{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b5fc461d-8fa6-5d2b-87ea-7e90c4e14321",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "pypdf",
      "purl": "pkg:pypi/pypdf@5.9.0.post23+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare",
      "version": "5.9.0.post23+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "pypdf",
            "purl": "pkg:pypi/pypdf@5.9.0",
            "type": "library",
            "version": "5.9.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-55197",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7ecc0f53-1d46-5a58-8f81-18a4ceed6580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62707",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:eb3bb1aa-bb7d-53e0-aeb8-25d784139dfe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62708",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0628f56e-fd71-5764-a698-8834c9c75008",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-66019",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b7a0c331-2430-5e2a-99e3-e3a51bbde819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102993",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d7b97498-cb0f-5875-8c1a-95b9d9fa2b39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102993 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102994",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9af212a6-bb27-57f9-adbb-65dc7da7b023",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102994 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102995",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:10908f9d-e62d-59be-a45b-4c1e3811d4d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102995 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102996",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:11ed4d25-12ba-5f3a-bc29-10a8a384bda2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102996 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102997",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d33ba496-01f3-5786-be3f-801d827d818f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102997 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102998",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:76d96ecf-c843-503c-9beb-48877f7c3bb4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102998 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102999",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4ca18971-f190-5b84-9254-debbb074e58b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102999 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-103000",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7f6bd3a5-b202-5005-88e4-ebe796258b92",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-103000 does not affect version 5.9.0.post23+tuxcare of pypdf. Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-113786",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e14b8762-5d49-5b55-9db1-49e10428e299",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113786 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113789",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6e466697-c2ed-517e-b19e-7501e92e8c46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113789 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113790",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:097174a6-96a0-5b60-8a0a-f96999718037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113790 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113791",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f4569162-f94f-5dba-8810-c72dff92b6ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113791 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113792",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2562ade2-8ae6-51b7-bfa8-bf3dacce2d30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113792 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113793",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:655fbe2a-64c6-508b-913a-16993f94b139",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113793 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113794",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c508e9b3-5757-55b7-8383-f39479b5cba7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113794 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113795",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c1fb856f-b5ad-5742-90bf-11d1cc8117dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113795 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115572",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bd88354d-0a14-55ec-8aaa-f74b9acaf655",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115572 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115580",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:91fe61a5-53a6-596c-8145-c9e3d1ba9e6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115580 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115585",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4de58433-efea-5eb8-8288-a2813c5bfb99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115585 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-119203",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ae0b27ef-b93c-53d3-bafa-eb8ca47a6b13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-119203 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-119204",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:95c3520e-ddf3-520a-b6d3-0955961b9ede",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-119204 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-119205",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dd8dde3e-e78e-5870-b389-2ee6e4df827c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-119205 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-119206",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ea5e2354-0e1f-519e-ae21-1132a5f0d8c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-119206 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-119207",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bed41d83-7964-59a1-9f78-7469472c2ec7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-119207 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-119208",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e281ef87-85b3-5b5a-92a7-c975b8f463ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-119208 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-119209",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bed4c5df-519d-514a-a740-3160b792792d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-119209 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-22690",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:80e16b55-dfd7-552d-bb8c-f50bfd73f9c0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-22691",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:03eedc47-322c-5e1f-bdf7-5ca96e360db6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-24688",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f7cccc88-b6d1-5a92-91e2-3d2c9d6b5bd8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27024",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5da2c103-1ba3-5019-b45f-6946c398e876",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27025",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f799e96c-0dd5-5b00-834b-c64b84e4ba40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27026",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a51932ea-fdff-57f0-a7f3-67cb77382cdc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27628",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:00b7a6dc-0cf5-5743-8caf-4a797563a49a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27888",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5d993ed7-c5d2-5774-9cdd-962f3c1092d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28351",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:71fc8ae7-99c6-5399-833d-3b8d21d3fa4e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28804",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2fc32841-da55-5b6e-b70e-2dd7d7ceb6e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28804 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-31826",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:15147729-0d58-5c30-ae3a-912f50ca877c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33123",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:18d7304b-d361-506c-92d5-4f64fd4877e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33123 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33699",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:201e1227-601f-5171-95a0-c1e44fcb912e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33699 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-40260",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:aa1af2e3-3e89-5bf4-b8ca-1df8b8811677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40260 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41168",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7f298180-364a-5788-9989-4b07b4ec8f16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41312",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:eb9d0502-eaf8-5776-8d67-99c20a96e970",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41313",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:69f3eb61-4c79-58b1-bb6e-03f67133837a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41314",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:af019b6d-2e8f-5213-92d4-d81cd2f88725",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48155",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c5488565-5eb3-51ee-89c2-3702c4f90421",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48156",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f9be805f-1f5c-5b8b-b36c-c374a275aabb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48735",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d4d68601-21f9-5498-8894-0baeaa411973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49460",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dac3416a-4206-54f6-8944-dc7e0aadee79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49461",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:416b63a1-c174-543b-b90c-99d6c60f0be7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54530",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ac67a898-83df-5e4c-98a4-9bc712aa545b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54531",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dda69345-c32e-5134-8ca4-8dd842a7f35d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54651",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2ab88fc8-62c7-5e65-bcef-d372efdb1ace",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-57204",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:baa886c6-3448-56aa-8094-a5db38640239",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59935",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a6312ba6-1eaf-5226-ad27-f44f0def3f79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59936",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:04350deb-1e51-5fb0-b2c5-9a36b0ec152f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59937",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:dfd056e6-976b-5488-9128-a06cbb3db1cb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59938",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:29b1979c-f424-5c8c-bbfe-b0b1a60dcefe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:cb0c7483-3ef0-5491-8b8b-cc2cab843084",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71870",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2117e779-29d0-58a7-9001-bdeab95b8ad6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-82398",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f20c9508-fec4-5612-be31-44a04b6105dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82398 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84309",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e38946c6-2c8b-5dc4-9863-7dfe8a63b5bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84309 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84310",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5c43b678-d69a-5e57-99b1-a488bbe19c16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84310 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84311",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fb725109-7335-51c2-81c3-6e35d5194885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84311 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-4pxv-j86v-mhcw",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b105681f-daba-52ca-80aa-c7211bbce56d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4pxv-j86v-mhcw is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-7gw9-cf7v-778f",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1591d661-5a51-5ac9-8c90-7bd4dfd88c78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-7gw9-cf7v-778f is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-9m86-7pmv-2852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:28352759-b21e-5368-852e-d70c4ddb6d86",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-9m86-7pmv-2852 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jj6c-8h6c-hppx",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3a74130f-e895-5e7a-ae70-46915250fba8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jj6c-8h6c-hppx is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jm82-fx9c-mx94",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a02f1889-72eb-5464-8691-a73887db50a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-x284-j5p8-9c5p",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:019ca606-113a-5809-82bd-971041944790",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-x284-j5p8-9c5p is fixed in version 5.9.0.post23+tuxcare of pypdf."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/pypdf@5.9.0.post23+tuxcare"
    }
  ]
}