{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:803feae1-ba03-5674-b67c-232a555d5560", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pypdf", "purl": "pkg:pypi/pypdf@5.9.0.post18+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare", "version": "5.9.0.post18+tuxcare", "pedigree": { "ancestors": [ { "name": "pypdf", "purl": "pkg:pypi/pypdf@5.9.0", "type": "library", "version": "5.9.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-55197", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:0a41a569-2df3-5c16-9ae3-5be49f55e335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2025-62707", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:a2dea26d-dc03-5a4b-b46a-9de360a01997", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2025-62708", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:0f869654-5ebd-5308-a7c1-df567f718455", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2025-66019", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:3cdfa9c9-2356-50c5-887b-c6c404045c9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-102993", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:387d845e-d92d-5495-85d9-6d8b064ca890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102993 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-102994", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:04c137e2-f97f-5b69-9f66-cdad9760d15c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102994 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-102995", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:0abe7ffa-9065-5b24-b7b4-5190021d9e97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-102995 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare." } }, { "id": "CVE-2026-102996", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:6fd40dee-5317-5b49-8dce-62914b5af8b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102996 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-102997", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:a84eaa48-be81-5dfd-87ed-8b045403b937", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-102997 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare." } }, { "id": "CVE-2026-102998", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:fd85192d-dddf-5670-8816-7608770b107e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102998 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-102999", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:5eb87ab7-14d4-58d3-b5bc-ca7c2bbc1496", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102999 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-103000", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:f357ce7f-9ab4-58ee-865e-c8df1e3ded05", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-103000 does not affect version 5.9.0.post18+tuxcare of pypdf. Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09).", "justification": "code_not_present" } }, { "id": "CVE-2026-113786", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:9699bc65-6722-5337-a978-b509620f199f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113786 affects version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-113789", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:443661b2-d11d-528e-96ad-3d6b46411104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113789 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare." } }, { "id": "CVE-2026-113790", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:2e87cbaa-be15-596d-be7b-cd09ab8600a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113790 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare." } }, { "id": "CVE-2026-113791", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:a8f3a899-218a-5b6e-afe7-c1078b5e8594", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113791 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare." } }, { "id": "CVE-2026-113792", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:ee47229d-25f1-5ed2-9eb1-d7323eee04b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113792 affects version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-113793", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:f9981f83-e721-542c-9759-b78d155ed535", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113793 affects version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-113794", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:6176b6c5-4361-53f9-96d1-83ad4d32be1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113794 affects version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-113795", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:2fc986e7-1814-5421-a5e0-3f2c71ba820a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-113795 affects version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-115572", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:ce9bcd01-7a84-5bf5-b0d5-375b0a6146e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-115572 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare." } }, { "id": "CVE-2026-115580", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:436a64a4-2ee1-5c2a-a8c6-693b0dcef683", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-115580 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare." } }, { "id": "CVE-2026-115585", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:e59c5048-9924-5510-ac21-3d0f75df628c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-115585 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare." } }, { "id": "CVE-2026-22690", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:ad5f7b62-6c90-533b-8e87-9aa5c1847c0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-22691", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:4f355dab-a196-5a67-9580-f4d07c5f8930", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-24688", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:b14827bc-74f6-5136-b4bc-df908c6146bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-27024", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:739c0000-64d2-56be-94eb-335f8eeafc25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-27025", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:ecab8f71-58c4-5db2-8a2b-64590178eb59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-27026", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:73c213ad-bfa7-58b3-b918-9f10d58acf55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-27628", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:b8f201fe-702c-5abb-805b-b19a0da7eca2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-27888", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:da71d13c-f8fc-5e79-8e13-ce3e698088ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-28351", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:f5dc09a8-aadf-5359-b3f5-df6435e32832", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-28804", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:8d8a991d-5469-58ce-a59f-a8331bb2e4e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28804 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-31826", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:9da1fff6-1300-5fe7-968d-daaaddbe4883", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-33123", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:8b1c1146-1545-5b77-bac5-ce892e028c08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33123 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-33699", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:2321c1d8-32c3-5cbd-9eb7-911a41b24786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33699 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-40260", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:e5ea8434-5e62-5f61-a1d1-a631d9d1f6c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40260 affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare." } }, { "id": "CVE-2026-41168", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:1cc84ea8-b15e-587f-b2eb-719fce2cf3b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-41312", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:4728efba-e693-53ae-b05d-32e5553603f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-41313", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:ca6de349-e55d-5bf5-b37a-1325aef7e9ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-41314", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:67e03288-7101-548d-85cc-a023d2168fdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-48155", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:8138cfeb-9cb8-5f1d-99c2-92d7eb05bef7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-48156", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:bd49f89c-782c-57fa-af56-ee554c18b002", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-48735", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:f9e3bf74-5907-5bd9-80d3-54f33cf995b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-49460", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:cf40c5cb-4781-50f6-a26a-2ab9db4973ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-49461", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:cf8daa69-6fe6-5b26-b381-37ae26c396f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-54530", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:7841a86e-95ea-5e4a-b8e8-ba346bf18f1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-54531", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:32c22a2a-f705-5036-b81e-ca123267ba54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-54651", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:3b31ec7e-ad2c-5d26-a1ea-68efeb2e9b24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-57204", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:cae43c1a-8f61-591e-a9e4-01c15faeb070", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-59935", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:43ff3059-2844-59f8-b96d-bba3bf66e6d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-59936", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:5b0df219-9a38-541b-89c6-31ddf989b0fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-59937", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:a2744d2f-b85c-5300-8cc8-566984d4c6a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-59938", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:9e00a862-b59e-5d57-b5f4-8cfe289386a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-71852", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:e1cb8bf8-e14e-5992-9c10-be2721d022a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-71870", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:e6983ddc-a9c5-53c0-86ec-bca5b3531a6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-82398", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:46aef520-5827-5c26-b8dd-a05ae5522886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-82398 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-84309", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:c02e73a3-428f-5f75-84b1-9882a5561e17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84309 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-84310", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:6d81cda4-6bda-5556-99e8-8ffc7cdfd915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84310 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "CVE-2026-84311", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:04b9fc0a-4710-5d05-af4d-a03848ab3537", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84311 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "GHSA-4pxv-j86v-mhcw", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:7c9f0991-68fb-54b1-be22-a02a1c2092bf", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4pxv-j86v-mhcw affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare." } }, { "id": "GHSA-7gw9-cf7v-778f", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:d0967680-c9c4-5356-bb5c-6fcad224d200", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7gw9-cf7v-778f affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare." } }, { "id": "GHSA-9m86-7pmv-2852", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:38f694fd-7376-5224-8505-de1c1863d2a3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-9m86-7pmv-2852 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "GHSA-jj6c-8h6c-hppx", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:6b452087-d1a5-5cbe-ad82-ab24a0a42445", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jj6c-8h6c-hppx affects version 5.9.0.post18+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare." } }, { "id": "GHSA-jm82-fx9c-mx94", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:27ca6c8a-00a1-52e2-ab18-2f43a796d9b7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post18+tuxcare of pypdf." } }, { "id": "GHSA-x284-j5p8-9c5p", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ], "bom-ref": "urn:uuid:8376e1d9-6588-50ed-8281-d97c519934c8", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-x284-j5p8-9c5p is fixed in version 5.9.0.post18+tuxcare of pypdf." } } ], "dependencies": [ { "ref": "pkg:pypi/pypdf@5.9.0.post18+tuxcare" } ] }