CVE-2023-36807
2 advisories.
PyPI/pypdf2 CVE-2023-36807: medium 6.2
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
Action: Upgrade pypdf2 to 2.10.6 or later.
pip install pypdf2==2.10.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.10.5 | 2.10.6 | - |
Fixed versions
| 2.10.6 |
Sources
- osv: GHSA-hm9v-vj3r-r55m
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-hm9v-vj3r-r55m
- https://nvd.nist.gov/vuln/detail/CVE-2023-36807
- https://github.com/py-pdf/pypdf/issues/1329
- https://github.com/py-pdf/pypdf/pull/1331
- https://github.com/py-pdf/pypdf/commit/e6531a25325e7e0174b6a1ba03b57320b5227f6b
- https://github.com/py-pdf/pypdf
CVE-2023-36807 · published · modified · JSON
PyPI/pypdf2 CVE-2023-36807: medium 6.2
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
Action: Upgrade pypdf2 to 2.10.6 or later.
pip install pypdf2==2.10.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.10.5 | 2.10.6 | - |
Fixed versions
| 2.10.6 |
Sources
- osv: PYSEC-2026-1836
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-hm9v-vj3r-r55m
- https://nvd.nist.gov/vuln/detail/CVE-2023-36807
- https://github.com/py-pdf/pypdf/issues/1329
- https://github.com/py-pdf/pypdf/pull/1331
- https://github.com/py-pdf/pypdf/commit/e6531a25325e7e0174b6a1ba03b57320b5227f6b
- https://github.com/py-pdf/pypdf
- https://pypi.org/project/pypdf2
- https://github.com/advisories/GHSA-hm9v-vj3r-r55m
CVE-2023-36807 · published · modified · JSON