ROOT-APP-PYPI-CVE-2026-27888 CVE-2026-27888 in pypdf - Patched by Root

Root has patched CVE-2026-27888 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-28804 CVE-2026-28804 in pypdf - Patched by Root

Root has patched CVE-2026-28804 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-27628 CVE-2026-27628 in pypdf - Patched by Root

Root has patched CVE-2026-27628 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-31826 CVE-2026-31826 in pypdf - Patched by Root

Root has patched CVE-2026-31826 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-27024 CVE-2026-27024 in pypdf - Patched by Root

Root has patched CVE-2026-27024 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-27025 CVE-2026-27025 in pypdf - Patched by Root

Root has patched CVE-2026-27025 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-33123 CVE-2026-33123 in pypdf - Patched by Root

Root has patched CVE-2026-33123 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-41168 CVE-2026-41168 in pypdf - Patched by Root

Root has patched CVE-2026-41168 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-40260 CVE-2026-40260 in pypdf - Patched by Root

Root has patched CVE-2026-40260 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-33699 CVE-2026-33699 in pypdf - Patched by Root

Root has patched CVE-2026-33699 in the pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-24688 CVE-2026-24688 in pypdf - Patched by Root

Root has patched CVE-2026-24688 in the pypdf package for Root:PyPI. Multiple fixed versions available...

PT-2026-84462

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.16.1 Description An attacker can craft a PDF file that causes the get outline function in pypdf/ doc common.py to consume excessive memory and long runtimes. This occurs when retrieving document outlines that contain ...

PT-2026-84463

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.16.1 Description An attacker can craft a PDF file that leads to excessive memory consumption and long runtimes. This occurs when extracting text from a page containing numerous reused form XObjects, where a form invok...

PT-2026-84461

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.16.0 Description An attacker can craft a PDF with a cyclic tree structure that triggers an infinite loop. This occurs when a writing code path utilizes the TreeObject.insert child function in pypdf/generic/ data...

SUSE CVE-2026-71870

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

Security Bulletin: Vulnerability in pypdf bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the pypdf library, which is affected by multiple vulnerabilities, including infinite loop and denial of service vulnerabilities. CVE-2025-66019, CVE-2026-22690, CVE-2026-22691. Vulnerability Details...

indico (>=3.2.6, <=3.2.9) potentially affected by CVE-2026-71870 via pypdf (3.12.1)

pypdf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - indico =3.2.6, =3.2.9 Source cves: CVE-2026-71870 Source advisory: OSV:PYSEC-2026-3655...

label-sorter (>=0.2.0, <=0.3.0), sereto (0.3.5) potentially affected by CVE-2026-71870 via pypdf (5.8.0)

pypdf PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - label-sorter =0.2.0, =0.3.0 - sereto 0.3.5 Source cves: CVE-2026-71870 Source advisory: OSV:PYSEC-2026-3655...

cewler (1.2.0.post1), python-xdoc (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-71870 via pypdf (4.0.1)

pypdf PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cewler 1.2.0.post1 - python-xdoc =0.1.0, =0.1.1 Source cves: CVE-2026-71870 Source advisory: OSV:PYSEC-2026-3655...

agentc-llamaindex (0.2.5a2), agentia (>=0.0.2, <=0.0.10) +245 more potentially affected by CVE-2026-71870 via pypdf (5.9.0)

pypdf PYPI version 5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agentc-llamaindex 0.2.5a2 - agentia =0.0.2, =0.0.1, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.11.2, =1.1.0a20250429, =3.1.8, =1.0.5, =1.0.0, =0.1.0, =1.1.1,...