{"vulnerability": "cve-2026-102995", "sightings": [{"uuid": "9081c8bf-5c6a-4639-8f36-aadbef666cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102995", "type": "seen", "source": "https://t.me/pphm_HackerNews/3447", "content": "\ud83d\udd34 CVE-2026-102995\n\npypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/_cmap.py parse_bfchar to decode and retain oversized values during operations such as text extraction and consume excessive memory. This is a second follow-up to earlier /ToUnicode resource-consumption fixes and is limited to the remaining token-length path. This issue is fixed in version 6.18.1.", "creation_timestamp": "2026-10-05T17:10:07.000000Z"}, {"uuid": "e1e5cc79-f008-4c03-b8d2-3b0758a089a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102995", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx7w5mzgmc27", "content": "\ud83d\udccc CVE-2026-102995 - pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string to... https://www.cyberhub.blog/cves/CVE-2026-102995", "creation_timestamp": "2026-10-06T17:07:07.128331Z"}]}