Skip to content
OpenAdvisories

Package · Go

rsc.io/pdf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GO-2026-5781

    Uncatchable stack-overflow denial of service in rsc.io/pdf

    pdf.Open and PDF object resolution in rsc.io/pdf recurse without bound on nested arrays and dictionaries. A sufficiently deeply nested document exhausts the goroutine stack limit and triggers a fatal, uncatchable stack overflow. Any service that parses untrus…

    rsc.io/pdf Go