Lucene search
+L

5832 matches found

osv_ubuntu
osv_ubuntu
•added 2026/04/22 10:16 p.m.•11 views

UBUNTU-CVE-2026-41313

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...

6.5CVSS6.3AI score0.00214EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/04/22 10:16 p.m.•10 views

CVE-2026-41313

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...

6.5CVSS6.3AI score0.00214EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/04/22 10:16 p.m.•22 views

UBUNTU-CVE-2026-41314

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

6.5CVSS6.3AI score0.00226EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/04/22 9:17 p.m.•20 views

DEBIAN-CVE-2026-41168

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

5.3CVSS5.6AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/22 9:17 p.m.•26 views

CVE-2026-41168

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

6.9CVSS0.00297EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/04/22 9:17 p.m.•13 views

UBUNTU-CVE-2026-41168

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

6.9CVSS5.6AI score0.00297EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/04/22 9:17 p.m.•30 views

CVE-2026-41168

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

6.9CVSS5.6AI score0.00297EPSS
SaveExploits0References3
osv_mal
osv_mal
•added 2026/04/22 9:09 p.m.•45 views

MAL-2026-2999 Malicious code in pypdf-fork (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3a651b0cc8ca7cc4fcae91ff3160af205a97d0aacacd8e88d76c04ce013bd02 During importing the module, package sends a beacon notification to the owner. The package has no other differences from the original legitimate "pypdf". ---...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/04/22 9:09 p.m.•23 views

Malicious code in pypdf-fork (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3a651b0cc8ca7cc4fcae91ff3160af205a97d0aacacd8e88d76c04ce013bd02 During importing the module, package sends a beacon notification to the owner. The package has no other differences from the original legitimate "pypdf". ---...

5.8AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/22 9:08 p.m.•52 views

CVE-2026-41314 pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

4.8CVSS0.00226EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/04/22 9:08 p.m.•19 views

CVE-2026-41314 pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

4.8CVSS6.3AI score0.00226EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/22 9:08 p.m.•12 views

CVE-2026-41314 pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

4.8CVSS6.3AI score0.00226EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/22 9:08 p.m.•14 views

CVE-2026-41314

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

4.8CVSS6.4AI score0.00226EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/04/22 9:08 p.m.•25 views

EUVD-2026-25116

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

4.8CVSS6.4AI score0.00226EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/22 9:08 p.m.•84 views

CVE-2026-41314

CVE-2026-41314 (pypdf) affects versions prior to 6.10.2 of the Python PDF library. An attacker can craft a PDF using a /FlateDecode image with large size values, causing RAM exhaustion. Impact is local, with memory impact (RAM) and potential denial of service. The issue is fixed in pypdf 6.10.2; ...

6.5CVSS6.3AI score0.00226EPSS
SaveExploits0References4Affected Software1
vulnersOsv
vulnersOsv
•added 2026/04/22 9:08 p.m.•5 views

a-data-processing (0.0.1), ab-data-processing (0.0.1) +626 more potentially affected by CVE-2026-41314 via pypdf (>=3.1.0, <=6.10.1)

pypdf PYPI version =3.1.0, =0.1.1, =0.9.1, =0.0.2, =0.0.1, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.0.1, =0.0.4, =0.0.9 and more Source cves: CVE-2026-41314 Source advisory: MEND:CVE-2026-41314...

6.5CVSS6.5AI score0.00226EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/04/22 9:08 p.m.•36 views

CVE-2026-41314

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

6.5CVSS6.3AI score0.00226EPSS
SaveExploits0
CVE
CVE
•added 2026/04/22 9:04 p.m.•89 views

CVE-2026-41313

CVE-2026-41313 affects the open-source Python PDF library pypdf (prior to 6.10.2). An attacker can craft a PDF with a large trailer /Size value loaded in incremental mode, causing long runtimes. The issue is fixed in pypdf 6.10.2; as a workaround, patches can be applied manually. The CVSS-derived...

6.5CVSS6.3AI score0.00214EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2026/04/22 9:04 p.m.•24 views

CVE-2026-41313

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer "/Size" value in incremental mode. This has been fixed in pypdf 6.10.2. ...

6.5CVSS6.3AI score0.00214EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2026/04/22 9:04 p.m.•19 views

CVE-2026-41313 pypdf: Possible long runtimes for wrong size values in incremental mode

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. This has been fixed in pypdf 6.10.2. As...

4.8CVSS5.8AI score
SaveExploits0References6
Rows per page
Query Builder