{"kind": "product", "path": "vulns/ubuntu-25.10/pypdf", "name": "pypdf", "product": "pypdf", "ecosystem": "Ubuntu:25.10", "items": [{"id": "CVE-2026-59936", "noindex": false, "published": "2026-07-08T19:34:22.610Z", "modified": "2026-07-09T13:28:21.161Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0062, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-59936", "title": "pypdf: Possible infinite loop for not terminated inline images", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-5xf7-4p34-54qr", "https://github.com/py-pdf/pypdf/pull/3891", "https://github.com/py-pdf/pypdf/commit/ec3b14596186c40caca7cf8ab9b2155203e01b5b"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-59935", "noindex": false, "published": "2026-07-08T19:34:15.078Z", "modified": "2026-07-09T13:36:17.854Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0062, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-59935", "title": "pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters, causing an infinite loop during parsing such as when extracting page text. This issue is fixed in version 6.14.2.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-g867-7843-wf8q", "https://github.com/py-pdf/pypdf/pull/3892", "https://github.com/py-pdf/pypdf/commit/5a33a46416aa1ae6c025ff90a3cca57631fdafd2"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-59937", "noindex": false, "published": "2026-07-08T17:25:34.026Z", "modified": "2026-07-09T14:41:30.071Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.0062, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-59937", "title": "pypdf: Possible long runtimes for repeated malformed cross-reference entries", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken cross-reference table entries. This issue is fixed in version 6.14.0.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-55h5-xmcq-c37v", "https://github.com/py-pdf/pypdf/pull/3887", "https://github.com/py-pdf/pypdf/commit/b5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-59938", "noindex": false, "published": "2026-07-08T17:24:29.959Z", "modified": "2026-07-09T13:58:17.678Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00515, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-59938", "title": "pypdf: Possible large memory usage for wrong image dimensions", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in pypdf image parsing. This issue is fixed in version 6.14.0.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-5qjq-93h5-hrgp", "https://github.com/py-pdf/pypdf/pull/3888", "https://github.com/py-pdf/pypdf/commit/c64583be16b8e8763d8777075f8ecbf382014b7a"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-57204", "noindex": false, "published": "2026-06-30T21:59:46.274Z", "modified": "2026-07-01T14:29:01.785Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00367, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-57204", "title": "pypdf: Missing stream length values ignore defined limits", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses this vulnerability can craft a PDF which leads to large memory usage, as MAX_DECLARED_STREAM_LENGTH is sometimes ignored. This requires parsing a content stream without a /Length value. This issue has been fixed in version 6.13.3.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-jm82-fx9c-mx94", "https://github.com/py-pdf/pypdf/releases/tag/6.13.3", "https://nvd.nist.gov/vuln/detail/CVE-2026-57204"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-54651", "noindex": false, "published": "2026-06-22T20:28:28.412Z", "modified": "2026-06-23T12:10:07.463Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00158, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-54651", "title": "pypdf: Possible infinite loop when processing threads/articles in writer", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. This vulnerability is fixed in 6.13.1.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9xf-7f8q-9mcj", "https://github.com/py-pdf/pypdf/pull/3839", "https://github.com/py-pdf/pypdf/releases/tag/6.13.1"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-49460", "noindex": false, "published": "2026-06-22T20:28:16.413Z", "modified": "2026-06-23T15:54:39.908Z", "cvss": 5.1, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00166, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-49460", "title": "pypdf: Inefficient decoding of FlateDecode PNG predictor streams", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /FlateDecode filter with a PNG predictor. This vulnerability is fixed in 6.12.2.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-5hgr-hg42-57jg", "https://github.com/py-pdf/pypdf/pull/3806", "https://github.com/py-pdf/pypdf/releases/tag/6.12.2"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-49461", "noindex": false, "published": "2026-06-22T20:27:16.174Z", "modified": "2026-06-23T15:54:54.860Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00174, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-49461", "title": "pypdf: Possible large memory usage for form XObjects during text extraction", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting the text of a page which contains a form XObject with self-references. This vulnerability is fixed in 6.12.2.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-j543-4vmf-qm7v", "https://github.com/py-pdf/pypdf/pull/3805", "https://github.com/py-pdf/pypdf/releases/tag/6.12.2"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-54531", "noindex": false, "published": "2026-06-22T20:26:19.756Z", "modified": "2026-06-23T16:11:53.472Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00174, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-54531", "title": "pypdf: Possible infinite loop when processing outlines/bookmarks in writer", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a writer. This vulnerability is fixed in 6.13.0.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-m2v9-299j-rv96", "https://github.com/py-pdf/pypdf/pull/3830", "https://github.com/py-pdf/pypdf/releases/tag/6.13.0"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-54530", "noindex": false, "published": "2026-06-22T20:25:29.305Z", "modified": "2026-06-23T16:11:37.526Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00174, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-54530", "title": "pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-52x6-gq3r-vpf4", "https://github.com/py-pdf/pypdf/pull/3830", "https://github.com/py-pdf/pypdf/releases/tag/6.13.0"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-48155", "noindex": false, "published": "2026-05-28T14:51:49.411Z", "modified": "2026-05-28T15:57:54.367Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00127, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48155", "title": "pypdf: Possible large memory usage for large offsets for layout mode text", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-cj93-chg6-vgv8", "https://github.com/py-pdf/pypdf/pull/3790", "https://github.com/py-pdf/pypdf/releases/tag/6.12.0"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-48156", "noindex": false, "published": "2026-05-28T14:50:41.829Z", "modified": "2026-05-30T02:08:20.806Z", "cvss": 5.1, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00124, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48156", "title": "pypdf: Possible long runtimes for zero-only width values in cross-reference streams", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W [0 0 0] values and large /Size values. This vulnerability is fixed in 6.12.0.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-248m-82v9-q6g6", "https://github.com/py-pdf/pypdf/pull/3791", "https://github.com/py-pdf/pypdf/releases/tag/6.12.0"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-48735", "noindex": false, "published": "2026-05-28T14:49:11.814Z", "modified": "2026-06-02T14:57:31.021Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00128, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48735", "title": "pypdf: Manipulated XMP metadata streams can exhaust RAM", "description": "pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-wjqc-6w8f-h24c", "https://github.com/py-pdf/pypdf/pull/3796", "https://github.com/py-pdf/pypdf/releases/tag/6.12.1"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-41314", "noindex": false, "published": "2026-04-22T21:08:14.700Z", "modified": "2026-04-23T14:21:47.589Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00226, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-41314", "title": "pypdf: Manipulated FlateDecode image dimensions can exhaust RAM", "description": "pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-x284-j5p8-9c5p", "https://github.com/py-pdf/pypdf/pull/3734", "https://github.com/py-pdf/pypdf/commit/ac734dab4eef92bcce50d503949b4d9887d89f11"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-41313", "noindex": false, "published": "2026-04-22T21:04:59.877Z", "modified": "2026-04-23T16:24:39.932Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00214, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-41313", "title": "pypdf: Possible long runtimes for wrong size values in incremental mode", "description": "pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-4pxv-j86v-mhcw", "https://github.com/py-pdf/pypdf/pull/3735", "https://github.com/py-pdf/pypdf/commit/c50a0104cf083356f7c7f5d61410466a57f5c88a"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-41312", "noindex": false, "published": "2026-04-22T21:02:53.156Z", "modified": "2026-04-23T13:45:30.296Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00226, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-41312", "title": "pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM", "description": "pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing a stream compressed using `/FlateDecode` with a `/Predictor` unequal 1 and large predictor parameters. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-7gw9-cf7v-778f", "https://github.com/py-pdf/pypdf/pull/3734", "https://github.com/py-pdf/pypdf/commit/ac734dab4eef92bcce50d503949b4d9887d89f11"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-41168", "noindex": false, "published": "2026-04-22T20:49:10.401Z", "modified": "2026-04-23T16:24:48.712Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00297, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-41168", "title": "pypdf has possible long runtimes for wrong size values in cross-reference and object streams", "description": "pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large `/Size` values or object streams with wrong large `/N` values. This has been fixed in pypdf 6.10.1. As a workaround, one may apply the changes from the patch manually.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-jj6c-8h6c-hppx", "https://github.com/py-pdf/pypdf/pull/3733", "https://github.com/py-pdf/pypdf/commit/62338e9d36419cf193ccec7331784f45df1d70b3"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-40260", "noindex": false, "published": "2026-04-16T23:18:26.687Z", "modified": "2026-04-17T18:42:05.059Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00423, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-40260", "title": "pypdf: Manipulated XMP metadata entity declarations can exhaust RAM", "description": "pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has been fixed in version 6.10.0.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-3crg-w4f6-42mx", "https://github.com/py-pdf/pypdf/pull/3724", "https://github.com/py-pdf/pypdf/commit/b15a374e5ca648d4878e57c3b2c0551e7f8cc7f8"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-33699", "noindex": false, "published": "2026-03-26T23:58:42.776Z", "modified": "2026-03-27T19:59:39.751Z", "cvss": 4.6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U", "severity": "medium", "epss": 0.00472, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-33699", "title": "pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream", "description": "pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider applying the changes from the patch manually.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-87mj-5ggw-8qc3", "https://github.com/py-pdf/pypdf/pull/3693", "https://github.com/py-pdf/pypdf/releases/tag/6.9.2"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-33123", "noindex": false, "published": "2026-03-20T09:09:12.831Z", "modified": "2026-03-20T18:07:16.458Z", "cvss": 5.1, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00355, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-33123", "title": "pypdf has inefficient decoding of array-based streams", "description": "pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1.", "references": ["https://github.com/py-pdf/pypdf/security/advisories/GHSA-qpxp-75px-xjcp", "https://github.com/py-pdf/pypdf/pull/3686", "https://github.com/py-pdf/pypdf/releases/tag/6.9.1"], "fixes": [], "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}]}], "total": 37, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "pypdf", "path": "vulns/ubuntu-25.10/pypdf", "ecosystem": "Ubuntu:25.10"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-07-09T14:41:30.071Z", "early_advisories": [], "license": "Puedes utilizar libremente la selección de PatchFirst y nuestras aportaciones (prioridades, alertas tempranas, textos, resúmenes y agregados) para tus propios fines, incluido el uso interno de tu empresa. La reventa, la distribución comercial y la creación masiva de réplicas de esta selección o de estas aportaciones requieren un acuerdo escrito con el operador. Siempre que uses o publiques la selección o nuestras aportaciones, cita a PatchFirst (https://patchfirst.dev/vulns/) con este enlace a la página del flujo de tu región. Los registros originales de fuentes abiertas siguen sujetos a sus respectivas licencias y condiciones. Estas condiciones no limitan tus derechos sobre los datos originales, que puedes obtener directamente de esas fuentes.", "terms_url": "https://patchfirst.dev/es/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst selecciona, normaliza y combina los registros; se pueden añadir resúmenes y traducciones. Las noticias incluyen un enlace a la fuente original en cada entrada.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Las licencias de las bases originales varían; consulta el catálogo de fuentes."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Puntuaciones públicas gratuitas; se solicita atribución (FIRST EPSS, puntuaciones generadas por Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}