Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pypdf-6.3.0-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in pypdf-6.3.0-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-66019 DESCRIPTION: pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which...

CVE-2025-66019

creationtimestamp| type| source ---|---|--- 2026-03-04 18:48:35+00:00| seen| https://gist.github.com/mac-eochaidh/bd62f594764b1056a147ff47372cbf8a...

CVE-2025-66019 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-66019

pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patch...

Linux Distros Unpatched Vulnerability : CVE-2025-66019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory...

UBUNTU-CVE-2025-66019

pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patch...

CVE-2025-66019

CVE-2025-66019 affects the Python PDF library pypdf up to version 6.3.x. Reporter data from multiple sources state that parsing a page content stream using the LZWDecode filter can cause memory usage to balloon to as much as 1 GB per stream, leading to potential denial of service on affected pars...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +1995 more potentially affected by CVE-2025-66019 via pypdf (>=6.0.0 <=6.3.0)

pypdf PYPI version =6.0.0, =0.0.5, =0.1.0, =0.0.1, =0.4.1, =0.3.6, =0.2.5, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =0.6.0, =1.2.32, =1.0.1, =0.2.5, =0.2.10 and more Source cves: CVE-2025-66019 Source advisory: SNYK:PYTHON-PYPDF-14105065...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2518 more potentially affected by CVE-2025-66019 via pypdf (>=3.10.0 <=6.3.0)

pypdf PYPI version =3.10.0, =0.0.5, =0.1.0, =0.0.1, =0.4.1, =0.3.6, =0.2.5, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =0.6.0, =1.2.32, =2.0.2 and more Source cves: CVE-2025-66019 Source advisory: OSV:GHSA-M449-CWJH-6PW7...