CVE-2026-54651 – pypdf: Possible infinite loop when processing threads/articles in writer

CVE ID :CVE-2026-54651

Published : June 22, 2026, 8:28 p.m. | 1 hour, 15 minutes ago

Description :pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. This vulnerability is fixed in 6.13.1.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…