{"action":"Upgrade pypdf2 to 1.27.5 or later.","affected":[{"fixed":"1.27.5","introduced":"0"}],"component":"pypdf2","cve_ids":["CVE-2022-24859"],"ecosystem":"PyPI","epss":0.01317,"exploited":false,"fixed_versions":["1.27.5"],"ghsa_id":"GHSA-xcjx-m2pj-8g79","id":"tcs_01M5KG4123531FQ4RPS887SMMM","modified_at":"2024-10-14T18:55:47.089530Z","published_at":"2022-04-22T20:54:41Z","references":["https://osv.dev/vulnerability/GHSA-xcjx-m2pj-8g79","https://github.com/py-pdf/PyPDF2/security/advisories/GHSA-xcjx-m2pj-8g79","https://nvd.nist.gov/vuln/detail/CVE-2022-24859","https://github.com/py-pdf/PyPDF2/issues/329","https://github.com/py-pdf/PyPDF2/pull/740","https://github.com/py-pdf/PyPDF2","https://github.com/py-pdf/PyPDF2/releases/tag/1.27.5","https://github.com/pypa/advisory-database/tree/main/vulns/pypdf2/PYSEC-2022-194.yaml","https://lists.debian.org/debian-lts-announce/2022/06/msg00001.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00013.html"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-xcjx-m2pj-8g79","url":"https://osv.dev/vulnerability/GHSA-xcjx-m2pj-8g79"}],"summary":"Manipulated inline images can cause Infinite Loop in PyPDF2"}