Packagist/adawolfa/isdoc: medium 6.5
adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files
Action: Upgrade adawolfa/isdoc to 1.4.3 or later.
composer require adawolfa/isdoc:1.6.1composer require adawolfa/isdoc:1.5.1composer require adawolfa/isdoc:1.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.6.1 | - |
| 1.5.0 | 1.5.1 | - |
| 1.4.0 | 1.4.3 | - |
| 0 | - | - |
Fixed versions
| 1.6.1 | 1.5.1 | 1.4.3 |
Sources
- osv: GHSA-xg43-5579-qw6v
- https://github.com/adawolfa/isdoc/security/advisories/GHSA-xg43-5579-qw6v
- https://github.com/adawolfa/isdoc/commit/02a10123a3d5fd92950b8e4952959317c0a18952
- https://github.com/adawolfa/isdoc/commit/935fb2aa41ceddfcf43174a61a36ec620611a105
- https://github.com/adawolfa/isdoc
published · modified · JSON