CVE-2026-82864
1 advisory.
npm/@pdfme/pdf-lib CVE-2026-82864: medium 6.5
PDFME Affected by Decompression Bomb in FlateDecode Stream Parsing Causes Memory Exhaustion DoS
Action: Upgrade @pdfme/pdf-lib to 5.5.10 or later.
npm i @pdfme/pdf-lib@5.5.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.5.10 | - |
Fixed versions
| 5.5.10 |
Sources
- osv: GHSA-vrqm-gvq7-rrwh
- https://github.com/pdfme/pdfme/security/advisories/GHSA-vrqm-gvq7-rrwh
- https://github.com/pdfme/pdfme
CVE-2026-82864 · published · modified · JSON