pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
CVE-2026-119203
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires openi
#pip
共收录 834 条相关情报。
← 返回所有主题pypdf has possible large memory usage when parsing page tree
CVE-2026-119204
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires par
pypdf has possible infinite loop when cloning dictionaries
CVE-2026-119205
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires cloni
Authlib RFC 7592 examples omit registration-access-token client binding
CVE-2026-116672
## Description ### Summary RFC 7592 (OAuth 2.0 Dynamic Client Registration Management Protocol) lets a previously regi
pypdf has possible long runtimes when retrieving page labels
CVE-2026-119206
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes. This requires retriev
pypdf has possible large memory usage for exceptions in strict mode
CVE-2026-119207
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loa
pypdf has possible long runtimes/large memory usage for encrypted PDF files
CVE-2026-119208
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This req
pypdf has possible large memory usage when parsing cross-reference streams
CVE-2026-119209
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires ope
pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
CVE-2026-119196
## Summary In pyasn1 through 0.6.4, decoding a constructed BIT STRING with many fragments repeatedly shifts and copies
pyasn1 has quadratic-complexity denial of service in binary REAL decoding
CVE-2026-119197
## Summary In pyasn1 0.6.4 and earlier, decoding a binary-encoded ASN.1 REAL with a large mantissa can consume CPU time
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding
CVE-2026-119195
## Summary In pyasn1 0.6.4 and earlier, decoding a constructed OCTET STRING or character string made of many fragments
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding
CVE-2026-119194
### Summary When an application decodes attacker-controlled BER, CER, or DER data without an ASN.1 schema, a container
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
CVE-2026-118669
## Summary OAuthlib's token grant handlers can authenticate one client while authorizing the grant type and requested s
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
CVE-2026-116677
## Summary The authenticated REST API endpoint for downloading a CA Certificate Revocation List resolves the requested
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a module-level ValidationAbortedError when a document excee...
CVE-2026-119286
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while opening a crafted PDF containing cross-reference streams that ...
CVE-2026-119209
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while openi
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application accesses the page count of a crafted en...
CVE-2026-119208
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory wh
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested pars...
CVE-2026-119207
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page labels from a crafted PDF containing a flat page-label n...
CVE-2026-119206
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a crafted cyclic DictionaryObject. Clone t...
CVE-2026-119205
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning