https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T04:37:52.523821+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-28804 CVE-2026-28804 — pypdf: Inefficient decoding of ASCIIHexDecode streams 2026-10-05T04:37:52.542566+00:00

Affected: py-pdf pypdf

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5.