{"id":"ECHO-a89e-cd54-99ff","modified":"2026-08-07T00:48:31.264993613Z","published":"2026-08-07T00:00:25.822Z","upstream":["CVE-2026-40260","GHSA-3crg-w4f6-42mx"],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-40260"},{"type":"WEB","url":"https://github.com/advisories/GHSA-3crg-w4f6-42mx"}],"affected":[{"package":{"name":"pypdf","ecosystem":"Echo:PyPi","purl":"pkg:pypi/pypdf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10.0"}]}],"database_specific":{"source":"https://advisory.echohq.com/osv/ECHO-a89e-cd54-99ff.json"}}],"schema_version":"1.8.0"}