pypdf (PyPI)
Advisories
126
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 6.21.4 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "pypdf>=6.21.4"poetry
poetry add "pypdf>=6.21.4"uv
uv add "pypdf>=6.21.4"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-5849-834g-hvw5 pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search |
High EPSS 0.30% |
< 6.21.4 | 6.21.4 |
| GHSA-5849-834g-hvw5 pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search |
High EPSS 0.30% |
< 6.21.4 | 6.21.4 |
| GHSA-cggf-277g-3q54 pypdf has possible large memory usage when parsing page tree |
High EPSS 0.30% |
< 6.21.4 | 6.21.4 |
| GHSA-cggf-277g-3q54 pypdf has possible large memory usage when parsing page tree |
High EPSS 0.30% |
< 6.21.4 | 6.21.4 |
| GHSA-mfr5-77xh-9j7h pypdf has possible infinite loop when cloning dictionaries |
High EPSS 0.30% |
< 6.21.4 | 6.21.4 |
| GHSA-mfr5-77xh-9j7h pypdf has possible infinite loop when cloning dictionaries |
High EPSS 0.30% |
< 6.21.4 | 6.21.4 |
| GHSA-42gh-23hr-vphw pypdf has possible long runtimes when retrieving page labels |
High EPSS 0.30% |
< 6.21.3 | 6.21.3 |
| GHSA-42gh-23hr-vphw pypdf has possible long runtimes when retrieving page labels |
High EPSS 0.30% |
< 6.21.3 | 6.21.3 |
| GHSA-4vqv-7265-gm2w pypdf has possible large memory usage for exceptions in strict mode |
High EPSS 0.30% |
< 6.21.3 | 6.21.3 |
| GHSA-4vqv-7265-gm2w pypdf has possible large memory usage for exceptions in strict mode |
High EPSS 0.30% |
< 6.21.3 | 6.21.3 |
| GHSA-62m5-6wh8-28x7 pypdf has possible long runtimes/large memory usage for encrypted PDF files |
High EPSS 0.30% |
< 6.21.3 | 6.21.3 |
| GHSA-62m5-6wh8-28x7 pypdf has possible long runtimes/large memory usage for encrypted PDF files |
High EPSS 0.30% |
< 6.21.3 | 6.21.3 |
| GHSA-x3rh-gjgm-fmqc pypdf has possible large memory usage when parsing cross-reference streams |
High EPSS 0.27% |
< 6.21.3 | 6.21.3 |
| GHSA-x3rh-gjgm-fmqc pypdf has possible large memory usage when parsing cross-reference streams |
High EPSS 0.27% |
< 6.21.3 | 6.21.3 |
| GHSA-jr96-gvgh-j3r4 pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) |
High EPSS 0.41% |
< 6.21.2 | 6.21.2 |
| GHSA-gmh7-3g9r-mjh5 pypdf: Possible long runtimes for large xref table header limits |
High EPSS 0.41% |
< 6.21.2 | 6.21.2 |
| GHSA-6c7f-9265-g8fw pypdf: Possible long runtimes for repeated references to the same missing object |
High EPSS 0.38% |
< 6.21.2 | 6.21.2 |
| GHSA-7mh2-4gg2-979f pypdf: Possible large memory usage for streams with multiple filters |
Medium EPSS 0.47% |
< 6.20.0 | 6.20.0 |
| GHSA-39mj-jf6j-2qj3 pypdf: Possible infinite loop when hitting EOF in standard xref table |
Medium EPSS 0.47% |
< 6.20.0 | 6.20.0 |
| GHSA-9mx8-4j7g-633p pypdf: Possible infinite loop when removing tree items |
Medium EPSS 0.47% |
< 6.20.1 | 6.20.1 |
| GHSA-qfv9-64jg-mh7p pypdf: Possible infinite loop in PdfWriter.find_outline_item |
Medium EPSS 0.47% |
< 6.20.1 | 6.20.1 |
| GHSA-cgf9-327m-v77c pypdf: Possible large memory usage when parsing content streams |
Medium EPSS 0.39% |
< 6.21.0 | 6.21.0 |
| GHSA-f54x-cmq8-qg57 pypdf: Possible large memory usage when parsing arrays and dictionaries |
Medium EPSS 0.39% |
< 6.21.0 | 6.21.0 |
| GHSA-6vvc-x485-93v7 pypdf: Possible long runtimes/large memory usage when retrieving form fields |
Medium EPSS 0.39% |
< 6.21.0 | 6.21.0 |
| GHSA-5hx5-vpf9-5wcv pypdf: Unvalidated JPEG image data loading |
Low EPSS 0.38% |
< 6.21.1 | 6.21.1 |
| GHSA-w23x-9jrw-r45c pypdf: Possible large memory usage when retrieving alphabetical page labels |
High EPSS 0.35% |
< 6.19.0 | 6.19.0 |
| GHSA-w23x-9jrw-r45c pypdf: Possible large memory usage when retrieving alphabetical page labels |
High EPSS 0.35% |
< 6.19.0 | 6.19.0 |
| GHSA-v247-6f48-mgcj pypdf: Possible long runtimes with large amount of embedded files |
High EPSS 0.35% |
< 6.19.0 | 6.19.0 |
| GHSA-v247-6f48-mgcj pypdf: Possible long runtimes with large amount of embedded files |
High EPSS 0.35% |
< 6.19.0 | 6.19.0 |
| GHSA-php9-fj8v-98fj pypdf: Possible long runtimes when generating appearance streams |
High EPSS 0.34% |
< 6.19.0 | 6.19.0 |
| GHSA-php9-fj8v-98fj pypdf: Possible long runtimes when generating appearance streams |
High EPSS 0.34% |
< 6.19.0 | 6.19.0 |
| GHSA-jw7q-gvrg-4vj3 pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) |
High EPSS 0.34% |
< 6.18.1 | 6.18.1 |
| GHSA-jw7q-gvrg-4vj3 pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) |
High EPSS 0.34% |
< 6.18.1 | 6.18.1 |
| GHSA-g9cg-prrw-2r8q pypdf: Possible large memory usage when parsing font data |
High EPSS 0.34% |
< 6.18.1 | 6.18.1 |
| GHSA-g9cg-prrw-2r8q pypdf: Possible large memory usage when parsing font data |
High EPSS 0.34% |
< 6.18.1 | 6.18.1 |
| GHSA-fp3h-c4fm-7vvf pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) |
High EPSS 0.34% |
< 6.18.1 | 6.18.1 |
| GHSA-fp3h-c4fm-7vvf pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) |
High EPSS 0.34% |
< 6.18.1 | 6.18.1 |
| GHSA-5jq2-8x83-x246 pypdf: Possible long runtimes/large memory usage when parsing indirect objects |
High EPSS 0.34% |
< 6.18.0 | 6.18.0 |
| GHSA-5jq2-8x83-x246 pypdf: Possible long runtimes/large memory usage when parsing indirect objects |
High EPSS 0.34% |
< 6.18.0 | 6.18.0 |
| GHSA-qv6h-rv94-w285 pypdf: Possible large memory usage when retrieving Roman page labels |
High EPSS 0.35% |
< 6.17.0 | 6.17.0 |
| GHSA-qv6h-rv94-w285 pypdf: Possible large memory usage when retrieving Roman page labels |
High EPSS 0.35% |
< 6.17.0 | 6.17.0 |
| GHSA-763m-79hh-57f2 pypdf: Possible long runtimes/large memory usage when extracting XForm objects |
Low EPSS 0.14% |
< 6.16.1 | 6.16.1 |
| GHSA-763m-79hh-57f2 pypdf: Possible long runtimes/large memory usage when extracting XForm objects |
Low EPSS 0.14% |
< 6.16.1 | 6.16.1 |
| GHSA-23w6-3w8w-8484 pypdf: Possible long runtimes/large memory usage when retrieving outlines |
Low EPSS 0.14% |
< 6.16.1 | 6.16.1 |
| GHSA-23w6-3w8w-8484 pypdf: Possible long runtimes/large memory usage when retrieving outlines |
Low EPSS 0.14% |
< 6.16.1 | 6.16.1 |
| GHSA-jp53-mhqp-8xcg pypdf: Possible infinite loop for TreeObject.insert_child |
Medium EPSS 0.19% |
< 6.16.0 | 6.16.0 |
| GHSA-jp53-mhqp-8xcg pypdf: Possible infinite loop for TreeObject.insert_child |
Medium EPSS 0.19% |
< 6.16.0 | 6.16.0 |
| GHSA-fc8x-2rww-xw9m pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace |
Medium EPSS 0.52% |
< 6.15.0 | 6.15.0 |
| GHSA-fc8x-2rww-xw9m pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace |
Medium EPSS 0.52% |
< 6.15.0 | 6.15.0 |
| GHSA-fp3f-mc75-235c pypdf: Possible large memory usage for large /ToUnicode streams |
Low EPSS 0.12% |
< 6.15.0 | 6.15.0 |
| GHSA-fp3f-mc75-235c pypdf: Possible large memory usage for large /ToUnicode streams |
Low EPSS 0.12% |
< 6.15.0 | 6.15.0 |
| GHSA-fwg2-594c-jp42 pypdf: Possible long runtimes/large memory usage for large CID font width ranges |
Low EPSS 0.12% |
< 6.15.0 | 6.15.0 |
| GHSA-fwg2-594c-jp42 pypdf: Possible long runtimes/large memory usage for large CID font width ranges |
Low EPSS 0.12% |
< 6.15.0 | 6.15.0 |
| GHSA-5xf7-4p34-54qr pypdf: Possible infinite loop for not terminated inline images |
High EPSS 0.62% |
< 6.14.1 | 6.14.1 |
| GHSA-5xf7-4p34-54qr pypdf: Possible infinite loop for not terminated inline images |
High EPSS 0.62% |
< 6.14.1 | 6.14.1 |
| GHSA-g867-7843-wf8q pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) |
High EPSS 0.62% |
< 6.14.2 | 6.14.2 |
| GHSA-g867-7843-wf8q pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) |
High EPSS 0.62% |
< 6.14.2 | 6.14.2 |
| GHSA-5qjq-93h5-hrgp pypdf: Possible large memory usage for wrong image dimensions |
Medium EPSS 0.52% |
< 6.14.0 | 6.14.0 |
| GHSA-5qjq-93h5-hrgp pypdf: Possible large memory usage for wrong image dimensions |
Medium EPSS 0.52% |
< 6.14.0 | 6.14.0 |
| GHSA-55h5-xmcq-c37v pypdf: Possible long runtimes for repeated malformed cross-reference entries |
High EPSS 0.62% |
< 6.14.0 | 6.14.0 |
| GHSA-55h5-xmcq-c37v pypdf: Possible long runtimes for repeated malformed cross-reference entries |
High EPSS 0.62% |
< 6.14.0 | 6.14.0 |
| GHSA-g9xf-7f8q-9mcj pypdf: Possible infinite loop when processing threads/articles in writer |
Medium EPSS 0.16% |
< 6.13.1 | 6.13.1 |
| GHSA-g9xf-7f8q-9mcj pypdf: Possible infinite loop when processing threads/articles in writer |
Medium EPSS 0.16% |
< 6.13.1 | 6.13.1 |
| GHSA-jm82-fx9c-mx94 pypdf: Missing stream length values ignore defined limits |
Medium EPSS 0.37% |
< 6.13.3 | 6.13.3 |
| GHSA-m2v9-299j-rv96 pypdf: Possible infinite loop when processing outlines/bookmarks in writer |
Medium EPSS 0.17% |
< 6.13.0 | 6.13.0 |
| GHSA-m2v9-299j-rv96 pypdf: Possible infinite loop when processing outlines/bookmarks in writer |
Medium EPSS 0.17% |
< 6.13.0 | 6.13.0 |
| GHSA-52x6-gq3r-vpf4 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction |
Medium EPSS 0.17% |
< 6.13.0 | 6.13.0 |
| GHSA-52x6-gq3r-vpf4 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction |
Medium EPSS 0.17% |
< 6.13.0 | 6.13.0 |
| GHSA-j543-4vmf-qm7v pypdf: Possible large memory usage for form XObjects during text extraction |
Medium EPSS 0.17% |
< 6.12.2 | 6.12.2 |
| GHSA-j543-4vmf-qm7v pypdf: Possible large memory usage for form XObjects during text extraction |
Medium EPSS 0.17% |
< 6.12.2 | 6.12.2 |
| GHSA-5hgr-hg42-57jg pypdf: Inefficient decoding of FlateDecode PNG predictor streams |
Low EPSS 0.17% |
< 6.12.2 | 6.12.2 |
| GHSA-5hgr-hg42-57jg pypdf: Inefficient decoding of FlateDecode PNG predictor streams |
Low EPSS 0.17% |
< 6.12.2 | 6.12.2 |
| GHSA-wjqc-6w8f-h24c pypdf: Manipulated XMP metadata streams can exhaust RAM |
Medium EPSS 0.13% |
< 6.12.1 | 6.12.1 |
| GHSA-wjqc-6w8f-h24c pypdf: Manipulated XMP metadata streams can exhaust RAM |
Medium EPSS 0.13% |
< 6.12.1 | 6.12.1 |
| GHSA-248m-82v9-q6g6 pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams |
Low EPSS 0.12% |
< 6.12.0 | 6.12.0 |
| GHSA-248m-82v9-q6g6 pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams |
Low EPSS 0.12% |
< 6.12.0 | 6.12.0 |
| GHSA-cj93-chg6-vgv8 pypdf: Possible large memory usage for large offsets for layout mode text |
Medium EPSS 0.13% |
< 6.12.0 | 6.12.0 |
| GHSA-cj93-chg6-vgv8 pypdf: Possible large memory usage for large offsets for layout mode text |
Medium EPSS 0.13% |
< 6.12.0 | 6.12.0 |
| GHSA-x284-j5p8-9c5p pypdf: Manipulated FlateDecode image dimensions can exhaust RAM |
Medium EPSS 0.23% |
< 6.10.2 | 6.10.2 |
| GHSA-x284-j5p8-9c5p pypdf: Manipulated FlateDecode image dimensions can exhaust RAM |
Medium EPSS 0.23% |
< 6.10.2 | 6.10.2 |
| GHSA-4pxv-j86v-mhcw pypdf: Possible long runtimes for wrong size values in incremental mode |
Medium EPSS 0.21% |
< 6.10.2 | 6.10.2 |
| GHSA-4pxv-j86v-mhcw pypdf: Possible long runtimes for wrong size values in incremental mode |
Medium EPSS 0.21% |
< 6.10.2 | 6.10.2 |
| GHSA-7gw9-cf7v-778f pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM |
Medium EPSS 0.23% |
< 6.10.2 | 6.10.2 |
| GHSA-7gw9-cf7v-778f pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM |
Medium EPSS 0.23% |
< 6.10.2 | 6.10.2 |
| GHSA-jj6c-8h6c-hppx pypdf has long runtimes for wrong size values in cross-reference and object streams |
Medium EPSS 0.30% |
< 6.10.1 | 6.10.1 |
| GHSA-jj6c-8h6c-hppx pypdf has long runtimes for wrong size values in cross-reference and object streams |
Medium EPSS 0.30% |
< 6.10.1 | 6.10.1 |
| GHSA-3crg-w4f6-42mx pypdf: Manipulated XMP metadata entity declarations can exhaust RAM |
Medium EPSS 0.42% |
< 6.10.0 | 6.10.0 |
| GHSA-3crg-w4f6-42mx pypdf: Manipulated XMP metadata entity declarations can exhaust RAM |
Medium EPSS 0.42% |
< 6.10.0 | 6.10.0 |
| GHSA-87mj-5ggw-8qc3 pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream |
High EPSS 0.47% |
< 6.9.2 | 6.9.2 |
| GHSA-87mj-5ggw-8qc3 pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream |
High EPSS 0.47% |
< 6.9.2 | 6.9.2 |
| GHSA-qpxp-75px-xjcp pypdf has inefficient decoding of array-based streams |
Medium EPSS 0.36% |
< 6.9.1 | 6.9.1 |
| GHSA-qpxp-75px-xjcp pypdf has inefficient decoding of array-based streams |
Medium EPSS 0.36% |
< 6.9.1 | 6.9.1 |
| GHSA-hqmh-ppp3-xvm7 pypdf: manipulated stream length values can exhaust RAM |
Medium EPSS 0.18% |
< 6.8.0 | 6.8.0 |
| GHSA-hqmh-ppp3-xvm7 pypdf: manipulated stream length values can exhaust RAM |
Medium EPSS 0.18% |
< 6.8.0 | 6.8.0 |
| GHSA-9m86-7pmv-2852 pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams |
Medium EPSS 0.41% |
< 6.7.5 | 6.7.5 |
| GHSA-9m86-7pmv-2852 pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams |
Medium EPSS 0.41% |
< 6.7.5 | 6.7.5 |
| GHSA-f2v5-7jq9-h8cg pypdf: Manipulated RunLengthDecode streams can exhaust RAM |
Medium EPSS 0.48% |
< 6.7.4 | 6.7.4 |
| GHSA-f2v5-7jq9-h8cg pypdf: Manipulated RunLengthDecode streams can exhaust RAM |
Medium EPSS 0.48% |
< 6.7.4 | 6.7.4 |
| GHSA-x7hp-r3qg-r3cj pypdf: Manipulated FlateDecode XFA streams can exhaust RAM |
High EPSS 0.40% |
< 6.7.3 | 6.7.3 |
| GHSA-x7hp-r3qg-r3cj pypdf: Manipulated FlateDecode XFA streams can exhaust RAM |
High EPSS 0.40% |
< 6.7.3 | 6.7.3 |
| GHSA-2rw7-x74f-jg35 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams |
High EPSS 0.40% |
< 6.7.2 | 6.7.2 |
| GHSA-2rw7-x74f-jg35 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams |
High EPSS 0.40% |
< 6.7.2 | 6.7.2 |
| GHSA-9mvc-8737-8j8h pypdf possibly has long runtimes for malformed FlateDecode streams |
Medium EPSS 0.19% |
< 6.7.1 | 6.7.1 |
| GHSA-9mvc-8737-8j8h pypdf possibly has long runtimes for malformed FlateDecode streams |
Medium EPSS 0.19% |
< 6.7.1 | 6.7.1 |
| GHSA-wgvp-vg3v-2xq3 pypdf has possible long runtimes/large memory usage for large /ToUnicode streams |
Medium EPSS 0.19% |
< 6.7.1 | 6.7.1 |
| GHSA-wgvp-vg3v-2xq3 pypdf has possible long runtimes/large memory usage for large /ToUnicode streams |
Medium EPSS 0.19% |
< 6.7.1 | 6.7.1 |
| GHSA-996q-pr4m-cvgq pypdf has a possible infinite loop when processing TreeObject |
Medium EPSS 0.19% |
< 6.7.1 | 6.7.1 |
| GHSA-996q-pr4m-cvgq pypdf has a possible infinite loop when processing TreeObject |
Medium EPSS 0.19% |
< 6.7.1 | 6.7.1 |
| GHSA-2q4j-m29v-hq73 pypdf has possible Infinite Loop when processing outlines/bookmarks |
Medium EPSS 0.45% |
< 6.6.2 | 6.6.2 |
| GHSA-2q4j-m29v-hq73 pypdf has possible Infinite Loop when processing outlines/bookmarks |
Medium EPSS 0.45% |
< 6.6.2 | 6.6.2 |
| GHSA-4f6g-68pf-7vhv pypdf has possible long runtimes for malformed startxref |
Medium EPSS 0.43% |
< 6.6.0 | 6.6.0 |
| GHSA-4f6g-68pf-7vhv pypdf has possible long runtimes for malformed startxref |
Medium EPSS 0.43% |
< 6.6.0 | 6.6.0 |
| GHSA-4xc4-762w-m6cg pypdf has possible long runtimes for missing /Root object with large /Size values |
Medium EPSS 0.43% |
< 6.6.0 | 6.6.0 |
| GHSA-4xc4-762w-m6cg pypdf has possible long runtimes for missing /Root object with large /Size values |
Medium EPSS 0.43% |
< 6.6.0 | 6.6.0 |
| GHSA-m449-cwjh-6pw7 pypdf's LZWDecode streams be manipulated to exhaust RAM |
Medium EPSS 0.39% |
< 6.4.0 | 6.4.0 |
| GHSA-m449-cwjh-6pw7 pypdf's LZWDecode streams be manipulated to exhaust RAM |
Medium EPSS 0.39% |
< 6.4.0 | 6.4.0 |
| GHSA-jfx9-29x2-rv3j pypdf can exhaust RAM via manipulated LZWDecode streams |
High EPSS 0.44% |
< 6.1.3 | 6.1.3 |
| GHSA-jfx9-29x2-rv3j pypdf can exhaust RAM via manipulated LZWDecode streams |
High EPSS 0.44% |
< 6.1.3 | 6.1.3 |
| GHSA-vr63-x8vc-m265 pypdf possibly loops infinitely when reading DCT inline images without EOF marker |
High EPSS 0.44% |
< 6.1.3 | 6.1.3 |
| GHSA-vr63-x8vc-m265 pypdf possibly loops infinitely when reading DCT inline images without EOF marker |
High EPSS 0.44% |
< 6.1.3 | 6.1.3 |
| GHSA-7hfw-26vp-jp8m PyPDF's Manipulated FlateDecode streams can exhaust RAM |
High EPSS 0.48% |
< 6.0.0 | 6.0.0 |
| GHSA-7hfw-26vp-jp8m PyPDF's Manipulated FlateDecode streams can exhaust RAM |
High EPSS 0.48% |
< 6.0.0 | 6.0.0 |
| GHSA-wjcc-cq79-p63f Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF |
Medium EPSS 0.24% |
>= 3.7.0, < 3.17.0 | 3.17.0 |
| GHSA-wjcc-cq79-p63f Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF |
Medium EPSS 0.24% |
>= 3.7.0, < 3.17.0 | 3.17.0 |
| GHSA-4vvm-4w3v-6mr8 pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character |
Medium EPSS 0.35% |
>= 3.1.0, < 3.9.0 | 3.9.0 |
| GHSA-4vvm-4w3v-6mr8 pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character |
Medium EPSS 0.35% |
>= 3.1.0, < 3.9.0 | 3.9.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor