pypdf has possible large memory usage when parsing page tree

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the page tree with many shared resources. Patches This has been fixed in pypdf==6.21.4. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4290...

GHSA-CGGF-277G-3Q54 pypdf has possible large memory usage when parsing page tree

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the page tree with many shared resources. Patches This has been fixed in pypdf==6.21.4. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4290...

GHSA-4VQV-7265-GM2W pypdf has possible large memory usage for exceptions in strict mode

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4265...

pypdf has possible large memory usage for exceptions in strict mode

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4265...

GHSA-62M5-6WH8-28X7 pypdf has possible long runtimes/large memory usage for encrypted PDF files

Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This requires accessing the page count of an encrypted PDF file, which itself declares a wrong /Count value. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade...

pypdf has possible long runtimes/large memory usage for encrypted PDF files

Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This requires accessing the page count of an encrypted PDF file, which itself declares a wrong /Count value. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade...

pypdf has possible large memory usage when parsing cross-reference streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires opening a file with cross-reference streams. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4269...

GHSA-X3RH-GJGM-FMQC pypdf has possible large memory usage when parsing cross-reference streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires opening a file with cross-reference streams. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4269...

CVE-2026-61846

The Crass Ruby CSS parser is vulnerable to uncontrolled recursion (CWE-674) in versions prior to 1.0.7 . The parser lacks a depth guard when recursively processing CSS simple blocks and functions , allowing an attacker-controlled CSS value with deeply nested structures to trigger a SystemStackErr...

CVE-2026-61846 Crass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled CSS value containing deeply nested blocks or functions can recurse until Ruby raises...

CVE-2026-61845

The Crass Ruby CSS parser is vulnerable to a Denial of Service (DoS) condition in versions prior to 1.0.7 . The root cause is that the parser converts CSS scientific notation number values with unbounded exponentiation before clamping the result to Float::MAX. An attacker providing a malicious CS...

CVE-2026-61845 Crass: Large numeric exponents cause CPU and memory denial of service

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts CSS scientific notation number values with unbounded exponentiation before clamping the result to Float::MAX. Applications that use Crass to parse attacker-controlled CSS...

CVE-2026-61846: rgrove crass: Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses CSS simple blocks and functions without a depth guard. An attacker-controlled CSS value containing deeply nested blocks or functions can recurse until Ruby raises...

CVE-2026-61845: rgrove crass: Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification

Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts CSS scientific notation number values with unbounded exponentiation before clamping the result to Float::MAX. Applications that use Crass to parse attacker-controlled CSS...

CVE-2026-119208

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application accesses the page count of a crafted encrypted PDF whose page tree declares a forged /Count value. Even after successful decryption, page-count retrieval trust...

pillow: pillow: Denial of service via crafted PDF during append operations

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted PDF document to an application performing PDF append operations. Because the PDF parser fails to properly track cyclic or deeply nested object references,...

DEBIAN-CVE-2026-119208

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application accesses the page count of a crafted encrypted PDF whose page tree declares a forged /Count value. Even after successful decryption, page-count retrieval trust...

CVE-2026-119209 pypdf: Possible large memory usage when parsing cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while opening a crafted PDF containing cross-reference streams that declare very large entry counts. Highly compressible streams and /Prev chains can multiply the number of parsed entries...

CVE-2026-119209 pypdf: Possible large memory usage when parsing cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while opening a crafted PDF containing cross-reference streams that declare very large entry counts. Highly compressible streams and /Prev chains can multiply the number of parsed entries...

CVE-2026-119209

The pypdf pure-python PDF library (prior to version 6.21.3 ) is vulnerable to uncontrolled resource consumption (CWE-400, CWE-770). A crafted PDF can trigger excessive memory consumption when opening cross-reference streams that declare very large entry counts. Specifically, highly compressible s...