Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

Unbounded page slicing from attacker-controlled CSS height causes denial of service

Quadratic run time when checking a start tag for duplicate attribute names

Unbounded namespace-declaration allocation in NsReader enables memory-exhaustion denial of service

Stack overflow in lopdf via deeply nested PDF objects

Remotely exploitable Denial of Service in Tonic

kamadak-exif DoS with untrusted PNG data

Insufficient size checks in outgoing buffer in ws allows remote attacker to run the process out of memory

Processing of maliciously crafted length fields causes memory allocation SIGABRTs

Unchecked vector pre-allocation