# SBOM for bankrecon 0.5.1 > CLI local para conciliacion bancaria (Chile-first) con auditoria y enfoque fail-closed. The Python package bankrecon 0.5.1 ships 1 SBOM file (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/bankrecon@0.5.1` - PyPI: https://pypi.org/project/bankrecon/0.5.1/ - Author: Conciliador Bancario Contributors - License: MIT License Copyright (c) 2026 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Softwa… - Requires Python: \>=3.11 - Changelog: - Homepage: - Issues: - Repository: ## SBOMs ### bankrecon-0.5.1-py3-none-any.whl PEP 740 attestation verified (GitHub, cortega26/conciliador\_bancario, workflow publish.yml). - [bankrecon-0.5.1.dist-info/sboms/bankrecon.cdx.json](https://pypi.sbomify.com/artifact/62bb3198-20c5-52ef-884b-1862e07d20a8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 18 known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. | Vulnerability | Severity | Component | Fixed in | Summary | |---|---|---|---|---| | [CVE-2026-115572](https://insights.sbomify.com/CVE-2026-115572/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.2 | pypdf: Possible long runtimes for repeated references to the same missing object | | [CVE-2026-115580](https://insights.sbomify.com/CVE-2026-115580/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.2 | pypdf: Possible long runtimes for large xref table header limits | | [CVE-2026-115585](https://insights.sbomify.com/CVE-2026-115585/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.2 | pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) | | [CVE-2026-119203](https://insights.sbomify.com/CVE-2026-119203/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.4 | pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search | | [CVE-2026-119204](https://insights.sbomify.com/CVE-2026-119204/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.4 | pypdf has possible large memory usage when parsing page tree | | [CVE-2026-119205](https://insights.sbomify.com/CVE-2026-119205/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.4 | pypdf has possible infinite loop when cloning dictionaries | | [CVE-2026-119206](https://insights.sbomify.com/CVE-2026-119206/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.3 | pypdf has possible long runtimes when retrieving page labels | | [CVE-2026-119207](https://insights.sbomify.com/CVE-2026-119207/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.3 | pypdf has possible large memory usage for exceptions in strict mode | | [CVE-2026-119208](https://insights.sbomify.com/CVE-2026-119208/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.3 | pypdf has possible long runtimes/large memory usage for encrypted PDF files | | [CVE-2026-119209](https://insights.sbomify.com/CVE-2026-119209/) | high (7.1) | pypdf 6.19.0 (PyPI) | 6.21.3 | pypdf has possible large memory usage when parsing cross-reference streams | | [CVE-2026-113789](https://insights.sbomify.com/CVE-2026-113789/) | medium (6.0) | pypdf 6.19.0 (PyPI) | 6.21.0 | pypdf: Possible long runtimes/large memory usage when retrieving form fields | | [CVE-2026-113790](https://insights.sbomify.com/CVE-2026-113790/) | medium (6.0) | pypdf 6.19.0 (PyPI) | 6.21.0 | pypdf: Possible large memory usage when parsing arrays and dictionaries | | [CVE-2026-113791](https://insights.sbomify.com/CVE-2026-113791/) | medium (6.0) | pypdf 6.19.0 (PyPI) | 6.21.0 | pypdf: Possible large memory usage when parsing content streams | | [CVE-2026-113792](https://insights.sbomify.com/CVE-2026-113792/) | medium (6.0) | pypdf 6.19.0 (PyPI) | 6.20.1 | pypdf: Possible infinite loop in PdfWriter.find\_outline\_item | | [CVE-2026-113793](https://insights.sbomify.com/CVE-2026-113793/) | medium (6.0) | pypdf 6.19.0 (PyPI) | 6.20.1 | pypdf: Possible infinite loop when removing tree items | | [CVE-2026-113794](https://insights.sbomify.com/CVE-2026-113794/) | medium (6.0) | pypdf 6.19.0 (PyPI) | 6.20.0 | pypdf: Possible infinite loop when hitting EOF in standard xref table | | [CVE-2026-113795](https://insights.sbomify.com/CVE-2026-113795/) | medium (6.0) | pypdf 6.19.0 (PyPI) | 6.20.0 | pypdf: Possible large memory usage for streams with multiple filters | | [CVE-2026-113786](https://insights.sbomify.com/CVE-2026-113786/) | low (2.3) | pypdf 6.19.0 (PyPI) | 6.21.1 | pypdf: Unvalidated JPEG image data loading | ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/bankrecon@0.5.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/bankrecon/0.5.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/bankrecon/0.5.1