veraPDF vulnerabilities
7 published CVEs name veraPDF among the affected products.
- Published CVEs
- 7
- Last 12 months
- 5
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 3Low 1Not scored 0
CVEs per yearBy the year they were published
- 20242
- 20265
Newest CVEs
- CVE-2026-54081
veraPDF Parser DoS via PostScript Type 1 Font Programs
veraPDF · veraPDF-parser
Medium6.9 - CVE-2026-54080
veraPDF Parser DoS via PostScript CMap Streams
veraPDF · veraPDF-parser
Medium6.9 - CVE-2026-54082
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
veraPDF · veraPDF-validation
Medium6.5 - CVE-2026-54078
veraPDF Validation XXE via Rich Text
veraPDF · veraPDF-validation
High8.7 - CVE-2026-54079
veraPDF Validation XXE via XFA
veraPDF · veraPDF-validation
High8.7 - CVE-2024-52800
Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI
veraPDF · veraPDF-library
Low2.3 - CVE-2024-28109
Potential XSLT injection vulnerability when using policy files
veraPDF · veraPDF-library
High8.1