MEDIUMPyPI
GHSA-23w6-3w8w-8484· CVE-2026-84310, PYSEC-2026-3910pypdf: Possible long runtimes/large memory usage when retrieving outlines
Modified: 9/10/2026
package
PyPI/pypdf
pkg:pypi/pypdf
LOW3.3PyPI
GHSA-248m-82v9-q6g6· CVE-2026-48156, PYSEC-2026-3004pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams
Modified: 9/10/2026
MEDIUMPyPI
GHSA-2q4j-m29v-hq73· CVE-2026-24688, PYSEC-2026-1827pypdf has possible Infinite Loop when processing outlines/bookmarks
Modified: 9/10/2026
LOWPyPI
GHSA-2rw7-x74f-jg35· CVE-2026-27628, PYSEC-2026-3005pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-3crg-w4f6-42mx· CVE-2026-40260, PYSEC-2026-3006pypdf: Manipulated XMP metadata entity declarations can exhaust RAM
Modified: 9/10/2026
LOWPyPI
GHSA-4f6g-68pf-7vhv· CVE-2026-22691, PYSEC-2026-1828pypdf has possible long runtimes for malformed startxref
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-4pxv-j86v-mhcw· CVE-2026-41313, PYSEC-2026-3007pypdf: Possible long runtimes for wrong size values in incremental mode
Modified: 9/10/2026
MEDIUM6.2PyPI
GHSA-4vvm-4w3v-6mr8· CVE-2023-36464, PYSEC-2026-1835pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Modified: 9/10/2026
LOWPyPI
GHSA-4xc4-762w-m6cg· CVE-2026-22690, PYSEC-2026-1829pypdf has possible long runtimes for missing /Root object with large /Size values
Modified: 7/7/2026
MEDIUMPyPI
GHSA-52x6-gq3r-vpf4· CVE-2026-54530, PYSEC-2026-3009pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction
Modified: 9/10/2026
MEDIUMPyPI
GHSA-55h5-xmcq-c37v· CVE-2026-59937, PYSEC-2026-3610pypdf: Possible long runtimes for repeated malformed cross-reference entries
Modified: 9/10/2026
MEDIUMPyPI
GHSA-5hgr-hg42-57jg· CVE-2026-49460, PYSEC-2026-3010pypdf: Inefficient decoding of FlateDecode PNG predictor streams
Modified: 7/13/2026
MEDIUMPyPI
GHSA-5qjq-93h5-hrgp· CVE-2026-59938, PYSEC-2026-3611pypdf: Possible large memory usage for wrong image dimensions
Modified: 9/10/2026
HIGHPyPI
GHSA-5xf7-4p34-54qr· CVE-2026-59936, PYSEC-2026-3612pypdf: Possible infinite loop for not terminated inline images
Modified: 9/10/2026
MEDIUMPyPI
GHSA-763m-79hh-57f2· CVE-2026-84311, PYSEC-2026-3911pypdf: Possible long runtimes/large memory usage when extracting XForm objects
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-7gw9-cf7v-778f· CVE-2026-41312, PYSEC-2026-3011pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
Modified: 9/10/2026
MEDIUMPyPI
GHSA-7hfw-26vp-jp8m· CVE-2025-55197, PYSEC-2026-1830PyPDF's Manipulated FlateDecode streams can exhaust RAM
Modified: 9/10/2026
MEDIUMPyPI
GHSA-87mj-5ggw-8qc3· CVE-2026-33699, PYSEC-2026-3012pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
Modified: 9/10/2026
MEDIUMPyPI
GHSA-996q-pr4m-cvgq· CVE-2026-27024, PYSEC-2026-3013pypdf has a possible infinite loop when processing TreeObject
Modified: 9/10/2026
MEDIUMPyPI
GHSA-9m86-7pmv-2852· CVE-2026-28804, PYSEC-2026-3014pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams
Modified: 9/10/2026
MEDIUMPyPI
GHSA-9mvc-8737-8j8h· CVE-2026-27026, PYSEC-2026-3015pypdf possibly has long runtimes for malformed FlateDecode streams
Modified: 9/10/2026
MEDIUMPyPI
GHSA-cj93-chg6-vgv8· CVE-2026-48155, PYSEC-2026-3016pypdf: Possible large memory usage for large offsets for layout mode text
Modified: 9/10/2026
MEDIUMPyPI
GHSA-f2v5-7jq9-h8cg· CVE-2026-28351, PYSEC-2026-3017pypdf: Manipulated RunLengthDecode streams can exhaust RAM
Modified: 9/10/2026
MEDIUMPyPI
GHSA-fc8x-2rww-xw9m· CVE-2026-82398, PYSEC-2026-3912pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
Modified: 9/10/2026
MEDIUMPyPI
GHSA-fp3f-mc75-235c· CVE-2026-71870, PYSEC-2026-3655pypdf: Possible large memory usage for large /ToUnicode streams
Modified: 9/10/2026
MEDIUMPyPI
GHSA-fwg2-594c-jp42· CVE-2026-71852, PYSEC-2026-3656pypdf: Possible long runtimes/large memory usage for large CID font width ranges
Modified: 9/10/2026
HIGHPyPI
GHSA-g867-7843-wf8q· CVE-2026-59935, PYSEC-2026-3613pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Modified: 9/10/2026
MEDIUMPyPI
GHSA-g9xf-7f8q-9mcj· CVE-2026-54651, PYSEC-2026-3018pypdf: Possible infinite loop when processing threads/articles in writer
Modified: 7/13/2026
MEDIUMPyPI
GHSA-hqmh-ppp3-xvm7· CVE-2026-31826, PYSEC-2026-3019pypdf: manipulated stream length values can exhaust RAM
Modified: 9/10/2026
MEDIUMPyPI
GHSA-j543-4vmf-qm7v· CVE-2026-49461, PYSEC-2026-3020pypdf: Possible large memory usage for form XObjects during text extraction
Modified: 7/13/2026
MEDIUMPyPI
GHSA-jfx9-29x2-rv3j· CVE-2025-62708, PYSEC-2026-1831pypdf can exhaust RAM via manipulated LZWDecode streams
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-jj6c-8h6c-hppx· CVE-2026-41168, PYSEC-2026-3021pypdf has long runtimes for wrong size values in cross-reference and object streams
Modified: 9/10/2026
MEDIUMPyPI
GHSA-jm82-fx9c-mx94· CVE-2026-57204pypdf: Missing stream length values ignore defined limits
Modified: 9/10/2026
MEDIUMPyPI
GHSA-jp53-mhqp-8xcg· CVE-2026-84309, PYSEC-2026-3913pypdf: Possible infinite loop for TreeObject.insert_child
Modified: 9/10/2026
MEDIUMPyPI
GHSA-m2v9-299j-rv96· CVE-2026-54531, PYSEC-2026-3022pypdf: Possible infinite loop when processing outlines/bookmarks in writer
Modified: 9/10/2026
MEDIUMPyPI
GHSA-m449-cwjh-6pw7· CVE-2025-66019, PYSEC-2026-1832pypdf's LZWDecode streams be manipulated to exhaust RAM
Modified: 9/10/2026
MEDIUMPyPI
GHSA-qpxp-75px-xjcp· CVE-2026-33123, PYSEC-2026-3023pypdf has inefficient decoding of array-based streams
Modified: 9/10/2026
MEDIUMPyPI
GHSA-vr63-x8vc-m265· CVE-2025-62707, PYSEC-2026-1833pypdf possibly loops infinitely when reading DCT inline images without EOF marker
Modified: 9/10/2026
MEDIUMPyPI
GHSA-wgvp-vg3v-2xq3· CVE-2026-27025, PYSEC-2026-3024pypdf has possible long runtimes/large memory usage for large /ToUnicode streams
Modified: 9/10/2026
MEDIUM5.1PyPI
GHSA-wjcc-cq79-p63f· CVE-2023-46250, PYSEC-2026-1834Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
Modified: 9/10/2026
MEDIUMPyPI
GHSA-wjqc-6w8f-h24c· CVE-2026-48735, PYSEC-2026-3025pypdf: Manipulated XMP metadata streams can exhaust RAM
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-x284-j5p8-9c5p· CVE-2026-41314, PYSEC-2026-3026pypdf: Manipulated FlateDecode image dimensions can exhaust RAM
Modified: 9/10/2026
MEDIUMPyPI
GHSA-x7hp-r3qg-r3cj· CVE-2026-27888, PYSEC-2026-3027pypdf: Manipulated FlateDecode XFA streams can exhaust RAM
Modified: 7/13/2026
—PyPI
PYSEC-2026-1827· CVE-2026-24688, GHSA-2q4j-m29v-hq73pypdf has possible Infinite Loop when processing outlines/bookmarks
Modified: 7/7/2026
—PyPI
PYSEC-2026-1828· CVE-2026-22691, GHSA-4f6g-68pf-7vhvpypdf has possible long runtimes for malformed startxref
Modified: 7/7/2026
—PyPI
PYSEC-2026-1829· CVE-2026-22690, GHSA-4xc4-762w-m6cgpypdf has possible long runtimes for missing /Root object with large /Size values
Modified: 7/7/2026
—PyPI
PYSEC-2026-1830· CVE-2025-55197, GHSA-7hfw-26vp-jp8mPyPDF's Manipulated FlateDecode streams can exhaust RAM
Modified: 7/7/2026
—PyPI
PYSEC-2026-1831· CVE-2025-62708, GHSA-jfx9-29x2-rv3jpypdf can exhaust RAM via manipulated LZWDecode streams
Modified: 7/7/2026
—PyPI
PYSEC-2026-1832· CVE-2025-66019, GHSA-m449-cwjh-6pw7pypdf's LZWDecode streams be manipulated to exhaust RAM
Modified: 7/7/2026
—PyPI
PYSEC-2026-1833· CVE-2025-62707, GHSA-vr63-x8vc-m265pypdf possibly loops infinitely when reading DCT inline images without EOF marker
Modified: 7/7/2026
MEDIUM5.1PyPI
PYSEC-2026-1834· CVE-2023-46250, GHSA-wjcc-cq79-p63fPossible Infinite Loop when PdfWriter(clone_from) is used with a PDF
Modified: 7/7/2026
LOW3.3PyPI
PYSEC-2026-3004· CVE-2026-48156, GHSA-248m-82v9-q6g6pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams
Modified: 7/13/2026
—PyPI
PYSEC-2026-3005· CVE-2026-27628, GHSA-2rw7-x74f-jg35pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-3006· CVE-2026-40260, GHSA-3crg-w4f6-42mxpypdf: Manipulated XMP metadata entity declarations can exhaust RAM
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3007· CVE-2026-41313, GHSA-4pxv-j86v-mhcwpypdf: Possible long runtimes for wrong size values in incremental mode
Modified: 7/13/2026
MEDIUM6.2PyPI
PYSEC-2026-3008· CVE-2023-36464, GHSA-4vvm-4w3v-6mr8pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Modified: 7/13/2026
—PyPI
PYSEC-2026-3009· CVE-2026-54530, GHSA-52x6-gq3r-vpf4pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction
Modified: 7/13/2026
—PyPI
PYSEC-2026-3010· CVE-2026-49460, GHSA-5hgr-hg42-57jgpypdf: Inefficient decoding of FlateDecode PNG predictor streams
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3011· CVE-2026-41312, GHSA-7gw9-cf7v-778fpypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
Modified: 7/13/2026
—PyPI
PYSEC-2026-3012· CVE-2026-33699, GHSA-87mj-5ggw-8qc3pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
Modified: 7/13/2026
—PyPI
PYSEC-2026-3013· CVE-2026-27024, GHSA-996q-pr4m-cvgqpypdf has a possible infinite loop when processing TreeObject
Modified: 7/13/2026
—PyPI
PYSEC-2026-3014· CVE-2026-28804, GHSA-9m86-7pmv-2852pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams
Modified: 7/13/2026
—PyPI
PYSEC-2026-3015· CVE-2026-27026, GHSA-9mvc-8737-8j8hpypdf possibly has long runtimes for malformed FlateDecode streams
Modified: 7/13/2026
—PyPI
PYSEC-2026-3016· CVE-2026-48155, GHSA-cj93-chg6-vgv8pypdf: Possible large memory usage for large offsets for layout mode text
Modified: 7/13/2026
—PyPI
PYSEC-2026-3017· CVE-2026-28351, GHSA-f2v5-7jq9-h8cgpypdf: Manipulated RunLengthDecode streams can exhaust RAM
Modified: 7/13/2026
—PyPI
PYSEC-2026-3018· CVE-2026-54651, GHSA-g9xf-7f8q-9mcjpypdf: Possible infinite loop when processing threads/articles in writer
Modified: 7/13/2026
—PyPI
PYSEC-2026-3019· CVE-2026-31826, GHSA-hqmh-ppp3-xvm7pypdf: manipulated stream length values can exhaust RAM
Modified: 7/13/2026
—PyPI
PYSEC-2026-3020· CVE-2026-49461, GHSA-j543-4vmf-qm7vpypdf: Possible large memory usage for form XObjects during text extraction
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-3021· CVE-2026-41168, GHSA-jj6c-8h6c-hppxpypdf has long runtimes for wrong size values in cross-reference and object streams
Modified: 7/13/2026
—PyPI
PYSEC-2026-3022· CVE-2026-54531, GHSA-m2v9-299j-rv96pypdf: Possible infinite loop when processing outlines/bookmarks in writer
Modified: 7/13/2026
—PyPI
PYSEC-2026-3023· CVE-2026-33123, GHSA-qpxp-75px-xjcppypdf has inefficient decoding of array-based streams
Modified: 7/13/2026
—PyPI
PYSEC-2026-3024· CVE-2026-27025, GHSA-wgvp-vg3v-2xq3pypdf has possible long runtimes/large memory usage for large /ToUnicode streams
Modified: 7/13/2026
—PyPI
PYSEC-2026-3025· CVE-2026-48735, GHSA-wjqc-6w8f-h24cpypdf: Manipulated XMP metadata streams can exhaust RAM
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-3026· CVE-2026-41314, GHSA-x284-j5p8-9c5ppypdf: Manipulated FlateDecode image dimensions can exhaust RAM
Modified: 7/13/2026
—PyPI
PYSEC-2026-3027· CVE-2026-27888, GHSA-x7hp-r3qg-r3cjpypdf: Manipulated FlateDecode XFA streams can exhaust RAM
Modified: 7/13/2026
—PyPI
PYSEC-2026-3610· CVE-2026-59937, GHSA-55h5-xmcq-c37vpypdf: Possible long runtimes for repeated malformed cross-reference entries
Modified: 8/4/2026
—PyPI
PYSEC-2026-3611· CVE-2026-59938, GHSA-5qjq-93h5-hrgppypdf: Possible large memory usage for wrong image dimensions
Modified: 8/4/2026
—PyPI
PYSEC-2026-3612· CVE-2026-59936, GHSA-5xf7-4p34-54qrpypdf: Possible infinite loop for not terminated inline images
Modified: 8/4/2026
—PyPI
PYSEC-2026-3613· CVE-2026-59935, GHSA-g867-7843-wf8qpypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Modified: 8/4/2026
—PyPI
PYSEC-2026-3655· CVE-2026-71870, GHSA-fp3f-mc75-235cpypdf: Possible large memory usage for large /ToUnicode streams
Modified: 8/10/2026
—PyPI
PYSEC-2026-3656· CVE-2026-71852, GHSA-fwg2-594c-jp42pypdf: Possible long runtimes/large memory usage for large CID font width ranges
Modified: 8/10/2026
—PyPI
PYSEC-2026-3910· CVE-2026-84310, GHSA-23w6-3w8w-8484pypdf: Possible long runtimes/large memory usage when retrieving outlines
Modified: 9/10/2026
—PyPI
PYSEC-2026-3911· CVE-2026-84311, GHSA-763m-79hh-57f2pypdf: Possible long runtimes/large memory usage when extracting XForm objects
Modified: 9/10/2026
—PyPI
PYSEC-2026-3912· CVE-2026-82398, GHSA-fc8x-2rww-xw9mpypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
Modified: 9/10/2026
—PyPI
PYSEC-2026-3913· CVE-2026-84309, GHSA-jp53-mhqp-8xcgpypdf: Possible infinite loop for TreeObject.insert_child
Modified: 9/10/2026