pypdf2@2.10.5 vulnerabilities

A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

Known vulnerabilities in the pypdf2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Infinite loop PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop when reading malformed objects. Exploiting this vulnerability is possible by sending a crafted PDF and results in blocking the current process and can utilize a single core of the CPU by 100%. How to fix Infinite loop? Upgrade `PyPDF2` to version 2.10.6 or higher.	[2.10.5,2.10.6)
M Denial of Service (DoS) PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Denial of Service (DoS). An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if `__parse_content_stream` is executed. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. How to fix Denial of Service (DoS)? There is no fixed version for `PyPDF2`.	[0,)
H Denial of Service (DoS) PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Denial of Service (DoS) due to invalid object. Exploiting this vulnerability is possible when reading the metadata. How to fix Denial of Service (DoS)? Upgrade `PyPDF2` to version 2.10.6 or higher.	[,2.10.6)