py-pdf pypdf

14 known vulnerabilities in py-pdf pypdf, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-103000 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical…
  • CVE-2026-102999 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the…
  • CVE-2026-102998 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause…
  • CVE-2026-102997 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode…
  • CVE-2026-102996 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with…
  • CVE-2026-102995 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or…
  • CVE-2026-102994 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or…
  • CVE-2026-102993 CVSS 8.7 high pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label…
  • CVE-2026-84311 CVSS 4.8 medium pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py…
  • CVE-2026-84310 CVSS 4.8 medium pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py…
  • CVE-2026-84309 CVSS 6.9 medium pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes…
  • CVE-2026-82398 CVSS 6.9 medium pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the…
  • CVE-2026-71870 CVSS 4.8 medium pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when…
  • CVE-2026-71852 CVSS 4.8 medium pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory…