PDFJinja requires PyPDF2 which is deprecated and has a vulnerability

[jasonmnayerji0]

PyPDF2 is deprecated and has a vulnerability issue which can use 100% of a single core. An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if __parse_content_stream is executed.

---

One can test this vulnerability by:

• Downloading MiFO_LFO_FEIS_NOA_Published.3.pdf then running

  from PyPDF2 import PdfReader
  reader = PdfReader("MiFO_LFO_FEIS_NOA_Published.3.pdf")
  page = reader.pages[0]
  page.extract_text()
  

---

It is recommended to migrate to pypdf, which is neither deprecated nor does it have this vulnerability.