Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

GHSA-4pxv-j86v-mhcw

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4pxv-j86v-mhcw

pypdf: Possible long runtimes for wrong size values in incremental mode ### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode. ### Patches This has been fixed in pypdf==6.10.2 https://github.com/py-pdf/pypdf/releases/tag/6.10.2. ### Workarounds If you cannot upgrade yet, consider applying the changes from PR #3735 https://github.com/py-pdf/pypdf/pull/3735.

gitlab/pypi/pypdf/CVE-2026-41313

pypdf: Possible long runtimes for wrong size values in incremental mode An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode.

gitlab/pypi/pypdf/GHSA-4pxv-j86v-mhcw

pypdf: Possible long runtimes for wrong size values in incremental mode An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode.

pypa/pypdf/PYSEC-2026-3007

pypdf: Possible long runtimes for wrong size values in incremental mode ### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode. ### Patches This has been fixed in pypdf==6.10.2 https://github.com/py-pdf/pypdf/releases/tag/6.10.2. ### Workarounds If you cannot upgrade yet, consider applying the changes from PR #3735 https://github.com/py-pdf/pypdf/pull/3735.

pysec/PYSEC-2026-3007

pypdf: Possible long runtimes for wrong size values in incremental mode ### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode. ### Patches This has been fixed in pypdf==6.10.2 https://github.com/py-pdf/pypdf/releases/tag/6.10.2. ### Workarounds If you cannot upgrade yet, consider applying the changes from PR #3735 https://github.com/py-pdf/pypdf/pull/3735.