Skip to content

Vendor

rsc.io vulnerabilities

1 published CVE affecting rsc.io, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0
Atom feed of rsc.io alerts

Products

Latest rsc.io CVEs

Newest publication first

  1. GO-2026-5781 Uncatchable stack-overflow denial of service in rsc.io/pdf

    Published
    Unknown

    pdf.Open and PDF object resolution in rsc.io/pdf recurse without bound on nested arrays and dictionaries. A sufficiently deeply nested document exhausts the goroutine stack limit and triggers a fatal, uncatchable stack overflow. Any service that parses untrusted PDFs with rsc.io/...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.