PyPI/pypdf2 CVE-2023-36464: medium 6.2, EPSS 0.35%
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | - | 3.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4vvm-4w3v-6mr8#PyPI/pypdf2
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-4vvm-4w3v-6mr8
- https://nvd.nist.gov/vuln/detail/CVE-2023-36464
- https://github.com/py-pdf/pypdf/pull/1828
- https://github.com/py-pdf/pypdf/pull/969
- https://github.com/py-pdf/pypdf/commit/b0e5c689df689ab173df84dacd77b6fc3c161932
- https://github.com/py-pdf/pypdf
- https://github.com/py-pdf/pypdf/releases/tag/3.9.0
CVE-2023-36464 · published · modified · JSON