PyPI/pypdf2 CVE-2023-36464: medium 6.2, EPSS 0.35%
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Action: Upgrade pypdf2 to 3.9.0 or later.
pip install pypdf2==3.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 3.9.0 | - |
Fixed versions
| 3.9.0 |
Sources
- osv: PYSEC-2026-1835
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-4vvm-4w3v-6mr8
- https://nvd.nist.gov/vuln/detail/CVE-2023-36464
- https://github.com/py-pdf/pypdf/pull/1828
- https://github.com/py-pdf/pypdf/pull/969
- https://github.com/py-pdf/pypdf/commit/b0e5c689df689ab173df84dacd77b6fc3c161932
- https://github.com/py-pdf/pypdf
- https://github.com/py-pdf/pypdf/releases/tag/3.9.0
- https://pypi.org/project/pypdf2
- https://github.com/advisories/GHSA-4vvm-4w3v-6mr8
CVE-2023-36464 · published · modified · JSON