CLEANSTART-2026-VO46960: pypdf is a free and open-source pure-python PDF library

Q: What access and interaction does exploitation require?

The supplied vector indicates local access is required, no privileges are required, and user interaction is required. The data does not indicate a remote network attack path.

Q: What is the expected security impact?

The reported impact is high availability impact, with no reported confidentiality or integrity impact. This indicates the primary concern is disruption or denial of service.

Q: How can I determine whether my deployment is affected?

The advisory identifies cleanstart/litellm-database, but provides no affected versions, fixed versions, configuration conditions, or indicators of compromise. The description also references pypdf without establishing dependency or version details.

Published Nov 12, 2026

Updated

Security vulnerability affects the litellm-database package. pypdf is a free and open-source pure-python PDF library.

Affected Software

1 affected componentFixes available

cleanstart/litellm-database<1.97.1-r1

1.97.1-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/litellm-database to a version that resolves this vulnerability.
Fixed in 1.97.1-r1

Event History

Nov 12, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-119206

Frequently Asked Questions

What access and interaction does exploitation require?

The supplied vector indicates local access is required, no privileges are required, and user interaction is required. The data does not indicate a remote network attack path.

What is the expected security impact?

The reported impact is high availability impact, with no reported confidentiality or integrity impact. This indicates the primary concern is disruption or denial of service.

How can I determine whether my deployment is affected?

The advisory identifies cleanstart/litellm-database, but provides no affected versions, fixed versions, configuration conditions, or indicators of compromise. The description also references pypdf without establishing dependency or version details.

CLEANSTART-2026-VO46960: pypdf is a free and open-source pure-python PDF library

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access and interaction does exploitation require?

What is the expected security impact?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

What access and interaction does exploitation require?

What is the expected security impact?

How can I determine whether my deployment is affected?