acroform (>=0.1.2, <=0.1.3), airust (0.1.6) +106 more potentially affected by unknown CVE via lopdf (>=0.8.0, <=0.40.0)

lopdf CARGO version =0.8.0, =0.1.2, =0.1.0, =0.1.0, =0.0.1, =0.3.0, =0.1.10, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.7.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0187...

RUSTSEC-2026-0187 Stack overflow in lopdf via deeply nested PDF objects

lopdf::Document::loadmem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...

PT-2026-54955

lopdf::Document::load mem and the other load entry points parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array /X … , on the order of 10,000 levels exhausts the call stack and aborts the process with SIGABRT. Because...