PY
Vendor
py-pdf
49
CVEs
0
On KEV
21
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115585 New | PY pypdf py-pdf | 7.1 | Oct 23 | pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) |
| CVE-2026-115580 New | PY pypdf py-pdf | 7.1 | Oct 23 | pypdf: Possible long runtimes for large xref table header limits |
| CVE-2026-115572 New | PY pypdf py-pdf | 7.1 | Oct 23 | pypdf: Possible long runtimes for repeated references to the same missing object |
| CVE-2026-114610 New | FP fpdf2 py-pdf | 6.5 | Oct 22 | fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()' |
| CVE-2026-114609 New | FP fpdf2 py-pdf | 5.8 | Oct 22 | fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content |
| CVE-2026-113795 New | PY pypdf py-pdf | 6.0 | Oct 21 | pypdf: Possible large memory usage for streams with multiple filters |
| CVE-2026-113794 New | PY pypdf py-pdf | 6.0 | Oct 21 | pypdf: Possible infinite loop when hitting EOF in standard xref table |
| CVE-2026-113793 New | PY pypdf py-pdf | 6.0 | Oct 21 | pypdf: Possible infinite loop when removing tree items |
| CVE-2026-113792 New | PY pypdf py-pdf | 6.0 | Oct 21 | pypdf: Possible infinite loop in PdfWriter.find_outline_item |
| CVE-2026-113791 New | PY pypdf py-pdf | 6.0 | Oct 21 | pypdf: Possible large memory usage when parsing content streams |
| CVE-2026-113790 New | PY pypdf py-pdf | 6.0 | Oct 21 | pypdf: Possible large memory usage when parsing arrays and dictionaries |
| CVE-2026-113789 New | PY pypdf py-pdf | 6.0 | Oct 21 | pypdf: Possible long runtimes/large memory usage when retrieving form fields |
| CVE-2026-113786 New | PY pypdf py-pdf | 2.3 | Oct 21 | pypdf: Unvalidated JPEG image data loading |
| CVE-2026-103000 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving alphabetical page labels |
| CVE-2026-102999 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible long runtimes with large amount of embedded files |
| CVE-2026-102998 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible long runtimes when generating appearance streams |
| CVE-2026-102997 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) |
| CVE-2026-102996 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible large memory usage when parsing font data |
| CVE-2026-102995 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) |
| CVE-2026-102994 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible long runtimes/large memory usage when parsing indirect objects |
| CVE-2026-102993 | PY pypdf py-pdf | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving Roman page labels |
| CVE-2026-84311 | PY pypdf py-pdf | 3.3 | Sep 1 | pypdf: Possible long runtimes/large memory usage when extracting XForm objects |
| CVE-2026-84310 | PY pypdf py-pdf | 3.3 | Sep 1 | pypdf: Possible long runtimes/large memory usage when retrieving outlines |
| CVE-2026-84309 | PY pypdf py-pdf | 5.5 | Sep 1 | pypdf: Possible infinite loop for TreeObject.insert_child |
| CVE-2026-82398 | PY pypdf py-pdf | 5.3 | Aug 31 | pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace |
| CVE-2026-71870 | PY pypdf py-pdf | 3.3 | Aug 7 | pypdf: Possible large memory usage for large /ToUnicode streams |
| CVE-2026-71852 | PY pypdf py-pdf | 3.3 | Aug 7 | pypdf: Possible long runtimes/large memory usage for large CID font width ranges |
| CVE-2026-59936 | PY pypdf py-pdf | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images |
| CVE-2026-59935 | PY pypdf py-pdf | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) |
| CVE-2026-59937 | PY pypdf py-pdf | 7.5 | Jul 8 | pypdf: Possible long runtimes for repeated malformed cross-reference entries |
| CVE-2026-59938 | PY pypdf py-pdf | 5.3 | Jul 8 | pypdf: Possible large memory usage for wrong image dimensions |
| CVE-2026-57204 | PY pypdf py-pdf | 6.5 | Jun 30 | pypdf: Missing stream length values ignore defined limits |
| CVE-2026-54651 | PY pypdf py-pdf | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing threads/articles in writer |
| CVE-2026-49460 | PY pypdf py-pdf | 3.3 | Jun 22 | pypdf: Inefficient decoding of FlateDecode PNG predictor streams |
| CVE-2026-49461 | PY pypdf py-pdf | 5.5 | Jun 22 | pypdf: Possible large memory usage for form XObjects during text extraction |
| CVE-2026-54531 | PY pypdf py-pdf | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing outlines/bookmarks in writer |
| CVE-2026-54530 | PY pypdf py-pdf | 5.5 | Jun 22 | pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction |
| CVE-2026-48155 | PY pypdf py-pdf | 5.5 | May 28 | pypdf: Possible large memory usage for large offsets for layout mode text |
| CVE-2026-48156 | PY pypdf py-pdf | 3.3 | May 28 | pypdf: Possible long runtimes for zero-only width values in cross-reference streams |
| CVE-2026-48735 | PY pypdf py-pdf | 5.5 | May 28 | pypdf: Manipulated XMP metadata streams can exhaust RAM |
| CVE-2026-41314 | PY pypdf py-pdf | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode image dimensions can exhaust RAM |
| CVE-2026-41313 | PY pypdf py-pdf | 6.5 | Apr 22 | pypdf: Possible long runtimes for wrong size values in incremental mode |
| CVE-2026-41312 | PY pypdf py-pdf | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM |
| CVE-2026-41168 | PY pypdf py-pdf | 5.3 | Apr 22 | pypdf has possible long runtimes for wrong size values in cross-reference and object streams |
| CVE-2026-40260 | PY pypdf py-pdf | 5.3 | Apr 16 | pypdf: Manipulated XMP metadata entity declarations can exhaust RAM |
| CVE-2026-33699 | PY pypdf py-pdf | 7.5 | Mar 26 | pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream |
| CVE-2026-33123 | PY pypdf py-pdf | 6.5 | Mar 20 | pypdf has inefficient decoding of array-based streams |
| CVE-2026-31826 | PY pypdf py-pdf | 5.5 | Mar 10 | pypdf: manipulated stream length values can exhaust RAM |
| CVE-2026-28804 | PY pypdf py-pdf | 5.3 | Mar 6 | pypdf: Inefficient decoding of ASCIIHexDecode streams |