Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004480

sonatype-2025-004480

pdfminer.six - Deserialization of Untrusted Data [CVE-2025-64512]

Published Nov 8, 2025

https://github.com/advisories/GHSA-wf5f-4jwr-ppcp

CVSS ScoreHigh

8.4

Ecosystem	Package	Version


pypi	20220429-pdfminer-jameslp310	0.0.2
pypi	LangaraCourseInfo	1.0.10
pypi	LangaraCourseInfo	1.0.11
pypi	LangaraCourseInfo	1.0.2
pypi	LangaraCourseInfo	1.0.3
pypi	LangaraCourseInfo	1.0.4
pypi	LangaraCourseInfo	1.0.5
pypi	LangaraCourseInfo	1.0.6
pypi	LangaraCourseInfo	1.0.7
pypi	LangaraCourseInfo	1.0.8
pypi	LangaraCourseInfo	2.0.0
pypi	cite-master	0.1.0
pypi	cite-master	0.1.1
pypi	e.pdfminer.six	0.0.1
pypi	epdfminer.six	0.1.0
pypi	ksrpdfparser	0.1.1
pypi	libpdf	0.0.1
pypi	libpdf	0.1.0
pypi	mis-modulos	0.1
pypi	pdfminer.aemc	20201018
pypi	pdfminer.aemc	20231228
pypi	pdfminer.bc	0.0.1
pypi	pdfminer.bc	0.0.2
pypi	pdfminer.hitalent	20220214
pypi	pdfminer.hitalent	20220215
pypi	pdfminer.hitalent	20220216
pypi	pdfminer.hitalent	20220304
pypi	pdfminer.hitalent	20220308
pypi	pdfminer.hitalent	20220314
pypi	pdfminer.hitalent	20220317
pypi	pdfminer.rtl	0.0.1
pypi	pdfminer.rtl	0.0.2.dev3
pypi	pdfminer.rtl	0.0.2.dev5
pypi	pdfminer.rtl	0.0.2.dev6
pypi	pdfminer.rtl	0.0.2.dev7
pypi	pdfminer.rtl	0.0.2.dev8
pypi	pdfminer.rtl	1.0.1.dev17
pypi	pdfminer.rtl	1.0.1
pypi	pdfminer.six	20140915
pypi	pdfminer.six	20151013
pypi	pdfminer.six	20160202
pypi	pdfminer.six	20170418
pypi	pdfminer.six	20170419
pypi	pdfminer.six	20170720
pypi	pdfminer.six	20181108
pypi	pdfminer.six	20191020
pypi	pdfminer.six	20191107
pypi	pdfminer.six	20191110
pypi	pdfminer.six	20200104
pypi	pdfminer.six	20200121

sonatype-2025-004480 | Components Impacted | Sonatype Guide | Sonatype Guide