Homepage

pypdf2@2.4.2 vulnerabilities

A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

  • latest version

    3.0.1

  • first published

    11 years ago

  • latest version published

    2 years ago

  • licenses detected

  • View pypdf2 package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the pypdf2 package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Denial of Service (DoS)

    PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

    Affected versions of this package are vulnerable to Denial of Service (DoS). An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if __parse_content_stream is executed. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage.

    How to fix Denial of Service (DoS)?

    There is no fixed version for PyPDF2.

    [0,)
    • H
    Denial of Service (DoS)

    PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

    Affected versions of this package are vulnerable to Denial of Service (DoS) due to invalid object. Exploiting this vulnerability is possible when reading the metadata.

    How to fix Denial of Service (DoS)?

    Upgrade PyPDF2 to version 2.10.6 or higher.

    [,2.10.6)
    Go back to all versions of this package