{"action":"Upgrade adawolfa/isdoc to 1.4.3 or later.","affected":[{"fixed":"1.6.1","introduced":"1.6.0"},{"fixed":"1.5.1","introduced":"1.5.0"},{"fixed":"1.4.3","introduced":"1.4.0"},{"introduced":"0"}],"component":"adawolfa/isdoc","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.6.1","1.5.1","1.4.3"],"ghsa_id":"GHSA-xg43-5579-qw6v","id":"tcs_01M5KFB0240W0TDV54V0JJQP1A","modified_at":"2026-09-10T03:51:12.659972463Z","published_at":"2026-07-15T23:30:55Z","references":["https://osv.dev/vulnerability/GHSA-xg43-5579-qw6v","https://github.com/adawolfa/isdoc/security/advisories/GHSA-xg43-5579-qw6v","https://github.com/adawolfa/isdoc/commit/02a10123a3d5fd92950b8e4952959317c0a18952","https://github.com/adawolfa/isdoc/commit/935fb2aa41ceddfcf43174a61a36ec620611a105","https://github.com/adawolfa/isdoc"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-xg43-5579-qw6v","url":"https://osv.dev/vulnerability/GHSA-xg43-5579-qw6v"}],"summary":"adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files"}