Beveiligingsadvies

CVE-2026-28804

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 06:46:28
Laatst bijgewerkt 2026-03-06 16:05:28
Toegewezen door GitHub_M
CVSS-score 6.9
Status PUBLISHED

Beschrijving

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5.