CVE-2026-68539

The fulgur library, which converts HTML/CSS into PDF, is vulnerable to a Denial of Service (DoS) condition in versions 0.4.4 through 0.28.9 . The root cause is that CSS string-set named-string values resolved from a document are accumulated per element without a memory budget . This allows a smal...