PY
Product
pypdf
by py-pdf · last CVE Oct 23, 2026
57
CVEs
0
On KEV
7.5
Max CVSS
19
New 30D
Severity mix
Critical 0High 17Medium 33Low 7
Watch

Add pypdf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103000
7.5
0%
Sep 30
pypdf: Possible large memory usage when retrieving alphabetical page labels
Affected: < 6.19.0
CVE-2026-102999
7.5
0%
Sep 30
pypdf: Possible long runtimes with large amount of embedded files
Affected: < 6.19.0
CVE-2026-102998
7.5
0%
Sep 30
pypdf: Possible long runtimes when generating appearance streams
Affected: < 6.19.0
CVE-2026-102997
7.5
0%
Sep 30
pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)
Affected: < 6.18.1
CVE-2026-102996
7.5
0%
Sep 30
pypdf: Possible large memory usage when parsing font data
Affected: < 6.18.1
CVE-2026-102995
7.5
0%
Sep 30
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Affected: < 6.18.1
CVE-2026-102994
7.5
0%
Sep 30
pypdf: Possible long runtimes/large memory usage when parsing indirect objects
Affected: < 6.18.0
CVE-2026-102993
7.5
0%
Sep 30
pypdf: Possible large memory usage when retrieving Roman page labels
Affected: < 6.17.0
CVE-2026-59936
7.5
1%
Jul 8
pypdf: Possible infinite loop for not terminated inline images
Affected: < 6.14.1
CVE-2026-59935
7.5
1%
Jul 8
pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Affected: < 6.14.2
CVE-2026-59937
7.5
1%
Jul 8
pypdf: Possible long runtimes for repeated malformed cross-reference entries
Affected: < 6.14.0
CVE-2026-33699
7.5
0%
Mar 26
pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
Affected: < 6.9.2
CVE-2026-27888
7.5
0%
Feb 26
pypdf: Manipulated FlateDecode XFA streams can exhaust RAM
Affected: < 6.7.3
CVE-2026-27628
7.5
0%
Feb 25
pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
Affected: < 6.7.2
CVE-2026-115585
New
7.1
0%
Oct 23
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
Affected: < 6.21.2
CVE-2026-115580
New
7.1
0%
Oct 23
pypdf: Possible long runtimes for large xref table header limits
Affected: < 6.21.2
CVE-2026-115572
New
7.1
0%
Oct 23
pypdf: Possible long runtimes for repeated references to the same missing object
Affected: < 6.21.2
Showing 17