Lucene search
K

7 matches found

Veracode
Veracode
added 2026/01/23 3:34 a.m.2 views

Denial-of-service (DoS)

pypdf is vulnerable to denial-of-service DoS. The vulnerability is due to improper handling of PDFs missing the /Root object with a large /Size value in non-strict parsing mode, which allows an attacker to craft an invalid PDF that triggers excessively long runtimes...

6.9CVSS5.9AI score0.00023EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/13 11:7 p.m.1 views

CVE-2026-22690

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object with large /Size values. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for actually invalid files. This can be...

6.9CVSS6.7AI score0.00023EPSS
Exploits0References7
NVD
NVD
added 2026/01/10 5:16 a.m.1 views

CVE-2026-22690

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object with large /Size values. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for actually invalid files. This can be...

6.9CVSS0.00023EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/10 4:41 a.m.22 views

CVE-2026-22690 pypdf has possible long runtimes for missing /Root object with large /Size values

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object with large /Size values. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for actually invalid files. This can be...

6.9CVSS0.00023EPSS
Exploits0References4
CVE
CVE
added 2026/01/10 4:41 a.m.10 views

CVE-2026-22690

CVE-2026-22690 affects the Python PDF library pypdf prior to version 6.6.0. The issue allows long runtimes for malformed PDFs caused by omitting the /Root entry in the trailer while using a large /Size value; the vulnerability occurs in non-strict reading mode. The problem has been addressed and ...

6.9CVSS6.4AI score0.00023EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/01/09 7:48 p.m.1 views

EUVD-2026-1692

pypdf has possible long runtimes for missing /Root object with large /Size values...

6.4AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-2244

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.6.0 Description pypdf is a free and open-source pure-python PDF library. Versions prior to 6.6.0 are susceptible to potential long runtimes when processing PDF files missing the /Root object but containing a large /Si...

6.9CVSS6.6AI score0.00023EPSS
Exploits0References9
Rows per page
Query Builder