2026-49452 via weasyprint (67.0.0)

weasyprint PYPI version 67.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - coreason-scribe =0.1.0, =5.0.0, =6.0.0, =0.1.0, =1.3.0, =1.1.7.post1, =1.2.1, =0.1.0, =2.11.0, =2.11.1 Source cves: CVE-2026-49452 Source...

enclose (>=1.0.4, <=1.0.9), pentest-report-generator (>=0.1.4, <=0.1.6) +4 more potentially affected by CVE-2026-49452 via weasyprint (57.2.0)

weasyprint PYPI version 57.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - enclose =1.0.4, =0.1.4, =1.43.1, =1.43.1, =1.43.1, =1.43.1, =1.50.3 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

asrbench (0.1.0), asrbench-cli (0.1.0) +22 more potentially affected by CVE-2026-49452 via weasyprint (62.3.0)

weasyprint PYPI version 62.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - asrbench 0.1.0 - asrbench-cli 0.1.0 - billingyard 1.1.0 - cardtale =0.1.0, =10.0.0, =0.3.4, =0.1.0, =0.10.0, =0.2.2, =0.1.27, =0.1.0, =0.1....

alertwise (1.0.0), md2weasypdf (>=0.0.39, <=0.0.44) +1 more potentially affected by CVE-2026-49452 via weasyprint (63.0.0)

weasyprint PYPI version 63.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - alertwise 1.0.0 - md2weasypdf =0.0.39, =0.0.44 - sampledb 0.30.0 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

body-organ-analysis (>=0.1.0, <=0.1.5), brena (>=0.0.1, <=0.0.2) +30 more potentially affected by CVE-2026-49452 via weasyprint (52.5.0)

weasyprint PYPI version 52.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - body-organ-analysis =0.1.0, =0.0.1, =0.1.0, =22.16.0, =1.0.0, =24.0.0, =1.1.3, =4.2.1, =0.2.1a0, =25.0.13, =1.0.2.post1, =0.0.1, =1.2.1,...

django-freeradius (0.1.0), genalog (>=0.1.0rc4, <=0.1.0) +6 more potentially affected by CVE-2026-49452 via weasyprint (51.0.0)

weasyprint PYPI version 51.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - django-freeradius 0.1.0 - genalog =0.1.0rc4, =0.1.0, =0.0.8, =3.4.0, =0.0.3, =1.0.0, =1.1.1 Source cves: CVE-2026-49452 Source advisory:...

django-easy-quiz (>=4.0.1, <=4.2.0), memfs (>=0.1.6, <=0.1.8) +2 more potentially affected by CVE-2026-49452 via weasyprint (60.1.0)

weasyprint PYPI version 60.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - django-easy-quiz =4.0.1, =0.1.6, =0.1.0, =0.2.1 - proj2pdf 0.1.0 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

python313-weasyprint-69.0-1.1 on GA media (moderate)

python313-weasyprint-69.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11249-1 Rating: moderate Cross-References: CVE-2026-49452 CVSS scores: CVE-2026-49452 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

SUSE CVE-2026-49452

WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...

CVE-2026-49452

creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:11+00:00| published-proof-of-concept| https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-jhhc-3hcp-qhm5...

turandot (>=3.1.4, <=3.1.5) potentially affected by CVE-2026-49452 via weasyprint (56.0.0)

weasyprint PYPI version 56.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - turandot =3.1.4, =3.1.5 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...

asrbench (0.1.0), asrbench-cli (0.1.0) +22 more potentially affected by CVE-2026-49452 via weasyprint (62.3.0)

weasyprint PYPI version 62.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - asrbench 0.1.0 - asrbench-cli 0.1.0 - billingyard 1.1.0 - cardtale =0.1.0, =10.0.0, =0.3.4, =0.1.0, =0.10.0, =0.2.2, =0.1.27, =0.1.0, =0.1....

ai-parrot (>=0.20.3, <=0.23.12), arthexis (>=0.2.4, <=0.11.0) +20 more potentially affected by CVE-2026-49452 via weasyprint (>=68.0.0, <=68.1.0)

weasyprint PYPI version =68.0.0, =0.20.3, =0.2.4, =0.1.2, =0.0.1.dev20250508, =2026.7.4, =1.10.1, =0.3.1, =0.1.0, =1.3.40, =0.1.0, =1.2.4, =0.3.1, =0.3.5 and more Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...