From 2848407ebc9adfe3b8938d1f869446acf1e7c1c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sat, 28 Mar 2026 17:47:37 -0700
Subject: [PATCH 1/2] python3Packages.pypdf2: mark insecure

---
 pkgs/development/python-modules/pypdf2/default.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkgs/development/python-modules/pypdf2/default.nix b/pkgs/development/python-modules/pypdf2/default.nix
index 1fbf80ad74c6..9cf70b3b9bb2 100644
--- a/pkgs/development/python-modules/pypdf2/default.nix
+++ b/pkgs/development/python-modules/pypdf2/default.nix
@@ -29,5 +29,13 @@ buildPythonPackage rec {
     homepage = "https://pypdf2.readthedocs.io/";
     changelog = "https://github.com/py-pdf/PyPDF2/raw/${version}/CHANGELOG.md";
     license = lib.licenses.bsd3;
+    knownVulnerabilities = [
+      "CVE-2026-27024"
+      "CVE-2026-27025"
+      "CVE-2026-27628"
+      "CVE-2026-27888"
+      "CVE-2026-28351"
+      "CVE-2026-33699"
+    ];
   };
 }

From fa11f9309e018341d8d59ab013553751b0d9f7f9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sat, 28 Mar 2026 17:48:01 -0700
Subject: [PATCH 2/2] python3Packages.pypdf3: mark insecure

---
 pkgs/development/python-modules/pypdf3/default.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkgs/development/python-modules/pypdf3/default.nix b/pkgs/development/python-modules/pypdf3/default.nix
index 2b44c409778e..9e4305c4b231 100644
--- a/pkgs/development/python-modules/pypdf3/default.nix
+++ b/pkgs/development/python-modules/pypdf3/default.nix
@@ -32,5 +32,13 @@ buildPythonPackage (finalAttrs: {
     homepage = "https://github.com/sfneal/PyPDF3";
     license = lib.licenses.bsd3;
     maintainers = with lib.maintainers; [ ambroisie ];
+    knownVulnerabilities = [
+      "CVE-2026-27024"
+      "CVE-2026-27025"
+      "CVE-2026-27628"
+      "CVE-2026-27888"
+      "CVE-2026-28351"
+      "CVE-2026-33699"
+    ];
   };
 })