—
GO-2026-5781
Uncatchable stack-overflow denial of service in rsc.io/pdf
상세
pdf.Open and PDF object resolution in rsc.io/pdf recurse without bound on nested arrays and dictionaries. A sufficiently deeply nested document exhausts the goroutine stack limit and triggers a fatal, uncatchable stack overflow. Any service that parses untrusted PDFs with rsc.io/pdf can therefore be taken down by a single small input.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
Go / rsc.io/pdf
최초 영향 버전:
0 No fixed version published yet for rsc.io/pdf (go modules). Pin to a known-safe version or switch to an alternative.