Is CVE-2026-106443 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-106443 being exploited in the wild.

How severe is CVE-2026-106443?

High severity, with a CVSS score of 8.8, published 6 October 2026.

Which products and versions are affected?

Kozea Weasyprint before 70.0; weasyprint (PyPI) <= 69.0, ECOSYSTEM:introduced=0,fixed=70.0.

How is CVE-2026-106443 attacked?

It is attacked over the network.

Am I affected by CVE-2026-106443?

Check whether you run Kozea Weasyprint or weasyprint (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-106443: WeasyPrint arbitrary code execution via EPS image processing

Q: Is there a fix for CVE-2026-106443?

Yes. weasyprint (PyPI): upgrade to 70.0 or later. Until then: Avoid processing untrusted images with WeasyPrint, or uninstall Ghostscript from hosts that process potentially malicious content. Restrict the URL fetcher to filter metadata and stylesheets passed as parameters. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-106443 attacked?

It is attacked over the network.

Q: Am I affected by CVE-2026-106443?

Check whether you run Kozea Weasyprint or weasyprint (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-106443 · Severity: high · CVSS 8.8 · Published 2026-10-06

WeasyPrint is a Python library that converts HTML and CSS into PDF documents. Before version 70.0, it accepted PostScript and EPS image formats without restrictions and passed them to the Pillow image library, which invokes Ghostscript for rendering. On systems with Ghostscript installed, an attacker can embed malicious PostScript code in an image to achieve remote code execution, particularly if Ghostscript has a sandbox bypass vulnerability.

Technologies: Kozea Weasyprint, weasyprint (PyPI). Vendors: Kozea, PyPI.

Quick answers

Is CVE-2026-106443 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-106443 being exploited in the wild.
How severe is CVE-2026-106443?: High severity, with a CVSS score of 8.8, published 6 October 2026.
Which products and versions are affected?: Kozea Weasyprint before 70.0; weasyprint (PyPI) <= 69.0, ECOSYSTEM:introduced=0,fixed=70.0.
Is there a fix for CVE-2026-106443?: Yes. weasyprint (PyPI): upgrade to 70.0 or later. Until then: Avoid processing untrusted images with WeasyPrint, or uninstall Ghostscript from hosts that process potentially malicious content. Restrict the URL fetcher to filter metadata and stylesheets passed as parameters. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-106443 attacked?: It is attacked over the network.
Am I affected by CVE-2026-106443?: Check whether you run Kozea Weasyprint or weasyprint (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

weasyprint (PyPI): upgrade to 70.0 or later
```
pip install "weasyprint>=70.0"
```

Avoid processing untrusted images with WeasyPrint, or uninstall Ghostscript from hosts that process potentially malicious content. Restrict the URL fetcher to filter metadata and stylesheets passed as parameters.

Technical details

The vulnerability exists in weasyprint/images.py, which passes untrusted image bytes from HTML img tags, CSS image properties, SVG references, and data URIs directly to Pillow's generic image dispatcher. Pillow's EpsImagePlugin invokes Ghostscript to rasterize EPS/PostScript images; attackers can craft malicious PostScript to exploit interpreter bugs or sandbox bypasses. The attack requires Ghostscript to be installed on the host and only affects systems that process untrusted images.

Affected products

Kozea WeasyPrint before 70.0

Identifiers

CVE-2026-106443
GHSA-r543-q48m-4c9j
PYSEC-2026-4311

Timeline

2026-10-06: disclosed
2026-09-08: patched: WeasyPrint v70.0 released with fix to reject EPS images

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.