pdfminer-six vulnerabilities
CVEs whose affected-version data names the pdfminer-six package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-64512High· 8.6PoCArbitrary Code Execution in pdfminer.six via Crafted PDF Input
Arbitrary Code Execution in pdfminer.six via Crafted PDF Input
▾ Midnightpdfminer-six · pdfminer-sixEPSS 0.31%via OSV
CVE-2025-70559High· 7.8PoCInsecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
▾ Midnightpdfminer-six · pdfminer-sixEPSS 0.30%via OSV