Pypi · Pypdf · CVE-2026-41312
**Name of the Vulnerable Software and Affected Versions**
pypdf versions prior to 6.10.2
**Description**
A flaw in the pure-python PDF library allows an attacker to craft a PDF that leads to RAM exhaustion. This occurs when accessing a stream compressed using '/FlateDecode' with a `/Predictor` unequal to 1 and large predictor parameters.
**Recommendations**
Update to version 6.10.2.
As a temporary workaround, apply the changes from the patch manually.