Fulgur-rs vulnerabilities
We track 5 vulnerabilities in Fulgur-rs products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest Fulgur-rs vulnerabilities
- 7.5 High severity
fulgur: Uncontrolled Resource Consumption
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-
- 7.5 High severity
fulgur: Uncontrolled Resource Consumption
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no m
- 7.5 High severity
fulgur: Uncontrolled Resource Consumption
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.15.0 to before version 0.27.0, resolving the CSS counters(name, sep) function in generated content was bounded neither in the size o
- 7.5 High severity
fulgur: Uncontrolled Resource Consumption
`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page
- 7.5 High severity
fulgur: Uncontrolled Resource Consumption
`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page