PyPI/pypdf CVE-2026-113786: low 2.3

pypdf: Unvalidated JPEG image data loading

Action: Upgrade pypdf to 6.21.1 or later.

pip install pypdf==6.21.1

Affected

Fixed versions

Sources

• osv: GHSA-5hx5-vpf9-5wcv
• nvd: CVE-2026-113786
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-5hx5-vpf9-5wcv
• https://github.com/py-pdf/pypdf/pull/4222
• https://github.com/py-pdf/pypdf/commit/512d8eb94eb04be1d1c90504e6da2dcef8679e07
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.21.1

CVE-2026-113786 · published 2026-10-21T19:58:10Z · modified 2026-10-21T20:15:04.178781594Z · JSON