| Package | Affected versions | Patched versions |
|---|---|---|
| qpdf | = 6.0.0 |
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an "infinite loop."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free