High severity7.1NVD Advisory· Published Oct 23, 2026

CVE-2026-115580

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and long runtimes when the file is opened. This issue is fixed in version 6.21.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Py PDF/Pypdfllm-fuzzy
Range: <6.21.2

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-gmh7-3g9r-mjh5ghsaADVISORY
github.com/py-pdf/pypdf/commit/a3061e34b169d34478d520f5f049c53cfb1482b2nvd
github.com/py-pdf/pypdf/pull/4239nvd
github.com/py-pdf/pypdf/releases/tag/6.21.2nvd
github.com/py-pdf/pypdf/security/advisories/GHSA-gmh7-3g9r-mjh5nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000