Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-88q9-cmp2-c2vqoxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS) medium Not flagged May 11, 2026

Versions in the registry

0.23.0 (listed), 0.21.0, 0.20.0, 0.19.0, 0.17.0, 0.16.0, 0.13.0, 0.12.0, 0.11.0, 0.10.0, 0.9.0, 0.8.0, 0.7.0, 0.5.2, 0.5.0, 0.4.3, 0.3.1