crates.io/fulgur CVE-2026-68537: high 7.5
Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)
Action: Upgrade fulgur to 0.26.0 or later.
cargo update -p fulgur --precise 0.26.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.26.0 | - |
Fixed versions
| 0.26.0 |
Sources
- osv: RUSTSEC-2026-0201
- https://crates.io/crates/fulgur
- https://rustsec.org/advisories/RUSTSEC-2026-0201.html
- https://github.com/fulgur-rs/fulgur/pull/575
CVE-2026-68537 · published · modified · JSON