{"id":"CVE-2026-119205","published":"2026-10-29T21:17:19.677","lastModified":"2026-10-29T21:17:19.677","description":"pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a crafted cyclic DictionaryObject. Clone traversal checked generated destination references rather than the original source references, allowing some source cycles to evade the visited-object check. This issue is fixed in version 6.21.4.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-835"],"vendors":[],"products":[],"references":[{"url":"https://github.com/py-pdf/pypdf/commit/f176db1a1f7f9af3e472e69a843ef1175653b044","tags":[]},{"url":"https://github.com/py-pdf/pypdf/pull/4288","tags":[]},{"url":"https://github.com/py-pdf/pypdf/releases/tag/6.21.4","tags":[]},{"url":"https://github.com/py-pdf/pypdf/security/advisories/GHSA-mfr5-77xh-9j7h","tags":[]}],"exploitRefs":[{"url":"https://github.com/py-pdf/pypdf/commit/f176db1a1f7f9af3e472e69a843ef1175653b044","tags":[]},{"url":"https://github.com/py-pdf/pypdf/pull/4288","tags":[]},{"url":"https://github.com/py-pdf/pypdf/releases/tag/6.21.4","tags":[]},{"url":"https://github.com/py-pdf/pypdf/security/advisories/GHSA-mfr5-77xh-9j7h","tags":[]}],"hasPoc":true,"ai":null}