SUSE CVE-2026-42310

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0...

CVE-2026-32287

CVE-2026-32287 affects the Go library github.com/antchfx/xpath. Boolean XPath expressions that evaluate to true can trigger an infinite loop in logicalQuery.Select, causing 100% CPU usage. This can be triggered by top-level selectors such as 1=1 or true(). The provided connected records confirm t...

PT-2022-7123 · Pypi +1 · Pypdf +1

Name of the Vulnerable Software and Affected Versions: pypdf versions prior to 3.9.0 Description: The issue is related to the execution of parse content stream which can lead to an infinite loop if a crafted PDF is used. This can occur, for example, when a user extracts text from such a PDF. The...