Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-uwft-v6jp-vkhg
SummaryIn Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.
Aliases
0
alias CVE-2025-11896
Fixed_packages
0
url pkg:deb/debian/xpdf@0?distro=trixie
purl pkg:deb/debian/xpdf@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@0%3Fdistro=trixie
1
url pkg:deb/debian/xpdf@3.04%2Bgit20210103-3?distro=trixie
purl pkg:deb/debian/xpdf@3.04%2Bgit20210103-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20210103-3%3Fdistro=trixie
2
url pkg:deb/debian/xpdf@3.04%2Bgit20220601-1?distro=trixie
purl pkg:deb/debian/xpdf@3.04%2Bgit20220601-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20220601-1%3Fdistro=trixie
3
url pkg:deb/debian/xpdf@3.04%2Bgit20250304-1?distro=trixie
purl pkg:deb/debian/xpdf@3.04%2Bgit20250304-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20250304-1%3Fdistro=trixie
4
url pkg:deb/debian/xpdf@3.04%2Bgit20260220-1?distro=trixie
purl pkg:deb/debian/xpdf@3.04%2Bgit20260220-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/xpdf@3.04%252Bgit20260220-1%3Fdistro=trixie
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-11896
reference_id
reference_type
scores
0
value 9e-05
scoring_system epss
scoring_elements 0.00852
published_at 2026-04-21T12:55:00Z
1
value 9e-05
scoring_system epss
scoring_elements 0.00804
published_at 2026-04-12T12:55:00Z
2
value 9e-05
scoring_system epss
scoring_elements 0.00805
published_at 2026-04-16T12:55:00Z
3
value 9e-05
scoring_system epss
scoring_elements 0.00809
published_at 2026-04-18T12:55:00Z
4
value 9e-05
scoring_system epss
scoring_elements 0.00816
published_at 2026-04-02T12:55:00Z
5
value 9e-05
scoring_system epss
scoring_elements 0.00817
published_at 2026-04-04T12:55:00Z
6
value 9e-05
scoring_system epss
scoring_elements 0.00819
published_at 2026-04-07T12:55:00Z
7
value 9e-05
scoring_system epss
scoring_elements 0.00824
published_at 2026-04-08T12:55:00Z
8
value 9e-05
scoring_system epss
scoring_elements 0.00821
published_at 2026-04-09T12:55:00Z
9
value 9e-05
scoring_system epss
scoring_elements 0.0081
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-11896
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://www.xpdfreader.com/security-bug/object-loops.html
reference_id object-loops.html
reference_type
scores
0
value 2.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-17T13:49:28Z/
url https://www.xpdfreader.com/security-bug/object-loops.html
Weaknesses
0
cwe_id 674
name Uncontrolled Recursion
description The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Exploits
Severity_range_score2.1 - 3.3
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-uwft-v6jp-vkhg