Vulnerabilities for pdfminer.six

First version without a known vulnerability: 20251230

Details

• GHSA-f83h-ghpp-7wcc2025-11-07

  Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc

  Fixed in: 20251230

• GHSA-wf5f-4jwr-ppcp2025-11-07

  Arbitrary Code Execution in pdfminer.six via Crafted PDF Input

  Fixed in: 20251107