PyPI/pypdf CVE-2026-41313: medium 6.5, EPSS 0.38%

pypdf: Possible long runtimes for wrong size values in incremental mode

Action: Upgrade pypdf to 6.10.2 or later.

pip install pypdf==6.10.2

Affected

Fixed versions

Sources

• osv: GHSA-4pxv-j86v-mhcw
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-4pxv-j86v-mhcw
• https://nvd.nist.gov/vuln/detail/CVE-2026-41313
• https://github.com/py-pdf/pypdf/pull/3735
• https://github.com/py-pdf/pypdf/commit/c50a0104cf083356f7c7f5d61410466a57f5c88a
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.10.2

CVE-2026-41313 · published 2026-04-16T21:30:12Z · modified 2026-09-10T03:50:42.729754195Z · JSON