CVE-2026-113794

The pypdf pure-python PDF library is vulnerable to an infinite loop (CWE-835) in versions prior to 6.20.0 . An attacker can trigger this by crafting an incomplete PDF that ends prematurely inside a standard cross-reference table , causing the library to mishandle the unexpected end of file. This ...