babeldoc (>=0.3.38, <=0.3.60), iflow-mcp-pdfmathtranslate-pdf2zh (1.9.11) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20250416.0.0)

pdfminer-six PYPI version 20250416.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - babeldoc =0.3.38, =1.9.8, =1.9.11 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

aiecs (>=1.0.0, <=2.1.0), botrun-flow-lang (>=5.8.51, <=6.4.21) +20 more potentially affected by CVE-2025-70559 via pdfminer-six (20250506.0.0)

pdfminer-six PYPI version 20250506.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - aiecs =1.0.0, =5.8.51, =0.1.0, =1.4.3, =1.8.0, =1.8.0, =1.2.48, =3.2.0, =0.0.1b1, =0.3.0, =0.2.0, =0.1.0, =1.3.11, =2.0.0, =2.7.0...

concall-parser (1.1.0), documint2md (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20251107.0.0)

pdfminer-six PYPI version 20251107.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - concall-parser 1.1.0 - documint2md =1.0.0, =0.1.38a0, =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2025-70559 Source advisory:...

docassemble-base (>=1.9.0, <=1.10.5), docassemble-demo (>=1.9.0, <=1.10.5) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20251228.0.0)

pdfminer-six PYPI version 20251228.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - docassemble-base =1.9.0, =1.9.0, =1.9.0, =1.9.7.post1, =1.9.7.post1, =1.9.7.post1, =1.9.8.post5 Source cves: CVE-2025-70559 Sourc...

aient (>=1.0.29, <=1.2.57), automateboringstuff3 (>=2024.8.8, <=2024.10.1) +17 more potentially affected by CVE-2025-70559 via pdfminer-six (20240706.0.0)

pdfminer-six PYPI version 20240706.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - aient =1.0.29, =2024.8.8, =0.1.17, =0.8.0, =1.5.3, =1.5.3, =1.5.3, =1.0.8, =1.0.0a2, =0.5.5, =1.2.0, =0.0.2, =0.1.0, =0.1.10 and...

magic-pdf (1.3.10) potentially affected by CVE-2025-70559 via pdfminer-six (20250324.0.0)

pdfminer-six PYPI version 20250324.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - magic-pdf 1.3.10 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-70559 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

seleniumbase (1.34.26) potentially affected by CVE-2025-70559 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (>=9.6.0, <=9.7.1), screenplay-pdf-to-json (>=0.1.0, <=0.3.4) +2 more potentially affected by CVE-2025-70559 via pdfminer-six (20200124.0.0)

pdfminer-six PYPI version 20200124.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.6.0, =0.1.0, =1.34.27, =1.36.9 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

deckz (2.6.0), ocrmypdf (>=9.7.2, <=9.8.0) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20200402.0.0)

pdfminer-six PYPI version 20200402.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - deckz 2.6.0 - ocrmypdf =9.7.2, =0.1.0, =1.0.0, =1.36.10, =1.38.1 Source cves: CVE-2025-70559 Source advisory:...

bbtext (0.1.0), casparser (0.5.4) +10 more potentially affected by CVE-2025-70559 via pdfminer-six (20211012.0.0)

pdfminer-six PYPI version 20211012.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bbtext 0.1.0 - casparser 0.5.4 - core-dev =0.1.0, =0.9.0, =2.3.0, =12.7.1, =0.5.7, =0.16.0, =1.66.13, =0.1.1, =0.3.1 Source cves:...

edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20220319.0.0)

pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

ocrmypdf (13.4.4) potentially affected by CVE-2025-70559 via pdfminer-six (20220506.0.0)

pdfminer-six PYPI version 20220506.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 13.4.4 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...

aclpubcheck (>=0.1.0, <=0.2.0), agixt (>=1.1.74b0, <=1.3.155) +116 more potentially affected by CVE-2025-70559 via pdfminer-six (20221105.0.0)

pdfminer-six PYPI version 20221105.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - aclpubcheck =0.1.0, =1.1.74b0, =0.1.11, =0.1.0, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0,...

chatbot-rag (>=0.1.3, <=0.1.9), docassemble-base (>=1.7.0, <=1.7.7) +5 more potentially affected by CVE-2025-70559 via pdfminer-six (20250327.0.0)

pdfminer-six PYPI version 20250327.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - chatbot-rag =0.1.3, =1.7.0, =1.7.0, =1.7.0, =1.7.7 - karhu 2.0.0 - pdfplumber 0.11.6 - textextraction 0.1.4 Source cves:...

EUVD-2025-38331

Insecure Deserialization pickle in pdfminer.six CMap Loader — Local Privesc...

amms-planop2xls (0.7.3), drunken-child-in-the-fog (>=0.1.0, <=0.3.1) +1 more potentially affected by CVE-2025-64512 via pdfminer-six (20170419.0.0)

pdfminer-six PYPI version 20170419.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - amms-planop2xls 0.7.3 - drunken-child-in-the-fog =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2025-64512 Source advisory:...

ocrmypdf (13.4.4) potentially affected by CVE-2025-64512 via pdfminer-six (20220506.0.0)

pdfminer-six PYPI version 20220506.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 13.4.4 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...

EUVD-2025-38315

Arbitrary Code Execution in pdfminer.six via Crafted PDF Input...

bormeparser (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64512 via pdfminer-six (20140915.0.0)

pdfminer-six PYPI version 20140915.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.1.1, =0.1.3 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...