[Git][security-tracker-team/security-tracker][master] Add CVE-2026-113786/pypdf

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8b17fba9 by Salvatore Bonaccorso at 2026-10-22T20:26:57+02:00
Add CVE-2026-113786/pypdf

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -827,7 +827,11 @@ CVE-2026-113788 (Lagoon is an application delivery platform for Kubernetes. Vers
 CVE-2026-113787 (odf-kit allows users to generate, fill, read, and convert OpenDocument ...)
 	TODO: check
 CVE-2026-113786 (pypdf is a free and open-source pure-python PDF library. Prior to 6.21 ...)
-	TODO: check
+	- pypdf 6.21.1-1
+	- pypdf2 <removed>
+	NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-5hx5-vpf9-5wcv
+	NOTE: https://github.com/py-pdf/pypdf/pull/4222
+	NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/512d8eb94eb04be1d1c90504e6da2dcef8679e07 (6.21.1)
 CVE-2026-113779 (The pfSense REST API package is an unofficial, open-source REST and Gr ...)
 	NOT-FOR-US: pfSense
 CVE-2026-113461 (Local privilege escalation in Checkmk 2.5.0p14 allows a local user wit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b17fba953a31476c28cae0dbe617fe7d7d5796c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b17fba953a31476c28cae0dbe617fe7d7d5796c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/fe13de77/attachment-0001.htm>