All vulnerabilities

Servers and applications

GHSA-998q-c58p-qf78

Improper input validation in PDF hyphenation language allows local file load

Severity
Medium 5.4
Published
22 Oct 2026
Last changed
22 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
17.9.3
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
OpenProjectServers and applications · github:opf/openproject
  • Every version before 17.9.3

References