Veille CVE

Recherche « outline »

5 CVE

Critique 1 Élevée 0 Moyenne 3 Faible 0 Non évaluée 1 Exploitées (KEV) Tri : plus récentes « outline » ✕
  1. CVE-2026-113793 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.

  2. CVE-2026-113792 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.

  3. CVE-2026-113611 4.9 Moyenne

    outline

    Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep receiving document contents because UserDeletedProcessor never disables their WebhookSubscription rows. Former admins who registered webhooks before deletion continue receiving full document bodies, including Markdown and Yjs data, via DeliverWebhookTask for every matching workspace event.

  4. CVE-2026-90530 9.3 Critique

    Adobe ColdFusion 2025 · Adobe ColdFusion 2023

    ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.

  5. CVE-2026-95127 – Non évaluée

    An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c