SBOM for bankrecon 0.5.1

CLI local para conciliacion bancaria (Chile-first) con auditoria y enfoque fail-closed.

CycloneDX PEP 740 attested 18 known vulnerabilities

Package information

Author
Conciliador Bancario Contributors
License
MIT License Copyright (c) 2026 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Requires Python
>=3.11
PyPI
bankrecon 0.5.1
Changelog
https://github.com/cortega26/conciliador_bancario/blob/main/CHANGELOG.md
Homepage
https://tooltician.com
Issues
https://github.com/cortega26/conciliador_bancario/issues
Repository
https://github.com/cortega26/conciliador_bancario

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

bankrecon-0.5.1-py3-none-any.whl

Attested
Publisher: GitHub Source: cortega26/conciliador_bancario Workflow: publish.yml
Valid
bankrecon.cdx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 18 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
CVE-2026-115572
pypdf: Possible long runtimes for repeated references to the same missing object
High 7.1 pypdf 6.19.0
PyPI
6.21.2
CVE-2026-115580
pypdf: Possible long runtimes for large xref table header limits
High 7.1 pypdf 6.19.0
PyPI
6.21.2
CVE-2026-115585
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
High 7.1 pypdf 6.19.0
PyPI
6.21.2
CVE-2026-119203
pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
High 7.1 pypdf 6.19.0
PyPI
6.21.4
CVE-2026-119204
pypdf has possible large memory usage when parsing page tree
High 7.1 pypdf 6.19.0
PyPI
6.21.4
CVE-2026-119205
pypdf has possible infinite loop when cloning dictionaries
High 7.1 pypdf 6.19.0
PyPI
6.21.4
CVE-2026-119206
pypdf has possible long runtimes when retrieving page labels
High 7.1 pypdf 6.19.0
PyPI
6.21.3
CVE-2026-119207
pypdf has possible large memory usage for exceptions in strict mode
High 7.1 pypdf 6.19.0
PyPI
6.21.3
CVE-2026-119208
pypdf has possible long runtimes/large memory usage for encrypted PDF files
High 7.1 pypdf 6.19.0
PyPI
6.21.3
CVE-2026-119209
pypdf has possible large memory usage when parsing cross-reference streams
High 7.1 pypdf 6.19.0
PyPI
6.21.3
CVE-2026-113789
pypdf: Possible long runtimes/large memory usage when retrieving form fields
Medium 6.0 pypdf 6.19.0
PyPI
6.21.0
CVE-2026-113790
pypdf: Possible large memory usage when parsing arrays and dictionaries
Medium 6.0 pypdf 6.19.0
PyPI
6.21.0
CVE-2026-113791
pypdf: Possible large memory usage when parsing content streams
Medium 6.0 pypdf 6.19.0
PyPI
6.21.0
CVE-2026-113792
pypdf: Possible infinite loop in PdfWriter.find_outline_item
Medium 6.0 pypdf 6.19.0
PyPI
6.20.1
CVE-2026-113793
pypdf: Possible infinite loop when removing tree items
Medium 6.0 pypdf 6.19.0
PyPI
6.20.1
CVE-2026-113794
pypdf: Possible infinite loop when hitting EOF in standard xref table
Medium 6.0 pypdf 6.19.0
PyPI
6.20.0
CVE-2026-113795
pypdf: Possible large memory usage for streams with multiple filters
Medium 6.0 pypdf 6.19.0
PyPI
6.20.0
CVE-2026-113786
pypdf: Unvalidated JPEG image data loading
Low 2.3 pypdf 6.19.0
PyPI
6.21.1

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]