{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-09-16T04:45:26.395Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-09-16T04:44:00.147Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":43,"completeTreeCount":42,"incompleteTreeCount":1,"lockfileRepositoryCount":23,"sbomRepositoryCount":4,"artifactRepositoryCount":26,"resolvedRepositoryCount":40,"resolvedArtifactRepositoryCount":26,"dependencyFileCount":37,"parsedFileCount":36,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4116,"metadataResolvedCount":4105,"metadataNotFoundCount":11,"osvEvaluatedVersionCount":4116,"codeRadarRepositoryCount":43},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":43,"packageCount":2457,"aiPackageCount":50,"resolvedComponentCount":7121,"resolvedVersionCount":4116,"providerExposureRepositoryCount":9,"licenseExpressionCount":55,"knownLicensePackageCount":2423,"unknownLicensePackageCount":34,"advisoryCount":795,"matchedAdvisoryRepositoryCount":37,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":23,"repositoryShare":0.5348837209302325}},"kind":"repository","entity":{"id":"opencode:11300","slug":"opencode-11300","gitlabProjectId":11300,"name":"URBAN.KI UrbanShieldAI","pathWithNamespace":"vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai","description":null,"webUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai","commitSha":"a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1","commitUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai/-/commit/a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1","lastActivityAt":"2026-09-15T13:14:10.428Z","headCommittedAt":"2026-09-14T08:19:42.000Z","tree":{"complete":true,"entryCount":428,"truncated":false},"files":[{"path":"plattform/package-lock.json","kind":"npm-lock","blobSha":"143eff7a7534dd543bbec46e8e47fc0d57dec7dd","sourceUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai/-/blob/a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1/plattform/package-lock.json","commitSha":"a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1","contentSha256":"062123c83eb9900258389602ce39d3a959c135d599c2a266ad0415b8c5f4493c","byteCount":225981,"state":"parsed","componentCount":456}],"resolvedComponentCount":489,"artifactResolvedComponentCount":456,"exactManifestPinCount":33,"packageCount":451,"ecosystems":["npm","pypi"],"aiPackageCount":11,"licenseExpressionCount":12,"unknownLicensePackageCount":5,"advisoryIds":["GHSA-23c5-xmqv-rm74","GHSA-25h7-pfq9-p65f","GHSA-2883-xcg3-v3hh","GHSA-28wg-ghj8-5hjv","GHSA-29pf-2h5f-8g72","GHSA-2g4f-4pwh-qvx6","GHSA-2g6r-c272-w58r","GHSA-2j2x-hqr9-3h42","GHSA-2v37-7h3g-55p8","GHSA-2w69-qvjg-hvjx","GHSA-2wm9-hf6c-p5cr","GHSA-337j-9hxr-rhxg","GHSA-36p7-vc44-83pf","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-39q2-94rc-95cp","GHSA-3jxr-9vmj-r5cp","GHSA-3ppc-4f35-3m26","GHSA-3v7f-55p6-f55p","GHSA-48c2-rrv3-qjmp","GHSA-49rj-9fvp-4h2h","GHSA-4fh9-h7wg-q85m","GHSA-4w7r-h757-3r74","GHSA-4w7w-66w2-5vf9","GHSA-4x5r-pxfx-6jf8","GHSA-52cp-r559-cp3m","GHSA-53q9-r3pm-6pq6","GHSA-55q2-fjhq-7xh7","GHSA-59p9-h35m-wg4g","GHSA-5chr-fjjv-38qv","GHSA-5p4m-2wfm-xmqj","GHSA-67mh-4wv8-2f99","GHSA-67pg-wm7f-q7fj","GHSA-69w3-r845-3855","GHSA-6g55-p6wh-862q","GHSA-6qv9-48xg-fc7f","GHSA-6rvg-6v2m-4j46","GHSA-73wf-gq98-2v4g","GHSA-76mc-f452-cxcm","GHSA-7r86-cg39-jmmj","GHSA-7x6v-j9x4-qf24","GHSA-8646-j5j9-6r62","GHSA-887c-mr87-cxwp","GHSA-8v8x-cx79-35w7","GHSA-8x6r-g9mw-2r78","GHSA-926x-3r5x-gfhw","GHSA-9356-575x-2w9m","GHSA-93m4-6634-74q7","GHSA-95fx-jjr5-f39c","GHSA-9jcx-v3wj-wh4m","GHSA-9vjf-qc39-jprp","GHSA-c2c7-rcm5-vvqj","GHSA-c2j3-45gr-mqc4","GHSA-c678-jfcj-6jmf","GHSA-c67j-w6g6-q2cm","GHSA-c83g-rgw3-j3cx","GHSA-chx6-hx7r-mcp5","GHSA-cj63-jhhr-wcxv","GHSA-cjmm-f4jc-qw8r","GHSA-cjw8-79x6-5cj4","GHSA-cmwh-pvxp-8882","GHSA-crv5-9vww-q3g8","GHSA-f22v-gfqf-p8f3","GHSA-f4hp-rmr7-r7v8","GHSA-f4j7-r4q5-qw2c","GHSA-f886-m6hf-6m8v","GHSA-f8cm-6447-x5h2","GHSA-fgcw-684q-jj6r","GHSA-fpwr-67px-3qhx","GHSA-fx2h-pf6j-xcff","GHSA-fxqj-rqcc-2cmp","GHSA-g48c-2wqr-h844","GHSA-g4jq-h2w9-997c","GHSA-gvmj-g25r-r7wr","GHSA-h5cw-625j-3rxh","GHSA-h67p-54hq-rp68","GHSA-h7mw-gpvr-xq4m","GHSA-h8fp-f39c-q6mh","GHSA-h8r8-wccr-v5f2","GHSA-hpcv-96wg-7vj8","GHSA-hxxf-235m-72v3","GHSA-jjph-296x-mrcr","GHSA-jqfw-vq24-v9c3","GHSA-jw8x-6495-233v","GHSA-mh29-5h37-fv8m","GHSA-mh99-v99m-4gvg","GHSA-mw96-cpmx-2vgc","GHSA-p498-v437-472g","GHSA-p5xg-68wr-hm3m","GHSA-p9ff-h696-f583","GHSA-phhr-52qp-3mj4","GHSA-pjwx-r37v-7724","GHSA-pqxr-3g65-p328","GHSA-px8p-9vwx-vf98","GHSA-q2wp-rjmx-x6x9","GHSA-qfhq-4f3w-5fph","GHSA-qh6h-p6c9-ff54","GHSA-qq3j-4f4f-9583","GHSA-qwww-vcr4-c8h2","GHSA-qx2v-qp2m-jg93","GHSA-qxrp-vhvm-j765","GHSA-r28c-9q8g-f849","GHSA-r47g-fvhr-h676","GHSA-rcv9-qm8p-9p6j","GHSA-rf6f-7fwh-wjgh","GHSA-rgw5-rvv9-x895","GHSA-rp9w-3fw7-7cwq","GHSA-rrmf-rvhw-rf47","GHSA-rxv8-25v2-qmq8","GHSA-v2wj-7wpq-c8vv","GHSA-v6wh-96g9-6wx3","GHSA-v9jr-rg53-9pgp","GHSA-vgrw-7cvw-pwgx","GHSA-vm32-vv63-w422","GHSA-vxr8-fq34-vvx9","GHSA-w39p-vh2g-g8g5","GHSA-w8x4-x68c-m6fc","GHSA-wfv2-pwc8-crg5","GHSA-wrfc-pvp9-mr9g","GHSA-wrjc-x8rr-h8h6","GHSA-x3gm-94wq-g975","GHSA-x4vx-rjvf-j5p4","GHSA-xph7-9rjv-w5fr","GHSA-xrqw-3rrv-vx5w","GHSA-xwg4-73v4-xw9w","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2286"],"advisoryCount":147,"providers":[{"id":"ollama","label":"Ollama"},{"id":"hugging-face","label":"Hugging Face"}]},"evidence":{"files":[{"path":"asrp_dir/requirements.txt","kind":"exact-manifest-pin","sourceUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai/-/blob/a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1/asrp_dir/requirements.txt","commitSha":"a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1","blobSha":"1123e44ab8a9a3f12dc3c2b1022686f0d7d178c8","state":"parsed","componentCount":11},{"path":"plattform/package-lock.json","kind":"npm-lock","blobSha":"143eff7a7534dd543bbec46e8e47fc0d57dec7dd","sourceUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai/-/blob/a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1/plattform/package-lock.json","commitSha":"a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1","contentSha256":"062123c83eb9900258389602ce39d3a959c135d599c2a266ad0415b8c5f4493c","byteCount":225981,"state":"parsed","componentCount":456},{"path":"requirements-file/requirements-docker.txt","kind":"exact-manifest-pin","sourceUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai/-/blob/a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1/requirements-file/requirements-docker.txt","commitSha":"a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1","blobSha":"359fe79592e2869ec844c610b934f1c2e91d4842","state":"parsed","componentCount":11},{"path":"requirements-file/requirements.txt","kind":"exact-manifest-pin","sourceUrl":"https://gitlab.opencode.de/vernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai/-/blob/a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1/requirements-file/requirements.txt","commitSha":"a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1","blobSha":"d8eeaa4ce4a4e67cd4ee8a59e6cc6430b725b4d3","state":"parsed","componentCount":11}],"occurrenceCount":489},"related":{"packages":[{"id":"package:pypi:transformers","slug":"transformers-65289303","identity":"pypi:transformers","label":"Transformers","aiRelevant":true,"provider":{"id":"hugging-face","label":"Hugging Face"},"advisoryCount":26,"licenseExpressions":["Apache-2.0"],"versions":["4.52.4"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:torch","slug":"torch-47a5352a","identity":"pypi:torch","label":"PyTorch","aiRelevant":true,"provider":null,"advisoryCount":23,"licenseExpressions":["BSD-3-Clause"],"versions":["2.7.1","2.7.1+cpu"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:langchain-core","slug":"langchain-core-82117efb","identity":"pypi:langchain-core","label":"LangChain Core","aiRelevant":true,"provider":null,"advisoryCount":7,"licenseExpressions":["MIT"],"versions":["0.3.65"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:chromadb","slug":"chromadb-4bcada2e","identity":"pypi:chromadb","label":"Chroma","aiRelevant":true,"provider":null,"advisoryCount":4,"licenseExpressions":["non-standard"],"versions":["1.0.12"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:langgraph","slug":"langgraph-6c1c645e","identity":"pypi:langgraph","label":"LangGraph","aiRelevant":true,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["0.4.8"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:scikit-learn","slug":"scikit-learn-ab0941d9","identity":"pypi:scikit-learn","label":"scikit-learn","aiRelevant":true,"provider":null,"advisoryCount":1,"licenseExpressions":["BSD-3-Clause","non-standard"],"versions":["1.7.0"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:ollama","slug":"ollama-0b25d881","identity":"pypi:ollama","label":"Ollama SDK","aiRelevant":true,"provider":{"id":"ollama","label":"Ollama"},"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.5.1"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:sentence-transformers","slug":"sentence-transformers-3f3d7a36","identity":"pypi:sentence-transformers","label":"Sentence Transformers","aiRelevant":true,"provider":{"id":"hugging-face","label":"Hugging Face"},"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["4.1.0"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:tokenizers","slug":"tokenizers-7ba00902","identity":"pypi:tokenizers","label":"Hugging Face Tokenizers","aiRelevant":true,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["0.21.1"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:langchain-chroma","slug":"langchain-chroma-ce675edc","identity":"pypi:langchain-chroma","label":"LangChain · Chroma","aiRelevant":true,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.4"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:pypi:langchain-ollama","slug":"langchain-ollama-c606221f","identity":"pypi:langchain-ollama","label":"LangChain · Ollama","aiRelevant":true,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.3.3"],"dossier":true,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["asrp_dir/requirements.txt","requirements-file/requirements-docker.txt","requirements-file/requirements.txt"]},{"id":"package:npm:dompurify","slug":"dompurify-f809d680","identity":"npm:dompurify","label":"dompurify","aiRelevant":false,"provider":null,"advisoryCount":18,"licenseExpressions":["Apache-2.0 OR MPL-2.0"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-router","slug":"react-router-a766b8f6","identity":"npm:react-router","label":"react-router","aiRelevant":false,"provider":null,"advisoryCount":15,"licenseExpressions":["MIT"],"versions":["7.9.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:jspdf","slug":"jspdf-ef69941c","identity":"npm:jspdf","label":"jspdf","aiRelevant":false,"provider":null,"advisoryCount":10,"licenseExpressions":["MIT"],"versions":["3.0.4","4.0.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":2,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:vite","slug":"vite-d48e852f","identity":"npm:vite","label":"vite","aiRelevant":false,"provider":null,"advisoryCount":7,"licenseExpressions":["MIT"],"versions":["6.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:js-yaml","slug":"js-yaml-a53d8d92","identity":"npm:js-yaml","label":"js-yaml","aiRelevant":false,"provider":null,"advisoryCount":5,"licenseExpressions":["MIT"],"versions":["4.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:brace-expansion","slug":"brace-expansion-b42dfb29","identity":"npm:brace-expansion","label":"brace-expansion","aiRelevant":false,"provider":null,"advisoryCount":4,"licenseExpressions":["MIT"],"versions":["1.1.12","2.0.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:postcss","slug":"postcss-6e1650ce","identity":"npm:postcss","label":"postcss","aiRelevant":false,"provider":null,"advisoryCount":4,"licenseExpressions":["MIT"],"versions":["8.5.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:minimatch","slug":"minimatch-91a6ff84","identity":"npm:minimatch","label":"minimatch","aiRelevant":false,"provider":null,"advisoryCount":3,"licenseExpressions":["BlueOak-1.0.0","ISC"],"versions":["3.1.2","9.0.5"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:nanoid","slug":"nanoid-93076b34","identity":"npm:nanoid","label":"nanoid","aiRelevant":false,"provider":null,"advisoryCount":3,"licenseExpressions":["MIT"],"versions":["3.3.11"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:browserslist","slug":"browserslist-09335db7","identity":"npm:browserslist","label":"browserslist","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["4.24.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:flatted","slug":"flatted-bf8d419e","identity":"npm:flatted","label":"flatted","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["ISC"],"versions":["3.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:picomatch","slug":"picomatch-a3008e9b","identity":"npm:picomatch","label":"picomatch","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["2.3.1","4.0.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/core","slug":"babel-core-632b3ee7","identity":"npm:@babel/core","label":"@babel/core","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["7.26.10"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@humanfs/node","slug":"humanfs-node-63ca4f78","identity":"npm:@humanfs/node","label":"@humanfs/node","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["Apache-2.0"],"versions":["0.16.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:ajv","slug":"ajv-dd73454f","identity":"npm:ajv","label":"ajv","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["6.12.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:esbuild","slug":"esbuild-65fe29d5","identity":"npm:esbuild","label":"esbuild","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fflate","slug":"fflate-eb26a651","identity":"npm:fflate","label":"fflate","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["0.8.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:html2pdf.js","slug":"html2pdf-js-9f36d885","identity":"npm:html2pdf.js","label":"html2pdf.js","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["0.12.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-to-hast","slug":"mdast-util-to-hast-18f18478","identity":"npm:mdast-util-to-hast","label":"mdast-util-to-hast","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["13.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:rollup","slug":"rollup-1742bf3c","identity":"npm:rollup","label":"rollup","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:yaml","slug":"yaml-7a850bc7","identity":"npm:yaml","label":"yaml","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["ISC"],"versions":["1.10.2","2.8.1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@ampproject/remapping","slug":"ampproject-remapping-c573e47a","identity":"npm:@ampproject/remapping","label":"@ampproject/remapping","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["2.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/code-frame","slug":"babel-code-frame-d957c518","identity":"npm:@babel/code-frame","label":"@babel/code-frame","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.26.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/compat-data","slug":"babel-compat-data-a62084ad","identity":"npm:@babel/compat-data","label":"@babel/compat-data","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.26.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/generator","slug":"babel-generator-ccac1203","identity":"npm:@babel/generator","label":"@babel/generator","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helper-compilation-targets","slug":"babel-helper-compilation-targets-87d93937","identity":"npm:@babel/helper-compilation-targets","label":"@babel/helper-compilation-targets","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helper-module-imports","slug":"babel-helper-module-imports-dbfc0776","identity":"npm:@babel/helper-module-imports","label":"@babel/helper-module-imports","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.25.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helper-module-transforms","slug":"babel-helper-module-transforms-fea089b3","identity":"npm:@babel/helper-module-transforms","label":"@babel/helper-module-transforms","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.26.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helper-plugin-utils","slug":"babel-helper-plugin-utils-a27c98fa","identity":"npm:@babel/helper-plugin-utils","label":"@babel/helper-plugin-utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.26.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helper-string-parser","slug":"babel-helper-string-parser-50d29bcc","identity":"npm:@babel/helper-string-parser","label":"@babel/helper-string-parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.25.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helper-validator-identifier","slug":"babel-helper-validator-identifier-b255380b","identity":"npm:@babel/helper-validator-identifier","label":"@babel/helper-validator-identifier","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.25.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helper-validator-option","slug":"babel-helper-validator-option-ff70c556","identity":"npm:@babel/helper-validator-option","label":"@babel/helper-validator-option","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.25.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/helpers","slug":"babel-helpers-14903e70","identity":"npm:@babel/helpers","label":"@babel/helpers","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/parser","slug":"babel-parser-90a7ae44","identity":"npm:@babel/parser","label":"@babel/parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/plugin-transform-react-jsx-self","slug":"babel-plugin-transform-react-jsx-self-2454728c","identity":"npm:@babel/plugin-transform-react-jsx-self","label":"@babel/plugin-transform-react-jsx-self","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.25.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/plugin-transform-react-jsx-source","slug":"babel-plugin-transform-react-jsx-source-8c804f75","identity":"npm:@babel/plugin-transform-react-jsx-source","label":"@babel/plugin-transform-react-jsx-source","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.25.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/runtime","slug":"babel-runtime-2e1b7c1b","identity":"npm:@babel/runtime","label":"@babel/runtime","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.28.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/template","slug":"babel-template-1de2b79c","identity":"npm:@babel/template","label":"@babel/template","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/traverse","slug":"babel-traverse-7876b2c3","identity":"npm:@babel/traverse","label":"@babel/traverse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@babel/types","slug":"babel-types-7b046801","identity":"npm:@babel/types","label":"@babel/types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/babel-plugin","slug":"emotion-babel-plugin-6397604e","identity":"npm:@emotion/babel-plugin","label":"@emotion/babel-plugin","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.13.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/cache","slug":"emotion-cache-205ba4d5","identity":"npm:@emotion/cache","label":"@emotion/cache","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.14.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/hash","slug":"emotion-hash-51cfe76a","identity":"npm:@emotion/hash","label":"@emotion/hash","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.9.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/memoize","slug":"emotion-memoize-093126ec","identity":"npm:@emotion/memoize","label":"@emotion/memoize","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.9.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/react","slug":"emotion-react-958236ca","identity":"npm:@emotion/react","label":"@emotion/react","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.14.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/serialize","slug":"emotion-serialize-a8b91370","identity":"npm:@emotion/serialize","label":"@emotion/serialize","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/sheet","slug":"emotion-sheet-2a757ab9","identity":"npm:@emotion/sheet","label":"@emotion/sheet","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/unitless","slug":"emotion-unitless-4c24fae5","identity":"npm:@emotion/unitless","label":"@emotion/unitless","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.10.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/use-insertion-effect-with-fallbacks","slug":"emotion-use-insertion-effect-with-fallbacks-9d23a034","identity":"npm:@emotion/use-insertion-effect-with-fallbacks","label":"@emotion/use-insertion-effect-with-fallbacks","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/utils","slug":"emotion-utils-2b55d91e","identity":"npm:@emotion/utils","label":"@emotion/utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@emotion/weak-memoize","slug":"emotion-weak-memoize-eb0e81cc","identity":"npm:@emotion/weak-memoize","label":"@emotion/weak-memoize","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/aix-ppc64","slug":"esbuild-aix-ppc64-ff62d0c3","identity":"npm:@esbuild/aix-ppc64","label":"@esbuild/aix-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/android-arm","slug":"esbuild-android-arm-6d6a793e","identity":"npm:@esbuild/android-arm","label":"@esbuild/android-arm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/android-arm64","slug":"esbuild-android-arm64-774120d0","identity":"npm:@esbuild/android-arm64","label":"@esbuild/android-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/android-x64","slug":"esbuild-android-x64-e3983566","identity":"npm:@esbuild/android-x64","label":"@esbuild/android-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/darwin-arm64","slug":"esbuild-darwin-arm64-7825afb9","identity":"npm:@esbuild/darwin-arm64","label":"@esbuild/darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/darwin-x64","slug":"esbuild-darwin-x64-53715141","identity":"npm:@esbuild/darwin-x64","label":"@esbuild/darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/freebsd-arm64","slug":"esbuild-freebsd-arm64-782f5ad9","identity":"npm:@esbuild/freebsd-arm64","label":"@esbuild/freebsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/freebsd-x64","slug":"esbuild-freebsd-x64-98044ed2","identity":"npm:@esbuild/freebsd-x64","label":"@esbuild/freebsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-arm","slug":"esbuild-linux-arm-3041c0e3","identity":"npm:@esbuild/linux-arm","label":"@esbuild/linux-arm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-arm64","slug":"esbuild-linux-arm64-383e4f4d","identity":"npm:@esbuild/linux-arm64","label":"@esbuild/linux-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-ia32","slug":"esbuild-linux-ia32-e3f7f680","identity":"npm:@esbuild/linux-ia32","label":"@esbuild/linux-ia32","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-loong64","slug":"esbuild-linux-loong64-99975fa3","identity":"npm:@esbuild/linux-loong64","label":"@esbuild/linux-loong64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-mips64el","slug":"esbuild-linux-mips64el-198b328b","identity":"npm:@esbuild/linux-mips64el","label":"@esbuild/linux-mips64el","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-ppc64","slug":"esbuild-linux-ppc64-2ce9b1d5","identity":"npm:@esbuild/linux-ppc64","label":"@esbuild/linux-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-riscv64","slug":"esbuild-linux-riscv64-e52b37cd","identity":"npm:@esbuild/linux-riscv64","label":"@esbuild/linux-riscv64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-s390x","slug":"esbuild-linux-s390x-a378f043","identity":"npm:@esbuild/linux-s390x","label":"@esbuild/linux-s390x","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/linux-x64","slug":"esbuild-linux-x64-6ab2d953","identity":"npm:@esbuild/linux-x64","label":"@esbuild/linux-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/netbsd-arm64","slug":"esbuild-netbsd-arm64-8089135a","identity":"npm:@esbuild/netbsd-arm64","label":"@esbuild/netbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/netbsd-x64","slug":"esbuild-netbsd-x64-8422547c","identity":"npm:@esbuild/netbsd-x64","label":"@esbuild/netbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/openbsd-arm64","slug":"esbuild-openbsd-arm64-7c050374","identity":"npm:@esbuild/openbsd-arm64","label":"@esbuild/openbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/openbsd-x64","slug":"esbuild-openbsd-x64-c7ebdb2d","identity":"npm:@esbuild/openbsd-x64","label":"@esbuild/openbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/sunos-x64","slug":"esbuild-sunos-x64-580d2b14","identity":"npm:@esbuild/sunos-x64","label":"@esbuild/sunos-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/win32-arm64","slug":"esbuild-win32-arm64-15462cb5","identity":"npm:@esbuild/win32-arm64","label":"@esbuild/win32-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/win32-ia32","slug":"esbuild-win32-ia32-8f5f9f68","identity":"npm:@esbuild/win32-ia32","label":"@esbuild/win32-ia32","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@esbuild/win32-x64","slug":"esbuild-win32-x64-204cfc99","identity":"npm:@esbuild/win32-x64","label":"@esbuild/win32-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.25.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint-community/eslint-utils","slug":"eslint-community-eslint-utils-c7538f47","identity":"npm:@eslint-community/eslint-utils","label":"@eslint-community/eslint-utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.9.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint-community/regexpp","slug":"eslint-community-regexpp-df306a50","identity":"npm:@eslint-community/regexpp","label":"@eslint-community/regexpp","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.12.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint/config-array","slug":"eslint-config-array-64c9736b","identity":"npm:@eslint/config-array","label":"@eslint/config-array","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.21.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint/config-helpers","slug":"eslint-config-helpers-a4919ae1","identity":"npm:@eslint/config-helpers","label":"@eslint/config-helpers","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint/core","slug":"eslint-core-78aa818b","identity":"npm:@eslint/core","label":"@eslint/core","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.16.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint/eslintrc","slug":"eslint-eslintrc-ad654c76","identity":"npm:@eslint/eslintrc","label":"@eslint/eslintrc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.3.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint/js","slug":"eslint-js-b7322adc","identity":"npm:@eslint/js","label":"@eslint/js","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.37.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint/object-schema","slug":"eslint-object-schema-c1bb953b","identity":"npm:@eslint/object-schema","label":"@eslint/object-schema","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["2.1.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@eslint/plugin-kit","slug":"eslint-plugin-kit-be347b9f","identity":"npm:@eslint/plugin-kit","label":"@eslint/plugin-kit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@floating-ui/core","slug":"floating-ui-core-226c6ce1","identity":"npm:@floating-ui/core","label":"@floating-ui/core","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.7.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@floating-ui/dom","slug":"floating-ui-dom-92a0b816","identity":"npm:@floating-ui/dom","label":"@floating-ui/dom","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.7.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@floating-ui/utils","slug":"floating-ui-utils-a5f87317","identity":"npm:@floating-ui/utils","label":"@floating-ui/utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.10"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@humanfs/core","slug":"humanfs-core-ae1d1f57","identity":"npm:@humanfs/core","label":"@humanfs/core","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.19.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@humanwhocodes/module-importer","slug":"humanwhocodes-module-importer-2bdf1883","identity":"npm:@humanwhocodes/module-importer","label":"@humanwhocodes/module-importer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@humanwhocodes/retry","slug":"humanwhocodes-retry-179e58ff","identity":"npm:@humanwhocodes/retry","label":"@humanwhocodes/retry","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["0.3.1","0.4.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@jridgewell/gen-mapping","slug":"jridgewell-gen-mapping-c100bb57","identity":"npm:@jridgewell/gen-mapping","label":"@jridgewell/gen-mapping","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.3.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@jridgewell/resolve-uri","slug":"jridgewell-resolve-uri-f80859d6","identity":"npm:@jridgewell/resolve-uri","label":"@jridgewell/resolve-uri","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@jridgewell/set-array","slug":"jridgewell-set-array-c8c523e1","identity":"npm:@jridgewell/set-array","label":"@jridgewell/set-array","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@jridgewell/sourcemap-codec","slug":"jridgewell-sourcemap-codec-1b6bbd68","identity":"npm:@jridgewell/sourcemap-codec","label":"@jridgewell/sourcemap-codec","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@jridgewell/trace-mapping","slug":"jridgewell-trace-mapping-c6f15179","identity":"npm:@jridgewell/trace-mapping","label":"@jridgewell/trace-mapping","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.3.25"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@nodelib/fs.scandir","slug":"nodelib-fs-scandir-1c10ead4","identity":"npm:@nodelib/fs.scandir","label":"@nodelib/fs.scandir","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@nodelib/fs.stat","slug":"nodelib-fs-stat-b7824bf1","identity":"npm:@nodelib/fs.stat","label":"@nodelib/fs.stat","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@nodelib/fs.walk","slug":"nodelib-fs-walk-731ca7cb","identity":"npm:@nodelib/fs.walk","label":"@nodelib/fs.walk","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@reduxjs/toolkit","slug":"reduxjs-toolkit-37f98765","identity":"npm:@reduxjs/toolkit","label":"@reduxjs/toolkit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.9.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-android-arm-eabi","slug":"rollup-rollup-android-arm-eabi-6fe9e830","identity":"npm:@rollup/rollup-android-arm-eabi","label":"@rollup/rollup-android-arm-eabi","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-android-arm64","slug":"rollup-rollup-android-arm64-110a0008","identity":"npm:@rollup/rollup-android-arm64","label":"@rollup/rollup-android-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-darwin-arm64","slug":"rollup-rollup-darwin-arm64-a7104e2d","identity":"npm:@rollup/rollup-darwin-arm64","label":"@rollup/rollup-darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-darwin-x64","slug":"rollup-rollup-darwin-x64-9d553e48","identity":"npm:@rollup/rollup-darwin-x64","label":"@rollup/rollup-darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-freebsd-arm64","slug":"rollup-rollup-freebsd-arm64-d05763b3","identity":"npm:@rollup/rollup-freebsd-arm64","label":"@rollup/rollup-freebsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-freebsd-x64","slug":"rollup-rollup-freebsd-x64-9389d83a","identity":"npm:@rollup/rollup-freebsd-x64","label":"@rollup/rollup-freebsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm-gnueabihf","slug":"rollup-rollup-linux-arm-gnueabihf-ea274b24","identity":"npm:@rollup/rollup-linux-arm-gnueabihf","label":"@rollup/rollup-linux-arm-gnueabihf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm-musleabihf","slug":"rollup-rollup-linux-arm-musleabihf-d17800dc","identity":"npm:@rollup/rollup-linux-arm-musleabihf","label":"@rollup/rollup-linux-arm-musleabihf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm64-gnu","slug":"rollup-rollup-linux-arm64-gnu-2692ccaa","identity":"npm:@rollup/rollup-linux-arm64-gnu","label":"@rollup/rollup-linux-arm64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm64-musl","slug":"rollup-rollup-linux-arm64-musl-69ba6707","identity":"npm:@rollup/rollup-linux-arm64-musl","label":"@rollup/rollup-linux-arm64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-loongarch64-gnu","slug":"rollup-rollup-linux-loongarch64-gnu-2c23d926","identity":"npm:@rollup/rollup-linux-loongarch64-gnu","label":"@rollup/rollup-linux-loongarch64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-powerpc64le-gnu","slug":"rollup-rollup-linux-powerpc64le-gnu-473b19ae","identity":"npm:@rollup/rollup-linux-powerpc64le-gnu","label":"@rollup/rollup-linux-powerpc64le-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-riscv64-gnu","slug":"rollup-rollup-linux-riscv64-gnu-c8854adc","identity":"npm:@rollup/rollup-linux-riscv64-gnu","label":"@rollup/rollup-linux-riscv64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-riscv64-musl","slug":"rollup-rollup-linux-riscv64-musl-2308f5c4","identity":"npm:@rollup/rollup-linux-riscv64-musl","label":"@rollup/rollup-linux-riscv64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-s390x-gnu","slug":"rollup-rollup-linux-s390x-gnu-2efcfaef","identity":"npm:@rollup/rollup-linux-s390x-gnu","label":"@rollup/rollup-linux-s390x-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-x64-gnu","slug":"rollup-rollup-linux-x64-gnu-800335dd","identity":"npm:@rollup/rollup-linux-x64-gnu","label":"@rollup/rollup-linux-x64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-x64-musl","slug":"rollup-rollup-linux-x64-musl-6959d376","identity":"npm:@rollup/rollup-linux-x64-musl","label":"@rollup/rollup-linux-x64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-arm64-msvc","slug":"rollup-rollup-win32-arm64-msvc-9b8297fc","identity":"npm:@rollup/rollup-win32-arm64-msvc","label":"@rollup/rollup-win32-arm64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-ia32-msvc","slug":"rollup-rollup-win32-ia32-msvc-37230ee2","identity":"npm:@rollup/rollup-win32-ia32-msvc","label":"@rollup/rollup-win32-ia32-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-x64-msvc","slug":"rollup-rollup-win32-x64-msvc-6081dd46","identity":"npm:@rollup/rollup-win32-x64-msvc","label":"@rollup/rollup-win32-x64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.40.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@standard-schema/spec","slug":"standard-schema-spec-d214ce9f","identity":"npm:@standard-schema/spec","label":"@standard-schema/spec","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@standard-schema/utils","slug":"standard-schema-utils-81950b73","identity":"npm:@standard-schema/utils","label":"@standard-schema/utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/babel--core","slug":"types-babel-core-f2acf993","identity":"npm:@types/babel--core","label":"@types/babel--core","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["7.20.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/babel--generator","slug":"types-babel-generator-ee94cb00","identity":"npm:@types/babel--generator","label":"@types/babel--generator","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["7.27.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/babel--template","slug":"types-babel-template-641f5501","identity":"npm:@types/babel--template","label":"@types/babel--template","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["7.4.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/babel--traverse","slug":"types-babel-traverse-c098fcf3","identity":"npm:@types/babel--traverse","label":"@types/babel--traverse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["7.20.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-array","slug":"types-d3-array-a29b6cf2","identity":"npm:@types/d3-array","label":"@types/d3-array","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-color","slug":"types-d3-color-e40fd440","identity":"npm:@types/d3-color","label":"@types/d3-color","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-ease","slug":"types-d3-ease-149b739c","identity":"npm:@types/d3-ease","label":"@types/d3-ease","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-interpolate","slug":"types-d3-interpolate-7f90ad6f","identity":"npm:@types/d3-interpolate","label":"@types/d3-interpolate","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-path","slug":"types-d3-path-960b1008","identity":"npm:@types/d3-path","label":"@types/d3-path","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-scale","slug":"types-d3-scale-5a3300ab","identity":"npm:@types/d3-scale","label":"@types/d3-scale","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-shape","slug":"types-d3-shape-7b817826","identity":"npm:@types/d3-shape","label":"@types/d3-shape","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-time","slug":"types-d3-time-f20949e6","identity":"npm:@types/d3-time","label":"@types/d3-time","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/d3-timer","slug":"types-d3-timer-23dd2733","identity":"npm:@types/d3-timer","label":"@types/d3-timer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/debug","slug":"types-debug-09342db5","identity":"npm:@types/debug","label":"@types/debug","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.12"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/estree","slug":"types-estree-8dde2b7e","identity":"npm:@types/estree","label":"@types/estree","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/estree-jsx","slug":"types-estree-jsx-65519fd8","identity":"npm:@types/estree-jsx","label":"@types/estree-jsx","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/hast","slug":"types-hast-976cd29f","identity":"npm:@types/hast","label":"@types/hast","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/json-schema","slug":"types-json-schema-71e9bb24","identity":"npm:@types/json-schema","label":"@types/json-schema","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.0.15"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/mdast","slug":"types-mdast-ca137420","identity":"npm:@types/mdast","label":"@types/mdast","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/ms","slug":"types-ms-7aa68791","identity":"npm:@types/ms","label":"@types/ms","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/node","slug":"types-node-893179a0","identity":"npm:@types/node","label":"@types/node","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["24.9.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/pako","slug":"types-pako-e01a7584","identity":"npm:@types/pako","label":"@types/pako","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/papaparse","slug":"types-papaparse-d8e5049a","identity":"npm:@types/papaparse","label":"@types/papaparse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.3.16"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/parse-json","slug":"types-parse-json-c1ab906f","identity":"npm:@types/parse-json","label":"@types/parse-json","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/raf","slug":"types-raf-a2d8bc80","identity":"npm:@types/raf","label":"@types/raf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.4.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/react","slug":"types-react-1801b994","identity":"npm:@types/react","label":"@types/react","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["19.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/react-dom","slug":"types-react-dom-0822f902","identity":"npm:@types/react-dom","label":"@types/react-dom","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["19.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/react-transition-group","slug":"types-react-transition-group-d9462024","identity":"npm:@types/react-transition-group","label":"@types/react-transition-group","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.4.12"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/trusted-types","slug":"types-trusted-types-32894973","identity":"npm:@types/trusted-types","label":"@types/trusted-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/unist","slug":"types-unist-33c4c02a","identity":"npm:@types/unist","label":"@types/unist","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.11","3.0.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@types/use-sync-external-store","slug":"types-use-sync-external-store-82a5c51e","identity":"npm:@types/use-sync-external-store","label":"@types/use-sync-external-store","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.0.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/eslint-plugin","slug":"typescript-eslint-eslint-plugin-37895b16","identity":"npm:@typescript-eslint/eslint-plugin","label":"@typescript-eslint/eslint-plugin","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/parser","slug":"typescript-eslint-parser-30fb3abf","identity":"npm:@typescript-eslint/parser","label":"@typescript-eslint/parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause","MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/scope-manager","slug":"typescript-eslint-scope-manager-9cced343","identity":"npm:@typescript-eslint/scope-manager","label":"@typescript-eslint/scope-manager","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/type-utils","slug":"typescript-eslint-type-utils-7cdfbb29","identity":"npm:@typescript-eslint/type-utils","label":"@typescript-eslint/type-utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/types","slug":"typescript-eslint-types-77f3f786","identity":"npm:@typescript-eslint/types","label":"@typescript-eslint/types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/typescript-estree","slug":"typescript-eslint-typescript-estree-82954698","identity":"npm:@typescript-eslint/typescript-estree","label":"@typescript-eslint/typescript-estree","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause","MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/utils","slug":"typescript-eslint-utils-688d256d","identity":"npm:@typescript-eslint/utils","label":"@typescript-eslint/utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@typescript-eslint/visitor-keys","slug":"typescript-eslint-visitor-keys-fbb1a81d","identity":"npm:@typescript-eslint/visitor-keys","label":"@typescript-eslint/visitor-keys","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@ungap/structured-clone","slug":"ungap-structured-clone-ab04e895","identity":"npm:@ungap/structured-clone","label":"@ungap/structured-clone","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:@vitejs/plugin-react","slug":"vitejs-plugin-react-0eef6115","identity":"npm:@vitejs/plugin-react","label":"@vitejs/plugin-react","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:acorn","slug":"acorn-7462fc91","identity":"npm:acorn","label":"acorn","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.15.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:acorn-jsx","slug":"acorn-jsx-39f7c275","identity":"npm:acorn-jsx","label":"acorn-jsx","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:ansi-styles","slug":"ansi-styles-1f68187d","identity":"npm:ansi-styles","label":"ansi-styles","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:argparse","slug":"argparse-b5701db7","identity":"npm:argparse","label":"argparse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT","Python-2.0"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:babel-plugin-macros","slug":"babel-plugin-macros-00e7a686","identity":"npm:babel-plugin-macros","label":"babel-plugin-macros","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:bail","slug":"bail-8d9e1b54","identity":"npm:bail","label":"bail","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:balanced-match","slug":"balanced-match-bdbd1dc3","identity":"npm:balanced-match","label":"balanced-match","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:base64-arraybuffer","slug":"base64-arraybuffer-eeba5335","identity":"npm:base64-arraybuffer","label":"base64-arraybuffer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:braces","slug":"braces-16233bc9","identity":"npm:braces","label":"braces","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:callsites","slug":"callsites-3381460c","identity":"npm:callsites","label":"callsites","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:caniuse-lite","slug":"caniuse-lite-e06ab132","identity":"npm:caniuse-lite","label":"caniuse-lite","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["CC-BY-4.0"],"versions":["1.0.30001714"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:canvg","slug":"canvg-b241ed02","identity":"npm:canvg","label":"canvg","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.11"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:ccount","slug":"ccount-1701465a","identity":"npm:ccount","label":"ccount","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:chalk","slug":"chalk-8df0bdaf","identity":"npm:chalk","label":"chalk","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:character-entities","slug":"character-entities-fadf7f03","identity":"npm:character-entities","label":"character-entities","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:character-entities-html4","slug":"character-entities-html4-979c8601","identity":"npm:character-entities-html4","label":"character-entities-html4","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:character-entities-legacy","slug":"character-entities-legacy-72cfb89e","identity":"npm:character-entities-legacy","label":"character-entities-legacy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:character-reference-invalid","slug":"character-reference-invalid-791f1a58","identity":"npm:character-reference-invalid","label":"character-reference-invalid","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:clsx","slug":"clsx-302ac87a","identity":"npm:clsx","label":"clsx","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:color-convert","slug":"color-convert-85ffcc60","identity":"npm:color-convert","label":"color-convert","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:color-name","slug":"color-name-8d5a2a87","identity":"npm:color-name","label":"color-name","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:comma-separated-tokens","slug":"comma-separated-tokens-938b545a","identity":"npm:comma-separated-tokens","label":"comma-separated-tokens","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:concat-map","slug":"concat-map-3e07128f","identity":"npm:concat-map","label":"concat-map","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:convert-source-map","slug":"convert-source-map-78f51653","identity":"npm:convert-source-map","label":"convert-source-map","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.9.0","2.0.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:cookie","slug":"cookie-a2a53f4d","identity":"npm:cookie","label":"cookie","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:core-js","slug":"core-js-47c86394","identity":"npm:core-js","label":"core-js","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.45.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:cosmiconfig","slug":"cosmiconfig-75133a25","identity":"npm:cosmiconfig","label":"cosmiconfig","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:cross-spawn","slug":"cross-spawn-11ddd240","identity":"npm:cross-spawn","label":"cross-spawn","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.0.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:css-line-break","slug":"css-line-break-88f03bd6","identity":"npm:css-line-break","label":"css-line-break","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:csstype","slug":"csstype-64cd134e","identity":"npm:csstype","label":"csstype","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-array","slug":"d3-array-d7030bb5","identity":"npm:d3-array","label":"d3-array","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause","ISC"],"versions":["3.2.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-color","slug":"d3-color-1b82248b","identity":"npm:d3-color","label":"d3-color","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-ease","slug":"d3-ease-325f140b","identity":"npm:d3-ease","label":"d3-ease","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["3.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-format","slug":"d3-format-6da42c7c","identity":"npm:d3-format","label":"d3-format","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-interpolate","slug":"d3-interpolate-0a6d9932","identity":"npm:d3-interpolate","label":"d3-interpolate","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["3.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-path","slug":"d3-path-0f72af98","identity":"npm:d3-path","label":"d3-path","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause","ISC"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-scale","slug":"d3-scale-6d449a2e","identity":"npm:d3-scale","label":"d3-scale","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["4.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-shape","slug":"d3-shape-ce111f69","identity":"npm:d3-shape","label":"d3-shape","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause","ISC"],"versions":["3.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-time","slug":"d3-time-8374a368","identity":"npm:d3-time","label":"d3-time","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-time-format","slug":"d3-time-format-57557ec1","identity":"npm:d3-time-format","label":"d3-time-format","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["4.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:d3-timer","slug":"d3-timer-2e634c1e","identity":"npm:d3-timer","label":"d3-timer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["3.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:debug","slug":"debug-e3b3b23f","identity":"npm:debug","label":"debug","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:decimal.js-light","slug":"decimal-js-light-bca5bfff","identity":"npm:decimal.js-light","label":"decimal.js-light","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.5.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:decode-named-character-reference","slug":"decode-named-character-reference-d0c309dc","identity":"npm:decode-named-character-reference","label":"decode-named-character-reference","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:deep-is","slug":"deep-is-0ee8b226","identity":"npm:deep-is","label":"deep-is","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.1.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:dequal","slug":"dequal-7b882b20","identity":"npm:dequal","label":"dequal","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:devlop","slug":"devlop-b37fc7f6","identity":"npm:devlop","label":"devlop","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:dom-helpers","slug":"dom-helpers-087dd9fa","identity":"npm:dom-helpers","label":"dom-helpers","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:electron-to-chromium","slug":"electron-to-chromium-375b132f","identity":"npm:electron-to-chromium","label":"electron-to-chromium","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.5.137"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:entities","slug":"entities-dadc420c","identity":"npm:entities","label":"entities","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause"],"versions":["6.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:error-ex","slug":"error-ex-ab587189","identity":"npm:error-ex","label":"error-ex","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:es-toolkit","slug":"es-toolkit-4d2306f5","identity":"npm:es-toolkit","label":"es-toolkit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.39.10"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:escalade","slug":"escalade-6fb20cfb","identity":"npm:escalade","label":"escalade","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:escape-string-regexp","slug":"escape-string-regexp-48b4cb67","identity":"npm:escape-string-regexp","label":"escape-string-regexp","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0","5.0.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:eslint","slug":"eslint-421604c9","identity":"npm:eslint","label":"eslint","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.37.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:eslint-plugin-react-hooks","slug":"eslint-plugin-react-hooks-14270148","identity":"npm:eslint-plugin-react-hooks","label":"eslint-plugin-react-hooks","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:eslint-plugin-react-refresh","slug":"eslint-plugin-react-refresh-be6657b2","identity":"npm:eslint-plugin-react-refresh","label":"eslint-plugin-react-refresh","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.4.19"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:eslint-scope","slug":"eslint-scope-e94b244d","identity":"npm:eslint-scope","label":"eslint-scope","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause"],"versions":["8.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:eslint-visitor-keys","slug":"eslint-visitor-keys-32b1188a","identity":"npm:eslint-visitor-keys","label":"eslint-visitor-keys","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["3.4.3","4.2.1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:espree","slug":"espree-00afe3f4","identity":"npm:espree","label":"espree","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause"],"versions":["10.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:esquery","slug":"esquery-c9ae3aa0","identity":"npm:esquery","label":"esquery","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["1.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:esrecurse","slug":"esrecurse-4abfbbe8","identity":"npm:esrecurse","label":"esrecurse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause"],"versions":["4.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:estraverse","slug":"estraverse-042e57d4","identity":"npm:estraverse","label":"estraverse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause"],"versions":["5.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:estree-util-is-identifier-name","slug":"estree-util-is-identifier-name-16401954","identity":"npm:estree-util-is-identifier-name","label":"estree-util-is-identifier-name","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:esutils","slug":"esutils-333daa20","identity":"npm:esutils","label":"esutils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause"],"versions":["2.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:eventemitter3","slug":"eventemitter3-dd086b94","identity":"npm:eventemitter3","label":"eventemitter3","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:extend","slug":"extend-a49ffc1d","identity":"npm:extend","label":"extend","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fast-deep-equal","slug":"fast-deep-equal-9efeb437","identity":"npm:fast-deep-equal","label":"fast-deep-equal","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fast-glob","slug":"fast-glob-252e51fb","identity":"npm:fast-glob","label":"fast-glob","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fast-json-stable-stringify","slug":"fast-json-stable-stringify-178e5c18","identity":"npm:fast-json-stable-stringify","label":"fast-json-stable-stringify","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fast-levenshtein","slug":"fast-levenshtein-08886bf2","identity":"npm:fast-levenshtein","label":"fast-levenshtein","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fast-png","slug":"fast-png-5cf95d71","identity":"npm:fast-png","label":"fast-png","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fastq","slug":"fastq-cc3d7764","identity":"npm:fastq","label":"fastq","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.19.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fdir","slug":"fdir-d78fecd4","identity":"npm:fdir","label":"fdir","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:file-entry-cache","slug":"file-entry-cache-126c69d4","identity":"npm:file-entry-cache","label":"file-entry-cache","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fill-range","slug":"fill-range-2ea43335","identity":"npm:fill-range","label":"fill-range","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:find-root","slug":"find-root-80989d75","identity":"npm:find-root","label":"find-root","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:find-up","slug":"find-up-bf684d3a","identity":"npm:find-up","label":"find-up","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:flat-cache","slug":"flat-cache-b7f57c59","identity":"npm:flat-cache","label":"flat-cache","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:fsevents","slug":"fsevents-f43d69ec","identity":"npm:fsevents","label":"fsevents","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:function-bind","slug":"function-bind-45751970","identity":"npm:function-bind","label":"function-bind","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:gensync","slug":"gensync-102f0859","identity":"npm:gensync","label":"gensync","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.0-beta.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:glob-parent","slug":"glob-parent-3d212448","identity":"npm:glob-parent","label":"glob-parent","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["5.1.2","6.0.2"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:globals","slug":"globals-6245888b","identity":"npm:globals","label":"globals","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.12.0","14.0.0","16.0.0"],"dossier":false,"occurrenceCount":3,"directOccurrenceCount":3,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:graphemer","slug":"graphemer-91cb0080","identity":"npm:graphemer","label":"graphemer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:has-flag","slug":"has-flag-45a1a13f","identity":"npm:has-flag","label":"has-flag","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hasown","slug":"hasown-c4159556","identity":"npm:hasown","label":"hasown","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hast-util-from-parse5","slug":"hast-util-from-parse5-4eaf729b","identity":"npm:hast-util-from-parse5","label":"hast-util-from-parse5","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hast-util-parse-selector","slug":"hast-util-parse-selector-e8996606","identity":"npm:hast-util-parse-selector","label":"hast-util-parse-selector","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hast-util-raw","slug":"hast-util-raw-c7946ecc","identity":"npm:hast-util-raw","label":"hast-util-raw","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hast-util-to-jsx-runtime","slug":"hast-util-to-jsx-runtime-7e0c3661","identity":"npm:hast-util-to-jsx-runtime","label":"hast-util-to-jsx-runtime","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hast-util-to-parse5","slug":"hast-util-to-parse5-89ad8f13","identity":"npm:hast-util-to-parse5","label":"hast-util-to-parse5","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hast-util-whitespace","slug":"hast-util-whitespace-8daf8cab","identity":"npm:hast-util-whitespace","label":"hast-util-whitespace","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hastscript","slug":"hastscript-3c8216dc","identity":"npm:hastscript","label":"hastscript","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:hoist-non-react-statics","slug":"hoist-non-react-statics-cd62e457","identity":"npm:hoist-non-react-statics","label":"hoist-non-react-statics","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["3.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:html-url-attributes","slug":"html-url-attributes-f6365024","identity":"npm:html-url-attributes","label":"html-url-attributes","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:html-void-elements","slug":"html-void-elements-fe14cfa5","identity":"npm:html-void-elements","label":"html-void-elements","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:html2canvas","slug":"html2canvas-793215e7","identity":"npm:html2canvas","label":"html2canvas","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:ignore","slug":"ignore-3015b1fc","identity":"npm:ignore","label":"ignore","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:immer","slug":"immer-55532025","identity":"npm:immer","label":"immer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["10.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:import-fresh","slug":"import-fresh-66023a8c","identity":"npm:import-fresh","label":"import-fresh","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.3.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:imurmurhash","slug":"imurmurhash-24981ac0","identity":"npm:imurmurhash","label":"imurmurhash","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.1.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:inline-style-parser","slug":"inline-style-parser-1aeed0d8","identity":"npm:inline-style-parser","label":"inline-style-parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:internmap","slug":"internmap-00fa1d76","identity":"npm:internmap","label":"internmap","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["2.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:iobuffer","slug":"iobuffer-2300d249","identity":"npm:iobuffer","label":"iobuffer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-alphabetical","slug":"is-alphabetical-796b345e","identity":"npm:is-alphabetical","label":"is-alphabetical","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-alphanumerical","slug":"is-alphanumerical-7faaa48c","identity":"npm:is-alphanumerical","label":"is-alphanumerical","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-arrayish","slug":"is-arrayish-aba830f6","identity":"npm:is-arrayish","label":"is-arrayish","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-core-module","slug":"is-core-module-0b93473f","identity":"npm:is-core-module","label":"is-core-module","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.16.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-decimal","slug":"is-decimal-2f11a7f7","identity":"npm:is-decimal","label":"is-decimal","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-extglob","slug":"is-extglob-1afbb12e","identity":"npm:is-extglob","label":"is-extglob","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-glob","slug":"is-glob-dc8c90d2","identity":"npm:is-glob","label":"is-glob","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-hexadecimal","slug":"is-hexadecimal-f99521ce","identity":"npm:is-hexadecimal","label":"is-hexadecimal","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-number","slug":"is-number-c0feb6a5","identity":"npm:is-number","label":"is-number","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:is-plain-obj","slug":"is-plain-obj-f8b24205","identity":"npm:is-plain-obj","label":"is-plain-obj","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:isexe","slug":"isexe-47f89bdf","identity":"npm:isexe","label":"isexe","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:js-tokens","slug":"js-tokens-8b3f06fa","identity":"npm:js-tokens","label":"js-tokens","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:jsesc","slug":"jsesc-96b39045","identity":"npm:jsesc","label":"jsesc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:json-buffer","slug":"json-buffer-8ae14bcb","identity":"npm:json-buffer","label":"json-buffer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:json-parse-even-better-errors","slug":"json-parse-even-better-errors-49f997fe","identity":"npm:json-parse-even-better-errors","label":"json-parse-even-better-errors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:json-schema-traverse","slug":"json-schema-traverse-5fe5e658","identity":"npm:json-schema-traverse","label":"json-schema-traverse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:json-stable-stringify-without-jsonify","slug":"json-stable-stringify-without-jsonify-58ac8634","identity":"npm:json-stable-stringify-without-jsonify","label":"json-stable-stringify-without-jsonify","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:json5","slug":"json5-2e47090b","identity":"npm:json5","label":"json5","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.2.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:keyv","slug":"keyv-f710ed0f","identity":"npm:keyv","label":"keyv","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.5.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:levn","slug":"levn-1b7ee804","identity":"npm:levn","label":"levn","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:lines-and-columns","slug":"lines-and-columns-2a720476","identity":"npm:lines-and-columns","label":"lines-and-columns","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:locate-path","slug":"locate-path-b0cb3d76","identity":"npm:locate-path","label":"locate-path","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:lodash.merge","slug":"lodash-merge-1f0fecfc","identity":"npm:lodash.merge","label":"lodash.merge","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.6.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:longest-streak","slug":"longest-streak-29a5f621","identity":"npm:longest-streak","label":"longest-streak","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:loose-envify","slug":"loose-envify-73b7e932","identity":"npm:loose-envify","label":"loose-envify","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:lru-cache","slug":"lru-cache-e88912e8","identity":"npm:lru-cache","label":"lru-cache","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BlueOak-1.0.0","ISC"],"versions":["5.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:markdown-table","slug":"markdown-table-6bc447bb","identity":"npm:markdown-table","label":"markdown-table","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-find-and-replace","slug":"mdast-util-find-and-replace-a446a0eb","identity":"npm:mdast-util-find-and-replace","label":"mdast-util-find-and-replace","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-from-markdown","slug":"mdast-util-from-markdown-400c606c","identity":"npm:mdast-util-from-markdown","label":"mdast-util-from-markdown","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-gfm","slug":"mdast-util-gfm-091e29c3","identity":"npm:mdast-util-gfm","label":"mdast-util-gfm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-gfm-autolink-literal","slug":"mdast-util-gfm-autolink-literal-48f344f0","identity":"npm:mdast-util-gfm-autolink-literal","label":"mdast-util-gfm-autolink-literal","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-gfm-footnote","slug":"mdast-util-gfm-footnote-bd727231","identity":"npm:mdast-util-gfm-footnote","label":"mdast-util-gfm-footnote","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-gfm-strikethrough","slug":"mdast-util-gfm-strikethrough-190e64fd","identity":"npm:mdast-util-gfm-strikethrough","label":"mdast-util-gfm-strikethrough","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-gfm-table","slug":"mdast-util-gfm-table-a1aad123","identity":"npm:mdast-util-gfm-table","label":"mdast-util-gfm-table","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-gfm-task-list-item","slug":"mdast-util-gfm-task-list-item-268dddc7","identity":"npm:mdast-util-gfm-task-list-item","label":"mdast-util-gfm-task-list-item","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-mdx-expression","slug":"mdast-util-mdx-expression-561b68a8","identity":"npm:mdast-util-mdx-expression","label":"mdast-util-mdx-expression","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-mdx-jsx","slug":"mdast-util-mdx-jsx-904d32a8","identity":"npm:mdast-util-mdx-jsx","label":"mdast-util-mdx-jsx","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-mdxjs-esm","slug":"mdast-util-mdxjs-esm-b0facab2","identity":"npm:mdast-util-mdxjs-esm","label":"mdast-util-mdxjs-esm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-phrasing","slug":"mdast-util-phrasing-29a5c68e","identity":"npm:mdast-util-phrasing","label":"mdast-util-phrasing","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-to-markdown","slug":"mdast-util-to-markdown-19aea245","identity":"npm:mdast-util-to-markdown","label":"mdast-util-to-markdown","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:mdast-util-to-string","slug":"mdast-util-to-string-04f6a9c9","identity":"npm:mdast-util-to-string","label":"mdast-util-to-string","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:memoize-one","slug":"memoize-one-9e12d456","identity":"npm:memoize-one","label":"memoize-one","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:merge2","slug":"merge2-39f0191e","identity":"npm:merge2","label":"merge2","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark","slug":"micromark-55bbc568","identity":"npm:micromark","label":"micromark","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-core-commonmark","slug":"micromark-core-commonmark-195430fe","identity":"npm:micromark-core-commonmark","label":"micromark-core-commonmark","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-extension-gfm","slug":"micromark-extension-gfm-d83f6864","identity":"npm:micromark-extension-gfm","label":"micromark-extension-gfm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-extension-gfm-autolink-literal","slug":"micromark-extension-gfm-autolink-literal-6fb38d16","identity":"npm:micromark-extension-gfm-autolink-literal","label":"micromark-extension-gfm-autolink-literal","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-extension-gfm-footnote","slug":"micromark-extension-gfm-footnote-972092cc","identity":"npm:micromark-extension-gfm-footnote","label":"micromark-extension-gfm-footnote","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-extension-gfm-strikethrough","slug":"micromark-extension-gfm-strikethrough-e57211a9","identity":"npm:micromark-extension-gfm-strikethrough","label":"micromark-extension-gfm-strikethrough","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-extension-gfm-table","slug":"micromark-extension-gfm-table-2cfc1887","identity":"npm:micromark-extension-gfm-table","label":"micromark-extension-gfm-table","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-extension-gfm-tagfilter","slug":"micromark-extension-gfm-tagfilter-39b91d25","identity":"npm:micromark-extension-gfm-tagfilter","label":"micromark-extension-gfm-tagfilter","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-extension-gfm-task-list-item","slug":"micromark-extension-gfm-task-list-item-dad1b650","identity":"npm:micromark-extension-gfm-task-list-item","label":"micromark-extension-gfm-task-list-item","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-factory-destination","slug":"micromark-factory-destination-293963ae","identity":"npm:micromark-factory-destination","label":"micromark-factory-destination","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-factory-label","slug":"micromark-factory-label-3ab1ecf9","identity":"npm:micromark-factory-label","label":"micromark-factory-label","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-factory-space","slug":"micromark-factory-space-c47a5adb","identity":"npm:micromark-factory-space","label":"micromark-factory-space","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-factory-title","slug":"micromark-factory-title-ece0d9b2","identity":"npm:micromark-factory-title","label":"micromark-factory-title","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-factory-whitespace","slug":"micromark-factory-whitespace-04b6efd9","identity":"npm:micromark-factory-whitespace","label":"micromark-factory-whitespace","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-character","slug":"micromark-util-character-7601c4de","identity":"npm:micromark-util-character","label":"micromark-util-character","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-chunked","slug":"micromark-util-chunked-101a1909","identity":"npm:micromark-util-chunked","label":"micromark-util-chunked","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-classify-character","slug":"micromark-util-classify-character-de955105","identity":"npm:micromark-util-classify-character","label":"micromark-util-classify-character","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-combine-extensions","slug":"micromark-util-combine-extensions-5b258c79","identity":"npm:micromark-util-combine-extensions","label":"micromark-util-combine-extensions","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-decode-numeric-character-reference","slug":"micromark-util-decode-numeric-character-reference-69132fb7","identity":"npm:micromark-util-decode-numeric-character-reference","label":"micromark-util-decode-numeric-character-reference","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-decode-string","slug":"micromark-util-decode-string-a0d91cc4","identity":"npm:micromark-util-decode-string","label":"micromark-util-decode-string","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-encode","slug":"micromark-util-encode-2a1c6cb9","identity":"npm:micromark-util-encode","label":"micromark-util-encode","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-html-tag-name","slug":"micromark-util-html-tag-name-02488597","identity":"npm:micromark-util-html-tag-name","label":"micromark-util-html-tag-name","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-normalize-identifier","slug":"micromark-util-normalize-identifier-a9758761","identity":"npm:micromark-util-normalize-identifier","label":"micromark-util-normalize-identifier","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-resolve-all","slug":"micromark-util-resolve-all-0f225c93","identity":"npm:micromark-util-resolve-all","label":"micromark-util-resolve-all","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-sanitize-uri","slug":"micromark-util-sanitize-uri-44638e5e","identity":"npm:micromark-util-sanitize-uri","label":"micromark-util-sanitize-uri","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-subtokenize","slug":"micromark-util-subtokenize-bbc2eccf","identity":"npm:micromark-util-subtokenize","label":"micromark-util-subtokenize","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-symbol","slug":"micromark-util-symbol-0cbff0df","identity":"npm:micromark-util-symbol","label":"micromark-util-symbol","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromark-util-types","slug":"micromark-util-types-ac5660bc","identity":"npm:micromark-util-types","label":"micromark-util-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:micromatch","slug":"micromatch-5e92d7dd","identity":"npm:micromatch","label":"micromatch","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:ms","slug":"ms-1f5985e4","identity":"npm:ms","label":"ms","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:natural-compare","slug":"natural-compare-948a7244","identity":"npm:natural-compare","label":"natural-compare","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:node-releases","slug":"node-releases-e645deb1","identity":"npm:node-releases","label":"node-releases","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.19"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:object-assign","slug":"object-assign-fa9dc3dc","identity":"npm:object-assign","label":"object-assign","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:optionator","slug":"optionator-8de2d3ef","identity":"npm:optionator","label":"optionator","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.9.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:p-limit","slug":"p-limit-989e28a2","identity":"npm:p-limit","label":"p-limit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:p-locate","slug":"p-locate-df7c6699","identity":"npm:p-locate","label":"p-locate","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:pako","slug":"pako-b6f5a6f2","identity":"npm:pako","label":"pako","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT AND Zlib"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:papaparse","slug":"papaparse-ff81e530","identity":"npm:papaparse","label":"papaparse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.5.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:parent-module","slug":"parent-module-09f7937b","identity":"npm:parent-module","label":"parent-module","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:parse-entities","slug":"parse-entities-5c37e9d8","identity":"npm:parse-entities","label":"parse-entities","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:parse-json","slug":"parse-json-f7a0a4f2","identity":"npm:parse-json","label":"parse-json","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:parse5","slug":"parse5-7a4b420d","identity":"npm:parse5","label":"parse5","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:path-exists","slug":"path-exists-912be959","identity":"npm:path-exists","label":"path-exists","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:path-key","slug":"path-key-369bc367","identity":"npm:path-key","label":"path-key","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:path-parse","slug":"path-parse-454588e2","identity":"npm:path-parse","label":"path-parse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:path-type","slug":"path-type-25bd718d","identity":"npm:path-type","label":"path-type","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:performance-now","slug":"performance-now-f7217a1c","identity":"npm:performance-now","label":"performance-now","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:picocolors","slug":"picocolors-63d33c23","identity":"npm:picocolors","label":"picocolors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:prelude-ls","slug":"prelude-ls-64dbf7f1","identity":"npm:prelude-ls","label":"prelude-ls","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:prop-types","slug":"prop-types-cbf4f9fe","identity":"npm:prop-types","label":"prop-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["15.8.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:property-information","slug":"property-information-4a9b5253","identity":"npm:property-information","label":"property-information","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.5.0","7.1.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:punycode","slug":"punycode-ffd39662","identity":"npm:punycode","label":"punycode","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:queue-microtask","slug":"queue-microtask-3a600ba4","identity":"npm:queue-microtask","label":"queue-microtask","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:raf","slug":"raf-b779142d","identity":"npm:raf","label":"raf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react","slug":"react-29607ded","identity":"npm:react","label":"react","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["19.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-dom","slug":"react-dom-fb4a1520","identity":"npm:react-dom","label":"react-dom","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["19.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-icons","slug":"react-icons-50ebb833","identity":"npm:react-icons","label":"react-icons","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-is","slug":"react-is-d95e9978","identity":"npm:react-is","label":"react-is","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["16.13.1","19.2.0"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-markdown","slug":"react-markdown-62167450","identity":"npm:react-markdown","label":"react-markdown","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["10.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-redux","slug":"react-redux-683d99aa","identity":"npm:react-redux","label":"react-redux","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-refresh","slug":"react-refresh-fc05f1be","identity":"npm:react-refresh","label":"react-refresh","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.17.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-router-dom","slug":"react-router-dom-8c1565f5","identity":"npm:react-router-dom","label":"react-router-dom","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.9.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-select","slug":"react-select-177f04cd","identity":"npm:react-select","label":"react-select","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.10.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:react-transition-group","slug":"react-transition-group-26d7b27f","identity":"npm:react-transition-group","label":"react-transition-group","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["4.4.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:recharts","slug":"recharts-61e9d91c","identity":"npm:recharts","label":"recharts","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:redux","slug":"redux-4962b903","identity":"npm:redux","label":"redux","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:redux-thunk","slug":"redux-thunk-6e5de0fb","identity":"npm:redux-thunk","label":"redux-thunk","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:regenerator-runtime","slug":"regenerator-runtime-8ab30583","identity":"npm:regenerator-runtime","label":"regenerator-runtime","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.13.11"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:rehype-raw","slug":"rehype-raw-f1f2bc28","identity":"npm:rehype-raw","label":"rehype-raw","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:remark-gfm","slug":"remark-gfm-7828ea76","identity":"npm:remark-gfm","label":"remark-gfm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:remark-parse","slug":"remark-parse-4812c797","identity":"npm:remark-parse","label":"remark-parse","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:remark-rehype","slug":"remark-rehype-f68daab1","identity":"npm:remark-rehype","label":"remark-rehype","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:remark-stringify","slug":"remark-stringify-d466fc2a","identity":"npm:remark-stringify","label":"remark-stringify","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:reselect","slug":"reselect-ed47b27b","identity":"npm:reselect","label":"reselect","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:resolve","slug":"resolve-8adf2049","identity":"npm:resolve","label":"resolve","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.22.11"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:resolve-from","slug":"resolve-from-28917033","identity":"npm:resolve-from","label":"resolve-from","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:reusify","slug":"reusify-3316f946","identity":"npm:reusify","label":"reusify","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:rgbcolor","slug":"rgbcolor-0d3c92b8","identity":"npm:rgbcolor","label":"rgbcolor","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["non-standard"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:run-parallel","slug":"run-parallel-50a8a921","identity":"npm:run-parallel","label":"run-parallel","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:scheduler","slug":"scheduler-f5eceb7d","identity":"npm:scheduler","label":"scheduler","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.26.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:semver","slug":"semver-8e84695e","identity":"npm:semver","label":"semver","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["6.3.1","7.7.1"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:set-cookie-parser","slug":"set-cookie-parser-b65a9863","identity":"npm:set-cookie-parser","label":"set-cookie-parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.7.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:shebang-command","slug":"shebang-command-e7e36d5c","identity":"npm:shebang-command","label":"shebang-command","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:shebang-regex","slug":"shebang-regex-37d0cef7","identity":"npm:shebang-regex","label":"shebang-regex","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:source-map","slug":"source-map-40e335ad","identity":"npm:source-map","label":"source-map","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["0.5.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:source-map-js","slug":"source-map-js-41a605c1","identity":"npm:source-map-js","label":"source-map-js","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:space-separated-tokens","slug":"space-separated-tokens-c471a577","identity":"npm:space-separated-tokens","label":"space-separated-tokens","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:stackblur-canvas","slug":"stackblur-canvas-a424eab6","identity":"npm:stackblur-canvas","label":"stackblur-canvas","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.7.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:stringify-entities","slug":"stringify-entities-125d7ead","identity":"npm:stringify-entities","label":"stringify-entities","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:strip-json-comments","slug":"strip-json-comments-1e8c2413","identity":"npm:strip-json-comments","label":"strip-json-comments","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:style-to-js","slug":"style-to-js-7af2bdaf","identity":"npm:style-to-js","label":"style-to-js","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.17"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:style-to-object","slug":"style-to-object-dc5ae31c","identity":"npm:style-to-object","label":"style-to-object","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:stylis","slug":"stylis-be8aa830","identity":"npm:stylis","label":"stylis","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:supports-color","slug":"supports-color-50cc0404","identity":"npm:supports-color","label":"supports-color","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:supports-preserve-symlinks-flag","slug":"supports-preserve-symlinks-flag-1528dff5","identity":"npm:supports-preserve-symlinks-flag","label":"supports-preserve-symlinks-flag","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:svg-pathdata","slug":"svg-pathdata-30b67da5","identity":"npm:svg-pathdata","label":"svg-pathdata","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:text-segmentation","slug":"text-segmentation-6784cec5","identity":"npm:text-segmentation","label":"text-segmentation","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:tiny-invariant","slug":"tiny-invariant-b42ee6ec","identity":"npm:tiny-invariant","label":"tiny-invariant","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:tinyglobby","slug":"tinyglobby-dc19540c","identity":"npm:tinyglobby","label":"tinyglobby","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.15"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:to-regex-range","slug":"to-regex-range-468662f2","identity":"npm:to-regex-range","label":"to-regex-range","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:trim-lines","slug":"trim-lines-d6032ca4","identity":"npm:trim-lines","label":"trim-lines","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:trough","slug":"trough-9f16011a","identity":"npm:trough","label":"trough","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:ts-api-utils","slug":"ts-api-utils-07fd653b","identity":"npm:ts-api-utils","label":"ts-api-utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:type-check","slug":"type-check-a7a05ff6","identity":"npm:type-check","label":"type-check","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:typescript","slug":"typescript-9b49e36c","identity":"npm:typescript","label":"typescript","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["5.7.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:typescript-eslint","slug":"typescript-eslint-63885413","identity":"npm:typescript-eslint","label":"typescript-eslint","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["8.30.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:undici-types","slug":"undici-types-385a20bc","identity":"npm:undici-types","label":"undici-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.16.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:unified","slug":"unified-d3d1b160","identity":"npm:unified","label":"unified","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["11.0.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:unist-util-is","slug":"unist-util-is-500f2b54","identity":"npm:unist-util-is","label":"unist-util-is","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:unist-util-position","slug":"unist-util-position-501a2562","identity":"npm:unist-util-position","label":"unist-util-position","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:unist-util-stringify-position","slug":"unist-util-stringify-position-297cc0d5","identity":"npm:unist-util-stringify-position","label":"unist-util-stringify-position","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:unist-util-visit","slug":"unist-util-visit-97738386","identity":"npm:unist-util-visit","label":"unist-util-visit","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:unist-util-visit-parents","slug":"unist-util-visit-parents-fed995ef","identity":"npm:unist-util-visit-parents","label":"unist-util-visit-parents","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:update-browserslist-db","slug":"update-browserslist-db-75400f27","identity":"npm:update-browserslist-db","label":"update-browserslist-db","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:uri-js","slug":"uri-js-1053a491","identity":"npm:uri-js","label":"uri-js","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-2-Clause"],"versions":["4.4.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:use-isomorphic-layout-effect","slug":"use-isomorphic-layout-effect-750d97d6","identity":"npm:use-isomorphic-layout-effect","label":"use-isomorphic-layout-effect","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:use-sync-external-store","slug":"use-sync-external-store-085f0fd1","identity":"npm:use-sync-external-store","label":"use-sync-external-store","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:utrie","slug":"utrie-92b5cf2b","identity":"npm:utrie","label":"utrie","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:vfile","slug":"vfile-33c4321c","identity":"npm:vfile","label":"vfile","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:vfile-location","slug":"vfile-location-f2ca8efa","identity":"npm:vfile-location","label":"vfile-location","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:vfile-message","slug":"vfile-message-95198ca1","identity":"npm:vfile-message","label":"vfile-message","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:victory-vendor","slug":"victory-vendor-1fd44678","identity":"npm:victory-vendor","label":"victory-vendor","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC AND MIT"],"versions":["37.3.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:wappalyzer","slug":"wappalyzer-440f7482","identity":"npm:wappalyzer","label":"wappalyzer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":[],"versions":["7.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:web-namespaces","slug":"web-namespaces-2f44061f","identity":"npm:web-namespaces","label":"web-namespaces","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:which","slug":"which-1e7f9364","identity":"npm:which","label":"which","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:word-wrap","slug":"word-wrap-124a9003","identity":"npm:word-wrap","label":"word-wrap","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:yallist","slug":"yallist-7f7ac870","identity":"npm:yallist","label":"yallist","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["3.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:yocto-queue","slug":"yocto-queue-1d448017","identity":"npm:yocto-queue","label":"yocto-queue","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]},{"id":"package:npm:zwitch","slug":"zwitch-d8ea4eb0","identity":"npm:zwitch","label":"zwitch","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["plattform/package-lock.json"]}],"vulnerabilities":[{"id":"GHSA-23c5-xmqv-rm74","slug":"ghsa-23c5-xmqv-rm74-946f15d0","dossier":false,"summary":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions","aliases":["CVE-2026-27904"],"sourceIds":["GHSA-23c5-xmqv-rm74"],"published":"2026-02-26T22:07:15Z","modified":"2026-09-10T03:50:59.274637421Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27904"},{"type":"WEB","url":"https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce"},{"type":"PACKAGE","url":"https://github.com/isaacs/minimatch"}],"versionKeys":["npm:minimatch@10.0.3","npm:minimatch@10.1.1","npm:minimatch@3.1.2","npm:minimatch@9.0.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-25h7-pfq9-p65f","slug":"ghsa-25h7-pfq9-p65f-1f62933a","dossier":false,"summary":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","aliases":["CVE-2026-32141"],"sourceIds":["GHSA-25h7-pfq9-p65f"],"published":"2026-03-13T15:40:42Z","modified":"2026-09-10T03:50:36.276174418Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32141"},{"type":"WEB","url":"https://github.com/WebReflection/flatted/pull/88"},{"type":"WEB","url":"https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"},{"type":"PACKAGE","url":"https://github.com/WebReflection/flatted"}],"versionKeys":["npm:flatted@3.3.3"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-2883-xcg3-v3hh","slug":"ghsa-2883-xcg3-v3hh-763c5083","dossier":false,"summary":"js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources","aliases":["CVE-2026-84375"],"sourceIds":["GHSA-2883-xcg3-v3hh"],"published":"2026-09-08T21:24:51Z","modified":"2026-09-08T21:30:05.575808098Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84375"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/pull/797"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"},{"type":"PACKAGE","url":"https://github.com/nodeca/js-yaml"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/releases/tag/3.15.2"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/releases/tag/4.3.2"}],"versionKeys":["npm:js-yaml@3.14.1","npm:js-yaml@3.14.2","npm:js-yaml@4.1.0","npm:js-yaml@4.1.1","npm:js-yaml@4.3.0"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-28wg-ghj8-5hjv","slug":"ghsa-28wg-ghj8-5hjv-10215c04","dossier":false,"summary":"nanoid: non-secure generators can loop indefinitely with negative size","aliases":["CVE-2026-67214"],"sourceIds":["GHSA-28wg-ghj8-5hjv"],"published":"2026-07-29T15:31:12Z","modified":"2026-09-10T03:50:51.191256883Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67214"},{"type":"WEB","url":"https://github.com/ai/nanoid/pull/600"},{"type":"WEB","url":"https://github.com/ai/nanoid/pull/601"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/e835c9b71eab832bc6106944bdd26ea96cf2c66d"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.16"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"}],"versionKeys":["npm:nanoid@3.3.11"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-29pf-2h5f-8g72","slug":"ghsa-29pf-2h5f-8g72-1d83ebb4","dossier":false,"summary":"HuggingFace transformers vulnerable to remote code execution","aliases":["CVE-2026-4372","PYSEC-2026-2289"],"sourceIds":["GHSA-29pf-2h5f-8g72","PYSEC-2026-2289"],"published":"2026-05-24T14:16:16.917Z","modified":"2026-09-10T03:50:45.254378086Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4372"},{"type":"FIX","url":"https://github.com/huggingface/transformers/commit/a7f8e7ff37d87d1a1a0c8cf607971c607741452f"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"EVIDENCE","url":"https://huntr.com/bounties/1f693a6e-6836-4b8b-a0bd-ca036fba8884"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-29pf-2h5f-8g72"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6"],"packageCount":1,"repositoryCount":11},{"id":"GHSA-2g4f-4pwh-qvx6","slug":"ghsa-2g4f-4pwh-qvx6-26ecd362","dossier":false,"summary":"ajv has ReDoS when using `$data` option","aliases":["CVE-2025-69873"],"sourceIds":["GHSA-2g4f-4pwh-qvx6"],"published":"2026-02-11T21:30:39Z","modified":"2026-09-10T03:50:33.716487588Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69873"},{"type":"WEB","url":"https://github.com/ajv-validator/ajv/pull/2586"},{"type":"WEB","url":"https://github.com/ajv-validator/ajv/pull/2588"},{"type":"WEB","url":"https://github.com/ajv-validator/ajv/pull/2590"},{"type":"WEB","url":"https://github.com/github/advisory-database/pull/6991"},{"type":"WEB","url":"https://github.com/ajv-validator/ajv/commit/720a23fa453ffae8340e92c9b0fe886c54cfe0d5"},{"type":"WEB","url":"https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6"},{"type":"PACKAGE","url":"https://github.com/ajv-validator/ajv"},{"type":"WEB","url":"https://github.com/ajv-validator/ajv/releases/tag/v6.14.0"},{"type":"WEB","url":"https://github.com/ajv-validator/ajv/releases/tag/v8.18.0"}],"versionKeys":["npm:ajv@6.12.6"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-2g6r-c272-w58r","slug":"ghsa-2g6r-c272-w58r-4bbbcb01","dossier":false,"summary":"LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages","aliases":["CVE-2026-26013","PYSEC-2026-2562"],"sourceIds":["GHSA-2g6r-c272-w58r","PYSEC-2026-2562"],"published":"2026-02-11T14:23:13Z","modified":"2026-09-10T03:50:33.793703014Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-2g6r-c272-w58r"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26013"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/2b4b1dc29a833d4053deba4c2b77a3848c834565"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.11"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain-core"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2g6r-c272-w58r"}],"versionKeys":["pypi:langchain-core@0.2.28","pypi:langchain-core@0.3.45","pypi:langchain-core@0.3.65","pypi:langchain-core@1.2.7"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-2j2x-hqr9-3h42","slug":"ghsa-2j2x-hqr9-3h42-35805bf8","dossier":false,"summary":"React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation","aliases":["CVE-2026-40181"],"sourceIds":["GHSA-2j2x-hqr9-3h42"],"published":"2026-06-03T20:58:01Z","modified":"2026-09-10T03:50:55.348600076Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-2j2x-hqr9-3h42"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40181"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/d77f6b1"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-2v37-7h3g-55p8","slug":"ghsa-2v37-7h3g-55p8-563431fd","dossier":false,"summary":"nanoid: custom generators can loop indefinitely when size is zero","aliases":["CVE-2026-67213"],"sourceIds":["GHSA-2v37-7h3g-55p8"],"published":"2026-07-29T15:31:12Z","modified":"2026-09-10T03:50:51.243328986Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67213"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/3.3.17"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/3.3.18"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.6"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"}],"versionKeys":["npm:nanoid@3.3.11","npm:nanoid@3.3.16"],"packageCount":1,"repositoryCount":5},{"id":"GHSA-2w69-qvjg-hvjx","slug":"ghsa-2w69-qvjg-hvjx-4a7c9129","dossier":false,"summary":"React Router vulnerable to XSS via Open Redirects","aliases":["CVE-2026-22029"],"sourceIds":["GHSA-2w69-qvjg-hvjx"],"published":"2026-01-08T20:54:18Z","modified":"2026-02-03T03:15:00.320749Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22029"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-2wm9-hf6c-p5cr","slug":"ghsa-2wm9-hf6c-p5cr-4e2f7d91","dossier":false,"summary":"ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection","aliases":["CVE-2026-45830","PYSEC-2026-3813"],"sourceIds":["GHSA-2wm9-hf6c-p5cr","PYSEC-2026-3813"],"published":"2026-06-12T18:31:56Z","modified":"2026-09-10T12:25:31.394776670Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45830"},{"type":"WEB","url":"https://github.com/chroma-core/chroma/issues/7588"},{"type":"WEB","url":"https://github.com/chroma-core/chroma/pull/7602"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-45830"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488408"},{"type":"PACKAGE","url":"https://github.com/chroma-core/chroma"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45830.json"},{"type":"WEB","url":"https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb"},{"type":"PACKAGE","url":"https://pypi.org/project/chromadb"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2wm9-hf6c-p5cr"}],"versionKeys":["pypi:chromadb@1.0.12"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-337j-9hxr-rhxg","slug":"ghsa-337j-9hxr-rhxg-7ed66ddf","dossier":false,"summary":"React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration","aliases":["CVE-2026-53666"],"sourceIds":["GHSA-337j-9hxr-rhxg"],"published":"2026-07-23T19:34:14Z","modified":"2026-09-10T03:50:51.309163082Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-337j-9hxr-rhxg"},{"type":"WEB","url":"https://github.com/remix-run/react-router/pull/15175"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/9d22943fd46c8ae4b08236425fa3549e10e9ad1a"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180"},{"type":"WEB","url":"https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0"}],"versionKeys":["npm:react-router@7.16.0","npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-36p7-vc44-83pf","slug":"ghsa-36p7-vc44-83pf-c961d4d6","dossier":false,"summary":"ChromaDB has a code injection vulnerability","aliases":["CVE-2026-45833","PYSEC-2026-3814"],"sourceIds":["GHSA-36p7-vc44-83pf","PYSEC-2026-3814"],"published":"2026-06-12T18:31:56Z","modified":"2026-09-10T12:25:44.502926958Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45833"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-45833"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488430"},{"type":"PACKAGE","url":"https://github.com/chroma-core/chroma"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45833.json"},{"type":"WEB","url":"https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-5"},{"type":"PACKAGE","url":"https://pypi.org/project/chromadb"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-36p7-vc44-83pf"}],"versionKeys":["pypi:chromadb@1.0.12"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-3749-ghw9-m3mg","slug":"ghsa-3749-ghw9-m3mg-fadf4a32","dossier":false,"summary":"PyTorch susceptible to local Denial of Service","aliases":["BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191"],"sourceIds":["GHSA-3749-ghw9-m3mg","PYSEC-2025-191"],"published":"2025-03-30T16:15:14.380Z","modified":"2026-09-10T03:50:22.781448235Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2953"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/149274"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/149274#issue-2923122269"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-191.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/blob/main/SECURITY.md#untrusted-models"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.302006"},{"type":"ADVISORY","url":"https://vuldb.com/?id.302006"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.521279"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-3749-ghw9-m3mg"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-37mw-44qp-f5jm","slug":"ghsa-37mw-44qp-f5jm-fb05555e","dossier":false,"summary":"Transformers is vulnerable to ReDoS attack through its DonutProcessor class","aliases":["CVE-2025-3933","PYSEC-2026-1977"],"sourceIds":["GHSA-37mw-44qp-f5jm","PYSEC-2026-1977"],"published":"2025-07-11T12:30:32Z","modified":"2026-09-10T03:50:57.888142744Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3933"},{"type":"WEB","url":"https://github.com/huggingface/transformers/pull/37788"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/ebbe9b12dd75b69f92100d684c47f923ee262a93"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/25282953-5827-4384-bb6f-5790d275721b"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-37mw-44qp-f5jm"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-39q2-94rc-95cp","slug":"ghsa-39q2-94rc-95cp-e3bde379","dossier":false,"summary":"DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation","aliases":["CVE-2026-65903"],"sourceIds":["GHSA-39q2-94rc-95cp"],"published":"2026-04-16T00:46:35Z","modified":"2026-09-10T03:50:42.379451428Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-39q2-94rc-95cp"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-3jxr-9vmj-r5cp","slug":"ghsa-3jxr-9vmj-r5cp-a4f3a60d","dossier":false,"summary":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","aliases":["CVE-2026-13149"],"sourceIds":["GHSA-3jxr-9vmj-r5cp"],"published":"2026-07-20T20:51:09Z","modified":"2026-09-10T03:51:10.092354944Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber"}],"references":[{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13149"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/122"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/123"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"},{"type":"PACKAGE","url":"https://github.com/juliangruber/brace-expansion"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7"},{"type":"WEB","url":"https://www.npmjs.com/package/brace-expansion"}],"versionKeys":["npm:brace-expansion@1.1.12","npm:brace-expansion@2.0.2"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-3ppc-4f35-3m26","slug":"ghsa-3ppc-4f35-3m26-03892396","dossier":false,"summary":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","aliases":["CVE-2026-26996"],"sourceIds":["GHSA-3ppc-4f35-3m26"],"published":"2026-02-18T22:38:11Z","modified":"2026-09-10T03:50:33.812431744Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26996"},{"type":"WEB","url":"https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"},{"type":"PACKAGE","url":"https://github.com/isaacs/minimatch"}],"versionKeys":["npm:minimatch@10.0.3","npm:minimatch@10.1.1","npm:minimatch@3.1.2","npm:minimatch@9.0.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-3v7f-55p6-f55p","slug":"ghsa-3v7f-55p6-f55p-cfa06046","dossier":false,"summary":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","aliases":["CVE-2026-33672"],"sourceIds":["GHSA-3v7f-55p6-f55p"],"published":"2026-03-25T21:13:39Z","modified":"2026-09-10T03:50:36.949634538Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33672"},{"type":"WEB","url":"https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903"},{"type":"PACKAGE","url":"https://github.com/micromatch/picomatch"}],"versionKeys":["npm:picomatch@2.3.1","npm:picomatch@4.0.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-48c2-rrv3-qjmp","slug":"ghsa-48c2-rrv3-qjmp-46ab66df","dossier":false,"summary":"yaml is vulnerable to Stack Overflow via deeply nested YAML collections","aliases":["CVE-2026-33532"],"sourceIds":["GHSA-48c2-rrv3-qjmp"],"published":"2026-03-25T20:08:24Z","modified":"2026-09-10T03:50:37.151581408Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/eemeli/yaml/security/advisories/GHSA-48c2-rrv3-qjmp"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33532"},{"type":"WEB","url":"https://github.com/eemeli/yaml/commit/1e84ebbea7ec35011a4c61bbb820a529ee4f359b"},{"type":"PACKAGE","url":"https://github.com/eemeli/yaml"},{"type":"WEB","url":"https://github.com/eemeli/yaml/releases/tag/v1.10.3"},{"type":"WEB","url":"https://github.com/eemeli/yaml/releases/tag/v2.8.3"}],"versionKeys":["npm:yaml@1.10.2","npm:yaml@2.8.1","npm:yaml@2.8.2"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-49rj-9fvp-4h2h","slug":"ghsa-49rj-9fvp-4h2h-d19f7400","dossier":false,"summary":"React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE","aliases":["CVE-2026-42211"],"sourceIds":["GHSA-49rj-9fvp-4h2h"],"published":"2026-06-03T21:03:32Z","modified":"2026-09-10T03:50:48.070316980Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-49rj-9fvp-4h2h"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42211"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-4fh9-h7wg-q85m","slug":"ghsa-4fh9-h7wg-q85m-f401ee5c","dossier":false,"summary":"mdast-util-to-hast has unsanitized class attribute","aliases":["CVE-2025-66400"],"sourceIds":["GHSA-4fh9-h7wg-q85m"],"published":"2025-12-02T01:25:46Z","modified":"2026-09-10T03:50:31.288154267Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/syntax-tree/mdast-util-to-hast/security/advisories/GHSA-4fh9-h7wg-q85m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66400"},{"type":"WEB","url":"https://github.com/syntax-tree/mdast-util-to-hast/commit/6fc783ae6abdeb798fd5a68e7f3f21411dde7403"},{"type":"WEB","url":"https://github.com/syntax-tree/mdast-util-to-hast/commit/ab3a79570a1afbfa7efef5d4a0cd9b5caafbc5d7"},{"type":"PACKAGE","url":"https://github.com/syntax-tree/mdast-util-to-hast"}],"versionKeys":["npm:mdast-util-to-hast@13.2.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-4w7r-h757-3r74","slug":"ghsa-4w7r-h757-3r74-ca8973bc","dossier":false,"summary":"Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer","aliases":["CVE-2025-6921","PYSEC-2026-1980"],"sourceIds":["GHSA-4w7r-h757-3r74","PYSEC-2026-1980"],"published":"2025-09-23T15:31:09Z","modified":"2026-09-10T03:50:27.867584538Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6921"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/47c34fba5c303576560cb29767efb452ff12b8be"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/d37f7517972f67e3f2194c000ed0f87f064e5099"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/287d15a7-6e7c-45d2-8c05-11e305776f1f"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-4w7r-h757-3r74"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-4w7w-66w2-5vf9","slug":"ghsa-4w7w-66w2-5vf9-1ec64746","dossier":false,"summary":"Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling","aliases":["CVE-2026-39365"],"sourceIds":["GHSA-4w7w-66w2-5vf9"],"published":"2026-04-06T18:03:46Z","modified":"2026-09-10T03:50:42.779400319Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39365"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/22161"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v6.4.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v7.3.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v8.0.5"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-4x5r-pxfx-6jf8","slug":"ghsa-4x5r-pxfx-6jf8-59419f35","dossier":false,"summary":"@babel/core: Arbitrary File Read via sourceMappingURL Comment","aliases":["CVE-2026-49356"],"sourceIds":["GHSA-4x5r-pxfx-6jf8"],"published":"2026-06-15T17:14:14Z","modified":"2026-09-10T03:50:48.280629201Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/babel/babel/security/advisories/GHSA-4x5r-pxfx-6jf8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49356"},{"type":"WEB","url":"https://babeljs.io/docs/options#inputsourcemap"},{"type":"PACKAGE","url":"https://github.com/babel/babel"}],"versionKeys":["npm:@babel/core@7.26.10"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-52cp-r559-cp3m","slug":"ghsa-52cp-r559-cp3m-8cf6b3f8","dossier":false,"summary":"js-yaml: YAML merge-key chains can force quadratic CPU consumption","aliases":["CVE-2026-59869"],"sourceIds":["GHSA-52cp-r559-cp3m"],"published":"2026-07-20T21:19:09Z","modified":"2026-09-10T03:50:12.263307536Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59869"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"},{"type":"PACKAGE","url":"https://github.com/nodeca/js-yaml"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/releases/tag/3.15.0"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/releases/tag/4.3.0"}],"versionKeys":["npm:js-yaml@3.14.1","npm:js-yaml@3.14.2","npm:js-yaml@4.1.0","npm:js-yaml@4.1.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-53q9-r3pm-6pq6","slug":"ghsa-53q9-r3pm-6pq6-6fbb0149","dossier":false,"summary":"PyTorch: `torch.load` with `weights_only=True` leads to remote code execution","aliases":["BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41"],"sourceIds":["GHSA-53q9-r3pm-6pq6","PYSEC-2025-41"],"published":"2025-04-18T15:19:28Z","modified":"2026-08-07T08:12:20.395044060Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/pytorch/pytorch/security/advisories/GHSA-53q9-r3pm-6pq6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32434"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/commit/8d4b8a920a2172523deb95bf20e8e52d50649c04"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-41.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"}],"versionKeys":["pypi:torch@2.5.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-55q2-fjhq-7xh7","slug":"ghsa-55q2-fjhq-7xh7-4f411efa","dossier":false,"summary":"DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS","aliases":["CVE-2026-75838"],"sourceIds":["GHSA-55q2-fjhq-7xh7"],"published":"2026-08-07T15:30:47Z","modified":"2026-09-10T03:51:13.069736975Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-55q2-fjhq-7xh7"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/pull/1557"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/commit/3067f7746769"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.4.13"}],"versionKeys":["npm:dompurify@3.2.7","npm:dompurify@3.4.11","npm:dompurify@3.4.12"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-59p9-h35m-wg4g","slug":"ghsa-59p9-h35m-wg4g-68657c65","dossier":false,"summary":"Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer","aliases":["CVE-2025-6638","PYSEC-2026-1981"],"sourceIds":["GHSA-59p9-h35m-wg4g","PYSEC-2026-1981"],"published":"2025-09-12T12:30:23Z","modified":"2026-09-10T03:50:58.113501288Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6638"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/47c34fba5c303576560cb29767efb452ff12b8be"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/d37f7517972f67e3f2194c000ed0f87f064e5099"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/6a6c933f-9ce8-4ded-8b3b-2c1444c61f36"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-59p9-h35m-wg4g"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-5chr-fjjv-38qv","slug":"ghsa-5chr-fjjv-38qv-5f3dd755","dossier":false,"summary":"langchain-core allows unauthorized users to read arbitrary files from the host file system","aliases":["CVE-2024-10940","PYSEC-2026-1517"],"sourceIds":["GHSA-5chr-fjjv-38qv","PYSEC-2026-1517"],"published":"2025-03-20T12:32:41Z","modified":"2026-07-07T17:56:35.905913395Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10940"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/7d481f10102f43559cc57bcad7eba291067939ee"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/c1e742347f9701aadba8920e4d1f79a636e50b68"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/e711034713259ae448981bc0fd1d7a5671499c31"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"WEB","url":"https://huntr.com/bounties/be1ee1cb-2147-4ff4-a57b-b6045271cf27"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain-core"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-5chr-fjjv-38qv"}],"versionKeys":["pypi:langchain-core@0.2.28"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-5p4m-2wfm-xmqj","slug":"ghsa-5p4m-2wfm-xmqj-cf9a2800","dossier":false,"summary":"JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported","aliases":[],"sourceIds":["GHSA-5p4m-2wfm-xmqj"],"published":"2026-08-06T20:27:32Z","modified":"2026-09-10T03:50:53.407436483Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/nodeca/js-yaml/security/advisories/GHSA-5p4m-2wfm-xmqj"},{"type":"PACKAGE","url":"https://github.com/nodeca/js-yaml"}],"versionKeys":["npm:js-yaml@3.14.1","npm:js-yaml@3.14.2","npm:js-yaml@4.1.0","npm:js-yaml@4.1.1","npm:js-yaml@4.3.0"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-67mh-4wv8-2f99","slug":"ghsa-67mh-4wv8-2f99-854f0a14","dossier":false,"summary":"esbuild enables any website to send any requests to the development server and read the response","aliases":[],"sourceIds":["GHSA-67mh-4wv8-2f99"],"published":"2025-02-10T17:48:07Z","modified":"2026-09-10T03:50:22.418128505Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99"},{"type":"WEB","url":"https://github.com/evanw/esbuild/commit/de85afd65edec9ebc44a11e245fd9e9a2e99760d"},{"type":"PACKAGE","url":"https://github.com/evanw/esbuild"}],"versionKeys":["npm:esbuild@0.21.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-67pg-wm7f-q7fj","slug":"ghsa-67pg-wm7f-q7fj-09a7435f","dossier":false,"summary":"jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions","aliases":["CVE-2026-25535"],"sourceIds":["GHSA-67pg-wm7f-q7fj"],"published":"2026-02-19T15:25:48Z","modified":"2026-09-10T03:49:48.422831128Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-67pg-wm7f-q7fj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25535"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/2e5e156e284d92c7d134bce97e6418756941d5e6"},{"type":"WEB","url":"https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25535.md"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.2.0"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-69w3-r845-3855","slug":"ghsa-69w3-r845-3855-1b4edc28","dossier":false,"summary":"HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class","aliases":["CVE-2026-1839","PYSEC-2026-2288"],"sourceIds":["GHSA-69w3-r845-3855","PYSEC-2026-2288"],"published":"2026-04-07T06:16:41.490Z","modified":"2026-09-10T03:50:43.300048881Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1839"},{"type":"FIX","url":"https://github.com/huggingface/transformers/commit/03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://github.com/huggingface/transformers/releases/tag/v5.0.0rc3"},{"type":"EVIDENCE","url":"https://huntr.com/bounties/3c77bb97-e493-493d-9a88-c57f5c536485"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-69w3-r845-3855"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6"],"packageCount":1,"repositoryCount":11},{"id":"GHSA-6g55-p6wh-862q","slug":"ghsa-6g55-p6wh-862q-12f1aeab","dossier":false,"summary":"PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments","aliases":["CVE-2026-45623"],"sourceIds":["GHSA-6g55-p6wh-862q"],"published":"2026-07-23T15:06:16Z","modified":"2026-09-10T03:51:10.752909750Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-6g55-p6wh-862q"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/aaec7b78b3ce2792585b4b300ef1bd5dd5b3e8ad"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/c64b7488d2731dfa16213739b42c34faf5a9eba3"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.12"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-6qv9-48xg-fc7f","slug":"ghsa-6qv9-48xg-fc7f-6f0bc426","dossier":false,"summary":"LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates","aliases":["CVE-2025-65106","PYSEC-2026-1518"],"sourceIds":["GHSA-6qv9-48xg-fc7f","PYSEC-2026-1518"],"published":"2025-11-20T17:42:12Z","modified":"2026-09-10T03:50:30.757129019Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-6qv9-48xg-fc7f"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65106"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/c4b6ba254e1a49ed91f2e268e6484011c540542a"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/fa7789d6c21222b85211755d822ef698d3b34e00"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain-core"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6qv9-48xg-fc7f"}],"versionKeys":["pypi:langchain-core@0.2.28","pypi:langchain-core@0.3.45","pypi:langchain-core@0.3.65"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-6rvg-6v2m-4j46","slug":"ghsa-6rvg-6v2m-4j46-e04ee614","dossier":false,"summary":"Transformers Regular Expression Denial of Service (ReDoS) vulnerability","aliases":["CVE-2024-12720","PYSEC-2026-1982"],"sourceIds":["GHSA-6rvg-6v2m-4j46","PYSEC-2026-1982"],"published":"2025-03-20T12:32:43Z","modified":"2026-08-13T20:11:58.209202163Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12720"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/deac971c469bcbb182c2e52da0b82fb3bf54cccf"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6rvg-6v2m-4j46"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-73wf-gq98-2v4g","slug":"ghsa-73wf-gq98-2v4g-759c3c89","dossier":false,"summary":"Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)","aliases":["CVE-2026-73088"],"sourceIds":["GHSA-73wf-gq98-2v4g"],"published":"2026-09-01T16:41:54Z","modified":"2026-09-10T03:51:15.295037659Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73088"},{"type":"WEB","url":"https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51"},{"type":"PACKAGE","url":"https://github.com/browserslist/browserslist"},{"type":"WEB","url":"https://github.com/browserslist/browserslist/releases/tag/4.28.7"}],"versionKeys":["npm:browserslist@4.24.4","npm:browserslist@4.28.2"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-76mc-f452-cxcm","slug":"ghsa-76mc-f452-cxcm-8afcc446","dossier":false,"summary":"DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`","aliases":["CVE-2026-65902"],"sourceIds":["GHSA-76mc-f452-cxcm"],"published":"2026-06-15T19:59:09Z","modified":"2026-09-10T03:50:48.671563897Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-76mc-f452-cxcm"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-7r86-cg39-jmmj","slug":"ghsa-7r86-cg39-jmmj-b67be21b","dossier":false,"summary":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","aliases":["CVE-2026-27903"],"sourceIds":["GHSA-7r86-cg39-jmmj"],"published":"2026-02-26T22:10:18Z","modified":"2026-09-10T03:50:34.376990726Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27903"},{"type":"WEB","url":"https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748"},{"type":"PACKAGE","url":"https://github.com/isaacs/minimatch"}],"versionKeys":["npm:minimatch@10.0.3","npm:minimatch@10.1.1","npm:minimatch@3.1.2","npm:minimatch@9.0.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-7x6v-j9x4-qf24","slug":"ghsa-7x6v-j9x4-qf24-cf156c13","dossier":false,"summary":"jsPDF has a PDF Object Injection via FreeText color","aliases":["CVE-2026-31898"],"sourceIds":["GHSA-7x6v-j9x4-qf24"],"published":"2026-03-17T17:07:51Z","modified":"2026-09-10T03:50:38.039654888Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-7x6v-j9x4-qf24"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31898"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/4155c4819d5eca284168e51e0e1e81126b4f14b8"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/blob/b1607a9391d4cd65ea7ade25998aea8345ae1be3/src/modules/annotations.js#L193-L208"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.2.1"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-8646-j5j9-6r62","slug":"ghsa-8646-j5j9-6r62-c6678e53","dossier":false,"summary":"React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets","aliases":["CVE-2026-33245"],"sourceIds":["GHSA-8646-j5j9-6r62"],"published":"2026-06-03T20:33:32Z","modified":"2026-06-03T20:56:27.775998Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33245"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-887c-mr87-cxwp","slug":"ghsa-887c-mr87-cxwp-233a2961","dossier":false,"summary":"PyTorch Improper Resource Shutdown or Release vulnerability","aliases":["BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970"],"sourceIds":["GHSA-887c-mr87-cxwp","PYSEC-2026-1970"],"published":"2025-04-16T21:30:59Z","modified":"2026-09-10T03:50:23.660138570Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3730"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/150835"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/pull/150981"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/commit/01f226bfb8f2c343f5c614a6bbf685d91160f3af"},{"type":"WEB","url":"https://github.com/timocafe/tewart-pytorch/commit/46fc5d8e360127361211cb237d5f9eef0223e567"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://vuldb.com/?ctiid.305076"},{"type":"WEB","url":"https://vuldb.com/?id.305076"},{"type":"WEB","url":"https://vuldb.com/?submit.553645"},{"type":"PACKAGE","url":"https://pypi.org/project/torch"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-887c-mr87-cxwp"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu"],"packageCount":1,"repositoryCount":8},{"id":"GHSA-8v8x-cx79-35w7","slug":"ghsa-8v8x-cx79-35w7-f4bce957","dossier":false,"summary":"React Router SSR XSS in ScrollRestoration","aliases":["CVE-2026-21884"],"sourceIds":["GHSA-8v8x-cx79-35w7"],"published":"2026-01-08T20:50:05Z","modified":"2026-09-08T16:45:04.190133160Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-8v8x-cx79-35w7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21884"},{"type":"WEB","url":"https://github.com/remix-run/react-router/pull/14705"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/c89c32c562a7723c45ee71dab1c892acaf7a608d"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19712"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:3782"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:3958"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:3960"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-21884"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428421"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/react-router%407.12.0/CHANGELOG.md#v7120"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21884.json"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-8x6r-g9mw-2r78","slug":"ghsa-8x6r-g9mw-2r78-13acd4ad","dossier":false,"summary":"React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint","aliases":["CVE-2026-42342"],"sourceIds":["GHSA-8x6r-g9mw-2r78"],"published":"2026-06-03T21:05:17Z","modified":"2026-09-10T03:50:48.994159583Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42342"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-926x-3r5x-gfhw","slug":"ghsa-926x-3r5x-gfhw-b7d12e65","dossier":false,"summary":"LangChain has incomplete f-string validation in prompt templates","aliases":["CVE-2026-40087","PYSEC-2026-2563"],"sourceIds":["GHSA-926x-3r5x-gfhw","PYSEC-2026-2563"],"published":"2026-04-08T21:51:32Z","modified":"2026-09-10T03:51:01.352737245Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-926x-3r5x-gfhw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40087"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/pull/36612"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/pull/36613"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/6bab0ba3c12328008ddca3e0d54ff5a6151cd27b"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/af2ed47c6f008cdd551f3c0d87db3774c8dfe258"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D0.3.84"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.28"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain-core"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-926x-3r5x-gfhw"}],"versionKeys":["pypi:langchain-core@0.2.28","pypi:langchain-core@0.3.45","pypi:langchain-core@0.3.65","pypi:langchain-core@1.2.7"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-9356-575x-2w9m","slug":"ghsa-9356-575x-2w9m-908a1f8c","dossier":false,"summary":"Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability","aliases":["CVE-2025-5197","PYSEC-2026-1983"],"sourceIds":["GHSA-9356-575x-2w9m","PYSEC-2026-1983"],"published":"2025-08-06T12:31:20Z","modified":"2026-09-10T03:50:26.988216861Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5197"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/701caef704e356dc2f9331cc3fd5df0eccb4720a"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/944b56000be5e9b61af8301aa340838770ad8a0b"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9356-575x-2w9m"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-93m4-6634-74q7","slug":"ghsa-93m4-6634-74q7-557bfeeb","dossier":false,"summary":"vite allows server.fs.deny bypass via backslash on Windows","aliases":["CVE-2025-62522"],"sourceIds":["GHSA-93m4-6634-74q7"],"published":"2025-10-20T19:54:28Z","modified":"2026-09-10T03:50:29.574857832Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62522"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-95fx-jjr5-f39c","slug":"ghsa-95fx-jjr5-f39c-b4fc9ca7","dossier":false,"summary":"jsPDF Vulnerable to Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder","aliases":["CVE-2026-24133"],"sourceIds":["GHSA-95fx-jjr5-f39c"],"published":"2026-02-02T18:29:13Z","modified":"2026-09-10T03:50:34.569379842Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-95fx-jjr5-f39c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24133"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/ae4b93f76d8fc1baa5614bd5fdb5d174c3b85f0d"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.1.0"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-9jcx-v3wj-wh4m","slug":"ghsa-9jcx-v3wj-wh4m-e821f893","dossier":false,"summary":"React Router has unexpected external redirect via untrusted paths","aliases":["CVE-2025-68470"],"sourceIds":["GHSA-9jcx-v3wj-wh4m"],"published":"2026-01-08T20:48:21Z","modified":"2026-02-03T03:14:56.431029Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68470"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-9vjf-qc39-jprp","slug":"ghsa-9vjf-qc39-jprp-ff139f95","dossier":false,"summary":"jsPDF has a PDF Object Injection via Unsanitized Input in addJS Method","aliases":["CVE-2026-25755"],"sourceIds":["GHSA-9vjf-qc39-jprp"],"published":"2026-02-19T19:32:36Z","modified":"2026-09-10T03:50:59.366092981Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25755"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437"},{"type":"WEB","url":"https://github.com/ZeroXJacks/CVEs/blob/main/2026/CVE-2026-25755.md"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.2.0"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-c2c7-rcm5-vvqj","slug":"ghsa-c2c7-rcm5-vvqj-6ccdec4e","dossier":false,"summary":"Picomatch has a ReDoS vulnerability via extglob quantifiers","aliases":["CVE-2026-33671"],"sourceIds":["GHSA-c2c7-rcm5-vvqj"],"published":"2026-03-25T21:12:07Z","modified":"2026-09-10T03:51:00.292614896Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33671"},{"type":"WEB","url":"https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d"},{"type":"PACKAGE","url":"https://github.com/micromatch/picomatch"}],"versionKeys":["npm:picomatch@2.3.1","npm:picomatch@4.0.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-c2j3-45gr-mqc4","slug":"ghsa-c2j3-45gr-mqc4-7e6954c0","dossier":false,"summary":"DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.","aliases":["CVE-2026-66010"],"sourceIds":["GHSA-c2j3-45gr-mqc4"],"published":"2026-07-21T19:41:07Z","modified":"2026-09-10T03:51:11.305351144Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-c2j3-45gr-mqc4"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/pull/1537"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.4.12"}],"versionKeys":["npm:dompurify@3.2.7","npm:dompurify@3.4.11"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-c678-jfcj-6jmf","slug":"ghsa-c678-jfcj-6jmf-cd9a8774","dossier":false,"summary":"PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument","aliases":["BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189"],"sourceIds":["GHSA-c678-jfcj-6jmf"],"published":"2025-03-10T12:30:55Z","modified":"2026-06-09T21:26:06.844649427Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2148"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/147722"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-189.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/blob/b0a67c7495bb11ecb23e556058db059ba48354af/torch/autograd/profiler.py#L990"},{"type":"WEB","url":"https://vuldb.com/?ctiid.299059"},{"type":"WEB","url":"https://vuldb.com/?id.299059"},{"type":"WEB","url":"https://vuldb.com/?submit.505959"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-c67j-w6g6-q2cm","slug":"ghsa-c67j-w6g6-q2cm-a4c5c0cf","dossier":false,"summary":"LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs","aliases":["CVE-2025-68664","PYSEC-2026-373"],"sourceIds":["GHSA-c67j-w6g6-q2cm","PYSEC-2026-373"],"published":"2025-12-23T18:46:13Z","modified":"2026-09-10T03:50:31.915283166Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-c67j-w6g6-q2cm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68664"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/pull/34455"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/pull/34458"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/commit/d9ec4c5cc78960abd37da79b0250f5642e6f0ce6"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D0.3.81"},{"type":"WEB","url":"https://github.com/langchain-ai/langchain/releases/tag/langchain-core%3D%3D1.2.5"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain-core"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-c67j-w6g6-q2cm"}],"versionKeys":["pypi:langchain-core@0.2.28","pypi:langchain-core@0.3.45","pypi:langchain-core@0.3.65"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-c83g-rgw3-j3cx","slug":"ghsa-c83g-rgw3-j3cx-c08d66e8","dossier":false,"summary":"Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM","aliases":["CVE-2026-73089"],"sourceIds":["GHSA-c83g-rgw3-j3cx"],"published":"2026-09-01T16:42:13Z","modified":"2026-09-10T03:50:54.622936829Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73089"},{"type":"WEB","url":"https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405"},{"type":"PACKAGE","url":"https://github.com/browserslist/browserslist"},{"type":"WEB","url":"https://github.com/browserslist/browserslist/releases/tag/4.28.7"}],"versionKeys":["npm:browserslist@4.24.4","npm:browserslist@4.28.2"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-chx6-hx7r-mcp5","slug":"ghsa-chx6-hx7r-mcp5-3b30b240","dossier":false,"summary":"React Router: Unauthenticated Denial of Service via Inefficient Route Matching","aliases":["CVE-2026-55685"],"sourceIds":["GHSA-chx6-hx7r-mcp5"],"published":"2026-07-24T14:06:57Z","modified":"2026-09-10T03:51:11.397587276Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-chx6-hx7r-mcp5"},{"type":"WEB","url":"https://github.com/remix-run/react-router/pull/15186"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180"},{"type":"WEB","url":"https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0"}],"versionKeys":["npm:react-router@7.16.0","npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-cj63-jhhr-wcxv","slug":"ghsa-cj63-jhhr-wcxv-94be5b66","dossier":false,"summary":"DOMPurify USE_PROFILES prototype pollution allows event handlers","aliases":["CVE-2026-65913"],"sourceIds":["GHSA-cj63-jhhr-wcxv"],"published":"2026-04-03T03:45:08Z","modified":"2026-09-10T03:50:43.832723479Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-cj63-jhhr-wcxv"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.3.2"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-cjmm-f4jc-qw8r","slug":"ghsa-cjmm-f4jc-qw8r-6f5f72eb","dossier":false,"summary":"DOMPurify ADD_ATTR predicate skips URI validation","aliases":["CVE-2026-65912"],"sourceIds":["GHSA-cjmm-f4jc-qw8r"],"published":"2026-04-03T03:46:07Z","modified":"2026-09-10T03:50:43.891527437Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-cjmm-f4jc-qw8r"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.3.2"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-cjw8-79x6-5cj4","slug":"ghsa-cjw8-79x6-5cj4-de0b0125","dossier":false,"summary":"jsPDF has Shared State Race Condition in addJS Plugin","aliases":["CVE-2026-24040"],"sourceIds":["GHSA-cjw8-79x6-5cj4"],"published":"2026-02-02T18:20:02Z","modified":"2026-09-10T03:50:59.422390070Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-cjw8-79x6-5cj4"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24040"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/2863e5c26afef211a545e8c174ab4d5fce3b8c0e"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.1.0"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-cmwh-pvxp-8882","slug":"ghsa-cmwh-pvxp-8882-9929e8db","dossier":false,"summary":"DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)","aliases":["CVE-2026-65898"],"sourceIds":["GHSA-cmwh-pvxp-8882"],"published":"2026-06-18T14:27:37Z","modified":"2026-09-10T03:51:08.631772464Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-cmwh-pvxp-8882"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/pull/1482"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/commit/011bc3b2fcc4be17aa76f9030e8668207717acb9"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.4.11"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-crv5-9vww-q3g8","slug":"ghsa-crv5-9vww-q3g8-758938c7","dossier":false,"summary":"DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode","aliases":["CVE-2026-41239"],"sourceIds":["GHSA-crv5-9vww-q3g8"],"published":"2026-04-22T17:32:54Z","modified":"2026-09-10T03:50:43.947374186Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-crv5-9vww-q3g8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41239"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.4.0"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-f22v-gfqf-p8f3","slug":"ghsa-f22v-gfqf-p8f3-24b018de","dossier":false,"summary":"React Router has stored XSS via unescaped Location header in prerendered redirect HTML","aliases":["CVE-2026-33244"],"sourceIds":["GHSA-f22v-gfqf-p8f3"],"published":"2026-06-03T20:33:01Z","modified":"2026-09-08T16:45:04.231964105Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-f22v-gfqf-p8f3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33244"},{"type":"WEB","url":"https://github.com/remix-run/react-router/pull/14880"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/ea28e66926460656815cee9b7f2dfaa872513a8c"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/react-router%407.13.2/CHANGELOG.md#v7132"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-f4hp-rmr7-r7v8","slug":"ghsa-f4hp-rmr7-r7v8-fe038cb7","dossier":false,"summary":"PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function","aliases":["BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192"],"sourceIds":["GHSA-f4hp-rmr7-r7v8"],"published":"2025-03-31T15:30:48Z","modified":"2026-06-09T22:11:09.050788278Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2998"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149622"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149622#issue-2935495265"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/commit/494518046816d29099b7d056a74ffa5c244fdcdd"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-192.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://vuldb.com/?ctiid.302047"},{"type":"WEB","url":"https://vuldb.com/?id.302047"},{"type":"WEB","url":"https://vuldb.com/?submit.524151"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-f4j7-r4q5-qw2c","slug":"ghsa-f4j7-r4q5-qw2c-1f0326e9","dossier":false,"summary":"ChromaDB Python project has a pre-authentication code injection vulnerability","aliases":["CVE-2026-45829","PYSEC-2026-311"],"sourceIds":["GHSA-f4j7-r4q5-qw2c","PYSEC-2026-311"],"published":"2026-05-18T18:31:30Z","modified":"2026-07-01T20:22:50.354214Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45829"},{"type":"WEB","url":"https://github.com/chroma-core/chroma/issues/6717"},{"type":"PACKAGE","url":"https://github.com/chroma-core/chroma"},{"type":"WEB","url":"https://www.hiddenlayer.com/research/chromatoast-served-pre-auth"},{"type":"PACKAGE","url":"https://pypi.org/project/chromadb"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-f4j7-r4q5-qw2c"}],"versionKeys":["pypi:chromadb@1.0.12"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-f886-m6hf-6m8v","slug":"ghsa-f886-m6hf-6m8v-159d3b25","dossier":false,"summary":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","aliases":["CVE-2026-33750"],"sourceIds":["GHSA-f886-m6hf-6m8v"],"published":"2026-03-26T18:29:42Z","modified":"2026-09-10T03:51:00.342356761Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33750"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/issues/98"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/95"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/96"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/97"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a"},{"type":"PACKAGE","url":"https://github.com/juliangruber/brace-expansion"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184"}],"versionKeys":["npm:brace-expansion@1.1.12","npm:brace-expansion@2.0.2"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-f8cm-6447-x5h2","slug":"ghsa-f8cm-6447-x5h2-605204e6","dossier":false,"summary":"jsPDF has Local File Inclusion/Path Traversal vulnerability","aliases":["CVE-2025-68428"],"sourceIds":["GHSA-f8cm-6447-x5h2"],"published":"2026-01-05T17:35:29Z","modified":"2026-09-10T03:50:32.994197812Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68428"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/a688c8f479929b24a6543b1fa2d6364abb03066d"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.0.0"}],"versionKeys":["npm:jspdf@3.0.4"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-fgcw-684q-jj6r","slug":"ghsa-fgcw-684q-jj6r-9fe55ba1","dossier":false,"summary":"huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path","aliases":["CVE-2026-5241","PYSEC-2026-2290"],"sourceIds":["GHSA-fgcw-684q-jj6r","PYSEC-2026-2290"],"published":"2026-06-03T14:16:46.337Z","modified":"2026-09-10T03:50:49.345942449Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5241"},{"type":"FIX","url":"https://github.com/huggingface/transformers/commit/676559d5022b74aaa0cee1cee0842b7f27c5320e"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:34456"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37275"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:42644"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-5241"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484384"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2026-2290.yaml"},{"type":"EVIDENCE","url":"https://huntr.com/bounties/ceb3ce1a-4c45-497a-b25e-cb9a7685e619"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5241.json"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fgcw-684q-jj6r"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6"],"packageCount":1,"repositoryCount":11},{"id":"GHSA-fpwr-67px-3qhx","slug":"ghsa-fpwr-67px-3qhx-94f30126","dossier":false,"summary":"Transformers Regular Expression Denial of Service (ReDoS) vulnerability","aliases":["CVE-2025-1194","PYSEC-2026-1984"],"sourceIds":["GHSA-fpwr-67px-3qhx","PYSEC-2026-1984"],"published":"2025-04-29T12:30:21Z","modified":"2026-08-13T20:11:58.399313771Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1194"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/92c5ca9dd70de3ade2af2eb835c96215cc50e815"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/86f58dcd-683f-4adc-a735-849f51e9abb2"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fpwr-67px-3qhx"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-fx2h-pf6j-xcff","slug":"ghsa-fx2h-pf6j-xcff-156ab351","dossier":false,"summary":"vite: `server.fs.deny` bypass on Windows alternate paths","aliases":["CVE-2026-53571"],"sourceIds":["GHSA-fx2h-pf6j-xcff"],"published":"2026-06-15T17:17:45Z","modified":"2026-09-10T03:50:49.380121960Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-fx2h-pf6j-xcff"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53571"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-fxqj-rqcc-2cmp","slug":"ghsa-fxqj-rqcc-2cmp-34c312ef","dossier":false,"summary":"PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset","aliases":["CVE-2026-69153"],"sourceIds":["GHSA-fxqj-rqcc-2cmp"],"published":"2026-08-03T17:11:39Z","modified":"2026-09-10T03:50:53.572374167Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.19"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.20","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-g48c-2wqr-h844","slug":"ghsa-g48c-2wqr-h844-48f35247","dossier":false,"summary":"LangGraph checkpoint loading has unsafe msgpack deserialization","aliases":["CVE-2026-28277","PYSEC-2026-83"],"sourceIds":["GHSA-g48c-2wqr-h844","PYSEC-2026-83"],"published":"2026-03-05T20:16:15.677Z","modified":"2026-06-06T01:00:08.116125988Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/langchain-ai/langgraph/security/advisories/GHSA-g48c-2wqr-h844"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28277"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langgraph"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langgraph/PYSEC-2026-83.yaml"}],"versionKeys":["pypi:langgraph@0.1.1","pypi:langgraph@0.3.21","pypi:langgraph@0.4.8","pypi:langgraph@1.0.6"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-g4jq-h2w9-997c","slug":"ghsa-g4jq-h2w9-997c-b5be310c","dossier":false,"summary":"Vite middleware may serve files starting with the same name with the public directory","aliases":["CVE-2025-58751"],"sourceIds":["GHSA-g4jq-h2w9-997c"],"published":"2025-09-09T20:55:56Z","modified":"2026-09-10T03:50:28.405024248Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-g4jq-h2w9-997c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58751"},{"type":"WEB","url":"https://github.com/lukeed/sirv/commit/f0113f3f8266328d804ee808f763a3c11f8997eb"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/09f2b52e8d5907f26602653caf41b3a56692600d"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/4f1c35bcbb5830290c694aa14b6789e07450f069"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/63e2a5d232218f3f8d852056751e609a5367aaec"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-gvmj-g25r-r7wr","slug":"ghsa-gvmj-g25r-r7wr-45f319d5","dossier":false,"summary":"DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes","aliases":["CVE-2026-65900"],"sourceIds":["GHSA-gvmj-g25r-r7wr"],"published":"2026-06-15T20:02:40Z","modified":"2026-09-10T03:50:49.714722650Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-gvmj-g25r-r7wr"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-h5cw-625j-3rxh","slug":"ghsa-h5cw-625j-3rxh-887698b9","dossier":false,"summary":"React Router has CSRF issue in Action/Server Action Request Processing","aliases":["CVE-2026-22030"],"sourceIds":["GHSA-h5cw-625j-3rxh"],"published":"2026-01-08T20:57:09Z","modified":"2026-09-10T03:50:33.178600867Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-h5cw-625j-3rxh"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22030"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-h67p-54hq-rp68","slug":"ghsa-h67p-54hq-rp68-7c13d245","dossier":false,"summary":"JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases","aliases":["CVE-2026-53550"],"sourceIds":["GHSA-h67p-54hq-rp68"],"published":"2026-06-15T17:15:07Z","modified":"2026-09-10T03:50:49.729923880Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/nodeca/js-yaml/security/advisories/GHSA-h67p-54hq-rp68"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53550"},{"type":"PACKAGE","url":"https://github.com/nodeca/js-yaml"}],"versionKeys":["npm:js-yaml@3.14.1","npm:js-yaml@3.14.2","npm:js-yaml@4.1.0","npm:js-yaml@4.1.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-h7mw-gpvr-xq4m","slug":"ghsa-h7mw-gpvr-xq4m-e3910fd0","dossier":false,"summary":"DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)","aliases":["CVE-2026-41240"],"sourceIds":["GHSA-h7mw-gpvr-xq4m"],"published":"2026-04-22T17:34:17Z","modified":"2026-09-10T03:50:44.461574947Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-h7mw-gpvr-xq4m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41240"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/commit/c361baa18dbdcb3344a41110f4c48ad85bf48f80"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.4.0"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-h8fp-f39c-q6mh","slug":"ghsa-h8fp-f39c-q6mh-4d2072e1","dossier":false,"summary":"React Router: RSCErrorHandler Missing Protocol Validation (XSS)","aliases":["CVE-2026-53667"],"sourceIds":["GHSA-h8fp-f39c-q6mh"],"published":"2026-07-23T19:35:57Z","modified":"2026-09-10T03:50:52.323492500Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-h8fp-f39c-q6mh"},{"type":"WEB","url":"https://github.com/remix-run/react-router/pull/15177"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/ce596e823f0d7b883a433af1d5a839a8b9fe0242"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180"},{"type":"WEB","url":"https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0"}],"versionKeys":["npm:react-router@7.16.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-h8r8-wccr-v5f2","slug":"ghsa-h8r8-wccr-v5f2-bb40b77b","dossier":false,"summary":"DOMPurify is vulnerable to mutation-XSS via Re-Contextualization","aliases":["CVE-2026-65914"],"sourceIds":["GHSA-h8r8-wccr-v5f2"],"published":"2026-03-27T20:41:29Z","modified":"2026-09-10T03:51:00.386265480Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-h8r8-wccr-v5f2"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.3.2"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-hpcv-96wg-7vj8","slug":"ghsa-hpcv-96wg-7vj8-31d92daf","dossier":false,"summary":"DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks","aliases":["CVE-2026-49458"],"sourceIds":["GHSA-hpcv-96wg-7vj8"],"published":"2026-06-15T19:56:35Z","modified":"2026-09-10T03:50:49.943821317Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-hpcv-96wg-7vj8"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-hxxf-235m-72v3","slug":"ghsa-hxxf-235m-72v3-21da19b0","dossier":false,"summary":"Deserialization of Untrusted Data in Hugging Face Transformers","aliases":["CVE-2024-11394","PYSEC-2024-229"],"sourceIds":["GHSA-hxxf-235m-72v3","PYSEC-2024-229"],"published":"2024-11-22T22:15:07Z","modified":"2026-09-10T03:50:20.811665084Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11394"},{"type":"WEB","url":"https://github.com/huggingface/transformers/issues/34840"},{"type":"WEB","url":"https://github.com/huggingface/transformers/pull/35296"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2024-229.yaml"},{"type":"WEB","url":"https://www.zerodayinitiative.com/advisories/ZDI-24-1515"},{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-24-1515/"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-hxxf-235m-72v3"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-jjph-296x-mrcr","slug":"ghsa-jjph-296x-mrcr-0f661d67","dossier":false,"summary":"Transformers vulnerable to ReDoS attack through its get_imports() function","aliases":["CVE-2025-3264","PYSEC-2026-1985"],"sourceIds":["GHSA-jjph-296x-mrcr","PYSEC-2026-1985"],"published":"2025-07-07T12:30:22Z","modified":"2026-07-07T17:56:51.899728258Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3264"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/126abe3461762e5fc180e7e614391d1b4ab051ca"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/3c6f7822-9992-476d-8cf0-b0b1623427df"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-jjph-296x-mrcr"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-jqfw-vq24-v9c3","slug":"ghsa-jqfw-vq24-v9c3-2de51aa4","dossier":false,"summary":"Vite's `server.fs` settings were not applied to HTML files","aliases":["CVE-2025-58752"],"sourceIds":["GHSA-jqfw-vq24-v9c3"],"published":"2025-09-09T20:54:42Z","modified":"2026-09-10T03:50:28.597734404Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58752"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/14015d794f69accba68798bd0e15135bc51c9c1e"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/482000f57f56fe6ff2e905305100cfe03043ddea"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/6f01ff4fe072bcfcd4e2a84811772b818cd51fe6"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/blob/v7.1.5/packages/vite/CHANGELOG.md"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-jw8x-6495-233v","slug":"ghsa-jw8x-6495-233v-cb32b711","dossier":false,"summary":"scikit-learn sensitive data leakage vulnerability","aliases":["CVE-2024-5206","PYSEC-2024-110"],"sourceIds":["GHSA-jw8x-6495-233v","PYSEC-2024-110"],"published":"2024-06-06T19:16:00Z","modified":"2026-09-10T03:50:15.628224747Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5206"},{"type":"FIX","url":"https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/scikit-learn/PYSEC-2024-110.yaml"},{"type":"PACKAGE","url":"https://github.com/scikit-learn/scikit-learn"},{"type":"WEB","url":"https://huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-jw8x-6495-233v"}],"versionKeys":["pypi:scikit-learn@1.3.2"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-mh29-5h37-fv8m","slug":"ghsa-mh29-5h37-fv8m-16304e4f","dossier":false,"summary":"js-yaml has prototype pollution in merge (<<)","aliases":["CVE-2025-64718"],"sourceIds":["GHSA-mh29-5h37-fv8m"],"published":"2025-11-14T14:29:48Z","modified":"2026-09-10T03:50:58.469126910Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/nodeca/js-yaml/security/advisories/GHSA-mh29-5h37-fv8m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64718"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/issues/730#issuecomment-3549635876"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/commit/383665ff4248ec2192d1274e934462bb30426879"},{"type":"WEB","url":"https://github.com/nodeca/js-yaml/commit/5278870a17454fe8621dbd8c445c412529525266"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-mh29-5h37-fv8m"},{"type":"PACKAGE","url":"https://github.com/nodeca/js-yaml"}],"versionKeys":["npm:js-yaml@3.14.1","npm:js-yaml@4.1.0"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-mh99-v99m-4gvg","slug":"ghsa-mh99-v99m-4gvg-c377fa63","dossier":false,"summary":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","aliases":["CVE-2026-14257"],"sourceIds":["GHSA-mh99-v99m-4gvg"],"published":"2026-07-24T21:53:14Z","modified":"2026-09-10T03:50:12.282849322Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14257"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/129"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/130"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/pull/136"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb"},{"type":"PACKAGE","url":"https://github.com/juliangruber/brace-expansion"},{"type":"WEB","url":"https://www.npmjs.com/package/brace-expansion"}],"versionKeys":["npm:brace-expansion@1.1.12","npm:brace-expansion@1.1.16","npm:brace-expansion@2.0.2","npm:brace-expansion@2.1.2","npm:brace-expansion@5.0.7"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-mw96-cpmx-2vgc","slug":"ghsa-mw96-cpmx-2vgc-209d101c","dossier":false,"summary":"Rollup 4 has Arbitrary File Write via Path Traversal","aliases":["CVE-2026-27606"],"sourceIds":["GHSA-mw96-cpmx-2vgc"],"published":"2026-02-25T22:37:26Z","modified":"2026-09-10T03:50:35.380273715Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"WEB","url":"https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27606"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3"},{"type":"PACKAGE","url":"https://github.com/rollup/rollup"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v2.80.0"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v3.30.0"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v4.59.0"}],"versionKeys":["npm:rollup@4.40.0","npm:rollup@4.46.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-p498-v437-472g","slug":"ghsa-p498-v437-472g-007a67ac","dossier":false,"summary":"humanfs: Recursive copy follows symlinked files and copies data from outside the source tree","aliases":[],"sourceIds":["GHSA-p498-v437-472g"],"published":"2026-09-02T14:27:16Z","modified":"2026-09-10T03:50:54.516902811Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/humanwhocodes/humanfs/security/advisories/GHSA-p498-v437-472g"},{"type":"WEB","url":"https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404"},{"type":"PACKAGE","url":"https://github.com/humanwhocodes/humanfs"},{"type":"WEB","url":"https://github.com/humanwhocodes/humanfs/releases/tag/node-v0.16.8"}],"versionKeys":["npm:@humanfs/node@0.16.6"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-p5xg-68wr-hm3m","slug":"ghsa-p5xg-68wr-hm3m-1c956c43","dossier":false,"summary":"jsPDF has a PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and \"AS\" property)","aliases":["CVE-2026-25940"],"sourceIds":["GHSA-p5xg-68wr-hm3m"],"published":"2026-02-19T19:32:48Z","modified":"2026-09-10T03:50:35.418196595Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-p5xg-68wr-hm3m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25940"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/71ad2dbfa6c7c189ab42b855b782620fa8a38375"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.2.0"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-p9ff-h696-f583","slug":"ghsa-p9ff-h696-f583-155b7820","dossier":false,"summary":"Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket","aliases":["CVE-2026-39363"],"sourceIds":["GHSA-p9ff-h696-f583"],"published":"2026-04-06T18:03:24Z","modified":"2026-09-10T03:51:02.521776335Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39363"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/22159"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/f02d9fde0b195afe3ea2944414186962fbbe41e0"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v6.4.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v7.3.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v8.0.5"}],"versionKeys":["npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-phhr-52qp-3mj4","slug":"ghsa-phhr-52qp-3mj4-6f5d82e3","dossier":false,"summary":"Transformers's Improper Input Validation vulnerability can be exploited through username injection","aliases":["CVE-2025-3777","PYSEC-2026-1986"],"sourceIds":["GHSA-phhr-52qp-3mj4","PYSEC-2026-1986"],"published":"2025-07-07T12:30:22Z","modified":"2026-09-10T03:50:26.198077196Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3777"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://github.com/huggingface/transformers/blame/a7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4/src/transformers/image_utils.py"},{"type":"WEB","url":"https://huntr.com/bounties/ccba0730-9248-4853-b7ff-5c20e6364f09"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-phhr-52qp-3mj4"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-pjwx-r37v-7724","slug":"ghsa-pjwx-r37v-7724-2297a72a","dossier":false,"summary":"LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists","aliases":["CVE-2026-44843","PYSEC-2026-2564"],"sourceIds":["GHSA-pjwx-r37v-7724","PYSEC-2026-2564"],"published":"2026-05-08T23:07:32Z","modified":"2026-09-10T03:51:06.718716596Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-pjwx-r37v-7724"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44843"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"PACKAGE","url":"https://pypi.org/project/langchain-core"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-pjwx-r37v-7724"}],"versionKeys":["pypi:langchain-core@0.2.28","pypi:langchain-core@0.3.45","pypi:langchain-core@0.3.65","pypi:langchain-core@1.2.7"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-pqxr-3g65-p328","slug":"ghsa-pqxr-3g65-p328-94985429","dossier":false,"summary":"jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution","aliases":["CVE-2026-24737"],"sourceIds":["GHSA-pqxr-3g65-p328"],"published":"2026-02-02T18:29:49Z","modified":"2026-09-10T03:50:59.528060242Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-pqxr-3g65-p328"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24737"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/da291a5f01b96282545c9391996702cdb8879f79"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.1.0"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-px8p-9vwx-vf98","slug":"ghsa-px8p-9vwx-vf98-90e0ad00","dossier":false,"summary":"fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives","aliases":["CVE-2026-45820"],"sourceIds":["GHSA-px8p-9vwx-vf98"],"published":"2026-07-22T09:32:13Z","modified":"2026-09-10T03:50:52.758792289Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/S:N/AU:Y/R:U/V:D/RE:M/U:Amber"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45820"},{"type":"WEB","url":"https://github.com/101arrowz/fflate/commit/e6d5e6e1076892f72770ac732d83c81da9f3316e"},{"type":"PACKAGE","url":"https://github.com/101arrowz/fflate"},{"type":"WEB","url":"https://github.com/101arrowz/fflate/blob/f7873560ad229c22c4b23b06c6a3806ffde77569/src/index.ts#L2714"},{"type":"WEB","url":"https://github.com/101arrowz/fflate/releases/tag/v0.8.3"}],"versionKeys":["npm:fflate@0.8.2"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-q2wp-rjmx-x6x9","slug":"ghsa-q2wp-rjmx-x6x9-43135d3d","dossier":false,"summary":"Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking","aliases":["CVE-2025-3263","PYSEC-2026-1987"],"sourceIds":["GHSA-q2wp-rjmx-x6x9","PYSEC-2026-1987"],"published":"2025-07-07T12:30:22Z","modified":"2026-07-07T17:56:57.889099913Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3263"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/126abe3461762e5fc180e7e614391d1b4ab051ca"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/c7a69150-54f8-4e81-8094-791e7a2a0f29"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-q2wp-rjmx-x6x9"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-qfhq-4f3w-5fph","slug":"ghsa-qfhq-4f3w-5fph-33bc3f14","dossier":false,"summary":"PyTorch is vulnerable to memory corruption through its torch.lstm_cell function","aliases":["BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195"],"sourceIds":["GHSA-qfhq-4f3w-5fph"],"published":"2025-03-31T18:31:08Z","modified":"2026-06-10T18:26:26.736808954Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3001"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149626"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149626#issue-2935860995"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/commit/999d94b5ede5f4ec111ba7dd144129e2c2725b03"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-195.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://vuldb.com/?ctiid.302050"},{"type":"WEB","url":"https://vuldb.com/?id.302050"},{"type":"WEB","url":"https://vuldb.com/?submit.524212"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu"],"packageCount":1,"repositoryCount":13},{"id":"GHSA-qh6h-p6c9-ff54","slug":"ghsa-qh6h-p6c9-ff54-caf42ff5","dossier":false,"summary":"LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions","aliases":["CVE-2026-34070","PYSEC-2026-2193"],"sourceIds":["GHSA-qh6h-p6c9-ff54","PYSEC-2026-2193"],"published":"2026-03-27T19:45:00Z","modified":"2026-09-10T03:50:40.646863770Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"EVIDENCE","url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-qh6h-p6c9-ff54"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34070"},{"type":"FIX","url":"https://github.com/langchain-ai/langchain/commit/27add913474e01e33bededf4096151130ba0d47c"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langchain"},{"type":"ADVISORY","url":"https://github.com/langchain-ai/langchain/releases/tag/langchain-core==1.2.22"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-34070"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34070.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24766"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37275"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2453287"}],"versionKeys":["pypi:langchain-core@0.2.28","pypi:langchain-core@0.3.45","pypi:langchain-core@0.3.65","pypi:langchain-core@1.2.7"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-qq3j-4f4f-9583","slug":"ghsa-qq3j-4f4f-9583-cd76c72c","dossier":false,"summary":"Hugging Face Transformers Regular Expression Denial of Service","aliases":["CVE-2025-2099","PYSEC-2025-40"],"sourceIds":["GHSA-qq3j-4f4f-9583","PYSEC-2025-40"],"published":"2025-05-19T12:15:19Z","modified":"2026-06-10T17:02:48.111891265Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2099"},{"type":"WEB","url":"https://github.com/huggingface/transformers/pull/36648"},{"type":"FIX","url":"https://github.com/huggingface/transformers/commit/8cb522b4190bd556ce51be04942720650b1a3e57"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2025-40.yaml"},{"type":"WEB","url":"https://huntr.com/bounties/97b780f3-ffca-424f-ad5d-0e1c57a5bde4"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qq3j-4f4f-9583"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-qwww-vcr4-c8h2","slug":"ghsa-qwww-vcr4-c8h2-96ccb471","dossier":false,"summary":"React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response","aliases":[],"sourceIds":["GHSA-qwww-vcr4-c8h2"],"published":"2026-07-24T16:44:43Z","modified":"2026-09-10T03:50:52.955441840Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-qwww-vcr4-c8h2"},{"type":"WEB","url":"https://github.com/remix-run/react-router/pull/15353"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/7a71c728ad116bd78699a258b2014ce9585729f5"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/8ebd5df9932854547963e3255c8454e62430e05d"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182"},{"type":"WEB","url":"https://github.com/remix-run/react-router/releases/tag/react-router%407.18.2"},{"type":"WEB","url":"https://github.com/remix-run/react-router/releases/tag/react-router@8.3.0"}],"versionKeys":["npm:react-router@7.16.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-qx2v-qp2m-jg93","slug":"ghsa-qx2v-qp2m-jg93-0a55e142","dossier":false,"summary":"PostCSS has XSS via Unescaped </style> in its CSS Stringify Output","aliases":["CVE-2026-41305"],"sourceIds":["GHSA-qx2v-qp2m-jg93"],"published":"2026-04-24T15:31:42Z","modified":"2026-09-10T03:51:02.916463871Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-qx2v-qp2m-jg93"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41305"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.10"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-qxrp-vhvm-j765","slug":"ghsa-qxrp-vhvm-j765-63c6e9a2","dossier":false,"summary":"Deserialization of Untrusted Data in Hugging Face Transformers","aliases":["CVE-2024-11392","PYSEC-2024-227"],"sourceIds":["GHSA-qxrp-vhvm-j765","PYSEC-2024-227"],"published":"2024-11-22T22:15:06Z","modified":"2026-09-10T03:50:21.016710762Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11392"},{"type":"WEB","url":"https://github.com/huggingface/transformers/issues/34840"},{"type":"WEB","url":"https://github.com/huggingface/transformers/pull/35296"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2024-227.yaml"},{"type":"WEB","url":"https://www.zerodayinitiative.com/advisories/ZDI-24-1513"},{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-24-1513/"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qxrp-vhvm-j765"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-r28c-9q8g-f849","slug":"ghsa-r28c-9q8g-f849-c8b68fa5","dossier":false,"summary":"PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure","aliases":["CVE-2026-73646"],"sourceIds":["GHSA-r28c-9q8g-f849"],"published":"2026-07-24T16:24:55Z","modified":"2026-09-10T03:50:52.854537677Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-r28c-9q8g-f849"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/95663d3eb7ba26f4854dd19d3b4f4425760cf56c"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.18"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-r47g-fvhr-h676","slug":"ghsa-r47g-fvhr-h676-87fc303b","dossier":false,"summary":"DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM","aliases":["CVE-2026-49459"],"sourceIds":["GHSA-r47g-fvhr-h676"],"published":"2026-06-15T19:53:05Z","modified":"2026-09-10T03:51:09.479024802Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-r47g-fvhr-h676"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-rcv9-qm8p-9p6j","slug":"ghsa-rcv9-qm8p-9p6j-edc1db04","dossier":false,"summary":"Hugging Face Transformers library has Regular Expression Denial of Service","aliases":["CVE-2025-6051","PYSEC-2026-1988"],"sourceIds":["GHSA-rcv9-qm8p-9p6j","PYSEC-2026-1988"],"published":"2025-09-14T18:30:26Z","modified":"2026-09-10T03:50:28.694224028Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6051"},{"type":"WEB","url":"https://github.com/huggingface/transformers/pull/38844"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/54a02160eb030da9be18231c77791f2eb3a52216"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/ba8eaba9865618253f997784aa565b96206426f0"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/af929523-7b59-418a-bf55-301830b2ac9d"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-rcv9-qm8p-9p6j"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-rf6f-7fwh-wjgh","slug":"ghsa-rf6f-7fwh-wjgh-21853d08","dossier":false,"summary":"Prototype Pollution via parse() in NodeJS flatted","aliases":["CVE-2026-33228"],"sourceIds":["GHSA-rf6f-7fwh-wjgh"],"published":"2026-03-19T17:43:54Z","modified":"2026-09-10T03:50:40.760257293Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"WEB","url":"https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33228"},{"type":"WEB","url":"https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"},{"type":"PACKAGE","url":"https://github.com/WebReflection/flatted"},{"type":"WEB","url":"https://github.com/WebReflection/flatted/releases/tag/v3.4.2"}],"versionKeys":["npm:flatted@3.3.3"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-rgw5-rvv9-x895","slug":"ghsa-rgw5-rvv9-x895-7800c7f2","dossier":false,"summary":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","aliases":["CVE-2026-69152"],"sourceIds":["GHSA-rgw5-rvv9-x895"],"published":"2026-08-03T16:35:32Z","modified":"2026-09-10T03:51:14.535270857Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"},{"type":"WEB","url":"https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"},{"type":"PACKAGE","url":"https://github.com/juliangruber/brace-expansion"}],"versionKeys":["npm:brace-expansion@1.1.12","npm:brace-expansion@1.1.16","npm:brace-expansion@2.0.2","npm:brace-expansion@2.1.2","npm:brace-expansion@5.0.7","npm:brace-expansion@5.0.8"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-rp9w-3fw7-7cwq","slug":"ghsa-rp9w-3fw7-7cwq-56ff4e58","dossier":false,"summary":"DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content","aliases":["CVE-2026-49978"],"sourceIds":["GHSA-rp9w-3fw7-7cwq"],"published":"2026-06-15T20:01:45Z","modified":"2026-09-10T03:50:50.441575092Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-rrmf-rvhw-rf47","slug":"ghsa-rrmf-rvhw-rf47-389d8330","dossier":false,"summary":"PyTorch is vulnerable to memory corruption through its torch.jit.script function","aliases":["BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194"],"sourceIds":["GHSA-rrmf-rvhw-rf47"],"published":"2025-03-31T15:30:48Z","modified":"2026-09-10T03:49:48.419046410Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3000"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149623"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149623#issue-2935703015"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/commit/b90c94991cdf8b87c8f7439f79518e0ef2c4ca4f"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-194.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://vuldb.com/?ctiid.302049"},{"type":"WEB","url":"https://vuldb.com/?id.302049"},{"type":"WEB","url":"https://vuldb.com/?submit.524197"}],"versionKeys":["pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1","pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu"],"packageCount":1,"repositoryCount":16},{"id":"GHSA-rxv8-25v2-qmq8","slug":"ghsa-rxv8-25v2-qmq8-9345202e","dossier":false,"summary":"React Router vulnerable to Denial of Service via reflected user input in single-fetch","aliases":["CVE-2026-34077"],"sourceIds":["GHSA-rxv8-25v2-qmq8"],"published":"2026-06-04T15:23:51Z","modified":"2026-06-04T15:41:24.712338Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-rxv8-25v2-qmq8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34077"},{"type":"WEB","url":"https://github.com/remix-run/react-router/commit/59811921d3c7d599077b8cadccdcd65a233165e0"},{"type":"WEB","url":"https://github.com/jacob-ebey/turbo-stream/blob/v2.4.1/src/flatten.ts#L175-L177"},{"type":"WEB","url":"https://github.com/jacob-ebey/turbo-stream/blob/v2.4.1/src/unflatten.ts#L185-L189"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"}],"versionKeys":["npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-v2wj-7wpq-c8vv","slug":"ghsa-v2wj-7wpq-c8vv-2e2df95a","dossier":false,"summary":"DOMPurify contains a Cross-site Scripting vulnerability","aliases":["CVE-2026-0540"],"sourceIds":["GHSA-v2wj-7wpq-c8vv"],"published":"2026-03-03T18:31:33Z","modified":"2026-09-10T03:50:41.055616171Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0540"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/commit/302b51de22535cc90235472c52e3401bedd46f80"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/commit/fca0a938b4261ddc9c0293a289935a9029c049f5"},{"type":"WEB","url":"https://fluidattacks.com/advisories/daft"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.3.2"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/dompurify-xss-via-missing-rawtext-elements-in-safe-for-xml"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-v6wh-96g9-6wx3","slug":"ghsa-v6wh-96g9-6wx3-0e881d08","dossier":false,"summary":"launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows","aliases":["CVE-2026-53632"],"sourceIds":["GHSA-v6wh-96g9-6wx3"],"published":"2026-06-15T17:18:31Z","modified":"2026-09-10T03:50:50.705036566Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/launch-editor/security/advisories/GHSA-v6wh-96g9-6wx3"},{"type":"PACKAGE","url":"https://github.com/vitejs/launch-editor"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-v9jr-rg53-9pgp","slug":"ghsa-v9jr-rg53-9pgp-59acfcab","dossier":false,"summary":"DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback","aliases":["CVE-2026-41238"],"sourceIds":["GHSA-v9jr-rg53-9pgp"],"published":"2026-04-22T17:31:32Z","modified":"2026-09-10T03:51:03.414330043Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-v9jr-rg53-9pgp"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41238"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"},{"type":"WEB","url":"https://github.com/cure53/DOMPurify/releases/tag/3.4.0"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-vgrw-7cvw-pwgx","slug":"ghsa-vgrw-7cvw-pwgx-766c6098","dossier":false,"summary":"PyTorch is vulnerable to memory corruption through its unpack_sequence function","aliases":["BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193"],"sourceIds":["GHSA-vgrw-7cvw-pwgx"],"published":"2025-03-31T15:30:48Z","modified":"2026-06-10T17:41:15.774477397Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2999"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149622"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/149622#issue-2935495265"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/commit/494518046816d29099b7d056a74ffa5c244fdcdd"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-193.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://vuldb.com/?ctiid.302048"},{"type":"WEB","url":"https://vuldb.com/?id.302048"},{"type":"WEB","url":"https://vuldb.com/?submit.524198"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0"],"packageCount":1,"repositoryCount":11},{"id":"GHSA-vm32-vv63-w422","slug":"ghsa-vm32-vv63-w422-b600743a","dossier":false,"summary":"jsPDF Vulnerable to Stored XMP Metadata Injection (Spoofing & Integrity Violation)","aliases":["CVE-2026-24043"],"sourceIds":["GHSA-vm32-vv63-w422"],"published":"2026-02-02T18:28:29Z","modified":"2026-09-10T03:50:35.866172057Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-vm32-vv63-w422"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24043"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/efe54bf50f3f5e5416b2495e3c24624fc80b6cff"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.1.0"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-vxr8-fq34-vvx9","slug":"ghsa-vxr8-fq34-vvx9-34f17990","dossier":false,"summary":"DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output","aliases":["CVE-2026-65899"],"sourceIds":["GHSA-vxr8-fq34-vvx9"],"published":"2026-06-15T20:12:53Z","modified":"2026-09-10T03:50:12.262708400Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-vxr8-fq34-vvx9"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-w39p-vh2g-g8g5","slug":"ghsa-w39p-vh2g-g8g5-47880dfe","dossier":false,"summary":"LangGraph SDK has unsafe URL path construction","aliases":["CVE-2026-48776","PYSEC-2026-2194","PYSEC-2026-2575"],"sourceIds":["GHSA-w39p-vh2g-g8g5","PYSEC-2026-2194","PYSEC-2026-2575"],"published":"2026-06-17T10:55:15.113Z","modified":"2026-07-21T15:15:50.659527533Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/langchain-ai/langgraph/security/advisories/GHSA-w39p-vh2g-g8g5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48776"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-w39p-vh2g-g8g5"},{"type":"PACKAGE","url":"https://github.com/langchain-ai/langgraph"},{"type":"WEB","url":"https://github.com/langchain-ai/langgraph/releases/tag/sdk%3D%3D0.3.15"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langgraph-sdk/PYSEC-2026-2575.yaml"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/langgraph/PYSEC-2026-2194.yaml"},{"type":"PACKAGE","url":"https://pypi.org/project/langgraph-sdk"}],"versionKeys":["pypi:langgraph-sdk@0.3.3","pypi:langgraph@0.1.1"],"packageCount":2,"repositoryCount":2},{"id":"GHSA-w8x4-x68c-m6fc","slug":"ghsa-w8x4-x68c-m6fc-ebddf39e","dossier":false,"summary":"html2pdf.js contains a cross-site scripting vulnerability","aliases":["CVE-2026-22787"],"sourceIds":["GHSA-w8x4-x68c-m6fc"],"published":"2026-01-14T16:53:10Z","modified":"2026-02-03T03:11:31.431997Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/eKoopmans/html2pdf.js/security/advisories/GHSA-w8x4-x68c-m6fc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22787"},{"type":"WEB","url":"https://github.com/eKoopmans/html2pdf.js/issues/865"},{"type":"WEB","url":"https://github.com/eKoopmans/html2pdf.js/pull/877"},{"type":"WEB","url":"https://github.com/eKoopmans/html2pdf.js/commit/988826e336035b39a8608182d7b73c0e3cd78c7b"},{"type":"WEB","url":"https://aydinnyunus.github.io/2026/01/17/cve-2026-22787-html2pdf-xss-vulnerability"},{"type":"PACKAGE","url":"https://github.com/eKoopmans/html2pdf.js"},{"type":"WEB","url":"https://github.com/eKoopmans/html2pdf.js/releases/tag/v0.14.0"}],"versionKeys":["npm:html2pdf.js@0.12.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-wfv2-pwc8-crg5","slug":"ghsa-wfv2-pwc8-crg5-eae5bc7a","dossier":false,"summary":"jsPDF has HTML Injection in New Window paths","aliases":["CVE-2026-31938"],"sourceIds":["GHSA-wfv2-pwc8-crg5"],"published":"2026-03-17T17:07:59Z","modified":"2026-09-10T03:50:41.577731720Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L"}],"references":[{"type":"WEB","url":"https://github.com/parallax/jsPDF/security/advisories/GHSA-wfv2-pwc8-crg5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31938"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/commit/87a40bbd07e6b30575196370670b41f264aa78d7"},{"type":"PACKAGE","url":"https://github.com/parallax/jsPDF"},{"type":"WEB","url":"https://github.com/parallax/jsPDF/releases/tag/v4.2.1"}],"versionKeys":["npm:jspdf@3.0.4","npm:jspdf@4.0.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-wrfc-pvp9-mr9g","slug":"ghsa-wrfc-pvp9-mr9g-c6b03ddf","dossier":false,"summary":"Deserialization of Untrusted Data in Hugging Face Transformers","aliases":["CVE-2024-11393","PYSEC-2024-228"],"sourceIds":["GHSA-wrfc-pvp9-mr9g","PYSEC-2024-228"],"published":"2024-11-22T22:15:07Z","modified":"2026-09-10T03:50:55.987633957Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11393"},{"type":"WEB","url":"https://github.com/huggingface/transformers/issues/34840"},{"type":"WEB","url":"https://github.com/huggingface/transformers/pull/35296"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2024-228.yaml"},{"type":"WEB","url":"https://www.zerodayinitiative.com/advisories/ZDI-24-1514"},{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-24-1514/"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-wrfc-pvp9-mr9g"}],"versionKeys":["pypi:transformers@4.47.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-wrjc-x8rr-h8h6","slug":"ghsa-wrjc-x8rr-h8h6-81da6044","dossier":false,"summary":"React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)","aliases":["CVE-2026-53669"],"sourceIds":["GHSA-wrjc-x8rr-h8h6"],"published":"2026-07-23T19:38:28Z","modified":"2026-09-10T03:51:12.418370518Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/remix-run/react-router/security/advisories/GHSA-wrjc-x8rr-h8h6"},{"type":"WEB","url":"https://github.com/remix-run/react-router/pull/15176"},{"type":"PACKAGE","url":"https://github.com/remix-run/react-router"},{"type":"WEB","url":"https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180"},{"type":"WEB","url":"https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0"}],"versionKeys":["npm:react-router@7.16.0","npm:react-router@7.9.3"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-x3gm-94wq-g975","slug":"ghsa-x3gm-94wq-g975-a197ba31","dossier":false,"summary":"PyTorch: Manipulation of the argument scale/zero_point leads to improper initialization via Quantized Sigmoid Module","aliases":["BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190"],"sourceIds":["GHSA-x3gm-94wq-g975"],"published":"2025-03-10T15:30:47Z","modified":"2026-06-09T22:11:08.734544854Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2149"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/147818"},{"type":"WEB","url":"https://github.com/pytorch/pytorch/issues/147818#issue-2877301660"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/torch/PYSEC-2025-190.yaml"},{"type":"PACKAGE","url":"https://github.com/pytorch/pytorch"},{"type":"WEB","url":"https://vuldb.com/?ctiid.299060"},{"type":"WEB","url":"https://vuldb.com/?id.299060"},{"type":"WEB","url":"https://vuldb.com/?submit.506563"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-x4vx-rjvf-j5p4","slug":"ghsa-x4vx-rjvf-j5p4-522588b9","dossier":false,"summary":"DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects","aliases":["CVE-2026-65901"],"sourceIds":["GHSA-x4vx-rjvf-j5p4"],"published":"2026-06-15T20:00:02Z","modified":"2026-09-10T03:50:51.192721006Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[],"references":[{"type":"WEB","url":"https://github.com/cure53/DOMPurify/security/advisories/GHSA-x4vx-rjvf-j5p4"},{"type":"PACKAGE","url":"https://github.com/cure53/DOMPurify"}],"versionKeys":["npm:dompurify@3.2.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-xph7-9rjv-w5fr","slug":"ghsa-xph7-9rjv-w5fr-77473daf","dossier":false,"summary":"ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to","aliases":["CVE-2026-45831","PYSEC-2026-3815"],"sourceIds":["GHSA-xph7-9rjv-w5fr","PYSEC-2026-3815"],"published":"2026-06-12T18:31:56Z","modified":"2026-09-10T12:25:45.510140945Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45831"},{"type":"WEB","url":"https://github.com/chroma-core/chroma/issues/7588"},{"type":"WEB","url":"https://github.com/chroma-core/chroma/pull/7602"},{"type":"PACKAGE","url":"https://github.com/chroma-core/chroma"},{"type":"WEB","url":"https://www.hiddenlayer.com/sai-security-advisory/2026-06-chromadb-3"},{"type":"PACKAGE","url":"https://pypi.org/project/chromadb"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-xph7-9rjv-w5fr"}],"versionKeys":["pypi:chromadb@1.0.12"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-xrqw-3rrv-vx5w","slug":"ghsa-xrqw-3rrv-vx5w-3d985837","dossier":false,"summary":"Transformers save_pretrained path traversal allows arbitrary file writes through chat template names","aliases":["CVE-2026-9856","PYSEC-2026-3929"],"sourceIds":["GHSA-xrqw-3rrv-vx5w","PYSEC-2026-3929"],"published":"2026-08-02T18:30:20Z","modified":"2026-09-10T12:25:36.528730268Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9856"},{"type":"WEB","url":"https://github.com/huggingface/transformers/pull/46191"},{"type":"WEB","url":"https://github.com/huggingface/transformers/commit/eaaaf8494dd5386634ae37d1d122212fdc315be5"},{"type":"PACKAGE","url":"https://github.com/huggingface/transformers"},{"type":"WEB","url":"https://huntr.com/bounties/362824d5-fe18-40e8-a6cf-62277f97a170"},{"type":"PACKAGE","url":"https://pypi.org/project/transformers"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-xrqw-3rrv-vx5w"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6","pypi:transformers@5.8.0"],"packageCount":1,"repositoryCount":12},{"id":"GHSA-xwg4-73v4-xw9w","slug":"ghsa-xwg4-73v4-xw9w-e114930d","dossier":false,"summary":"nanoid: Integer Overflow or Wraparound","aliases":["CVE-2026-73086"],"sourceIds":["GHSA-xwg4-73v4-xw9w"],"published":"2026-09-01T19:23:45Z","modified":"2026-09-01T19:30:08.615560716Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73086"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/3.3.12"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.11"}],"versionKeys":["npm:nanoid@3.3.11"],"packageCount":1,"repositoryCount":3},{"id":"PYSEC-2025-198","slug":"pysec-2025-198-62b25ed4","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-46148","CVE-2025-46148"],"sourceIds":["PYSEC-2025-198"],"published":"2025-09-25T15:16:12.007Z","modified":"2026-05-20T09:19:19.437232Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a"},{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/65a587a579dfdff887b9b35bb79b9093"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/151198"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/152993"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":2},{"id":"PYSEC-2025-199","slug":"pysec-2025-199-c528cb5a","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-46149","CVE-2025-46149"],"sourceIds":["PYSEC-2025-199"],"published":"2025-09-25T15:16:12.153Z","modified":"2026-05-20T09:19:19.498677Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/147848"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/147961"}],"versionKeys":["pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":1},{"id":"PYSEC-2025-200","slug":"pysec-2025-200-d11172cd","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-46150","CVE-2025-46150"],"sourceIds":["PYSEC-2025-200"],"published":"2025-09-25T15:16:12.303Z","modified":"2026-05-20T09:19:19.559970Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/141538"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/141538#issuecomment-2537424658"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/144395"}],"versionKeys":["pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":1},{"id":"PYSEC-2025-201","slug":"pysec-2025-201-c002b022","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-46152","CVE-2025-46152"],"sourceIds":["PYSEC-2025-201"],"published":"2025-09-25T15:16:12.470Z","modified":"2026-05-20T09:19:19.618679Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/143555"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/143635"}],"versionKeys":["pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":1},{"id":"PYSEC-2025-202","slug":"pysec-2025-202-f0ff1751","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-46153","CVE-2025-46153"],"sourceIds":["PYSEC-2025-202"],"published":"2025-09-25T15:16:12.603Z","modified":"2026-05-20T09:19:19.678555Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/pytorch/pytorch/compare/v2.6.0...v2.7.0"},{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a"},{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/e636f2e7a306105b7e96809e2b85c28a"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/142853"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/143460"}],"versionKeys":["pypi:torch@2.6.0"],"packageCount":1,"repositoryCount":1},{"id":"PYSEC-2025-203","slug":"pysec-2025-203-2febb201","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-55551","CVE-2025-55551"],"sourceIds":["PYSEC-2025-203"],"published":"2025-09-25T15:16:12.887Z","modified":"2026-05-20T09:19:19.739357Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/151401"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0"],"packageCount":1,"repositoryCount":9},{"id":"PYSEC-2025-204","slug":"pysec-2025-204-cdae47da","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-55552","CVE-2025-55552"],"sourceIds":["PYSEC-2025-204"],"published":"2025-09-25T16:15:34.320Z","modified":"2026-05-20T09:19:19.802802Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/147847"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0"],"packageCount":1,"repositoryCount":9},{"id":"PYSEC-2025-205","slug":"pysec-2025-205-fd5e58fd","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-55553","CVE-2025-55553"],"sourceIds":["PYSEC-2025-205"],"published":"2025-09-25T16:15:34.460Z","modified":"2026-05-20T09:19:19.866970Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/151432"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/154645"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0"],"packageCount":1,"repositoryCount":3},{"id":"PYSEC-2025-206","slug":"pysec-2025-206-58322476","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-55554","CVE-2025-55554"],"sourceIds":["PYSEC-2025-206"],"published":"2025-09-25T16:15:34.593Z","modified":"2026-05-20T09:19:19.928295Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/151510"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0"],"packageCount":1,"repositoryCount":9},{"id":"PYSEC-2025-207","slug":"pysec-2025-207-2abef3fc","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-55557","CVE-2025-55557"],"sourceIds":["PYSEC-2025-207"],"published":"2025-09-25T16:15:34.833Z","modified":"2026-05-20T09:19:19.989717Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/151738"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/151931"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0"],"packageCount":1,"repositoryCount":3},{"id":"PYSEC-2025-208","slug":"pysec-2025-208-6e93fe9d","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-55558","CVE-2025-55558"],"sourceIds":["PYSEC-2025-208"],"published":"2025-09-25T16:15:34.960Z","modified":"2026-05-20T09:19:20.054109Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/151523"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/151887"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0"],"packageCount":1,"repositoryCount":3},{"id":"PYSEC-2025-209","slug":"pysec-2025-209-e6f352b0","dossier":false,"summary":null,"aliases":["BIT-pytorch-2025-55560","CVE-2025-55560"],"sourceIds":["PYSEC-2025-209"],"published":"2025-09-25T16:15:35.197Z","modified":"2026-05-20T09:19:20.117285Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/151522"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/151897"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0"],"packageCount":1,"repositoryCount":3},{"id":"PYSEC-2025-211","slug":"pysec-2025-211-d8bd15de","dossier":false,"summary":null,"aliases":["CVE-2025-14920"],"sourceIds":["PYSEC-2025-211"],"published":"2025-12-23T21:15:47.183Z","modified":"2026-05-21T15:00:32.080516132Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1150/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1"],"packageCount":1,"repositoryCount":5},{"id":"PYSEC-2025-212","slug":"pysec-2025-212-a011b97d","dossier":false,"summary":null,"aliases":["CVE-2025-14921"],"sourceIds":["PYSEC-2025-212"],"published":"2025-12-23T21:15:47.340Z","modified":"2026-05-21T15:00:32.052313357Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1149/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1"],"packageCount":1,"repositoryCount":5},{"id":"PYSEC-2025-213","slug":"pysec-2025-213-9043dc9b","dossier":false,"summary":null,"aliases":["CVE-2025-14924"],"sourceIds":["PYSEC-2025-213"],"published":"2025-12-23T21:15:47.600Z","modified":"2026-05-21T15:00:32.048516839Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1141/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1"],"packageCount":1,"repositoryCount":5},{"id":"PYSEC-2025-214","slug":"pysec-2025-214-eb241255","dossier":false,"summary":null,"aliases":["CVE-2025-14926"],"sourceIds":["PYSEC-2025-214"],"published":"2025-12-23T21:15:47.857Z","modified":"2026-05-21T15:00:32.929011749Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1147/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1"],"packageCount":1,"repositoryCount":5},{"id":"PYSEC-2025-215","slug":"pysec-2025-215-6064f491","dossier":false,"summary":null,"aliases":["CVE-2025-14927"],"sourceIds":["PYSEC-2025-215"],"published":"2025-12-23T21:15:47.987Z","modified":"2026-05-21T15:00:32.888290877Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1148/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1"],"packageCount":1,"repositoryCount":5},{"id":"PYSEC-2025-216","slug":"pysec-2025-216-5708ed01","dossier":false,"summary":null,"aliases":["CVE-2025-14928"],"sourceIds":["PYSEC-2025-216"],"published":"2025-12-23T21:15:48.110Z","modified":"2026-05-21T15:00:32.939311939Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1146/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1"],"packageCount":1,"repositoryCount":5},{"id":"PYSEC-2025-217","slug":"pysec-2025-217-2c1ad388","dossier":false,"summary":null,"aliases":["CVE-2025-14929"],"sourceIds":["PYSEC-2025-217"],"published":"2025-12-23T21:15:48.240Z","modified":"2026-05-21T15:00:24.271970226Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1144/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6"],"packageCount":1,"repositoryCount":11},{"id":"PYSEC-2025-218","slug":"pysec-2025-218-39811fc3","dossier":false,"summary":null,"aliases":["CVE-2025-14930"],"sourceIds":["PYSEC-2025-218"],"published":"2025-12-23T21:15:48.367Z","modified":"2026-05-21T15:00:33.791364554Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1145/"}],"versionKeys":["pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1"],"packageCount":1,"repositoryCount":8},{"id":"PYSEC-2026-139","slug":"pysec-2026-139-96951ff6","dossier":false,"summary":null,"aliases":["BIT-pytorch-2026-4538","CVE-2026-4538"],"sourceIds":["PYSEC-2026-139"],"published":"2026-03-22T05:16:20.273Z","modified":"2026-05-21T15:00:31.962442644Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/pytorch/pytorch/"},{"type":"ADVISORY","url":"https://vuldb.com/?id.352326"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.774681"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.352326"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/pull/176791"}],"versionKeys":["pypi:torch@2.10.0","pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu"],"packageCount":1,"repositoryCount":14},{"id":"PYSEC-2026-2286","slug":"pysec-2026-2286-8795b007","dossier":false,"summary":null,"aliases":["BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856"],"sourceIds":["PYSEC-2026-2286"],"published":"2026-01-27T22:15:56.470Z","modified":"2026-07-13T07:26:23.701611780Z","checkedAt":"2026-09-16T04:45:26.395Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-24747"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24747.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:24977"},{"type":"ADVISORY","url":"https://github.com/pytorch/pytorch/releases/tag/v2.10.0"},{"type":"ADVISORY","url":"https://github.com/pytorch/pytorch/security/advisories/GHSA-63cw-57p8-fm3p"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433612"},{"type":"REPORT","url":"https://github.com/pytorch/pytorch/issues/163105"},{"type":"FIX","url":"https://github.com/pytorch/pytorch/163122/commit/954dc5183ee9205cbe79876ad05dd2d9ae752139"}],"versionKeys":["pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0","pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu"],"packageCount":1,"repositoryCount":13}]}}