TI-2022-20298 CVE-2022-41957 · GHSA-2r7v-cmch-5x26
muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereference
Priority MEDIUM 41
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron.
3 records
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron.
The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.
The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed.