PY
Product
pypdf
71
CVEs
0
On KEV
7.5
Max CVSS
26
New 30D
Severity mix
Critical 0High 27Medium 37Low 7
Watch
Add pypdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103000 | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving alphabetical page labels Affected: < 6.19.0 |
| CVE-2026-102999 | 7.5 | Sep 30 | pypdf: Possible long runtimes with large amount of embedded files Affected: < 6.19.0 |
| CVE-2026-102998 | 7.5 | Sep 30 | pypdf: Possible long runtimes when generating appearance streams Affected: < 6.19.0 |
| CVE-2026-102997 | 7.5 | Sep 30 | pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) Affected: < 6.18.1 |
| CVE-2026-102996 | 7.5 | Sep 30 | pypdf: Possible large memory usage when parsing font data Affected: < 6.18.1 |
| CVE-2026-102995 | 7.5 | Sep 30 | pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) Affected: < 6.18.1 |
| CVE-2026-102994 | 7.5 | Sep 30 | pypdf: Possible long runtimes/large memory usage when parsing indirect objects Affected: < 6.18.0 |
| CVE-2026-102993 | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving Roman page labels Affected: < 6.17.0 |
| CVE-2026-59936 | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images Affected: < 6.14.1 |
| CVE-2026-59935 | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) Affected: < 6.14.2 |
| CVE-2026-59937 | 7.5 | Jul 8 | pypdf: Possible long runtimes for repeated malformed cross-reference entries Affected: < 6.14.0 |
| CVE-2026-33699 | 7.5 | Mar 26 | pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream Affected: < 6.9.2 |
| CVE-2026-27888 | 7.5 | Feb 26 | pypdf: Manipulated FlateDecode XFA streams can exhaust RAM Affected: < 6.7.3 |
| CVE-2026-27628 | 7.5 | Feb 25 | pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams Affected: < 6.7.2 |
| CVE-2025-62708 | 7.5 | Oct 22 | pypdf manipulated LZWDecode streams can exhaust RAM Affected: < 6.1.3 |
| CVE-2025-62707 | 7.5 | Oct 22 | pypdf affected by possible infinite loop when reading DCT inline images without EOF marker Affected: < 6.1.3 |
| CVE-2025-55197 | 7.5 | Aug 13 | pypdf's Manipulated FlateDecode streams can exhaust RAM Affected: < 6.0.0 |
| CVE-2026-119209 New | 7.1 | Oct 29 | pypdf: Possible large memory usage when parsing cross-reference streams Affected: < 6.21.3 |
| CVE-2026-119208 New | 7.1 | Oct 29 | pypdf: Possible long runtimes/large memory usage for encrypted PDF files Affected: < 6.21.3 |
| CVE-2026-119207 New | 7.1 | Oct 29 | pypdf: Possible large memory usage for exceptions in strict mode Affected: < 6.21.3 |
| CVE-2026-119206 New | 7.1 | Oct 29 | pypdf: Possible long runtimes when retrieving page labels Affected: < 6.21.3 |
| CVE-2026-119205 New | 7.1 | Oct 29 | pypdf: Possible infinite loop when cloning dictionaries Affected: < 6.21.4 |
| CVE-2026-119204 New | 7.1 | Oct 29 | pypdf: Possible large memory usage when parsing page tree Affected: < 6.21.4 |
| CVE-2026-119203 New | 7.1 | Oct 29 | pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search Affected: < 6.21.4 |
| CVE-2026-115585 New | 7.1 | Oct 23 | pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) Affected: < 6.21.2 |
| CVE-2026-115580 New | 7.1 | Oct 23 | pypdf: Possible long runtimes for large xref table header limits Affected: < 6.21.2 |
| CVE-2026-115572 New | 7.1 | Oct 23 | pypdf: Possible long runtimes for repeated references to the same missing object Affected: < 6.21.2 |
| CVE-2025-66019 | 6.6 | Nov 25 | pypdf manipulated LZWDecode streams can exhaust RAM Affected: < 6.4.0 |
| CVE-2026-57204 | 6.5 | Jun 30 | pypdf: Missing stream length values ignore defined limits Affected: < 6.13.3 |
| CVE-2026-41314 | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode image dimensions can exhaust RAM Affected: < 6.10.2 |
| CVE-2026-41313 | 6.5 | Apr 22 | pypdf: Possible long runtimes for wrong size values in incremental mode Affected: < 6.10.2 |
| CVE-2026-41312 | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM Affected: < 6.10.2 |
| CVE-2026-33123 | 6.5 | Mar 20 | pypdf has inefficient decoding of array-based streams Affected: < 6.9.1 |
| CVE-2023-36810 | 6.5 | Jun 30 | Quadratic runtime with malformed PDF missing xref marker in pypdf Affected: < 1.27.9 |
| CVE-2023-36807 | 6.5 | Jun 30 | Infinite Loop when reading malformed objects in pypdf Affected: 2.10.5 |
| CVE-2026-113795 | 6.0 | Oct 21 | pypdf: Possible large memory usage for streams with multiple filters Affected: < 6.20.0 |
| CVE-2026-113794 | 6.0 | Oct 21 | pypdf: Possible infinite loop when hitting EOF in standard xref table Affected: < 6.20.0 |
| CVE-2026-113793 | 6.0 | Oct 21 | pypdf: Possible infinite loop when removing tree items Affected: < 6.20.1 |
| CVE-2026-113792 | 6.0 | Oct 21 | pypdf: Possible infinite loop in PdfWriter.find_outline_item Affected: < 6.20.1 |
| CVE-2026-113791 | 6.0 | Oct 21 | pypdf: Possible large memory usage when parsing content streams Affected: < 6.21.0 |
| CVE-2026-113790 | 6.0 | Oct 21 | pypdf: Possible large memory usage when parsing arrays and dictionaries Affected: < 6.21.0 |
| CVE-2026-113789 | 6.0 | Oct 21 | pypdf: Possible long runtimes/large memory usage when retrieving form fields Affected: < 6.21.0 |
| CVE-2026-84309 | 5.5 | Sep 1 | pypdf: Possible infinite loop for TreeObject.insert_child Affected: < 6.16.0 |
| CVE-2026-54651 | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing threads/articles in writer Affected: < 6.13.1 |
| CVE-2026-49461 | 5.5 | Jun 22 | pypdf: Possible large memory usage for form XObjects during text extraction Affected: < 6.12.2 |
| CVE-2026-54531 | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing outlines/bookmarks in writer Affected: < 6.13.0 |
| CVE-2026-54530 | 5.5 | Jun 22 | pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction Affected: < 6.13.0 |
| CVE-2026-48155 | 5.5 | May 28 | pypdf: Possible large memory usage for large offsets for layout mode text Affected: < 6.12.0 |
| CVE-2026-48735 | 5.5 | May 28 | pypdf: Manipulated XMP metadata streams can exhaust RAM Affected: < 6.12.1 |
| CVE-2026-31826 | 5.5 | Mar 10 | pypdf: manipulated stream length values can exhaust RAM Affected: < 6.8.0 |
