{"action":"Upgrade pypdf2 to 1.27.5 or later.","affected":[{"fixed":"1.27.5","introduced":"0"}],"component":"pypdf2","cve_ids":["CVE-2022-24859"],"ecosystem":"PyPI","epss":0.01328,"exploited":false,"fixed_versions":["1.27.5"],"ghsa_id":"GHSA-xcjx-m2pj-8g79","id":"tcs_01M5KGGEPH3GMD4K94S9SY7AN5","modified_at":"2023-11-08T04:08:38.867416Z","published_at":"2022-04-18T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-194","https://github.com/py-pdf/PyPDF2/security/advisories/GHSA-xcjx-m2pj-8g79","https://github.com/py-pdf/PyPDF2/pull/740","https://github.com/py-pdf/PyPDF2/issues/329","https://github.com/py-pdf/PyPDF2/releases/tag/1.27.5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-194","url":"https://osv.dev/vulnerability/PYSEC-2022-194"}],"summary":"PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can cr"}