6 matches found
CVE-2023-36807
pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single co...
document-sorter (0.1.0), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2023-36807 via pypdf2 (2.10.5)
pypdf2 PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf2 and may be impacted: - document-sorter 0.1.0 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2023-36807 Source advisory: OSV:GHSA-HM9V-VJ3R-R55M...
document-sorter (0.1.0), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2023-36807 via pypdf2 (2.10.5)
pypdf2 PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf2 and may be impacted: - document-sorter 0.1.0 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2023-36807 Source advisory: GHSA-HM9V-VJ3R-R55M...
CVE-2023-36807
pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single co...
CVE-2023-36807
CVE-2023-36807 affects the PyPDF2/pypdf library. In version 2.10.5, crafting a malformed PDF can trigger an infinite loop in reading objects, blocking the process and fully using one CPU core. The root cause is in the object reader path (read_object) used to parse PDF objects. A fix was merged in...
CVE-2023-36807
pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single co...