pypdf2 vulnerabilities
CVEs whose affected-version data names the pypdf2 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2023-36810Medium· 6.2PyPDF2 quadratic runtime with malformed PDF missing xref marker
PyPDF2 quadratic runtime with malformed PDF missing xref marker
▾ Sunlitpypdf2 · pypdf2EPSS 0.63%via OSV
CVE-2023-36807Medium· 6.2PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
▾ Sunlitpypdf2 · pypdf2EPSS 0.57%via OSV
CVE-2023-36464Medium· 6.2pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
▾ Sunlitpypdf · pypdfEPSS 0.35%via OSV