Most recent entries from all

BREW-pdfalyzer-CVE-2026-84310 — pypdf: Possible long runtimes/large memory usage when retrieving outlines

2026-10-01T04:13:49.214562+00:00

Affected: Homebrew: pdfalyzer

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths.

### Patches

This has been fixed in [pypdf==6.16.1](https://github.com/py-pdf/pypdf/releases/tag/6.16.1).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3966](https://github.com/py-pdf/pypdf/pull/3966).

CVE-2026-84310 — pypdf: Possible long runtimes/large memory usage when retrieving outlines

2026-10-01T04:13:49.214795+00:00

Affected: py-pdf pypdf

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.

GHSA-23w6-3w8w-8484 — pypdf: Possible long runtimes/large memory usage when retrieving outlines

2026-10-01T04:13:49.214885+00:00

Affected: PyPI: pypdf

### Impact

### Patches

This has been fixed in [pypdf==6.16.1](https://github.com/py-pdf/pypdf/releases/tag/6.16.1).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3966](https://github.com/py-pdf/pypdf/pull/3966).