pypi package report

Is pikepdf safe?

2 known vulnerabilities, worst severity CRITICAL.

// reach

34 direct dependencies

6 carry known advisories, worst CRITICAL

12 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage

No published models are known to use this package.

cvss
9.8
critical

CVSS v3.1 base score out of 10

epss
not scored

chance of exploitation in 30 days

xyz score
4.9
medium

CyberXYZ composite out of 10

fig. 01 — GHSA-x58j-j539-w8mv, the advisory selected below

// 2 advisories

GHSA-x58j-j539-w8mv

CRITICALGitHub ratingCVE-2021-46849

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

// cvss v3.1 vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Checked 2026-11-06 at 23:52 UTC. The most recent advisory here was published 2022-10-24. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.