Vulnerabilidades do Pip Pypdf

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Pip Pypdf: 3 registro(s), com versões afetadas e correções.

CVE-2026-48735 Média · 5.5 CWE-770 28/05/2026

pypdf: Manipulated XMP metadata streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1.

CVE-2026-48156 Baixa · 3.3 CWE-834 28/05/2026

pypdf: Possible long runtimes for zero-only width values in cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W [0 0 0] values and large /Size values. This vulnerability is fixed in 6.12.0.

CVE-2026-48155 Média · 5.5 CWE-400 28/05/2026

pypdf: Possible large memory usage for large offsets for layout mode text

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0.