CVE-2026-102999

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/doccommon.py to reparse the full attachment list for each content lookup, producing repeated work and long runtimes when a...

CVE-2026-102999

The pypdf pure-python PDF library is vulnerable to long runtimes when processing a crafted PDF containing a large number of embedded files. Specifically, the dictionary-based attachments API in pypdf/_doc_common.py re-parses the full attachment list for every content lookup, leading to repeated w...