SetaPDF v2.52.0.2328 released2026-08-13

Summer on the beach with SetasignOur summer vacation is over, and we still have sand between our toes - but we're already releasing new versions of all SetaPDF components today!

This release comes with several fixes regarding handling of malformed PDFs which could cause recursion issues or an out-of-memory error. If you process foreign PDFs you should update as soon as possible!

We also added support for WebP images and tweaked or optimized several small issues.

Check the release notes of the components below.
Log in to download the latest version of the related packages!

switch product

Version 2.52.0.2328

Release date: 2026-08-13 Compatible with PHP >=7.1 <8.6
SetaPDF-Core Component
Feature
  • Added support for handling of structure destinations in Destination class.
  • Added support for WebP images (The PDF format doesn't support WebP natively but the images are converted internally by GD functionalities to either PNG or JPEG).
Bugfix
  • Fixed password preparation (SASLprep) if it includes the pipe (Ux007C) character for AES265 security handler.
  • Fixed handling of null values in destination arrays.
  • Fixed handling of recursion when resolving inherited attributes in faulty page tree.
  • Fixed handling of /Prev value in view to recursion when parsing cross-references.
  • Clone named Cmap instances to decouple assigned CID maps.
  • Fixed unbounded allocation in Predictor class which could cause an out-of-memory error.
Tweak
  • Optimized cache key creation in Font::getCharByCharCode().
  • Harden data types by using ensureType() calls and explicit data type and sanity checks in CrossReferenceTable class.
  • Introduced setasign\SetaPDF2\Core\Parser\CrossReferenceTable\FatalException class which is thrown if it is not possible to use a fallback strategy to parse a cross-reference.
  • Added plausibility checks for object counts in object streams.
  • Added various checks for a valid key-length in SecHandler\SecHandler and SecHandler\AbstractHandler class.