Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:28:10 +0000 CVE-2026-27628 — pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams https://vulnerability.circl.lu/vuln/cve-2026-27628 <p><strong>Affected:</strong> py-pdf pypdf</p> <p>pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually.</p> <p><strong>Affected:</strong> py-pdf pypdf</p> <p>pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually.</p> https://vulnerability.circl.lu/vuln/cve-2026-27628