{"id":"ECHO-a89e-cd54-99ff","upstream":["CVE-2026-40260","GHSA-3crg-w4f6-42mx"],"severity":[],"modified":"2026-08-07T00:00:25.822Z","affected":[{"package":{"ecosystem":"Echo:PyPi","name":"pypdf","purl":"pkg:pypi/pypdf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10.0"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-40260"},{"type":"WEB","url":"https://github.com/advisories/GHSA-3crg-w4f6-42mx"}]}