CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: rclone, bento, kubescape, mailpit, seaweedfs-operator, fortio-fips, seaweedfs-rocksdb, gitea-fips, seaweedfs-rocksdb-fips, kubescape-server-fips, bento-fips, kitty, kubescape-server, nemo, pdfcpu, mattermost, seaweedfs, gitea, seaweedfs-operator-fips, ollama-fips,...

GO-2026-5061 vulnerabilities

Vulnerabilities for packages: mailpit, pdfcpu, rclone, seaweedfs, mattermost, kubescape, gitea, bento, ollama...

GO-2026-4961 vulnerabilities

Vulnerabilities for packages: pdfcpu, rclone, seaweedfs, mattermost, kubescape, gitea, bento, ollama...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the ParseObjectContext and parseArray functions due to recursive parsing of nested PDF objects without enforcing a maximum nesting depth. An attacker can cause resource exhaustion and application unavailability...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

The provided data confirms a concrete vulnerability in pdfcpu

PT-2026-55311

Name of the Vulnerable Software and Affected Versions pdfcpu versions prior to 0.11.2 Description A denial-of-service issue exists where the parser descends recursively through nested PDF objects, including arrays, without enforcing a maximum nesting depth. This occurs within the ParseObjectConte...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

CVE-2026-38970

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: sbom-scorecard, delve, shfmt, kubernetes-dashboard-auth, secrets-store-csi-driver-provider-azure, slsa-verifier, runc, controller-gen, wire-go, boring-registry, src-fingerprint, checksec, rancher-loglevel, temporal, glow, sftpgo-plugin-eventsearch, yace, go-md2man,...

Fedora: Security Advisory for golang-github-pdfcpu (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-pdfcpu-0.3.13-3.fc36

A PDF processor written in Go...

[SECURITY] Fedora 35 Update: golang-github-pdfcpu-0.3.13-2.fc35

A PDF processor written in Go...

Fedora: Security Advisory for golang-github-pdfcpu (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...