PT-2026-34566 · Pypi+1 · Pypdf+1

·

CVE-2026-41313

·

Published

2026-04-16

·

Updated

2026-08-14

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.10.2
Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that causes long runtimes. This occurs when loading a PDF in incremental mode that contains a large /Size value in the trailer.
Recommendations Update to version 6.10.2. Apply the changes from the patch manually as a workaround.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-14100
CVE-2026-41313
GHSA-4PXV-J86V-MHCW
PYSEC-2026-3007

Affected Products

Red Os
Pypdf