{"uuid": "1d22d7f0-da1b-4ae7-9fd9-c21678cf3a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64512", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mu5p3yh7ol2p", "content": "Building an OSINT scraper for untrusted PDFs, the author asks if hardened Docker suffices or VM isolation is needed, citing CVE-2025-64512 (pickle RCE in pdfplumber's dependency) and kernel side-channel fears. Plans a 4-8 week burn-in with AIDE, auditd, and osquery.", "creation_timestamp": "2026-08-28T15:43:21.012253Z"}