SUSE CVE-2026-119207

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

GHSA-4VQV-7265-GM2W pypdf has possible large memory usage for exceptions in strict mode

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4265...

EUVD-2026-113379

pypdf has possible large memory usage for exceptions in strict mode...

pypdf has possible large memory usage for exceptions in strict mode

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary. Patches This has been fixed in pypdf==6.21.3. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4265...

CVE-2026-119207

A flaw was found in pypdf. It can lead to a Denial of Service DoS through excessive memory consumption when processing a crafted, invalid PDF dictionary in strict mode. In this scenario, nested parsing errors repeatedly append text to new exceptions, amplifying the error message size. A remote...

Linux Distros Unpatched Vulnerability : CVE-2026-119207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF...

DEBIAN-CVE-2026-119207

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

CVE-2026-119207

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

CVE-2026-119207

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

UBUNTU-CVE-2026-119207

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

CVE-2026-119207

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

CVE-2026-119207

The pypdf library, a pure-python PDF library, is vulnerable to uncontrolled resource consumption (CWE-400) and asymmetric resource consumption (CWE-405). Prior to version 6.21.3 , loading a crafted invalid PDF dictionary in strict mode can cause the library to consume excessive memory. This occur...

CVE-2026-119207 pypdf: Possible large memory usage for exceptions in strict mode

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

CVE-2026-119207 pypdf: Possible large memory usage for exceptions in strict mode

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

CVE-2026-119207 pypdf: Possible large memory usage for exceptions in strict mode

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

CVE-2026-119207: py-pdf pypdf: pypdf is a free and open-source pure-python PDF library

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...

Pypdf resource management error vulnerability

Versions of pypdf prior to 6.21.3 contain a resource management error vulnerability. This occurs because loading a specially crafted invalid PDF dictionary under strict mode consumes excessive memory. When nested parsing fails, abnormal text is repeatedly appended within newly triggered errors,...

PT-2026-132829

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.3 Description The library can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. This occurs because nested parsing failures append repeated exception text to newly raised errors, whi...

PT-2026-105803

Impact The WebSocket handle mount and ViewRuntime. build request rebuild an HttpRequest via RequestFactory.get... with no HTTP HOST, so request.get host defaulted to "testserver" on the live path. Host/subdomain/domain TenantResolvers then misresolved the tenant — None on the live path while the...

Astra Linux – Vulnerability in node-ssri

ssri 5.2.2-8.0.0; fixed in 8.0.1. This version processes SRIs using a regular expression, which is vulnerable to a denial-of-service attack. Malicious SRIs could take an extremely long time to process, resulting in a denial of service. This issue only affects consumers who use the “strict” option...