Lucene search
+L

3 matches found

OSV
OSV
added 2026/07/15 11:30 p.m.11 views

GHSA-XG43-5579-QW6V adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files

Impact adawolfa/isdoc reads ISDOC invoices from ISDOCX ZIP archives and from PDF files with embedded ISDOC documents and supplements. Affected versions inflate ZIP entries and read embedded files without validating their uncompressed size, so a small crafted file can amplify into gigabytes: -...

6.5CVSS6.1AI score
SaveExploits0References4
Rows per page
Query Builder