{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:32530ed1-2815-5b05-a814-35ced63edca9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare", "type": "library", "name": "pypdf", "version": "5.9.0.post15+tuxcare", "purl": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c10f6a31-dbb0-5095-8c6d-7ccea8f66cc3", "id": "CVE-2025-55197", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:03a340dd-25e7-58fd-97b3-6f9635a6d8a4", "id": "CVE-2025-62707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:4ae7778d-4e9c-5e6c-8e83-f24266548a69", "id": "CVE-2025-62708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:ced44f95-d5e0-5319-83cc-b5d5edd51e3d", "id": "CVE-2025-66019", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66019 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:cde7778b-a62a-5e60-95cc-7bc11e1567a5", "id": "CVE-2026-22690", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22690 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:f2928537-a2bb-58d4-b6b4-c959118cd50a", "id": "CVE-2026-22691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22691 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:9738bf5d-2da7-51d8-b0e8-3f56f6ea9e13", "id": "CVE-2026-24688", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24688 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:e423d4a5-b18a-5b3c-b227-4382eb269c96", "id": "CVE-2026-27024", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27024 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:41348ddf-27ab-50f5-bbfa-5e13fe1dd942", "id": "CVE-2026-27025", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27025 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:7e5bf111-02e7-5598-8a5b-ead19564e53c", "id": "CVE-2026-27026", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27026 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:df307296-a751-5342-9163-1391fc1a2710", "id": "CVE-2026-27628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:b5a93724-39a0-58d8-9db1-b624956fc571", "id": "CVE-2026-27888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-27888 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:591dcbfa-3e10-5a74-933e-b91a2bb2082c", "id": "CVE-2026-28351", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28351 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:7f291f81-cbd2-562d-a358-714ed51189f9", "id": "CVE-2026-28804", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28804 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:04ce6500-9124-50fc-b63b-931054dd2865", "id": "CVE-2026-31826", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:3c2f4f54-54c7-5ae8-98d4-cc3a778354fa", "id": "CVE-2026-33123", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33123 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:c5d31891-a02e-59c4-9405-991afa1aca08", "id": "CVE-2026-33699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33699 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:cd1eba48-085d-5f2b-b31f-5b546aaaf488", "id": "CVE-2026-40260", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40260 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:12978346-7d2d-50be-9eef-2fd9bfc7be3a", "id": "CVE-2026-41168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:176855c9-ae8b-5224-a108-299314aef3b9", "id": "CVE-2026-41312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:b3d1e796-4254-5a9d-9ecc-8ad81977b49b", "id": "CVE-2026-41313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:edab3db6-b43c-5b44-9330-73da14ee156c", "id": "CVE-2026-41314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:f1f6960e-2d10-59e7-ab47-97bd119d314f", "id": "CVE-2026-48155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:27aaaac9-c164-5cf6-8d65-a07ba30de121", "id": "CVE-2026-48156", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:c01d24f1-7092-5b8a-a9a3-06738c5a6033", "id": "CVE-2026-48735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:3310bd56-357c-5293-a3f4-882c3ce7aabe", "id": "CVE-2026-49460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:34b461e0-e21d-520f-9600-33f5a4bb0e79", "id": "CVE-2026-49461", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:043a7b8a-690c-593f-9ed6-e2cfa8e0e066", "id": "CVE-2026-54530", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:0aeb66d4-69ee-51a1-b0c0-651f2059d882", "id": "CVE-2026-54531", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:909c4b17-8834-5273-bf29-42793fcd820f", "id": "CVE-2026-54651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:f8d1cde4-a732-5a02-8516-2b9ffaa4c6ea", "id": "CVE-2026-57204", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-57204 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:4abc53bf-7119-58e6-a7b9-74728751a43a", "id": "CVE-2026-59935", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:3a18c124-fef5-5daf-8df9-8ee4c9e57e84", "id": "CVE-2026-59936", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:13fe4639-8660-57ea-9358-b3f95cc55088", "id": "CVE-2026-59937", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:24d10241-4645-5cc0-a8af-2ef92a880637", "id": "CVE-2026-59938", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:06ad7c40-3968-57a9-b639-346c3590c39e", "id": "CVE-2026-71852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:2b498bda-e74b-5b1a-a4b0-9d8bd739d206", "id": "CVE-2026-71870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:60a95c42-92c2-52f1-ac5a-6feedc39efd2", "id": "GHSA-4pxv-j86v-mhcw", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4pxv-j86v-mhcw affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:592f2878-882a-512c-8f2d-7e852379e08c", "id": "GHSA-7gw9-cf7v-778f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7gw9-cf7v-778f affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:89baef3b-5092-5523-95bb-8da3cf01f24d", "id": "GHSA-9m86-7pmv-2852", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-9m86-7pmv-2852 affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:1a6149f4-0f02-5f23-8a8b-60f4eca49302", "id": "GHSA-jj6c-8h6c-hppx", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jj6c-8h6c-hppx affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:7532474b-2993-5d97-8d5d-668757682633", "id": "GHSA-jm82-fx9c-mx94", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }, { "bom-ref": "urn:uuid:7b1bedd0-6e68-5288-96f0-ca45a041634c", "id": "GHSA-x284-j5p8-9c5p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-x284-j5p8-9c5p affects version 5.9.0.post15+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/pypdf@5.9.0.post15+tuxcare" } ] }