PyPI/pypdf CVE-2026-113794: medium 6

pypdf: Possible infinite loop when hitting EOF in standard xref table

Action: Upgrade pypdf to 6.20.0 or later.

pip install pypdf==6.20.0

Affected

Fixed versions

Sources

• osv: GHSA-39mj-jf6j-2qj3
• nvd: CVE-2026-113794
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-39mj-jf6j-2qj3
• https://github.com/py-pdf/pypdf/issues/4169
• https://github.com/py-pdf/pypdf/pull/4170
• https://github.com/py-pdf/pypdf/commit/37e1cd681744bac38b159f7e1c614eee8d639c58
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.20.0

CVE-2026-113794 · published 2026-10-21T16:54:44Z · modified 2026-10-21T17:00:26.618873039Z · JSON