Nivid42

**Name of the Vulnerable Software and Affected Versions** pypdf versions prior to 6.17.0 **Description** A crafted PDF file can contain unusually large Roman page-label values. When an application retrieves document page labels, the `pypdf/ page labels.py` module generates excessively large numeral strings, leading to high memory consumption and potentially causing the application to become unavailable. **Recommendations** Update to version 6.17.0.

**Name of the Vulnerable Software and Affected Versions** PyJWT versions 2.13.0 through 2.13.x **Description** The `PyJWS. load` function in `jwt/api jws.py` fails to catch `RecursionError` when processing a deeply nested token header via `json.loads`. Because the parser only catches `ValueError`, the `RecursionError` bypasses the standard error handling hierarchy. This allows an unauthenticated attacker to send a malformed token that triggers a request-level failure, resulting in an HTTP 500 error. **Recommendations** Update to version 2.14.0.