crates.io/lopdf: high 7.5

lopdf has a stack overflow via deeply nested PDF objects

Action: Upgrade lopdf to 0.42.0 or later.

cargo update -p lopdf --precise 0.42.0

Affected

Fixed versions

Sources

• osv: GHSA-6fj4-rcr3-r7rr
• https://github.com/J-F-Liu/lopdf/issues/502
• https://github.com/J-F-Liu/lopdf/pull/503
• https://github.com/J-F-Liu/lopdf/commit/c755394ad7dd651ccfe77c618f90ab779da1dfd9
• https://github.com/J-F-Liu/lopdf
• https://rustsec.org/advisories/RUSTSEC-2026-0187.html

published 2026-10-16T19:55:39Z · modified 2026-10-17T15:26:01.305676388Z · JSON