CVE-2026-106443

{
  "etk_id": "ETK-2026-797",
  "cve_id": "CVE-2026-106443",
  "display_id": "CVE-2026-106443",
  "ghsa_id": "GHSA-r543-q48m-4c9j",
  "euvd_id": "EUVD-2026-93668",
  "status": "published",
  "anchor_state": "anchored",
  "title": "PostScript image processing injection in WeasyPrint",
  "summary": "WeasyPrint versions earlier than 70.0 can process attacker-controlled EPS or PostScript images embedded through supported document image sources. On hosts with Ghostscript installed, an attacker who can supply content for conversion may cause Ghostscript to run untrusted PostScript, potentially leading to code execution if Ghostscript can be sandbox-bypassed.",
  "mitigation": "Upgrade WeasyPrint to version 70.0 or later. Until upgraded, prevent untrusted documents or image inputs from reaching conversion jobs and remove or restrict Ghostscript where operationally feasible.",
  "vendor": "Kozea",
  "product": "WeasyPrint",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 69.0"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        ">= 70.0"
      ],
      "package_name": "WeasyPrint",
      "purl": "pkg:pypi/WeasyPrint"
    }
  ],
  "cwes": [
    20
  ],
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0069,
  "epss_percentile": 0.5195,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "mechanism_verified",
  "exploit": false,
  "pipeline_minutes": 18.325700916666666,
  "t0_at": "2026-10-06T18:57:43.477000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-06T19:44:08.476425+00:00",
      "days": 0.03223378964120371,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T18:57:43.477000+00:00",
      "url": null
    },
    "public_poc": {
      "at": "2026-10-07T18:05:49+00:00",
      "days": 0.9639528125,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T18:57:43.477000+00:00",
      "url": "https://github.com/advisories/GHSA-r543-q48m-4c9j"
    },
    "trigger_signal": {
      "at": "2026-10-06T18:57:43.477000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T18:57:43.477000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106443"
    }
  }
}