PyPI/pypdf CVE-2026-102999: high 7.5, EPSS 0.35%

pypdf: Possible long runtimes with large amount of embedded files

Action: Upgrade pypdf to 6.19.0 or later.

pip install pypdf==6.19.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-4159
• nvd: CVE-2026-102999
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj
• https://github.com/py-pdf/pypdf/pull/4081
• https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.19.0
• https://pypi.org/project/pypdf
• https://github.com/advisories/GHSA-v247-6f48-mgcj

CVE-2026-102999 · published 2026-10-01T16:44:33.811924Z · modified 2026-10-01T17:45:16.839952663Z · JSON