mediumVulnerability
CVE-2026-82398
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a call to `read_until_whitespace` with an input which does not have whitespace for a long time. ### Patches This has been fixed in [pypdf==6.15.0](https://github.com/py-pdf/pypdf/releases/tag/6.15.0). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3947](https://github.com/py-pdf/pypdf/pull/3947).
Properties
- ghsa_id
- GHSA-fc8x-2rww-xw9m
- severity
- medium
- summary
- pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
- cve_id
- CVE-2026-82398
- is_ghsa_only
- false
- ghsa_published
- 2026-09-02T14:38:12Z
- source_url
- https://github.com/advisories/GHSA-fc8x-2rww-xw9m
- ghsa_updated
- 2026-09-02T14:38:13Z
Related Entities (4)
REPORTED_BY (1)
→[Source]GitHub Advisory Database
VULNERABLE_TO (1)
←[Software]pip/pypdf
AFFECTS (1)
→[Software]pip/pypdf
HAS_WEAKNESS (1)
→[Weakness]Inefficient Algorithmic Complexity
Explore deeper with Ninja Signal's threat intelligence graph