CVE-2026-48156
Low · 3.3CVSS
3.3
EPSS
0.2%
Published
May 28, 2026
CISA due date
—
The record
pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W [0 0 0] values and large /Size values. This vulnerability is fixed in 6.12.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-106576 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-834
- CVE-2026-53493 containerd is an open-source container runtime. CWE-834
- CVE-2026-81872 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-834
- CVE-2026-16497 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could… CWE-834
- CVE-2026-84310 pypdf is a free and open-source pure-python PDF library. CWE-834
- CVE-2026-84311 pypdf is a free and open-source pure-python PDF library. CWE-834
- CVE-2026-77357 Mesop is a Python-based UI framework that allows users to build web applications. CWE-834
- CVE-2026-71852 pypdf is a free and open-source pure-python PDF library. CWE-834