PT-2026-145541

CVE-2026-68540

Published

2026-11-11

Updated

2026-11-11

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions fulgur versions 0.6.0 through 0.32.x

Description Quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements can lead to a denial of service. This occurs when the software converts untrusted HTML/CSS into PDF, typically on servers processing input from multiple tenants.

Recommendations Update to version 0.33.0.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-405: Asymmetric Resource Consumption (Amplification)

CWE-400: Uncontrolled Resource Consumption

Related identifiers

CVE-2026-68540