Threats affecting pkg:pypi/BabelDOC

BabelDOC versions from 0.3.61 up to but not including 0.7.0 contain a resource exhaustion vulnerability. This flaw allows remote attackers to cause excessive CPU and memory consumption by submitting a crafted PDF with an embedded ToUnicode CMap that declares extremely large bfrange and cidrange spans. This triggers billions of loop iterations in the translation worker, effectively stalling it. The vulnerability is fixed in version 0.7.0.

BabelDOC versions prior to 0.6.3 contain a vulnerability in their vendored PDF parser where untrusted pickle data is deserialized without proper path validation. An attacker can craft a PDF with a specially encoded CMap name that causes the software to load and deserialize arbitrary pickle files from attacker-controlled locations, leading to arbitrary code execution with the privileges of the BabelDOC process.