MEDIUM

GHSA-jp53-mhqp-8xcg

pypdf: Possible infinite loop for TreeObject.insert_child

Quick fix

GHSA-jp53-mhqp-8xcg — pypdf: upgrade to the fixed version with the command below.

pip install --upgrade 'pypdf>=6.16.0'

Details

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a (usually writing) code path where `TreeObject.insert_child` is involved.

### Patches

This has been fixed in [pypdf==6.16.0](https://github.com/py-pdf/pypdf/releases/tag/6.16.0).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3964](https://github.com/py-pdf/pypdf/pull/3964).

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/pypdf

Introduced in: 0Fixed in: 6.16.0

Fixpip install --upgrade 'pypdf>=6.16.0'

References

https://github.com/py-pdf/pypdf/security/advisories/GHSA-jp53-mhqp-8xcg[WEB]
https://github.com/py-pdf/pypdf/pull/3964[WEB]
https://github.com/py-pdf/pypdf/commit/c9ba557d565d57c53a0b3a0be06c0a4c29b0559b[WEB]
https://github.com/py-pdf/pypdf[PACKAGE]
https://github.com/py-pdf/pypdf/releases/tag/6.16.0[WEB]