Is CVE-2026-49452 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-49452 being exploited in the wild.

How severe is CVE-2026-49452?

Medium severity, with a CVSS score of 6.5, published 6 July 2026.

Which products and versions are affected?

Kozea Weasyprint <= 68.1; weasyprint (PyPI) ECOSYSTEM:introduced=0,last_affected=68.1.

Is there a fix for CVE-2026-49452?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-49452 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-49452?

Check whether you run Kozea Weasyprint or weasyprint (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-49452: Kozea WeasyPrint CSS injection in presentational hints

Q: Which products and versions are affected?

Kozea Weasyprint <= 68.1; weasyprint (PyPI) ECOSYSTEM:introduced=0,last_affected=68.1.

Q: Is there a fix for CVE-2026-49452?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-49452 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-49452?

Check whether you run Kozea Weasyprint or weasyprint (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-49452 · Severity: medium · CVSS 6.5 · Published 2026-07-06

WeasyPrint, a tool used to convert HTML and CSS into PDF documents, contains a vulnerability when processing certain HTML attributes. If an application uses WeasyPrint to process untrusted user content, an attacker could inject malicious styling instructions. This can be used to trigger unauthorized network requests from the server, potentially exposing internal metadata or other sensitive information.

Technologies: Kozea Weasyprint, weasyprint (PyPI). Vendors: Kozea, PyPI.

Quick answers

Is CVE-2026-49452 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-49452 being exploited in the wild.
How severe is CVE-2026-49452?: Medium severity, with a CVSS score of 6.5, published 6 July 2026.
Which products and versions are affected?: Kozea Weasyprint <= 68.1; weasyprint (PyPI) ECOSYSTEM:introduced=0,last_affected=68.1.
Is there a fix for CVE-2026-49452?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-49452 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-49452?: Check whether you run Kozea Weasyprint or weasyprint (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A CSS injection vulnerability exists in WeasyPrint's 'presentational hints' feature, specifically within 'weasyprint/css/__init__.py'. When 'presentational_hints=True' is configured, the library fails to properly escape HTML attribute values (such as the 'background' attribute) before embedding them into CSS 'url()' declarations. An attacker can provide a crafted HTML input to break out of the intended CSS property and inject arbitrary declarations. This can lead to Server-Side Request Forgery (SSRF) if the attacker injects 'url()' values pointing to internal network resources. As of the advisory date, no patched version is specified.

Affected products

Kozea WeasyPrint <= 68.1

Identifiers

CVE-2026-49452
GHSA-jhhc-3hcp-qhm5
PYSEC-2026-3412

Timeline

2026-06-02: disclosed: Vulnerability reported to maintainer
2026-07-06: advisory: GitHub Advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.