{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ac102376-8ae9-5b1e-a229-c653869e35de",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "pypdf",
      "purl": "pkg:pypi/pypdf@5.9.0.post19+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare",
      "version": "5.9.0.post19+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "pypdf",
            "purl": "pkg:pypi/pypdf@5.9.0",
            "type": "library",
            "version": "5.9.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-55197",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:612b036f-849b-5804-adb8-3350b4ebf7f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62707",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:41da84be-c18e-5972-8e5a-40664594b54a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62708",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:43ea12d0-3a02-5f75-879a-c82d010b5463",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-66019",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1004a124-c4a0-54f5-99d0-17a220e429d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102993",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d9dc9e36-11c3-5e8e-82db-044a3fdc34d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102993 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102994",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c35b4da9-1f7e-5a94-8e9c-858fbc3cb2ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102994 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102995",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:43e75c58-8639-5aeb-b65f-3436da6d1bec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102995 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102996",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2debbfc4-ce77-55c3-8a7b-93ec8b0087f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102996 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102997",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:65609aae-08d2-5696-9d51-68bda45b3d1d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102997 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102998",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:97ae02ea-0be0-5475-b6b8-57d0f24b4c31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102998 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102999",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2ac96e1d-17fa-5544-92c2-2b3601a5cbb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102999 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-103000",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2d814962-9bbc-5077-9a81-9cd33d114ae8",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-103000 does not affect version 5.9.0.post19+tuxcare of pypdf. Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-113786",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b8e1d99c-c766-5d85-92da-ac45c46f0d7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113786 affects version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113789",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bd2a8816-db5b-58d8-a920-1b739563c5aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113789 affects version 5.9.0.post19+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
      }
    },
    {
      "id": "CVE-2026-113790",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:06c36667-e7aa-5b69-af76-674b7a5d7897",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113790 affects version 5.9.0.post19+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
      }
    },
    {
      "id": "CVE-2026-113791",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e8c3a725-716c-5b68-85c6-910d2d2d6f16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113791 affects version 5.9.0.post19+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
      }
    },
    {
      "id": "CVE-2026-113792",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1800f3d4-4600-50a2-b53a-101006f476ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113792 affects version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113793",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3b7254d6-f2d4-5c1f-821c-fd86ed67006c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113793 affects version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113794",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2ec68de1-8ab9-516d-8cbf-9450f6368830",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113794 affects version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113795",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f4becdd6-821a-5f84-b9a1-45b4faa99b27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113795 affects version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115572",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:01dae3eb-4859-57d9-8ec0-d07505c64197",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-115572 affects version 5.9.0.post19+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
      }
    },
    {
      "id": "CVE-2026-115580",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b73b437a-edb5-5309-be7b-e19c7b7f3727",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-115580 affects version 5.9.0.post19+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
      }
    },
    {
      "id": "CVE-2026-115585",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:691a9b68-041f-517f-a18f-3f6af7ed84d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-115585 affects version 5.9.0.post19+tuxcare of pypdf, and is fixed in 5.9.0.post20+tuxcare."
      }
    },
    {
      "id": "CVE-2026-22690",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f0c355c9-6be2-5f6f-9485-c4e1aabf1998",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-22691",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d26841f8-aa25-55bd-9a6c-d4c54a4fe966",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-24688",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:05fbf112-5a7b-52d3-84a6-e2cb724cdc9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27024",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:14f8929f-c275-56dd-a414-08044f7983fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27025",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:089e44a3-6c20-5654-a609-f01995c18b4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27026",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0965e1e3-5993-5b3d-8cd2-9072d6b5b06d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27628",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0793f417-7841-5294-97ed-7d2f114d32f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27888",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d85b426d-8493-5e93-8f22-d60a97312e21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28351",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dd7c435a-582e-513c-ad26-1f1046e2b0bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28804",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:008fafaa-5d2f-55bb-a9d0-5541f174ab9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28804 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-31826",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2d4eb7b8-0dfb-53c1-aec3-2701103cf70c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33123",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0fb59c87-5701-5911-b359-da9e0a363373",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33123 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33699",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:cbc6f4d3-4a41-50c9-9287-a8c609532b84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33699 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-40260",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f57b9bd3-653a-5897-82b2-58f255142408",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40260 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41168",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:345be85c-62ce-528b-8fb1-179f4b535791",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41312",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:28843da5-3d32-5a0c-8232-8d040fa0ff6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41313",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5bfe1fae-d2b8-5ada-b915-b3342cb4ce99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41314",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3acd4e5a-ea63-585d-9de7-c584f29ccb54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48155",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f8080f72-869f-5ce3-9eaf-bbe41a36d5da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48156",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c344ca42-4598-5934-9f11-c7fb84385ddf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48735",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c0b85bb6-9f09-5e4b-a039-64a33bacaf10",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49460",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7a7997f7-254b-5e9c-b7d2-18a1aea7e6f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49461",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c17b0f20-a290-5a5c-8657-49a3942cd7f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54530",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d4986ea7-f2c6-5f78-87a3-35d9ba33a417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54531",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7831d044-6b1e-5309-9276-f9e7c110baea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54651",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c9a9351f-3d43-5efd-9939-c92a8be60c4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-57204",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:501306b9-91d4-530b-8247-13f47cce1898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59935",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:19d6d4d5-cf6a-5dbf-97e9-02d19704e04a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59936",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7a138c7a-0eaa-5a3a-85c3-082026df476e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59937",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:71f120a1-89f7-5d0d-a3f5-69818d04e9a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59938",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6649bb45-7bee-541e-8882-e62370af4267",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:92f3ac58-0d4a-5009-8c1d-d672b0930169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71870",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:aa1c2061-dd27-5c1b-ae91-35f324395615",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-82398",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9ba27f2b-c8db-541f-9569-87c0a7234e9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82398 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84309",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a7f76dbb-077d-5236-a727-cfb45434433b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84309 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84310",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:170b1e37-a477-59ff-80cf-cb946f06637a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84310 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84311",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:af771c62-efb8-5385-b2f2-786ffb3a36d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84311 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-4pxv-j86v-mhcw",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:06b95b3c-43ad-53a4-8c2f-c3846520711e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4pxv-j86v-mhcw is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-7gw9-cf7v-778f",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b020b06a-eb8d-5e4a-b0d2-8650e3e14c2c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-7gw9-cf7v-778f is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-9m86-7pmv-2852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f96c64b8-ccdf-5ff7-9de7-f444419ed96b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-9m86-7pmv-2852 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jj6c-8h6c-hppx",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:97c7a61e-6369-5a95-b74b-3fcf08a73f95",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jj6c-8h6c-hppx is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jm82-fx9c-mx94",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e6ec3087-a83e-59e3-983d-d4fcf3a7f6cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-x284-j5p8-9c5p",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:288275cd-dcf1-5994-a85a-e1820aaba03b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-x284-j5p8-9c5p is fixed in version 5.9.0.post19+tuxcare of pypdf."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/pypdf@5.9.0.post19+tuxcare"
    }
  ]
}