py-pdf

Records74All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

py-pdf records in CISA KEV

No py-pdf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pypdf 66 records MEDIUM

Records

74 records

TI-2026-79334 CVE-2026-114610 · GHSA-wqw6-wpr3-45rh

Exponential SVG use expansion exhausts CPU and memory in fpdf2

MEDIUM 62

fpdf2 is a PDF creation library for Python.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00459 Published 2026-10-22 Fixed in 2.8.8 CWE-400

TI-2023-18601 CVE-2023-36807 · GHSA-hm9v-vj3r-r55m

Infinite Loop when reading malformed objects in pypdf

MEDIUM 62

pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00573 Published 2023-06-30 Fixed in 2.10.6 CWE-835

TI-2023-18305 CVE-2023-36464 · GHSA-4vvm-4w3v-6mr8

Infinite Loop when a comment isn't followed by a character in pypdf

MEDIUM 61

pypdf is an open source, pure-python PDF library.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00352 Published 2023-06-27 Fixed in 3.9.0 CWE-835

TI-2022-08670 CVE-2022-24859 · GHSA-xcjx-m2pj-8g79

Manipulated inline images can cause Infinite Loop in PyPDF2

MEDIUM 61

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01328 Published 2022-04-18 Partial fix · 1.27.5 CWE-835

TI-2026-42743 CVE-2026-59936 · GHSA-5xf7-4p34-54qr

pypdf: Possible infinite loop for not terminated inline images

MEDIUM 45

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0062 Published 2026-07-08 Partial fix · 6.14.1 CWE-400

TI-2026-42742 CVE-2026-59935 · GHSA-g867-7843-wf8q

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

MEDIUM 45

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0062 Published 2026-07-08 Partial fix · 6.14.2 CWE-835

TI-2026-65557 CVE-2026-103000 · GHSA-w23x-9jrw-r45c

pypdf: Possible large memory usage when retrieving alphabetical page labels

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00352 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65556 CVE-2026-102999 · GHSA-v247-6f48-mgcj

pypdf: Possible long runtimes with large amount of embedded files

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00348 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65555 CVE-2026-102998 · GHSA-php9-fj8v-98fj

pypdf: Possible long runtimes when generating appearance streams

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65553 CVE-2026-102996 · GHSA-g9cg-prrw-2r8q

pypdf: Possible large memory usage when parsing font data

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

TI-2026-65552 CVE-2026-102995 · GHSA-fp3h-c4fm-7vvf

pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

TI-2026-65551 CVE-2026-102994 · GHSA-5jq2-8x83-x246

pypdf: Possible long runtimes/large memory usage when parsing indirect objects

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.0 CWE-400

TI-2026-22010 CVE-2026-27628 · GHSA-2rw7-x74f-jg35

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

MEDIUM 41

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0LOW 1.2 Network No auth User interaction EPSS 0.00397 Published 2026-02-25 Partial fix · 6.7.2 CWE-835

TI-2026-65554 CVE-2026-102997 · GHSA-jw7q-gvrg-4vj3

pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

LOW 38

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

TI-2026-65550 CVE-2026-102993 · GHSA-qv6h-rv94-w285

pypdf: Possible large memory usage when retrieving Roman page labels

LOW 38

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00346 Published 2026-09-30 Partial fix · 6.17.0 CWE-400

TI-2026-82760 CVE-2026-119209 · GHSA-x3rh-gjgm-fmqc

Excessive memory use in pypdf when parsing cross-reference streams

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00268 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82756 CVE-2026-119206 · GHSA-42gh-23hr-vphw

pypdf takes excessive time to retrieve page labels from crafted PDFs

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82755 CVE-2026-119205 · GHSA-mfr5-77xh-9j7h

Infinite loop in pypdf when cloning crafted dictionaries

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.4 CWE-835

TI-2026-79971 CVE-2026-115572 · GHSA-6c7f-9265-g8fw

pypdf: Possible long runtimes for repeated references to the same missing object

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2026-10-23 Partial fix · 6.21.2 CWE-400

TI-2026-56815 CVE-2026-82398 · GHSA-fc8x-2rww-xw9m

pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00524 Published 2026-08-31 Partial fix · 6.15.0 CWE-407

TI-2026-42744 CVE-2026-59937 · GHSA-55h5-xmcq-c37v

pypdf: Possible long runtimes for repeated malformed cross-reference entries

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0062 Published 2026-07-08 Partial fix · 6.14.0 CWE-400

TI-2026-41146 CVE-2026-57204

pypdf: Missing stream length values ignore defined limits

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00367 Published 2026-06-30 Partial fix · 6.13.3 CWE-400

TI-2026-29054 CVE-2026-40260 · GHSA-3crg-w4f6-42mx

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00423 Published 2026-04-16 Partial fix · 6.10.0 CWE-776

TI-2026-22998 CVE-2026-28804 · GHSA-9m86-7pmv-2852

pypdf: Inefficient decoding of ASCIIHexDecode streams

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00444 Published 2026-03-06 Partial fix · 6.7.5 CWE-407

TI-2026-22631 CVE-2026-28351 · GHSA-f2v5-7jq9-h8cg

Manipulated RunLengthDecode streams can exhaust RAM

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0048 Published 2026-02-27 Partial fix · 6.7.4 CWE-400

Open these records in search →