Vendor
fulgur-rs
5 known vulnerabilities.
Products
5 results · Clear filters · Feed
-
High 7.5
fulgur: Quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements causes denial of servicefulgur:
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.6.0 to before version 0.33.0, quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo…
-
High 7.5
fulgur: Unbounded string-set value accumulation causes memory/CPU exhaustion (denial of service)
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From version 0.4.4 to before version 0.29.0, the CSS string-set named-string values resolved from a document were accumulated per element with no …
-
High 7.5
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. From v…
-
High 7.5
Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service
`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page…
-
High 7.5
Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service
`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page…