Skip to content

Vendor

pypdf project vulnerabilities

1 published CVE affecting pypdf project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of pypdf project alerts

Products

Latest pypdf project CVEs

Newest publication first

  1. CVE-2023-36807 Infinite Loop when reading malformed objects in pypdf

    Published
    MediumCVSS 6.5 EPSS 0.57%

    pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can ut...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.