CVE-2026-59937 – pypdf: Possible long runtimes for repeated malformed cross-reference entries

CVE ID :CVE-2026-59937

Published : July 8, 2026, 5:25 p.m. | 23 minutes ago

Description :pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken cross-reference table entries. This issue is fixed in version 6.14.0.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…