Security: py-pdf/pypdf
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Possible infinite loop when loading circular /Prev entries in cross-reference streamsGHSA-2rw7-x74f-jg35 published
Feb 22, 2026 by stefan6419846Moderate -
Possible long runtimes for malformed FlateDecode streamsGHSA-9mvc-8737-8j8h published
Feb 17, 2026 by stefan6419846Moderate -
Possible long runtimes/large memory usage for large /ToUnicode streamsGHSA-wgvp-vg3v-2xq3 published
Feb 17, 2026 by stefan6419846Moderate -
Possible infinite loop when processing TreeObjectGHSA-996q-pr4m-cvgq published
Feb 17, 2026 by stefan6419846Moderate -
Possible infinite loop when processing outlines/bookmarksGHSA-2q4j-m29v-hq73 published
Jan 26, 2026 by stefan6419846Moderate -
Possible long runtimes for malformed startxrefGHSA-4f6g-68pf-7vhv published
Jan 9, 2026 by stefan6419846Moderate -
Manipulated LZWDecode streams can exhaust RAM - Follow-upGHSA-m449-cwjh-6pw7 published
Nov 23, 2025 by stefan6419846Moderate -
Manipulated LZWDecode streams can exhaust RAMGHSA-jfx9-29x2-rv3j published
Oct 22, 2025 by stefan6419846Moderate -
Possible infinite loop when reading DCT inline images without EOF markerGHSA-vr63-x8vc-m265 published
Oct 22, 2025 by stefan6419846Moderate -
Possible long runtimes for missing /Root object with large /Size valuesGHSA-4xc4-762w-m6cg published
Jan 9, 2026 by stefan6419846Moderate