Security: veraPDF/veraPDF-validation
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFsGHSA-cg9x-g3gm-h5h6 published
Jun 8, 2026 by bdoubrovModerate -
veraPDF Validation XXE via XFAGHSA-36mm-w85j-3q2j published
Jun 8, 2026 by bdoubrovModerate -
veraPDF Validation XXE via Rich TextGHSA-3jh7-wm29-q568 published
Jun 8, 2026 by bdoubrovModerate