| Package | Affected versions | Patched versions |
|---|---|---|
| poppler | < 25.04.0 | 25.04.0 |
NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free