CVE-2026-22690

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.6.0

Description pypdf is a free and open-source pure-python PDF library. Versions prior to 6.6.0 are susceptible to potential long runtimes when processing PDF files missing the /Root object but containing a large /Size value. An attacker can exploit this by creating a specially crafted PDF file that causes extended processing times, particularly in non-strict reading mode. This issue affects invalid files and can lead to a denial-of-service condition.

Recommendations Versions prior to 6.6.0 should be updated to version 6.6.0 or later.