p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de python-pypdf

Vulnerabilidades publicadas para python-pypdf en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 5

  1. CVE-2026-54651

    Media · CVSS 6.9EPSS 0,16%Sin corrección publicada

    pypdf: Possible infinite loop when processing threads/articles in writer

    pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. This vulnerability is fixed in 6.13.1.

    Publicación Actualización
  2. CVE-2026-49460

    Media · CVSS 5.1EPSS 0,17%Sin corrección publicada

    pypdf: Inefficient decoding of FlateDecode PNG predictor streams

    pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /FlateDecode filter with a PNG predictor. This vulnerability is fixed in 6.12.2.

    Publicación Actualización
  3. CVE-2026-49461

    Media · CVSS 6.9EPSS 0,17%Sin corrección publicada

    pypdf: Possible large memory usage for form XObjects during text extraction

    pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting the text of a page which contains a form XObject with self-references. This vulnerability is fixed in 6.12.2.

    Publicación Actualización
  4. CVE-2026-54531

    Media · CVSS 6.9EPSS 0,17%Sin corrección publicada

    pypdf: Possible infinite loop when processing outlines/bookmarks in writer

    pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a writer. This vulnerability is fixed in 6.13.0.

    Publicación Actualización
  5. CVE-2026-54530

    Media · CVSS 6.9EPSS 0,17%Sin corrección publicada

    pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

    pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0.

    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →