pypdf

PyPI51 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting pypdfpage 2 of 2

CVE-2026-84311LOWCVSS 3.3EG 3.3fixed in 6.16.1
2026-09-01
vulnerable: 1.0 ... 6.9.2 (114 versions)
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py PageObject._extract_text and PageObject.extract_xform_text to traverse a directed acyclic graph of reused form…

Check whether pypdf is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for pypdf CVEs against the assets you own.

Book a Demo →