org.verapdf:parser vulnerabilities
CVEs whose affected-version data names the org.verapdf:parser package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-54080MediumveraPDF Parser DoS via PostScript CMap Streams
veraPDF Parser DoS via PostScript CMap Streams
▾ Sunlitverapdf · org.verapdf:parserEPSS 0.30%via GHSA
CVE-2026-54081MediumveraPDF Parser DoS via PostScript Type 1 Font Programs
veraPDF Parser DoS via PostScript Type 1 Font Programs
▾ Sunlitverapdf · org.verapdf:parserEPSS 0.30%via GHSA