Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 41 MIN AGO
T-41M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-54071
BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py
High
PUBLISHED
CNA: GitHub_M
Base score
7.8
CVSS v3.x
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
View raw JSON
CVE Program record
02
Description
CNA: GitHub_M
BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py
03
Metadata
SCHEMA: 5.2
Published
2026-08-21 18:55Z
6 HR AGO
Last updated
2026-08-21 21:43Z
3 HR AGO
Reserved
2026-06-11
Assigning CNA
GitHub_M
Record state
PUBLISHED
Severity
High (CVSS 7.8)
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
Deserialization of Untrusted Data
Base
SSVC decision
Exploitation
none
Automatable
no
Technical Impact
total
Data version
5.2
Document digest
d44c5b37f166c8db884c39a669dabd1a3a5dd978323ec22aa982edb28fdc1585
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
funstory-ai
BabelDOC
< 0.6.3
—
05
References
REFS: 4
github.com
https://github.com/funstory-ai/BabelDOC/security/advisories/GHSA-m8gf-v64p-gfmg
x_refsource_CONFIRM
github.com
https://github.com/funstory-ai/BabelDOC/commit/28f784ca6b437dbba040bfd9c67110373cd0924b
x_refsource_MISC
github.com
https://github.com/funstory-ai/BabelDOC/blob/main/docs/release-notes/v0.6.3.md
x_refsource_MISC
github.com
https://github.com/funstory-ai/BabelDOC/releases/tag/v0.6.3
x_refsource_MISC