Medium
CVE-2026-49460
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 58
Reset filters
Medium
CVE-2026-54530
pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction
Medium
CVE-2026-49461
pypdf: Possible large memory usage for form XObjects during text extraction
Medium
CVE-2026-54531
pypdf: Possible infinite loop when processing outlines/bookmarks in writer
Medium
CVE-2026-48155
pypdf: Possible large memory usage for large offsets for layout mode text
Medium
CVE-2026-48156
pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams
Medium
CVE-2026-41314
pypdf: Manipulated FlateDecode image dimensions can exhaust RAM
Medium
CVE-2026-41312
pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
Medium
CVE-2026-41313
pypdf: Possible long runtimes for wrong size values in incremental mode
Medium
CVE-2026-40260
pypdf: Manipulated XMP metadata entity declarations can exhaust RAM
Medium
CVE-2026-41168
pypdf has long runtimes for wrong size values in cross-reference and object streams
Medium
CVE-2026-33699
pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
Medium
CVE-2026-33123
pypdf has inefficient decoding of array-based streams
Medium
CVE-2026-31826
pypdf: manipulated stream length values can exhaust RAM
Medium
CVE-2026-28804
pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams
Medium
CVE-2026-27888
pypdf: Manipulated FlateDecode XFA streams can exhaust RAM
Medium
CVE-2026-28351
pypdf: Manipulated RunLengthDecode streams can exhaust RAM
Low
CVE-2026-27628
pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
Medium
CVE-2026-27025
pypdf has possible long runtimes/large memory usage for large /ToUnicode streams
Medium
CVE-2026-27026
pypdf possibly has long runtimes for malformed FlateDecode streams
Medium
CVE-2026-27024
pypdf has a possible infinite loop when processing TreeObject
Medium
CVE-2026-24688
pypdf has possible Infinite Loop when processing outlines/bookmarks
Low
CVE-2026-22691
pypdf has possible long runtimes for malformed startxref
Low
CVE-2026-22690
pypdf has possible long runtimes for missing /Root object with large /Size values
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.