CVE-2026-119206 pypdf: Possible long runtimes when retrieving page labels

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page labels from a crafted PDF containing a flat page-label number tree with many ranges. The pagelabels property resolves each page independently and repeatedly scans the same /Num...

CVE-2026-119206

The pypdf Python PDF library is vulnerable to uncontrolled resource consumption (CWE-400) in versions prior to 6.21.3 . A crafted PDF containing a flat page-label number tree with many ranges can cause the page_labels property to take excessive time. This occurs because the property resolves each...

CVE-2026-119206: py-pdf pypdf: pypdf is a free and open-source pure-python PDF library

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page labels from a crafted PDF containing a flat page-label number tree with many ranges. The pagelabels property resolves each page independently and repeatedly scans the same /Num...