{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0994d7a2-5ccb-5770-85f5-2aec69db8b42", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare", "type": "library", "name": "pypdf", "version": "5.9.0.post16+tuxcare", "purl": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:72eb6bdd-c007-5590-a382-a3f08a114c46", "id": "CVE-2025-55197", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f38c27ef-27c0-51c6-ae96-f224201370af", "id": "CVE-2025-62707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:df13c1ec-04e3-5c68-907a-3660840f9be6", "id": "CVE-2025-62708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:c4807fc6-4b34-589e-9380-4d537628e104", "id": "CVE-2025-66019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:24971542-c6ae-5541-94e3-c7730ca0a43d", "id": "CVE-2026-22690", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f3e71064-cd26-593e-9cf2-697c48fe5930", "id": "CVE-2026-22691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:23e6a231-0fca-5697-9fa0-8c17bb46f0a2", "id": "CVE-2026-24688", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2ac6c306-7ca7-5c85-a251-6bd82f928c72", "id": "CVE-2026-27024", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:c7840643-4e1b-57a9-904f-42b0a18d6356", "id": "CVE-2026-27025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:e1d20ae3-6472-5069-b492-0e60708d9138", "id": "CVE-2026-27026", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:76f19798-bea6-5f41-8ed8-d925ab17adae", "id": "CVE-2026-27628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2273a265-136f-5252-8238-0492f0146dbd", "id": "CVE-2026-27888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:0d95c52b-6414-5f84-818f-db015248b1ed", "id": "CVE-2026-28351", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:ba6748cb-ad5d-5a2e-8723-38b175331d6e", "id": "CVE-2026-28804", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-28804 affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2f08b307-92ab-52c3-8bc5-fe58df80a01d", "id": "CVE-2026-31826", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f82feaff-085a-5b48-af6d-3120a7b13a00", "id": "CVE-2026-33123", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33123 affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:6c5e35e9-7987-5251-90d5-2fd5ebf145fe", "id": "CVE-2026-33699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33699 affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:efa1adde-0618-552d-ab31-edd40643517e", "id": "CVE-2026-40260", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40260 affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:8906a297-025f-5b96-a076-473f0256bb16", "id": "CVE-2026-41168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:5620404a-a839-5f87-9d6f-3238fc4f94f9", "id": "CVE-2026-41312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:1731cea1-4d40-50ac-8487-b8f284b9a53b", "id": "CVE-2026-41313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:0c785015-b75d-58d5-9f80-de4f1571054d", "id": "CVE-2026-41314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:8f7c0330-f793-5922-ba67-c84ab2bebf27", "id": "CVE-2026-48155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:fe33c879-f713-5e9a-92d3-add9ed286417", "id": "CVE-2026-48156", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:292c1819-f3ed-580e-a5ef-9127f85e58e8", "id": "CVE-2026-48735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:057eb980-663e-5274-a413-842bcdc71247", "id": "CVE-2026-49460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:4d3e375d-447c-54b6-97c6-320a6b42af6c", "id": "CVE-2026-49461", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:64ef689f-1464-5ca9-8e47-a3cb3da5aac1", "id": "CVE-2026-54530", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:edfed94f-ab60-5bdb-8821-862fe6fe1976", "id": "CVE-2026-54531", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:9a1d7fc1-9733-59be-b4a4-18ce54a2623d", "id": "CVE-2026-54651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2ecf928d-4868-5b67-a469-f2ced45a9367", "id": "CVE-2026-57204", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:8d113cac-15a5-51df-93cf-b7a0b9f07b80", "id": "CVE-2026-59935", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:fb4342b5-3307-531c-a95f-d5e02b9d5382", "id": "CVE-2026-59936", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:de576830-bd58-5cb0-bb5a-ff9d5ea50875", "id": "CVE-2026-59937", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:2efb347e-62ef-5df2-b062-30fb43555a82", "id": "CVE-2026-59938", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:ccacfb88-72c5-5764-8c0d-e1c4713f83c5", "id": "CVE-2026-71852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:d128e6aa-ad66-5cfd-82a4-81580b60531a", "id": "CVE-2026-71870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f37e4afd-ae34-5673-844d-4f769d04fd02", "id": "GHSA-4pxv-j86v-mhcw", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4pxv-j86v-mhcw affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:43b00a0f-e060-5836-a2fe-a4883fc8777c", "id": "GHSA-7gw9-cf7v-778f", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7gw9-cf7v-778f affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:f52b2283-9833-50cf-9c0d-6913ed58bfae", "id": "GHSA-9m86-7pmv-2852", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-9m86-7pmv-2852 affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:b999fa0f-52ab-5375-ad31-9a09194874c4", "id": "GHSA-jj6c-8h6c-hppx", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jj6c-8h6c-hppx affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:767d6bc8-49f4-5590-bac5-72d5b329430e", "id": "GHSA-jm82-fx9c-mx94", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }, { "bom-ref": "urn:uuid:c5ffc692-208b-54f7-8ceb-4703452f5624", "id": "GHSA-x284-j5p8-9c5p", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-x284-j5p8-9c5p affects version 5.9.0.post16+tuxcare of pypdf." }, "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] } ], "dependencies": [ { "ref": "pkg:pypi/pypdf@5.9.0.post16+tuxcare" } ] }