Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider applying the changes from the patch manually.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-33699 pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite … https://www.cve.org/CVERecord?id=CVE-2026-33699
Post summary
CVE-2026-33699 targets pypdf versions before 6.9.2, where a crafted PDF can cause an infinite loop or crash; no PoC, exploit, or active exploitation is reported.
⚡ New CVE Alert: CVE-2026-33699 📊 Severity: 4.6 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33699 #CVE-2026-33699 #CVE #Medium #CyberSecurity #InfoSec https://t.co/5PtLl6G9xH
Post summary
The tweet announces the existence of CVE-2026-33699 with a medium severity rating and provides a reference link, but offers no technical, exploitation, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pypdf_project | pypdf | - | - | - |