Marc Hassan

[Content removed]

**Name of the Vulnerable Software and Affected Versions** muhammara versions prior to 2.6.1 muhammara versions 3.0.0 through 3.1.0 hummus versions prior to 1.0.111 **Description** The issue allows for Denial of Service (DoS) when a maliciously crafted PDF file is supplied to be parsed. **Recommendations** For muhammara versions prior to 2.6.1, update to version 2.6.1 or later. For muhammara versions 3.0.0 through 3.1.0, update to version 3.1.1 or later. For hummus versions prior to 1.0.111, update to version 1.0.111 or later. As a temporary workaround, do not process files from untrusted sources.

**Name of the Vulnerable Software and Affected Versions** Lodash versions prior to 4.17.21 **Description** The issue is related to Command Injection via the template function, which can be exploited by a remote attacker to execute arbitrary commands. This is due to the lack of neutralization of special elements used in the operating system command. **Recommendations** For versions prior to 4.17.21, update to version 4.17.21 or later to resolve the issue. As a temporary workaround, consider disabling the template function until a patch is available. Restrict access to the template function to minimize the risk of exploitation.