11 matches found
edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20220319.0.0)
pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...
edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20220319.0.0)
pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-70559 Source advisory: OSV:PYSEC-2026-1761...
bormeparser (>=0.3.0, <=0.3.5), pdfplumber-i (>=0.5.10, <=0.5.14) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20170720.0.0)
pdfminer-six PYPI version 20170720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.3.0, =0.5.10, =11.0.0, =1.0.0.0b197.dev50, =1.0.0b233 - tzager 0.0.3.3.6 - vigimeteo-cli 0.5.0 Source cves:...
concall-parser (1.1.0), documint2md (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2025-70559 via pdfminer-six (20251107.0.0)
pdfminer-six PYPI version 20251107.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - concall-parser 1.1.0 - documint2md =1.0.0, =0.1.38a0, =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2025-70559 Source advisory:...
edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20220319.0.0)
pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-70559 Source advisory: OSV:GHSA-F83H-GHPP-7WCC...
chatbot-rag (>=0.1.3, <=0.1.9), docassemble-base (>=1.7.0, <=1.7.7) +5 more potentially affected by CVE-2025-70559 via pdfminer-six (20250327.0.0)
pdfminer-six PYPI version 20250327.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - chatbot-rag =0.1.3, =1.7.0, =1.7.0, =1.7.0, =1.7.7 - karhu 2.0.0 - pdfplumber 0.11.6 - textextraction 0.1.4 Source cves:...
edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20220319.0.0)
pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-64512 Source advisory: OSV:GHSA-WF5F-4JWR-PPCP...
chatbot-rag (>=0.1.3, <=0.1.9), docassemble-base (>=1.7.0, <=1.7.7) +5 more potentially affected by CVE-2025-64512 via pdfminer-six (20250327.0.0)
pdfminer-six PYPI version 20250327.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - chatbot-rag =0.1.3, =1.7.0, =1.7.0, =1.7.0, =1.7.7 - karhu 2.0.0 - pdfplumber 0.11.6 - textextraction 0.1.4 Source cves:...
Malicious code in pdfplumber (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f1840314016b3f29935e64789cd882de24a5544a6170ad4b123286942c5a56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4386 Malicious code in pdfplumber (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f1840314016b3f29935e64789cd882de24a5544a6170ad4b123286942c5a56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in pdfplumber
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...