7015 matches found
pypdf: Possible large memory usage when retrieving alphabetical page labels
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. PatchesThis has been fixed in pypdf==6.19.0. WorkaroundsIf you cannot upgrade yet, consider applying the...
PYSEC-2026-4158 pypdf: Possible large memory usage when retrieving Roman page labels
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals. Patches This has been fixed in pypdf==6.17.0. Workarounds If you cannot upgrade yet, consider applying the chang...
pypdf: Possible large memory usage when retrieving Roman page labels
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals. PatchesThis has been fixed in pypdf==6.17.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes...
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. PatchesThis has been fixed in pypdf==6.18.1. WorkaroundsIf you cannot upgrad...
PYSEC-2026-4154 pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...
Improper Handling of Highly Compressed Data (Data Amplification)
Overview devalue is a JSON.stringify, but handles cyclical references, repeated references, undefined, regular expressions, dates, Map and Set. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the uneval function when serializi...
Memory Allocation with Excessive Size Value
Overview devalue is a JSON.stringify, but handles cyclical references, repeated references, undefined, regular expressions, dates, Map and Set. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the uneval function in src/uneval.js when processing ...
pypdf: Possible large memory usage when retrieving alphabetical page labels
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the...
EUVD-2026-90283
pypdf: Possible large memory usage when retrieving alphabetical page labels...
pypdf: Possible large memory usage when parsing font data
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /Widths entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds I...
EUVD-2026-90368
pypdf: Possible large memory usage when parsing font data...
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...
EUVD-2026-90367
pypdf: Possible large memory usage for large /ToUnicode streams Follow-up 2...
GHSA-FP3H-C4FM-7VVF pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...
GHSA-QV6H-RV94-W285 pypdf: Possible large memory usage when retrieving Roman page labels
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals. Patches This has been fixed in pypdf==6.17.0. Workarounds If you cannot upgrade yet, consider applying the chang...
EUVD-2026-90365
pypdf: Possible large memory usage when retrieving Roman page labels...
CLEANSTART-2026-UC74382 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing
Security vulnerability affects the cri-tools package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
PT-2026-105899
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /Widths entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds I...
PT-2026-105904
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the...
PT-2026-105537
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals. Patches This has been fixed in pypdf==6.17.0. Workarounds If you cannot upgrade yet, consider applying the chang...