CVE-2026-49452

Summary

WeasyPrint has CSS Injection via Presentational Hints

Severity

medium

CVSS

6.5

EPSS

0.3% (p20)

CWE

CWE-74

Also known as

GHSA-jhhc-3hcp-qhm5

Published

2026-07-06

Updated

2026-07-06

Advisory details

Summary

A CSS injection issue exists in WeasyPrint when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS, allowing injection of arbitrary CSS declarations. This affects applications processing untrusted HTML input.

Details

File: weasyprint/css/init.py

The background attribute is used to construct CSS:

background-image:url({element.get("background")})

This string is parsed by tinycss2.parse_blocks_contents().

Because the value is not escaped, additional CSS declarations can be injected.

PoC

Impact

• CSS injection
• Server-side requests via injected url()
• Limited to cases where presentational_hints=True

Suggested Fix

• Escape attribute values before embedding into CSS
• Restrict allowed values for presentational hints VULN-05_css_injection_presentational_hints.md

References

• https://github.com/advisories/GHSA-jhhc-3hcp-qhm5
• https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-jhhc-3hcp-qhm5

Related advisories

• CVE-2025-68616 — high · PyPI/weasyprint
• CVE-2026-55073 — medium · PyPI/weasyprint
• CVE-2026-54680 — critical · Go/github.com/kube-logging/logging-operator
• CVE-2026-54159 — critical · Packagist/prestashop/ps_facetedsearch
• CVE-2026-55615 — critical · PyPI/langroid
• CVE-2025-32711 — critical · Microsoft Copilot/Microsoft 365 Copilot
• CVE-2023-29374 — critical · LangChain/langchain
• GHSA-c7hr-448w-65px — high · npm/meshcentral

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity