ROOT-APP-PYPI-CVE-2026-33123 CVE-2026-33123 in rootio-pypdf - Patched by Root

Root has patched CVE-2026-33123 in the rootio-pypdf package for Root:PyPI. Multiple fixed versions available...

CVE-2026-33123 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

CVE-2026-33123

creationtimestamp| type| source ---|---|--- 2026-03-20 13:43:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhink67cqe2x...

DEBIAN-CVE-2026-33123

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1...

01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2556 more potentially affected by CVE-2026-33123 via pypdf (>=3.10.0 <=6.8.0)

pypdf PYPI version =3.10.0, =0.0.5, =0.1.0, =0.0.1, =0.2.0, =0.4.0, =0.3.0, =0.3.0, =0.1.1, =0.1.0, =0.0.2, =0.2.0, =1.2.27, =3.0.145 and more Source cves: CVE-2026-33123 Source advisory: OSV:GHSA-QPXP-75PX-XJCP...