34510 matches found
gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-59938 via pypdf (4.3.0)
pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-59938 Source advisory: OSV:GHSA-5QJQ-93H5-HRGP...
smart-pdf (2023.9.11.1) potentially affected by CVE-2026-59938 via pypdf (3.16.0)
pypdf PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - smart-pdf 2023.9.11.1 Source cves: CVE-2026-59938 Source advisory: OSV:GHSA-5QJQ-93H5-HRGP...
docrx (>=0.0.1, <=0.0.10), paperreview (0.1.0) +1 more potentially affected by CVE-2026-59938 via pypdf (3.15.0)
pypdf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docrx =0.0.1, =1.1.11, =1.1.13 Source cves: CVE-2026-59938 Source advisory: OSV:GHSA-5QJQ-93H5-HRGP...
EUVD-2026-42343
pypdf: Possible large memory usage for wrong image dimensions...
WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Nabil Irawan in WordPress Plugin 3D Flipbook PDF Viewer & Embedder versions = 1.4.2...
CVE-2026-65528
Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
SummaryPdfParser.PdfStream.decode in Pillow's PdfParser.py calls zlib.decompress with the bufsize parameter set to the value of the PDF stream's Length field, without any upper bound on the actual decompressed output size. Python's zlib.decompress bufsize argument is an initial output buffer hint...
PYSEC-2026-3495 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
Summary PdfParser.PdfStream.decode in Pillow's PdfParser.py calls zlib.decompress with the bufsize parameter set to the value of the PDF stream's Length field, without any upper bound on the actual decompressed output size. Python's zlib.decompress bufsize argument is an initial output buffer hin...
helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-54058 via pillow (8.3.0)
pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-54058 Source advisory: OSV:PYSEC-2026-3493...
CVE-2026-65528
Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...
CVE-2026-65528 WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...
EUVD-2026-48129
Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...
CVE-2026-65528 WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in BSK PDF Manager = 3.8 versions...
CVE-2026-65528
The CVE-2026-65528 entry concerns the WordPress BSK PDF Manager plugin (versions up to 3.8) with a Cross Site Scripting (XSS) vulnerability. The root cause is XSS in this plugin version, affecting the product where user input is not properly sanitized. The documents do not provide details on the ...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFium in Google Chrome before version 150.0.7871.47 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Before version 148.0.7778.216, using free in Google Chrome’s views allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted PDF file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Using “after free” in PDFs in Google Chrome before version 148.0.7778.216 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFium in Google Chrome before version 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...
