{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7f57c423-a11b-5d03-84d7-515379375b51",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "pypdf",
      "purl": "pkg:pypi/pypdf@5.9.0.post20+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare",
      "version": "5.9.0.post20+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "pypdf",
            "purl": "pkg:pypi/pypdf@5.9.0",
            "type": "library",
            "version": "5.9.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-55197",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9e87a362-dd63-5143-80fb-b4a3bcc38155",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62707",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5ed7d5d0-2af7-585e-b4ba-794bc24a255c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62708",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ee3c528e-c066-5aea-b291-433bfa7df70d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-66019",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f66f72fd-ac81-50d5-9c20-c0270bb2e2cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102993",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c89c15f7-518b-5b33-a10b-d9519cf72835",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102993 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102994",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:cc4e89f6-d69f-5c9c-8025-91450cd549e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102994 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102995",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a6b88b0f-8178-5cc8-aaa3-fc527cf8afae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102995 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102996",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4936cc30-e4e6-53a9-a875-992e02d55290",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102996 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102997",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:92ea368a-2eb5-5dc3-95a3-7bc88f2c36f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102997 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102998",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7c5154e2-b7a5-5f55-b303-dbcd1db450fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102998 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102999",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9837f320-0252-567f-8e55-3186f46f5019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102999 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-103000",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e40a6a1d-56ec-51c7-b629-50197e3bf0ba",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-103000 does not affect version 5.9.0.post20+tuxcare of pypdf. Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-113786",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bef7b58d-4486-57af-9ef8-46a21aec4821",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113786 affects version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113789",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:544ac6ab-c027-5e71-9fec-00371b0f69b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113789 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113790",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:018b7450-3fd9-5417-8111-f6c2c8553948",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113790 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113791",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9333a798-d0d7-5f20-8ffa-8d3f9c3d48a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113791 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113792",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:85ce0fec-f278-5863-8ec5-847c4ff70042",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113792 affects version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113793",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2113ed17-225b-538c-bd49-0f6a88c2746b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113793 affects version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113794",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ad1e6e34-6962-5eb5-9e10-fac591650196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113794 affects version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113795",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8fd3e28b-89de-526b-b209-4e2ae464c811",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-113795 affects version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115572",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b29f402f-9b47-5dcc-9ca5-a47287180149",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115572 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115580",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bdca93c3-fde9-5e70-b4b4-f37e0b995274",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115580 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115585",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0f1a1b9a-7718-5113-9bbc-6e55a89339ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115585 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-22690",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:aecc846e-a5c2-5565-818a-3535fabe80bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-22691",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b752899d-979c-582b-96f4-a7650f53e448",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-24688",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0386e1b3-eb7a-5742-b242-0e8d16441763",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27024",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b70b6a5e-4131-57e2-9f0f-53b4ff81fce2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27025",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2801c807-1a69-5653-b07c-83addc55cf5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27026",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:412a9652-7622-5bf7-8699-57ba4e7c41b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27628",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6c82cce5-760f-5572-ab11-2fdd0c5a2d51",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27888",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f13ac0f8-bf38-5a3a-b463-9b76277bc82a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28351",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f19e60f3-2e01-5ae8-99b6-4cfaebe43a76",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28804",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:576f1c78-b927-5510-bcc1-accb9583a4c0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28804 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-31826",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:44c4c449-bb12-5cf5-b527-56070036c91f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33123",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7403e5d3-47e2-5bba-a52e-8e6001fded32",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33123 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33699",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:09f301e7-70b8-5b95-bf86-0716565f1b71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33699 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-40260",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0464f652-4564-53e3-9c88-a85252d09550",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40260 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41168",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5d83d76f-4713-5eb6-8b5e-4a7126dcc6fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41312",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d7f44b56-8d50-5981-8ac0-35762d121142",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41313",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:37cd5be8-f3d9-510f-8cfc-bf26e22f991a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41314",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:77493969-7552-5fdb-831f-f2c3527ffaed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48155",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bb6b69fa-7485-543a-bfc9-a7d1caeb2ad6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48156",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:607d36df-2745-51f1-adbf-681b061a632b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48735",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4bf3fac3-1002-576a-a847-46a20ee2b233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49460",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:577cc34a-e377-574e-bc2d-4ea10dd226e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49461",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5e5f6757-dd56-5e43-b86a-45071267527b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54530",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1275626a-20f6-5a7f-9a15-216adaee3ed6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54531",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ef1cd52d-a54a-555c-8c83-1882a57a4169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54651",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:78522339-0f97-5deb-a3fc-effc83137594",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-57204",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:16e5441e-f1e1-546e-8c54-b0efacffbda4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59935",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:080a2256-7029-5f99-8e67-0362fd14a598",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59936",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:04bbbe2f-293d-5a43-b578-a655e2bc8225",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59937",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:06e69959-ac23-5fa1-abe0-e9958a7a956a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59938",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4a61ee2e-624a-5dfc-b32e-4e6d04820658",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ba32f799-7b12-5292-b2d7-981c8d3b43ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71870",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:26896966-5762-5f13-bf2e-ae0b90ca2b45",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-82398",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6c4ffee6-f306-5725-85f1-6fb12312d8b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82398 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84309",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9ed436b5-905f-5b96-ab4c-77cf2f7e12bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84309 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84310",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:540dcab4-24fb-5921-879f-5db522cd842f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84310 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84311",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1712daf5-fd95-5923-8b5b-a7006f2f2703",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84311 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-4pxv-j86v-mhcw",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f7df6152-5abb-595e-aba8-1a77b8123ca2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4pxv-j86v-mhcw is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-7gw9-cf7v-778f",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:502b8e25-1d30-55b3-a24c-9b3d2524a498",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-7gw9-cf7v-778f is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-9m86-7pmv-2852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c8c2ef5c-ce9f-54c2-a73a-3ff3dec37944",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-9m86-7pmv-2852 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jj6c-8h6c-hppx",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:aee82d30-ce3c-5513-8147-83b606413186",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jj6c-8h6c-hppx is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jm82-fx9c-mx94",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:592a32b5-9adc-5164-9cea-d96205e27674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-x284-j5p8-9c5p",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5296fa23-47ad-5a1a-aa3f-7c7447889516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-x284-j5p8-9c5p is fixed in version 5.9.0.post20+tuxcare of pypdf."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/pypdf@5.9.0.post20+tuxcare"
    }
  ]
}