PY
Product
Pypdf
52
CVEs
0
On KEV
7.5
Max CVSS
8
New 30D
Severity mix
Critical 0High 17Medium 29Low 6
Watch
Add Pypdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103000 | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving alphabetical page labels Affected: before 6.19.0 |
| CVE-2026-102999 | 7.5 | Sep 30 | pypdf: Possible long runtimes with large amount of embedded files Affected: before 6.19.0 |
| CVE-2026-102998 | 7.5 | Sep 30 | pypdf: Possible long runtimes when generating appearance streams Affected: before 6.19.0 |
| CVE-2026-102997 | 7.5 | Sep 30 | pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) Affected: before 6.18.1 |
| CVE-2026-102996 | 7.5 | Sep 30 | pypdf: Possible large memory usage when parsing font data Affected: before 6.18.1 |
| CVE-2026-102995 | 7.5 | Sep 30 | pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) Affected: before 6.18.1 |
| CVE-2026-102994 | 7.5 | Sep 30 | pypdf: Possible long runtimes/large memory usage when parsing indirect objects Affected: before 6.18.0 |
| CVE-2026-102993 | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving Roman page labels Affected: before 6.17.0 |
| CVE-2026-59936 | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images Affected: before 6.14.1 |
| CVE-2026-59935 | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) Affected: before 6.14.2 |
| CVE-2026-59937 | 7.5 | Jul 8 | pypdf: Possible long runtimes for repeated malformed cross-reference entries Affected: before 6.14.0 |
| CVE-2026-33699 | 7.5 | Mar 26 | pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream Affected: before 6.9.2 |
| CVE-2026-27888 | 7.5 | Feb 26 | pypdf: Manipulated FlateDecode XFA streams can exhaust RAM Affected: before 6.7.3 |
| CVE-2026-27628 | 7.5 | Feb 25 | pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams Affected: before 6.7.2 |
| CVE-2025-62708 | 7.5 | Oct 22 | pypdf manipulated LZWDecode streams can exhaust RAM Affected: before 6.1.3 |
| CVE-2025-62707 | 7.5 | Oct 22 | pypdf affected by possible infinite loop when reading DCT inline images without EOF marker Affected: before 6.1.3 |
| CVE-2025-55197 | 7.5 | Aug 13 | pypdf's Manipulated FlateDecode streams can exhaust RAM Affected: before 6.0.0 |
Showing 17