Pikepdf Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pikepdf Project records in CISA KEV

No Pikepdf Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Pikepdf · all components

TI-2021-10137 CVE-2021-29421 · GHSA-ccgm-3xw4-h5p8

LOW 36

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01681 Published 2021-04-01 Fixed in 2.10.0 CWE-611