PyPI/pypdf CVE-2026-71852: medium, EPSS 0.13%

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

Action: Upgrade pypdf to 6.15.0 or later.

pip install pypdf==6.15.0

Affected

Fixed versions

Sources

• osv: GHSA-fwg2-594c-jp42
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-fwg2-594c-jp42
• https://github.com/py-pdf/pypdf/pull/3946
• https://github.com/py-pdf/pypdf/commit/51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.15.0

CVE-2026-71852 · published 2026-08-07T18:54:00Z · modified 2026-09-10T03:51:13.932861945Z · JSON