Log in Start free

veraPDF

Products

ProductCVEsExploitedLatest
veraPDF-validation3–Jul 29, 2026
veraPDF-library2–Nov 29, 2024
veraPDF-parser2–Jul 29, 2026

Exploited and recent CVEs

  • CVE-2026-54081 Medium 6.9 veraPDF Parser DoS via PostScript Type 1 Font Programs 0.5%
  • CVE-2026-54080 Medium 6.9 veraPDF Parser DoS via PostScript CMap Streams 0.5%
  • CVE-2026-54082 Medium 6.5 veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs 0.4%
  • CVE-2026-54078 High 8.7 veraPDF Validation XXE via Rich Text 0.6%
  • CVE-2026-54079 High 8.7 veraPDF Validation XXE via XFA 0.6%
  • CVE-2024-52800 Low 2.3 Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI 1.1%
  • CVE-2024-28109 High 8.1 Potential XSLT injection vulnerability when using policy files 1.0%