CVE-2026-49452: falha de média gravidade em Kozea WeasyPrint
WeasyPrint: CSS Injection via Presentational Hints
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.4%
WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/__init__.py when presentational_hints=True. The background attribute is inserted into a background-image:url() declaration and parsed by tinycss2.parse_blocks_contents(), allowing untrusted HTML to inject additional CSS declarations. Applications that render untrusted HTML with presentational hints enabled can be affected by CSS injection and server-side requests through injected url() values. This issue is fixed in version 69.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Kozea · WeasyPrintCVEs relacionadas — Kozea WeasyPrint
No mesmo produto, das mais perigosas para as menos.
CVE-2026-106443HIGHWeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCEEPSS 0.9%CVE-2024-28184HIGHWeasyPrint allows the attachment of arbitrary files and URLs to a PDFEPSS 0.7%CVE-2025-68616HIGHWeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP RedirectEPSS 0.7%CVE-2026-55073MEDIUMWeasyPrint restrictive URL fetcher bypass allows local file read and SSRFEPSS 0.2%