pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could still trigger a complete PDF stream reload during each recovery attempt even when a recovery cache was present, causing crafted cross-reference streams to produce long runtimes. This issue is fixed in version 6.21.2.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for
    repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could still trigger a complete PDF
    stream reload during each recovery attempt even when a recovery cache was present, causing crafted cross-
    reference streams to produce long runtimes. This issue is fixed in version 6.21.2. (CVE-2026-115585)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for     repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could still trigger a complete PDF     stream reload during each recovery attempt even when a recovery cache was present, causing crafted cross-     reference streams to produce long runtimes. This issue is fixed in version 6.21.2. (CVE-2026-115585)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477484	Chainguard: multiple open-webui packages: security update to 0.12.3-r8	Tenable Cloud Security	Chainguard Local Security Checks	Local	high
477484	Chainguard: multiple open-webui packages: security update to 0.12.3-r8	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	high
477252	SCA: security update for pypdf (GHSA-jr96-gvgh-j3r4)	Tenable Cloud Security	SCA Checks	Local	high
477252	SCA: security update for pypdf (GHSA-jr96-gvgh-j3r4)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
371710	Linux Distros Unpatched Vulnerability : CVE-2026-115585	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-115585

high

Tenable Plugins

high

high

high

high

high