{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b84526b4-0746-52e1-8a82-46c6b0820755",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "pypdf",
      "purl": "pkg:pypi/pypdf@5.9.0.post21+tuxcare",
      "type": "library",
      "bom-ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare",
      "version": "5.9.0.post21+tuxcare",
      "pedigree": {
        "ancestors": [
          {
            "name": "pypdf",
            "purl": "pkg:pypi/pypdf@5.9.0",
            "type": "library",
            "version": "5.9.0"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-55197",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:bc8391b9-86fb-5d7a-a5c1-6173816e3aba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55197 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62707",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:396f37f4-6442-5c17-8092-303df8d95884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62707 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-62708",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:0d0057ae-b82a-5f21-823a-d46e37377d67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-62708 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2025-66019",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a956558c-e254-53e1-9ee1-9daafeffb97e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66019 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102993",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ebeb2269-0131-56d9-83c9-ef71b8175fe6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102993 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102994",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:821561ac-7c1d-5ef0-bfc0-c6f11fb970d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102994 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102995",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:60afcc41-3e06-5a3a-95da-aa78dd60c694",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102995 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102996",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e1c18b89-8bdd-5482-a8b3-9e9cdb41a0e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102996 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102997",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:22e21b7f-0e34-58be-97be-ed552b2e5faf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102997 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102998",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ff9c00c8-8346-53bc-86d7-aaedeb7a93b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102998 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-102999",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3a2cc6a2-ee41-50d5-90f9-cdd042de9811",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-102999 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-103000",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d0c56cbc-7b43-5da1-8690-4dd3bf9609d5",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-103000 does not affect version 5.9.0.post21+tuxcare of pypdf. Unbounded alphabetical page labels come from upstream c38feda0 (#4065, released in 6.18.1), which made number2uppercase_letter repeat the letter (output linear in /St). pypdf 5.9.0 still uses the base-26 encoding (label length ~log26(n)), so the memory blow-up fixed by 0d8b5a88 cannot happen. Analysis in python-els/pypdf!52 (closed 2026-10-09).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-113786",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c8799ac2-7a1d-5faf-a1b9-9120e4ec3c9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113786 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113789",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:31ee2511-2eb0-5202-9822-68bf0b3de694",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113789 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113790",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f2908d8e-2037-5d95-b90b-19f3734f9b46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113790 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113791",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:87453d5f-c6e5-58cf-8b1b-1258733cf41d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113791 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113792",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:66f9481a-8a65-57e6-9810-2bc9b03d326d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113792 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113793",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:86ed3b4b-4408-57ab-9d26-6f01be991ece",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113793 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113794",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:66138418-261a-574a-ab7e-8daab213dfdc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113794 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-113795",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d3bb0674-1e5a-547c-991b-59d1f9863252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-113795 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115572",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7ece12b9-51c9-5031-ac8c-403422627075",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115572 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115580",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3d8db39a-5c0a-5bd9-89a5-402a705b7b21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115580 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-115585",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:ace1c794-11b7-54eb-bc44-a17dc27e8b38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-115585 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-22690",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:05e9feaf-beb7-56a7-8636-0e9e47f3461c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22690 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-22691",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2b53ed50-632b-5287-9143-5e6522301f9b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22691 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-24688",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:9c7890bb-8dee-55e4-aa5f-7e008c8e301d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24688 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27024",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d845d286-362c-51ee-be13-0b2c0650805a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27024 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27025",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f7fca943-f476-5d7a-a98b-ad81ca2c3a7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27025 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27026",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:50800734-f9be-59e5-9e7a-9d63bd27e3a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27026 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27628",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:83b19e67-1fc2-5896-b3dd-1832928e23b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27628 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-27888",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:f98069db-125a-52f4-883e-22429ec1da9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-27888 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28351",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:1bd93a46-a110-5cc9-8eee-487a8c64e8d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28351 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-28804",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fb7d709d-7537-5f32-a061-e9777a1db6ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-28804 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-31826",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:92a5ebc0-8741-5c2b-9f99-bb981df2ff28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-31826 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33123",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e4ad0cfc-0447-5221-b427-4192dab0b935",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33123 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-33699",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5fff080e-55cc-5bd1-9dc6-621787770a48",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33699 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-40260",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d609b364-e9a9-57fb-b892-2b055120926f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40260 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41168",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d491d50d-145d-52c1-8be0-1ba5a841cca3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41168 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41312",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b5e9377d-47d3-5781-b3d7-ce48d1316b62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41312 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41313",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c2785cea-c455-5325-ab83-beaf85ae237c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41313 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-41314",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b14acdcc-c428-54f8-bbca-5adee16ca96a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41314 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48155",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5cb0daef-4ce1-544b-8097-739a96757275",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48155 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48156",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a460bd6b-00d8-5db1-afa6-8864919b4d84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48156 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-48735",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:6b1eb413-6fee-524f-906b-08ae1ed0f583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48735 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49460",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7320bf9c-644f-508a-9bd2-9effbe797b0e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49460 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-49461",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:e2b65d31-1c3d-5fdc-9572-2cdbaa4cd03e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49461 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54530",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:7f88c196-9b6c-5d4f-aaef-744473259033",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54530 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54531",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:c6da2e3e-cd0f-5082-ac67-2bd416fb0693",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54531 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-54651",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a6353f2e-5b1b-5b10-a7bf-d0299b52c441",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54651 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-57204",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d93ed571-b9b5-5930-83a0-a68ea97684e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-57204 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59935",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:87d6fba3-bbd0-51e5-b319-844444f0b300",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59935 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59936",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:8e5c5bb6-b512-525a-8373-3695713e156a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59936 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59937",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:861b4136-df5b-5349-8baa-37e14ab5af6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59937 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-59938",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:84b13116-cc38-5bae-b858-ba8f791d08f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59938 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:2a01b97e-6ee6-541c-bf42-9210a10fa77e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71852 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-71870",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a3e6c77f-8b97-5d73-846f-f4cb94572f61",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-71870 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-82398",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:338b7691-ef09-5359-a492-4ad817caa4e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-82398 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84309",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:d527543e-922c-5982-ba7e-e9829fe8b26d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84309 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84310",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:fb2ed6d4-d838-5825-bc8b-cad5e3c502c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84310 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "CVE-2026-84311",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:3e98a2aa-55e9-556b-8193-55502c4842e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-84311 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-4pxv-j86v-mhcw",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:a8b5dc57-beb7-53cd-bd12-e868a61ba6d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-4pxv-j86v-mhcw is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-7gw9-cf7v-778f",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:4188efc2-be16-556b-af71-6bc447952eb9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-7gw9-cf7v-778f is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-9m86-7pmv-2852",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:39600d30-7937-5b91-8b3f-a7322ed9cec6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-9m86-7pmv-2852 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jj6c-8h6c-hppx",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:40462b81-f994-55f5-bb0d-b010bbb26864",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jj6c-8h6c-hppx is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-jm82-fx9c-mx94",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:5dc0b622-1f55-5440-a763-8b61ef8b3f03",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-jm82-fx9c-mx94 is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    },
    {
      "id": "GHSA-x284-j5p8-9c5p",
      "affects": [
        {
          "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
        }
      ],
      "bom-ref": "urn:uuid:b3a8a1bc-b9bf-54e6-beef-d764abd3afea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-x284-j5p8-9c5p is fixed in version 5.9.0.post21+tuxcare of pypdf."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/pypdf@5.9.0.post21+tuxcare"
    }
  ]
}