Threats Tagged 'brew-pdfly-cve-2026-40260'

1 threat

Threats Tagged 'brew-pdfly-cve-2026-40260'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.5%	CVE-2026-40260pypdf · XML Entity Expansion Medium6.9EPSS 0.5%2026-04-16CVE Database V5CVE-2026-40260 CVE-2026-40260 is a medium severity vulnerability in the py-pdf pypdf library versions prior to 6.10.0. It involves improper restriction of recursive entity references in XML DTDs, specifically in XMP metadata parsing. An attacker can craft a PDF with manipulated XMP metadata entity declarations that cause excessive memory consumption, potentially exhausting system RAM. This vulnerability has been fixed in pypdf version 6.10.0. EPSS 0.5%Vulnerability py-pdf #cwe-776 #brew-pdfly-cve-2026-40260 #homebrew	CVE Database V5	2026-04-16

Showing 1–1 of 1 result