Verapdf vulnerabilities

Products

• Verapdf-validation 3
• Verapdf-library 2
• Verapdf-parser 2

Newest

• verapdf verapdf-parser veraPDF Parser DoS via PostScript Type 1 Font Programs CVE-2026-54081 Fix available 6.9 MediumJuly 29, 2026
• verapdf verapdf-parser veraPDF Parser DoS via PostScript CMap Streams CVE-2026-54080 Fix available 6.9 MediumJuly 29, 2026
• verapdf verapdf-validation veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs CVE-2026-54082 Fix available 6.5 MediumJuly 29, 2026
• verapdf verapdf-validation veraPDF Validation XXE via Rich Text CVE-2026-54078 Fix available 8.7 HighJuly 29, 2026
• verapdf verapdf-validation veraPDF Validation XXE via XFA CVE-2026-54079 Fix available 8.7 HighJuly 29, 2026
• verapdf verapdf-library Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI CVE-2024-52800 Public exploitFix available 2.3 LowNovember 29, 2024
• verapdf verapdf-library Potential XSLT injection vulnerability when using policy files CVE-2024-28109 Fix available 8.1 HighMarch 28, 2024