Pypdf

This hub aggregates every CVE we track for Pypdf, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Pypdf.

• CVE-2026-59936pypdf: Possible infinite loop for not terminated inline images7.5Jul 8, 2026
• CVE-2026-59935pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)7.5Jul 8, 2026
• CVE-2026-59937pypdf: Possible long runtimes for repeated malformed cross-reference entries7.5Jul 8, 2026
• CVE-2026-59938pypdf: Possible large memory usage for wrong image dimensions5.3Jul 8, 2026
• CVE-2026-57204pypdf: Missing stream length values ignore defined limits6.5Jun 30, 2026
• CVE-2026-54651pypdf: Possible infinite loop when processing threads/articles in writer5.5Jun 22, 2026
• CVE-2026-49460pypdf: Inefficient decoding of FlateDecode PNG predictor streams3.3Jun 22, 2026
• CVE-2026-49461pypdf: Possible large memory usage for form XObjects during text extraction5.5Jun 22, 2026
• CVE-2026-54531pypdf: Possible infinite loop when processing outlines/bookmarks in writer5.5Jun 22, 2026
• CVE-2026-54530pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction5.5Jun 22, 2026
• CVE-2026-48155pypdf: Possible large memory usage for large offsets for layout mode text5.5May 28, 2026
• CVE-2026-48156pypdf: Possible long runtimes for zero-only width values in cross-reference streams3.3May 28, 2026
• CVE-2026-48735pypdf: Manipulated XMP metadata streams can exhaust RAM5.5May 28, 2026
• CVE-2026-41314pypdf: Manipulated FlateDecode image dimensions can exhaust RAM6.5Apr 22, 2026
• CVE-2026-41313pypdf: Possible long runtimes for wrong size values in incremental mode6.5Apr 22, 2026