{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0aa25a48-c684-556c-92d4-3f63dd2ebe5b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "pypdf", "purl": "pkg:pypi/pypdf@5.9.0.post17+tuxcare", "type": "library", "bom-ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare", "version": "5.9.0.post17+tuxcare", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-55197", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:e6466788-8a48-5453-937e-785540c252bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2025-62707", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:35346d90-3c1c-5cd1-a4bd-3ae1220f0710", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2025-62708", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:c9a6c3cb-b18f-5e9a-a336-83f82b73ebee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2025-66019", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:4024eb83-0040-5165-865f-a115d053ed90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-22690", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2f5deb5e-4db2-58f5-b12b-cfd06b4aa2ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-22691", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9a0ebad7-43fb-5d16-a617-07250740840e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-24688", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8294d35f-294d-5821-8a49-9709c42518c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-27024", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ea98e93f-814e-553c-910b-30aeb6ba124e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-27025", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:e27d3264-8d84-514c-b4a8-af88e568f893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-27026", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:4c8aa92c-020b-507f-910d-1d24d8ca014b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-27628", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:9b0c8c21-6584-59f0-8936-260ce1024098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-27888", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:4d7a60c9-8207-5306-a414-3d1d622df3ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-28351", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:15f5cbaf-9c8b-5f12-862f-6ad75e2b13c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-28804", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:98fcfdc9-297f-5f2b-a27d-07ea7d82344b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-28804 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-31826", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:001cf6fd-07df-5650-b56b-67700168fc72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-33123", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:56018407-d412-5f71-aa59-ad864e2f9fbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33123 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-33699", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:bfb3ef53-9c1d-5f1a-8db8-cb0694ee456e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33699 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-40260", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8e51ca94-61b1-55e5-a54f-f4c26492e760", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40260 affects version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-41168", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:cb41c02f-f282-58cc-be25-636ebfd2a5e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-41312", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:d5f756a4-724f-5eb8-a535-a668f9180156", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-41313", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:722d823a-440b-511f-ab69-18e9bd651e58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-41314", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:887355c0-d45f-53f7-955e-8ab6612d4a33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-48155", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b33be5f6-ffef-52ef-8e05-9dcd3b88ab63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-48156", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:e4d56ef2-e039-5381-a061-1ed580d36401", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-48735", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:2145ccc0-17e0-56c2-9c82-a4f1fdd87710", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-49460", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:deac826b-fe78-510a-89ed-a82d8dab3e87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-49461", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:79115350-54db-5a63-98af-0c15d26c7a56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-54530", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:1f018e7b-fa9b-5931-9df9-d57d27185efc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-54531", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:8704d9cb-38d6-5498-b06c-fcc4ad18b057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-54651", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:488cb900-3d92-5c18-9f7a-021b4ef7eb8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-57204", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:597d179e-9423-5a2d-b270-280384a6350b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-59935", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:62a8e380-e90c-5005-ae5a-3d5ef5fe64c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-59936", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:02b92b1f-f5df-59ca-a55f-4705103c8db4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-59937", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:566ae1bf-7f9b-5bd8-af21-081420e900c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-59938", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:695a2599-dd8c-5f6e-966e-800ffd906e7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-71852", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:68876d8b-2818-5bf9-9843-053f95a95ea9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-71870", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:ae43f82f-292a-5557-9ee2-019fe264eb80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-82398", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:abff72e7-cdf1-513d-ac4d-6d7dc0f2606e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-82398 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-84309", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:aa51e476-ef2d-5c11-8322-e9f2c5718600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84309 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-84310", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:75ea0a44-09d8-5019-b4db-f29fc08fde15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84310 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "CVE-2026-84311", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:5b441b59-e781-5567-b893-0641d2139c17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-84311 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "GHSA-4pxv-j86v-mhcw", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:554edc96-1704-5108-ab70-51f60474a658", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-4pxv-j86v-mhcw affects version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "GHSA-7gw9-cf7v-778f", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:f548e6f1-e23e-505a-ad7a-33f629e0aecb", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-7gw9-cf7v-778f affects version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "GHSA-9m86-7pmv-2852", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:b2c34305-321f-525b-b519-94f0f5284ecc", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-9m86-7pmv-2852 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "GHSA-jj6c-8h6c-hppx", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:62f5409c-0a49-53c5-b55a-6780ba63441c", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-jj6c-8h6c-hppx affects version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "GHSA-jm82-fx9c-mx94", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:44355f20-c086-5f83-9eb6-b9277519d5d9", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post17+tuxcare of pypdf." } }, { "id": "GHSA-x284-j5p8-9c5p", "affects": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ], "bom-ref": "urn:uuid:0fdd8754-9ced-5ce5-8922-6a493be046c3", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-x284-j5p8-9c5p is fixed in version 5.9.0.post17+tuxcare of pypdf." } } ], "dependencies": [ { "ref": "pkg:pypi/pypdf@5.9.0.post17+tuxcare" } ] }