CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0.

• CWE-835

• https://github.com/py-pdf/pypdf/pull/3830Issue Tracking, Patch
• https://github.com/py-pdf/pypdf/releases/tag/6.13.0Patch, Release Notes
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-52x6-gq3r-vpf4Patch, Vendor Advisory

Published

Jun 22, 2026

Last Modified

Jun 25, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5452A flaw has been found in UCC CampusConnect App up to 14.3.5 …3.3
• CVE-2026-54522MessagePack for Ruby is an implementation of the MessagePack…5.4
• CVE-2026-54526Argo Workflows is an open source container-native workflow e…9.9
• CVE-2026-54527JupyterLab Git is a Git extension for JupyterLab. From 0.30.…9
• CVE-2026-54528JupyterLab Git is a Git extension for JupyterLab. Prior to 0…7.1
• CVE-2026-5453A vulnerability has been found in Rico só vantagem pra inves…3.3
• CVE-2026-54531pypdf is a free and open-source pure-python PDF library. Pri…5.5
• CVE-2026-54533vantage6 is an open-source infrastructure for privacy preser…6.9
• CVE-2026-54538xrdp is an open source RDP server. In versions 0.10.6 and pr…7.5
• CVE-2026-5454A vulnerability was found in GRID Organiser App up to 1.0.5 …3.3
• CVE-2026-54540Pheditor is a single-file editor and file manager written in…8.8
• CVE-2026-54545wakaru is a JavaScript decompiler and unminifier toolkit. Fr…7.1