Veille CVE

Mercredi 21 octobre 2026

8 CVE

Critique 0 Élevée 0 Moyenne 7 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « py-pdf pypdf » ✕
  1. CVE-2026-113795 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0.

  2. CVE-2026-113794 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0.

  3. CVE-2026-113793 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.

  4. CVE-2026-113792 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.

  5. CVE-2026-113791 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small operations, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0.

  6. CVE-2026-113790 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0.

  7. CVE-2026-113789 6.0 Moyenne

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0.

  8. CVE-2026-113786 2.3 Faible

    py-pdf pypdf

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow dependency are not affected. This issue is fixed in version 6.21.1.