Every CVE whose affected-product data names Pypdf Project Pypdf, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (52)
CVE-2026-27628 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-59937 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed…
CVE-2026-59936 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing…
CVE-2026-59935 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing…
CVE-2025-55197 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being…
CVE-2025-62707 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF…
CVE-2025-62708 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF…
CVE-2026-102993 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values…
CVE-2026-102994 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or…
CVE-2026-102995 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or…
CVE-2026-102996 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an…
CVE-2026-102997 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode…
CVE-2026-102998 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause…
CVE-2026-102999 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the…
CVE-2026-103000 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label…
CVE-2026-33699 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF…
CVE-2026-27888 — CVSS 7.5 (high): pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-41314 — CVSS 6.5 (medium): pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft…
CVE-2026-33123 — CVSS 6.5 (medium): pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to…
CVE-2026-41312 — CVSS 6.5 (medium): pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft…
CVE-2026-41313 — CVSS 6.5 (medium): pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft…
CVE-2026-57204 — CVSS 6.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses…
CVE-2023-36810 — CVSS 6.2 (medium): pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker who uses…
CVE-2023-36807 — CVSS 6.2 (medium): pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an…
CVE-2023-36464 — CVSS 6.2 (medium): pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if…
CVE-2026-54531 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-54651 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-31826 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-84309 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes…
CVE-2026-27026 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-48155 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-27025 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-27024 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-48735 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-49461 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-54530 — CVSS 5.5 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-22691 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref…
CVE-2026-28351 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this vulnerability can craft a PDF…
CVE-2026-28804 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF…
CVE-2026-82398 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the…
CVE-2026-22690 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object…
CVE-2026-40260 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can…
CVE-2026-41168 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft…
CVE-2026-59938 — CVSS 5.3 (medium): pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that…
CVE-2023-46250 — CVSS 5.1 (medium): pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can…
CVE-2026-24688 — CVSS 4.3 (medium): pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions…
CVE-2026-71870 — CVSS 3.3 (low): pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when…
CVE-2026-84311 — CVSS 3.3 (low): pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py…
CVE-2026-48156 — CVSS 3.3 (low): pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-84310 — CVSS 3.3 (low): pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py…
CVE-2026-49460 — CVSS 3.3 (low): pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which…
CVE-2026-71852 — CVSS 3.3 (low): pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory…