Back to CVE List

CVE-2026-59937

Vulnerability Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken cross-reference table entries. This issue is fixed in version 6.14.0.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-400
Source
NVD
Vendor
py-pdf
Product
pypdf

External References

Discussion (0)

Add Comment

No comments yet. Be the first!