https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:47:40.594262+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-14416 bdu:2026-14416 2026-09-30T23:47:40.765430+00:00 bdu:2026-14416 https://vulnerability.circl.lu/vuln/brew-pdfalyzer-cve-2026-84310 BREW-pdfalyzer-CVE-2026-84310 — pypdf: Possible long runtimes/large memory usage when retrieving outlines 2026-09-30T23:47:40.765512+00:00

Affected: Homebrew: pdfalyzer

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths.

### Patches

This has been fixed in [pypdf==6.16.1](https://github.com/py-pdf/pypdf/releases/tag/6.16.1).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3966](https://github.com/py-pdf/pypdf/pull/3966).

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-84310 fkie_cve-2026-84310 2026-09-30T23:47:40.765607+00:00

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.

 https://vulnerability.circl.lu/vuln/ghsa-23w6-3w8w-8484 GHSA-23w6-3w8w-8484 — pypdf: Possible long runtimes/large memory usage when retrieving outlines 2026-09-30T23:47:40.765658+00:00

Affected: PyPI: pypdf

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths.

### Patches

This has been fixed in [pypdf==6.16.1](https://github.com/py-pdf/pypdf/releases/tag/6.16.1).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3966](https://github.com/py-pdf/pypdf/pull/3966).

 https://vulnerability.circl.lu/vuln/pysec-2026-3910 PYSEC-2026-3910 — pypdf: Possible long runtimes/large memory usage when retrieving outlines 2026-09-30T23:47:40.765709+00:00

Affected: PyPI: pypdf

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths.

### Patches

This has been fixed in [pypdf==6.16.1](https://github.com/py-pdf/pypdf/releases/tag/6.16.1).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3966](https://github.com/py-pdf/pypdf/pull/3966).

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-84310 UBUNTU-CVE-2026-84310 2026-09-30T23:47:40.765761+00:00

Affected: Ubuntu:Pro:16.04:LTS: pypdf2, Ubuntu:Pro:18.04:LTS: pypdf2, Ubuntu:20.04:LTS: pypdf2, Ubuntu:22.04:LTS: pypdf2, Ubuntu:24.04:LTS: pypdf, Ubuntu:24.04:LTS: pypdf2, Ubuntu:26.04:LTS: pypdf

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.