label-sorter (>=0.2.0, <=0.3.0), sereto (0.3.5) potentially affected by CVE-2025-62707 via pypdf (5.8.0)

pypdf PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - label-sorter =0.2.0, =0.3.0 - sereto 0.3.5 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2025-62707 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

assert-files (>=0.1.0, <=0.1.3), vpplib (0.0.4) +1 more potentially affected by CVE-2025-62707 via pypdf (3.16.4)

pypdf PYPI version 3.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - assert-files =0.1.0, =0.61.0, =0.65.0 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

cewler (1.2.0.post1), python-xdoc (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-62707 via pypdf (4.0.1)

pypdf PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cewler 1.2.0.post1 - python-xdoc =0.1.0, =0.1.1 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

iiiflow (>=0.1.0, <=1.3.2), mayan-edms (>=4.5.0, <=4.5.8) potentially affected by CVE-2025-62707 via pypdf (3.14.0)

pypdf PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - iiiflow =0.1.0, =4.5.0, =4.5.8 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

agentc-llamaindex (0.2.5a2), agentia (>=0.0.2, <=0.0.10) +243 more potentially affected by CVE-2025-62707 via pypdf (5.9.0)

pypdf PYPI version 5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agentc-llamaindex 0.2.5a2 - agentia =0.0.2, =0.0.1, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =1.1.0a20250429, =3.1.8, =1.0.5, =1.0.0, =0.1.0, =1.1.1, =1.4.2,...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +18 more potentially affected by CVE-2025-62707 via pypdf (>=6.0.0, <=6.1.1)

pypdf PYPI version =6.0.0, =0.0.0, =1759155233.0.0, =0.3.0, =4.7.6, =1.6.52, =1.0.0, =0.6.35, =0.0.1, =2025.7.0, =2025.8.3 and more Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

gpt3discord (>=11.7.3, <=12.3.8) potentially affected by CVE-2025-62707 via pypdf (3.11.1)

pypdf PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gpt3discord =11.7.3, =12.3.8 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

pretix (>=4.17.0, <=4.17.1), providentia (2.4.0) potentially affected by CVE-2025-62707 via pypdf (3.4.1)

pypdf PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - pretix =4.17.0, =4.17.1 - providentia 2.4.0 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

pspdfutils (>=3.0.5, <=3.0.7) potentially affected by CVE-2025-62707 via pypdf (3.10.0)

pypdf PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - pspdfutils =3.0.5, =3.0.7 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

pypdf possibly loops infinitely when reading DCT inline images without EOF marker

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +137 more potentially affected by CVE-2025-62707 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +18 more potentially affected by CVE-2025-62707 via pypdf (>=6.0.0, <=6.1.1)

pypdf PYPI version =6.0.0, =0.0.0, =1759155233.0.0, =0.3.0, =4.7.6, =1.6.52, =1.0.0, =0.6.35, =0.0.1, =2025.7.0, =2025.8.3 and more Source cves: CVE-2025-62707 Source advisory: SNYK:PYTHON-PYPDF-13658705...

chellow (>=1688456919.0.0, <=1692616986.0.0), cybrex (>=1.0.1, <=1.0.7) potentially affected by CVE-2025-62707 via pypdf (3.12.0)

pypdf PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chellow =1688456919.0.0, =1.0.1, =1.0.7 Source cves: CVE-2025-62707 Source advisory: OSV:GHSA-VR63-X8VC-M265...

PT-2025-43413

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description A crafted PDF file can cause an infinite loop when parsed, specifically when processing the content stream of a page containing an inline image utilizing the DCTDecode filter. This issue requires parsi...

CVE-2025-62707: Excessive Iteration

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

pypdf 安全漏洞

pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from parsing a stream of inline image page content using the DCTDecode filter,...

PT-2025-48100

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.4.0 Description pypdf is a free and open-source pure-python PDF library. An attacker can create a malicious PDF file that causes excessive memory consumption, up to 1 GB per stream, when parsing the content stream of ...

PT-2025-43414

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description An attacker can create a malicious PDF file that causes excessive memory consumption when processed. This occurs when parsing the content stream of a page utilizing the LZWDecode filter. Recommendation...

pypdf 安全漏洞

pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from improper memory usage when parsing page content streams using the LZWDecod...