{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T14:37:29.537Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T14:36:19.763Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:urllib3","slug":"urllib3-fa68f32c","identity":"pypi:urllib3","ecosystem":"pypi","name":"urllib3","label":"urllib3","category":null,"aiRelevant":false,"provider":null,"repositoryCount":16,"occurrenceCount":19,"directRepositoryCount":0,"versionCount":7,"licenseExpressions":["MIT"],"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-mf9v-mfxr-j63j","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc"],"advisoryCount":7,"verifiedAttestation":true,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["2.7.0"],"evidenceCount":2},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["2.5.0","2.6.3"],"evidenceCount":2},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["2.4.0"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["2.2.3"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["2.6.3"],"evidenceCount":1},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["2.4.0"],"evidenceCount":1},{"id":"opencode:3608","slug":"opencode-3608","name":"AI","pathWithNamespace":"iqsh/collaboration-online-board/ai","versions":["2.2.2"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["2.4.0"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["2.3.0"],"evidenceCount":1},{"id":"opencode:5201","slug":"opencode-5201","name":"photovoltaic_systems","pathWithNamespace":"uba-ki-lab/photovoltaic_systems","versions":["2.4.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["2.6.3"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:7788","slug":"opencode-7788","name":"Workshop Green LLM Usage","pathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","versions":["2.5.0"],"evidenceCount":1}],"versions":[{"version":"2.2.2","repositoryCount":1,"occurrenceCount":1,"ageDays":763,"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-06-17T13:40:07Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc","PYSEC-2026-141","PYSEC-2026-1994","PYSEC-2026-1996","PYSEC-2026-1997","PYSEC-2026-1998","PYSEC-2026-1999"],"links":[{"label":"DOCUMENTATION","url":"https://urllib3.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/urllib3/urllib3/issues"},{"label":"SOURCE_REPO","url":"https://github.com/urllib3/urllib3"}],"relatedProjects":[{"id":"github.com/urllib3/urllib3","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"2.2.3","repositoryCount":1,"occurrenceCount":1,"ageDays":676,"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-09-12T10:52:16Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc","PYSEC-2026-141","PYSEC-2026-1994","PYSEC-2026-1996","PYSEC-2026-1997","PYSEC-2026-1998","PYSEC-2026-1999"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/urllib3/urllib3"},{"label":"DOCUMENTATION","url":"https://urllib3.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/urllib3/urllib3/issues"}],"relatedProjects":[{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"2.3.0","repositoryCount":1,"occurrenceCount":1,"ageDays":575,"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-12-22T07:47:28Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc","PYSEC-2026-141","PYSEC-2026-1994","PYSEC-2026-1996","PYSEC-2026-1997","PYSEC-2026-1998","PYSEC-2026-1999"],"links":[{"label":"DOCUMENTATION","url":"https://urllib3.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/urllib3/urllib3/issues"},{"label":"SOURCE_REPO","url":"https://github.com/urllib3/urllib3"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/urllib3/2.3.0/urllib3-2.3.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/urllib3/urllib3","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/urllib3/2.3.0/urllib3-2.3.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/urllib3/urllib3","commit":"2f68c5363ef632d73dd4d9300289d7ce5ff275b4"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"2.4.0","repositoryCount":4,"occurrenceCount":5,"ageDays":465,"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-04-10T15:23:37Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-48p4-8xcf-vxj5","GHSA-gm62-xv2j-4w53","GHSA-pq67-6m6q-mj2v","GHSA-qccp-gfcp-xxvc","PYSEC-2026-141","PYSEC-2026-1994","PYSEC-2026-1996","PYSEC-2026-1997","PYSEC-2026-1998","PYSEC-2026-1999"],"links":[{"label":"DOCUMENTATION","url":"https://urllib3.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/urllib3/urllib3/issues"},{"label":"SOURCE_REPO","url":"https://github.com/urllib3/urllib3"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/urllib3/2.4.0/urllib3-2.4.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/urllib3/urllib3","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/urllib3/2.4.0/urllib3-2.4.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/urllib3/urllib3","commit":"a5ff7ac3bbb8659e2ec3ed41dd43889f06a7d7bc"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"2.5.0","repositoryCount":6,"occurrenceCount":6,"ageDays":397,"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-gm62-xv2j-4w53","GHSA-qccp-gfcp-xxvc"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-06-18T14:07:40Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-gm62-xv2j-4w53","GHSA-qccp-gfcp-xxvc","PYSEC-2026-141","PYSEC-2026-1994","PYSEC-2026-1996","PYSEC-2026-1998"],"links":[{"label":"DOCUMENTATION","url":"https://urllib3.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/urllib3/urllib3/issues"},{"label":"SOURCE_REPO","url":"https://github.com/urllib3/urllib3"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/urllib3/2.5.0/urllib3-2.5.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/urllib3/urllib3","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/urllib3/2.5.0/urllib3-2.5.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/urllib3/urllib3","commit":"aaab4eccc10c965897540b21e15f11859d0b62e7"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"2.6.3","repositoryCount":3,"occurrenceCount":3,"ageDays":193,"advisoryIds":["GHSA-mf9v-mfxr-j63j","GHSA-qccp-gfcp-xxvc"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-01-07T16:24:42Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":["GHSA-mf9v-mfxr-j63j","GHSA-qccp-gfcp-xxvc","PYSEC-2026-141","PYSEC-2026-142"],"links":[{"label":"DOCUMENTATION","url":"https://urllib3.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/urllib3/urllib3/issues"},{"label":"SOURCE_REPO","url":"https://github.com/urllib3/urllib3"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/urllib3/2.6.3/urllib3-2.6.3-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/urllib3/urllib3","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/urllib3/2.6.3/urllib3-2.6.3-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/urllib3/urllib3","commit":"0248277dd7ac0239204889ca991353ad3e3a1ddc"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"2.7.0","repositoryCount":1,"occurrenceCount":2,"ageDays":73,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-05-07T16:13:17Z","deprecated":false,"deprecatedReason":null,"licenses":["MIT"],"advisoryIds":[],"links":[{"label":"DOCUMENTATION","url":"https://urllib3.readthedocs.io/"},{"label":"ISSUE_TRACKER","url":"https://github.com/urllib3/urllib3/issues"},{"label":"SOURCE_REPO","url":"https://github.com/urllib3/urllib3"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/urllib3/2.7.0/urllib3-2.7.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/urllib3/urllib3","relationType":"ISSUE_TRACKER","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/urllib3/urllib3","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/urllib3/2.7.0/urllib3-2.7.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/urllib3/urllib3","commit":"9a950b92d999f906b6020bb2d1076ee56cddd5d2"}],"verifiedAttestation":true,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:665adfe2efafa167397b7c55","repositoryId":"opencode:3608","repositorySlug":"opencode-3608","repositoryName":"AI","repositoryPathWithNamespace":"iqsh/collaboration-online-board/ai","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.2.2","versionKey":"pypi:urllib3@2.2.2","direct":null,"development":null,"sourceKind":"spdx-yaml","filePath":"SPDX_v2.0.0.yml","blobSha":"e9e46566a2217346214d08f9dede99d8821b3c68","sourceUrl":"https://gitlab.opencode.de/iqsh/collaboration-online-board/ai/-/blob/7cc4cbe5064bc5ede2426caf6981c5e9d0509327/SPDX_v2.0.0.yml","commitSha":"7cc4cbe5064bc5ede2426caf6981c5e9d0509327"},{"id":"component:be4c690a2902cc04b360ed5c","repositoryId":"opencode:8742","repositorySlug":"opencode-8742","repositoryName":"ai-websearch-benchmark","repositoryPathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.6.3","versionKey":"pypi:urllib3@2.6.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"4f7b4e2e096e186e4408b529568676aa8c71ba55","sourceUrl":"https://gitlab.opencode.de/datenlabor-bmz/ai-websearch-benchmark/-/blob/cd6b854b1b400d7e45796aaa22bded8183642916/uv.lock","commitSha":"cd6b854b1b400d7e45796aaa22bded8183642916"},{"id":"component:a13be29b602e082e8fd9d0aa","repositoryId":"opencode:7674","repositorySlug":"opencode-7674","repositoryName":"Coding Agent Usage Simulation","repositoryPathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.5.0","versionKey":"pypi:urllib3@2.5.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b1464cf01496db34285bf91f7841aed50559816","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/coding-agent-usage-simulation/-/blob/fe8ab81af4926a34c6cf1f3a807ffeda2b398f32/uv.lock","commitSha":"fe8ab81af4926a34c6cf1f3a807ffeda2b398f32"},{"id":"component:737c82bb8b229d744469d730","repositoryId":"opencode:6174","repositorySlug":"opencode-6174","repositoryName":"Energieautarkes Wohnquartier - Backend","repositoryPathWithNamespace":"energieautarkes-wohnquartier/backend","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.4.0","versionKey":"pypi:urllib3@2.4.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","sourceUrl":"https://gitlab.opencode.de/energieautarkes-wohnquartier/backend/-/blob/fc7e24cd546449ac9fdee4ad78aab861e0c89666/poetry.lock","commitSha":"fc7e24cd546449ac9fdee4ad78aab861e0c89666"},{"id":"component:2d8f327bbfc5ecf955f49bb4","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.5.0","versionKey":"pypi:urllib3@2.5.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:fcdfc2716b02c5b83ada67c7","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.2.3","versionKey":"pypi:urllib3@2.2.3","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:b7f93bb33da39ca85f2720b7","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.5.0","versionKey":"pypi:urllib3@2.5.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:06210b74b310b2532b26937a","repositoryId":"opencode:5012","repositorySlug":"opencode-5012","repositoryName":"LLM Testframework","repositoryPathWithNamespace":"uba-ki-lab/llm-testframework","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.4.0","versionKey":"pypi:urllib3@2.4.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"b4c29eab16a40db016821e4ea567956048a046ea","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-testframework/-/blob/e8d6e99a1fa63b264e727acb553ed9b1499789b1/uv.lock","commitSha":"e8d6e99a1fa63b264e727acb553ed9b1499789b1"},{"id":"component:7d8f00ca608d534b5f425118","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.7.0","versionKey":"pypi:urllib3@2.7.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"36b26ae58598809148cf87cffcc3b67380e8b928","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-assistant-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:16b3fd055aac2b7833807f34","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.7.0","versionKey":"pypi:urllib3@2.7.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-core-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:35c31fd57c7ce24f91e7895b","repositoryId":"opencode:4112","repositorySlug":"opencode-4112","repositoryName":"Objection management","repositoryPathWithNamespace":"uba-ki-lab/objection-management","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.3.0","versionKey":"pypi:urllib3@2.3.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"8515db65670904208e99397a2d7878af759c74f3","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/objection-management/-/blob/5c1425bf9990cf12c5ae8ada47d249710703af18/uv.lock","commitSha":"5c1425bf9990cf12c5ae8ada47d249710703af18"},{"id":"component:d8cf44ba167faa4a07eec9e5","repositoryId":"opencode:5201","repositorySlug":"opencode-5201","repositoryName":"photovoltaic_systems","repositoryPathWithNamespace":"uba-ki-lab/photovoltaic_systems","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.4.0","versionKey":"pypi:urllib3@2.4.0","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/photovoltaic_systems/-/blob/d0ec9137f2985f323b9aad141d83c47d14c64cce/sbom.json","commitSha":"d0ec9137f2985f323b9aad141d83c47d14c64cce"},{"id":"component:e9c43d18d9c77f252edd74fa","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.6.3","versionKey":"pypi:urllib3@2.6.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:dbf46c8b9ecf3e0b445bb2b3","repositoryId":"opencode:7811","repositorySlug":"opencode-7811","repositoryName":"Retrieval Evaluation","repositoryPathWithNamespace":"uba-ki-lab/retrieval-evaluation","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.5.0","versionKey":"pypi:urllib3@2.5.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"20c0181bf785c3e980512ba2de16e0fe3f207bad","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/retrieval-evaluation/-/blob/f64bf528432908908d92b8263d6933301033bb7f/uv.lock","commitSha":"f64bf528432908908d92b8263d6933301033bb7f"},{"id":"component:14d1ffdf1b5669dccb88c754","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.5.0","versionKey":"pypi:urllib3@2.5.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","blobSha":"40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/blp_streamlit_pipeline/src/ext/streamlit-draw-image-mask/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:aac6950e6056d18c95994641","repositoryId":"opencode:10162","repositorySlug":"opencode-10162","repositoryName":"SmartPlanAI Anwendung","repositoryPathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.6.3","versionKey":"pypi:urllib3@2.6.3","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"6b17710ca48cf83827a909c320d60853c75d7960","sourceUrl":"https://gitlab.opencode.de/sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung/-/blob/1d70807d48a8fae19711b10422c3417ab5d05d0f/poetry.lock","commitSha":"1d70807d48a8fae19711b10422c3417ab5d05d0f"},{"id":"component:4aaaf4abffd34fcce7fb8331","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.4.0","versionKey":"pypi:urllib3@2.4.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"681193f56a8b37b97336b2682fc1147ac3bdab1f","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/poetry.lock","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"},{"id":"component:59420a715ca7b5ce91ed606e","repositoryId":"opencode:5142","repositorySlug":"opencode-5142","repositoryName":"strahlenexposition","repositoryPathWithNamespace":"uba-ki-lab/strahlenexposition","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.4.0","versionKey":"pypi:urllib3@2.4.0","direct":null,"development":null,"sourceKind":"sbom-json","filePath":"sbom.json","blobSha":"bce3149701e5462f1af80e9221c0e2967402d606","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/strahlenexposition/-/blob/1dd9cd8ca823a7998b729adce6957848cf241d54/sbom.json","commitSha":"1dd9cd8ca823a7998b729adce6957848cf241d54"},{"id":"component:7ac09dae56cfca7190f0af95","repositoryId":"opencode:7788","repositorySlug":"opencode-7788","repositoryName":"Workshop Green LLM Usage","repositoryPathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","ecosystem":"pypi","name":"urllib3","identity":"pypi:urllib3","version":"2.5.0","versionKey":"pypi:urllib3@2.5.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"bf2ad06a6324960d4a6a7a91340009e907848d0a","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/workshop-green-llm-usage/-/blob/d72ec94b58729e8b5e32caa9484867ec13add189/uv.lock","commitSha":"d72ec94b58729e8b5e32caa9484867ec13add189"}],"occurrenceCount":19},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["2.7.0"],"evidenceCount":2},{"id":"opencode:10162","slug":"opencode-10162","name":"SmartPlanAI Anwendung","pathWithNamespace":"sh/digitalhub-sh/landesprogramm-offene-innovationen/ki-bauleitplaene/smartplanai-anwendung","versions":["2.5.0","2.6.3"],"evidenceCount":2},{"id":"opencode:5142","slug":"opencode-5142","name":"strahlenexposition","pathWithNamespace":"uba-ki-lab/strahlenexposition","versions":["2.4.0"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["2.2.3"],"evidenceCount":1},{"id":"opencode:8742","slug":"opencode-8742","name":"ai-websearch-benchmark","pathWithNamespace":"datenlabor-bmz/ai-websearch-benchmark","versions":["2.6.3"],"evidenceCount":1},{"id":"opencode:6174","slug":"opencode-6174","name":"Energieautarkes Wohnquartier - Backend","pathWithNamespace":"energieautarkes-wohnquartier/backend","versions":["2.4.0"],"evidenceCount":1},{"id":"opencode:3608","slug":"opencode-3608","name":"AI","pathWithNamespace":"iqsh/collaboration-online-board/ai","versions":["2.2.2"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["2.4.0"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["2.3.0"],"evidenceCount":1},{"id":"opencode:5201","slug":"opencode-5201","name":"photovoltaic_systems","pathWithNamespace":"uba-ki-lab/photovoltaic_systems","versions":["2.4.0"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["2.6.3"],"evidenceCount":1},{"id":"opencode:7811","slug":"opencode-7811","name":"Retrieval Evaluation","pathWithNamespace":"uba-ki-lab/retrieval-evaluation","versions":["2.5.0"],"evidenceCount":1},{"id":"opencode:7788","slug":"opencode-7788","name":"Workshop Green LLM Usage","pathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","versions":["2.5.0"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-2xpw-w6gg-jr37","slug":"ghsa-2xpw-w6gg-jr37-91cead57","dossier":true,"summary":"urllib3 streaming API improperly handles highly compressed data","aliases":["CVE-2025-66471","PYSEC-2026-1994"],"sourceIds":["GHSA-2xpw-w6gg-jr37","PYSEC-2026-1994"],"published":"2025-12-05T18:15:54Z","modified":"2026-07-07T17:56:33.872074196Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2xpw-w6gg-jr37"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-38jv-5279-wg99","slug":"ghsa-38jv-5279-wg99-c9df8f7b","dossier":true,"summary":"Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)","aliases":["CVE-2026-21441","PYSEC-2026-1996"],"sourceIds":["GHSA-38jv-5279-wg99","PYSEC-2026-1996"],"published":"2026-01-07T19:18:14Z","modified":"2026-07-07T17:56:31.346111893Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-38jv-5279-wg99"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-48p4-8xcf-vxj5","slug":"ghsa-48p4-8xcf-vxj5-13f12656","dossier":false,"summary":"urllib3 does not control redirects in browsers and Node.js","aliases":["CVE-2025-50182","PYSEC-2026-1997"],"sourceIds":["GHSA-48p4-8xcf-vxj5","PYSEC-2026-1997"],"published":"2025-06-18T17:50:11Z","modified":"2026-07-07T17:57:08.881416805Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50182"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"WEB","url":"https://github.com/urllib3/urllib3/releases/tag/2.5.0"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-48p4-8xcf-vxj5"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0"],"packageCount":1,"repositoryCount":7},{"id":"GHSA-gm62-xv2j-4w53","slug":"ghsa-gm62-xv2j-4w53-5befa184","dossier":true,"summary":"urllib3 allows an unbounded number of links in the decompression chain","aliases":["CVE-2025-66418","PYSEC-2026-1998"],"sourceIds":["GHSA-gm62-xv2j-4w53","PYSEC-2026-1998"],"published":"2025-12-05T18:15:19Z","modified":"2026-07-07T17:57:28.931610368Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gm62-xv2j-4w53"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-mf9v-mfxr-j63j","slug":"ghsa-mf9v-mfxr-j63j-1a7db6d4","dossier":false,"summary":"urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API","aliases":["CVE-2026-44432","PYSEC-2026-142"],"sourceIds":["GHSA-mf9v-mfxr-j63j","PYSEC-2026-142"],"published":"2026-05-11T14:51:45Z","modified":"2026-06-08T20:00:12.284378628Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44432"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2026-142.yaml"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"}],"versionKeys":["pypi:urllib3@2.6.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-pq67-6m6q-mj2v","slug":"ghsa-pq67-6m6q-mj2v-3522d1d4","dossier":false,"summary":"urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation","aliases":["CVE-2025-50181","PYSEC-2026-1999"],"sourceIds":["GHSA-pq67-6m6q-mj2v","PYSEC-2026-1999"],"published":"2025-06-18T17:50:00Z","modified":"2026-07-07T17:56:41.872294653Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181"},{"type":"FIX","url":"https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"},{"type":"WEB","url":"https://github.com/urllib3/urllib3/releases/tag/2.5.0"},{"type":"PACKAGE","url":"https://pypi.org/project/urllib3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-pq67-6m6q-mj2v"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0"],"packageCount":1,"repositoryCount":7},{"id":"GHSA-qccp-gfcp-xxvc","slug":"ghsa-qccp-gfcp-xxvc-0d988969","dossier":true,"summary":"urllib3: Sensitive headers forwarded across origins in proxied low-level redirects","aliases":["CVE-2026-44431","PYSEC-2026-141"],"sourceIds":["GHSA-qccp-gfcp-xxvc","PYSEC-2026-141"],"published":"2026-05-11T14:51:20Z","modified":"2026-05-20T09:19:20.983812Z","checkedAt":"2026-07-20T14:37:29.537Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},{"type":"PACKAGE","url":"https://github.com/urllib3/urllib3"}],"versionKeys":["pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0","pypi:urllib3@2.6.3"],"packageCount":1,"repositoryCount":15}]}}