Where
-Infinity
0

Trending

Last week
Last month
Last year

pypdfpypdf: Possible infinite loop for not terminated inline images

Risk 47
Severity
8.7
First published (updated )
CVE-2026-59936

pypi/pypdfpypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

Risk 47
Severity
8.7
First published (updated )
CVE-2026-59935

pypi/pypdfpypdf: Possible long runtimes for repeated malformed cross-reference entries

Risk 43
Severity
6.9
First published (updated )
CVE-2026-59937

pypi/pypdfpypdf: Possible large memory usage for wrong image dimensions

Risk 33
Severity
6.9
First published (updated )
CVE-2026-59938

pypi/pypdfpypdf: Missing stream length values ignore defined limits

Risk 33
Severity
6.9
First published (updated )
CVE-2026-57204
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pypi/pypdfpypdf: Possible infinite loop when processing threads/articles in writer

Risk 38
Severity
6.9
First published (updated )
CVE-2026-54651

pip/pypdfpypdf: Possible infinite loop when processing outlines/bookmarks in writer

Risk 38
Severity
6.9
First published (updated )
CVE-2026-54531

pip/pypdfpypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Risk 38
Severity
6.9
First published (updated )
CVE-2026-54530

pip/pypdfpypdf: Possible large memory usage for form XObjects during text extraction

Risk 38
Severity
6.9
First published (updated )
CVE-2026-49461

pip/pypdfpypdf: Inefficient decoding of FlateDecode PNG predictor streams

Risk 25
Severity
5.1
First published (updated )
CVE-2026-49460
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pypi/pypdfpypdf: Possible large memory usage for large offsets for layout mode text

Risk 31
Severity
4.8
First published (updated )
CVE-2026-48155

pypi/pypdfpypdf: Possible long runtimes for zero-only width values in cross-reference streams

Risk 25
Severity
5.1
First published (updated )
CVE-2026-48156

pypi/pypdfpypdf: Manipulated XMP metadata streams can exhaust RAM

Risk 38
Severity
6.9
First published (updated )
CVE-2026-48735

pypi/pypdfpypdf: Manipulated FlateDecode image dimensions can exhaust RAM

Risk 37
Severity
4.8
First published (updated )
CVE-2026-41314

pypi/pypdfpypdf: Possible long runtimes for wrong size values in incremental mode

Risk 37
Severity
4.8
First published (updated )
CVE-2026-41313
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pypi/pypdfpypdf: Manipulated FlateDecode predictor parameters can exhaust RAM

Risk 37
Severity
4.8
First published (updated )
CVE-2026-41312

pypi/pypdfpypdf has possible long runtimes for wrong size values in cross-reference and object streams

Risk 33
Severity
6.9
First published (updated )
CVE-2026-41168

pip/pypdfpypdf: Manipulated XMP metadata entity declarations can exhaust RAM

Risk 33
Severity
6.9
First published (updated )
CVE-2026-40260

pip/pypdfpypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream

Risk 31
Severity
4.6
EPSS
0.04%
First published (updated )
CVE-2026-33699

pip/pypdfpypdf has inefficient decoding of array-based streams

Risk 27
Severity
5.1
EPSS
0.01%
First published (updated )
CVE-2026-33123
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pypi/pypdfpypdf: manipulated stream length values can exhaust RAM

Risk 27
Severity
6.8
EPSS
0.01%
First published (updated )
CVE-2026-31826

pip/pypdfpypdf: Inefficient decoding of ASCIIHexDecode streams

Risk 23
Severity
6.9
EPSS
0.04%
First published (updated )
CVE-2026-28804

pypi/pypdfManipulated RunLengthDecode streams can exhaust RAM

Risk 23
Severity
6.9
EPSS
0.05%
First published (updated )
CVE-2026-28351

pypi/pypdfpypdf: Manipulated FlateDecode XFA streams can exhaust RAM

Risk 31
Severity
6.6
EPSS
0.05%
First published (updated )
CVE-2026-27888

pypi/pypdfpypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2026-27628
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pip/pypdfpypdf possibly has long runtimes for malformed FlateDecode streams

Risk 28
Severity
6.9
EPSS
0.01%
First published (updated )
CVE-2026-27026

pip/pypdfpypdf has possible long runtimes/large memory usage for large /ToUnicode streams

Risk 28
Severity
6.9
EPSS
0.01%
First published (updated )
CVE-2026-27025

pip/pypdfpypdf has a possible infinite loop when processing TreeObject

Risk 28
Severity
6.9
EPSS
0.01%
First published (updated )
CVE-2026-27024

pip/pypdfpypdf has possible Infinite Loop when processing outlines/bookmarks

Risk 31
Severity
5.1
EPSS
0.01%
First published (updated )
CVE-2026-24688

pypi/pypdfpypdf has possible long runtimes for malformed startxref

Risk 19
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2026-22691
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203