PyPI/pypdf CVE-2026-24688: medium 4.3, EPSS 0.45%

pypdf has possible Infinite Loop when processing outlines/bookmarks

Action: Upgrade pypdf to 6.6.2 or later.

pip install pypdf==6.6.2

Affected

Fixed versions

Sources

• osv: GHSA-2q4j-m29v-hq73
• nvd: CVE-2026-24688
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-2q4j-m29v-hq73
• https://github.com/py-pdf/pypdf/pull/3610
• https://github.com/py-pdf/pypdf/commit/b1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.6.2

CVE-2026-24688 · published 2026-01-26T23:37:57Z · modified 2026-09-10T03:50:32.300137224Z · JSON