Most recent entries from all

BREW-ocrmypdf-CVE-2021-29421 — Improper Restriction of XML External Entity Reference in pikepdf

2026-10-18T15:20:20.703494+00:00

Affected: Homebrew: ocrmypdf

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.

EUVD-2026-26366

2026-10-18T15:20:20.703567+00:00

EUVD-2026-26366

fkie_cve-2021-29421

2026-10-18T15:20:20.703583+00:00

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.

GHSA-ccgm-3xw4-h5p8 — Improper Restriction of XML External Entity Reference in pikepdf

2026-10-18T15:20:20.703605+00:00

Affected: PyPI: pikepdf

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.

gsd-2021-29421

2026-10-18T15:20:20.703628+00:00

gsd-2021-29421

openSUSE-SU-2024:11250-1 — python36-pikepdf-2.12.1-1.3 on GA media

2026-10-18T15:20:20.703639+00:00

python36-pikepdf-2.12.1-1.3 on GA media

PYSEC-2021-34

2026-10-18T15:20:20.703655+00:00

Affected: PyPI: pikepdf

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.

UBUNTU-CVE-2021-29421

2026-10-18T15:20:20.703671+00:00

Affected: Ubuntu:20.04:LTS: pikepdf, Ubuntu:22.04:LTS: pikepdf, Ubuntu:24.04:LTS: pikepdf, Ubuntu:25.10: pikepdf, Ubuntu:26.10: pikepdf, Ubuntu:26.04:LTS: pikepdf

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries.