CVE Tools
Track your stack

Py-pdf

37 CVEs tracked since 2026. Since Feb 2026, none of them reached CISA KEV.

Py-pdf CVEs per month

Feb 2026 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Py-pdf CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0260
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-09110
2026-10200
2026-113 or fewer

Products

The products that kept showing up in Py-pdf's monthly top three, with their CVEs summed over those months.

  1. Pypdf353 months
  2. FPDF221 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Py-pdf.

  1. CVE-2026-119209pypdf: Possible large memory usage when parsing cross-reference streams5.5
  2. CVE-2026-119208pypdf: Possible long runtimes/large memory usage for encrypted PDF files5.5
  3. CVE-2026-119207pypdf: Possible large memory usage for exceptions in strict mode5.5
  4. CVE-2026-119206pypdf: Possible long runtimes when retrieving page labels5.5
  5. CVE-2026-119205pypdf: Possible infinite loop when cloning dictionaries5.5
  6. CVE-2026-119204pypdf: Possible large memory usage when parsing page tree5.5
  7. CVE-2026-119203pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search5.5
  8. CVE-2026-115585pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)—
  9. CVE-2026-115580pypdf: Possible long runtimes for large xref table header limits—
  10. CVE-2026-115572pypdf: Possible long runtimes for repeated references to the same missing object—
  11. CVE-2026-114610fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'6.5
  12. CVE-2026-114609fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content5.8
  13. CVE-2026-113795pypdf: Possible large memory usage for streams with multiple filters5.5
  14. CVE-2026-113794pypdf: Possible infinite loop when hitting EOF in standard xref table5.5
  15. CVE-2026-113793pypdf: Possible infinite loop when removing tree items4.3

The record

Peak rank
#95 in Oct 2026
Busiest month shown
Oct 2026, 20 CVEs
Months with a KEV entry
0 since Feb 2026
Monthly snapshots
3 since 2026
Py-pdf's full record, month by month