Question 1

What is CVE-2026-113794 — CVE-2026-113794?

Accepted Answer

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0.

Question 2

What is the authoritative source for CVE-2026-113794?

Accepted Answer

CVE-2026-113794 (CVE-2026-113794) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-113794CVE-2026-113794

Description

Scoring