Malicious code in awk-node-decompress-process-fire (npm)

The package awk-node-decompress-process-fire was found to contain malicious code...

Malicious code in import-cron-test-decompress-log (npm)

The package import-cron-test-decompress-log was found to contain malicious code...

MAL-2025-15218 Malicious code in awk-node-decompress-process-fire (npm)

The package awk-node-decompress-process-fire was found to contain malicious code...

Malicious code in beta-decompress-daemon-minify-simple (npm)

The package beta-decompress-daemon-minify-simple was found to contain malicious code...

MAL-2025-15341 Malicious code in balance-chi-decompress-chi-code (npm)

The package balance-chi-decompress-chi-code was found to contain malicious code...

MAL-2025-15611 Malicious code in beta-decompress-daemon-minify-simple (npm)

The package beta-decompress-daemon-minify-simple was found to contain malicious code...

MAL-2025-37244 Malicious code in try-refactor-yaml-decompress-phi (npm)

The package try-refactor-yaml-decompress-phi was found to contain malicious code...

MAL-2025-17248 Malicious code in code-file-decompress-decompress-byte (npm)

The package code-file-decompress-decompress-byte was found to contain malicious code...

MAL-2025-33279 Malicious code in simple-zero-shell-zeta-decompress (npm)

The package simple-zero-shell-zeta-decompress was found to contain malicious code...

Malicious code in simple-zero-shell-zeta-decompress (npm)

The package simple-zero-shell-zeta-decompress was found to contain malicious code...

Malicious code in balance-chi-decompress-chi-code (npm)

The package balance-chi-decompress-chi-code was found to contain malicious code...

Malicious code in try-refactor-yaml-decompress-phi (npm)

The package try-refactor-yaml-decompress-phi was found to contain malicious code...

Malicious code in code-file-decompress-decompress-byte (npm)

The package code-file-decompress-decompress-byte was found to contain malicious code...

MAL-2025-23083 Malicious code in import-cron-test-decompress-log (npm)

The package import-cron-test-decompress-log was found to contain malicious code...

CVE-2025-55197

pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are...

CVE-2025-55197 pypdf's Manipulated FlateDecode streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are...

CVE-2025-55197

The CVE-2025-55197 issue affects pypdf prior to version 6.0.0, where a crafted PDF using a sequence of FlateDecode filters in a malicious cross-reference stream can exhaust RAM (DoS). Other content streams may be affected on explicit access. The vulnerability has been fixed in 6.0.0. A workaround...

GHSA-7HFW-26VP-JP8M PyPDF's Manipulated FlateDecode streams can exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are affected on explicit access. Patches This has been...

PyPDF's Manipulated FlateDecode streams can exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are affected on explicit access. Patches This has been...

SUSE CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...