PyPDF Function XSS

The vulnerability of the functions PageObject.extracttext and PageObject.extractxformtext in the Python library for working with PDF files, PyPDF, is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

CVE-2026-84311: Excessive Iteration

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

org.rapidpm:testbench-ng-m-framework-v10 (>=00.07.05-rpm, <=00.07.06-rpm), org.rapidpm:testbench-ng-m-pageobject-vaadin-v10-oss (>=00.07.05-rpm, <=00.07.06-rpm) +1 more potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.6)

com.vaadin:vaadin MAVEN version 10.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - org.rapidpm:testbench-ng-m-framework-v10 =00.07.05-rpm, =00.07.05-rpm, =00.07.05-rpm, =00.07.06-rpm Source cves: CVE-2026-27...

com.vaadin:vaadin-platform-test (10.0.9), org.rapidpm:rapidpm-vaadin-testbench-ng-m-framework-v10 (>=01.00.00-rpm, <=01.00.01-rpm) +1 more potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.9)

com.vaadin:vaadin MAVEN version 10.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.9 - org.rapidpm:rapidpm-vaadin-testbench-ng-m-framework-v10 =01.00.00-rpm, =01.00.00-rp...

com.vaadin:vaadin-platform-test (10.0.2), org.rapidpm.vaadin:rapidpm-vaadin-cdi-m-integration-tests (00.07.04-rpm) +4 more potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.2)

com.vaadin:vaadin MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.2 - org.rapidpm.vaadin:rapidpm-vaadin-cdi-m-integration-tests 00.07.04-rpm -...