Pypi · Pypdf · CVE-2026-33699
**Name of the Vulnerable Software and Affected Versions**
pypdf versions prior to 6.9.2
**Description**
pypdf is a free and open-source pure-python PDF library. A crafted PDF file can cause an infinite loop when read in non-strict mode. This issue requires reading a file in non-strict mode. Applying the changes from the patch manually is a potential workaround if upgrading is not immediately possible.
**Recommendations**
Upgrade to version 6.9.2 or later.
If an immediate upgrade is not possible, apply the changes from PR #3693 manually.