CVE-2026-28804

The connected advisory describes a pypdf vulnerability (GHSA-9M86-7PMV-2852) where inefficient decoding of ASCIIHexDecode streams in PDFs can cause long runtimes. Exploitation requires accessing a stream using the ASCIIHexDecode filter. The advisory notes a fix in pypdf 6.7.5 and suggests a worka...