Vulnerabilities for PyPDF2

First version without a known vulnerability: 1.27.9

Details

• GHSA-hm9v-vj3r-r55m2023-06-30

  PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects

  Fixed in: 2.10.6

• GHSA-jrm6-h9cq-8gqw2023-06-30

  PyPDF2 quadratic runtime with malformed PDF missing xref marker

  Fixed in: 1.27.9

• GHSA-4vvm-4w3v-6mr82023-06-30

  pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character

  Fixed in: 3.9.0

• GHSA-xcjx-m2pj-8g792022-04-22

  Manipulated inline images can cause Infinite Loop in PyPDF2

  Fixed in: 1.27.5