py-pdf

Records74All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

py-pdf records in CISA KEV

No py-pdf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pypdf 66 records MEDIUM

Records

66 records in Pypdf · all components

TI-2023-18601 CVE-2023-36807 · GHSA-hm9v-vj3r-r55m

Infinite Loop when reading malformed objects in pypdf

MEDIUM 62

pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00573 Published 2023-06-30 Fixed in 2.10.6 CWE-835

TI-2023-18305 CVE-2023-36464 · GHSA-4vvm-4w3v-6mr8

Infinite Loop when a comment isn't followed by a character in pypdf

MEDIUM 61

pypdf is an open source, pure-python PDF library.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00352 Published 2023-06-27 Fixed in 3.9.0 CWE-835

TI-2026-42743 CVE-2026-59936 · GHSA-5xf7-4p34-54qr

pypdf: Possible infinite loop for not terminated inline images

MEDIUM 45

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0062 Published 2026-07-08 Partial fix · 6.14.1 CWE-400

TI-2026-42742 CVE-2026-59935 · GHSA-g867-7843-wf8q

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

MEDIUM 45

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0062 Published 2026-07-08 Partial fix · 6.14.2 CWE-835

TI-2026-65557 CVE-2026-103000 · GHSA-w23x-9jrw-r45c

pypdf: Possible large memory usage when retrieving alphabetical page labels

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00352 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65556 CVE-2026-102999 · GHSA-v247-6f48-mgcj

pypdf: Possible long runtimes with large amount of embedded files

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00348 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65555 CVE-2026-102998 · GHSA-php9-fj8v-98fj

pypdf: Possible long runtimes when generating appearance streams

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65553 CVE-2026-102996 · GHSA-g9cg-prrw-2r8q

pypdf: Possible large memory usage when parsing font data

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

TI-2026-65552 CVE-2026-102995 · GHSA-fp3h-c4fm-7vvf

pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

TI-2026-65551 CVE-2026-102994 · GHSA-5jq2-8x83-x246

pypdf: Possible long runtimes/large memory usage when parsing indirect objects

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.0 CWE-400

TI-2026-22010 CVE-2026-27628 · GHSA-2rw7-x74f-jg35

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

MEDIUM 41

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0LOW 1.2 Network No auth User interaction EPSS 0.00397 Published 2026-02-25 Partial fix · 6.7.2 CWE-835

TI-2026-65554 CVE-2026-102997 · GHSA-jw7q-gvrg-4vj3

pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

LOW 38

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

TI-2026-65550 CVE-2026-102993 · GHSA-qv6h-rv94-w285

pypdf: Possible large memory usage when retrieving Roman page labels

LOW 38

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00346 Published 2026-09-30 Partial fix · 6.17.0 CWE-400

TI-2026-82760 CVE-2026-119209 · GHSA-x3rh-gjgm-fmqc

Excessive memory use in pypdf when parsing cross-reference streams

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00268 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82756 CVE-2026-119206 · GHSA-42gh-23hr-vphw

pypdf takes excessive time to retrieve page labels from crafted PDFs

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82755 CVE-2026-119205 · GHSA-mfr5-77xh-9j7h

Infinite loop in pypdf when cloning crafted dictionaries

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.4 CWE-835

TI-2026-56815 CVE-2026-82398 · GHSA-fc8x-2rww-xw9m

pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00524 Published 2026-08-31 Partial fix · 6.15.0 CWE-407

TI-2026-42744 CVE-2026-59937 · GHSA-55h5-xmcq-c37v

pypdf: Possible long runtimes for repeated malformed cross-reference entries

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0062 Published 2026-07-08 Partial fix · 6.14.0 CWE-400

TI-2026-41146 CVE-2026-57204

pypdf: Missing stream length values ignore defined limits

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00367 Published 2026-06-30 Partial fix · 6.13.3 CWE-400

TI-2026-29054 CVE-2026-40260 · GHSA-3crg-w4f6-42mx

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00423 Published 2026-04-16 Partial fix · 6.10.0 CWE-776

TI-2026-22998 CVE-2026-28804 · GHSA-9m86-7pmv-2852

pypdf: Inefficient decoding of ASCIIHexDecode streams

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00444 Published 2026-03-06 Partial fix · 6.7.5 CWE-407

TI-2026-22631 CVE-2026-28351 · GHSA-f2v5-7jq9-h8cg

Manipulated RunLengthDecode streams can exhaust RAM

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0048 Published 2026-02-27 Partial fix · 6.7.4 CWE-400

TI-2026-39376 CVE-2026-54531 · GHSA-m2v9-299j-rv96

pypdf: Possible infinite loop when processing outlines/bookmarks in writer

LOW 36

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00174 Published 2026-06-22 Fixed in 6.13.0 CWE-835

TI-2026-29792 CVE-2026-41168 · GHSA-jj6c-8h6c-hppx

pypdf has possible long runtimes for wrong size values in cross-reference and object streams

LOW 36

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00297 Published 2026-04-22 Partial fix · 6.10.1 CWE-834

TI-2025-38898 CVE-2025-62708 · GHSA-jfx9-29x2-rv3j

pypdf manipulated LZWDecode streams can exhaust RAM

LOW 36

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00444 Published 2025-10-22 Partial fix · 6.1.3 CWE-409

Open these records in search →