CVE-2026-18597

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the MDLImporter::ParseSkinLump3DGSMDL7 function, an external file reference/strings without null terminator can allow an attacker to read data beyond the allocated buffer. Remediation There is no fixed version...