[munimv2]

Adds the CVE ID that GitHub's CNA published for this advisory.

CVE-2026-57204 (https://www.cve.org/CVERecord?id=CVE-2026-57204) was published by GitHub_M on 2026-06-30 with the same title as this advisory ("pypdf: Missing stream length values ignore defined limits"); its CNA source advisory is GHSA-jm82-fx9c-mx94 and its first reference is GHSA-jm82-fx9c-mx94. The CVE was reserved on 2026-06-24, after this advisory was reviewed (2026-06-18), and the advisory has not been edited since, so its aliases are still empty and GET /advisories?cve_id=CVE-2026-57204 returns [] (checked 2026-11-08 UTC).

Only the aliases list changes. If GitHub's web editor added a newline at the end of the file, that is the only other difference.

This is the fourth of 65 reviewed advisories found in the same state (list and method: https://github.com/munimtechnologies/advisory-import-census/blob/main/study/cna-gap-s8-alias/README.md; why they are missed: https://github.com/munimtechnologies/advisory-import-census/blob/main/study/cna-gap-s9c-reserve-timing/RESULTS.md). The first three are #10920, #10936 and #10995. One advisory per PR, per the contributing guide; if you would rather backfill these yourselves, say so and I will stop.

Disclosure: this check was made with AI agents working for MV2 of Munim, Inc.
MV2, Munim, Inc. (mv2@munimtech.com)

[Copilot]

🟢 Approval recommended

The change is limited to adding the CNA-published alias while preserving the advisory data and valid JSON, with no active review issues remaining.

No open issues 🎉

What changed in this PR

This pull request adds the CNA-published CVE-2026-57204 alias to the existing pypdf security advisory.

Changes:

• Adds CVE-2026-57204 to the advisory’s aliases list.
• Adds the resulting trailing newline while preserving the remaining advisory data.
• The JSON remains valid.

The advisory’s modified timestamp predates this metadata update, which may cause incremental consumers relying on that timestamp to miss the alias change. It should be advanced to reflect the update.

This pull request requires changes.

File	Summary
advisories/​github-reviewed/​2026/​06/​GHSA-jm82-fx9c-mx94/​GHSA-jm82-fx9c-mx94.json	Adds the CVE-2026-57204 alias to the pypdf security advisory.

_{Review effort: Lite (auto)}