SUSE CVE-2026-48735

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1...

pypdf 安全漏洞

pypdf is an open-source, free Python library for handling PDF files. It allows for splitting, merging, cropping, and converting pages within PDF files. Prior to version 6.12.1, pypdf had a security vulnerability. This vulnerability stemmed from the parsing of large XMP metadata, which might conta...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the YAML metadata parsing process. An attacker can cause excessive memory consumption and potentially trigger an out-of-memory condition on the server by uploading a crafted image ...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the YAML metadata parsing process. An attacker can cause excessive memory consumption and potentially trigger an out-of-memory condition on the server by uploading a crafted image ...

Oracle Linux 8 : luksmeta (ELSA-2025-23086)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-23086 advisory. 9-4.1 - Fix handling of large metadata Resolves: RHEL-122138 Tenable has extracted the preceding description block directly from the Oracle Linux security...

luksmeta security update

9-4.1 - Fix handling of large metadata Resolves: RHEL-122138...

Fedora 43 : luksmeta (2025-e53e8fdc0a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e53e8fdc0a advisory. Fix handling of large metadata Fix: CVE-2025-11568 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...