Pypi · Pypdf · CVE-2026-84310
**Name of the Vulnerable Software and Affected Versions**
pypdf versions prior to 6.16.1
**Description**
An attacker can craft a PDF file that causes the ` get outline` function in `pypdf/ doc common.py` to consume excessive memory and long runtimes. This occurs when retrieving document outlines that contain a large number of entries or deeply nested reused paths, as the traversal process lacks global entry-count and nesting-depth limits.
**Recommendations**
Update to version 6.16.1.
As a temporary workaround, apply the changes from PR #3966.