CVE-2025-46205: Missing malicious file

[ceztko]

Hello, PoDoFo maintainer here: the exploit.pdf file mentioned in CVE-2025-46205 is missing. Please attach it or send it privately to my email. Also, we adopted an official security policy.

Thank you for your cooperation.

[ceztko]

Also you stated:

February 2025 | Responsible disclosure to PoDoFo maintainers

I have no trace of this early disclosure, and I'm the one that does 99% of the work. I don't know if you sent it to a previous maintainer or what, but it's a bit strange you didn't try to reach the current maintainers in the most logic ways (that are: GitHub security advisory or sending privately to the maintainer which is clearly stated in the authors section of the readme).

Again, if you can recover the malicious file and send it to me, thank you.

[ceztko]

Hello, I’d appreciate if you can leave a quick acknowledgment of this message. It's fine if you don't have the malicious file right away, eg. if you lost and must re-create it, but it's important to me that you are a bit more responsive to establish trust. Thank you.

[ShadowByte1]

Hey Mate,

Apologies Github has not been sending me notifications for a while and didnt see this request, let me go ahead and find this PDF File, Ill also send you an email regarding some further info,

and it does appear I sent this to a previous maintainer and forgot to send it to you as the new maintainer, Apologies.

Cheers