Threats affecting pkg:github/artifexsoftware/mupdf

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.2%	CVE-2026-40505Artifex Software MuPDF · Improper Neutralization of Escape, Meta, or Control Sequences Medium4.8EPSS 0.2%2026-04-16CVE Database V5CVE-2026-40505 MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them to manipulate terminal display for social engineering attacks such as presenting fake prompts or spoofed commands. EPSS 0.2%Vulnerability CWE-150	CVE Database V5	2026-04-16
Medium	5.5	EPSS 0.3%	CVE-2024-46657mupdf · Classic Buffer Overflow Medium5.5EPSS 0.3%2024-12-10CVE Database V5CVE-2024-46657 Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. EPSS 0.3%Vulnerability CWE-120	CVE Database V5	2024-12-10

Page 1 of 1