CVE-2024-25180

CVE-2024-25180 개요 pdfmake는 순수 JavaScript 기반의 클라이언트/서버 PDF 인쇄 도구입니다. 이 패키지의 영향을 받는 버전은 임의 코드 삽입 공격에 취약하여, 공격자가 /pdf 경로로 조작된 POST 요청을 전송해 임의 코드를 실행할 수 있습니다. 공격자는 조작된 요청을 전송하여 시스템에서 임의 코드를 실행할 수 있습니다. CVE-2024-25180 Remote Code Execution in pdfmake 스크립트 활용 root@kitploit: python3 CVE-2024-25180.py...

CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

UBUNTU-CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

UBUNTU-CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

UBUNTU-CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

CVE-2026-82866 @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch

@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...

ROOT-APP-PYPI-CVE-2026-59937 CVE-2026-59937 in pypdf - Patched by Root

Root has patched CVE-2026-59937 in the pypdf package for Root:PyPI. Multiple fixed versions available...

GHSA-FP3F-MC75-235C pypdf: Possible large memory usage for large /ToUnicode streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.15.0. Workarounds If you cannot...

CLSA-2026-1780534264 TuxCare security update for jspdf (12 CVEs)

TuxCare rebuilt jspdf to address 12 CVEs. Fixed in 2.5.1-tuxcare.1...

ROS-20260728-73-0019

The vulnerability in python-PyPDF2 is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-42343

pypdf: Possible large memory usage for wrong image dimensions...

PYSEC-2026-3018 pypdf: Possible infinite loop when processing threads/articles in writer

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. Patches This has been fixed in pypdf==6.13.1. Workarounds If users cannot upgrade yet, consider applying the changes from PR 3839...

PT-2026-59630

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if parse content stream is executed. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case if th...

SUSE CVE-2026-59935

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters, causing an infinite loop during parsing such as when extracting page text. This issu...

Linux Distros Unpatched Vulnerability : CVE-2026-59937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause...

OPENSUSE-SU-2026:11238-1 python313-pypdf-6.14.2-1.1 on GA media

These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

DEBIAN-CVE-2026-59938

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in pypdf image parsing. This issue is fixed in version 6.14.0...