Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the processing of untrusted .isdocx or .pdf files, where ZIP entries and embedded files are inflated or read without validating their uncompressed size. An attacker...