GHSA-MRFP-P49P-3HF2 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Summary Pillow's documented PDF append path can spend disproportionate CPU time on a compact malformed PDF page tree. An attacker who can supply an existing PDF to an application that appends an image with Image.save..., format="PDF", append=True can provide a malformed /Pages tree where each lev...

CLEANSTART-2026-KR31845 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the etcd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

SUSE CVE-2026-106071

A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard --allow-fs-read or --allow-fs-write rule. When the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup stops comparing early and treats the path as a...

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

============================================================================ Infinite loop in PdfParser.rewritepages on page tree Parent cycle Location: src/PIL/PdfParser.py:505 in PdfParser.rewritepages Commit: a707c6b21c313880d0771e54965d142dd42358b6...

GHSA-F2G6-542V-9J58 Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

============================================================================ Infinite loop in PdfParser.rewritepages on page tree Parent cycle Location: src/PIL/PdfParser.py:505 in PdfParser.rewritepages Commit: a707c6b21c313880d0771e54965d142dd42358b6...

CVE-2026-96640 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...

CVE-2026-96640

The Pillow Python imaging library versions 5.1.0 through 13.0.0 are vulnerable to a resource exhaustion issue in the PdfParser.linearize_page_tree() function located in src/PIL/PdfParser.py . The root cause is that the parser treats a PDF /Pages graph as a tree without tracking duplicate indirect...

CVE-2026-96640 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...

Allocation of Resources Without Limits or Throttling

Overview Pillow is a PIL Python Imaging Library fork. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via linearizepagetree in src/PIL/PdfParser.py when parsing a PDF file containing a cyclic or duplicate page tree reference. An attacker ca...

CVE-2026-113793

A flaw was found in pypdf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted PDF document containing cyclic tree structures. When an application attempts to remove an object from the cyclic structure, the library enters an infinite loop,...

Node.js 26.0.0-26.12.0 - Permission Model Filesystem Over-Grant via Wildcard Radix Tree Lookup

Permission Model Filesystem Over-Grant via Wildcard Radix Tree Lookup vulnerability discovered by malikhamzaiqbal in WordPress npm Node.js versions 26.0.0-26.12.0...

pypdf: Possible infinite loop when removing tree items

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires removing an object from a tree, for example an outline item. Patches This has been fixed in pypdf==6.20.1. Workarounds If you cannot upgrade yet, consider applying the changes from PR 418...

GHSA-9MX8-4J7G-633P pypdf: Possible infinite loop when removing tree items

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires removing an object from a tree, for example an outline item. Patches This has been fixed in pypdf==6.20.1. Workarounds If you cannot upgrade yet, consider applying the changes from PR 418...

DEBIAN-CVE-2026-113793

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

CVE-2026-113793

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

CVE-2026-113793 pypdf: Possible infinite loop when removing tree items

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

EUVD-2026-107334

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

CVE-2026-113793

The pypdf library, a pure-python PDF library, is vulnerable to a denial-of-service condition in versions prior to 6.20.1 . The root cause is an infinite loop triggered when removing an object from a crafted cyclic PDF tree , such as an outline item, which results in the current process being bloc...

CVE-2026-113793 pypdf: Possible infinite loop when removing tree items

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...

CVE-2026-113793

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1...