Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004481

sonatype-2025-004481

pdfminer.six - Deserialization of Untrusted Data

Published Nov 8, 2025

https://github.com/advisories/GHSA-f83h-ghpp-7wcc

CVSS ScoreHigh

8.4

Ecosystem	Package	Version


pypi	pdfminer.six	20251107
pypi	pdfminer.six	20251227
pypi	pdfminer.six	20251228
pypi	pdfminer.six	20251229
rpm	python-pdfminer	20251107-1.el10_1
rpm	python-pdfminer	20251107-1.el10_2
rpm	python-pdfminer	20251228-1.el10_1
rpm	python-pdfminer	20251228-1.el10_2
rpm	python-pdfminer	20251229-1.el10_1
rpm	python-pdfminer	20251229-1.el10_2
rpm	python3-pdfminer	20251107-1.el10_1
rpm	python3-pdfminer	20251107-1.el10_2
rpm	python3-pdfminer	20251228-1.el10_1
rpm	python3-pdfminer	20251228-1.el10_2
rpm	python3-pdfminer	20251229-1.el10_1
rpm	python3-pdfminer	20251229-1.el10_2

sonatype-2025-004481 | Components Impacted | Sonatype Guide | Sonatype Guide