الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Stefan6419846

#26371من 58,130
9.8إجمالي CVSS
الثغرات · 2
متوسطة
2
PT-2026-84462
4.8
2026-08-14
Pypi · Pypdf · CVE-2026-84310
**Name of the Vulnerable Software and Affected Versions** pypdf versions prior to 6.16.1 **Description** An attacker can craft a PDF file that causes the ` get outline` function in `pypdf/ doc common.py` to consume excessive memory and long runtimes. This occurs when retrieving document outlines that contain a large number of entries or deeply nested reused paths, as the traversal process lacks global entry-count and nesting-depth limits. **Recommendations** Update to version 6.16.1. As a temporary workaround, apply the changes from PR #3966.
PT-2026-84463
5.0
2026-08-14
Pypi · Pypdf · CVE-2026-84311
**Name of the Vulnerable Software and Affected Versions** pypdf versions prior to 6.16.1 **Description** An attacker can craft a PDF file that leads to excessive memory consumption and long runtimes. This occurs when extracting text from a page containing numerous reused form XObjects, where a form invokes a child multiple times. This creates exponentially many traversal paths within the directed acyclic graph (a graph with no cycles) of the XObjects, specifically affecting the `PageObject. extract text()` and `PageObject.extract xform text()` functions. **Recommendations** Update to version 6.16.1. As a temporary workaround, apply the changes from PR #3966.