CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, fortio-fips, bento-fips, seaweedfs-operator, gitea-fips, kubescape, rclone, mailpit-fips, kubescape-server-fips, ollama, ollama-fips, mattermost, bento, pdfcpu, seaweedfs, nemo, kubescape-server, gitea, mailpit, mattermost-fips, rclone-fips, kitty,...

GO-2026-4961 vulnerabilities

Vulnerabilities for packages: kubescape, seaweedfs, ollama, bento, rclone, pdfcpu, gitea, mattermost...

GO-2026-5061 vulnerabilities

Vulnerabilities for packages: kubescape, mailpit, seaweedfs, ollama, bento, rclone, pdfcpu, gitea, mattermost...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the ParseObjectContext and parseArray functions due to recursive parsing of nested PDF objects without enforcing a maximum nesting depth. An attacker can cause resource exhaustion and application unavailability...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

The provided data confirms a concrete vulnerability in pdfcpu

PT-2026-55311

Name of the Vulnerable Software and Affected Versions pdfcpu versions prior to 0.11.2 Description A denial-of-service issue exists where the parser descends recursively through nested PDF objects, including arrays, without enforcing a maximum nesting depth. This occurs within the ParseObjectConte...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: karma, kubecolor, dataplaneapi, nri-f5, dex, aws-signer-notation-plugin, kubernetes-csi-driver-hostpath, kiali, policy-controller, sftpgo-plugin-kms, cert-manager-webhook-pdns, distribution, ko, helm-operator, hcloud, src-fingerprint, kubernetes-dashboard-api,...

Fedora: Security Advisory for golang-github-pdfcpu (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-pdfcpu-0.3.13-3.fc36

A PDF processor written in Go...

[SECURITY] Fedora 35 Update: golang-github-pdfcpu-0.3.13-2.fc35

A PDF processor written in Go...

Fedora: Security Advisory for golang-github-pdfcpu (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...