fulgur-rs fulgur vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 7.5CVE-2026-68540EPSS 0.6%2026-11-11

   fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolute…

2. 7.5CVE-2026-68539EPSS 0.7%2026-11-11

   fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated …

3. 7.5CVE-2026-68538EPSS 0.6%2026-11-11

   fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS counters(name, sep) function in generated content was bounded …

4. 7.5CVE-2026-68537EPSS 0.6%2026-09-17

   `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into o…

5. 7.5CVE-2026-68523EPSS 0.6%2026-09-17

   `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into o…