CVE-2023-36810

Medium

Advisory

Published 30 Jun 2023In the index since 8 Sept 2026

PyPDF2 quadratic runtime with malformed PDF missing xref marker

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
pypdf2pypi	1.26.0	1.27.9	2

2 by stars

Chart

Latest

Affected images

Radar Score

check-mkcloudnativeapp

1 of the 1 container images this version deploys carry CVE-2023-36810.

Container image	Digest	Package	Fixed in
nlmacamp/check_mk :latest	5dbb8589f824	pypdf2@1.26.0	1.27.9

2,408

erpnextimprowised

1 of the 3 container images this version deploys carry CVE-2023-36810.

Container image	Digest	Package	Fixed in
improwised/erpnext-worker :v13.4.1	97280b55cbd4	pypdf2@1.26.0	1.27.9

6,501

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
improwised/erpnext-worker :v13.4.1	97280b55cbd4	pypdf2@1.26.0	1.27.9	1
nlmacamp/check_mk :latest	5dbb8589f824	pypdf2@1.26.0	1.27.9	1