Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a55997a7 by Salvatore Bonaccorso at 2026-06-23T13:38:19+02:00
Add new batch of pypdf issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -67,11 +67,20 @@ CVE-2026-54911 (UltraJSON is a fast JSON encoder and
decoder written in pure C w
NOTE:
https://github.com/ultrajson/ultrajson/security/advisories/GHSA-3j69-69wj-xqx2
NOTE:
https://github.com/ultrajson/ultrajson/commit/169eaf36b1116fece5034ee79a7a0ef3f6deedcf
(5.13.0)
CVE-2026-54651 (pypdf is a free and open-source pure-python PDF library. Prior
to 6.13 ...)
- TODO: check
+ - pypdf <unfixed>
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9xf-7f8q-9mcj
+ NOTE: https://github.com/py-pdf/pypdf/pull/3839
CVE-2026-54531 (pypdf is a free and open-source pure-python PDF library. Prior
to 6.13 ...)
- TODO: check
+ - pypdf <unfixed>
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-m2v9-299j-rv96
+ NOTE: https://github.com/py-pdf/pypdf/pull/3830
CVE-2026-54530 (pypdf is a free and open-source pure-python PDF library. Prior
to 6.13 ...)
- TODO: check
+ - pypdf <unfixed>
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-52x6-gq3r-vpf4
+ NOTE: https://github.com/py-pdf/pypdf/pull/3830
CVE-2026-54281 (Nest is a framework for building scalable Node.js server-side
applicat ...)
TODO: check
CVE-2026-54236 (vLLM is an inference and serving engine for large language
models (LLM ...)
@@ -87,9 +96,15 @@ CVE-2026-53923 (vLLM is an inference and serving engine for
large language model
CVE-2026-49468 (LiteLLM is a proxy server (AI Gateway) to call LLM APIs in
OpenAI (or ...)
NOT-FOR-US: LiteLLM
CVE-2026-49461 (pypdf is a free and open-source pure-python PDF library. Prior
to 6.12 ...)
- TODO: check
+ - pypdf <unfixed>
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-j543-4vmf-qm7v
+ NOTE: https://github.com/py-pdf/pypdf/pull/3805
CVE-2026-49460 (pypdf is a free and open-source pure-python PDF library. Prior
to 6.12 ...)
- TODO: check
+ - pypdf <unfixed>
+ - pypdf2 <removed>
+ NOTE:
https://github.com/py-pdf/pypdf/security/advisories/GHSA-5hgr-hg42-57jg
+ NOTE: https://github.com/py-pdf/pypdf/pull/3806
CVE-2026-48746 (vLLM is an inference and serving engine for large language
models (LLM ...)
TODO: check
CVE-2026-48517 (MessagePack for C# is a MessagePack serializer for C#. Prior
to 2.5.30 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a55997a771b38400bbd923c8a056fe2d4337e893
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a55997a771b38400bbd923c8a056fe2d4337e893
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
