CVE-2026-54080
1 advisory.
Maven/org.verapdf:parser CVE-2026-54080: medium, EPSS 0.52%
veraPDF Parser DoS via PostScript CMap Streams
Action: Upgrade org.verapdf:parser to 1.30.2 (1.30.x) or 1.31.23 (1.31.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.30.2 | - |
| 1.31.1 | 1.31.23 | - |
Fixed versions
| 1.30.2 | 1.31.23 |
Sources
- osv: GHSA-jrmc-qg6p-94fp
- https://github.com/veraPDF/veraPDF-parser/security/advisories/GHSA-jrmc-qg6p-94fp
- https://github.com/veraPDF/veraPDF-parser/pull/703
- https://github.com/veraPDF/veraPDF-parser/commit/73d6ec002b98ce1f3f68640442f8e5d5613c80ce
- https://github.com/veraPDF/veraPDF-parser/commit/cb3538607a549d63504299be1088c85ae48605f4
- https://github.com/veraPDF/veraPDF-parser
CVE-2026-54080 · published · modified · JSON