PyPI/pypdf CVE-2026-84311: medium, EPSS 0.14%

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Action: Upgrade pypdf to 6.16.1 or later.

pip install pypdf==6.16.1

Affected

Fixed versions

Sources

• osv: GHSA-763m-79hh-57f2
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-763m-79hh-57f2
• https://github.com/py-pdf/pypdf/pull/3966
• https://github.com/py-pdf/pypdf/commit/d91ab705fd81ed1a9cec175c6958600dea1a4942
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.16.1

CVE-2026-84311 · published 2026-09-01T21:27:22Z · modified 2026-09-10T12:26:04.098858222Z · JSON