Threats Tagged 'brew-pdfly-cve-2026-27888'

1 threat

Threats Tagged 'brew-pdfly-cve-2026-27888'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.7%	CVE-2026-27888pypdf · Uncontrolled Resource Consumption Medium6.6EPSS 0.7%2026-02-26CVE Database V5CVE-2026-27888 ### Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing the `xfa` property of a reader or writer and the corresponding stream being compressed using `/FlateDecode`. ### Patches This has been fixed in [pypdf==6.7.3](https://github.com/py-pdf/pypdf/releases/tag/6.7.3). ### Workarounds If projects cannot upgrade yet, consider applying the changes from PR [#3658](https://github.com/py-pdf/pypdf/pull/3658). EPSS 0.7%Vulnerability py-pdf #cwe-400 #brew-pdfly-cve-2026-27888 #homebrew	CVE Database V5	2026-02-26

Showing 1–1 of 1 result