CVE-2022-25892

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

CVE-2022-25885

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

Denial of service

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

Design/Logic Flaw

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

CVE-2022-25885 Denial of Service (DoS)

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

CVE-2022-25885 Denial of Service (DoS)

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

CVE-2022-25885

CVE-2022-25885 affects MuhammaraJS/muhammara versions prior to 2.6.0 and hummus prior to 1.0.111. The vulnerability is a Denial of Service (DoS) triggered when PDFStreamForResponse() is used with invalid data, which can cause crashes or degraded availability. Public technical details in connected...

CVE-2022-25885

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

CVE-2022-25892 Denial of Service (DoS)

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

CVE-2022-25892 Denial of Service (DoS)

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

PT-2022-17585 · Muhammara +1 · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.0 hummus versions prior to 1.0.111 Description: The issue allows for Denial of Service DoS when the PDFStreamForResponse function is used with invalid data. Recommendations: For muhammara versions prior to 2.6....

PT-2022-17589 · Muhammara +1 · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.1 muhammara versions 3.0.0 through 3.1.0 hummus versions prior to 1.0.111 Description: The issue allows for Denial of Service DoS when a maliciously crafted PDF file is supplied to be parsed. Recommendations: F...

CVE-2022-25892

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

CVE-2022-25885: Improper Input Validation

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

CVE-2022-25892: Undefined Security Weakness

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

Denial of Service (DoS)

Overview muhammara is a Create, read and modify PDF files and streams. A drop in replacement for hummusjs PDF library Affected versions of this package are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data. PoC js hummus = require'muhammara' writer = new...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25885 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25885 Source advisory: SNYK:JS-MUHAMMARA-3091137...

Denial of Service (DoS)

Overview muhammara is a Create, read and modify PDF files and streams. A drop in replacement for hummusjs PDF library Affected versions of this package are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed. PoC js var pdfReader =...

@mauriciocc/hummus-recipe (2.0.1-node-16) potentially affected by CVE-2022-25892 via muhammara (2.0.0)

muhammara NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muhammara and may be impacted: - @mauriciocc/hummus-recipe 2.0.1-node-16 Source cves: CVE-2022-25892 Source advisory: SNYK:JS-MUHAMMARA-3060320...