Vulnerability GHSA-frp9-2v6r-gj97

High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
4 years ago
November 01, 2022 at 12:00 PM UTC
muhammara and hummus vulnerable to null pointer dereference on bad response object
1.0.0 - 1.0.110
1.0.0 - 1.0.110

Summary

muhammara and hummus vulnerable to null pointer dereference on bad response object

Details

The package muhammara before 2.6.0 and the package hummus before 1.0.111 are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.

Impacted packages

Timeline

Published
4 years ago
November 01, 2022 at 12:00 PM UTC
Fixed (2.6.0)
4 years ago
July 01, 2022 at 05:30 AM UTC
Fixed (1.0.111)
4 years ago
November 02, 2022 at 03:13 PM UTC
Last Modified
3 years ago
November 08, 2023 at 04:08 AM UTC