Lucene search
K

33 matches found

Tenable Nessus
Tenable Nessus
added 6 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-48155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory...

5.5CVSS5.8AI score0.00012EPSS
Exploits0References3
Redos
Redos
added 2026/05/12 12:0 a.m.3 views

ROS-20260512-73-0003

Vulnerability in python-PyPDF2 related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.9CVSS5.8AI score0.00017EPSS
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/05/01 12:0 a.m.2 views

python311-pypdf-6.10.2-2.1 on GA media (moderate)

python311-pypdf-6.10.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:10658-1 Rating: moderate Cross-References: CVE-2026-41168 CVE-2026-41312 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed i...

6.9CVSS5.8AI score0.00052EPSS
Exploits0
OSV
OSV
added 2026/04/21 9:43 a.m.1 views

OPENSUSE-SU-2026:20598-1 Security update for python-PyPDF2

This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2026-40260: crafted PDF can lead to large memory usage bsc1262284...

6.9CVSS5.7AI score0.00019EPSS
Exploits0References2
OSV
OSV
added 2026/04/20 12:0 a.m.2 views

OPENSUSE-SU-2026:10582-1 python311-PyPDF2-2.11.1-9.1 on GA media

These are all security issues fixed in the python311-PyPDF2-2.11.1-9.1 package on the GA media of openSUSE Tumbleweed...

6.9CVSS5.8AI score0.00019EPSS
Exploits0References1
Redos
Redos
added 2026/04/17 12:0 a.m.0 views

ROS-20260417-73-0018

A vulnerability in the Python library for handling PyPDF PDF files involves uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

8.7CVSS5.8AI score0.00055EPSS
Exploits1
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.4 views

pypdf 安全漏洞

pypdf is an open-source, free, and pure Python PDF library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages of PDF files. Prior to version 6.10.0, pypdf had a security vulnerability. This vulnerability stemmed from the manipulated XMP metadata entity...

6.9CVSS5.8AI score0.00019EPSS
Exploits0References1
Redos
Redos
added 2026/04/17 12:0 a.m.2 views

ROS-20260417-73-0020

A vulnerability in the ContentStream.readInlineImage function of the PyPDF2 PDF processing library is related to incorrect implementation of the loop exit condition. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of service using a specially crafted PDF fil...

6.2CVSS6.3AI score0.00127EPSS
Exploits1
Redos
Redos
added 2026/04/17 12:0 a.m.2 views

ROS-20260417-73-0017

Vulnerability in python-PyPDF2 related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.5CVSS5.9AI score0.00055EPSS
Exploits0
Redos
Redos
added 2026/04/17 12:0 a.m.1 views

ROS-20260417-73-0016

Vulnerability in python-PyPDF2 related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.9CVSS5.9AI score0.00006EPSS
Exploits0
Redos
Redos
added 2026/04/17 12:0 a.m.2 views

ROS-20260417-73-0015

Vulnerability in python-PyPDF2 related to excessive iteration. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.9CVSS5.8AI score0.00006EPSS
Exploits0
Snyk
Snyk
added 2026/04/16 9:30 p.m.1 views

Memory Allocation with Excessive Size Value

Overview PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the FlateDecode method when handling streams with a /Predictor value not equal to...

6.5CVSS5.7AI score0.00025EPSS
Exploits0References2
Veracode
Veracode
added 2026/04/11 5:26 a.m.3 views

Pypdf: Manipulated XMP Metadata Entity Declarations Can Exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. Patches This has been fixed in "pypdf==6.10.0" https://github.com/py-pdf/pypdf/releases/tag/6.10.0. Workarounds If you cannot upgrade yet, consider applying th...

6.9CVSS5.7AI score0.00019EPSS
Exploits0Affected Software1
OSV
OSV
added 2026/03/30 12:0 a.m.0 views

OPENSUSE-SU-2026:10464-1 python311-pypdf-6.9.2-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

8.2CVSS5.9AI score0.00018EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/29 12:0 a.m.2 views

openSUSE 16 Security Update : python-PyPDF2 (openSUSE-SU-2026:20430-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20430-1 advisory. Changes in python-PyPDF2: - CVE-2026-33123: Fixed excessive resource consumption when processing specially crafted PDF due to inefficient decoding of...

6.5CVSS6AI score0.00014EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/23 12:0 a.m.3 views

python311-PyPDF2-2.11.1-8.1 on GA media (moderate)

python311-PyPDF2-2.11.1-8.1 on GA media Announcement ID: openSUSE-SU-2026:10402-1 Rating: moderate Cross-References: CVE-2026-33123 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

6.5CVSS5.8AI score0.00014EPSS
Exploits0
OSV
OSV
added 2026/03/11 8:15 p.m.2 views

OPENSUSE-SU-2026:20348-1 Security update for python-PyPDF2

This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2026-28804: Denial of Service via crafted PDF with ASCIIHexDecode filter bsc1259404 - Update sources with osc run downloadfiles...

6.9CVSS5.8AI score0.00017EPSS
Exploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/05 12:0 a.m.3 views

python311-PyPDF2-2.11.1-5.1 on GA media (moderate)

python311-PyPDF2-2.11.1-5.1 on GA media Announcement ID: openSUSE-SU-2026:10284-1 Rating: moderate Cross-References: CVE-2026-27628 CVE-2026-27888 CVSS scores: CVE-2026-27888 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-27888 SUSE : 6.9...

6.9CVSS5.9AI score0.00055EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2026/02/27 9:16 p.m.2 views

CVE-2026-28351

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream using the RunLengthDecode filter. This has been fixed in pypdf 6.7.4. As a workaroun...

6.9CVSS5.8AI score0.00019EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2026/02/25 4:9 p.m.0 views

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2331 more potentially affected by CVE-2026-27628 via pypdf (>=3.10.0 <=6.7.1)

pypdf PYPI version =3.10.0, =0.0.5, =0.1.0, =0.4.1, =0.2.5, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =1.2.32, =0.1.1, =1.0.0, =2.0.0 and more Source cves: CVE-2026-27628 Source advisory: OSV:GHSA-2RW7-X74F-JG35...

7.5CVSS7.2AI score0.00055EPSS
Exploits0
Rows per page
Query Builder