ROOT-APP-PYPI-CVE-2026-33123 CVE-2026-33123 in pypdf - Patched by Root

Root has patched CVE-2026-33123 in the pypdf package for Root:PyPI. Multiple fixed versions available...

CVE-2026-33123 vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

CVE-2026-33123

creationtimestamp| type| source ---|---|--- 2026-03-20 13:43:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhink67cqe2x...

DEBIAN-CVE-2026-33123

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1...