pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1.

tenable TNS-2026-16: [R2] Tenable Identity Exposure Version 3.93.5 Fixes Multiple Vulnerabilities

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this
    vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata,
    possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1. (CVE-2026-48735)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this     vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata,     possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1. (CVE-2026-48735)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
443294	SCA: security update for pypdf (GHSA-wjqc-6w8f-h24c)	Tenable Cloud Security	SCA Checks	medium
443294	SCA: security update for pypdf (GHSA-wjqc-6w8f-h24c)	Tenable Self-Hosted Container Security	SCA Checks	medium
317779	Linux Distros Unpatched Vulnerability : CVE-2026-48735	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-48735

medium

Tenable Plugins

Coming Soon

medium

medium

medium