Vulnerabilities in veraPDF
7 resultsCVE-2024-52800LOWPotential XXE (XML External Entity Injection) vulnerability in veraPDF CLIEPSS 1.1%CVE-2024-28109HIGHPotential XSLT injection vulnerability when using policy filesEPSS 1.0%CVE-2026-54078HIGHveraPDF Validation XXE via Rich TextEPSS 0.6%CVE-2026-54079HIGHveraPDF Validation XXE via XFAEPSS 0.6%CVE-2026-54081MEDIUMveraPDF Parser DoS via PostScript Type 1 Font ProgramsEPSS 0.5%CVE-2026-54080MEDIUMveraPDF Parser DoS via PostScript CMap StreamsEPSS 0.5%CVE-2026-54082MEDIUMveraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFsEPSS 0.4%