CVE-2026-55073

Name	CVE-2026-55073
Description	WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher and pass attacker-influenced values to HTML.write_pdf() can have the restriction bypassed through the xmp_metadata or stylesheets options. In weasyprint/pdf/init.py, xmp_metadata calls select_source() without the document url_fetcher, allowing an accessible local file to be read and embedded verbatim in the output PDF. In weasyprint/document.py, stylesheets constructs CSS() without the document url_fetcher, allowing local or internal resource loading and propagating the permissive fetcher through nested CSS imports and url() references. The stylesheets channel applies fetched resources but does not by itself disclose stylesheet comments verbatim. This issue is fixed in version 70.0.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1148178

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
weasyprint (PTS)	bookworm	57.2-1	vulnerable
	trixie	62.3-1	vulnerable
	forky, sid	69.0-2	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
weasyprint	source	(unstable)	(unfixed)			1148178

Notes

[trixie] - weasyprint <no-dsa> (Minor issue)
[bookworm] - weasyprint <postponed> (Minor issue)
https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-jf6q-chmf-3h3v
https://github.com/Kozea/WeasyPrint/commit/289e278439b017cd9263b4cd4727026987f86443 (v70.0)