Threats affecting pkg:pypi/pypdf

59 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.4%	CVE-2025-62708py-pdf pypdf · Data Amplification Medium6.6EPSS 0.4%2025-10-22CVE Database V5CVE-2025-62708 ### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. ### Patches This has been fixed in [pypdf==6.1.3](https://github.com/py-pdf/pypdf/releases/tag/6.1.3). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3502](https://github.com/py-pdf/pypdf/pull/3502). EPSS 0.4%Vulnerability CWE-409 #brew-pdfalyzer-cve-2025-62708 #homebrew	CVE Database V5	2025-10-22
Medium	6.6	EPSS 0.4%	CVE-2025-62707py-pdf pypdf · Excessive Iteration Medium6.6EPSS 0.4%2025-10-22CVE Database V5CVE-2025-62707 ### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. ### Patches This has been fixed in [pypdf==6.1.3](https://github.com/py-pdf/pypdf/releases/tag/6.1.3). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3501](https://github.com/py-pdf/pypdf/pull/3501). EPSS 0.4%Vulnerability CWE-834 #brew-pdfalyzer-cve-2025-62707 #homebrew	CVE Database V5	2025-10-22

Page 4 of 4