Lucene search
+L

2577 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2026/07/15 12:0 a.m.11 views

adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files

adawolfa/isdoc reads ISDOC invoices from ISDOCX ZIP archives and from PDF files with embedded ISDOC documents and supplements. Affected versions inflate ZIP entries and read embedded files without validating their uncompressed size, so a small crafted file can amplify into gigabytes: - ISDOCX...

6.1AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder