Threat database

CVE-2026-106443 is a high-severity remote code execution vulnerability in Kozea WeasyPrint that arises from improper input validation. WeasyPrint passes untrusted image bytes directly to Pillow's format dispatcher without restricting input formats. When Ghostscript is installed on the host, Pillow's EPS image plugin invokes Ghostscript to rasterize EPS/PS input, allowing attacker-controlled PostScript to execute. Hosts running vulnerable Ghostscript versions with known -dSAFER bypasses can be fully compromised. The vulnerability affects WeasyPrint versions prior to 70.0 and impacts any deployment rendering untrusted content on hosts with Ghostscript installed.

CVE-2026-55073 is a Server-Side Request Forgery (SSRF) vulnerability in Kozea WeasyPrint versions prior to 70.0. It allows an attacker to bypass restrictive URL fetcher configurations by exploiting the xmp_metadata or stylesheets options, potentially reading local files and embedding them in generated PDFs. This issue is fixed in version 70.0.

### Summary A CSS injection issue exists in WeasyPrint when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS, allowing injection of arbitrary CSS declarations. This affects applications processing untrusted HTML input. ### Details File: weasyprint/css/__init__.py The `background` attribute is used to construct CSS: background-image:url({element.get("background")}) This string is parsed by `tinycss2.parse_blocks_contents()`. Because the value is not escaped, additional CSS declarations can be injected. ### PoC <body background="x);background-image:url(http://169.254.169.254/latest/meta-data/)"> ### Impact - CSS injection - Server-side requests via injected `url()` - Limited to cases where `presentational_hints=True` ### Suggested Fix - Escape attribute values before embedding into CSS - Restrict allowed values for presentational hints [VULN-05_css_injection_presentational_hints.md](https://github.com/user-attachments/files/26370718/VULN-05_css_injection_presentational_hints.md)

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `default_url_fetcher`. The vulnerability allows attackers to access internal network resources (such as `localhost` services or cloud metadata endpoints) even when a developer has implemented a custom `url_fetcher` to block such access. This occurs because the underlying `urllib` library follows HTTP redirects automatically without re-validating the new destination against the developer's security policy. Version 68.0 contains a patch for the issue.