Lucene search
+L

1 matches found

RustSec
RustSec
added 2026/07/05 12:00 p.m.18 views

Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...

7.5CVSS6.1AI score0.00339EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder