Vulnerabilities

TI-2026-82760 CVE-2026-119209 · GHSA-x3rh-gjgm-fmqc

Excessive memory use in pypdf when parsing cross-reference streams

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00268 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82759 CVE-2026-119208 · GHSA-62m5-6wh8-28x7

Resource exhaustion in pypdf via forged page counts in encrypted PDFs

LOW 31

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82757 CVE-2026-119207 · GHSA-4vqv-7265-gm2w

Excessive memory use in pypdf strict mode from nested parse errors

LOW 31

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82756 CVE-2026-119206 · GHSA-42gh-23hr-vphw

pypdf takes excessive time to retrieve page labels from crafted PDFs

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.3 CWE-400

TI-2026-82755 CVE-2026-119205 · GHSA-mfr5-77xh-9j7h

Infinite loop in pypdf when cloning crafted dictionaries

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.4 CWE-835

TI-2026-82754 CVE-2026-119204 · GHSA-cggf-277g-3q54

Excessive memory use in pypdf when parsing crafted PDF page trees

LOW 31

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.4 CWE-400

TI-2026-82753 CVE-2026-119203 · GHSA-5849-834g-hvw5

Infinite loop in pypdf when parsing crafted incomplete PDF files

LOW 31

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-10-29 Partial fix · 6.21.4 CWE-835

TI-2026-79973 CVE-2026-115585 · GHSA-jr96-gvgh-j3r4

Incomplete fix leaves pypdf slow on malformed cross-reference entries

LOW 31

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.0041 Published 2026-10-23 Partial fix · 6.21.2 CWE-400

TI-2026-79972 CVE-2026-115580 · GHSA-gmh7-3g9r-mjh5

Excessive iteration in pypdf lets crafted PDFs cause long runtimes

LOW 31

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.0041 Published 2026-10-23 Partial fix · 6.21.2 CWE-834

TI-2026-79971 CVE-2026-115572 · GHSA-6c7f-9265-g8fw

pypdf: Possible long runtimes for repeated references to the same missing object

LOW 37

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2026-10-23 Partial fix · 6.21.2 CWE-400

TI-2026-79334 CVE-2026-114610 · GHSA-wqw6-wpr3-45rh

Exponential SVG use expansion exhausts CPU and memory in fpdf2

MEDIUM 62

fpdf2 is a PDF creation library for Python.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00459 Published 2026-10-22 Fixed in 2.8.8 CWE-400

TI-2026-79322 CVE-2026-114609 · GHSA-rw7v-4hrq-x6r9

fpdf2 loads attacker-chosen image URLs and local paths when rendering

LOW 32

fpdf2 is a PDF creation library for Python.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00252 Published 2026-10-22 Fixed in 2.8.8 CWE-918

TI-2026-78859 CVE-2026-113795 · GHSA-7mh2-4gg2-979f

Excessive memory use in pypdf for streams with multiple filters

LOW 27

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00354 Published 2026-10-21 Partial fix · 6.20.0 CWE-400

TI-2026-78858 CVE-2026-113794 · GHSA-39mj-jf6j-2qj3

Infinite loop in pypdf when a PDF ends inside an xref table

LOW 27

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00354 Published 2026-10-21 Partial fix · 6.20.0 CWE-835

TI-2026-78857 CVE-2026-113793 · GHSA-9mx8-4j7g-633p

Infinite loop in pypdf when removing PDF tree items

LOW 27

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00353 Published 2026-10-21 Partial fix · 6.20.1 CWE-835

TI-2026-78856 CVE-2026-113792 · GHSA-qfv9-64jg-mh7p

Infinite loop in pypdf PdfWriter.find_outline_item

LOW 27

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00338 Published 2026-10-21 Partial fix · 6.20.1 CWE-835

TI-2026-78855 CVE-2026-113791 · GHSA-cgf9-327m-v77c

Large memory usage in pypdf when parsing content streams

LOW 27

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00321 Published 2026-10-21 Partial fix · 6.21.0 CWE-400

TI-2026-78854 CVE-2026-113790 · GHSA-f54x-cmq8-qg57

Uncontrolled memory use in pypdf when parsing arrays and dictionaries

LOW 27

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00302 Published 2026-10-21 Partial fix · 6.21.0 CWE-400

TI-2026-78853 CVE-2026-113789 · GHSA-6vvc-x485-93v7

Excessive memory and runtime in pypdf form field retrieval

LOW 27

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00321 Published 2026-10-21 Partial fix · 6.21.0 CWE-400

TI-2026-78808 CVE-2026-113786 · GHSA-5hx5-vpf9-5wcv

pypdf loads unintended image parser from crafted JPEG data

LOW 12

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00405 Published 2026-10-21 Partial fix · 6.21.1 CWE-183

TI-2026-65557 CVE-2026-103000 · GHSA-w23x-9jrw-r45c

pypdf: Possible large memory usage when retrieving alphabetical page labels

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00352 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65556 CVE-2026-102999 · GHSA-v247-6f48-mgcj

pypdf: Possible long runtimes with large amount of embedded files

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00348 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65555 CVE-2026-102998 · GHSA-php9-fj8v-98fj

pypdf: Possible long runtimes when generating appearance streams

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.19.0 CWE-400

TI-2026-65554 CVE-2026-102997 · GHSA-jw7q-gvrg-4vj3

pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

LOW 38

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

TI-2026-65553 CVE-2026-102996 · GHSA-g9cg-prrw-2r8q

pypdf: Possible large memory usage when parsing font data

MEDIUM 44

pypdf is a free and open-source pure-python PDF library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0034 Published 2026-09-30 Partial fix · 6.18.1 CWE-400

Vulnerabilities

Filters