CVE-2026-68539

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no memory budget, letting a small crafted...

CVE-2026-68538

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

CVE-2026-68540

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. Thi...

CVE-2026-68540 fulgur: Quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements causes denial of servicefulgur:

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. Thi...

CVE-2026-68540

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. Thi...

EUVD-2026-124057

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. Thi...

CVE-2026-68540

The fulgur library, which converts HTML/CSS into PDF, is vulnerable to a denial of service (DoS) attack due to quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements. This issue affects versions 0.6.0 up to, but before, 0.33.0 . The vulnerab...

CVE-2026-68540 fulgur: Quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements causes denial of servicefulgur:

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. Thi...

CVE-2026-68539

The fulgur library, which converts HTML/CSS into PDF, is vulnerable to a Denial of Service (DoS) condition in versions 0.4.4 through 0.28.9 . The root cause is that CSS string-set named-string values resolved from a document are accumulated per element without a memory budget . This allows a smal...

CVE-2026-68539 fulgur: Unbounded string-set value accumulation causes memory/CPU exhaustion (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no memory budget, letting a small crafted...

EUVD-2026-124056

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no memory budget, letting a small crafted...

CVE-2026-68539 fulgur: Unbounded string-set value accumulation causes memory/CPU exhaustion (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no memory budget, letting a small crafted...

CVE-2026-68539

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no memory budget, letting a small crafted...

EUVD-2026-124055

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

CVE-2026-68538 fulgur: Unbounded counters() expansion in generated content causes memory/CPU exhaustion (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

CVE-2026-68538

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

CVE-2026-68538

The fulgur library, used to convert HTML/CSS to PDF, is vulnerable to a Denial of Service (DoS) attack in versions 0.15.0 to before 0.27.0 . The root cause is the lack of bounds on the CSS counters(name, sep) function expansion, neither for single expansions nor aggregate work across an element t...

CVE-2026-68538 fulgur: Unbounded counters() expansion in generated content causes memory/CPU exhaustion (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

PT-2026-145539

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS countersname, sep function in generated content was bounded neither in the size of a single expansion nor in the aggrega...

PT-2026-145541

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements cause denial of service. Thi...