Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-68537 · Microsoft / collected KEV context

EUVD-2026-82425

GHSA-4rf6-qx84-q9fv

RUSTSEC-2026-0201

cve-program · CVE-2026-68537

• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-4rf6-qx84-q9fv
• https://github.com/fulgur-rs/fulgur/pull/501
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html

euvd · EUVD-2026-82425

• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-4rf6-qx84-q9fv
• https://github.com/fulgur-rs/fulgur/pull/501
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html

nvd · CVE-2026-68537

• https://github.com/fulgur-rs/fulgur/pull/501
• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-4rf6-qx84-q9fv
• https://rustsec.org/advisories/RUSTSEC-2026-0200.html

osv · GHSA-4rf6-qx84-q9fv

• https://github.com/fulgur-rs/fulgur/security/advisories/GHSA-4rf6-qx84-q9fv
• https://github.com/fulgur-rs/fulgur/pull/575
• https://github.com/fulgur-rs/fulgur
• https://rustsec.org/advisories/RUSTSEC-2026-0201.html

osv · RUSTSEC-2026-0201

• https://crates.io/crates/fulgur
• https://rustsec.org/advisories/RUSTSEC-2026-0201.html
• https://github.com/fulgur-rs/fulgur/pull/575

No related operational record is retained in the current change model.