CVE-2026-22690 | py-pdf pypdf up to 6.5.x Root Object Size resource consumption (GHSA-4xc4-762w-m6cg)

January 10, 2026 Yanac

A vulnerability categorized as problematic has been discovered in py-pdf pypdf up to 6.5.x. This vulnerability affects unknown code of the component Root Object Handler. Such manipulation of the argument Size leads to resource consumption.

This vulnerability is documented as CVE-2026-22690. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More