Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
librepdf/openpdf
master @ c5acada
8
Fixes
0
CVEs
HIGH
Peak severity
87.5%
Coverage
Highlights
Auth Bypass: 2 prior fixes. Scrutinize any change in this area.
openpdf: most-fixed (2 issues). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Signature Wrapping: The document validation routine failed to aggregate all signed and unsigned blocks when calculating total length, allowing attackers to append malicious unsigned content to signed PDFs. Developers must ensure all byte range calculations account for the entire document payload.
Signature Validation Bypass: Incompatibilities and outdated integration with Bouncy Castle verification APIs can cause validation routines to fail silently or erroneously trust unverified signatures. Strict alignment with modernized cryptographic APIs like JcaX509CertificateConverter is critical.
XXE: The parsing of XFA forms and XMP metadata without restricting external entity resolution allowed remote attackers to trigger out-of-band data exfiltration. Any XML parsers must be configured with custom EntityResolvers to drop external references.