Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-113789

pypdf: Possible long runtimes/large memory usage when retrieving form fields

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

py-pdf pypdf

  • < 6.21.0affected

References