Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-66019
Not yet scoredAwaiting CVSS assessment
Published
November 26, 2025
Affected
1 project
Assigned by
GitHub
Description
pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patched in version 6.4.0.
py-pdf/pypdf
GitHubA pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files
GitHubA pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files< 6.4.0NVD