GHSA-88q9-cmp2-c2vq
Medium · 4.3CVSS
4.3
EPSS
—
Published
May 11, 2026
CISA due date
—
The record
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | OxidizePdf.NET | 0 | 0.8.0 |
| PyPI | oxidize-pdf | 0 | 0.5.0 |
| crates.io | oxidize-pdf | 0 | 2.6.0 |
Related vulnerabilities
- CVE-2026-105754 vLLM is an inference and serving engine for large language models. CWE-1284
- CVE-2026-103484 IVFFlat index build in pgvector before 0.8.7 allows a database user to write data… CWE-1284
- CVE-2026-75806 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be… CWE-1284
- CVE-2026-93749 source-map-js through 1.2.1 fails to validate the per-section offset line value in… CWE-1284
- CVE-2026-87962 t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in… CWE-1284
- CVE-2026-87735 An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. CWE-1284
- CVE-2026-87470 Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36… CWE-1284
- CVE-2026-79376 An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth… CWE-1284