一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-59935 [HIGH] – pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can

未分类
📑 文章目录

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters, causing an infinite loop during parsing such as when extracting page text. This issue is fixed in version 6.14.2.