Skip to content

Product

code.sajari.com/docconv vulnerabilities

2 published CVES affecting code.sajari.com/docconv, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest code.sajari.com/docconv CVEs

Newest publication first

  1. CVE-2022-4741 docconv XMLToText memory allocation

    Published
    MediumCVSS 6.5

    A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to v...

  2. CVE-2022-4643 docconv pdf_ocr.go ConvertPDFImages os command injection

    Published
    CriticalCVSS 9.8

    A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdf_ocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgradin...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.