Py-Pdf Pypdf

71 CVEs affecting Py-Pdf Pypdf. Latest disclosed: 2026-10-29. Critical: 0, High: 17.

Top CVEs affecting Py-Pdf Pypdf
CVESeverityScorePublishedSummary
CVE-2026-103000High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label values that cause p…
CVE-2026-102999High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachmen…
CVE-2026-102998High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py ap…
CVE-2026-102997High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data c…
CVE-2026-102996High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Wi…
CVE-2026-102995High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a…
CVE-2026-102994High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that…
CVE-2026-102993High7.52026-09-30pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/_p…
CVE-2026-59936High7.52026-07-08pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated in…
CVE-2026-59935High7.52026-07-08pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated in…
CVE-2026-59937High7.52026-07-08pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that caus…
CVE-2026-33699High7.52026-03-27pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an in…
CVE-2026-27888High7.52026-02-26pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who uses this vulnerability can craft a PDF which leads to the RAM being e…
CVE-2026-27628High7.52026-02-25pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loo…
CVE-2025-62708High7.52025-10-22pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large m…
CVE-2025-62707High7.52025-10-22pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infi…
CVE-2025-55197High7.52025-08-13pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requi…
CVE-2026-57204Medium6.52026-06-30pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses this vulnerability can…
CVE-2026-41314Medium6.52026-04-22pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads t…
CVE-2026-41313Medium6.52026-04-22pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads t…