{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-33699",
        "tracking": {
            "current_release_date": "2026-04-01T18:28:11.617970Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-33699",
            "initial_release_date": "2026-03-24T20:43:29.833514Z",
            "revision_history": [
                {
                    "date": "2026-03-24T20:43:29.833514Z",
                    "number": "1",
                    "summary": "CVE created.| Source created.| CVE status created. (valid)| Products connected (3)."
                },
                {
                    "date": "2026-03-24T20:43:32.443107Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-03-25T20:59:52.967208Z",
                    "number": "3",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)."
                },
                {
                    "date": "2026-03-25T20:59:56.773210Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-26T00:38:40.865524Z",
                    "number": "5",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (96).| Product Identifiers created (97).| Products created (2).| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-03-26T00:38:56.810393Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-27T00:38:41.089818Z",
                    "number": "7",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-03-27T00:38:47.287717Z",
                    "number": "8",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-27T01:24:54.570169Z",
                    "number": "9",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-03-27T01:25:07.503474Z",
                    "number": "10",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-27T06:43:59.716200Z",
                    "number": "11",
                    "summary": "Description created for source."
                },
                {
                    "date": "2026-03-27T07:36:02.136856Z",
                    "number": "12",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-27T19:41:40.469610Z",
                    "number": "13",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (14).| Product Identifiers created (5).| Product Remediations created (14).| References created (5).| CWES updated (1).| Vendor_assessment created."
                },
                {
                    "date": "2026-03-27T19:41:43.535508Z",
                    "number": "14",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-27T20:56:26.738977Z",
                    "number": "15",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-03-27T20:56:29.112737Z",
                    "number": "16",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-03-27T21:27:05.127496Z",
                    "number": "17",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-03-28T07:57:30.507802Z",
                    "number": "18",
                    "summary": "References created (1)."
                },
                {
                    "date": "2026-04-01T07:52:10.860785Z",
                    "number": "19",
                    "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products created (1)."
                },
                {
                    "date": "2026-04-01T07:52:15.514633Z",
                    "number": "20",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-04-01T18:28:06.937997Z",
                    "number": "21",
                    "summary": "CVSS created.| Products created (1).| Product Identifiers created (1)."
                },
                {
                    "date": "2026-04-01T18:28:09.052137Z",
                    "number": "22",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "22"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/unknown",
                                "product": {
                                    "name": "vers:rpm/unknown",
                                    "product_id": "CSAFPID-5474797",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:redhat:lightspeed_core"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Lightspeed Core"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/unknown",
                                "product": {
                                    "name": "vers:rpm/unknown",
                                    "product_id": "CSAFPID-2524222",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:redhat:openshift_lightspeed"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "OpenShift Lightspeed"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/2",
                                "product": {
                                    "name": "vers:rpm/2",
                                    "product_id": "CSAFPID-1508257",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:redhat:ansible_automation_platform:2"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Red Hat Ansible Automation Platform 2"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/3",
                                "product": {
                                    "name": "vers:rpm/3",
                                    "product_id": "CSAFPID-5198605",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:redhat:enterprise_linux_ai:3"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Red Hat Enterprise Linux AI (RHEL AI) 3"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:rpm/unknown",
                                "product": {
                                    "name": "vers:rpm/unknown",
                                    "product_id": "CSAFPID-1439279",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:redhat:openshift_ai"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Red Hat OpenShift AI (RHOAI)"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-5205180"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "bootc-cuda-rhel9"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-5811351"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "bootc-rocm-rhel9"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-5205182"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "disk-image-cuda-rhel9"
                            }
                        ],
                        "category": "product_family",
                        "name": "Red Hat Enterprise Linux AI (RHEL AI) 3"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-2831634"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "lightspeed-chatbot-rhel8"
                            }
                        ],
                        "category": "product_family",
                        "name": "Red Hat Ansible Automation Platform 2"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-5222641"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "lightspeed-ocp-rag-rhel9"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-2960939"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "lightspeed-rag-tool-rhel9"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-1508255"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "lightspeed-service-api-rhel9"
                            }
                        ],
                        "category": "product_family",
                        "name": "OpenShift Lightspeed"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-3112099"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "odh-llama-stack-core-rhel9"
                            }
                        ],
                        "category": "product_family",
                        "name": "Red Hat OpenShift AI (RHOAI)"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:rpm/unknown",
                                        "product": {
                                            "name": "vers:rpm/unknown",
                                            "product_id": "CSAFPID-5826731"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "rag-tool-rhel9"
                            }
                        ],
                        "category": "product_family",
                        "name": "Lightspeed Core"
                    }
                ],
                "category": "vendor",
                "name": "Red Hat"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:deb/unknown",
                                        "product": {
                                            "name": "vers:deb/unknown",
                                            "product_id": "CSAFPID-3054952"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "pypdf"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:deb/unknown",
                                        "product": {
                                            "name": "vers:deb/unknown",
                                            "product_id": "CSAFPID-3054953"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "pypdf2"
                            }
                        ],
                        "category": "product_family",
                        "name": "bookworm"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:deb/unknown",
                                        "product": {
                                            "name": "vers:deb/unknown",
                                            "product_id": "CSAFPID-3054954"
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "pypdf2"
                            }
                        ],
                        "category": "product_family",
                        "name": "bullseye"
                    }
                ],
                "category": "vendor",
                "name": "Debian"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0",
                                "product": {
                                    "name": "vers:unknown/1.0",
                                    "product_id": "CSAFPID-3245041",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.1",
                                "product": {
                                    "name": "vers:unknown/1.1",
                                    "product_id": "CSAFPID-3245042",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.10",
                                "product": {
                                    "name": "vers:unknown/1.10",
                                    "product_id": "CSAFPID-3245043",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.11",
                                "product": {
                                    "name": "vers:unknown/1.11",
                                    "product_id": "CSAFPID-3245044",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.12",
                                "product": {
                                    "name": "vers:unknown/1.12",
                                    "product_id": "CSAFPID-3245045",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.13",
                                "product": {
                                    "name": "vers:unknown/1.13",
                                    "product_id": "CSAFPID-3245046",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.13"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2",
                                "product": {
                                    "name": "vers:unknown/1.2",
                                    "product_id": "CSAFPID-3245047",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.3",
                                "product": {
                                    "name": "vers:unknown/1.3",
                                    "product_id": "CSAFPID-3245048",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.4",
                                "product": {
                                    "name": "vers:unknown/1.4",
                                    "product_id": "CSAFPID-3245049",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.5",
                                "product": {
                                    "name": "vers:unknown/1.5",
                                    "product_id": "CSAFPID-3245050",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.6",
                                "product": {
                                    "name": "vers:unknown/1.6",
                                    "product_id": "CSAFPID-3245051",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.7",
                                "product": {
                                    "name": "vers:unknown/1.7",
                                    "product_id": "CSAFPID-3245052",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.8",
                                "product": {
                                    "name": "vers:unknown/1.8",
                                    "product_id": "CSAFPID-3245053",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.9",
                                "product": {
                                    "name": "vers:unknown/1.9",
                                    "product_id": "CSAFPID-3245054",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@1.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.1.0",
                                "product": {
                                    "name": "vers:unknown/3.1.0",
                                    "product_id": "CSAFPID-3245055",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.1.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.10.0",
                                "product": {
                                    "name": "vers:unknown/3.10.0",
                                    "product_id": "CSAFPID-3245056",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.10.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.11.0",
                                "product": {
                                    "name": "vers:unknown/3.11.0",
                                    "product_id": "CSAFPID-3245057",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.11.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.11.1",
                                "product": {
                                    "name": "vers:unknown/3.11.1",
                                    "product_id": "CSAFPID-3245058",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.11.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.12.0",
                                "product": {
                                    "name": "vers:unknown/3.12.0",
                                    "product_id": "CSAFPID-3245059",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.12.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.12.1",
                                "product": {
                                    "name": "vers:unknown/3.12.1",
                                    "product_id": "CSAFPID-3245060",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.12.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.12.2",
                                "product": {
                                    "name": "vers:unknown/3.12.2",
                                    "product_id": "CSAFPID-3245061",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.12.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.13.0",
                                "product": {
                                    "name": "vers:unknown/3.13.0",
                                    "product_id": "CSAFPID-3245062",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.13.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.14.0",
                                "product": {
                                    "name": "vers:unknown/3.14.0",
                                    "product_id": "CSAFPID-3245063",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.14.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.15.0",
                                "product": {
                                    "name": "vers:unknown/3.15.0",
                                    "product_id": "CSAFPID-3245064",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.15.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.15.1",
                                "product": {
                                    "name": "vers:unknown/3.15.1",
                                    "product_id": "CSAFPID-3245065",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.15.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.15.2",
                                "product": {
                                    "name": "vers:unknown/3.15.2",
                                    "product_id": "CSAFPID-3245066",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.15.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.15.3",
                                "product": {
                                    "name": "vers:unknown/3.15.3",
                                    "product_id": "CSAFPID-3245067",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.15.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.15.4",
                                "product": {
                                    "name": "vers:unknown/3.15.4",
                                    "product_id": "CSAFPID-3245068",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.15.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.15.5",
                                "product": {
                                    "name": "vers:unknown/3.15.5",
                                    "product_id": "CSAFPID-3245069",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.15.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.16.0",
                                "product": {
                                    "name": "vers:unknown/3.16.0",
                                    "product_id": "CSAFPID-3245070",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.16.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.16.1",
                                "product": {
                                    "name": "vers:unknown/3.16.1",
                                    "product_id": "CSAFPID-3245071",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.16.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.16.2",
                                "product": {
                                    "name": "vers:unknown/3.16.2",
                                    "product_id": "CSAFPID-3245072",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.16.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.16.3",
                                "product": {
                                    "name": "vers:unknown/3.16.3",
                                    "product_id": "CSAFPID-3245073",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.16.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.16.4",
                                "product": {
                                    "name": "vers:unknown/3.16.4",
                                    "product_id": "CSAFPID-3245074",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.16.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.17.0",
                                "product": {
                                    "name": "vers:unknown/3.17.0",
                                    "product_id": "CSAFPID-3245075",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.17.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.17.1",
                                "product": {
                                    "name": "vers:unknown/3.17.1",
                                    "product_id": "CSAFPID-3245076",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.17.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.17.2",
                                "product": {
                                    "name": "vers:unknown/3.17.2",
                                    "product_id": "CSAFPID-3245077",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.17.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.17.3",
                                "product": {
                                    "name": "vers:unknown/3.17.3",
                                    "product_id": "CSAFPID-3245078",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.17.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.17.4",
                                "product": {
                                    "name": "vers:unknown/3.17.4",
                                    "product_id": "CSAFPID-3245079",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.17.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.2.0",
                                "product": {
                                    "name": "vers:unknown/3.2.0",
                                    "product_id": "CSAFPID-3245080",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.2.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.2.1",
                                "product": {
                                    "name": "vers:unknown/3.2.1",
                                    "product_id": "CSAFPID-3245081",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.2.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.3.0",
                                "product": {
                                    "name": "vers:unknown/3.3.0",
                                    "product_id": "CSAFPID-3245082",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.3.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.4.0",
                                "product": {
                                    "name": "vers:unknown/3.4.0",
                                    "product_id": "CSAFPID-3245083",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.4.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.4.1",
                                "product": {
                                    "name": "vers:unknown/3.4.1",
                                    "product_id": "CSAFPID-3245084",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.4.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.5.0",
                                "product": {
                                    "name": "vers:unknown/3.5.0",
                                    "product_id": "CSAFPID-3245085",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.5.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.5.1",
                                "product": {
                                    "name": "vers:unknown/3.5.1",
                                    "product_id": "CSAFPID-3245086",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.5.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.5.2",
                                "product": {
                                    "name": "vers:unknown/3.5.2",
                                    "product_id": "CSAFPID-3245087",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.5.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.6.0",
                                "product": {
                                    "name": "vers:unknown/3.6.0",
                                    "product_id": "CSAFPID-3245088",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.6.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.7.0",
                                "product": {
                                    "name": "vers:unknown/3.7.0",
                                    "product_id": "CSAFPID-3245089",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.7.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.7.1",
                                "product": {
                                    "name": "vers:unknown/3.7.1",
                                    "product_id": "CSAFPID-3245090",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.7.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.0",
                                "product": {
                                    "name": "vers:unknown/3.8.0",
                                    "product_id": "CSAFPID-3245091",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.8.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.8.1",
                                "product": {
                                    "name": "vers:unknown/3.8.1",
                                    "product_id": "CSAFPID-3245092",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.8.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.0",
                                "product": {
                                    "name": "vers:unknown/3.9.0",
                                    "product_id": "CSAFPID-3245093",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.9.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.9.1",
                                "product": {
                                    "name": "vers:unknown/3.9.1",
                                    "product_id": "CSAFPID-3245094",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@3.9.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.0",
                                "product": {
                                    "name": "vers:unknown/4.0.0",
                                    "product_id": "CSAFPID-3245095",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@4.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.1",
                                "product": {
                                    "name": "vers:unknown/4.0.1",
                                    "product_id": "CSAFPID-3245096",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@4.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.0.2",
                                "product": {
                                    "name": "vers:unknown/4.0.2",
                                    "product_id": "CSAFPID-3245097",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@4.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.1.0",
                                "product": {
                                    "name": "vers:unknown/4.1.0",
                                    "product_id": "CSAFPID-3245098",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@4.1.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.2.0",
                                "product": {
                                    "name": "vers:unknown/4.2.0",
                                    "product_id": "CSAFPID-3245099",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@4.2.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.3.0",
                                "product": {
                                    "name": "vers:unknown/4.3.0",
                                    "product_id": "CSAFPID-3245100",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@4.3.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.3.1",
                                "product": {
                                    "name": "vers:unknown/4.3.1",
                                    "product_id": "CSAFPID-3245101",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@4.3.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.0",
                                "product": {
                                    "name": "vers:unknown/5.0.0",
                                    "product_id": "CSAFPID-3245102",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.0.1",
                                "product": {
                                    "name": "vers:unknown/5.0.1",
                                    "product_id": "CSAFPID-3245103",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.1.0",
                                "product": {
                                    "name": "vers:unknown/5.1.0",
                                    "product_id": "CSAFPID-3245104",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.1.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.2.0",
                                "product": {
                                    "name": "vers:unknown/5.2.0",
                                    "product_id": "CSAFPID-3245105",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.2.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.0",
                                "product": {
                                    "name": "vers:unknown/5.3.0",
                                    "product_id": "CSAFPID-3245106",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.3.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.3.1",
                                "product": {
                                    "name": "vers:unknown/5.3.1",
                                    "product_id": "CSAFPID-3245107",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.3.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.4.0",
                                "product": {
                                    "name": "vers:unknown/5.4.0",
                                    "product_id": "CSAFPID-3245108",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.4.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.5.0",
                                "product": {
                                    "name": "vers:unknown/5.5.0",
                                    "product_id": "CSAFPID-3245109",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.5.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.0",
                                "product": {
                                    "name": "vers:unknown/5.6.0",
                                    "product_id": "CSAFPID-3245110",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.6.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.6.1",
                                "product": {
                                    "name": "vers:unknown/5.6.1",
                                    "product_id": "CSAFPID-3245111",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.6.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.7.0",
                                "product": {
                                    "name": "vers:unknown/5.7.0",
                                    "product_id": "CSAFPID-3245112",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.7.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.8.0",
                                "product": {
                                    "name": "vers:unknown/5.8.0",
                                    "product_id": "CSAFPID-3245113",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.8.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/5.9.0",
                                "product": {
                                    "name": "vers:unknown/5.9.0",
                                    "product_id": "CSAFPID-3245114",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@5.9.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.0.0",
                                "product": {
                                    "name": "vers:unknown/6.0.0",
                                    "product_id": "CSAFPID-5132945",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.1.0",
                                "product": {
                                    "name": "vers:unknown/6.1.0",
                                    "product_id": "CSAFPID-5132946",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.1.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.1.1",
                                "product": {
                                    "name": "vers:unknown/6.1.1",
                                    "product_id": "CSAFPID-5132947",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.1.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.1.2",
                                "product": {
                                    "name": "vers:unknown/6.1.2",
                                    "product_id": "CSAFPID-5132948",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.1.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.1.3",
                                "product": {
                                    "name": "vers:unknown/6.1.3",
                                    "product_id": "CSAFPID-5208313",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.1.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.0",
                                "product": {
                                    "name": "vers:unknown/6.2.0",
                                    "product_id": "CSAFPID-5208314",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.2.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.0",
                                "product": {
                                    "name": "vers:unknown/6.3.0",
                                    "product_id": "CSAFPID-5208315",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.3.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.4.0",
                                "product": {
                                    "name": "vers:unknown/6.4.0",
                                    "product_id": "CSAFPID-5365058",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.4.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.4.1",
                                "product": {
                                    "name": "vers:unknown/6.4.1",
                                    "product_id": "CSAFPID-5365059",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.4.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.4.2",
                                "product": {
                                    "name": "vers:unknown/6.4.2",
                                    "product_id": "CSAFPID-5365060",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.4.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.5.0",
                                "product": {
                                    "name": "vers:unknown/6.5.0",
                                    "product_id": "CSAFPID-5365061",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.5.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.6.0",
                                "product": {
                                    "name": "vers:unknown/6.6.0",
                                    "product_id": "CSAFPID-5466673",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.6.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.6.1",
                                "product": {
                                    "name": "vers:unknown/6.6.1",
                                    "product_id": "CSAFPID-5466674",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.6.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.6.2",
                                "product": {
                                    "name": "vers:unknown/6.6.2",
                                    "product_id": "CSAFPID-5659521",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.6.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.7.0",
                                "product": {
                                    "name": "vers:unknown/6.7.0",
                                    "product_id": "CSAFPID-5657723",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.7.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.7.1",
                                "product": {
                                    "name": "vers:unknown/6.7.1",
                                    "product_id": "CSAFPID-5701485",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.7.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.7.2",
                                "product": {
                                    "name": "vers:unknown/6.7.2",
                                    "product_id": "CSAFPID-5726071",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.7.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.7.3",
                                "product": {
                                    "name": "vers:unknown/6.7.3",
                                    "product_id": "CSAFPID-5748971",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.7.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.7.4",
                                "product": {
                                    "name": "vers:unknown/6.7.4",
                                    "product_id": "CSAFPID-5759178",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.7.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.7.5",
                                "product": {
                                    "name": "vers:unknown/6.7.5",
                                    "product_id": "CSAFPID-5907926",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.7.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.8.0",
                                "product": {
                                    "name": "vers:unknown/6.8.0",
                                    "product_id": "CSAFPID-5908033",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.8.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.9.0",
                                "product": {
                                    "name": "vers:unknown/6.9.0",
                                    "product_id": "CSAFPID-5908034",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.9.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.9.1",
                                "product": {
                                    "name": "vers:unknown/6.9.1",
                                    "product_id": "CSAFPID-5912910",
                                    "product_identification_helper": {
                                        "purl": "pkg:pypi/pypdf@6.9.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<6.9.2",
                                "product": {
                                    "name": "vers:unknown/<6.9.2",
                                    "product_id": "CSAFPID-5920664"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=0|<6.9.2",
                                "product": {
                                    "name": "vers:unknown/>=0|<6.9.2",
                                    "product_id": "CSAFPID-5912911"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "pypdf"
                    }
                ],
                "category": "vendor",
                "name": "py-pdf"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<6.9.2",
                                "product": {
                                    "name": "vers:unknown/<6.9.2",
                                    "product_id": "CSAFPID-5982381",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "pypdf"
                    }
                ],
                "category": "vendor",
                "name": "pypdf_project"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/<6.9.2",
                                "product": {
                                    "name": "vers:unknown/<6.9.2",
                                    "product_id": "CSAFPID-5971057"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "pypdf"
                    }
                ],
                "category": "vendor",
                "name": "unknown"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-33699",
            "cwe": {
                "id": "CWE-835",
                "name": "Loop with Unreachable Exit Condition ('Infinite Loop')"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "### Impact\n\nAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode.\n\n### Patches\n\nThis has been fixed in [pypdf==6.9.2](https://github.com/py-pdf/pypdf/releases/tag/6.9.2).\n\n### Workarounds\n\nIf users cannot upgrade yet, consider applying the changes from PR [#3693](https://github.com/py-pdf/pypdf/pull/3693).",
                    "title": "github - https://api.github.com/advisories/GHSA-87mj-5ggw-8qc3"
                },
                {
                    "category": "description",
                    "text": "### Impact\n\nAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode.\n\n### Patches\n\nThis has been fixed in [pypdf==6.9.2](https://github.com/py-pdf/pypdf/releases/tag/6.9.2).\n\n### Workarounds\n\nIf users cannot upgrade yet, consider applying the changes from PR [#3693](https://github.com/py-pdf/pypdf/pull/3693).",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-87mj-5ggw-8qc3.json?alt=media"
                },
                {
                    "category": "description",
                    "text": "pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider applying the changes from the patch manually.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33699.json"
                },
                {
                    "category": "description",
                    "text": "pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider applying the changes from the patch manually.",
                    "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33699"
                },
                {
                    "category": "description",
                    "text": "pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider applying the changes from the patch manually.",
                    "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-33699"
                },
                {
                    "category": "description",
                    "text": "A flaw was found in pypdf. An attacker can craft a malicious PDF file that, when processed by pypdf in non-strict mode, triggers an infinite loop. This vulnerability can lead to a Denial of Service (DoS) by consuming excessive system resources, making the application unresponsive.",
                    "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33699.json"
                },
                {
                    "category": "description",
                    "text": "Affected versions of the pypdf package are vulnerable to Denial of Service (DoS) due to an infinite loop caused by improper error handling in non-strict parsing mode. The vulnerability is in DictionaryObject.read_from_stream, where malformed PDF input can trigger recovery handling for recursion and filter limit errors that should terminate parsing instead of continuing indefinitely.",
                    "title": "pyupio - https://raw.githubusercontent.com/pyupio/safety-db/refs/heads/master/data/insecure_full.json"
                },
                {
                    "category": "other",
                    "text": "0.0004",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U",
                    "title": "CVSSV4"
                },
                {
                    "category": "other",
                    "text": "4.6",
                    "title": "CVSSV4 base score"
                },
                {
                    "category": "other",
                    "text": "4.6",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "Is related to a product by vendor Unknown",
                    "title": "NCSC Score top decreasing factors"
                },
                {
                    "category": "details",
                    "text": "Severity: 2\n",
                    "title": "Vendor assessment"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-3054952",
                    "CSAFPID-3054953",
                    "CSAFPID-3054954",
                    "CSAFPID-3245041",
                    "CSAFPID-3245042",
                    "CSAFPID-3245043",
                    "CSAFPID-3245044",
                    "CSAFPID-3245045",
                    "CSAFPID-3245046",
                    "CSAFPID-3245047",
                    "CSAFPID-3245048",
                    "CSAFPID-3245049",
                    "CSAFPID-3245050",
                    "CSAFPID-3245051",
                    "CSAFPID-3245052",
                    "CSAFPID-3245053",
                    "CSAFPID-3245054",
                    "CSAFPID-3245055",
                    "CSAFPID-3245056",
                    "CSAFPID-3245057",
                    "CSAFPID-3245058",
                    "CSAFPID-3245059",
                    "CSAFPID-3245060",
                    "CSAFPID-3245061",
                    "CSAFPID-3245062",
                    "CSAFPID-3245063",
                    "CSAFPID-3245064",
                    "CSAFPID-3245065",
                    "CSAFPID-3245066",
                    "CSAFPID-3245067",
                    "CSAFPID-3245068",
                    "CSAFPID-3245069",
                    "CSAFPID-3245070",
                    "CSAFPID-3245071",
                    "CSAFPID-3245072",
                    "CSAFPID-3245073",
                    "CSAFPID-3245074",
                    "CSAFPID-3245075",
                    "CSAFPID-3245076",
                    "CSAFPID-3245077",
                    "CSAFPID-3245078",
                    "CSAFPID-3245079",
                    "CSAFPID-3245080",
                    "CSAFPID-3245081",
                    "CSAFPID-3245082",
                    "CSAFPID-3245083",
                    "CSAFPID-3245084",
                    "CSAFPID-3245085",
                    "CSAFPID-3245086",
                    "CSAFPID-3245087",
                    "CSAFPID-3245088",
                    "CSAFPID-3245089",
                    "CSAFPID-3245090",
                    "CSAFPID-3245091",
                    "CSAFPID-3245092",
                    "CSAFPID-3245093",
                    "CSAFPID-3245094",
                    "CSAFPID-3245095",
                    "CSAFPID-3245096",
                    "CSAFPID-3245097",
                    "CSAFPID-3245098",
                    "CSAFPID-3245099",
                    "CSAFPID-3245100",
                    "CSAFPID-3245101",
                    "CSAFPID-3245102",
                    "CSAFPID-3245103",
                    "CSAFPID-3245104",
                    "CSAFPID-3245105",
                    "CSAFPID-3245106",
                    "CSAFPID-3245107",
                    "CSAFPID-3245108",
                    "CSAFPID-3245109",
                    "CSAFPID-3245110",
                    "CSAFPID-3245111",
                    "CSAFPID-3245112",
                    "CSAFPID-3245113",
                    "CSAFPID-3245114",
                    "CSAFPID-5132945",
                    "CSAFPID-5132946",
                    "CSAFPID-5132947",
                    "CSAFPID-5132948",
                    "CSAFPID-5208313",
                    "CSAFPID-5208314",
                    "CSAFPID-5208315",
                    "CSAFPID-5365058",
                    "CSAFPID-5365059",
                    "CSAFPID-5365060",
                    "CSAFPID-5365061",
                    "CSAFPID-5466673",
                    "CSAFPID-5466674",
                    "CSAFPID-5657723",
                    "CSAFPID-5659521",
                    "CSAFPID-5701485",
                    "CSAFPID-5726071",
                    "CSAFPID-5748971",
                    "CSAFPID-5759178",
                    "CSAFPID-5907926",
                    "CSAFPID-5908033",
                    "CSAFPID-5908034",
                    "CSAFPID-5912910",
                    "CSAFPID-5912911",
                    "CSAFPID-5920664",
                    "CSAFPID-1439279",
                    "CSAFPID-1508255",
                    "CSAFPID-1508257",
                    "CSAFPID-2524222",
                    "CSAFPID-2831634",
                    "CSAFPID-2960939",
                    "CSAFPID-3112099",
                    "CSAFPID-5198605",
                    "CSAFPID-5205180",
                    "CSAFPID-5205182",
                    "CSAFPID-5222641",
                    "CSAFPID-5474797",
                    "CSAFPID-5811351",
                    "CSAFPID-5826731",
                    "CSAFPID-5971057",
                    "CSAFPID-5982381"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - debian",
                    "url": "https://security-tracker.debian.org/tracker/CVE-2026-33699"
                },
                {
                    "category": "external",
                    "summary": "Source - github",
                    "url": "https://api.github.com/advisories/GHSA-87mj-5ggw-8qc3"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-87mj-5ggw-8qc3.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33699.json"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33699"
                },
                {
                    "category": "external",
                    "summary": "Source - redhat",
                    "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33699.json"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
                },
                {
                    "category": "external",
                    "summary": "Source - pyupio",
                    "url": "https://raw.githubusercontent.com/pyupio/safety-db/refs/heads/master/data/insecure_full.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; github; nvd; osv; redhat",
                    "url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-87mj-5ggw-8qc3"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; github; nvd; osv; redhat",
                    "url": "https://github.com/py-pdf/pypdf/pull/3693"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; github; nvd; osv; redhat",
                    "url": "https://github.com/py-pdf/pypdf/releases/tag/6.9.2"
                },
                {
                    "category": "external",
                    "summary": "Reference - github",
                    "url": "https://github.com/advisories/GHSA-87mj-5ggw-8qc3"
                },
                {
                    "category": "external",
                    "summary": "Reference - redhat",
                    "url": "https://www.cve.org/CVERecord?id=CVE-2026-33699"
                },
                {
                    "category": "external",
                    "summary": "Reference - github; redhat",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33699"
                }
            ],
            "remediations": [
                {
                    "category": "mitigation",
                    "details": "To mitigate this issue, avoid processing untrusted PDF files with pypdf, particularly when operating in non-strict mode. Ensuring that applications using pypdf are configured to operate in strict mode, if supported, can prevent exploitation.",
                    "product_ids": [
                        "CSAFPID-1439279",
                        "CSAFPID-1508255",
                        "CSAFPID-1508257",
                        "CSAFPID-2524222",
                        "CSAFPID-2831634",
                        "CSAFPID-2960939",
                        "CSAFPID-3112099",
                        "CSAFPID-5198605",
                        "CSAFPID-5205180",
                        "CSAFPID-5205182",
                        "CSAFPID-5222641",
                        "CSAFPID-5474797",
                        "CSAFPID-5811351",
                        "CSAFPID-5826731"
                    ]
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                        "baseScore": 7.5,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1439279",
                        "CSAFPID-1508255",
                        "CSAFPID-1508257",
                        "CSAFPID-2524222",
                        "CSAFPID-2831634",
                        "CSAFPID-2960939",
                        "CSAFPID-3054952",
                        "CSAFPID-3054953",
                        "CSAFPID-3054954",
                        "CSAFPID-3112099",
                        "CSAFPID-3245041",
                        "CSAFPID-3245042",
                        "CSAFPID-3245043",
                        "CSAFPID-3245044",
                        "CSAFPID-3245045",
                        "CSAFPID-3245046",
                        "CSAFPID-3245047",
                        "CSAFPID-3245048",
                        "CSAFPID-3245049",
                        "CSAFPID-3245050",
                        "CSAFPID-3245051",
                        "CSAFPID-3245052",
                        "CSAFPID-3245053",
                        "CSAFPID-3245054",
                        "CSAFPID-3245055",
                        "CSAFPID-3245056",
                        "CSAFPID-3245057",
                        "CSAFPID-3245058",
                        "CSAFPID-3245059",
                        "CSAFPID-3245060",
                        "CSAFPID-3245061",
                        "CSAFPID-3245062",
                        "CSAFPID-3245063",
                        "CSAFPID-3245064",
                        "CSAFPID-3245065",
                        "CSAFPID-3245066",
                        "CSAFPID-3245067",
                        "CSAFPID-3245068",
                        "CSAFPID-3245069",
                        "CSAFPID-3245070",
                        "CSAFPID-3245071",
                        "CSAFPID-3245072",
                        "CSAFPID-3245073",
                        "CSAFPID-3245074",
                        "CSAFPID-3245075",
                        "CSAFPID-3245076",
                        "CSAFPID-3245077",
                        "CSAFPID-3245078",
                        "CSAFPID-3245079",
                        "CSAFPID-3245080",
                        "CSAFPID-3245081",
                        "CSAFPID-3245082",
                        "CSAFPID-3245083",
                        "CSAFPID-3245084",
                        "CSAFPID-3245085",
                        "CSAFPID-3245086",
                        "CSAFPID-3245087",
                        "CSAFPID-3245088",
                        "CSAFPID-3245089",
                        "CSAFPID-3245090",
                        "CSAFPID-3245091",
                        "CSAFPID-3245092",
                        "CSAFPID-3245093",
                        "CSAFPID-3245094",
                        "CSAFPID-3245095",
                        "CSAFPID-3245096",
                        "CSAFPID-3245097",
                        "CSAFPID-3245098",
                        "CSAFPID-3245099",
                        "CSAFPID-3245100",
                        "CSAFPID-3245101",
                        "CSAFPID-3245102",
                        "CSAFPID-3245103",
                        "CSAFPID-3245104",
                        "CSAFPID-3245105",
                        "CSAFPID-3245106",
                        "CSAFPID-3245107",
                        "CSAFPID-3245108",
                        "CSAFPID-3245109",
                        "CSAFPID-3245110",
                        "CSAFPID-3245111",
                        "CSAFPID-3245112",
                        "CSAFPID-3245113",
                        "CSAFPID-3245114",
                        "CSAFPID-5132945",
                        "CSAFPID-5132946",
                        "CSAFPID-5132947",
                        "CSAFPID-5132948",
                        "CSAFPID-5198605",
                        "CSAFPID-5205180",
                        "CSAFPID-5205182",
                        "CSAFPID-5208313",
                        "CSAFPID-5208314",
                        "CSAFPID-5208315",
                        "CSAFPID-5222641",
                        "CSAFPID-5365058",
                        "CSAFPID-5365059",
                        "CSAFPID-5365060",
                        "CSAFPID-5365061",
                        "CSAFPID-5466673",
                        "CSAFPID-5466674",
                        "CSAFPID-5474797",
                        "CSAFPID-5657723",
                        "CSAFPID-5659521",
                        "CSAFPID-5701485",
                        "CSAFPID-5726071",
                        "CSAFPID-5748971",
                        "CSAFPID-5759178",
                        "CSAFPID-5811351",
                        "CSAFPID-5826731",
                        "CSAFPID-5907926",
                        "CSAFPID-5908033",
                        "CSAFPID-5908034",
                        "CSAFPID-5912910",
                        "CSAFPID-5912911",
                        "CSAFPID-5920664",
                        "CSAFPID-5971057",
                        "CSAFPID-5982381"
                    ]
                }
            ],
            "title": "CVE-2026-33699"
        }
    ]
}