https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:18:46.321981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-48156 CVE-2026-48156 — pypdf: Possible long runtimes for zero-only width values in cross-reference streams 2026-10-04T16:18:46.323592+00:00

Affected: py-pdf pypdf

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W [0 0 0] values and large /Size values. This vulnerability is fixed in 6.12.0.