pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream using the RunLengthDecode filter. This has been fixed in pypdf 6.7.4. As a workaround, consider applying the changes from PR #3664.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this
    vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream
    using the RunLengthDecode filter. This has been fixed in pypdf 6.7.4. As a workaround, consider applying
    the changes from PR #3664. (CVE-2026-28351)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this     vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream     using the RunLengthDecode filter. This has been fixed in pypdf 6.7.4. As a workaround, consider applying     the changes from PR #3664. (CVE-2026-28351)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
438134	SCA: security update for pypdf (GHSA-f2v5-7jq9-h8cg)	Tenable Cloud Security	SCA Checks	medium
438134	SCA: security update for pypdf (GHSA-f2v5-7jq9-h8cg)	Tenable Self-Hosted Container Security	SCA Checks	medium
300281	Linux Distros Unpatched Vulnerability : CVE-2026-28351	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-28351

medium

Tenable Plugins

medium

medium

medium