https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T10:28:06.754747+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-27628 CVE-2026-27628 — pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams 2026-09-28T10:28:06.771788+00:00

Affected: py-pdf pypdf

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually.