Lucene search
+L

28658 matches found

Github Security Blog
Github Security Blog
added 2026/03/20 8:45 p.m.13 views

PDFME has SSRF via Unvalidated URL Fetch in `getB64BasePdf` When `basePdf` Is Attacker-Controlled

Summary The getB64BasePdf function in @pdfme/common fetches arbitrary URLs via fetch without any validation when basePdf is a non-data-URI string and window is defined. An attacker who can control the basePdf field of a template e.g., through a web application that accepts user-supplied templates...

6AI score
SaveExploits0References2Affected Software1
Snyk
Snyk
added 2026/03/20 8:44 p.m.21 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview @pdfme/pdf-lib is a Create and modify PDF files with JavaScript Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the ensureBuffer function in the stream decoding. An attacker can exhaust system memory and cause...

7.1CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/03/20 8:44 p.m.9 views

GHSA-VRQM-GVQ7-RRWH PDFME Affected by Decompression Bomb in FlateDecode Stream Parsing Causes Memory Exhaustion DoS

Summary The DecodeStream.ensureBuffer method in @pdfme/pdf-lib doubles its internal buffer without any upper bound on the decompressed size. A crafted PDF containing a FlateDecode stream with a high compression ratio decompression bomb causes unbounded memory allocation during stream decoding,...

6.5CVSS6AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/20 2:35 p.m.10 views

CVE-2026-3029

A flaw was found in PyMuPDF. This vulnerability, involving path traversal, allows an attacker to write arbitrary files to unintended locations on the system. The flaw is present in the embedded get function within the main.py file. Successful exploitation could lead to system compromise or data...

8.2CVSS5.9AI score0.00354EPSS
SaveExploits0References5
NVD
NVD
added 2026/03/20 10:16 a.m.7 views

CVE-2026-33123

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1...

6.5CVSS0.00349EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/03/20 10:16 a.m.10 views

CVE-2026-33123

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1...

6.5CVSS5.7AI score0.00349EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/20 10:16 a.m.21 views

UBUNTU-CVE-2026-33123

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1...

6.5CVSS5.7AI score0.00349EPSS
SaveExploits0References5
OSV
OSV
added 2026/03/20 9:09 a.m.10 views

CVE-2026-33123 pypdf has inefficient decoding of array-based streams

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1...

5.1CVSS5.8AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/03/20 9:09 a.m.21 views

CVE-2026-33123

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1...

6.5CVSS5.2AI score0.00349EPSS
SaveExploits0
CVE
CVE
added 2026/03/20 8:44 a.m.37 views

CVE-2026-27625

Stirling-PDF (local web app) is affected in all versions prior to 2.5.2. The vulnerability resides in the /api/v1/convert/markdown/pdf endpoint, where user-supplied ZIP entries are extracted without path checks, enabling path traversal and arbitrary file write by any authenticated user (stirlingp...

8.1CVSS5.9AI score0.00462EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/20 8:44 a.m.6 views

CVE-2026-27625

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user-supplied ZIP entries without path checks. Any authenticated user can write files outside the intended temporary worki...

8.1CVSS5.9AI score0.00462EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2026/03/20 8:44 a.m.17 views

EUVD-2026-13638

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user-supplied ZIP entries without path checks. Any authenticated user can write files outside the intended temporary worki...

8.1CVSS5.9AI score0.00462EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/20 8:44 a.m.37 views

CVE-2026-27625 Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user-supplied ZIP entries without path checks. Any authenticated user can write files outside the intended temporary worki...

8.1CVSS0.00462EPSS
SaveExploits1References2
OSV
OSV
added 2026/03/20 8:44 a.m.21 views

CVE-2026-27625 Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5.2, the /api/v1/convert/markdown/pdf endpoint extracts user-supplied ZIP entries without path checks. Any authenticated user can write files outside the intended temporary worki...

8.1CVSS6AI score
SaveExploits0References4
NVD
NVD
added 2026/03/20 2:16 a.m.10 views

CVE-2026-4455

Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS0.0025EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/20 2:16 a.m.6 views

DEBIAN-CVE-2026-4455

Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS5.8AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/20 1:34 a.m.54 views

CVE-2026-4455

CVE-2026-4455 describes a heap buffer overflow in PDFium used by Google Chrome, affecting builds prior to 146.0.7680.153. An attacker could trigger heap corruption via a crafted PDF file, enabling remote code execution under the conditions stated (high severity). The public materials consistently...

8.8CVSS6AI score0.0025EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/03/20 1:34 a.m.8 views

CVE-2026-4455

Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS5.8AI score0.0025EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/20 1:34 a.m.4 views

CVE-2026-4455

Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

6AI score0.0025EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/03/20 1:34 a.m.29 views

CVE-2026-4455

Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

0.0025EPSS
SaveExploits0References2
Rows per page
Query Builder