MuhammaraJS vulnerabilities

2 known vulnerabilities in MuhammaraJS from Julianhille. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MuhammaraJS: NULL Pointer Dereference

  CVE-2026-125107Nov 9, 2026Julianhille

  Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream() in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses th

• 7.5 High severity

  MuhammaraJS: Unchecked Return Value to NULL Pointer Dereference

  CVE-2022-41957Nov 28, 2022JulianhilleEPSS 1.15%

  Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara's predecessor package hummus, are vulnerable to Denial o