CVE-2022-25885: Muhammara Project Muhammara

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.

Affected products

• Muhammara Project Muhammara: before 2.6.0 (fixed in 2.6.0)

Published 2022-11-01. Last modified 2026-06-17.