Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 pypdf, Resource Exhaustion Vulnerability, #CVE-2026-84310 (Medium) -DC-Sep2026-2081 https://dailycve.com/pypdf-resource-exhaustion-vulnerability-cve-2026-84310-medium-dc-sep2026-2081/
Post summary
The post announces a medium‑severity resource exhaustion vulnerability in pypdf identified as CVE‑2026‑84310.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pypdf_project | pypdf | - | - | - |