ROOT-APP-PYPI-CVE-2026-24688 CVE-2026-24688 in rootio-pypdf - Patched by Root

Root has patched CVE-2026-24688 in the rootio-pypdf package for Root:PyPI. Multiple fixed versions available...

CVE-2026-24688

creationtimestamp| type| source ---|---|--- 2026-01-27 21:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgq5arbsl2m...

DEBIAN-CVE-2026-24688

pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects...

CVE-2026-24688

pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects...