CVE-2026-28804 - pypdf: Inefficient decoding of ASCIIHexDecode streams

CVE ID : CVE-2026-28804 Published : March 6, 2026, 7:16 a.m. | 43 minutes ago Description : pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...