add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2025-62708 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

mimir-ai (0.0.3), rara-digitizer (>=1.0.0, <=1.5.8) potentially affected by CVE-2025-62708 via pypdf (5.0.0)

pypdf PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - mimir-ai 0.0.3 - rara-digitizer =1.0.0, =1.5.8 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

automateboringstuff3 (2024.10.1), calibreweb (0.6.24) +6 more potentially affected by CVE-2025-62708 via pypdf (5.0.1)

pypdf PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - automateboringstuff3 2024.10.1 - calibreweb 0.6.24 - forgy =0.1.0, =0.1.0rc1, =0.0.12, =0.0.16 Source cves: CVE-2025-62708 Source advisory:...

aiexec-base (0.6.4), ano-code (>=0.1.6, <=0.1.11) +39 more potentially affected by CVE-2025-62708 via pypdf (5.1.0)

pypdf PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiexec-base 0.6.4 - ano-code =0.1.6, =0.0.1, =1.0.0, =0.6.0, =0.0.3, =0.1.0, =0.3.1, =3.3.6, =1.0.16, =0.2.37, =1.0.0, =0.1.11, =0.1.24 and more Sourc...

aiagents4pharma (>=1.15.0, <=1.44.0), pypdftotext (>=0.0.6, <=0.0.9) +3 more potentially affected by CVE-2025-62708 via pypdf (5.2.0)

pypdf PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiagents4pharma =1.15.0, =0.0.6, =1.0.1, =1.0.1, =1.0.5 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +5 more potentially affected by CVE-2025-62708 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - textspitter 0.3.7r...

sereto (0.2.1), ten8t (>=0.0.14, <=0.0.21) potentially affected by CVE-2025-62708 via pypdf (5.3.1)

pypdf PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - sereto 0.2.1 - ten8t =0.0.14, =0.0.21 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

calibreweb (0.6.25), cewler (>=1.3.0, <=1.3.1) +8 more potentially affected by CVE-2025-62708 via pypdf (5.4.0)

pypdf PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - calibreweb 0.6.25 - cewler =1.3.0, =1.1.2, =1.1.0, =1.2.0, =2025.3.0, =0.2.2, =28.3.2, =29.1.2 - ten8t 0.0.22 Source cves: CVE-2025-62708 Source...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2025-62708 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2025-62708 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2025-62708 via pypdf (5.6.1)

pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

nerxiv (>=0.0.1, <=1.1.0), osfexport (>=0.1.4, <=1.0.1) +3 more potentially affected by CVE-2025-62708 via pypdf (5.7.0)

pypdf PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - nerxiv =0.0.1, =0.1.4, =0.0.1, =0.3.3, =30.0.8, =30.0.9 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

label-sorter (>=0.2.0, <=0.3.0), sereto (0.3.5) potentially affected by CVE-2025-62708 via pypdf (5.8.0)

pypdf PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - label-sorter =0.2.0, =0.3.0 - sereto 0.3.5 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

agentc-llamaindex (0.2.5a2), agentia (>=0.0.2, <=0.0.10) +246 more potentially affected by CVE-2025-62708 via pypdf (5.9.0)

pypdf PYPI version 5.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - agentc-llamaindex 0.2.5a2 - agentia =0.0.2, =0.0.1, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.11.2, =1.1.0a20250429, =3.1.8, =1.0.5, =1.0.0, =0.1.0, =1.1.1,...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +18 more potentially affected by CVE-2025-62708 via pypdf (>=6.0.0, <=6.1.1)

pypdf PYPI version =6.0.0, =0.0.0, =1759155233.0.0, =0.3.0, =4.7.6, =1.6.52, =1.0.0, =0.6.35, =0.0.1, =2025.7.0, =2025.8.3 and more Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +18 more potentially affected by CVE-2025-62708 via pypdf (>=6.0.0, <=6.1.1)

pypdf PYPI version =6.0.0, =0.0.0, =1759155233.0.0, =0.3.0, =4.7.6, =1.6.52, =1.0.0, =0.6.35, =0.0.1, =2025.7.0, =2025.8.3 and more Source cves: CVE-2025-62708 Source advisory: SNYK:PYTHON-PYPDF-13658706...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +18 more potentially affected by CVE-2025-62708 via pypdf (>=6.0.0, <=6.1.1)

pypdf PYPI version =6.0.0, =0.0.0, =1759155233.0.0, =0.3.0, =4.7.6, =1.6.52, =1.0.0, =0.6.35, =0.0.1, =2025.7.0, =2025.8.3 and more Source cves: CVE-2025-62708 Source advisory: GHSA-JFX9-29X2-RV3J...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the LZWDecode process. An attacker can cause excessive memory...

gpt3discord (>=11.7.3, <=12.3.8) potentially affected by CVE-2025-62708 via pypdf (3.11.1)

pypdf PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gpt3discord =11.7.3, =12.3.8 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...

docat (1.0.0) potentially affected by CVE-2025-62708 via pypdf (4.0.0)

pypdf PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docat 1.0.0 Source cves: CVE-2025-62708 Source advisory: OSV:GHSA-JFX9-29X2-RV3J...