{"id":"ROOT-APP-PYPI-CVE-2026-54531","summary":"CVE-2026-54531 in pypdf - Patched by Root","details":"Root has patched CVE-2026-54531 in the pypdf package for Root:PyPI. Multiple fixed versions available.","modified":"2026-08-17T11:00:09.791239014Z","published":"2026-08-17T09:27:33Z","upstream":["CVE-2026-54531"],"database_specific":{"severity":"MEDIUM","source":"Root","distro":"pypi","distro_version":""},"affected":[{"package":{"name":"pypdf","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0+aikido.10"},{"fixed":"6.10.1+aikido.4"},{"fixed":"6.10.1+aikido.5"},{"fixed":"6.10.2+aikido.1"},{"fixed":"6.6.0+aikido.11"},{"fixed":"6.11.0+aikido.1"},{"fixed":"6.12.0+aikido.1"},{"fixed":"6.12.1+aikido.1"},{"fixed":"6.12.2+aikido.1"},{"fixed":"6.11.0+aikido.2"},{"fixed":"6.6.0+aikido.12"},{"fixed":"6.10.2+aikido.2"},{"fixed":"6.12.1+aikido.2"},{"fixed":"6.10.1+aikido.6"},{"fixed":"6.12.1+aikido.3"},{"fixed":"6.12.0+aikido.2"},{"fixed":"6.10.1+aikido.7"},{"fixed":"6.12.0+aikido.3"},{"fixed":"6.10.2+aikido.3"},{"fixed":"6.11.0+aikido.3"},{"fixed":"6.12.2+aikido.2"},{"fixed":"6.12.1+aikido.4"},{"fixed":"6.6.0+aikido.13"},{"fixed":"6.12.0+aikido.4"},{"fixed":"6.12.2+aikido.3"},{"fixed":"6.11.0+aikido.4"},{"fixed":"6.12.0+aikido.5"},{"fixed":"6.6.0+aikido.14"},{"fixed":"6.10.2+aikido.4"},{"fixed":"6.12.2+aikido.4"},{"fixed":"6.10.1+aikido.8"},{"fixed":"6.10.1+aikido.9"},{"fixed":"6.6.0+aikido.15"},{"fixed":"6.10.1+aikido.10"},{"fixed":"6.11.0+aikido.5"},{"fixed":"6.12.0+aikido.6"},{"fixed":"6.10.2+aikido.5"},{"fixed":"6.12.1+aikido.5"},{"fixed":"6.12.2+aikido.5"}]}],"database_specific":{"root_patched":true,"total_fixed_versions":39,"upstream_version":"6.11.0","all_fixed_versions":["6.6.0+aikido.10","6.10.1+aikido.4","6.10.1+aikido.5","6.10.2+aikido.1","6.6.0+aikido.11","6.11.0+aikido.1","6.12.0+aikido.1","6.12.1+aikido.1","6.12.2+aikido.1","6.11.0+aikido.2","6.6.0+aikido.12","6.10.2+aikido.2","6.12.1+aikido.2","6.10.1+aikido.6","6.12.1+aikido.3","6.12.0+aikido.2","6.10.1+aikido.7","6.12.0+aikido.3","6.10.2+aikido.3","6.11.0+aikido.3","6.12.2+aikido.2","6.12.1+aikido.4","6.6.0+aikido.13","6.12.0+aikido.4","6.12.2+aikido.3","6.11.0+aikido.4","6.12.0+aikido.5","6.6.0+aikido.14","6.10.2+aikido.4","6.12.2+aikido.4","6.10.1+aikido.8","6.10.1+aikido.9","6.6.0+aikido.15","6.10.1+aikido.10","6.11.0+aikido.5","6.12.0+aikido.6","6.10.2+aikido.5","6.12.1+aikido.5","6.12.2+aikido.5"],"source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-54531.json","root_patch_version":"aikido.5"}},{"package":{"name":"rootio-pypdf","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0+root.io.10"},{"fixed":"6.10.1+root.io.4"},{"fixed":"6.10.1+root.io.5"},{"fixed":"6.10.2+root.io.1"},{"fixed":"6.6.0+root.io.11"},{"fixed":"6.11.0+root.io.1"},{"fixed":"6.12.0+root.io.1"},{"fixed":"6.12.1+root.io.1"},{"fixed":"6.12.2+root.io.1"},{"fixed":"6.11.0+root.io.2"}]}],"database_specific":{"all_fixed_versions":["6.6.0+root.io.10","6.10.1+root.io.4","6.10.1+root.io.5","6.10.2+root.io.1","6.6.0+root.io.11","6.11.0+root.io.1","6.12.0+root.io.1","6.12.1+root.io.1","6.12.2+root.io.1","6.11.0+root.io.2"],"root_patch_version":"root.io.2","root_patched":true,"total_fixed_versions":10,"upstream_version":"6.11.0","source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-54531.json"}}],"schema_version":"1.9.0"}