v1.5.0 v1.14.2
low risk
facebook/astryxAug 13, 2026 → Aug 13, 20261 day between releases
What's New
Security hardening prevents unbounded resource usage when parsing malformed PDFs
New Features
- Caps resource bounds for Form XObject expansion and CID ranges
- Tracks Form XObject text line matrix for correct spacing handling
- Merges small-caps runs instead of misinterpreting them as table columns
- Implements subquadratic overlap testing for disjoint rectangles
Improvements
- Prevents denial-of-service attacks via malformed or crafted PDFs
- Correctly handles PDF spacing operators like T* and TL
- Improves table column detection for small-caps text
- Optimizes disjoint-rect clustering with subquadratic overlap tests
Bug Fixes
- Fixed incorrect interpretation of small-caps as extra table columns
- Fixed disjoint-rect clustering overlap tests
- Fixed Form XObject text line matrix tracking
Upgrade Notes
Update the pdf-inspector dependency to version 1.14.2. This release introduces security hardening for malformed PDFs and does not require configuration changes.
The Two Releases
v1.5.0
v1.5.0
Aug 13, 2026· 2 months ago
Focuses on reliability, accuracy fixes, and profile enrichment, introducing a major cross-scan workflow for pivoting results.
Full release notesv1.14.2
1.14.2 — Hardened parsing for pathological PDFs
Aug 13, 2026· 2 months ago
Focuses on security and stability improvements to prevent unbounded CPU or memory usage when parsing malformed or crafted PDFs.
Full release notes