Unbounded Slicing in Fulgur due to Untrusted HTML/CSS Processing

CVE-2026-68537

What is CVE-2026-68537?

The vulnerability arises from the improper handling of untrusted HTML and CSS when converting documents into PDF format in Fulgur. In affected versions prior to 0.19.0, if the CSS-resolved height of a body-direct child exceeds the page height, this could cause the document to be split into an excessive number of fragments without a defined limit. This issue has been addressed in version 0.19.0, which introduces a MAX_PAGES cap that bounds the slicing process even in cases of infinite height inputs. Additionally, layout heights that are non-finite are now sanitized to prevent exploitation of this vulnerability. Users are advised to validate or constrain height-related CSS properties before processing untrusted HTML to ensure enhanced security.

References