PyPI/pypdf CVE-2026-113791: medium 6

pypdf: Possible large memory usage when parsing content streams

Action: Upgrade pypdf to 6.21.0 or later.

pip install pypdf==6.21.0

Affected

Fixed versions

Sources

• osv: GHSA-cgf9-327m-v77c
• nvd: CVE-2026-113791
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-cgf9-327m-v77c
• https://github.com/py-pdf/pypdf/pull/4218
• https://github.com/py-pdf/pypdf/commit/18bd2981a74479483a0b9507602c58a63d6c9b12
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.21.0

CVE-2026-113791 · published 2026-10-22T16:49:22Z · modified 2026-10-22T17:00:04.215115256Z · JSON