Browse all 7 CVE security advisories affecting veraPDF. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54081 | veraPDF Parser DoS via PostScript Type 1 Font Programs — veraPDF-parserCWE-1325 | 6.9 | Medium | 2026-07-29 |
| CVE-2026-54080 | veraPDF Parser DoS via PostScript CMap Streams — veraPDF-parserCWE-1325 | 6.9 | Medium | 2026-07-29 |
| CVE-2026-54082 | veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs — veraPDF-validationCWE-611 | 6.5 | Medium | 2026-07-29 |
| CVE-2026-54078 | veraPDF Validation XXE via Rich Text — veraPDF-validationCWE-611 | 8.7 | High | 2026-07-29 |
| CVE-2026-54079 | veraPDF Validation XXE via XFA — veraPDF-validationCWE-611 | 8.7 | High | 2026-07-29 |
| CVE-2024-52800 | Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI — veraPDF-libraryCWE-611 | 7.8 | - | 2024-11-29 |
| CVE-2024-28109 | Potential XSLT injection vulnerability when using policy files — veraPDF-libraryCWE-91 | 8.1 | High | 2024-03-28 |
This page lists every published CVE security advisory associated with veraPDF. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.