CVE-2026-102998

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.19.0

Description A crafted PDF containing specific form field values can trigger a performance issue during appearance-stream generation within the pypdf/generic/ appearance stream.py file. This occurs when an application updates fields with flattening enabled, causing the system to repeat invariant selection-data work inside a loop. This inefficiency leads to excessive runtimes and can result in application unavailability.

Recommendations Update to version 6.19.0.