Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
djvulibre can be tricked into running unwanted code
published 1 month ago
Summary
The djvulibre software used to open DJVU files has a weakness that could let an attacker make it run harmful code on your system. This could lead to data loss or system compromise. Update djvulibre to the latest version or apply the vendor’s patch as soon as possible.
What to do
- Update cleanstart djvulibre to version 3.5.28-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | djvulibre |
< 3.5.28-r1 Fix: upgrade to 3.5.28-r1
|
Original advisory text
flaw was found in djvulibre-3
Security vulnerability affects the djvulibre package. A flaw was found in djvulibre-3.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published1 Oct 2026
Updated1 Oct 2026
First seen1 Oct 2026
Sources
CLEANSTART-2023-CR97144 · OSV
Track software like this
Free during beta