Approved changes feed: RSS · Atom
cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pypdf Project (962656cd-4a17-510f-8af4-bc4b1c4b1182) |
|---|---|
| Product | Pypdf (ae2a5b81-d280-5a73-84dc-ce5b5a8bb5e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/py-pdf/pypdf |
purl2cpe | 2026-06-01 10:11:12.240661 |
pkg:pypi/pypdf |
purl2cpe | 2026-06-01 10:11:12.240665 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-41314 |
vulnerable | 2026-06-08 08:03:15.210405 |
pypdf: Manipulated FlateDecode image dimensions can exhaust RAM
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.
Published: 2026-04-22T21:08:14.700Z
Updated: 2026-04-23T14:21:47.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41313 |
vulnerable | 2026-06-08 08:03:15.209989 |
pypdf: Possible long runtimes for wrong size values in incremental mode
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.
Published: 2026-04-22T21:04:59.877Z
Updated: 2026-04-23T16:24:39.932Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41312 |
vulnerable | 2026-06-08 08:03:15.209596 |
pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing a stream compressed using `/FlateDecode` with a `/Predictor` unequal 1 and large predictor parameters. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.
Published: 2026-04-22T21:02:53.156Z
Updated: 2026-04-23T13:45:30.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41168 |
vulnerable | 2026-06-08 08:03:14.990539 |
pypdf has possible long runtimes for wrong size values in cross-reference and object streams
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large `/Size` values or object streams with wrong large `/N` values. This has been fixed in pypdf 6.10.1. As a workaround, one may apply the changes from the patch manually.
Published: 2026-04-22T20:49:10.401Z
Updated: 2026-04-23T16:24:48.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40260 |
vulnerable | 2026-06-08 08:01:20.103491 |
pypdf: Manipulated XMP metadata entity declarations can exhaust RAM
pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has been fixed in version 6.10.0.
Published: 2026-04-16T23:18:26.687Z
Updated: 2026-04-17T18:42:05.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33699 |
vulnerable | 2026-06-08 07:59:10.609468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33123 |
vulnerable | 2026-06-08 07:57:18.695825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31826 |
vulnerable | 2026-06-08 07:57:15.936142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28804 |
vulnerable | 2026-06-08 07:55:15.694269 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28351 |
vulnerable | 2026-06-08 07:55:15.171573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27888 |
vulnerable | 2026-06-08 07:55:14.088471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27628 |
vulnerable | 2026-06-08 07:53:22.677810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27026 |
vulnerable | 2026-06-08 07:53:21.841927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27025 |
vulnerable | 2026-06-08 07:53:21.841407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27024 |
vulnerable | 2026-06-08 07:53:21.840853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24688 |
vulnerable | 2026-06-08 07:51:17.984557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22691 |
vulnerable | 2026-06-08 07:51:13.604800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22690 |
vulnerable | 2026-06-08 07:51:13.604191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62708 |
vulnerable | 2026-06-08 07:39:16.506011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62707 |
vulnerable | 2026-06-08 07:39:16.505613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55197 |
vulnerable | 2026-06-08 07:33:14.352536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46250 |
vulnerable | 2026-06-08 06:12:44.493216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36810 |
vulnerable | 2026-06-08 06:08:13.523031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36464 |
vulnerable | 2026-06-08 06:08:11.735645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.