veraPDF vulnerabilities
7 published CVEs name veraPDF among the affected products.
- 7Published CVEs7 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54081
veraPDF Parser DoS via PostScript Type 1 Font Programs
veraPDF · veraPDF-parser
Medium6.9 - CVE-2026-54080
veraPDF Parser DoS via PostScript CMap Streams
veraPDF · veraPDF-parser
Medium6.9 - CVE-2026-54082
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
veraPDF · veraPDF-validation
Medium6.5 - CVE-2026-54078
veraPDF Validation XXE via Rich Text
veraPDF · veraPDF-validation
High8.7 - CVE-2026-54079
veraPDF Validation XXE via XFA
veraPDF · veraPDF-validation
High8.7 - CVE-2024-52800
Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI
veraPDF · veraPDF-library
Low2.3 - CVE-2024-28109
Potential XSLT injection vulnerability when using policy files
veraPDF · veraPDF-library
High8.1