Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: hummus unspecified Clear all filters
TI-2022-09443 CVE-2022-25885 · GHSA-frp9-2v6r-gj97

Denial of service (DoS) in muhammara

Priority HIGH 72

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01492 Published 2022-11-01 Fixed in 2.6.0, 1.0.111 CWE-20
TI-2022-09448 CVE-2022-25892 · GHSA-9cv5-4wqv-9w94

Denial of service (DoS) in muhammara

Priority HIGH 66

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01359 Published 2022-11-01 Fixed in 2.6.1, 3.1.1 +1 CWE-690