Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-25892

Denial of Service (DoS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
snyk

Description

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a muhammara

  • unspecified to < 2.6.1affected
  • 3.1.0 to < unspecifiedaffected
  • unspecified to < 3.1.1affected

n/a hummus

  • 0 to < unspecifiedaffected

References