fulgur-rs CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH fulgur-rs CVE published 2026-09-17

CVE-2026-68523

A vulnerability in `fulgur`, a library that converts untrusted HTML/CSS into PDF, can cause a denial of service when processing input supplied by multiple tenants. The issue, fixed in version 0.19.0, arises from unbounded slicing of content with excessively large CSS-resolved heights. Users should validate or constrain untrusted CSS, especially `height` and `vh` properties on body-level elements, before p [truncated]