CVE-2026-22691: Pypdf Dos Unbounded Loop Or Redos

A denial of service vulnerability exists due to an unbounded loop over unvalidated PDF sizes, or ReDoS in regex parsing xref/trailer data with overlapping whitespaces.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-22691-pypdf-dos-unbounded-loop-or-redos --engine opengrep

Description

A denial of service vulnerability exists due to an unbounded loop over unvalidated PDF sizes, or ReDoS in regex parsing xref/trailer data with overlapping whitespaces.