CVE-2026-27026 - pypdf possibly has long runtimes for malformed FlateDecode streams

CVE ID : CVE-2026-27026 Published : Feb. 20, 2026, 10:16 p.m. | 44 minutes ago Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a malformed /FlateDecode stream, where the byte-by-byte decompression is used. This vulnerability is fixed in 6.7.1. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...