{"metadata": {"vulnerability": "cve-2026-102995", "count": 24, "kinds": {"milestone": 9, "sighting": 2, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-09-29T20:46:08.334Z", "date_only": false, "value": "2026-09-29T20:46:08.334Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-102995", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-30T20:01:43.354Z", "date_only": false, "value": "2026-09-30T20:01:43.354Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-102995", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-30T20:01:43.354Z", "date_only": false, "value": "2026-09-30T20:01:43.354Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-102995", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T21:17:00Z", "date_only": false, "value": "2026-09-30T21:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-102995", "record": "UBUNTU-CVE-2026-102995", "field": "published"}, {"timestamp": "2026-09-30T21:17:06Z", "date_only": false, "value": "2026-09-30T21:17:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FP3H-C4FM-7VVF", "record": "GHSA-FP3H-C4FM-7VVF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-30T21:17:06.713Z", "date_only": false, "value": "2026-09-30T21:17:06.713", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102995", "record": "FKIE_CVE-2026-102995", "field": "published"}, {"timestamp": "2026-10-01T15:06:04Z", "date_only": false, "value": "2026-10-01T15:06:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FP3H-C4FM-7VVF", "record": "GHSA-FP3H-C4FM-7VVF", "field": "published"}, {"timestamp": "2026-10-01T15:06:04Z", "date_only": false, "value": "2026-10-01T15:06:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FP3H-C4FM-7VVF", "record": "GHSA-FP3H-C4FM-7VVF", "field": "modified"}, {"timestamp": "2026-10-01T16:38:41.774Z", "date_only": false, "value": "2026-10-01T16:38:41.774257Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-4154", "record": "PYSEC-2026-4154", "field": "published"}, {"timestamp": "2026-10-01T17:10:41.825Z", "date_only": false, "value": "2026-10-01T17:10:41.825581Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-4154", "record": "PYSEC-2026-4154", "field": "modified"}, {"timestamp": "2026-10-01T18:50:23.022Z", "date_only": false, "value": "2026-10-01T18:50:23.022437Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-102995", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-01T18:50:23.022Z", "date_only": false, "value": "2026-10-01T18:50:23.022437Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102995", "record": "FKIE_CVE-2026-102995", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-01T18:50:37.942Z", "date_only": false, "value": "2026-10-01T18:50:37.942Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-102995", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-01T18:50:37.942Z", "date_only": false, "value": "2026-10-01T18:50:37.942Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-102995", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-02T10:30:41Z", "date_only": false, "value": "2026-10-02T10:30:41Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PDFLY-CVE-2026-102995", "record": "BREW-PDFLY-CVE-2026-102995", "field": "published"}, {"timestamp": "2026-10-02T10:47:53Z", "date_only": false, "value": "2026-10-02T10:47:53Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PSUTILS-CVE-2026-102995", "record": "BREW-PSUTILS-CVE-2026-102995", "field": "published"}, {"timestamp": "2026-10-02T11:00:21Z", "date_only": false, "value": "2026-10-02T11:00:21Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PDFALYZER-CVE-2026-102995", "record": "BREW-PDFALYZER-CVE-2026-102995", "field": "published"}, {"timestamp": "2026-10-02T11:00:21Z", "date_only": false, "value": "2026-10-02T11:00:21Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PDFALYZER-CVE-2026-102995", "record": "BREW-PDFALYZER-CVE-2026-102995", "field": "modified"}, {"timestamp": "2026-10-04T12:54:40Z", "date_only": false, "value": "2026-10-04T12:54:40Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PSUTILS-CVE-2026-102995", "record": "BREW-PSUTILS-CVE-2026-102995", "field": "modified"}, {"timestamp": "2026-10-05T15:23:15.717Z", "date_only": false, "value": "2026-10-05T15:23:15.717", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-102995", "record": "FKIE_CVE-2026-102995", "field": "lastModified"}, {"timestamp": "2026-10-05T17:10:07Z", "date_only": false, "value": "2026-10-05T17:10:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3447", "record": "CVE-2026-102995", "field": "creation_timestamp", "uuid": "9081c8bf-5c6a-4639-8f36-aadbef666cdd", "content": "\ud83d\udd34 CVE-2026-102995\n\npypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/_cmap.py parse_bfchar to decode and retain oversized values during operations such as text extraction and consume excessive memory. This is a second follow-up to earlier /ToUnicode resource-consumption fixes and is limited to the remaining token-length path. This issue is fixed in version 6.18.1.", "url": "https://t.me/pphm_HackerNews/3447"}, {"timestamp": "2026-10-06T17:07:07.128Z", "date_only": false, "value": "2026-10-06T17:07:07.128331Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx7w5mzgmc27", "record": "CVE-2026-102995", "field": "creation_timestamp", "uuid": "e1e5cc79-f008-4c03-b8d2-3b0758a089a8", "content": "\ud83d\udccc CVE-2026-102995 - pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string to... https://www.cyberhub.blog/cves/CVE-2026-102995", "url": "https://bsky.app/profile/cyberhub.blog/post/3mx7w5mzgmc27"}, {"timestamp": "2026-10-08T09:54:46Z", "date_only": false, "value": "2026-10-08T09:54:46Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-102995", "record": "UBUNTU-CVE-2026-102995", "field": "modified"}, {"timestamp": "2026-10-13T09:45:11Z", "date_only": false, "value": "2026-10-13T09:45:11Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PDFLY-CVE-2026-102995", "record": "BREW-PDFLY-CVE-2026-102995", "field": "modified"}]}