Skip to content
Sign in
7.5 High

CVE-2022-25892 The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial…

Description

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed.

Affected products and versions

Product Affected versions Fixed in
muhammara 3.1 earliest → latest 3.1.1
muhammara 2.6 earliest → < 2.6.1 2.6.1
hummus Versions not published

Other CVEs of muhammara

The 2 CVEs of muhammara →
CVE-2022-25885 The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when… 7.5 High
Track this CVE