pypdf@3.13.0 vulnerabilities

A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

  • latest version

    5.3.1

  • latest non vulnerable version

  • first published

    10 years ago

  • latest version published

    8 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the pypdf package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Loop with Unreachable Exit Condition ('Infinite Loop')

    pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

    Affected versions of this package are vulnerable to Loop with Unreachable Exit Condition ('Infinite Loop') when the PdfWriter(clone_from) function is used with a PDF. An attacker can craft a PDF that leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. This is particularly problematic when the user manipulates an incoming malicious PDF, for example, by merging it with another PDF or by adding annotations.

    How to fix Loop with Unreachable Exit Condition ('Infinite Loop')?

    Upgrade pypdf to version 3.17.0 or higher.

    [3.7.0,3.17.0)