Is PyPDF2 safe to use?

PyPDF2 has 2 known vulnerabilities on the latest version (3.0.1). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of PyPDF2?

The latest version of PyPDF2 is 3.0.1, released 2022-12-31.

Does PyPDF2 have known vulnerabilities?

Yes. PyPDF2 has 2 known vulnerabilities. See depscope.dev/pkg/pypi/PyPDF2 for details.

Is PyPDF2 deprecated?

No, PyPDF2 is actively maintained. Latest release: 3.0.1 (2022-12-31).

What are alternatives to PyPDF2?

Popular alternatives to PyPDF2 in PyPI include: boto3, packaging, urllib3, requests, typing-extensions.

What license does PyPDF2 use?

PyPDF2 is licensed under BSD-3-Clause.

PyPDF2

pypiv3.0.1

A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files

License BSD-3-Clausepermissive66 versions15 deps

py-pdf/PyPDF2

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Update to >= 3.9.0 to fix known vulnerabilities

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

21/25

security

15/15

maturity

8/15

community

Vulnerabilities

2 medium

Advisories (2)

Severity	ID	Summary	Fixed in
medium	CVE-2023-36464	pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character	3.9.0
medium	CVE-2023-36464	pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character	3.9.0

Maintainer trust

Active maintainers (3m)

17

Contributors (12m)

17

Primary author dominance

69%

GitHub stars

9,941

recent ownership change suspected

Quality signals

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (15)

typing_extensions dataclasses;PyCryptodome black pip-tools pre-commit pytest-cov flit wheel sphinx sphinx_rtd_theme myst_parser PyCryptodome Pillow Pillow

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/PyPDF2