PyPDF2@3.0.1 vulnerabilities

A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

Direct Vulnerabilities

Known vulnerabilities in the PyPDF2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Denial of Service (DoS)

PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

Affected versions of this package are vulnerable to Denial of Service (DoS). An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if __parse_content_stream is executed. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage.

How to fix Denial of Service (DoS)?

There is no fixed version for PyPDF2.

[0,)