Package · Maven

org.verapdf:core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Low 2.3

CVE-2024-52800 Public exploit

Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI

veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution (RCE) vulnerability. This doesn't affect the standard va…

veraPDF veraPDF-library org.verapdf:verapdf-library-jakarta org.verapdf:library Maven

Nov 29, 2024
High 8.1

CVE-2024-28109

Potential XSLT injection vulnerability when using policy files

veraPDF-library is a PDF/A validation library. Executing policy checks using custom schematron files invokes an XSL transformation that could lead to a remote code execution (RCE) vulnerability. This vulnerability is fixed in 1.24.2.

veraPDF veraPDF-library org.verapdf:library-arlington org.verapdf:core-jakarta Maven

Mar 28, 2024