Threats tagged 'brew-psutils-cve-2026-40260'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.4%	CVE-2026-40260py-pdf pypdf · XML Entity Expansion Medium6.9EPSS 0.4%2026-04-16CVE Database V5CVE-2026-40260 CVE-2026-40260 is a medium severity vulnerability in the py-pdf pypdf library versions prior to 6.10.0. It involves improper restriction of recursive entity references in XML DTDs, specifically in XMP metadata parsing. An attacker can craft a PDF with manipulated XMP metadata entity declarations that cause excessive memory consumption, potentially exhausting system RAM. This vulnerability has been fixed in pypdf version 6.10.0. EPSS 0.4%Vulnerability CWE-776 #brew-pdfly-cve-2026-40260 #homebrew	CVE Database V5	2026-04-16

Page 1 of 1