diff --git a/advisories/BREW-imap-backup-CVE-2026-63435.json b/advisories/BREW-imap-backup-CVE-2026-63435.json new file mode 100644 index 0000000000..a848e6c335 --- /dev/null +++ b/advisories/BREW-imap-backup-CVE-2026-63435.json @@ -0,0 +1,85 @@ +{ + "schema_version": "1.7.3", + "id": "BREW-imap-backup-CVE-2026-63435", + "published": "2026-09-03T09:13:37Z", + "modified": "2026-09-03T09:13:37Z", + "upstream": [ + "GHSA-mvxr-6m87-mv2q", + "CVE-2026-63435" + ], + "affected": [ + { + "package": { + "ecosystem": "Homebrew", + "name": "imap-backup", + "purl": "pkg:brew/imap-backup" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "ecosystem_specific": { + "fix": null, + "range_state": "affected", + "upstream_fixed_in": "2.9.1", + "resource": "mail", + "resource_purl": "pkg:gem/mail@2.7.1" + } + } + ], + "database_specific": { + "source": "matched", + "strategy": "registry", + "confidence": "high", + "upstream_evidence": [ + { + "strategy": "registry", + "ecosystem": "RubyGems", + "name": "mail", + "subject_version": "2.7.1", + "key": "pkg:gem/mail@2.7.1", + "resource": "mail" + } + ] + }, + "summary": "Mail: Email address spoofing via malformed RFC 2047 encoded-words", + "details": "## Summary\n\nMail::Utilities.q_value_decode and Mail::Utilities.b_value_decode decoded only the first RFC 2047 encoded-word in a string and used an overly greedy pattern to match the charset token. A crafted, malformed encoded-word embedded in an address display name or local part could cause the decoded output to differ from what a human reviewer or downstream parser would expect, allowing an attacker to spoof the apparent sender/recipient address.\n\n## Details\n\nBoth decoders used a single String#match against a pattern such as /\\=\\?(.+)?\\?[Qq]\\?(.*)\\?\\=/m. Two problems:\n\n1. Single match, dropped remainder. Only the first =?charset?Q?...?= (or ?B?) word was decoded. Any additional encoded-words or surrounding text were not handled consistently, so the decoded result could silently omit or alter parts of the input.\n2. Greedy charset capture. (.+)? is greedy and matches across ? delimiters, so a malformed word could span more of the string than a strict RFC 2047 parse would, changing the boundary between \"encoded\" and \"literal\" text.\n\n## Impact\n\nApplications using mail to parse and display or authorize based on decoded header values (From, To, Reply-To, etc.) may present or act on an address different from the one a validator inspecting the raw header would see. Primary risk is spoofing / phishing and authorization-check bypass. No RCE.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/mikel/mail/security/advisories/GHSA-mvxr-6m87-mv2q" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63435" + }, + { + "type": "WEB", + "url": "https://github.com/mikel/mail/pull/1664" + }, + { + "type": "WEB", + "url": "https://github.com/mikel/mail/commit/f9d59c2e447af42e2c3dec5a56b1bb25c7292859" + }, + { + "type": "PACKAGE", + "url": "https://github.com/mikel/mail" + }, + { + "type": "WEB", + "url": "https://github.com/mikel/mail/releases/tag/2.9.1" + } + ] +} diff --git a/advisories/BREW-pnpm@9-CVE-2026-82392.json b/advisories/BREW-pnpm@9-CVE-2026-82392.json new file mode 100644 index 0000000000..7590b6cfc8 --- /dev/null +++ b/advisories/BREW-pnpm@9-CVE-2026-82392.json @@ -0,0 +1,94 @@ +{ + "schema_version": "1.7.3", + "id": "BREW-pnpm@9-CVE-2026-82392", + "published": "2026-09-03T09:52:47Z", + "modified": "2026-09-03T09:52:47Z", + "upstream": [ + "GHSA-c59q-g84q-2gj5", + "CVE-2026-82392" + ], + "affected": [ + { + "package": { + "ecosystem": "Homebrew", + "name": "pnpm@9", + "purl": "pkg:brew/pnpm%409" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "ecosystem_specific": { + "fix": null, + "range_state": "affected", + "upstream_fixed_in": "10.34.5" + } + } + ], + "database_specific": { + "source": "matched", + "strategy": "registry", + "confidence": "high", + "upstream_evidence": [ + { + "strategy": "registry", + "ecosystem": "npm", + "name": "pnpm", + "subject_version": "9.15.9", + "key": "pkg:npm/pnpm@9.15.9" + } + ] + }, + "summary": "pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph", + "details": "## Summary\n\nThe virtual store linker constructs package installation directories using `path.join(modules, pkgName)` where `pkgName` is extracted from lockfile `packages` keys via `dp.parse(depPath).name` without validation. A crafted `pnpm-lock.yaml` with traversal sequences in depPath keys (e.g., `../../../tmp/pwned@1.0.0`) causes package content to be written to arbitrary filesystem paths during `pnpm install`.\n\nThis is an incomplete fix of GHSA-fr4h-3cph-29xv — the `safeJoinModulesDir` containment helper was applied to the hoisted linker and `symlinkDependency` but NOT to the virtual store linker's `lockfileToDepGraph.ts:233`.\n\n## Details\n\n### Root Cause\n\n`dp.parse()` at `pnpm11/deps/path/src/index.ts:135` extracts the package name as:\n```typescript\nconst name = dependencyPath.substring(0, sepIndex)\n```\n\nThis is a raw substring operation with zero validation that `name` is a valid npm package name. A depPath of `../../../tmp/pwned@1.0.0` yields `name = '../../../tmp/pwned'`.\n\n### Vulnerable Code Path\n\n1. `pnpm-lock.yaml` → `lockfile.packages['../../../../../../../tmp/pwned@1.0.0']` (attacker-controlled lockfile key)\n2. `nameVerFromPkgSnapshot(depPath, pkgSnapshot)` at `lockfile/utils/src/nameVerFromPkgSnapshot.ts:16` → calls `dp.parse(depPath)` → returns `{ name: '../../../../../../../tmp/pwned' }`\n3. `lockfileToDepGraph.ts:232` → `modules = path.join(dirInVirtualStore, 'node_modules')`\n4. `lockfileToDepGraph.ts:233` → `dir = path.join(modules, pkgName)` → resolves to `/tmp/pwned` (ESCAPES virtual store)\n5. `storeController.importPackage(depNode.dir, ...)` → writes package content to the traversed path\n\n### Why Existing Defenses Don't Catch It\n\n- **`depPathToFilename()`** — replaces `/` with `+` for the `dirInVirtualStore` path, but `pkgName` comes SEPARATELY from `dp.parse()` and is NOT passed through this function\n- **`verifyLockfileResolutions()`** — validates dependency map keys (aliases) via `isValidDependencyAlias()`, but never validates the depPath keys themselves\n- **Lockfile parser** — `yaml.load(lockfileRawContent)` with no schema validation on `packages` keys\n- **`importPackage()`** — accepts `targetDir` and passes it directly to `cafsStore.importPackage(targetDir, ...)` with zero containment check\n- **Integrity verification** — requires a real fetchable package but does not validate the destination path\n\n### Escalation to RCE (non-default config)\n\nWhen `dangerouslyAllowAllBuilds: true` is configured (or the traversal package name is in the explicit `allowBuilds` list), the same traversed path is used in the rebuild phase at `after-install/src/index.ts:402,470`. The attacker's `postinstall` script then executes with the victim's shell access. Under default config, `allowBuild` returns false for unknown packages, limiting impact to arbitrary file write.\n\n### Also Affected (PnP linker)\n\nWhen `nodeLinker: pnp` is configured, `lockfileToPackageRegistry()` at `lockfile/to-pnp/src/index.ts:105-110` uses the same unvalidated `dp.parse().name` in `packageLocation` construction, allowing the `.pnp.cjs` resolver map to point outside the virtual store. This is a lower-impact variant (PnP is not the default linker).\n\n## Impact\n\nAn attacker who can commit a crafted `pnpm-lock.yaml` to a repository (or supply one via a malicious package) can cause arbitrary file writes on the machine of any user who runs `pnpm install`. Written content is the actual package files from a real npm package (attacker controls which package and which destination).\n\nTargets for arbitrary file write include:\n- `.git/hooks/pre-commit` — code execution on next git operation\n- `~/.local/bin/` — binary hijacking\n- Project source files — supply chain injection\n\n## Reproduction\n\nCraft a `pnpm-lock.yaml`:\n```yaml\nlockfileVersion: '9.0'\npackages:\n ../../../../../../../tmp/pwned@1.0.0:\n resolution: {integrity: sha512-}\n engines: {node: '>=14'}\nsnapshots:\n ../../../../../../../tmp/pwned@1.0.0: {}\nimporters:\n .:\n dependencies:\n legitimate-name:\n specifier: ^1.0.0\n version: ../../../../../../../tmp/pwned@1.0.0\n```\n\nRun `pnpm install` — package content is written to `/tmp/pwned/` instead of the virtual store.\n\n## Recommended Fix\n\nApply `safeJoinModulesDir` (or equivalent validation) at:\n- `lockfileToDepGraph.ts:233` — `path.join(modules, pkgName)`\n- `after-install/src/index.ts:402` — `path.join(pkgModulesDir(depPath), pkgInfo.name)`\n- `lockfile/to-pnp/src/index.ts:105-110` — PnP `packageLocation`\n\nAlternatively, validate depPath keys during lockfile parsing to reject any that don't produce valid npm package names via `dp.parse()`.\n\n## Relationship to GHSA-fr4h-3cph-29xv\n\nGHSA-fr4h-3cph-29xv fixed the hoisted linker path (`lockfileToHoistedDepGraph.ts:222`) by adding `safeJoinModulesDir`. The same fix was NOT applied to the virtual store linker, which uses the identical `dp.parse().name → path.join()` pattern at `lockfileToDepGraph.ts:233`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/security/advisories/GHSA-c59q-g84q-2gj5" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82392" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/pull/12872" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/pull/12890" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/commit/51300fd41c5e4c8f47635108e373cc3d1f324fa7" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/commit/78e29fe5583a1e5d69ea05e414eff310f78d5ed9" + }, + { + "type": "PACKAGE", + "url": "https://github.com/pnpm/pnpm" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/releases/tag/v10.34.5" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/releases/tag/v11.11.0" + } + ] +} diff --git a/advisories/BREW-pnpm@9-CVE-2026-82393.json b/advisories/BREW-pnpm@9-CVE-2026-82393.json new file mode 100644 index 0000000000..3fb1492fae --- /dev/null +++ b/advisories/BREW-pnpm@9-CVE-2026-82393.json @@ -0,0 +1,94 @@ +{ + "schema_version": "1.7.3", + "id": "BREW-pnpm@9-CVE-2026-82393", + "published": "2026-09-03T09:52:47Z", + "modified": "2026-09-03T09:52:47Z", + "upstream": [ + "GHSA-vq4v-j7r6-jq4m", + "CVE-2026-82393" + ], + "affected": [ + { + "package": { + "ecosystem": "Homebrew", + "name": "pnpm@9", + "purl": "pkg:brew/pnpm%409" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "ecosystem_specific": { + "fix": null, + "range_state": "affected", + "upstream_fixed_in": "10.34.5" + } + } + ], + "database_specific": { + "source": "matched", + "strategy": "registry", + "confidence": "high", + "upstream_evidence": [ + { + "strategy": "registry", + "ecosystem": "npm", + "name": "pnpm", + "subject_version": "9.15.9", + "key": "pkg:npm/pnpm@9.15.9" + } + ] + }, + "summary": "pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install", + "details": "## Summary\nWhen resolving a package, pnpm uses the resolved **manifest `name`** as a raw path segment for the isolated-linker import target. A tarball dependency whose `package.json` `name` is a scoped path traversal (`@x/../../…/`) is therefore extracted **outside `node_modules`**, to an attacker-chosen absolute path, and can **overwrite existing files** there. Attacker controls the destination, filenames, and contents → arbitrary file write → **code execution** (e.g. `~/.zshrc`, `.git/hooks/pre-commit`, another package's code). Occurs during `pnpm install` **even with `--ignore-scripts`** (no lifecycle scripts run), defeating that safety.\n\nSame class as the just-patched **GHSA-hwx4** (transitive-dependency *alias* traversal) and **GHSA-v23m** (`stage download` manifest name/version traversal), in a sink their fixes did not cover: the isolated-linker import target keyed by the resolved **name**.\n\n## Root cause\n- The isolated-linker import target is built with a raw `path.join(modules, )` in `installing/deps-resolver/src/resolvePeers.ts:706`, `installing/deps-resolver/src/index.ts:614`, and `deps/graph-builder/src/lockfileToDepGraph.ts:233` — **without** the `safeJoinModulesDir` guard used on the symlink/hoisted/bin paths (`installing/deps-restorer/src/lockfileToHoistedDepGraph.ts:222`). The store location is `node_modules/.pnpm//node_modules/`, so a traversal `` escapes.\n- The only resolve-time name gate (`resolving/npm-resolver/src/pickPackage.ts:753`) rejects only *unscoped* names containing `/`, so a **scoped** `@x/../..` passes.\n\n## Steps to reproduce\nSelf-contained PoC (real `pnpm@11.9.0`; loopback tarball server; escape target is a throwaway temp dir):\n```\nnpm i pnpm@11.9.0\n# host a tarball whose package.json name = \"@x/\"+\"../\".repeat(25)+\"/OUTSIDE\"; victim depends on the http URL\npnpm install --ignore-scripts\n```\nConfirmed output (`repro/poc.mjs`, exit 0):\n```\nescape dir is outside the project : true\nnew file implanted outside node_modules : true\npre-existing file OVERWRITTEN : true\n*** CONFIRMED: a tarball dependency wrote & overwrote files OUTSIDE the project during `pnpm install --ignore-scripts` ***\n```\n\n## Remediation\nRoute the isolated-linker import-target joins (`resolvePeers.ts:706`, `deps-resolver/index.ts:614`, `lockfileToDepGraph.ts:233`) through `safeJoinModulesDir` (as the hoisted linker already does), and/or enforce `validate-npm-package-name` on the resolved manifest name (close the scoped-name gap at `pickPackage.ts:753`) so the import target rejects a traversal name and re-asserts containment before any write.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82393" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/pull/12872" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/pull/12890" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/commit/51300fd41c5e4c8f47635108e373cc3d1f324fa7" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/commit/78e29fe5583a1e5d69ea05e414eff310f78d5ed9" + }, + { + "type": "PACKAGE", + "url": "https://github.com/pnpm/pnpm" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/releases/tag/v10.34.5" + }, + { + "type": "WEB", + "url": "https://github.com/pnpm/pnpm/releases/tag/v11.11.0" + } + ] +} diff --git a/advisories/BREW-psutils-CVE-2023-36464.json b/advisories/BREW-psutils-CVE-2023-36464.json index 5bc300ce85..2d7a7c4344 100644 --- a/advisories/BREW-psutils-CVE-2023-36464.json +++ b/advisories/BREW-psutils-CVE-2023-36464.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2023-36464", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-4vvm-4w3v-6mr8", "CVE-2023-36464", @@ -34,7 +34,7 @@ "range_state": "fixed", "upstream_fixed_in": "3.9.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -47,16 +47,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2023-46250.json b/advisories/BREW-psutils-CVE-2023-46250.json index 69d07cb6dc..a3b0608516 100644 --- a/advisories/BREW-psutils-CVE-2023-46250.json +++ b/advisories/BREW-psutils-CVE-2023-46250.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2023-46250", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-wjcc-cq79-p63f", "CVE-2023-46250", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "3.17.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2025-55197.json b/advisories/BREW-psutils-CVE-2025-55197.json index b630860e1d..a3e6e4f1be 100644 --- a/advisories/BREW-psutils-CVE-2025-55197.json +++ b/advisories/BREW-psutils-CVE-2025-55197.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2025-55197", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-7hfw-26vp-jp8m", "CVE-2025-55197", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.0.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2025-62707.json b/advisories/BREW-psutils-CVE-2025-62707.json index 523e1fdba7..4dbdcb2e73 100644 --- a/advisories/BREW-psutils-CVE-2025-62707.json +++ b/advisories/BREW-psutils-CVE-2025-62707.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2025-62707", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-vr63-x8vc-m265", "CVE-2025-62707", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.1.3", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2025-62708.json b/advisories/BREW-psutils-CVE-2025-62708.json index 6f91b8efab..a666547e16 100644 --- a/advisories/BREW-psutils-CVE-2025-62708.json +++ b/advisories/BREW-psutils-CVE-2025-62708.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2025-62708", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-jfx9-29x2-rv3j", "CVE-2025-62708", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.1.3", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2025-66019.json b/advisories/BREW-psutils-CVE-2025-66019.json index 41f1e45416..9fff7e8c1e 100644 --- a/advisories/BREW-psutils-CVE-2025-66019.json +++ b/advisories/BREW-psutils-CVE-2025-66019.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2025-66019", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-m449-cwjh-6pw7", "CVE-2025-66019", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.4.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-22690.json b/advisories/BREW-psutils-CVE-2026-22690.json index ab9911220e..ec2e970534 100644 --- a/advisories/BREW-psutils-CVE-2026-22690.json +++ b/advisories/BREW-psutils-CVE-2026-22690.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-22690", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-4xc4-762w-m6cg", "CVE-2026-22690", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.6.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-22691.json b/advisories/BREW-psutils-CVE-2026-22691.json index 4974ab0b78..f40ca3a152 100644 --- a/advisories/BREW-psutils-CVE-2026-22691.json +++ b/advisories/BREW-psutils-CVE-2026-22691.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-22691", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-4f6g-68pf-7vhv", "CVE-2026-22691", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.6.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-24688.json b/advisories/BREW-psutils-CVE-2026-24688.json index e18cf14610..fb35ca2813 100644 --- a/advisories/BREW-psutils-CVE-2026-24688.json +++ b/advisories/BREW-psutils-CVE-2026-24688.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-24688", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-2q4j-m29v-hq73", "CVE-2026-24688", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.6.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-27024.json b/advisories/BREW-psutils-CVE-2026-27024.json index 914353c9bf..fdf5072358 100644 --- a/advisories/BREW-psutils-CVE-2026-27024.json +++ b/advisories/BREW-psutils-CVE-2026-27024.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-27024", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-996q-pr4m-cvgq", "CVE-2026-27024", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.7.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-27025.json b/advisories/BREW-psutils-CVE-2026-27025.json index 2dfcacb575..3d41bb334c 100644 --- a/advisories/BREW-psutils-CVE-2026-27025.json +++ b/advisories/BREW-psutils-CVE-2026-27025.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-27025", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-wgvp-vg3v-2xq3", "CVE-2026-27025", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.7.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-27026.json b/advisories/BREW-psutils-CVE-2026-27026.json index 33025b6715..c72151b856 100644 --- a/advisories/BREW-psutils-CVE-2026-27026.json +++ b/advisories/BREW-psutils-CVE-2026-27026.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-27026", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-9mvc-8737-8j8h", "CVE-2026-27026", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.7.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-27628.json b/advisories/BREW-psutils-CVE-2026-27628.json index 5aa9903d6b..e4aa04e4a4 100644 --- a/advisories/BREW-psutils-CVE-2026-27628.json +++ b/advisories/BREW-psutils-CVE-2026-27628.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-27628", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-2rw7-x74f-jg35", "CVE-2026-27628", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.7.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-27888.json b/advisories/BREW-psutils-CVE-2026-27888.json index a5cd613508..1618b77fa2 100644 --- a/advisories/BREW-psutils-CVE-2026-27888.json +++ b/advisories/BREW-psutils-CVE-2026-27888.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-27888", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-x7hp-r3qg-r3cj", "CVE-2026-27888", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.7.3", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-28351.json b/advisories/BREW-psutils-CVE-2026-28351.json index fb3ff901bb..3b28a62084 100644 --- a/advisories/BREW-psutils-CVE-2026-28351.json +++ b/advisories/BREW-psutils-CVE-2026-28351.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-28351", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-f2v5-7jq9-h8cg", "CVE-2026-28351", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.7.4", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-28804.json b/advisories/BREW-psutils-CVE-2026-28804.json index ffc64adb81..549dc52c83 100644 --- a/advisories/BREW-psutils-CVE-2026-28804.json +++ b/advisories/BREW-psutils-CVE-2026-28804.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-28804", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-9m86-7pmv-2852", "CVE-2026-28804", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.7.5", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-31826.json b/advisories/BREW-psutils-CVE-2026-31826.json index 0f7c8b7523..94eaf9b2ea 100644 --- a/advisories/BREW-psutils-CVE-2026-31826.json +++ b/advisories/BREW-psutils-CVE-2026-31826.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-31826", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-hqmh-ppp3-xvm7", "CVE-2026-31826", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.8.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-33123.json b/advisories/BREW-psutils-CVE-2026-33123.json index 30789cf3ef..5985c6a8db 100644 --- a/advisories/BREW-psutils-CVE-2026-33123.json +++ b/advisories/BREW-psutils-CVE-2026-33123.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-33123", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-qpxp-75px-xjcp", "CVE-2026-33123", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.9.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-33699.json b/advisories/BREW-psutils-CVE-2026-33699.json index 2cb9469507..ae6f86e9e5 100644 --- a/advisories/BREW-psutils-CVE-2026-33699.json +++ b/advisories/BREW-psutils-CVE-2026-33699.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-33699", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-87mj-5ggw-8qc3", "CVE-2026-33699", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.9.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-40260.json b/advisories/BREW-psutils-CVE-2026-40260.json index 56977cb05f..6494a513ff 100644 --- a/advisories/BREW-psutils-CVE-2026-40260.json +++ b/advisories/BREW-psutils-CVE-2026-40260.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-40260", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-3crg-w4f6-42mx", "CVE-2026-40260", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.10.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-41168.json b/advisories/BREW-psutils-CVE-2026-41168.json index 9fe96c6ea9..a5022aaf27 100644 --- a/advisories/BREW-psutils-CVE-2026-41168.json +++ b/advisories/BREW-psutils-CVE-2026-41168.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-41168", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-jj6c-8h6c-hppx", "CVE-2026-41168", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.10.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-41312.json b/advisories/BREW-psutils-CVE-2026-41312.json index 0d5167c736..d74c533154 100644 --- a/advisories/BREW-psutils-CVE-2026-41312.json +++ b/advisories/BREW-psutils-CVE-2026-41312.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-41312", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-7gw9-cf7v-778f", "CVE-2026-41312", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.10.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-41313.json b/advisories/BREW-psutils-CVE-2026-41313.json index 76227414ef..342b3fb33b 100644 --- a/advisories/BREW-psutils-CVE-2026-41313.json +++ b/advisories/BREW-psutils-CVE-2026-41313.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-41313", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-4pxv-j86v-mhcw", "CVE-2026-41313", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.10.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-41314.json b/advisories/BREW-psutils-CVE-2026-41314.json index fc886bd3d6..e8bceb5f01 100644 --- a/advisories/BREW-psutils-CVE-2026-41314.json +++ b/advisories/BREW-psutils-CVE-2026-41314.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-41314", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-x284-j5p8-9c5p", "CVE-2026-41314", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.10.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-48155.json b/advisories/BREW-psutils-CVE-2026-48155.json index 225b3f2ea5..74f7c31f2d 100644 --- a/advisories/BREW-psutils-CVE-2026-48155.json +++ b/advisories/BREW-psutils-CVE-2026-48155.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-48155", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-cj93-chg6-vgv8", "CVE-2026-48155", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.12.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-48156.json b/advisories/BREW-psutils-CVE-2026-48156.json index c76f49032e..977a75d9c2 100644 --- a/advisories/BREW-psutils-CVE-2026-48156.json +++ b/advisories/BREW-psutils-CVE-2026-48156.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-48156", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-248m-82v9-q6g6", "CVE-2026-48156", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.12.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-48735.json b/advisories/BREW-psutils-CVE-2026-48735.json index 61213a1c8d..dd1f1af2f3 100644 --- a/advisories/BREW-psutils-CVE-2026-48735.json +++ b/advisories/BREW-psutils-CVE-2026-48735.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-48735", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-wjqc-6w8f-h24c", "CVE-2026-48735", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.12.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-49460.json b/advisories/BREW-psutils-CVE-2026-49460.json index 84b0d0a67c..3e8f1e8d36 100644 --- a/advisories/BREW-psutils-CVE-2026-49460.json +++ b/advisories/BREW-psutils-CVE-2026-49460.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-49460", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-5hgr-hg42-57jg", "CVE-2026-49460", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.12.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-49461.json b/advisories/BREW-psutils-CVE-2026-49461.json index 9a45722369..7e97c9185d 100644 --- a/advisories/BREW-psutils-CVE-2026-49461.json +++ b/advisories/BREW-psutils-CVE-2026-49461.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-49461", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-j543-4vmf-qm7v", "CVE-2026-49461", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.12.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-54530.json b/advisories/BREW-psutils-CVE-2026-54530.json index 4bb83162cd..4ef7b9abde 100644 --- a/advisories/BREW-psutils-CVE-2026-54530.json +++ b/advisories/BREW-psutils-CVE-2026-54530.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-54530", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-52x6-gq3r-vpf4", "CVE-2026-54530", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.13.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-54531.json b/advisories/BREW-psutils-CVE-2026-54531.json index 325d43ede3..3ff2bbda24 100644 --- a/advisories/BREW-psutils-CVE-2026-54531.json +++ b/advisories/BREW-psutils-CVE-2026-54531.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-54531", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-m2v9-299j-rv96", "CVE-2026-54531", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.13.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-54651.json b/advisories/BREW-psutils-CVE-2026-54651.json index 4d22437a26..52b8281a45 100644 --- a/advisories/BREW-psutils-CVE-2026-54651.json +++ b/advisories/BREW-psutils-CVE-2026-54651.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-54651", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-g9xf-7f8q-9mcj", "CVE-2026-54651", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.13.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-57204.json b/advisories/BREW-psutils-CVE-2026-57204.json index 4ac25c371d..43b2fb32f6 100644 --- a/advisories/BREW-psutils-CVE-2026-57204.json +++ b/advisories/BREW-psutils-CVE-2026-57204.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-57204", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-jm82-fx9c-mx94", "CVE-2026-57204" @@ -32,7 +32,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.13.3", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -45,8 +45,8 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-59935.json b/advisories/BREW-psutils-CVE-2026-59935.json index 38f18c51db..43cabc34d5 100644 --- a/advisories/BREW-psutils-CVE-2026-59935.json +++ b/advisories/BREW-psutils-CVE-2026-59935.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-59935", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-g867-7843-wf8q", "CVE-2026-59935", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.14.2", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-59936.json b/advisories/BREW-psutils-CVE-2026-59936.json index 13c12acb9e..89585e7977 100644 --- a/advisories/BREW-psutils-CVE-2026-59936.json +++ b/advisories/BREW-psutils-CVE-2026-59936.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-59936", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-5xf7-4p34-54qr", "CVE-2026-59936", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.14.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-59937.json b/advisories/BREW-psutils-CVE-2026-59937.json index e239b46ba7..1fdcd8b3ce 100644 --- a/advisories/BREW-psutils-CVE-2026-59937.json +++ b/advisories/BREW-psutils-CVE-2026-59937.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-59937", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-55h5-xmcq-c37v", "CVE-2026-59937", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.14.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-59938.json b/advisories/BREW-psutils-CVE-2026-59938.json index 60650a7bb6..acfb725ee3 100644 --- a/advisories/BREW-psutils-CVE-2026-59938.json +++ b/advisories/BREW-psutils-CVE-2026-59938.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-59938", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-5qjq-93h5-hrgp", "CVE-2026-59938", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.14.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-71852.json b/advisories/BREW-psutils-CVE-2026-71852.json index ca9cab8dae..645317771b 100644 --- a/advisories/BREW-psutils-CVE-2026-71852.json +++ b/advisories/BREW-psutils-CVE-2026-71852.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-71852", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-fwg2-594c-jp42", "CVE-2026-71852", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.15.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-71870.json b/advisories/BREW-psutils-CVE-2026-71870.json index 5cce3c1336..3d2d909f13 100644 --- a/advisories/BREW-psutils-CVE-2026-71870.json +++ b/advisories/BREW-psutils-CVE-2026-71870.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-71870", "published": "2026-08-13T17:29:24Z", - "modified": "2026-08-13T17:29:24Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-fp3f-mc75-235c", "CVE-2026-71870", @@ -33,7 +33,7 @@ "range_state": "fixed", "upstream_fixed_in": "6.15.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -46,16 +46,16 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" }, { "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-82398.json b/advisories/BREW-psutils-CVE-2026-82398.json new file mode 100644 index 0000000000..2acff4a1c0 --- /dev/null +++ b/advisories/BREW-psutils-CVE-2026-82398.json @@ -0,0 +1,88 @@ +{ + "schema_version": "1.7.3", + "id": "BREW-psutils-CVE-2026-82398", + "published": "2026-09-03T09:55:21Z", + "modified": "2026-09-03T09:55:21Z", + "upstream": [ + "GHSA-fc8x-2rww-xw9m", + "CVE-2026-82398" + ], + "affected": [ + { + "package": { + "ecosystem": "Homebrew", + "name": "psutils", + "purl": "pkg:brew/psutils" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.3.16_1" + } + ] + } + ], + "ecosystem_specific": { + "fix": "bump", + "range_state": "fixed", + "upstream_fixed_in": "6.15.0", + "resource": "pypdf", + "resource_purl": "pkg:pypi/pypdf@6.16.2" + } + } + ], + "database_specific": { + "source": "matched", + "strategy": "registry", + "confidence": "high", + "upstream_evidence": [ + { + "strategy": "registry", + "ecosystem": "PyPI", + "name": "pypdf", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", + "resource": "pypdf" + } + ] + }, + "summary": "pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace", + "details": "### Impact\nAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a call to `read_until_whitespace` with an input which does not have whitespace for a long time.\n\n### Patches\nThis has been fixed in [pypdf==6.15.0](https://github.com/py-pdf/pypdf/releases/tag/6.15.0).\n\n### Workarounds\nIf you cannot upgrade yet, consider applying the changes from PR [#3947](https://github.com/py-pdf/pypdf/pull/3947).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-fc8x-2rww-xw9m" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82398" + }, + { + "type": "WEB", + "url": "https://github.com/py-pdf/pypdf/pull/3947" + }, + { + "type": "WEB", + "url": "https://github.com/py-pdf/pypdf/commit/4959848e057e37c218dccad7465259210923faaa" + }, + { + "type": "PACKAGE", + "url": "https://github.com/py-pdf/pypdf" + }, + { + "type": "WEB", + "url": "https://github.com/py-pdf/pypdf/releases/tag/6.15.0" + } + ] +} diff --git a/advisories/BREW-psutils-CVE-2026-84309.json b/advisories/BREW-psutils-CVE-2026-84309.json index 29e738562a..e26689f487 100644 --- a/advisories/BREW-psutils-CVE-2026-84309.json +++ b/advisories/BREW-psutils-CVE-2026-84309.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-84309", "published": "2026-09-02T09:43:17Z", - "modified": "2026-09-02T09:43:17Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-jp53-mhqp-8xcg", "CVE-2026-84309" @@ -20,16 +20,19 @@ "events": [ { "introduced": "0" + }, + { + "fixed": "3.3.16_2" } ] } ], "ecosystem_specific": { - "fix": null, - "range_state": "affected", + "fix": "bump", + "range_state": "fixed", "upstream_fixed_in": "6.16.0", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -42,8 +45,8 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-84310.json b/advisories/BREW-psutils-CVE-2026-84310.json index 64cd5ccb94..1d0a8e96d9 100644 --- a/advisories/BREW-psutils-CVE-2026-84310.json +++ b/advisories/BREW-psutils-CVE-2026-84310.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-84310", "published": "2026-09-02T09:43:17Z", - "modified": "2026-09-02T09:43:17Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-23w6-3w8w-8484", "CVE-2026-84310" @@ -20,16 +20,19 @@ "events": [ { "introduced": "0" + }, + { + "fixed": "3.3.16_2" } ] } ], "ecosystem_specific": { - "fix": null, - "range_state": "affected", + "fix": "bump", + "range_state": "fixed", "upstream_fixed_in": "6.16.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -42,8 +45,8 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-psutils-CVE-2026-84311.json b/advisories/BREW-psutils-CVE-2026-84311.json index 2023f344c6..5192fbe6a6 100644 --- a/advisories/BREW-psutils-CVE-2026-84311.json +++ b/advisories/BREW-psutils-CVE-2026-84311.json @@ -2,7 +2,7 @@ "schema_version": "1.7.3", "id": "BREW-psutils-CVE-2026-84311", "published": "2026-09-02T09:43:17Z", - "modified": "2026-09-02T09:43:17Z", + "modified": "2026-09-03T09:55:21Z", "upstream": [ "GHSA-763m-79hh-57f2", "CVE-2026-84311" @@ -20,16 +20,19 @@ "events": [ { "introduced": "0" + }, + { + "fixed": "3.3.16_2" } ] } ], "ecosystem_specific": { - "fix": null, - "range_state": "affected", + "fix": "bump", + "range_state": "fixed", "upstream_fixed_in": "6.16.1", "resource": "pypdf", - "resource_purl": "pkg:pypi/pypdf@6.15.0" + "resource_purl": "pkg:pypi/pypdf@6.16.2" } } ], @@ -42,8 +45,8 @@ "strategy": "registry", "ecosystem": "PyPI", "name": "pypdf", - "subject_version": "6.15.0", - "key": "pkg:pypi/pypdf@6.15.0", + "subject_version": "6.16.2", + "key": "pkg:pypi/pypdf@6.16.2", "resource": "pypdf" } ] diff --git a/advisories/BREW-scrapy-CVE-2026-84366.json b/advisories/BREW-scrapy-CVE-2026-84366.json new file mode 100644 index 0000000000..7ba2e87db7 --- /dev/null +++ b/advisories/BREW-scrapy-CVE-2026-84366.json @@ -0,0 +1,108 @@ +{ + "schema_version": "1.7.3", + "id": "BREW-scrapy-CVE-2026-84366", + "published": "2026-09-03T10:06:10Z", + "modified": "2026-09-03T10:06:10Z", + "upstream": [ + "CVE-2026-84366", + "GHSA-76g3-c3x4-crvx" + ], + "affected": [ + { + "package": { + "ecosystem": "Homebrew", + "name": "scrapy", + "purl": "pkg:brew/scrapy" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.18.0" + } + ] + } + ], + "ecosystem_specific": { + "fix": "bump", + "range_state": "fixed", + "upstream_fixed_in": "2.17" + } + } + ], + "database_specific": { + "source": "matched", + "strategy": "git", + "confidence": "high", + "upstream_evidence": [ + { + "strategy": "git", + "ecosystem": "GIT", + "name": "https://github.com/scrapy/scrapy", + "subject_version": "2.18.0", + "key": "https://github.com/scrapy/scrapy" + }, + { + "strategy": "registry", + "ecosystem": "PyPI", + "name": "scrapy", + "subject_version": "2.18.0", + "key": "pkg:pypi/scrapy@2.18.0" + }, + { + "strategy": "distro", + "ecosystem": "Debian", + "name": "python-scrapy", + "key": "Debian/python-scrapy" + }, + { + "strategy": "distro", + "ecosystem": "GIT", + "name": "https://github.com/scrapy/scrapy", + "subject_version": "2.18.0", + "key": "upstream:https://github.com/scrapy/scrapy" + }, + { + "strategy": "distro", + "ecosystem": "PyPI", + "name": "scrapy", + "subject_version": "2.18.0", + "key": "upstream:pkg:pypi/scrapy@2.18.0" + } + ] + }, + "summary": "Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default", + "details": "Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta[\"is_secure\"] is explicitly enabled, then signs and sends the plaintext request with configured AWS credentials. A network attacker who can observe traffic between Scrapy and S3 can read the bucket and key path, AWS Authorization header, X-Amz-Security-Token when temporary credentials are used, S3 object contents, and S3 response headers. An active man-in-the-middle attacker can also modify the plaintext S3 response body, status code, and headers before Scrapy processes them, causing scraped-data poisoning, poisoned exports, HTTP cache poisoning when caching is enabled, or influence over later crawl targets through forged redirects or attacker-controlled links. Users making S3-scheme requests with AWS credentials are affected. This issue is fixed in version 2.17.0.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/scrapy/scrapy/releases/tag/2.17.0" + }, + { + "type": "ADVISORY", + "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/84xxx/CVE-2026-84366.json" + }, + { + "type": "ADVISORY", + "url": "https://github.com/scrapy/scrapy/security/advisories/GHSA-76g3-c3x4-crvx" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84366" + }, + { + "type": "FIX", + "url": "https://github.com/scrapy/scrapy/commit/9523e1ec8c41fde265a26d14563d178b6f1ad04b" + } + ] +}