{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3ed838ba-daaa-560f-84bc-6a944241b56f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pypdf", "purl": "pkg:pypi/pypdf@5.9.0.post22+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare", "version": "5.9.0.post22+tuxcare", "pedigree": { "ancestors": [ { "name": "pypdf", "purl": "pkg:pypi/pypdf@5.9.0", "type": "library", "version": "5.9.0" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-55197", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0c1467de-a251-57e3-b4de-98954192dff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2025-62707", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4f25a137-60b1-5cb6-aac0-9cc4cf742add", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2025-62708", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7436b901-4d0d-5ef6-96cd-c30e56448348", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2025-66019", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ea26eb92-3a7f-5115-84fe-19072aa756c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-102993", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e9775870-65c8-555b-9e60-3f09190b7dd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102993 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-102994", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:fa13db40-6c6c-596f-9214-66977e6458f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102994 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-102995", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bf23954d-f4ff-5e5f-b193-7f3705bdc94e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102995 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-102996", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4a825c0c-ddb0-50c4-a254-4202afc63f47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102996 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-102997", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:860a49f0-e9a5-507c-9616-b6f0dffb9dcf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102997 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-102998", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:07338bf9-9c15-5359-be46-8b0a9b8e345d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102998 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-102999", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ff4ca828-a7a4-51aa-95a0-95edfe6de51d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-102999 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-103000", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:65d1e93f-a032-5648-a781-9acc06adf59b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-103000 does not affect version 5.9.0.post22+tuxcare of pypdf. Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09).", "justification": "code_not_present" } }, { "id": "CVE-2026-113786", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:df2d91fc-2010-5710-a7db-cc15d2832f58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113786 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-113789", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e4014130-5cb4-5644-bc8f-7fefc2d24e91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113789 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-113790", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0cb19d7b-6a3a-598d-b7b5-a876a1ec0859", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113790 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-113791", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:c1a2d1c4-5961-53eb-ba7f-6c68b17365ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113791 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-113792", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:f0b5afec-c3a0-54a4-a481-58b11612ec1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113792 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-113793", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:95aa9c26-2882-5c33-a94c-28f770cf128e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113793 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-113794", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:93aa1947-9e40-5e4e-9a49-e280b260d912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113794 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-113795", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8af3b09b-b21f-56f2-b019-d46e81aee181", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-113795 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-115572", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:15c4160a-4c93-531d-897e-b4d22d25cbe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-115572 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-115580", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b054acf2-acf1-5938-93c8-dfed51d1d583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-115580 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-115585", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:93a5e650-4cc2-58b5-adc0-5d0045de4336", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-115585 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-119203", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5981c414-665e-5be6-b2eb-37d37e64600d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-119203 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-119204", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8c628543-8811-5e19-8ce2-7e5ce7bead23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-119204 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-119205", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:394b574c-b871-5130-8598-c7a7f172bc15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-119205 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-119206", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e1f7364b-9f10-5889-85ef-b6d3accbd43b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-119206 affects version 5.9.0.post22+tuxcare of pypdf, and is fixed in 5.9.0.post23+tuxcare." } }, { "id": "CVE-2026-119207", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b9acba03-3e58-5095-af81-c972ed9c8f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-119207 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-119208", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bc800f03-6782-530e-aa29-8331020d0c66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-119208 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-119209", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:992f7c71-5188-55af-84ba-a90976180b49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-119209 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-22690", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e0b5a883-8f04-58a3-8428-a557fbed9d33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-22691", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:e28f4af0-8cb6-5244-8446-c5356782f3f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-24688", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d63d6a95-e31c-515e-a46c-99a32adcd42c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-27024", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b9eb277c-3db1-508e-9705-50d0e75188c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-27025", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:65583166-ae11-5a64-9e50-b1083de32d38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-27026", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bd7afa32-c7d0-5b4a-88b9-5267f9dbf0b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-27628", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b661d84b-9d14-5b62-94a5-7e0aabe0cfaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-27888", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:de8fb739-ba0c-5651-badf-4cc7295fd08b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-28351", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bca2d1cc-76e3-54b3-9bf5-afee8826a465", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-28804", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d7236838-1dfa-5a2f-90a8-e36cc54911d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28804 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-31826", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:bf1ff452-3e78-53f6-b329-0f4feaa8726f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-33123", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:707032e8-3694-546f-87d5-1e246d1cdb99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33123 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-33699", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4cab7c6e-284f-50fa-a692-f91b2ac47838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33699 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-40260", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:eb959857-90dc-5d9d-91ac-622a49b54c09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40260 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-41168", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d2b4d881-436a-5411-8c81-e0c181242759", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-41312", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:49869f17-0a92-573e-975d-dcbb9ba58a46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-41313", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:045079c6-cbf6-56ba-93e8-d8835ed40d89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-41314", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5cc35cd8-70d5-594e-907c-db848125560c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-48155", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ef5954f4-9ad4-5d9f-b7b3-5490a4b69577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-48156", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3eaa18af-9b13-5633-a454-68719d40269b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-48735", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:9682c0c8-49de-59e3-b479-c05bc82f8f0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-49460", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3198fe82-e458-5543-a687-451eeae283aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-49461", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:59bfb647-7951-5f58-bf8d-062742b10406", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-54530", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:066309e8-da68-5b78-ac96-f10291394e5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-54531", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:66e14ba9-59bf-54f5-b490-adaa028e9ea5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-54651", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5f754906-03a5-5ffb-ab5c-90d364fdb7ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-57204", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3446d959-2fb8-5841-87ce-5ad0dcf52367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-59935", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:efe1653a-790b-5618-a1db-e9adc7f6398a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-59936", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:b5cdf6a5-6184-53f9-8770-26e21957c8ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-59937", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:7c1f45e9-ef2c-5908-a4bc-eef537aa1d03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-59938", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d40dd3c2-0ec8-5df6-aec3-b1384b1cb401", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-71852", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:fe25fe30-9340-594e-abd6-3cedb804dfdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-71870", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:d20f8a7b-7709-5416-b0a1-2ceb8acfe745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-82398", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:cd715701-1b7f-505c-9a28-0d1c71cbcfaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-82398 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-84309", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:0dcbb2c5-dc3c-5aa9-9938-091c4b9a0d14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84309 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-84310", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:34d13cb6-72c0-59cf-a062-6fc4e21fbf6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84310 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "CVE-2026-84311", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:336e2187-eea7-5f04-85fc-8fafeadea6af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84311 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "GHSA-4pxv-j86v-mhcw", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:ed6bb75b-07e7-5973-aa34-2e0ed9f37262", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-4pxv-j86v-mhcw is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "GHSA-7gw9-cf7v-778f", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:80c3096d-5531-5176-a0bb-a3bd2ecfef06", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-7gw9-cf7v-778f is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "GHSA-9m86-7pmv-2852", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:5f28eada-d474-5232-bf08-fbc1fa6ba6a7", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-9m86-7pmv-2852 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "GHSA-jj6c-8h6c-hppx", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:3889757b-9119-5a07-b11b-1c0e9d08acac", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jj6c-8h6c-hppx is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "GHSA-jm82-fx9c-mx94", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:4d0ca1bf-0491-56f3-b505-add7e38da846", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post22+tuxcare of pypdf." } }, { "id": "GHSA-x284-j5p8-9c5p", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ], "bom-ref": "urn:uuid:8d13b9be-3f72-5e58-a885-7ad69629ec22", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-x284-j5p8-9c5p is fixed in version 5.9.0.post22+tuxcare of pypdf." } } ], "dependencies": [ { "ref": "pkg:pypi/pypdf@5.9.0.post22+tuxcare" } ] }