py-pdf pypdf
64 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-115585 | < 6.21.2 | pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) | HIGH 7.1 | 0.4 % | ||
| CVE-2026-115580 | < 6.21.2 | pypdf: Possible long runtimes for large xref table header limits | HIGH 7.1 | 0.4 % | ||
| CVE-2026-115572 | < 6.21.2 | pypdf: Possible long runtimes for repeated references to the same missing object | HIGH 7.1 | 0.4 % | ||
| CVE-2026-113795 | < 6.20.0 | pypdf: Possible large memory usage for streams with multiple filters | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-113794 | < 6.20.0 | pypdf: Possible infinite loop when hitting EOF in standard xref table | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-113793 | < 6.20.1 | pypdf: Possible infinite loop when removing tree items | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-113792 | < 6.20.1 | pypdf: Possible infinite loop in PdfWriter.find_outline_item | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-113791 | < 6.21.0 | pypdf: Possible large memory usage when parsing content streams | MEDIUM 6.0 | 0.4 % | ||
| CVE-2026-113790 | < 6.21.0 | pypdf: Possible large memory usage when parsing arrays and dictionaries | MEDIUM 6.0 | 0.4 % | ||
| CVE-2026-113789 | < 6.21.0 | pypdf: Possible long runtimes/large memory usage when retrieving form fields | MEDIUM 6.0 | 0.4 % | ||
| CVE-2026-113786 | < 6.21.1 | pypdf: Unvalidated JPEG image data loading | LOW 2.3 | 0.4 % | ||
| CVE-2026-103000 | < 6.19.0 | pypdf: Possible large memory usage when retrieving alphabetical page labels | HIGH 8.7 | 0.4 % | ||
| CVE-2026-102999 | < 6.19.0 | pypdf: Possible long runtimes with large amount of embedded files | HIGH 8.7 | 0.3 % | ||
| CVE-2026-102998 | < 6.19.0 | pypdf: Possible long runtimes when generating appearance streams | HIGH 8.7 | 0.3 % | ||
| CVE-2026-102997 | < 6.18.1 | pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) | HIGH 8.7 | 0.3 % | ||
| CVE-2026-102996 | < 6.18.1 | pypdf: Possible large memory usage when parsing font data | HIGH 8.7 | 0.3 % | ||
| CVE-2026-102995 | < 6.18.1 | pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) | HIGH 8.7 | 0.3 % | ||
| CVE-2026-102994 | < 6.18.0 | pypdf: Possible long runtimes/large memory usage when parsing indirect objects | HIGH 8.7 | 0.3 % | ||
| CVE-2026-102993 | < 6.17.0 | pypdf: Possible large memory usage when retrieving Roman page labels | HIGH 8.7 | 0.3 % | ||
| CVE-2026-84311 | < 6.16.1 | pypdf: Possible long runtimes/large memory usage when extracting XForm objects | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-84310 | < 6.16.1 | pypdf: Possible long runtimes/large memory usage when retrieving outlines | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-84309 | < 6.16.0 | pypdf: Possible infinite loop for TreeObject.insert_child | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-82398 | < 6.15.0 | pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-71870 | < 6.15.0 | pypdf: Possible large memory usage for large /ToUnicode streams | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-71852 | < 6.15.0 | pypdf: Possible long runtimes/large memory usage for large CID font width ranges | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-59936 | < 6.14.1 | pypdf: Possible infinite loop for not terminated inline images | HIGH 8.7 | 0.6 % | ||
| CVE-2026-59935 | < 6.14.2 | pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) | HIGH 8.7 | 0.6 % | ||
| CVE-2026-59937 | < 6.14.0 | pypdf: Possible long runtimes for repeated malformed cross-reference entries | MEDIUM 6.9 | 0.6 % | ||
| CVE-2026-59938 | < 6.14.0 | pypdf: Possible large memory usage for wrong image dimensions | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-57204 | < 6.13.3 | pypdf: Missing stream length values ignore defined limits | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-54651 | < 6.13.1 | pypdf: Possible infinite loop when processing threads/articles in writer | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-49460 | < 6.12.2 | pypdf: Inefficient decoding of FlateDecode PNG predictor streams | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-49461 | < 6.12.2 | pypdf: Possible large memory usage for form XObjects during text extraction | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-54531 | < 6.13.0 | pypdf: Possible infinite loop when processing outlines/bookmarks in writer | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-54530 | < 6.13.0 | pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-48155 | < 6.12.0 | pypdf: Possible large memory usage for large offsets for layout mode text | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-48156 | < 6.12.0 | pypdf: Possible long runtimes for zero-only width values in cross-reference streams | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-48735 | < 6.12.1 | pypdf: Manipulated XMP metadata streams can exhaust RAM | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-41314 | < 6.10.2 | pypdf: Manipulated FlateDecode image dimensions can exhaust RAM | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-41313 | < 6.10.2 | pypdf: Possible long runtimes for wrong size values in incremental mode | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-41312 | < 6.10.2 | pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-41168 | < 6.10.1 | pypdf has possible long runtimes for wrong size values in cross-reference and object streams | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-40260 | < 6.10.0 | pypdf: Manipulated XMP metadata entity declarations can exhaust RAM | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-33699 | < 6.9.2 | pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream | MEDIUM 4.6 | 0.5 % | ||
| CVE-2026-33123 | < 6.9.1 | pypdf has inefficient decoding of array-based streams | MEDIUM 5.1 | 0.4 % | ||
| CVE-2026-31826 | < 6.8.0 | pypdf: manipulated stream length values can exhaust RAM | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-28804 | < 6.7.5 | pypdf: Inefficient decoding of ASCIIHexDecode streams | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-28351 | < 6.7.4 | Manipulated RunLengthDecode streams can exhaust RAM | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-27888 | < 6.7.3 | pypdf: Manipulated FlateDecode XFA streams can exhaust RAM | MEDIUM 6.6 | 0.4 % | ||
| CVE-2026-27628 | < 6.7.2 | pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams | LOW 1.2 | 0.4 % | ||
| CVE-2026-27026 | < 6.7.1 | pypdf possibly has long runtimes for malformed FlateDecode streams | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-27025 | < 6.7.1 | pypdf has possible long runtimes/large memory usage for large /ToUnicode streams | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-27024 | < 6.7.1 | pypdf has a possible infinite loop when processing TreeObject | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-24688 | < 6.6.2 | pypdf has possible Infinite Loop when processing outlines/bookmarks | MEDIUM 5.1 | 0.4 % | ||
| CVE-2026-22691 | < 6.6.0 | pypdf has possible long runtimes for malformed startxref | LOW 2.7 | 0.4 % | ||
| CVE-2026-22690 | < 6.6.0 | pypdf has possible long runtimes for missing /Root object with large /Size values | LOW 2.7 | 0.4 % | ||
| CVE-2025-66019 | < 6.4.0 | pypdf manipulated LZWDecode streams can exhaust RAM | MEDIUM 6.6 | 0.4 % | ||
| CVE-2025-62708 | < 6.1.3 | pypdf manipulated LZWDecode streams can exhaust RAM | MEDIUM 6.6 | 0.4 % | ||
| CVE-2025-62707 | < 6.1.3 | pypdf affected by possible infinite loop when reading DCT inline images without EOF marker | MEDIUM 6.6 | 0.4 % | ||
| CVE-2025-55197 | < 6.0.0 | pypdf's Manipulated FlateDecode streams can exhaust RAM | MEDIUM 6.6 | 0.5 % | ||
| CVE-2023-46250 | >= 3.7.0, < 3.17.0 | pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDF | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-36810 | < 1.27.9 | Quadratic runtime with malformed PDF missing xref marker in pypdf | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-36807 | 2.10.5 | Infinite Loop when reading malformed objects in pypdf | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-36464 | pypdf: < 3.90 ; PyPDF2: >= 2.2.0 | Infinite Loop when a comment isn't followed by a character in pypdf | MEDIUM 6.2 | 0.4 % |