Vulnerabilities

TI-2026-39011 CVE-2026-54081 · GHSA-7c26-995w-6f47

veraPDF Parser DoS via PostScript Type 1 Font Programs

LOW 37

veraPDF PDF parser is a PDF parser for veraPDF.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00524 Published 2026-07-29 Fixed in 1.30.2, 1.31.23 CWE-1325

TI-2026-39010 CVE-2026-54080 · GHSA-jrmc-qg6p-94fp

LOW 37

veraPDF PDF parser is a PDF parser for veraPDF.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00524 Published 2026-07-29 Fixed in 1.30.2, 1.31.23 CWE-1325

TI-2026-39012 CVE-2026-54082 · GHSA-cg9x-g3gm-h5h6

LOW 35

veraPDF validation model is an implementation of the veraPDF validation model.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00395 Published 2026-07-29 Fixed in 1.30.2, 1.31.71 CWE-611

TI-2026-39008 CVE-2026-54078 · GHSA-3jh7-wm29-q568

MEDIUM 44

veraPDF validation model is an implementation of the veraPDF validation model.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00555 Published 2026-07-29 Fixed in 1.30.2, 1.31.71 CWE-611

TI-2026-39009 CVE-2026-54079 · GHSA-36mm-w85j-3q2j

MEDIUM 44

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00555 Published 2026-07-29 Fixed in 1.30.2, 1.31.71 CWE-611

TI-2024-35313 CVE-2024-52800 · GHSA-4cx5-89vm-833x

LOW 14

veraPDF is an open source PDF/A validation library.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.01108 Published 2024-11-29 Fixed in 1.26.2 CWE-611

TI-2024-18689 CVE-2024-28109 · GHSA-qxqf-2mfx-x8jw

LOW 39

veraPDF-library is a PDF/A validation library.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01033 Published 2024-03-28 Fixed in 1.24.2, 1.25.127 CWE-91