{
  "@id": "urn:uuid:32422790-c272-420c-9a5b-f27f897cd145",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 13,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-26T12:55:53.554317+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2025-55197"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2025-62707"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2025-62708"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-66019 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2025-66019"
      },
      "action_statement": "Vulnerability CVE-2025-66019 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-06T09:18:00.239158+00:00",
      "status_notes": "Vulnerability CVE-2026-102993 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-102993"
      },
      "action_statement": "Vulnerability CVE-2026-102993 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-06T09:18:00.239158+00:00",
      "status_notes": "Vulnerability CVE-2026-102994 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-102994"
      },
      "action_statement": "Vulnerability CVE-2026-102994 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-08T09:28:00.123686+00:00",
      "status_notes": "Vulnerability CVE-2026-102995 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-102995"
      },
      "action_statement": "Vulnerability CVE-2026-102995 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-06T09:18:00.239158+00:00",
      "status_notes": "Vulnerability CVE-2026-102996 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-102996"
      },
      "action_statement": "Vulnerability CVE-2026-102996 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-08T09:28:00.123686+00:00",
      "status_notes": "Vulnerability CVE-2026-102997 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-102997"
      },
      "action_statement": "Vulnerability CVE-2026-102997 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-06T09:18:00.239158+00:00",
      "status_notes": "Vulnerability CVE-2026-102998 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-102998"
      },
      "action_statement": "Vulnerability CVE-2026-102998 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-06T09:18:00.239158+00:00",
      "status_notes": "Vulnerability CVE-2026-102999 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-102999"
      },
      "action_statement": "Vulnerability CVE-2026-102999 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post18+tuxcare."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-19T06:58:00.201033+00:00",
      "status_notes": "Vulnerability CVE-2026-103000 does not affect version 5.9.0.post7+tuxcare of pypdf. Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09).",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-103000"
      },
      "impact_statement": "Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09)."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T12:55:53.554317+00:00",
      "status_notes": "Vulnerability CVE-2026-113786 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113786"
      },
      "action_statement": "Vulnerability CVE-2026-113786 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T11:46:39.583037+00:00",
      "status_notes": "Vulnerability CVE-2026-113789 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113789"
      },
      "action_statement": "Vulnerability CVE-2026-113789 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T11:46:39.583037+00:00",
      "status_notes": "Vulnerability CVE-2026-113790 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113790"
      },
      "action_statement": "Vulnerability CVE-2026-113790 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T11:46:39.583037+00:00",
      "status_notes": "Vulnerability CVE-2026-113791 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113791"
      },
      "action_statement": "Vulnerability CVE-2026-113791 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T12:55:53.554317+00:00",
      "status_notes": "Vulnerability CVE-2026-113792 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113792"
      },
      "action_statement": "Vulnerability CVE-2026-113792 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T12:55:53.554317+00:00",
      "status_notes": "Vulnerability CVE-2026-113793 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113793"
      },
      "action_statement": "Vulnerability CVE-2026-113793 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T12:55:53.554317+00:00",
      "status_notes": "Vulnerability CVE-2026-113794 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113794"
      },
      "action_statement": "Vulnerability CVE-2026-113794 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T12:55:53.554317+00:00",
      "status_notes": "Vulnerability CVE-2026-113795 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-113795"
      },
      "action_statement": "Vulnerability CVE-2026-113795 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post21+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T11:46:39.583037+00:00",
      "status_notes": "Vulnerability CVE-2026-115572 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-115572"
      },
      "action_statement": "Vulnerability CVE-2026-115572 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T11:46:39.583037+00:00",
      "status_notes": "Vulnerability CVE-2026-115580 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-115580"
      },
      "action_statement": "Vulnerability CVE-2026-115580 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-26T11:46:39.583037+00:00",
      "status_notes": "Vulnerability CVE-2026-115585 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-115585"
      },
      "action_statement": "Vulnerability CVE-2026-115585 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-22690 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-22690"
      },
      "action_statement": "Vulnerability CVE-2026-22690 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-22691 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-22691"
      },
      "action_statement": "Vulnerability CVE-2026-22691 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-24688 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-24688"
      },
      "action_statement": "Vulnerability CVE-2026-24688 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-27024 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-27024"
      },
      "action_statement": "Vulnerability CVE-2026-27024 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-27025 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-27025"
      },
      "action_statement": "Vulnerability CVE-2026-27025 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-27026 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-27026"
      },
      "action_statement": "Vulnerability CVE-2026-27026 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2026-27628"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-27888 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-27888"
      },
      "action_statement": "Vulnerability CVE-2026-27888 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-28351 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-28351"
      },
      "action_statement": "Vulnerability CVE-2026-28351 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-28804 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-28804"
      },
      "action_statement": "Vulnerability CVE-2026-28804 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-31826 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-31826"
      },
      "action_statement": "Vulnerability CVE-2026-31826 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-33123 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-33123"
      },
      "action_statement": "Vulnerability CVE-2026-33123 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-33699 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-33699"
      },
      "action_statement": "Vulnerability CVE-2026-33699 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-08T09:28:00.123686+00:00",
      "status_notes": "Vulnerability CVE-2026-40260 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-40260"
      },
      "action_statement": "Vulnerability CVE-2026-40260 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2026-41168"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2026-41312"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2026-41313"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2026-41314"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-48155 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post9+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-48155"
      },
      "action_statement": "Vulnerability CVE-2026-48155 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post9+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2026-48156"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-48735 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post15+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-48735"
      },
      "action_statement": "Vulnerability CVE-2026-48735 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post15+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post7+tuxcare of pypdf.",
      "vulnerability": {
        "name": "CVE-2026-49460"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-49461 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post8+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-49461"
      },
      "action_statement": "Vulnerability CVE-2026-49461 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post8+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-54530 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post10+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-54530"
      },
      "action_statement": "Vulnerability CVE-2026-54530 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post10+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-54531 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post10+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-54531"
      },
      "action_statement": "Vulnerability CVE-2026-54531 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post10+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-54651 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post11+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-54651"
      },
      "action_statement": "Vulnerability CVE-2026-54651 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post11+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-57204 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-57204"
      },
      "action_statement": "Vulnerability CVE-2026-57204 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post16+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59935 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post14+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-59935"
      },
      "action_statement": "Vulnerability CVE-2026-59935 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post14+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59936 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post13+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-59936"
      },
      "action_statement": "Vulnerability CVE-2026-59936 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post13+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59937 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-59937"
      },
      "action_statement": "Vulnerability CVE-2026-59937 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-59938 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-59938"
      },
      "action_statement": "Vulnerability CVE-2026-59938 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-71852 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-71852"
      },
      "action_statement": "Vulnerability CVE-2026-71852 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-71870 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-71870"
      },
      "action_statement": "Vulnerability CVE-2026-71870 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-82398 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-82398"
      },
      "action_statement": "Vulnerability CVE-2026-82398 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-84309 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-84309"
      },
      "action_statement": "Vulnerability CVE-2026-84309 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-84310 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-84310"
      },
      "action_statement": "Vulnerability CVE-2026-84310 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-84311 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "CVE-2026-84311"
      },
      "action_statement": "Vulnerability CVE-2026-84311 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-08T09:28:00.123686+00:00",
      "status_notes": "Vulnerability GHSA-4pxv-j86v-mhcw affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare.",
      "vulnerability": {
        "name": "GHSA-4pxv-j86v-mhcw"
      },
      "action_statement": "Vulnerability GHSA-4pxv-j86v-mhcw affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-08T09:28:00.123686+00:00",
      "status_notes": "Vulnerability GHSA-7gw9-cf7v-778f affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare.",
      "vulnerability": {
        "name": "GHSA-7gw9-cf7v-778f"
      },
      "action_statement": "Vulnerability GHSA-7gw9-cf7v-778f affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-9m86-7pmv-2852 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare.",
      "vulnerability": {
        "name": "GHSA-9m86-7pmv-2852"
      },
      "action_statement": "Vulnerability GHSA-9m86-7pmv-2852 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post17+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-08T09:28:00.123686+00:00",
      "status_notes": "Vulnerability GHSA-jj6c-8h6c-hppx affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare.",
      "vulnerability": {
        "name": "GHSA-jj6c-8h6c-hppx"
      },
      "action_statement": "Vulnerability GHSA-jj6c-8h6c-hppx affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post19+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-jm82-fx9c-mx94 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post9+tuxcare.",
      "vulnerability": {
        "name": "GHSA-jm82-fx9c-mx94"
      },
      "action_statement": "Vulnerability GHSA-jm82-fx9c-mx94 affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post9+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/pypdf@5.9.0.post7+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/pypdf@5.9.0.post7+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability GHSA-x284-j5p8-9c5p affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare.",
      "vulnerability": {
        "name": "GHSA-x284-j5p8-9c5p"
      },
      "action_statement": "Vulnerability GHSA-x284-j5p8-9c5p affects version 5.9.0.post7+tuxcare of pypdf, and is fixed in 5.9.0.post12+tuxcare."
    }
  ]
}