CVE-2026-110636

The pypdftk library (through version 0.5 ) is vulnerable to OS command injection within the fill_form(), dump_data_fields(), and pdftk_cmd_util() functions. The root cause is the construction of shell commands using caller-supplied paths for pdf_path or out_file without proper sanitization. Becau...

Command Injection

pdfinfo is vulnerable to Command Injection. The vulnerability exists in the command function of info.rb due to missing input sanitization in the pdfpath parameter, which allows an attacker to inject and execute malicious commands...