[ CVE-2026-113795 · Published 21 Oct 2026 ]
pypdf: Possible large memory usage for streams with multiple filters
CVSS 6.0
EPSS <1%Fix available
[ Description ]Official description
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0.
[ Fixes ]Fixes and patches
- pypdf 6.20.0Fixed version · GitHub Advisories · pip package pypdf: upgrade to 6.20.0 or later (affected < 6.20.0)
[ Packages ]Affected open-source packages
- pypdf pipAffected < 6.20.0 · fixed in 6.20.0 · GHSA-7mh2-4gg2-979f