CVE-2026-115580 is a vulnerability in pypdf that allows an attacker to craft a PDF file with large or incorrect upper limits in the xref table, causing long runtimes when the file is opened. This can lead to denial of service due to resource exhaustion. The issue has been fixed in pypdf version 6.21.2. Users unable to upgrade immediately can apply the changes from the referenced pull request as a workaround.