CVE-2026-27628 - pypdf has a possible infinite loop when loading circular /Prev entries in cross-...

CVE ID : CVE-2026-27628 Published : Feb. 25, 2026, 3:16 a.m. | 1 hour, 29 minutes ago Description : pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually. Severity: 1.2 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...