CVE-2026-115585

PyPI/pypdf CVE-2026-115585: high

pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)

Action: Upgrade pypdf to 6.21.2 or later.

pip install pypdf==6.21.2

Affected

Fixed versions

Sources

• osv: GHSA-jr96-gvgh-j3r4
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-jr96-gvgh-j3r4
• https://github.com/py-pdf/pypdf/pull/4240
• https://github.com/py-pdf/pypdf/commit/68a0e5046cc9e14a6c24a21a713f3c7fbde18b4b
• https://github.com/py-pdf/pypdf
• https://github.com/py-pdf/pypdf/releases/tag/6.21.2

CVE-2026-115585 · published 2026-10-23T20:54:27Z · modified 2026-10-23T21:00:06.090706376Z · JSON