A vulnerability in pypdf prior to version 6.21.3 allows an attacker to craft a PDF file with cross-reference streams that causes large memory usage when parsed. This issue has been fixed in pypdf version 6.21.3. Users unable to upgrade immediately can apply the changes from the referenced pull request as a workaround.