CVE-2025-55197
2 advisories.
PyPI/pypdf CVE-2025-55197: medium
PyPDF's Manipulated FlateDecode streams can exhaust RAM
Action: Upgrade pypdf to 6.0.0 or later.
pip install pypdf==6.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0 | - |
Fixed versions
| 6.0.0 |
Sources
- osv: GHSA-7hfw-26vp-jp8m
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-7hfw-26vp-jp8m
- https://nvd.nist.gov/vuln/detail/CVE-2025-55197
- https://github.com/py-pdf/pypdf/issues/3429
- https://github.com/py-pdf/pypdf/pull/3430
- https://github.com/py-pdf/pypdf
- https://github.com/py-pdf/pypdf/blob/0dd57738bbdcdb63f0fb43d8a6b3d222b6946595/pypdf/filters.py#L72-L143
- https://github.com/py-pdf/pypdf/releases/tag/6.0.0
CVE-2025-55197 · published · modified · JSON
PyPI/pypdf CVE-2025-55197: unknown
PyPDF's Manipulated FlateDecode streams can exhaust RAM
Action: Upgrade pypdf to 6.0.0 or later.
pip install pypdf==6.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0 | - |
Fixed versions
| 6.0.0 |
Sources
- osv: PYSEC-2026-1830
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-7hfw-26vp-jp8m
- https://nvd.nist.gov/vuln/detail/CVE-2025-55197
- https://github.com/py-pdf/pypdf/issues/3429
- https://github.com/py-pdf/pypdf/pull/3430
- https://github.com/py-pdf/pypdf
- https://github.com/py-pdf/pypdf/blob/0dd57738bbdcdb63f0fb43d8a6b3d222b6946595/pypdf/filters.py#L72-L143
- https://github.com/py-pdf/pypdf/releases/tag/6.0.0
- https://pypi.org/project/pypdf
- https://github.com/advisories/GHSA-7hfw-26vp-jp8m
CVE-2025-55197 · published · modified · JSON