CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: mailpit, gitea-fips, fortio, mailpit-fips, nemo, seaweedfs-operator-fips, seaweedfs-fips, rclone, ollama-fips, rclone-fips, bento-fips, kubescape, fortio-fips, gitea, kitty, mattermost, seaweedfs-rocksdb, kubescape-server, ollama, pdfcpu, seaweedfs-operator,...

GO-2026-4961 vulnerabilities

Vulnerabilities for packages: kubescape, pdfcpu, rclone, ollama, gitea, seaweedfs, mattermost, bento...

GO-2026-5061 vulnerabilities

Vulnerabilities for packages: kubescape, pdfcpu, rclone, mailpit, gitea, ollama, seaweedfs, mattermost, bento...

pdfcpu_poc

pdfcpu — Path Traversal → Arbitrary File Write in font extract...

CVE-2026-38970

A flaw was found in pdfcpu. The PDF parser contains an uncontrolled recursion vulnerability when processing nested PDF objects, such as arrays. A remote attacker could exploit this by crafting a malicious PDF file. This could lead to a Denial of Service DoS due to excessive resource consumption,...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the ParseObjectContext and parseArray functions due to recursive parsing of nested PDF objects without enforcing a maximum nesting depth. An attacker can cause resource exhaustion and application unavailability...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

The pdfcpu tool (versions through v0.11.1 ) is vulnerable to an uncontrolled-recursion denial-of-service (DoS) issue located in pkg/pdfcpu/model/parse.go. The root cause is that the parser recursively descends through nested PDF objects, such as arrays, via the ParseObjectContext() and parseArray...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

PT-2026-55311

Name of the Vulnerable Software and Affected Versions pdfcpu versions prior to 0.11.2 Description A denial-of-service issue exists where the parser descends recursively through nested PDF objects, including arrays, without enforcing a maximum nesting depth. This occurs within the ParseObjectConte...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970: Uncontrolled Recursion

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: temporal-server, velero-plugin-for-aws, osv-scanner, minify, cloudnative-pg, litefs, frp, kube-state-metrics, memcached-exporter, mods, promxy, mockgen, spire-controller-manager, secrets-store-csi-driver-provider-gcp, kyverno-policy-reporter-kyverno-plugin, gobump,...

Fedora: Security Advisory for golang-github-pdfcpu (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-pdfcpu-0.3.13-3.fc36

A PDF processor written in Go...

[SECURITY] Fedora 35 Update: golang-github-pdfcpu-0.3.13-2.fc35

A PDF processor written in Go...

Fedora: Security Advisory for golang-github-pdfcpu (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...