Consider using pdf.js for PDF thumbnail generation, or even just use a generic icon instead.

[sengi]

Whitehall currently uses Ghostscript to generate thumbnail icons for PDF attachments.

It's not clear whether this is even a useful feature (since most document cover pages look very similar and the thumbnail is too small for text to be readable), but if we want to keep generating these thumbnails then it's worth considering switching from Ghostscript to pdf.js to reduce the attack surface.

Ghostscript is 70+ MB of old code, mostly written in C, whereas pdf.js is way smaller and designed for security from the beginning.