Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

PYSEC-2026-1761 Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc

🚀 Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-70559 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-70559 Source advisory: OSV:PYSEC-2026-1761...

achoz (>=0.3.0, <=0.3.42), agentic-framework (>=0.3.0, <=0.3.11) +21 more potentially affected by CVE-2025-70559 via pdfminer-six (20191110.0.0)

pdfminer-six PYPI version 20191110.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - achoz =0.3.0, =0.3.0, =0.2.0, =0.0.1, =0.0.2, =0.4.0, =1.0.0, =0.1.0, =9.1.1, =6.0.0, =1.8.0, =0.1.0, =0.1.6 and more Source cves...

ocrmypdf (>=9.0.5, <=9.1.0), reviewboardpowerpack (>=3.0.4, <=5.3.0) potentially affected by CVE-2025-70559 via pdfminer-six (20191020.0.0)

pdfminer-six PYPI version 20191020.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.0.5, =3.0.4, =5.3.0 Source cves: CVE-2025-70559 Source advisory: OSV:PYSEC-2026-1761...

agentic-framework (>=0.2.0, <=0.2.5), bormeparser (>=0.4.0, <=0.4.1) +14 more potentially affected by CVE-2025-70559 via pdfminer-six (20181108.0.0)

pdfminer-six PYPI version 20181108.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - agentic-framework =0.2.0, =0.4.0, =0.0.1, =7.3.0, =0.2.0, =0.0.1, =1.0.0rc1, =0.3.0, =0.5.15, =0.2.0, =0.1.2, =1.0.0, =1.2.0 -...

bormeparser (>=0.3.0, <=0.3.5), pdfplumber-i (>=0.5.10, <=0.5.14) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20170720.0.0)

pdfminer-six PYPI version 20170720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.3.0, =0.5.10, =11.0.0, =1.0.0.0b197.dev50, =1.0.0b233 - tzager 0.0.3.3.6 - vigimeteo-cli 0.5.0 Source cves:...

amms-planop2xls (0.7.3), drunken-child-in-the-fog (>=0.1.0, <=0.3.1) +1 more potentially affected by CVE-2025-70559 via pdfminer-six (20170419.0.0)

pdfminer-six PYPI version 20170419.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - amms-planop2xls 0.7.3 - drunken-child-in-the-fog =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2025-70559 Source advisory:...

beancount-ce (>=0.1.0, <=1.2.0), ocrmypdf (>=10.3.2, <=11.3.0) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20200726.0.0)

pdfminer-six PYPI version 20200726.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - beancount-ce =0.1.0, =10.3.2, =0.3.0, =1.0.3, =1.44.0, =0.1.1, =0.1.7 Source cves: CVE-2025-70559 Source advisory:...

deckz (2.6.0), ocrmypdf (>=9.7.2, <=9.8.0) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20200402.0.0)

pdfminer-six PYPI version 20200402.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - deckz 2.6.0 - ocrmypdf =9.7.2, =0.1.0, =1.0.0, =1.36.10, =1.38.1 Source cves: CVE-2025-70559 Source advisory: OSV:PYSEC-2026-1761...

ocrmypdf (>=9.6.0, <=9.7.1), screenplay-pdf-to-json (>=0.1.0, <=0.3.4) +2 more potentially affected by CVE-2025-70559 via pdfminer-six (20200124.0.0)

pdfminer-six PYPI version 20200124.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.6.0, =0.1.0, =1.34.27, =1.36.9 Source cves: CVE-2025-70559 Source advisory: OSV:PYSEC-2026-1761...

seleniumbase (1.34.26) potentially affected by CVE-2025-70559 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-70559 Source advisory: OSV:PYSEC-2026-1761...

docassemble-base (>=1.9.0, <=1.10.5), docassemble-demo (>=1.9.0, <=1.10.5) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20251228.0.0)

pdfminer-six PYPI version 20251228.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - docassemble-base =1.9.0, =1.9.0, =1.9.0, =1.9.7.post1, =1.9.7.post1, =1.9.7.post1, =1.9.8.post5 Source cves: CVE-2025-70559 Sourc...

concall-parser (1.1.0), documint2md (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20251107.0.0)

pdfminer-six PYPI version 20251107.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - concall-parser 1.1.0 - documint2md =1.0.0, =0.1.38a0, =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2025-70559 Source advisory:...

aiecs (>=1.0.0, <=2.1.0), botrun-flow-lang (>=5.8.51, <=6.4.21) +20 more potentially affected by CVE-2025-70559 via pdfminer-six (20250506.0.0)

pdfminer-six PYPI version 20250506.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - aiecs =1.0.0, =5.8.51, =0.1.0, =1.4.3, =1.8.0, =1.8.0, =1.2.48, =3.2.0, =0.0.1b1, =0.3.0, =0.2.0, =0.1.0, =1.3.11, =2.0.0, =2.7.0...