GHSA-QFV9-64JG-MH7P pypdf: Possible infinite loop in PdfWriter.find_outline_item

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires calling findoutlineitem on a PdfWriter. Patches This has been fixed in pypdf==6.20.1. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4188...

pypdf: Possible infinite loop in PdfWriter.find_outline_item

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires calling findoutlineitem on a PdfWriter. Patches This has been fixed in pypdf==6.20.1. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4188...

CVE-2026-113792

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.findoutlineitem on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

CVE-2026-113792 pypdf: Possible infinite loop in PdfWriter.find_outline_item

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.findoutlineitem on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

EUVD-2026-107333

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.findoutlineitem on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

CVE-2026-113792

The pypdf pure-python PDF library is vulnerable to a Denial of Service (DoS) condition in versions prior to 6.20.1 . Specifically, calling the PdfWriter.find_outline_item function on a maliciously crafted PDF containing a cyclic outline hierarchy can trigger an infinite loop , effectively blockin...