Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereference
Vulnerability Description
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara's predecessor package hummus, are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed. The issue has been patched in muhammara version 3.4.0 and the fix has been backported to version 2.6.2. As a workaround, do not process files from untrusted sources. If using hummus, replace the package with muhammara.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
未检查返回值导致空指针解引用
Vulnerability Title
MuhammaraJS 安全漏洞
Vulnerability Description
MuhammaraJS是Julian Hille个人开发者的一个带有 c/cpp 绑定的节点模块。 MuhammaraJS 2.6.2之前版本、3.0.0版本至3.3.0之前版本存在安全漏洞。攻击者利用该漏洞执行拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A