https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T14:47:28.175925+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-68539 CVE-2026-68539 — fulgur: Unbounded string-set value accumulation causes memory/CPU exhaustion (denial of service) 2026-11-13T14:47:28.177078+00:00

Affected: fulgur-rs fulgur

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no memory budget, letting a small crafted document amplify into large retained memory (and the CPU to copy it) — results in a denial of service. This issue has been patched in version 0.29.0.