Skip to content
OpenAdvisories
Medium DLA-3497-1 1 CVE

pypdf2 - security update

Published Jul 14, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 pypdf2 1.26.0-2+deb10u2

Vulnerabilities 1

  • Medium 6.2
    CVE-2023-36810

    Quadratic runtime with malformed PDF missing xref marker in pypdf

    pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker who uses this vulnerability can craft a PDF which leads to unexpected long runtime. This quadratic runtime blocks the current proc…

    py-pdf pypdf pypdf2 pypdf2 Debian Ubuntu PyPI