CVE-2026-24688

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability This repo includes proof of concept code for triggering CVE-2026-24688. Summary Critical Denial of Service vulnerability in pypdf's outline bookmark parsing logic. When processing a PDF with circular outline references, the parser ente...

ROOT-APP-PYPI-CVE-2026-102994 CVE-2026-102994 in pypdf - Patched by Root

Root has patched CVE-2026-102994 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102995 CVE-2026-102995 in pypdf - Patched by Root

Root has patched CVE-2026-102995 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102999 CVE-2026-102999 in pypdf - Patched by Root

Root has patched CVE-2026-102999 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102993 CVE-2026-102993 in pypdf - Patched by Root

Root has patched CVE-2026-102993 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102996 CVE-2026-102996 in pypdf - Patched by Root

Root has patched CVE-2026-102996 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102998 CVE-2026-102998 in pypdf - Patched by Root

Root has patched CVE-2026-102998 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102997 CVE-2026-102997 in pypdf - Patched by Root

Root has patched CVE-2026-102997 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-103000 CVE-2026-103000 in pypdf - Patched by Root

Root has patched CVE-2026-103000 in the pypdf package for Root:PyPI. Multiple fixed versions available...

cve-2026-24688

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability This repo includes proof of concept code for triggering CVE-2026-24688. Summary Critical Denial of Service vulnerability in pypdf's outline bookmark parsing logic. When processing a PDF with circular outline references, the parser ente...

CLSA-2026-1791448168 TuxCare security update for pypdf (6 CVEs)

TuxCare rebuilt pypdf to address 6 CVEs. Fixed in 5.9.0.post19+tuxcare...

CLSA-2026-1791267859 TuxCare security update for pypdf (5 CVEs)

TuxCare rebuilt pypdf to address 5 CVEs. Fixed in 5.9.0.post18+tuxcare...

PyPDF DoS

The vulnerability of the pypdf/generic/datastructures.py file from the Python library for working with PDF files, specifically PyPDF formerly PyPDF2, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PyPDF DoS

The vulnerability in the pypdf/writer.py file of the Python library for working with PDF files, PyPDF formerly PyPDF2, relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

agatta (>=1.0.0, <=1.0.2), agentbuddy (0.1.1.dev33) +102 more potentially affected by CVE-2026-103000 via pypdf (3.17.4)

pypdf PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agatta =1.0.0, =0.0.3, =0.0.1, =1.1.0, =0.0.2, =1.2.0, =0.6.7, =1.2.1, =0.1.3, =0.0.1, =0.8.2 - cadenai 0.1.0 and more Source cves: CVE-2026-103000...

pretix (>=4.17.0, <=4.17.1), providentia (2.4.0) potentially affected by CVE-2026-103000 via pypdf (3.4.1)

pypdf PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - pretix =4.17.0, =4.17.1 - providentia 2.4.0 Source cves: CVE-2026-103000 Source advisory: OSV:PYSEC-2026-4160...

indico (>=3.2.6, <=3.2.9) potentially affected by CVE-2026-103000 via pypdf (3.12.1)

pypdf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - indico =3.2.6, =3.2.9 Source cves: CVE-2026-103000 Source advisory: OSV:PYSEC-2026-4160...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +137 more potentially affected by CVE-2026-103000 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

gpt3discord (>=11.7.3, <=12.3.8) potentially affected by CVE-2026-103000 via pypdf (3.11.1)

pypdf PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gpt3discord =11.7.3, =12.3.8 Source cves: CVE-2026-103000 Source advisory: OSV:PYSEC-2026-4160...

centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2026-103000 via pypdf (5.6.1)

pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2026-103000 Source advisory: OSV:PYSEC-2026-4160...