[{"data":1,"prerenderedAt":6866},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-10775":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":291,"related":300},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":112,"artifactResolvedComponentCount":111,"exactManifestPinCount":113,"packageCount":114,"ecosystems":115,"aiPackageCount":65,"licenseExpressionCount":117,"unknownLicensePackageCount":113,"advisoryIds":118,"advisoryCount":289,"providers":290},"opencode:10775","opencode-10775",10775,"Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision","A project experimenting with training costs associated with computer vision model training for object counting tasks. Keywords: uba, umweltbundesamt, ki-lab, computer vision, object counting","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fcommit\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae","2026-05-12T12:59:42.012Z","2026-05-12T12:57:19.000Z",{"complete":91,"entryCount":92,"truncated":46},true,62,[94,104],{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"errorCode":102,"error":103,"componentCount":38},"sbom.json","sbom-json","f6616dd603138e46577a68bafffdf922a23e25aa","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fsbom.json","5ae12d5615c84d40c25d23a8c2e2306ea5f3f1f75a14a27e1c36426ce966c99f",476141,"parse_error","invalid_json","KI Dependency Atlas: SBOM is not valid JSON",{"path":55,"kind":105,"blobSha":106,"sourceUrl":107,"commitSha":86,"contentSha256":108,"byteCount":109,"state":110,"componentCount":111},"uv-lock","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","e2f86442aaca182ff71abf8a0d916c515193ed063af29d024bd5365c66c3aa2c",778375,"parsed",242,244,2,227,[116],"pypi",22,[119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288],"GHSA-248v-346w-9cwc","GHSA-27jp-wm6q-gp25","GHSA-29pf-2h5f-8g72","GHSA-29vq-49wr-vm6x","GHSA-2c2j-9gv5-cj73","GHSA-2g68-c3qc-8985","GHSA-2h4p-vjrc-8xpq","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3x9g-8vmp-wqvf","GHSA-42h5-h8qh-vv9v","GHSA-43qf-4rqw-9q2g","GHSA-46r5-x6jq-v8g6","GHSA-48p4-8xcf-vxj5","GHSA-4w7r-h757-3r74","GHSA-4x5p-f36r-mxxr","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-53q9-r3pm-6pq6","GHSA-59p9-h35m-wg4g","GHSA-5qmp-p3c4-72qj","GHSA-5rjg-fvgr-3xxf","GHSA-5wmx-573v-2qwq","GHSA-5xmw-vc9v-4wf2","GHSA-62q4-447f-wv8h","GHSA-63vm-454h-vhhq","GHSA-65h7-c7c4-mghx","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-69w3-r845-3855","GHSA-6rvg-6v2m-4j46","GHSA-6w46-j5rx-g56g","GHSA-7545-fcxq-7j24","GHSA-75cm-x2w3-8mgf","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7p48-42j8-8846","GHSA-7qhf-v65m-g5f3","GHSA-7rxf-gvfg-47g4","GHSA-82w8-qh3p-5jfq","GHSA-84pr-m4jr-85g5","GHSA-86qp-5c8j-p5mr","GHSA-87hc-h4r5-73f7","GHSA-887c-mr87-cxwp","GHSA-8c7q-86fq-vvmh","GHSA-8m59-7xv8-735h","GHSA-8qvm-5x2c-j2w7","GHSA-8vgw-p6qm-5gr7","GHSA-9356-575x-2w9m","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2m9-wcf4-cwwx","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-f9vj-2wh5-fj8j","GHSA-fgcw-684q-jj6r","GHSA-fh64-r2vc-xvhr","GHSA-fhff-qmm8-h2fp","GHSA-fjrm-76x2-c4q4","GHSA-fpwr-67px-3qhx","GHSA-g35p-px32-whv6","GHSA-g6pg-52vf-843h","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gq3w-7jj3-x7gr","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hgf8-39gv-g3f2","GHSA-hxwh-jpp2-84pm","GHSA-hxxf-235m-72v3","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-jr27-m4p2-rc6r","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgf9-4vpg-hj56","GHSA-mv93-w799-cj2w","GHSA-p423-j2cm-9vmq","GHSA-pgqp-8h46-6x4j","GHSA-phhr-52qp-3mj4","GHSA-pq67-6m6q-mj2v","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2r8-vmq7-fpx2","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r23q-823p-vmf7","GHSA-r5m9-wm49-959f","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rvhj-8chj-8v3c","GHSA-v87r-6q3f-2j67","GHSA-v92g-xgxw-vvmm","GHSA-vgrw-7cvw-pwgx","GHSA-vhcx-3pq2-4fvc","GHSA-vqfr-h8mv-ghfj","GHSA-vqwp-45wm-r9r5","GHSA-w5xq-c4pf-ghq7","GHSA-w853-jp5j-5j7f","GHSA-wf7f-8fxf-xfxc","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x2qx-6953-8485","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xch3-2f9x-wh9f","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-265","PYSEC-2025-266","PYSEC-2025-267","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-2286","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",170,[],{"files":292,"occurrenceCount":112},[293,298,299],{"path":294,"kind":295,"sourceUrl":296,"commitSha":86,"blobSha":297,"state":110,"componentCount":113},"pyproject.toml","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fpyproject.toml","d0cfb5226b0a23dc8e2f95f26b3acccdf2c3e09f",{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"errorCode":102,"error":103,"componentCount":38},{"path":55,"kind":105,"blobSha":106,"sourceUrl":107,"commitSha":86,"contentSha256":108,"byteCount":109,"state":110,"componentCount":111},{"packages":301,"vulnerabilities":2365},[302,315,328,338,348,357,366,376,385,397,407,417,426,437,446,456,465,474,484,493,503,512,521,531,540,550,559,568,577,586,595,604,613,622,631,640,649,658,667,676,685,695,704,713,722,731,740,749,758,767,776,785,794,803,812,821,829,838,847,856,865,873,882,891,900,909,918,927,936,945,954,963,972,981,990,999,1008,1017,1026,1035,1044,1053,1064,1073,1082,1091,1100,1109,1118,1127,1136,1145,1154,1163,1172,1180,1189,1198,1207,1216,1225,1234,1243,1252,1261,1270,1278,1287,1296,1305,1314,1323,1332,1341,1350,1359,1368,1376,1384,1393,1402,1411,1420,1429,1438,1448,1458,1468,1478,1486,1496,1506,1516,1526,1536,1546,1556,1565,1575,1584,1593,1601,1609,1617,1626,1634,1642,1651,1660,1670,1679,1688,1697,1706,1714,1723,1732,1740,1750,1759,1768,1777,1785,1794,1802,1811,1820,1829,1838,1847,1856,1864,1873,1882,1891,1900,1909,1918,1927,1936,1945,1955,1964,1973,1982,1991,1999,2008,2017,2026,2035,2044,2053,2062,2072,2081,2089,2097,2106,2115,2124,2133,2142,2150,2159,2168,2177,2186,2195,2204,2213,2222,2231,2240,2248,2258,2266,2275,2284,2293,2303,2311,2320,2329,2338,2347,2356],{"id":303,"slug":304,"identity":305,"label":306,"aiRelevant":91,"provider":307,"advisoryCount":70,"licenseExpressions":310,"versions":312,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":314},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":308,"label":309},"hugging-face","Hugging Face",[311],"Apache-2.0",[313],"4.57.4",[55],{"id":316,"slug":317,"identity":318,"label":319,"aiRelevant":91,"provider":320,"advisoryCount":321,"licenseExpressions":322,"versions":324,"dossier":91,"occurrenceCount":113,"directOccurrenceCount":32,"evidenceFiles":327},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[323],"BSD-3-Clause",[325,326],"2.7.1+cpu","2.9.1",[294,55],{"id":329,"slug":330,"identity":331,"label":332,"aiRelevant":91,"provider":320,"advisoryCount":38,"licenseExpressions":333,"versions":335,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":337},"package:pypi:codecarbon","codecarbon-ee26b31e","pypi:codecarbon","CodeCarbon",[334],"MIT",[336],"3.2.1",[55],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":91,"provider":320,"advisoryCount":38,"licenseExpressions":343,"versions":345,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":347},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[344],"non-standard",[346],"0.22.2",[55],{"id":349,"slug":350,"identity":351,"label":352,"aiRelevant":91,"provider":320,"advisoryCount":38,"licenseExpressions":353,"versions":354,"dossier":91,"occurrenceCount":113,"directOccurrenceCount":32,"evidenceFiles":356},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[311],[355],"4.11.0.86",[294,55],{"id":358,"slug":359,"identity":360,"label":361,"aiRelevant":91,"provider":320,"advisoryCount":38,"licenseExpressions":362,"versions":363,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":365},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[323,344],[364],"1.8.0",[55],{"id":367,"slug":368,"identity":369,"label":370,"aiRelevant":91,"provider":320,"advisoryCount":38,"licenseExpressions":371,"versions":373,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":375},"package:pypi:ultralytics","ultralytics-df6c7359","pypi:ultralytics","Ultralytics",[372],"AGPL-3.0",[374],"8.3.252",[55],{"id":377,"slug":378,"identity":379,"label":380,"aiRelevant":46,"provider":320,"advisoryCount":321,"licenseExpressions":381,"versions":382,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":384},"package:pypi:mlflow","mlflow-43f98b3c","pypi:mlflow","mlflow",[344],[383],"3.8.1",[55],{"id":386,"slug":387,"identity":388,"label":389,"aiRelevant":46,"provider":320,"advisoryCount":390,"licenseExpressions":391,"versions":394,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":396},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[392,393],"HPND","MIT-CMU",[395],"12.1.0",[55],{"id":398,"slug":399,"identity":400,"label":401,"aiRelevant":46,"provider":320,"advisoryCount":402,"licenseExpressions":403,"versions":404,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":406},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",10,[311],[405],"6.5.4",[55],{"id":408,"slug":409,"identity":410,"label":411,"aiRelevant":46,"provider":320,"advisoryCount":412,"licenseExpressions":413,"versions":414,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":416},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",8,[323],[415],"0.50.0",[55],{"id":418,"slug":419,"identity":420,"label":421,"aiRelevant":46,"provider":320,"advisoryCount":65,"licenseExpressions":422,"versions":423,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":425},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[334],[424],"2.6.3",[55],{"id":427,"slug":428,"identity":429,"label":430,"aiRelevant":46,"provider":320,"advisoryCount":431,"licenseExpressions":432,"versions":434,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":436},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",6,[433],"Apache-2.0 OR BSD-3-Clause",[435],"46.0.3",[55],{"id":438,"slug":439,"identity":440,"label":441,"aiRelevant":46,"provider":320,"advisoryCount":431,"licenseExpressions":442,"versions":443,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":445},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[323,344],[444],"3.1.5",[55],{"id":447,"slug":448,"identity":449,"label":450,"aiRelevant":46,"provider":320,"advisoryCount":451,"licenseExpressions":452,"versions":453,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":455},"package:pypi:flask-cors","flask-cors-348fb6bb","pypi:flask-cors","flask-cors",5,[334],[454],"6.0.2",[55],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":46,"provider":320,"advisoryCount":451,"licenseExpressions":461,"versions":462,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":464},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",[323],[463],"3.1.46",[55],{"id":466,"slug":467,"identity":468,"label":469,"aiRelevant":46,"provider":320,"advisoryCount":34,"licenseExpressions":470,"versions":471,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":473},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[323,344],[472],"3.1.6",[55],{"id":475,"slug":476,"identity":477,"label":478,"aiRelevant":46,"provider":320,"advisoryCount":479,"licenseExpressions":480,"versions":481,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":483},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[311],[482],"2.32.5",[55],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":46,"provider":320,"advisoryCount":479,"licenseExpressions":489,"versions":490,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":492},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[334],[491],"80.9.0",[55],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":46,"provider":320,"advisoryCount":113,"licenseExpressions":498,"versions":500,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":502},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[334,499],"Unlicense",[501],"3.20.3",[55],{"id":504,"slug":505,"identity":506,"label":507,"aiRelevant":46,"provider":320,"advisoryCount":113,"licenseExpressions":508,"versions":509,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":511},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[334],[510],"1.3.10",[55],{"id":513,"slug":514,"identity":515,"label":516,"aiRelevant":46,"provider":320,"advisoryCount":113,"licenseExpressions":517,"versions":518,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":520},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[323],[519],"6.33.4",[55],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":46,"provider":320,"advisoryCount":113,"licenseExpressions":526,"versions":528,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":530},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",[527],"BSD-2-Clause",[529],"0.6.1",[55],{"id":532,"slug":533,"identity":534,"label":535,"aiRelevant":46,"provider":320,"advisoryCount":113,"licenseExpressions":536,"versions":537,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":539},"package:pypi:streamlit","streamlit-b61aa01e","pypi:streamlit","streamlit",[311],[538],"1.55.0",[55],{"id":541,"slug":542,"identity":543,"label":544,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":545,"versions":547,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":549},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[546],"MPL-2.0",[548],"2026.1.4",[55],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":555,"versions":556,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":558},"package:pypi:click","click-ef97f731","pypi:click","click",[323,344],[557],"8.3.1",[55],{"id":560,"slug":561,"identity":562,"label":563,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":564,"versions":565,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":567},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[323,344],[566],"3.1.2",[55],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":573,"versions":574,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":576},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[334],[575],"4.61.1",[55],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":582,"versions":583,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":585},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[334],[584],"0.16.0",[55],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":591,"versions":592,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":594},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[323,344],[593],"3.11",[55],{"id":596,"slug":597,"identity":598,"label":599,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":600,"versions":601,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":603},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[323,344],[602],"5.9.1",[55],{"id":605,"slug":606,"identity":607,"label":608,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":609,"versions":610,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":612},"package:pypi:jwcrypto","jwcrypto-5c3130dd","pypi:jwcrypto","jwcrypto",[344],[611],"1.5.6",[55],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":618,"versions":619,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":621},"package:pypi:marimo","marimo-47407878","pypi:marimo","marimo",[311],[620],"0.23.4",[55],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":627,"versions":628,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":630},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[323],[629],"3.10",[55],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":636,"versions":637,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":639},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[311,344],[638],"22.0.0",[55],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":645,"versions":646,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":648},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[527],[647],"2.19.2",[55],{"id":650,"slug":651,"identity":652,"label":653,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":654,"versions":655,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":657},"package:pypi:pymdown-extensions","pymdown-extensions-74c5b54c","pypi:pymdown-extensions","pymdown-extensions",[334],[656],"10.21.2",[55],{"id":659,"slug":660,"identity":661,"label":662,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":663,"versions":664,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":666},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[334],[665],"9.0.2",[55],{"id":668,"slug":669,"identity":670,"label":671,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":672,"versions":673,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":675},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[323],[674],"1.2.1",[55],{"id":677,"slug":678,"identity":679,"label":680,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":681,"versions":682,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":684},"package:pypi:sqlparse","sqlparse-96380dda","pypi:sqlparse","sqlparse",[344],[683],"0.5.5",[55],{"id":686,"slug":687,"identity":688,"label":689,"aiRelevant":46,"provider":320,"advisoryCount":32,"licenseExpressions":690,"versions":692,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":694},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[691],"MIT AND MPL-2.0",[693],"4.67.1",[55],{"id":696,"slug":697,"identity":698,"label":699,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":700,"versions":701,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":703},"package:pypi:absl-py","absl-py-50126725","pypi:absl-py","absl-py",[311],[702],"2.3.1",[55],{"id":705,"slug":706,"identity":707,"label":708,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":709,"versions":710,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":712},"package:pypi:addict","addict-db588a7d","pypi:addict","addict",[334],[711],"2.4.0",[55],{"id":714,"slug":715,"identity":716,"label":717,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":718,"versions":719,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":721},"package:pypi:albucore","albucore-2d92e9fa","pypi:albucore","albucore",[344],[720],"0.0.24",[55],{"id":723,"slug":724,"identity":725,"label":726,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":727,"versions":728,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":730},"package:pypi:albumentations","albumentations-d333cb03","pypi:albumentations","albumentations",[344],[729],"2.0.8",[55],{"id":732,"slug":733,"identity":734,"label":735,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":736,"versions":737,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":739},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[334],[738],"1.18.0",[55],{"id":741,"slug":742,"identity":743,"label":744,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":745,"versions":746,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":748},"package:pypi:altair","altair-01b7f976","pypi:altair","altair",[344],[747],"6.0.0",[55],{"id":750,"slug":751,"identity":752,"label":753,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":754,"versions":755,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":757},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[334],[756],"0.0.4",[55],{"id":759,"slug":760,"identity":761,"label":762,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":763,"versions":764,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":766},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[334],[765],"0.7.0",[55],{"id":768,"slug":769,"identity":770,"label":771,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":772,"versions":773,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":775},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[344],[774],"4.9.3",[55],{"id":777,"slug":778,"identity":779,"label":780,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":781,"versions":782,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":784},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[334],[783],"4.12.1",[55],{"id":786,"slug":787,"identity":788,"label":789,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":790,"versions":791,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":793},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[344],[792],"0.1.4",[55],{"id":795,"slug":796,"identity":797,"label":798,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":799,"versions":800,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":802},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[344],[801],"1.4.0",[55],{"id":804,"slug":805,"identity":806,"label":807,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":808,"versions":809,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":811},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[311],[810],"3.0.1",[55],{"id":813,"slug":814,"identity":815,"label":816,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":817,"versions":818,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":820},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[334],[819],"25.4.0",[55],{"id":822,"slug":823,"identity":824,"label":825,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":826,"versions":827,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":828},"package:pypi:autograd","autograd-3303bc3f","pypi:autograd","autograd",[344],[364],[55],{"id":830,"slug":831,"identity":832,"label":833,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":834,"versions":835,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":837},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[334],[836],"1.9.0",[55],{"id":839,"slug":840,"identity":841,"label":842,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":843,"versions":844,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":846},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[334],[845],"6.2.4",[55],{"id":848,"slug":849,"identity":850,"label":851,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":852,"versions":853,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":855},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[334],[854],"2.0.0",[55],{"id":857,"slug":858,"identity":859,"label":860,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":861,"versions":862,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":864},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[334],[863],"3.4.4",[55],{"id":866,"slug":867,"identity":868,"label":869,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":870,"versions":871,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":872},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[323],[566],[55],{"id":874,"slug":875,"identity":876,"label":877,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":878,"versions":879,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":881},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[344],[880],"0.4.6",[55],{"id":883,"slug":884,"identity":885,"label":886,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":887,"versions":888,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":890},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[334],[889],"6.10.1",[55],{"id":892,"slug":893,"identity":894,"label":895,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":896,"versions":897,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":899},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[344],[898],"0.2.3",[55],{"id":901,"slug":902,"identity":903,"label":904,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":905,"versions":906,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":908},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[344],[907],"1.3.3",[55],{"id":910,"slug":911,"identity":912,"label":913,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":914,"versions":915,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":917},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[344],[916],"0.12.1",[55],{"id":919,"slug":920,"identity":921,"label":922,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":923,"versions":924,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":926},"package:pypi:databricks-sdk","databricks-sdk-26867d3a","pypi:databricks-sdk","databricks-sdk",[344],[925],"0.77.0",[55],{"id":928,"slug":929,"identity":930,"label":931,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":932,"versions":933,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":935},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[334],[934],"1.8.19",[55],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":941,"versions":942,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":944},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[527,344],[943],"5.2.1",[55],{"id":946,"slug":947,"identity":948,"label":949,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":950,"versions":951,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":953},"package:pypi:docker","docker-fa61cb72","pypi:docker","docker",[311],[952],"7.1.0",[55],{"id":955,"slug":956,"identity":957,"label":958,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":959,"versions":960,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":962},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[344],[961],"0.22.4",[55],{"id":964,"slug":965,"identity":966,"label":967,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":968,"versions":969,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":971},"package:pypi:escnn","escnn-7e2e5c8e","pypi:escnn","escnn",[344],[970],"1.0.11",[55],{"id":973,"slug":974,"identity":975,"label":976,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":977,"versions":978,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":980},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[334],[979],"2.2.1",[55],{"id":982,"slug":983,"identity":984,"label":985,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":986,"versions":987,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":989},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[334],[988],"0.128.0",[55],{"id":991,"slug":992,"identity":993,"label":994,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":995,"versions":996,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":998},"package:pypi:fief-client","fief-client-da5c3c7d","pypi:fief-client","fief-client",[334],[997],"0.20.0",[55],{"id":1000,"slug":1001,"identity":1002,"label":1003,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1004,"versions":1005,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1007},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[323,344],[1006],"2026.1.0",[55],{"id":1009,"slug":1010,"identity":1011,"label":1012,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1013,"versions":1014,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1016},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[344],[1015],"4.0.12",[55],{"id":1018,"slug":1019,"identity":1020,"label":1021,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1022,"versions":1023,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1025},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[311],[1024],"2.47.0",[55],{"id":1027,"slug":1028,"identity":1029,"label":1030,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1031,"versions":1032,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1034},"package:pypi:graphene","graphene-e89251f5","pypi:graphene","graphene",[334],[1033],"3.4.3",[55],{"id":1036,"slug":1037,"identity":1038,"label":1039,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1040,"versions":1041,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1043},"package:pypi:graphql-core","graphql-core-6d217145","pypi:graphql-core","graphql-core",[334],[1042],"3.2.7",[55],{"id":1045,"slug":1046,"identity":1047,"label":1048,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1049,"versions":1050,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1052},"package:pypi:graphql-relay","graphql-relay-f4584f38","pypi:graphql-relay","graphql-relay",[334],[1051],"3.2.0",[55],{"id":1054,"slug":1055,"identity":1056,"label":1057,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1058,"versions":1061,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1063},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[334,1059,1060],"MIT AND PSF-2.0","MIT AND Python-2.0",[1062],"3.3.0",[55],{"id":1065,"slug":1066,"identity":1067,"label":1068,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1069,"versions":1070,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1072},"package:pypi:groundingdino-py","groundingdino-py-f92a519c","pypi:groundingdino-py","groundingdino-py",[344],[1071],"0.4.0",[55],{"id":1074,"slug":1075,"identity":1076,"label":1077,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1078,"versions":1079,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1081},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[311],[1080],"1.76.0",[55],{"id":1083,"slug":1084,"identity":1085,"label":1086,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1087,"versions":1088,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1090},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[334],[1089],"23.0.0",[55],{"id":1092,"slug":1093,"identity":1094,"label":1095,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1096,"versions":1097,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1099},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[311],[1098],"1.2.0",[55],{"id":1101,"slug":1102,"identity":1103,"label":1104,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1105,"versions":1106,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1108},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[323],[1107],"1.0.9",[55],{"id":1110,"slug":1111,"identity":1112,"label":1113,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1114,"versions":1115,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1117},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[323],[1116],"0.27.2",[55],{"id":1119,"slug":1120,"identity":1121,"label":1122,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1123,"versions":1124,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1126},"package:pypi:huey","huey-1045cc1e","pypi:huey","huey",[334],[1125],"2.6.0",[55],{"id":1128,"slug":1129,"identity":1130,"label":1131,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1132,"versions":1133,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1135},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[311,344],[1134],"0.36.0",[55],{"id":1137,"slug":1138,"identity":1139,"label":1140,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1141,"versions":1142,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1144},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[334],[1143],"1.3.2",[55],{"id":1146,"slug":1147,"identity":1148,"label":1149,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1150,"versions":1151,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1153},"package:pypi:imageio","imageio-b31e54e3","pypi:imageio","imageio",[527],[1152],"2.37.2",[55],{"id":1155,"slug":1156,"identity":1157,"label":1158,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1159,"versions":1160,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1162},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[311,344],[1161],"8.7.1",[55],{"id":1164,"slug":1165,"identity":1166,"label":1167,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1168,"versions":1169,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1171},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[334],[1170],"2.3.0",[55],{"id":1173,"slug":1174,"identity":1175,"label":1176,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1177,"versions":1178,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1179},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[323,344],[952],[55],{"id":1181,"slug":1182,"identity":1183,"label":1184,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1185,"versions":1186,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1188},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[323],[1187],"9.9.0",[55],{"id":1190,"slug":1191,"identity":1192,"label":1193,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1194,"versions":1195,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1197},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[344],[1196],"1.1.1",[55],{"id":1199,"slug":1200,"identity":1201,"label":1202,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1203,"versions":1204,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1206},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[323],[1205],"8.1.8",[55],{"id":1208,"slug":1209,"identity":1210,"label":1211,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1212,"versions":1213,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1215},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[323,344],[1214],"2.2.0",[55],{"id":1217,"slug":1218,"identity":1219,"label":1220,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1221,"versions":1222,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1224},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[334],[1223],"0.19.2",[55],{"id":1226,"slug":1227,"identity":1228,"label":1229,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1230,"versions":1231,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1233},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[323],[1232],"1.5.3",[55],{"id":1235,"slug":1236,"identity":1237,"label":1238,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1239,"versions":1240,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1242},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[334],[1241],"4.26.0",[55],{"id":1244,"slug":1245,"identity":1246,"label":1247,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1248,"versions":1249,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1251},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[334],[1250],"2025.9.1",[55],{"id":1253,"slug":1254,"identity":1255,"label":1256,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1257,"versions":1258,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1260},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[344],[1259],"8.8.0",[55],{"id":1262,"slug":1263,"identity":1264,"label":1265,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1266,"versions":1267,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1269},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[323,344],[1268],"3.0.16",[55],{"id":1271,"slug":1272,"identity":1273,"label":1274,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1275,"versions":1276,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1277},"package:pypi:jwt","jwt-16a64554","pypi:jwt","jwt",[344],[801],[55],{"id":1279,"slug":1280,"identity":1281,"label":1282,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1283,"versions":1284,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1286},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[344],[1285],"1.4.9",[55],{"id":1288,"slug":1289,"identity":1290,"label":1291,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1292,"versions":1293,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1295},"package:pypi:lazy-loader","lazy-loader-5e67832b","pypi:lazy-loader","lazy-loader",[344],[1294],"0.4",[55],{"id":1297,"slug":1298,"identity":1299,"label":1300,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1301,"versions":1302,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1304},"package:pypi:lie-learn","lie-learn-02b94107","pypi:lie-learn","lie-learn",[344],[1303],"0.0.2",[55],{"id":1306,"slug":1307,"identity":1308,"label":1309,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1310,"versions":1311,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1313},"package:pypi:lightning-utilities","lightning-utilities-46646cd2","pypi:lightning-utilities","lightning-utilities",[311],[1312],"0.15.2",[55],{"id":1315,"slug":1316,"identity":1317,"label":1318,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1319,"versions":1320,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1322},"package:pypi:loro","loro-52ec71d9","pypi:loro","loro",[],[1321],"1.10.3",[55],{"id":1324,"slug":1325,"identity":1326,"label":1327,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1328,"versions":1329,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1331},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[334],[1330],"4.0.0",[55],{"id":1333,"slug":1334,"identity":1335,"label":1336,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1337,"versions":1338,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1340},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[323,344],[1339],"3.0.3",[55],{"id":1342,"slug":1343,"identity":1344,"label":1345,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1346,"versions":1347,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1349},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[344],[1348],"3.10.8",[55],{"id":1351,"slug":1352,"identity":1353,"label":1354,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1355,"versions":1356,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1358},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[344],[1357],"0.2.1",[55],{"id":1360,"slug":1361,"identity":1362,"label":1363,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1364,"versions":1365,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1367},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[334],[1366],"0.1.2",[55],{"id":1369,"slug":1370,"identity":1371,"label":1372,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1373,"versions":1374,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1375},"package:pypi:mlflow-skinny","mlflow-skinny-05e8b169","pypi:mlflow-skinny","mlflow-skinny",[344],[383],[55],{"id":1377,"slug":1378,"identity":1379,"label":1380,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1381,"versions":1382,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1383},"package:pypi:mlflow-tracing","mlflow-tracing-6ac72d11","pypi:mlflow-tracing","mlflow-tracing",[344],[383],[55],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1389,"versions":1390,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1392},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[344],[1391],"1.3.0",[55],{"id":1394,"slug":1395,"identity":1396,"label":1397,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1398,"versions":1399,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1401},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[323,344],[1400],"0.21.1",[55],{"id":1403,"slug":1404,"identity":1405,"label":1406,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1407,"versions":1408,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1410},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[311],[1409],"6.7.1",[55],{"id":1412,"slug":1413,"identity":1414,"label":1415,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1416,"versions":1417,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1419},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[334,344],[1418],"2.16.0",[55],{"id":1421,"slug":1422,"identity":1423,"label":1424,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1425,"versions":1426,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1428},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[344],[1427],"1.6.0",[55],{"id":1430,"slug":1431,"identity":1432,"label":1433,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1434,"versions":1435,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1437},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[323,344],[1436],"3.6.1",[55],{"id":1439,"slug":1440,"identity":1441,"label":1442,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1443,"versions":1445,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1447},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1444,344],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1446],"1.26.4",[55],{"id":1449,"slug":1450,"identity":1451,"label":1452,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1453,"versions":1454,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1457},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[344],[1455,1456],"12.6.4.1","12.8.4.1",[55],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1463,"versions":1464,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1467},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[344],[1465,1466],"12.6.80","12.8.90",[55],{"id":1469,"slug":1470,"identity":1471,"label":1472,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1473,"versions":1474,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1477},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[344],[1475,1476],"12.6.77","12.8.93",[55],{"id":1479,"slug":1480,"identity":1481,"label":1482,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1483,"versions":1484,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1485},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[344],[1475,1466],[55],{"id":1487,"slug":1488,"identity":1489,"label":1490,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1491,"versions":1492,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1495},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[344],[1493,1494],"9.10.2.21","9.5.1.17",[55],{"id":1497,"slug":1498,"identity":1499,"label":1500,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1501,"versions":1502,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1505},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[344],[1503,1504],"11.3.0.4","11.3.3.83",[55],{"id":1507,"slug":1508,"identity":1509,"label":1510,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1511,"versions":1512,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1515},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[344],[1513,1514],"1.11.1.6","1.13.1.3",[55],{"id":1517,"slug":1518,"identity":1519,"label":1520,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1521,"versions":1522,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1525},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[344],[1523,1524],"10.3.7.77","10.3.9.90",[55],{"id":1527,"slug":1528,"identity":1529,"label":1530,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1531,"versions":1532,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1535},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[344],[1533,1534],"11.7.1.2","11.7.3.90",[55],{"id":1537,"slug":1538,"identity":1539,"label":1540,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1541,"versions":1542,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1545},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[344],[1543,1544],"12.5.4.2","12.5.8.93",[55],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1551,"versions":1552,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1555},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[344],[1553,1554],"0.6.3","0.7.1",[55],{"id":1557,"slug":1558,"identity":1559,"label":1560,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1561,"versions":1562,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1564},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[344],[1563],"13.590.44",[55],{"id":1566,"slug":1567,"identity":1568,"label":1569,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1570,"versions":1571,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1574},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[323,344],[1572,1573],"2.26.2","2.27.5",[55],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1580,"versions":1581,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1583},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[344],[1582,1476],"12.6.85",[55],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1589,"versions":1590,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1592},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[323,344],[1591],"3.3.20",[55],{"id":1594,"slug":1595,"identity":1596,"label":1597,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1598,"versions":1599,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":1600},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[311,344],[1475,1466],[55],{"id":1602,"slug":1603,"identity":1604,"label":1605,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1606,"versions":1607,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1608},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[323],[1170],[55],{"id":1610,"slug":1611,"identity":1612,"label":1613,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1614,"versions":1615,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1616},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[311],[355],[55],{"id":1618,"slug":1619,"identity":1620,"label":1621,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1622,"versions":1623,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1625},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[311],[1624],"1.39.1",[55],{"id":1627,"slug":1628,"identity":1629,"label":1630,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1631,"versions":1632,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1633},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[311],[1624],[55],{"id":1635,"slug":1636,"identity":1637,"label":1638,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1639,"versions":1640,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1641},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[311],[1624],[55],{"id":1643,"slug":1644,"identity":1645,"label":1646,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1647,"versions":1648,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1650},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[311],[1649],"0.60b1",[55],{"id":1652,"slug":1653,"identity":1654,"label":1655,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1656,"versions":1657,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1659},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[323,334],[1658],"4.6.0",[55],{"id":1661,"slug":1662,"identity":1663,"label":1664,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1665,"versions":1667,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1669},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1666,344],"Apache-2.0 OR BSD-2-Clause",[1668],"25.0",[55],{"id":1671,"slug":1672,"identity":1673,"label":1674,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1675,"versions":1676,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1678},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[344],[1677],"2.3.3",[55],{"id":1680,"slug":1681,"identity":1682,"label":1683,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1684,"versions":1685,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1687},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[334],[1686],"0.8.5",[55],{"id":1689,"slug":1690,"identity":1691,"label":1692,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1693,"versions":1694,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1696},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[344],[1695],"4.9.0",[55],{"id":1698,"slug":1699,"identity":1700,"label":1701,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1702,"versions":1703,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1705},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[334],[1704],"4.5.1",[55],{"id":1707,"slug":1708,"identity":1709,"label":1710,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1711,"versions":1712,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1713},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[334],[1427],[55],{"id":1715,"slug":1716,"identity":1717,"label":1718,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1719,"versions":1720,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1722},"package:pypi:plyer","plyer-d8181744","pypi:plyer","plyer",[334],[1721],"2.1.0",[55],{"id":1724,"slug":1725,"identity":1726,"label":1727,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1728,"versions":1729,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1731},"package:pypi:polars","polars-f649ebed","pypi:polars","polars",[334,344],[1730],"1.37.1",[55],{"id":1733,"slug":1734,"identity":1735,"label":1736,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1737,"versions":1738,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1739},"package:pypi:polars-runtime-32","polars-runtime-32-7674b461","pypi:polars-runtime-32","polars-runtime-32",[334],[1730],[55],{"id":1741,"slug":1742,"identity":1743,"label":1744,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1745,"versions":1747,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1749},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[311,1746],"Apache-2.0 AND BSD-2-Clause",[1748],"0.24.0",[55],{"id":1751,"slug":1752,"identity":1753,"label":1754,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1755,"versions":1756,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1758},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[323,344],[1757],"3.0.52",[55],{"id":1760,"slug":1761,"identity":1762,"label":1763,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1764,"versions":1765,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1767},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[323],[1766],"7.2.1",[55],{"id":1769,"slug":1770,"identity":1771,"label":1772,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1773,"versions":1775,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1776},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1774],"ISC",[765],[55],{"id":1778,"slug":1779,"identity":1780,"label":1781,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1782,"versions":1783,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1784},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[334],[898],[55],{"id":1786,"slug":1787,"identity":1788,"label":1789,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1790,"versions":1791,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1793},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[334],[1792],"9.0.0",[55],{"id":1795,"slug":1796,"identity":1797,"label":1798,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1799,"versions":1800,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1801},"package:pypi:py3nj","py3nj-c13787b2","pypi:py3nj","py3nj",[344],[1357],[55],{"id":1803,"slug":1804,"identity":1805,"label":1806,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1807,"versions":1808,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1810},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[344],[1809],"0.4.2",[55],{"id":1812,"slug":1813,"identity":1814,"label":1815,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1816,"versions":1817,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1819},"package:pypi:pycocotools","pycocotools-65bdc5df","pypi:pycocotools","pycocotools",[344],[1818],"2.0.11",[55],{"id":1821,"slug":1822,"identity":1823,"label":1824,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1825,"versions":1826,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1828},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[323],[1827],"2.23",[55],{"id":1830,"slug":1831,"identity":1832,"label":1833,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1834,"versions":1835,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1837},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[334],[1836],"2.12.5",[55],{"id":1839,"slug":1840,"identity":1841,"label":1842,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1843,"versions":1844,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1846},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[334],[1845],"2.41.5",[55],{"id":1848,"slug":1849,"identity":1850,"label":1851,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1852,"versions":1853,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1855},"package:pypi:pydeck","pydeck-75380c92","pypi:pydeck","pydeck",[311],[1854],"0.9.1",[55],{"id":1857,"slug":1858,"identity":1859,"label":1860,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1861,"versions":1862,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1863},"package:pypi:pymanopt","pymanopt-8143db2d","pypi:pymanopt","pymanopt",[323],[979],[55],{"id":1865,"slug":1866,"identity":1867,"label":1868,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1869,"versions":1870,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1872},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[334],[1871],"3.3.1",[55],{"id":1874,"slug":1875,"identity":1876,"label":1877,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1878,"versions":1879,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1881},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[344],[1880],"2.9.0.post0",[55],{"id":1883,"slug":1884,"identity":1885,"label":1886,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1887,"versions":1888,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1890},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[334],[1889],"2025.2",[55],{"id":1892,"slug":1893,"identity":1894,"label":1895,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1896,"versions":1897,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1899},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[1898],"311",[55],{"id":1901,"slug":1902,"identity":1903,"label":1904,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1905,"versions":1906,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1908},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[334],[1907],"6.0.3",[55],{"id":1910,"slug":1911,"identity":1912,"label":1913,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1914,"versions":1915,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1917},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[344],[1916],"27.1.0",[55],{"id":1919,"slug":1920,"identity":1921,"label":1922,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1923,"versions":1924,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1926},"package:pypi:questionary","questionary-3aceb11d","pypi:questionary","questionary",[334],[1925],"2.1.1",[55],{"id":1928,"slug":1929,"identity":1930,"label":1931,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1932,"versions":1933,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1935},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[334],[1934],"3.14.3",[55],{"id":1937,"slug":1938,"identity":1939,"label":1940,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1941,"versions":1942,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1944},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[334],[1943],"0.37.0",[55],{"id":1946,"slug":1947,"identity":1948,"label":1949,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1950,"versions":1952,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1954},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1951,344],"Apache-2.0 AND CNRI-Python",[1953],"2025.11.3",[55],{"id":1956,"slug":1957,"identity":1958,"label":1959,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1960,"versions":1961,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1963},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[334],[1962],"14.2.0",[55],{"id":1965,"slug":1966,"identity":1967,"label":1968,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1969,"versions":1970,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1972},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[334],[1971],"0.30.0",[55],{"id":1974,"slug":1975,"identity":1976,"label":1977,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1978,"versions":1979,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1981},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[311],[1980],"4.9.1",[55],{"id":1983,"slug":1984,"identity":1985,"label":1986,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1987,"versions":1988,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1990},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[334],[1989],"0.14.11",[55],{"id":1992,"slug":1993,"identity":1994,"label":1995,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":1996,"versions":1997,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1998},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[344],[765],[55],{"id":2000,"slug":2001,"identity":2002,"label":2003,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2004,"versions":2005,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2007},"package:pypi:scikit-image","scikit-image-a25c228c","pypi:scikit-image","scikit-image",[344],[2006],"0.26.0",[55],{"id":2009,"slug":2010,"identity":2011,"label":2012,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2013,"versions":2014,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2016},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[344],[2015],"1.16.3",[55],{"id":2018,"slug":2019,"identity":2020,"label":2021,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2022,"versions":2023,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2025},"package:pypi:seaborn","seaborn-1018de9a","pypi:seaborn","seaborn",[344],[2024],"0.13.2",[55],{"id":2027,"slug":2028,"identity":2029,"label":2030,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2031,"versions":2032,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2034},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[344],[2033],"1.5.4",[55],{"id":2036,"slug":2037,"identity":2038,"label":2039,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2040,"versions":2041,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2043},"package:pypi:simsimd","simsimd-7089790e","pypi:simsimd","simsimd",[311],[2042],"6.5.12",[55],{"id":2045,"slug":2046,"identity":2047,"label":2048,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2049,"versions":2050,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2052},"package:pypi:six","six-3c3888bd","pypi:six","six",[334],[2051],"1.17.0",[55],{"id":2054,"slug":2055,"identity":2056,"label":2057,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2058,"versions":2059,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2061},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[323],[2060],"5.0.2",[55],{"id":2063,"slug":2064,"identity":2065,"label":2066,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2067,"versions":2069,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2071},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2068],"Apache-2.0 OR MIT",[2070],"1.3.1",[55],{"id":2073,"slug":2074,"identity":2075,"label":2076,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2077,"versions":2078,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2080},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[334],[2079],"2.0.45",[55],{"id":2082,"slug":2083,"identity":2084,"label":2085,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2086,"versions":2087,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2088},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[334],[1553],[55],{"id":2090,"slug":2091,"identity":2092,"label":2093,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2094,"versions":2095,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2096},"package:pypi:stringzilla","stringzilla-f268dc86","pypi:stringzilla","stringzilla",[311],[1658],[55],{"id":2098,"slug":2099,"identity":2100,"label":2101,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2102,"versions":2103,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2105},"package:pypi:supervision","supervision-c48208b7","pypi:supervision","supervision",[334],[2104],"0.6.0",[55],{"id":2107,"slug":2108,"identity":2109,"label":2110,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2111,"versions":2112,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2114},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[344],[2113],"1.14.0",[55],{"id":2116,"slug":2117,"identity":2118,"label":2119,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2120,"versions":2121,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2123},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[311],[2122],"9.1.4",[55],{"id":2125,"slug":2126,"identity":2127,"label":2128,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2129,"versions":2130,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2132},"package:pypi:tensorboard","tensorboard-f5e14cf1","pypi:tensorboard","tensorboard",[311],[2131],"2.20.0",[55],{"id":2134,"slug":2135,"identity":2136,"label":2137,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2138,"versions":2139,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2141},"package:pypi:tensorboard-data-server","tensorboard-data-server-d2a4e5d5","pypi:tensorboard-data-server","tensorboard-data-server",[311],[2140],"0.7.2",[55],{"id":2143,"slug":2144,"identity":2145,"label":2146,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2147,"versions":2148,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2149},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[334],[1062],[55],{"id":2151,"slug":2152,"identity":2153,"label":2154,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2155,"versions":2156,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2158},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[323],[2157],"3.6.0",[55],{"id":2160,"slug":2161,"identity":2162,"label":2163,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2164,"versions":2165,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2167},"package:pypi:tifffile","tifffile-6dc31d57","pypi:tifffile","tifffile",[323],[2166],"2025.12.20",[55],{"id":2169,"slug":2170,"identity":2171,"label":2172,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2173,"versions":2174,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2176},"package:pypi:timm","timm-4594fb75","pypi:timm","timm",[311],[2175],"1.0.24",[55],{"id":2178,"slug":2179,"identity":2180,"label":2181,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2182,"versions":2183,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2185},"package:pypi:toml","toml-490ac3c8","pypi:toml","toml",[334],[2184],"0.10.2",[55],{"id":2187,"slug":2188,"identity":2189,"label":2190,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2191,"versions":2192,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2194},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[334],[2193],"0.14.0",[55],{"id":2196,"slug":2197,"identity":2198,"label":2199,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2200,"versions":2201,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2203},"package:pypi:torchmetrics","torchmetrics-87072a51","pypi:torchmetrics","torchmetrics",[311],[2202],"1.8.2",[55],{"id":2205,"slug":2206,"identity":2207,"label":2208,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2209,"versions":2210,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2212},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[344],[2211],"0.24.1",[55],{"id":2214,"slug":2215,"identity":2216,"label":2217,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2218,"versions":2219,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2221},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[344],[2220],"5.14.3",[55],{"id":2223,"slug":2224,"identity":2225,"label":2226,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2227,"versions":2228,"dossier":46,"occurrenceCount":113,"directOccurrenceCount":38,"evidenceFiles":2230},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[334],[1871,2229],"3.5.1",[55],{"id":2232,"slug":2233,"identity":2234,"label":2235,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2236,"versions":2237,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2239},"package:pypi:ty","ty-9d155882","pypi:ty","ty",[334],[2238],"0.0.11",[55],{"id":2241,"slug":2242,"identity":2243,"label":2244,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2245,"versions":2246,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2247},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[334],[1400],[55],{"id":2249,"slug":2250,"identity":2251,"label":2252,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2253,"versions":2255,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2257},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[2254,344],"PSF-2.0",[2256],"4.15.0",[55],{"id":2259,"slug":2260,"identity":2261,"label":2262,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2263,"versions":2264,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2265},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[334],[1809],[55],{"id":2267,"slug":2268,"identity":2269,"label":2270,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2271,"versions":2272,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2274},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[311],[2273],"2025.3",[55],{"id":2276,"slug":2277,"identity":2278,"label":2279,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2280,"versions":2281,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2283},"package:pypi:ultralytics-thop","ultralytics-thop-5d33dc12","pypi:ultralytics-thop","ultralytics-thop",[372],[2282],"2.0.18",[55],{"id":2285,"slug":2286,"identity":2287,"label":2288,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2289,"versions":2290,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2292},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[323],[2291],"0.40.0",[55],{"id":2294,"slug":2295,"identity":2296,"label":2297,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2298,"versions":2300,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2302},"package:pypi:waitress","waitress-e47950e2","pypi:waitress","waitress",[2299],"ZPL-2.1",[2301],"3.0.2",[55],{"id":2304,"slug":2305,"identity":2306,"label":2307,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2308,"versions":2309,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2310},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[311],[747],[55],{"id":2312,"slug":2313,"identity":2314,"label":2315,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2316,"versions":2317,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2319},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[334],[2318],"0.2.14",[55],{"id":2321,"slug":2322,"identity":2323,"label":2324,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2325,"versions":2326,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2328},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[323],[2327],"16.0",[55],{"id":2330,"slug":2331,"identity":2332,"label":2333,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2334,"versions":2335,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2337},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[323],[2336],"4.0.15",[55],{"id":2339,"slug":2340,"identity":2341,"label":2342,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2343,"versions":2344,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2346},"package:pypi:yapf","yapf-c7689856","pypi:yapf","yapf",[344],[2345],"0.43.0",[55],{"id":2348,"slug":2349,"identity":2350,"label":2351,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2352,"versions":2353,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2355},"package:pypi:yaspin","yaspin-3abe0201","pypi:yaspin","yaspin",[334],[2354],"3.4.0",[55],{"id":2357,"slug":2358,"identity":2359,"label":2360,"aiRelevant":46,"provider":320,"advisoryCount":38,"licenseExpressions":2361,"versions":2362,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2364},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[334],[2363],"3.23.0",[55],[2366,2405,2427,2459,2490,2522,2555,2587,2619,2646,2689,2715,2742,2771,2801,2833,2867,2893,2919,2944,2982,3005,3031,3054,3092,3127,3157,3186,3213,3247,3271,3297,3326,3353,3376,3412,3439,3463,3494,3524,3552,3577,3608,3647,3674,3696,3722,3740,3767,3818,3842,3881,3913,3946,3978,4004,4029,4063,4093,4125,4184,4216,4240,4272,4297,4331,4357,4385,4419,4450,4477,4503,4526,4557,4581,4614,4641,4664,4692,4720,4735,4768,4792,4832,4862,4887,4909,4937,4959,4981,5012,5033,5050,5071,5098,5123,5147,5162,5188,5212,5234,5261,5295,5316,5353,5379,5411,5438,5465,5492,5517,5570,5599,5626,5656,5676,5708,5735,5755,5781,5809,5833,5860,5899,5922,5952,5974,6026,6049,6083,6108,6131,6163,6182,6209,6236,6256,6273,6292,6309,6330,6346,6361,6378,6393,6410,6427,6444,6457,6470,6483,6496,6509,6522,6535,6548,6566,6583,6599,6621,6654,6673,6690,6707,6725,6748,6778,6805,6826,6846],{"id":119,"slug":2367,"dossier":46,"summary":2368,"aliases":2369,"sourceIds":2372,"published":2373,"modified":2374,"checkedAt":7,"severity":2375,"references":2379,"versionKeys":2403,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2370,2371],"CVE-2024-39689","PYSEC-2024-230",[119,2371],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2376],{"type":2377,"score":2378},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2380,2383,2385,2388,2391,2394,2397,2399,2401],{"type":2381,"url":2382},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2381,"url":2384},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2386,"url":2387},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2389,"url":2390},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2392,"url":2393},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2395,"url":2396},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2392,"url":2398},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2381,"url":2400},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2381,"url":2402},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2404],"pypi:certifi@2024.6.2",{"id":120,"slug":2406,"dossier":46,"summary":2407,"aliases":2408,"sourceIds":2409,"published":2410,"modified":2411,"checkedAt":7,"severity":2412,"references":2416,"versionKeys":2425,"packageCount":32,"repositoryCount":113},"ghsa-27jp-wm6q-gp25-5ce03f88","sqlparse: formatting list of tuples leads to denial of service",[],[120],"2026-02-13T16:16:11Z","2026-02-19T02:59:07.083683Z",[2413],{"type":2414,"score":2415},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2417,2419,2421,2423],{"type":2392,"url":2418},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fsecurity\u002Fadvisories\u002FGHSA-27jp-wm6q-gp25",{"type":2392,"url":2420},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fcommit\u002F40ed3aa958657fa4a82055927fa9de70ab903360",{"type":2389,"url":2422},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse",{"type":2392,"url":2424},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Freleases\u002Ftag\u002F0.5.4",[2426],"pypi:sqlparse@0.5.3",{"id":121,"slug":2428,"dossier":46,"summary":2429,"aliases":2430,"sourceIds":2433,"published":2434,"modified":2435,"checkedAt":7,"severity":2436,"references":2439,"versionKeys":2451,"packageCount":32,"repositoryCount":412},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2431,2432],"CVE-2026-4372","PYSEC-2026-2289",[121,2432],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2437],{"type":2377,"score":2438},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2440,2442,2444,2446,2449],{"type":2381,"url":2441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2386,"url":2443},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2389,"url":2445},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2447,"url":2448},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2381,"url":2450},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2452,2453,2454,2455,2456,2457,2458],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":122,"slug":2460,"dossier":46,"summary":2461,"aliases":2462,"sourceIds":2465,"published":2466,"modified":2467,"checkedAt":7,"severity":2468,"references":2473,"versionKeys":2484,"packageCount":32,"repositoryCount":431},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2463,2464],"CVE-2026-27199","PYSEC-2026-2320",[122,2464],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[2469,2471],{"type":2414,"score":2470},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2377,"score":2472},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2474,2476,2478,2480,2482],{"type":2381,"url":2475},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2381,"url":2477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2386,"url":2479},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2389,"url":2481},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2381,"url":2483},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2485,2486,2487,2488,2489],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":123,"slug":2491,"dossier":46,"summary":2492,"aliases":2493,"sourceIds":2496,"published":2497,"modified":2498,"checkedAt":7,"severity":2499,"references":2501,"versionKeys":2518,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2494,2495],"CVE-2025-54121","PYSEC-2026-1941",[123,2495],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2500],{"type":2377,"score":2472},[2502,2504,2506,2508,2510,2512,2514,2516],{"type":2392,"url":2503},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2381,"url":2505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2386,"url":2507},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2389,"url":2509},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2392,"url":2511},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2392,"url":2513},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2389,"url":2515},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2381,"url":2517},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2519,2520,2521],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":124,"slug":2523,"dossier":46,"summary":2524,"aliases":2525,"sourceIds":2528,"published":2529,"modified":2530,"checkedAt":7,"severity":2531,"references":2534,"versionKeys":2554,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2526,2527],"CVE-2024-34069","PYSEC-2026-2043",[124,2527],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[2532],{"type":2377,"score":2533},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2535,2537,2539,2541,2542,2544,2546,2548,2550,2552],{"type":2392,"url":2536},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2381,"url":2538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2392,"url":2540},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2389,"url":2481},{"type":2392,"url":2543},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2392,"url":2545},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2392,"url":2547},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2392,"url":2549},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2389,"url":2551},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2381,"url":2553},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2485],{"id":125,"slug":2556,"dossier":46,"summary":2557,"aliases":2558,"sourceIds":2561,"published":2562,"modified":2563,"checkedAt":7,"severity":2564,"references":2567,"versionKeys":2584,"packageCount":32,"repositoryCount":451},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2559,2560],"CVE-2026-44307","PYSEC-2026-2617",[125,2560],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2565],{"type":2414,"score":2566},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2568,2570,2572,2574,2576,2578,2580,2582],{"type":2392,"url":2569},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2381,"url":2571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2392,"url":2573},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2392,"url":2575},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2389,"url":2577},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2392,"url":2579},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2389,"url":2581},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2381,"url":2583},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2585,2586],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":126,"slug":2588,"dossier":91,"summary":2589,"aliases":2590,"sourceIds":2593,"published":2594,"modified":2595,"checkedAt":7,"severity":2596,"references":2599,"versionKeys":2612,"packageCount":32,"repositoryCount":2618},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2591,2592],"CVE-2025-66471","PYSEC-2026-1994",[126,2592],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2597],{"type":2414,"score":2598},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2600,2602,2604,2606,2608,2610],{"type":2392,"url":2601},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2381,"url":2603},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2386,"url":2605},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2389,"url":2607},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2389,"url":2609},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2381,"url":2611},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2613,2614,2615,2616,2617],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":127,"slug":2620,"dossier":46,"summary":2621,"aliases":2622,"sourceIds":2625,"published":2626,"modified":2627,"checkedAt":7,"severity":2628,"references":2631,"versionKeys":2644,"packageCount":32,"repositoryCount":113},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[2623,2624],"CVE-2025-30167","PYSEC-2026-1477",[127,2624],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[2629],{"type":2377,"score":2630},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2632,2634,2636,2638,2640,2642],{"type":2392,"url":2633},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":2381,"url":2635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":2392,"url":2637},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":2389,"url":2639},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":2389,"url":2641},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":2381,"url":2643},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[2645],"pypi:jupyter-core@5.7.2",{"id":128,"slug":2647,"dossier":46,"summary":2648,"aliases":2649,"sourceIds":2653,"published":2654,"modified":2655,"checkedAt":7,"severity":2656,"references":2663,"versionKeys":2685,"packageCount":32,"repositoryCount":479},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2650,2651,2652],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[128,2652],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2657,2659,2661],{"type":2377,"score":2658},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2414,"score":2660},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2377,"score":2662},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2664,2666,2669,2671,2673,2675,2677,2679,2681,2683],{"type":2381,"url":2665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2667,"url":2668},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2667,"url":2670},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2392,"url":2672},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2389,"url":2674},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2392,"url":2676},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2667,"url":2678},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2381,"url":2680},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2381,"url":2682},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2381,"url":2684},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2686,2687,2688],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":129,"slug":2690,"dossier":46,"summary":2691,"aliases":2692,"sourceIds":2695,"published":2696,"modified":2697,"checkedAt":7,"severity":2698,"references":2700,"versionKeys":2714,"packageCount":32,"repositoryCount":113},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2693,2694],"CVE-2025-3933","PYSEC-2026-1977",[129,2694],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2699],{"type":2377,"score":2472},[2701,2703,2705,2707,2708,2710,2712],{"type":2381,"url":2702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2392,"url":2704},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2392,"url":2706},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2389,"url":2445},{"type":2392,"url":2709},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2389,"url":2711},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2381,"url":2713},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2452,2453],{"id":130,"slug":2716,"dossier":91,"summary":2717,"aliases":2718,"sourceIds":2721,"published":2722,"modified":2723,"checkedAt":7,"severity":2724,"references":2728,"versionKeys":2741,"packageCount":32,"repositoryCount":2618},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2719,2720],"CVE-2026-21441","PYSEC-2026-1996",[130,2720],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2725,2727],{"type":2377,"score":2726},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2414,"score":2598},[2729,2731,2733,2735,2736,2738,2739],{"type":2392,"url":2730},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2381,"url":2732},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2386,"url":2734},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2389,"url":2607},{"type":2392,"url":2737},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2389,"url":2609},{"type":2381,"url":2740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2613,2614,2615,2616,2617],{"id":131,"slug":2743,"dossier":46,"summary":2744,"aliases":2745,"sourceIds":2748,"published":2749,"modified":2750,"checkedAt":7,"severity":2751,"references":2754,"versionKeys":2765,"packageCount":32,"repositoryCount":431},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[2746,2747],"CVE-2026-49853","PYSEC-2026-3387",[131,2747],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[2752],{"type":2377,"score":2753},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2755,2757,2759,2761,2763],{"type":2392,"url":2756},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2389,"url":2758},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":2389,"url":2760},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":2381,"url":2762},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2381,"url":2764},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[2766,2767,2768,2769,2770],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":132,"slug":2772,"dossier":46,"summary":2773,"aliases":2774,"sourceIds":2778,"published":2779,"modified":2780,"checkedAt":7,"severity":2781,"references":2784,"versionKeys":2797,"packageCount":32,"repositoryCount":479},"ghsa-42h5-h8qh-vv9v-4d35a1ef","MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem",[2775,2776,2777],"BIT-mlflow-2026-2614","CVE-2026-2614","PYSEC-2026-2654",[132,2777],"2026-05-11T21:31:35Z","2026-07-13T16:42:45.636199436Z",[2782],{"type":2377,"score":2783},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2785,2787,2789,2791,2793,2795],{"type":2381,"url":2786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2614",{"type":2392,"url":2788},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6e801f4259d96804c73107315b24cef0f6aa115a",{"type":2389,"url":2790},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow",{"type":2392,"url":2792},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F19380271-3fbf-4beb-987e-6fd7069c55e6",{"type":2389,"url":2794},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmlflow",{"type":2381,"url":2796},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42h5-h8qh-vv9v",[2798,2799,2800],"pypi:mlflow@3.1.1","pypi:mlflow@3.4.0","pypi:mlflow@3.8.1",{"id":133,"slug":2802,"dossier":46,"summary":2803,"aliases":2804,"sourceIds":2807,"published":2808,"modified":2809,"checkedAt":7,"severity":2810,"references":2813,"versionKeys":2830,"packageCount":32,"repositoryCount":113},"ghsa-43qf-4rqw-9q2g-2b94f083","Flask-CORS vulnerable to Improper Handling of Case Sensitivity",[2805,2806],"CVE-2024-6866","PYSEC-2026-1383",[133,2806],"2025-03-20T12:32:45Z","2026-07-07T17:57:18.348501785Z",[2811],{"type":2377,"score":2812},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2814,2816,2818,2820,2822,2824,2826,2828],{"type":2381,"url":2815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6866",{"type":2392,"url":2817},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Feb39516a3c96b90d0ae5f51293972395ec3ef358",{"type":2389,"url":2819},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors",{"type":2392,"url":2821},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fextension.py#L195",{"type":2392,"url":2823},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F808c11af-faee-43a8-824b-b5ab4f62b9e6",{"type":2392,"url":2825},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00049.html",{"type":2389,"url":2827},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fflask-cors",{"type":2381,"url":2829},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-43qf-4rqw-9q2g",[2831,2832],"pypi:flask-cors@4.0.0","pypi:flask-cors@5.0.1",{"id":134,"slug":2834,"dossier":46,"summary":2835,"aliases":2836,"sourceIds":2840,"published":2841,"modified":2842,"checkedAt":7,"severity":2843,"references":2848,"versionKeys":2866,"packageCount":32,"repositoryCount":479},"ghsa-46r5-x6jq-v8g6-fda1ffbe","MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint",[2837,2838,2839],"BIT-mlflow-2026-33866","CVE-2026-33866","PYSEC-2026-94",[134,2839],"2026-04-07T13:16:47Z","2026-06-10T17:02:20.749690187Z",[2844,2846],{"type":2377,"score":2845},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2414,"score":2847},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2849,2851,2853,2855,2857,2859,2860,2862,2864],{"type":2381,"url":2850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33866",{"type":2386,"url":2852},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21708",{"type":2392,"url":2854},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F005b959cacda05d1423356cfcbd9ebeda8ff96a7",{"type":2447,"url":2856},"https:\u002F\u002Fafine.com\u002Fblogs\u002Fattacking-mlflow-how-ml-artifacts-become-attack-vectors",{"type":2392,"url":2858},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865",{"type":2389,"url":2790},{"type":2392,"url":2861},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-94.yaml",{"type":2381,"url":2863},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865\u002F",{"type":2381,"url":2865},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-46r5-x6jq-v8g6",[2798,2799,2800],{"id":135,"slug":2868,"dossier":46,"summary":2869,"aliases":2870,"sourceIds":2873,"published":2874,"modified":2875,"checkedAt":7,"severity":2876,"references":2879,"versionKeys":2892,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2871,2872],"CVE-2025-50182","PYSEC-2026-1997",[135,2872],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2877],{"type":2377,"score":2878},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2880,2882,2884,2886,2887,2889,2890],{"type":2392,"url":2881},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2381,"url":2883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2386,"url":2885},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2389,"url":2607},{"type":2392,"url":2888},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2389,"url":2609},{"type":2381,"url":2891},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2613,2614,2615,2616],{"id":136,"slug":2894,"dossier":46,"summary":2895,"aliases":2896,"sourceIds":2899,"published":2900,"modified":2901,"checkedAt":7,"severity":2902,"references":2905,"versionKeys":2918,"packageCount":32,"repositoryCount":113},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2897,2898],"CVE-2025-6921","PYSEC-2026-1980",[136,2898],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2903],{"type":2377,"score":2904},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2906,2908,2910,2912,2913,2915,2916],{"type":2381,"url":2907},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2392,"url":2909},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2392,"url":2911},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2389,"url":2445},{"type":2392,"url":2914},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2389,"url":2711},{"type":2381,"url":2917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2452,2453],{"id":137,"slug":2920,"dossier":46,"summary":2921,"aliases":2922,"sourceIds":2926,"published":2927,"modified":2928,"checkedAt":7,"severity":2929,"references":2932,"versionKeys":2943,"packageCount":32,"repositoryCount":32},"ghsa-4x5p-f36r-mxxr-f02b9eff","mlflow Creates of Temporary File in Directory with Insecure Permissions",[2923,2924,2925],"BIT-mlflow-2025-10279","CVE-2025-10279","PYSEC-2026-1639",[137,2925],"2026-02-02T12:31:14Z","2026-07-07T17:56:10.135090160Z",[2930],{"type":2377,"score":2931},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2933,2935,2937,2938,2940,2941],{"type":2381,"url":2934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-10279",{"type":2392,"url":2936},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a",{"type":2389,"url":2790},{"type":2392,"url":2939},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F01d3b81e-13d1-43aa-b91a-443aec68bdc8",{"type":2389,"url":2794},{"type":2381,"url":2942},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4x5p-f36r-mxxr",[2798],{"id":138,"slug":2945,"dossier":91,"summary":2946,"aliases":2947,"sourceIds":2950,"published":2951,"modified":2952,"checkedAt":7,"severity":2953,"references":2956,"versionKeys":2979,"packageCount":32,"repositoryCount":2618},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2948,2949],"CVE-2026-4539","PYSEC-2026-2987",[138,2949],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2954,2955],{"type":2377,"score":2658},{"type":2414,"score":2660},[2957,2959,2961,2963,2965,2967,2969,2971,2973,2975,2977],{"type":2381,"url":2958},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2392,"url":2960},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2392,"url":2962},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2392,"url":2964},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2389,"url":2966},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2392,"url":2968},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2392,"url":2970},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2392,"url":2972},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2392,"url":2974},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2389,"url":2976},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2381,"url":2978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2980,2981],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":139,"slug":2983,"dossier":46,"summary":2984,"aliases":2985,"sourceIds":2986,"published":2987,"modified":2988,"checkedAt":7,"severity":2989,"references":2991,"versionKeys":2998,"packageCount":32,"repositoryCount":65},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[139],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[2990],{"type":2377,"score":2726},[2992,2994,2996],{"type":2392,"url":2993},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2389,"url":2995},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2392,"url":2997},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[2999,3000,3001,3002,3003,3004],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":140,"slug":3006,"dossier":46,"summary":3007,"aliases":3008,"sourceIds":3012,"published":3013,"modified":3014,"checkedAt":7,"severity":3015,"references":3020,"versionKeys":3030,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3009,3010,3011],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[140,3011],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[3016,3018],{"type":2414,"score":3017},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2377,"score":3019},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3021,3023,3025,3027,3029],{"type":2381,"url":3022},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2381,"url":3024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2392,"url":3026},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2392,"url":3028},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2389,"url":2674},[2686],{"id":141,"slug":3032,"dossier":46,"summary":3033,"aliases":3034,"sourceIds":3037,"published":3038,"modified":3039,"checkedAt":7,"severity":3040,"references":3042,"versionKeys":3053,"packageCount":32,"repositoryCount":113},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3035,3036],"CVE-2025-6638","PYSEC-2026-1981",[141,3036],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3041],{"type":2377,"score":2904},[3043,3045,3046,3047,3048,3050,3051],{"type":2381,"url":3044},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2392,"url":2909},{"type":2392,"url":2911},{"type":2389,"url":2445},{"type":2392,"url":3049},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2389,"url":2711},{"type":2381,"url":3052},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2452,2453],{"id":142,"slug":3055,"dossier":46,"summary":3056,"aliases":3057,"sourceIds":3061,"published":3062,"modified":3063,"checkedAt":7,"severity":3064,"references":3071,"versionKeys":3091,"packageCount":32,"repositoryCount":479},"ghsa-5qmp-p3c4-72qj-0f202987","MLflow: Deterministic sampling in dataset digest enables predictable collisions",[3058,3059,3060],"BIT-mlflow-2026-10803","CVE-2026-10803","PYSEC-2026-195",[142,3060],"2026-06-04T12:16:24.440Z","2026-07-15T18:11:16.191752741Z",[3065,3067,3069],{"type":2377,"score":3066},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2414,"score":3068},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2414,"score":3070},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3072,3074,3076,3078,3079,3081,3083,3085,3087,3089],{"type":2381,"url":3073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10803",{"type":2667,"url":3075},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fissues\u002F22419",{"type":2667,"url":3077},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F22420",{"type":2389,"url":2790},{"type":2392,"url":3080},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-195.yaml",{"type":2381,"url":3082},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10803",{"type":2381,"url":3084},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831462",{"type":2381,"url":3086},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252",{"type":2667,"url":3088},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252\u002Fcti",{"type":2392,"url":3090},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002F",[2798,2799,2800],{"id":143,"slug":3093,"dossier":46,"summary":3094,"aliases":3095,"sourceIds":3099,"published":3100,"modified":3101,"checkedAt":7,"severity":3102,"references":3107,"versionKeys":3124,"packageCount":32,"repositoryCount":113},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3096,3097,3098],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[143,3098],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3103,3105],{"type":2414,"score":3104},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2377,"score":3106},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3108,3110,3112,3114,3116,3118,3120,3122],{"type":2447,"url":3109},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2381,"url":3111},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2667,"url":3113},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2386,"url":3115},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2392,"url":3117},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2389,"url":3119},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2392,"url":3121},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2395,"url":3123},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3125,3126],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":144,"slug":3128,"dossier":46,"summary":3129,"aliases":3130,"sourceIds":3133,"published":3134,"modified":3135,"checkedAt":7,"severity":3136,"references":3140,"versionKeys":3155,"packageCount":32,"repositoryCount":113},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[3131,3132],"CVE-2025-69534","PYSEC-2026-89",[144,3132],"2026-03-05T15:16:11.243Z","2026-06-10T17:02:03.742572395Z",[3137,3138],{"type":2377,"score":2726},{"type":2414,"score":3139},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3141,3143,3145,3147,3149,3151,3153],{"type":2381,"url":3142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":2667,"url":3144},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":2392,"url":3146},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":2389,"url":3148},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":2392,"url":3150},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":2392,"url":3152},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":2381,"url":3154},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[3156],"pypi:markdown@3.8",{"id":145,"slug":3158,"dossier":46,"summary":3159,"aliases":3160,"sourceIds":3164,"published":3165,"modified":3166,"checkedAt":7,"severity":3167,"references":3171,"versionKeys":3180,"packageCount":32,"repositoryCount":402},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3161,3162,3163],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[145,3163],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3168,3169],{"type":2377,"score":2662},{"type":2414,"score":3170},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3172,3174,3176,3178],{"type":2381,"url":3173},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2381,"url":3175},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2389,"url":3177},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2381,"url":3179},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3181,3182,3183,3184,3185],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":146,"slug":3187,"dossier":46,"summary":3188,"aliases":3189,"sourceIds":3192,"published":3193,"modified":3194,"checkedAt":7,"severity":3195,"references":3198,"versionKeys":3211,"packageCount":32,"repositoryCount":32},"ghsa-62q4-447f-wv8h-ddd02de0","Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path",[3190,3191],"CVE-2026-46338","PYSEC-2026-2999",[146,3191],"2026-05-19T20:00:29Z","2026-07-13T16:43:07.559134562Z",[3196],{"type":2377,"score":3197},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3199,3201,3203,3205,3207,3209],{"type":2392,"url":3200},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":2392,"url":3202},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fpull\u002F2039",{"type":2389,"url":3204},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions",{"type":2389,"url":3206},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpymdown-extensions",{"type":2381,"url":3208},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":2381,"url":3210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-46338",[3212],"pypi:pymdown-extensions@10.21.2",{"id":147,"slug":3214,"dossier":46,"summary":3215,"aliases":3216,"sourceIds":3219,"published":3220,"modified":3221,"checkedAt":7,"severity":3222,"references":3224,"versionKeys":3245,"packageCount":32,"repositoryCount":65},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[3217,3218],"CVE-2026-23490","PYSEC-2026-1810",[147,3218],"2026-01-16T19:19:25Z","2026-07-07T17:56:27.705413895Z",[3223],{"type":2377,"score":2726},[3225,3227,3229,3231,3233,3235,3237,3239,3241,3243],{"type":2392,"url":3226},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2381,"url":3228},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2392,"url":3230},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2392,"url":3232},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2389,"url":3234},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2392,"url":3236},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2392,"url":3238},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2392,"url":3240},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",{"type":2389,"url":3242},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyasn1",{"type":2381,"url":3244},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",[3246],"pypi:pyasn1@0.6.1",{"id":148,"slug":3248,"dossier":46,"summary":3249,"aliases":3250,"sourceIds":3254,"published":3255,"modified":3256,"checkedAt":7,"severity":3257,"references":3260,"versionKeys":3270,"packageCount":32,"repositoryCount":479},"ghsa-65h7-c7c4-mghx-fc09466d","MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability",[3251,3252,3253],"BIT-mlflow-2026-2393","CVE-2026-2393","PYSEC-2026-2219",[148,3253],"2026-05-11T18:16:31.500Z","2026-07-13T16:45:08.114491424Z",[3258],{"type":2377,"score":3259},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3261,3263,3265,3266,3268],{"type":2381,"url":3262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2393",{"type":2386,"url":3264},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F64aa0ab7207f9c649b59ba1a5f40d82196817389",{"type":2389,"url":2790},{"type":2447,"url":3267},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F04ef100d-06b5-4a70-95b1-b7be23aa8150",{"type":2381,"url":3269},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-65h7-c7c4-mghx",[2798,2799,2800],{"id":149,"slug":3272,"dossier":91,"summary":3273,"aliases":3274,"sourceIds":3277,"published":3278,"modified":3279,"checkedAt":7,"severity":3280,"references":3284,"versionKeys":3293,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3275,3276],"CVE-2026-45409","PYSEC-2026-215",[149,3276],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3281,3282],{"type":2377,"score":2472},{"type":2414,"score":3283},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3285,3287,3289,3291],{"type":2381,"url":3286},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2381,"url":3288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2389,"url":3290},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2392,"url":3292},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3294,3295,3296],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":150,"slug":3298,"dossier":46,"summary":3299,"aliases":3300,"sourceIds":3303,"published":3304,"modified":3305,"checkedAt":7,"severity":3306,"references":3310,"versionKeys":3321,"packageCount":32,"repositoryCount":431},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[3301,3302],"CVE-2026-27205","PYSEC-2026-2151",[150,3302],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[3307,3309],{"type":2414,"score":3308},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2377,"score":3197},[3311,3313,3315,3317,3319],{"type":2381,"url":3312},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":2381,"url":3314},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":2386,"url":3316},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":2389,"url":3318},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":2381,"url":3320},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[3322,3323,3324,3325],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":151,"slug":3327,"dossier":46,"summary":3328,"aliases":3329,"sourceIds":3332,"published":3333,"modified":3334,"checkedAt":7,"severity":3335,"references":3340,"versionKeys":3352,"packageCount":32,"repositoryCount":412},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3330,3331],"CVE-2026-1839","PYSEC-2026-2288",[151,3331],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[3336,3338],{"type":2377,"score":3337},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2377,"score":3339},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3341,3343,3345,3346,3348,3350],{"type":2381,"url":3342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2386,"url":3344},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2389,"url":2445},{"type":2392,"url":3347},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2447,"url":3349},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2381,"url":3351},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2452,2453,2454,2455,2456,2457,2458],{"id":152,"slug":3354,"dossier":46,"summary":3355,"aliases":3356,"sourceIds":3359,"published":3360,"modified":3361,"checkedAt":7,"severity":3362,"references":3364,"versionKeys":3375,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3357,3358],"CVE-2024-12720","PYSEC-2026-1982",[152,3358],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3363],{"type":2377,"score":2904},[3365,3367,3369,3370,3372,3373],{"type":2381,"url":3366},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2392,"url":3368},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2389,"url":2445},{"type":2392,"url":3371},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2389,"url":2711},{"type":2381,"url":3374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2452],{"id":153,"slug":3377,"dossier":46,"summary":3378,"aliases":3379,"sourceIds":3382,"published":3383,"modified":3384,"checkedAt":7,"severity":3385,"references":3388,"versionKeys":3407,"packageCount":32,"repositoryCount":431},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[3380,3381],"CVE-2025-71176","PYSEC-2026-1845",[153,3381],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[3386],{"type":2377,"score":3387},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[3389,3391,3393,3395,3397,3399,3401,3403,3405],{"type":2381,"url":3390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":2392,"url":3392},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":2392,"url":3394},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":2392,"url":3396},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":2389,"url":3398},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":2392,"url":3400},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":2392,"url":3402},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":2389,"url":3404},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":2381,"url":3406},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[3408,3409,3410,3411],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":154,"slug":3413,"dossier":46,"summary":3414,"aliases":3415,"sourceIds":3418,"published":3419,"modified":3420,"checkedAt":7,"severity":3421,"references":3426,"versionKeys":3435,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[3416,3417],"CVE-2026-44243","PYSEC-2026-2162",[154,3417],"2026-05-06T19:38:48Z","2026-07-13T07:26:30.186818349Z",[3422,3424],{"type":2377,"score":3423},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2414,"score":3425},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3427,3429,3431,3433],{"type":2447,"url":3428},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":2381,"url":3430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":2389,"url":3432},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":2386,"url":3434},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[3436,3437,3438],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":155,"slug":3440,"dossier":46,"summary":3441,"aliases":3442,"sourceIds":3446,"published":3447,"modified":3448,"checkedAt":7,"severity":3449,"references":3452,"versionKeys":3462,"packageCount":32,"repositoryCount":479},"ghsa-75cm-x2w3-8mgf-213b4d71","MLflow: unauthenticated access to certain FastAPI routes",[3443,3444,3445],"BIT-mlflow-2026-2652","CVE-2026-2652","PYSEC-2026-2221",[155,3445],"2026-05-15T03:16:23.127Z","2026-07-13T16:45:09.381556404Z",[3450],{"type":2377,"score":3451},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[3453,3455,3457,3458,3460],{"type":2381,"url":3454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2652",{"type":2386,"url":3456},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fbb62e773263c14e9ba4d1a82fe72d0de2442c6aa",{"type":2389,"url":2790},{"type":2447,"url":3459},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F5aeff5f0-49c7-4180-b5cb-c9a046f16756",{"type":2381,"url":3461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-75cm-x2w3-8mgf",[2798,2799,2800],{"id":156,"slug":3464,"dossier":46,"summary":3465,"aliases":3466,"sourceIds":3469,"published":3470,"modified":3471,"checkedAt":7,"severity":3472,"references":3475,"versionKeys":3488,"packageCount":32,"repositoryCount":431},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[3467,3468],"CVE-2025-66034","PYSEC-2026-1389",[156,3468],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[3473],{"type":2377,"score":3474},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[3476,3478,3480,3482,3484,3486],{"type":2392,"url":3477},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2381,"url":3479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2392,"url":3481},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2389,"url":3483},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2389,"url":3485},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2381,"url":3487},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[3489,3490,3491,3492,3493],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":157,"slug":3495,"dossier":46,"summary":3496,"aliases":3497,"sourceIds":3501,"published":3502,"modified":3503,"checkedAt":7,"severity":3504,"references":3511,"versionKeys":3523,"packageCount":32,"repositoryCount":431},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[3498,3499,3500],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[157,3499,3500],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[3505,3507,3509],{"type":2377,"score":3506},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":2377,"score":3508},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2377,"score":3510},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3512,3514,3516,3517,3519,3521],{"type":2381,"url":3513},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":2392,"url":3515},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":2389,"url":2758},{"type":2392,"url":3518},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":2381,"url":3520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":2381,"url":3522},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[2766,2767,2768,2769],{"id":158,"slug":3525,"dossier":46,"summary":2984,"aliases":3526,"sourceIds":3529,"published":3530,"modified":3531,"checkedAt":7,"severity":3532,"references":3533,"versionKeys":3551,"packageCount":32,"repositoryCount":479},"ghsa-79v4-65xg-pq4g-b911b371",[3527,3528],"CVE-2024-12797","PYSEC-2026-1284",[158,3528],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[3534,3536,3538,3540,3542,3544,3545,3547,3549],{"type":2392,"url":3535},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2381,"url":3537},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2392,"url":3539},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2392,"url":3541},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2392,"url":3543},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2389,"url":2995},{"type":2392,"url":3546},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2389,"url":3548},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2381,"url":3550},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[2999,3000,3001],{"id":159,"slug":3553,"dossier":46,"summary":3554,"aliases":3555,"sourceIds":3558,"published":3559,"modified":3560,"checkedAt":7,"severity":3561,"references":3563,"versionKeys":3576,"packageCount":32,"repositoryCount":113},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[3556,3557],"CVE-2025-47287","PYSEC-2026-1974",[159,3557],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[3562],{"type":2377,"score":2726},[3564,3566,3568,3570,3571,3573,3574],{"type":2392,"url":3565},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":2381,"url":3567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":2392,"url":3569},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":2389,"url":2758},{"type":2392,"url":3572},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":2389,"url":2760},{"type":2381,"url":3575},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[2766],{"id":160,"slug":3578,"dossier":46,"summary":3579,"aliases":3580,"sourceIds":3583,"published":3584,"modified":3585,"checkedAt":7,"severity":3586,"references":3588,"versionKeys":3605,"packageCount":32,"repositoryCount":451},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3581,3582],"CVE-2025-62727","PYSEC-2026-1942",[160,3582],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3587],{"type":2377,"score":2726},[3589,3591,3593,3595,3598,3600,3602,3603],{"type":2392,"url":3590},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2381,"url":3592},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2386,"url":3594},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3596,"url":3597},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2389,"url":3599},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2392,"url":3601},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2389,"url":2515},{"type":2381,"url":3604},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2520,2521,3606,3607],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":161,"slug":3609,"dossier":46,"summary":3610,"aliases":3611,"sourceIds":3614,"published":3615,"modified":3616,"checkedAt":7,"severity":3617,"references":3620,"versionKeys":3637,"packageCount":32,"repositoryCount":402},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3612,3613],"CVE-2026-0994","PYSEC-2026-1805",[161,3613],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3618],{"type":2414,"score":3619},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3621,3623,3625,3627,3629,3631,3633,3635],{"type":2381,"url":3622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2392,"url":3624},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2392,"url":3626},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2392,"url":3628},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2392,"url":3630},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2389,"url":3632},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2389,"url":3634},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2381,"url":3636},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3638,3639,3640,3641,3642,3643,3644,3645,3646],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":162,"slug":3648,"dossier":46,"summary":3649,"aliases":3650,"sourceIds":3653,"published":3654,"modified":3655,"checkedAt":7,"severity":3656,"references":3661,"versionKeys":3672,"packageCount":32,"repositoryCount":32},"ghsa-7p48-42j8-8846-584b0522","Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)",[3651,3652],"CVE-2026-33682","PYSEC-2026-2285",[162,3652],"2026-03-25T21:20:52Z","2026-07-13T07:26:25.253864212Z",[3657,3659],{"type":2377,"score":3658},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2377,"score":3660},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3662,3664,3666,3668,3670],{"type":2381,"url":3663},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fsecurity\u002Fadvisories\u002FGHSA-7p48-42j8-8846",{"type":2381,"url":3665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33682",{"type":2386,"url":3667},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002F23692ca70b2f2ac720c72d1feb4f190c9d6eed76",{"type":2389,"url":3669},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit",{"type":2381,"url":3671},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Freleases\u002Ftag\u002F1.54.0",[3673],"pypi:streamlit@1.49.0",{"id":163,"slug":3675,"dossier":46,"summary":3676,"aliases":3677,"sourceIds":3680,"published":3681,"modified":3682,"checkedAt":7,"severity":3683,"references":3686,"versionKeys":3695,"packageCount":32,"repositoryCount":479},"ghsa-7qhf-v65m-g5f3-235f2d72","mlflow: FastAPI job endpoints under `\u002Fajax-api\u002F3.0\u002Fjobs\u002F*` are not protected by authentication or authorization",[3678,3679],"CVE-2026-0545","PYSEC-2026-419",[163,3679],"2026-04-03T18:31:23Z","2026-07-01T20:22:58.301401Z",[3684],{"type":2377,"score":3685},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3687,3689,3690,3692,3693],{"type":2381,"url":3688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0545",{"type":2389,"url":2790},{"type":2392,"url":3691},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fb2e5b028-9541-4d29-8703-a76f1a3734d8",{"type":2389,"url":2794},{"type":2381,"url":3694},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7qhf-v65m-g5f3",[2798,2799,2800],{"id":164,"slug":3697,"dossier":46,"summary":3698,"aliases":3699,"sourceIds":3702,"published":2808,"modified":3703,"checkedAt":7,"severity":3704,"references":3707,"versionKeys":3721,"packageCount":32,"repositoryCount":113},"ghsa-7rxf-gvfg-47g4-171801e8","Flask-CORS improper regex path matching vulnerability",[3700,3701],"CVE-2024-6839","PYSEC-2026-1384",[164,3701],"2026-07-07T17:57:28.129199523Z",[3705],{"type":2377,"score":3706},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3708,3710,3712,3713,3715,3717,3718,3719],{"type":2381,"url":3709},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6839",{"type":2392,"url":3711},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fe970988bea563e05e8b8f53fa7bcc134b5bf5c5f",{"type":2389,"url":2819},{"type":2392,"url":3714},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fcore.py#L73",{"type":2392,"url":3716},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F403eb1fc-86f4-4820-8eba-0f3dfae9f2b4",{"type":2392,"url":2825},{"type":2389,"url":2827},{"type":2381,"url":3720},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7rxf-gvfg-47g4",[2831,2832],{"id":165,"slug":3723,"dossier":46,"summary":3724,"aliases":3725,"sourceIds":3728,"published":3729,"modified":3730,"checkedAt":7,"severity":3731,"references":3733,"versionKeys":3737,"packageCount":32,"repositoryCount":412},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[3726,3727],"CVE-2026-54283","PYSEC-2026-249",[165,3727],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[3732],{"type":2377,"score":2726},[3734,3736],{"type":2381,"url":3735},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2389,"url":3599},[2519,2520,2521,3606,3607,3738,3739],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":166,"slug":3741,"dossier":46,"summary":3742,"aliases":3743,"sourceIds":3746,"published":3747,"modified":3748,"checkedAt":7,"severity":3749,"references":3753,"versionKeys":3766,"packageCount":32,"repositoryCount":32},"ghsa-84pr-m4jr-85g5-4a9795ee","flask-cors vulnerable to log injection when the log level is set to debug",[3744,3745],"CVE-2024-1681","PYSEC-2024-271",[166,3745],"2024-04-19T20:15:09.273Z","2026-06-10T17:01:16.365143709Z",[3750,3752],{"type":2377,"score":3751},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2377,"score":3510},[3754,3756,3757,3759,3761,3763,3764],{"type":2381,"url":3755},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-1681",{"type":2389,"url":2819},{"type":2392,"url":3758},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F40acc8092332dfed4bb54d7a4f89a6d479466de7\u002Fflask_cors\u002Fextension.py#L194",{"type":2392,"url":3760},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-271.yaml",{"type":2447,"url":3762},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25a7a0ba-9fa2-4777-acb6-03e5539bb644",{"type":2392,"url":2825},{"type":2381,"url":3765},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-84pr-m4jr-85g5",[2831],{"id":167,"slug":3768,"dossier":46,"summary":3769,"aliases":3770,"sourceIds":3774,"published":3775,"modified":3776,"checkedAt":7,"severity":3777,"references":3780,"versionKeys":3817,"packageCount":32,"repositoryCount":412},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[3771,3772,3773],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[167,3772],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[3778],{"type":2377,"score":3779},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3781,3783,3785,3787,3789,3791,3793,3795,3797,3799,3800,3802,3805,3807,3809,3811,3813,3815],{"type":2381,"url":3782},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2381,"url":3784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2386,"url":3786},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2392,"url":3788},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2395,"url":3790},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2392,"url":3792},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2392,"url":3794},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2392,"url":3796},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2392,"url":3798},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2389,"url":3599},{"type":2392,"url":3801},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":3803,"url":3804},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2392,"url":3806},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2392,"url":3808},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2392,"url":3810},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":2392,"url":3812},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":2395,"url":3814},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2381,"url":3816},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2519,2520,2521,3606,3607,3738,3739],{"id":168,"slug":3819,"dossier":46,"summary":3820,"aliases":3821,"sourceIds":3824,"published":3825,"modified":3826,"checkedAt":7,"severity":3827,"references":3830,"versionKeys":3841,"packageCount":32,"repositoryCount":451},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[3822,3823],"CVE-2026-21860","PYSEC-2026-2044",[168,3823],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[3828,3829],{"type":2377,"score":2472},{"type":2414,"score":2470},[3831,3833,3835,3837,3838,3839],{"type":2392,"url":3832},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2381,"url":3834},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2392,"url":3836},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2389,"url":2481},{"type":2389,"url":2551},{"type":2381,"url":3840},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2485,2486,2487,2488],{"id":169,"slug":3843,"dossier":46,"summary":3844,"aliases":3845,"sourceIds":3849,"published":3850,"modified":3851,"checkedAt":7,"severity":3852,"references":3856,"versionKeys":3878,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[3846,3847,3848],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[169,3848],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[3853,3854],{"type":2377,"score":2658},{"type":2414,"score":3855},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3857,3859,3861,3863,3865,3867,3868,3870,3872,3874,3876],{"type":2381,"url":3858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2392,"url":3860},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2392,"url":3862},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2392,"url":3864},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2392,"url":3866},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2389,"url":2674},{"type":2392,"url":3869},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2392,"url":3871},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2392,"url":3873},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2389,"url":3875},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2381,"url":3877},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2686,2687,2688,3879,3880],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":170,"slug":3882,"dossier":46,"summary":3883,"aliases":3884,"sourceIds":3888,"published":3889,"modified":3890,"checkedAt":7,"severity":3891,"references":3896,"versionKeys":3912,"packageCount":32,"repositoryCount":479},"ghsa-8c7q-86fq-vvmh-be4df9cc","MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled",[3885,3886,3887],"BIT-mlflow-2026-2651","CVE-2026-2651","PYSEC-2026-2220",[170,3887],"2026-05-25T07:16:15.100Z","2026-07-14T05:30:20.380332392Z",[3892,3894],{"type":2377,"score":3893},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2377,"score":3895},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3897,3899,3901,3903,3905,3906,3908,3910],{"type":2381,"url":3898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2651",{"type":2386,"url":3900},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fd7290811d8f3c95366d80109424edc1fb1ad966f",{"type":2392,"url":3902},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-2651",{"type":2667,"url":3904},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481117",{"type":2389,"url":2790},{"type":2447,"url":3907},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F65beb119-d3e0-4e03-af2f-fa98f78f83dc",{"type":2392,"url":3909},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-2651.json",{"type":2381,"url":3911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8c7q-86fq-vvmh",[2798,2799,2800],{"id":171,"slug":3914,"dossier":46,"summary":3915,"aliases":3916,"sourceIds":3919,"published":3920,"modified":3921,"checkedAt":7,"severity":3922,"references":3927,"versionKeys":3944,"packageCount":32,"repositoryCount":32},"ghsa-8m59-7xv8-735h-61716faa","marimo contains a reflected cross-site scripting vulnerability in the notebook page",[3917,3918],"CVE-2026-54386","PYSEC-2026-2619",[171,3918],"2026-06-18T00:32:36Z","2026-07-13T16:43:20.650813439Z",[3923,3925],{"type":2377,"score":3924},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2414,"score":3926},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[3928,3930,3932,3934,3936,3938,3940,3942],{"type":2381,"url":3929},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54386",{"type":2392,"url":3931},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo\u002Fpull\u002F9789",{"type":2392,"url":3933},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo\u002Fcommit\u002Ffdd55c8cf6260ae23bb411dc9d9269def5cf75d6",{"type":2389,"url":3935},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo",{"type":2392,"url":3937},"https:\u002F\u002Fgithub.com\u002Fmarimo-team\u002Fmarimo\u002Freleases\u002Ftag\u002F0.23.9",{"type":2392,"url":3939},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fmarimo-xss-via-file-query-parameter-in-assets-py",{"type":2389,"url":3941},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarimo",{"type":2381,"url":3943},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8m59-7xv8-735h",[3945],"pypi:marimo@0.23.4",{"id":172,"slug":3947,"dossier":46,"summary":3948,"aliases":3949,"sourceIds":3952,"published":3953,"modified":3954,"checkedAt":7,"severity":3955,"references":3958,"versionKeys":3977,"packageCount":32,"repositoryCount":479},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[3950,3951],"CVE-2025-4565","PYSEC-2026-1806",[172,3951],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[3956],{"type":2414,"score":3957},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3959,3961,3963,3965,3967,3968,3970,3972,3974,3975],{"type":2392,"url":3960},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2392,"url":3962},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2381,"url":3964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2392,"url":3966},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2389,"url":3632},{"type":2392,"url":3969},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2392,"url":3971},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2392,"url":3973},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2389,"url":3634},{"type":2381,"url":3976},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3638,3640,3641],{"id":173,"slug":3979,"dossier":46,"summary":3980,"aliases":3981,"sourceIds":3984,"published":2808,"modified":3985,"checkedAt":7,"severity":3986,"references":3989,"versionKeys":4003,"packageCount":32,"repositoryCount":113},"ghsa-8vgw-p6qm-5gr7-be25d449","Flask-CORS allows for inconsistent CORS matching",[3982,3983],"CVE-2024-6844","PYSEC-2026-1385",[173,3983],"2026-07-07T17:57:07.966932476Z",[3987],{"type":2377,"score":3988},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3990,3992,3994,3995,3997,3999,4000,4001],{"type":2381,"url":3991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6844",{"type":2392,"url":3993},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F35d875319621bd129a38b2b823abf4a2f6cda536",{"type":2389,"url":2819},{"type":2392,"url":3996},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002Fmain\u002Fflask_cors\u002Fextension.py#L193",{"type":2392,"url":3998},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F731a6cd4-d05f-4fe6-8f5b-fe088d7b34e0",{"type":2392,"url":2825},{"type":2389,"url":2827},{"type":2381,"url":4002},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8vgw-p6qm-5gr7",[2831,2832],{"id":174,"slug":4005,"dossier":46,"summary":4006,"aliases":4007,"sourceIds":4010,"published":4011,"modified":4012,"checkedAt":7,"severity":4013,"references":4015,"versionKeys":4028,"packageCount":32,"repositoryCount":113},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4008,4009],"CVE-2025-5197","PYSEC-2026-1983",[174,4009],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[4014],{"type":2377,"score":2904},[4016,4018,4020,4022,4023,4025,4026],{"type":2381,"url":4017},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2392,"url":4019},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2392,"url":4021},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2389,"url":2445},{"type":2392,"url":4024},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2389,"url":2711},{"type":2381,"url":4027},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2452,2453],{"id":175,"slug":4030,"dossier":46,"summary":4031,"aliases":4032,"sourceIds":4035,"published":4036,"modified":4037,"checkedAt":7,"severity":4038,"references":4041,"versionKeys":4060,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4033,4034],"CVE-2024-47081","PYSEC-2026-1872",[175,4034],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[4039],{"type":2377,"score":4040},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4042,4044,4046,4048,4050,4052,4054,4056,4058],{"type":2392,"url":4043},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2381,"url":4045},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2392,"url":4047},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2386,"url":4049},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2389,"url":4051},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2392,"url":4053},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2392,"url":4055},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2389,"url":4057},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2381,"url":4059},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[4061,4062],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":176,"slug":4064,"dossier":46,"summary":4065,"aliases":4066,"sourceIds":4069,"published":4070,"modified":4071,"checkedAt":7,"severity":4072,"references":4075,"versionKeys":4092,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4067,4068],"CVE-2024-35195","PYSEC-2026-1873",[176,4068],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[4073],{"type":2377,"score":4074},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4076,4078,4080,4082,4084,4085,4087,4089,4090],{"type":2392,"url":4077},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2381,"url":4079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2392,"url":4081},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2386,"url":4083},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2389,"url":4051},{"type":2392,"url":4086},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2392,"url":4088},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2389,"url":4057},{"type":2381,"url":4091},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4061],{"id":177,"slug":4094,"dossier":46,"summary":4095,"aliases":4096,"sourceIds":4100,"published":4101,"modified":4102,"checkedAt":7,"severity":4103,"references":4108,"versionKeys":4124,"packageCount":32,"repositoryCount":113},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4097,4098,4099],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[177],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4104,4106],{"type":2377,"score":4105},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2414,"score":4107},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4109,4111,4113,4115,4116,4118,4120,4122],{"type":2381,"url":4110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2392,"url":4112},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2392,"url":4114},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2389,"url":2674},{"type":2392,"url":4117},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2392,"url":4119},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2392,"url":4121},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2392,"url":4123},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2686,2687],{"id":178,"slug":4126,"dossier":46,"summary":4127,"aliases":4128,"sourceIds":4132,"published":4133,"modified":4134,"checkedAt":7,"severity":4135,"references":4139,"versionKeys":4179,"packageCount":32,"repositoryCount":4183},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4129,4130,4131],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[178,4131],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4136,4138],{"type":2414,"score":4137},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2377,"score":2726},[4140,4142,4144,4146,4148,4150,4151,4153,4155,4157,4159,4161,4163,4165,4167,4169,4171,4173,4175,4177],{"type":2392,"url":4141},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2381,"url":4143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2392,"url":4145},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2392,"url":4147},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2392,"url":4149},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2389,"url":3177},{"type":2392,"url":4152},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2392,"url":4154},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2392,"url":4156},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2381,"url":4158},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2381,"url":4160},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2381,"url":4162},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2381,"url":4164},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2381,"url":4166},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2381,"url":4168},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2381,"url":4170},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2381,"url":4172},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2381,"url":4174},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2381,"url":4176},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2381,"url":4178},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4180,4181,4182,3181,3182,3183,3184],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":179,"slug":4185,"dossier":46,"summary":4186,"aliases":4187,"sourceIds":4190,"published":4191,"modified":4192,"checkedAt":7,"severity":4193,"references":4196,"versionKeys":4213,"packageCount":32,"repositoryCount":113},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4188,4189],"CVE-2025-27516","PYSEC-2026-1471",[179,4189],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4194],{"type":2414,"score":4195},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4197,4199,4201,4203,4205,4207,4209,4211],{"type":2392,"url":4198},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2381,"url":4200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2386,"url":4202},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2389,"url":4204},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2392,"url":4206},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2392,"url":4208},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2389,"url":4210},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2381,"url":4212},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4214,4215],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":180,"slug":4217,"dossier":46,"summary":4218,"aliases":4219,"sourceIds":4222,"published":4223,"modified":4224,"checkedAt":7,"severity":4225,"references":4228,"versionKeys":4239,"packageCount":32,"repositoryCount":431},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[4220,4221],"CVE-2026-49854","PYSEC-2026-3388",[180,4221],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[4226],{"type":2377,"score":4227},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4229,4231,4232,4234,4235,4237],{"type":2392,"url":4230},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2389,"url":2758},{"type":2392,"url":4233},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":2389,"url":2760},{"type":2381,"url":4236},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2381,"url":4238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[2766,2767,2768,2769,2770],{"id":181,"slug":4241,"dossier":46,"summary":4242,"aliases":4243,"sourceIds":4247,"published":4248,"modified":4249,"checkedAt":7,"severity":4250,"references":4255,"versionKeys":4271,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4244,4245,4246],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[181,4246],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4251,4253],{"type":2377,"score":4252},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2414,"score":4254},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4256,4258,4260,4262,4263,4265,4267,4269],{"type":2381,"url":4257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2392,"url":4259},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2392,"url":4261},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2389,"url":3119},{"type":2392,"url":4264},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2392,"url":4266},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2389,"url":4268},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2381,"url":4270},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3125],{"id":182,"slug":4273,"dossier":46,"summary":4274,"aliases":4275,"sourceIds":4279,"published":4280,"modified":4281,"checkedAt":7,"severity":4282,"references":4284,"versionKeys":4296,"packageCount":32,"repositoryCount":479},"ghsa-f2m9-wcf4-cwwx-e7c3cfb2","MLFlow Creates a Temporary File With Insecure Permissions",[4276,4277,4278],"BIT-mlflow-2026-4137","CVE-2026-4137","PYSEC-2026-2655",[182,4278],"2026-05-18T21:31:53Z","2026-07-13T16:43:33.416174314Z",[4283],{"type":2377,"score":2931},[4285,4287,4289,4290,4291,4293,4294],{"type":2381,"url":4286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4137",{"type":2392,"url":4288},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1dcbb0c2fbd1f446c328830e601ca13a28219b8a",{"type":2381,"url":2942},{"type":2389,"url":2790},{"type":2392,"url":4292},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F648dc30b-76c7-4433-86b8-f43d926fd8d6",{"type":2389,"url":2794},{"type":2381,"url":4295},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2m9-wcf4-cwwx",[2798,2799,2800],{"id":183,"slug":4298,"dossier":46,"summary":4299,"aliases":4300,"sourceIds":4304,"published":4305,"modified":4306,"checkedAt":7,"severity":4307,"references":4312,"versionKeys":4330,"packageCount":32,"repositoryCount":113},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[4301,4302,4303],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[183],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[4308,4310],{"type":2377,"score":4309},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2414,"score":4311},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4313,4315,4317,4319,4321,4323,4324,4326,4328],{"type":2381,"url":4314},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2392,"url":4316},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2392,"url":4318},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2392,"url":4320},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2392,"url":4322},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2389,"url":2674},{"type":2392,"url":4325},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2392,"url":4327},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2392,"url":4329},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2686,2687],{"id":184,"slug":4332,"dossier":46,"summary":4333,"aliases":4334,"sourceIds":4337,"published":4338,"modified":4339,"checkedAt":7,"severity":4340,"references":4345,"versionKeys":4356,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[4335,4336],"CVE-2024-47874","PYSEC-2026-1943",[184,4336],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[4341,4343],{"type":2377,"score":4342},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2414,"score":4344},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4346,4348,4350,4352,4353,4354],{"type":2392,"url":4347},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2381,"url":4349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2386,"url":4351},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2389,"url":2509},{"type":2389,"url":2515},{"type":2381,"url":4355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2519],{"id":185,"slug":4358,"dossier":46,"summary":4359,"aliases":4360,"sourceIds":4363,"published":4364,"modified":4365,"checkedAt":7,"severity":4366,"references":4369,"versionKeys":4384,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[4361,4362],"CVE-2024-49766","PYSEC-2026-2045",[185,4362],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[4367],{"type":2414,"score":4368},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4370,4372,4374,4376,4377,4379,4381,4382],{"type":2392,"url":4371},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2381,"url":4373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2386,"url":4375},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2389,"url":2481},{"type":2392,"url":4378},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2392,"url":4380},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2389,"url":2551},{"type":2381,"url":4383},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2485],{"id":186,"slug":4386,"dossier":46,"summary":4387,"aliases":4388,"sourceIds":4391,"published":4392,"modified":4393,"checkedAt":7,"severity":4394,"references":4399,"versionKeys":4418,"packageCount":32,"repositoryCount":412},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[4389,4390],"CVE-2026-5241","PYSEC-2026-2290",[186,4390],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[4395,4397],{"type":2377,"score":4396},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2377,"score":4398},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4400,4402,4404,4406,4407,4409,4411,4412,4414,4416],{"type":2381,"url":4401},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2386,"url":4403},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2381,"url":4405},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2381,"url":3808},{"type":2392,"url":4408},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2667,"url":4410},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2389,"url":2445},{"type":2392,"url":4413},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2447,"url":4415},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2392,"url":4417},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[2452,2453,2454,2455,2456,2457,2458],{"id":187,"slug":4420,"dossier":46,"summary":4421,"aliases":4422,"sourceIds":4426,"published":4427,"modified":4428,"checkedAt":7,"severity":4429,"references":4434,"versionKeys":4449,"packageCount":32,"repositoryCount":479},"ghsa-fh64-r2vc-xvhr-8b7ea4aa","MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface",[4423,4424,4425],"BIT-mlflow-2026-33865","CVE-2026-33865","PYSEC-2026-93",[187,4425],"2026-04-07T13:16:46.840Z","2026-06-10T17:02:20.155874108Z",[4430,4432],{"type":2377,"score":4431},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2414,"score":4433},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:P\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[4435,4437,4439,4441,4442,4443,4444,4446,4447],{"type":2381,"url":4436},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33865",{"type":2386,"url":4438},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21435",{"type":2392,"url":4440},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Faca4dd0ec88a12f7655155c224371280e9b45dda",{"type":2447,"url":2856},{"type":2392,"url":2858},{"type":2389,"url":2790},{"type":2392,"url":4445},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-93.yaml",{"type":2381,"url":2863},{"type":2381,"url":4448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh64-r2vc-xvhr",[2798,2799,2800],{"id":188,"slug":4451,"dossier":46,"summary":4452,"aliases":4453,"sourceIds":4457,"published":4458,"modified":4459,"checkedAt":7,"severity":4460,"references":4463,"versionKeys":4476,"packageCount":32,"repositoryCount":479},"ghsa-fhff-qmm8-h2fp-244bab2b","Arbitrary file write via tar traversal in mlflow",[4454,4455,4456],"BIT-mlflow-2025-15031","CVE-2025-15031","PYSEC-2026-2656",[188,4456],"2026-03-19T00:30:20Z","2026-07-13T16:43:21.433539748Z",[4461],{"type":2377,"score":4462},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4464,4466,4468,4469,4471,4473,4474],{"type":2381,"url":4465},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15031",{"type":2392,"url":4467},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346",{"type":2389,"url":2790},{"type":2392,"url":4470},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Ffe4d9be330426904283401f1d2ed914238b6fc37\u002Fmlflow\u002Fpyfunc\u002Fdbconnect_artifact_cache.py#L140",{"type":2392,"url":4472},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F09856f77-f968-446f-a930-657d126efe4e",{"type":2389,"url":2794},{"type":2381,"url":4475},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fhff-qmm8-h2fp",[2798,2799,2800],{"id":189,"slug":4478,"dossier":46,"summary":4479,"aliases":4480,"sourceIds":4483,"published":4484,"modified":4485,"checkedAt":7,"severity":4486,"references":4488,"versionKeys":4501,"packageCount":32,"repositoryCount":479},"ghsa-fjrm-76x2-c4q4-c21dcb99","JWCrypto: JWE ZIP decompression bomb",[4481,4482],"CVE-2026-39373","PYSEC-2026-70",[189,4482],"2026-04-07T20:16:32.133Z","2026-06-06T00:30:08.711138560Z",[4487],{"type":2377,"score":2472},[4489,4491,4493,4495,4497,4499],{"type":2447,"url":4490},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fsecurity\u002Fadvisories\u002FGHSA-fjrm-76x2-c4q4",{"type":2381,"url":4492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39373",{"type":2392,"url":4494},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fcommit\u002F25db861d8b29434838669a94a843af03d29ea6ed",{"type":2389,"url":4496},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto",{"type":2392,"url":4498},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Freleases\u002Ftag\u002Fv1.5.7",{"type":2392,"url":4500},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjwcrypto\u002FPYSEC-2026-70.yaml",[4502],"pypi:jwcrypto@1.5.6",{"id":190,"slug":4504,"dossier":46,"summary":3355,"aliases":4505,"sourceIds":4508,"published":4509,"modified":4510,"checkedAt":7,"severity":4511,"references":4514,"versionKeys":4525,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[4506,4507],"CVE-2025-1194","PYSEC-2026-1984",[190,4507],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[4512],{"type":2377,"score":4513},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4515,4517,4519,4520,4522,4523],{"type":2381,"url":4516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2392,"url":4518},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2389,"url":2445},{"type":2392,"url":4521},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2389,"url":2711},{"type":2381,"url":4524},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2452],{"id":191,"slug":4527,"dossier":46,"summary":4528,"aliases":4529,"sourceIds":4533,"published":4534,"modified":4535,"checkedAt":7,"severity":4536,"references":4540,"versionKeys":4556,"packageCount":32,"repositoryCount":479},"ghsa-g35p-px32-whv6-8b66e41b","MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration",[4530,4531,4532],"BIT-mlflow-2026-4035","CVE-2026-4035","PYSEC-2026-2222",[191,4532],"2026-06-03T09:16:13.083Z","2026-07-13T16:45:04.877817766Z",[4537,4539],{"type":2377,"score":4538},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:L",{"type":2377,"score":2753},[4541,4543,4545,4547,4549,4550,4552,4554],{"type":2381,"url":4542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4035",{"type":2386,"url":4544},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F4a3f2f720cb4f058c9e0c5b883e0acc9ab64a7f3",{"type":2392,"url":4546},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-4035",{"type":2667,"url":4548},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484318",{"type":2389,"url":2790},{"type":2447,"url":4551},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff8e591a0-0f19-4910-b82e-16c9956f2233",{"type":2392,"url":4553},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-4035.json",{"type":2381,"url":4555},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g35p-px32-whv6",[2798,2799,2800],{"id":192,"slug":4558,"dossier":46,"summary":4559,"aliases":4560,"sourceIds":4563,"published":4564,"modified":4565,"checkedAt":7,"severity":4566,"references":4569,"versionKeys":4580,"packageCount":32,"repositoryCount":479},"ghsa-g6pg-52vf-843h-da352526","MLFlow allows Tracing + Assessments Access",[4561,4562],"CVE-2025-15381","PYSEC-2026-2657",[192,4562],"2026-03-27T18:31:27Z","2026-07-13T16:43:42.935139106Z",[4567],{"type":2377,"score":4568},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4570,4572,4573,4575,4577,4578],{"type":2381,"url":4571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15381",{"type":2389,"url":2790},{"type":2392,"url":4574},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Fb569ebc74c14af593c326143bee2df44a5d59edf\u002Fmlflow\u002Fserver\u002Fauth\u002F__init__.py#L752",{"type":2392,"url":4576},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F149fb2f9-ef4b-4136-a25c-20563451904c",{"type":2389,"url":2794},{"type":2381,"url":4579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6pg-52vf-843h",[2798,2799,2800],{"id":193,"slug":4582,"dossier":46,"summary":4583,"aliases":4584,"sourceIds":4587,"published":4588,"modified":4589,"checkedAt":7,"severity":4590,"references":4593,"versionKeys":4612,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[4585,4586],"CVE-2024-34062","PYSEC-2026-1976",[193,4586],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[4591],{"type":2377,"score":4592},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4594,4596,4598,4600,4602,4604,4606,4608,4610],{"type":2392,"url":4595},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2381,"url":4597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2392,"url":4599},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2389,"url":4601},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2392,"url":4603},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2392,"url":4605},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2392,"url":4607},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2389,"url":4609},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2381,"url":4611},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[4613],"pypi:tqdm@4.66.2",{"id":194,"slug":4615,"dossier":91,"summary":4616,"aliases":4617,"sourceIds":4620,"published":4621,"modified":4622,"checkedAt":7,"severity":4623,"references":4628,"versionKeys":4638,"packageCount":32,"repositoryCount":390},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[4618,4619],"CVE-2026-25645","PYSEC-2026-2275",[194,4619],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[4624,4626],{"type":2377,"score":4625},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2377,"score":4627},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4629,4631,4633,4635,4636],{"type":2381,"url":4630},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2381,"url":4632},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2386,"url":4634},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2389,"url":4051},{"type":2381,"url":4637},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4061,4062,4639,4640],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":195,"slug":4642,"dossier":91,"summary":4643,"aliases":4644,"sourceIds":4647,"published":4648,"modified":4649,"checkedAt":7,"severity":4650,"references":4652,"versionKeys":4663,"packageCount":32,"repositoryCount":2618},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[4645,4646],"CVE-2025-66418","PYSEC-2026-1998",[195,4646],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[4651],{"type":2414,"score":2598},[4653,4655,4657,4659,4660,4661],{"type":2392,"url":4654},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2381,"url":4656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2386,"url":4658},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2389,"url":2607},{"type":2389,"url":2609},{"type":2381,"url":4662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2613,2614,2615,2616,2617],{"id":196,"slug":4665,"dossier":46,"summary":4666,"aliases":4667,"sourceIds":4670,"published":4671,"modified":4672,"checkedAt":7,"severity":4673,"references":4676,"versionKeys":4691,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[4668,4669],"CVE-2024-56201","PYSEC-2026-1472",[196,4669],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[4674,4675],{"type":2377,"score":3106},{"type":2414,"score":4195},[4677,4679,4681,4683,4685,4686,4688,4689],{"type":2392,"url":4678},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2381,"url":4680},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2392,"url":4682},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2386,"url":4684},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2389,"url":4204},{"type":2392,"url":4687},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2389,"url":4210},{"type":2381,"url":4690},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4214],{"id":197,"slug":4693,"dossier":46,"summary":4694,"aliases":4695,"sourceIds":4698,"published":4699,"modified":4700,"checkedAt":7,"severity":4701,"references":4704,"versionKeys":4719,"packageCount":32,"repositoryCount":113},"ghsa-gq3w-7jj3-x7gr-f80b7f86","MLflow Use of Default Password Authentication Bypass Vulnerability",[4696,4697],"CVE-2026-2635","PYSEC-2026-421",[197,4697],"2026-02-21T00:31:43Z","2026-07-01T20:22:58.325967Z",[4702],{"type":2377,"score":4703},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4705,4707,4709,4711,4712,4714,4716,4717],{"type":2381,"url":4706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2635",{"type":2392,"url":4708},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19260",{"type":2392,"url":4710},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F5bf2ec2bd4222a18d78631183ac7f6b752afe8a4",{"type":2389,"url":2790},{"type":2392,"url":4713},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Freleases\u002Ftag\u002Fv3.8.0rc0",{"type":2392,"url":4715},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-111",{"type":2389,"url":2794},{"type":2381,"url":4718},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gq3w-7jj3-x7gr",[2798,2799],{"id":198,"slug":4721,"dossier":46,"summary":4722,"aliases":4723,"sourceIds":4724,"published":4725,"modified":4726,"checkedAt":7,"severity":4727,"references":4728,"versionKeys":4734,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[198],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[4729,4731,4732],{"type":2392,"url":4730},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2389,"url":2995},{"type":2392,"url":4733},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[2999],{"id":199,"slug":4736,"dossier":46,"summary":4737,"aliases":4738,"sourceIds":4741,"published":4742,"modified":4743,"checkedAt":7,"severity":4744,"references":4746,"versionKeys":4767,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[4739,4740],"CVE-2024-34064","PYSEC-2026-1474",[199,4740],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[4745],{"type":2377,"score":3506},[4747,4749,4751,4753,4754,4756,4758,4760,4762,4764,4765],{"type":2392,"url":4748},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2381,"url":4750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2386,"url":4752},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2389,"url":4204},{"type":2392,"url":4755},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2392,"url":4757},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2392,"url":4759},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2392,"url":4761},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2392,"url":4763},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2389,"url":4210},{"type":2381,"url":4766},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4214],{"id":200,"slug":4769,"dossier":46,"summary":2461,"aliases":4770,"sourceIds":4773,"published":4774,"modified":4775,"checkedAt":7,"severity":4776,"references":4778,"versionKeys":4791,"packageCount":32,"repositoryCount":451},"ghsa-hgf8-39gv-g3f2-0469b394",[4771,4772],"CVE-2025-66221","PYSEC-2026-2046",[200,4772],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[4777],{"type":2414,"score":2470},[4779,4781,4783,4785,4786,4788,4789],{"type":2392,"url":4780},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2381,"url":4782},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2392,"url":4784},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2389,"url":2481},{"type":2392,"url":4787},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2389,"url":2551},{"type":2381,"url":4790},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2485,2486,2487,2488],{"id":201,"slug":4793,"dossier":46,"summary":4794,"aliases":4795,"sourceIds":4798,"published":4799,"modified":4800,"checkedAt":7,"severity":4801,"references":4805,"versionKeys":4831,"packageCount":32,"repositoryCount":32},"ghsa-hxwh-jpp2-84pm-85ca3470","Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default",[4796,4797],"CVE-2024-6221","PYSEC-2024-71",[201,4797],"2024-08-18T19:15:00Z","2026-07-09T16:56:25.795378335Z",[4802,4804],{"type":2377,"score":4803},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2414,"score":2566},[4806,4808,4810,4812,4814,4816,4818,4820,4821,4823,4825,4827,4829],{"type":2381,"url":4807},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6221",{"type":2392,"url":4809},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fissues\u002F362",{"type":2392,"url":4811},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F363",{"type":2392,"url":4813},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F368",{"type":2392,"url":4815},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F03aa3f8e2256437f7bad96422a747b98ab5e31bf",{"type":2392,"url":4817},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F7ae310c56ac30e0b94fb42129aa377bf633256ec",{"type":2392,"url":4819},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fc8514760cf03fcce16d77f6db7007aad429c4548",{"type":2389,"url":2819},{"type":2392,"url":4822},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Freleases",{"type":2392,"url":4824},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-260.yaml",{"type":2392,"url":4826},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-71.yaml",{"type":2392,"url":4828},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa42935fc-6f57-4818-bca4-3d528235df4d",{"type":2381,"url":4830},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxwh-jpp2-84pm",[2831],{"id":202,"slug":4833,"dossier":46,"summary":4834,"aliases":4835,"sourceIds":4838,"published":4839,"modified":4840,"checkedAt":7,"severity":4841,"references":4845,"versionKeys":4861,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[4836,4837],"CVE-2024-11394","PYSEC-2024-229",[202,4837],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[4842,4844],{"type":2377,"score":4843},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2377,"score":4252},[4846,4848,4850,4852,4853,4855,4857,4859],{"type":2381,"url":4847},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2392,"url":4849},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2392,"url":4851},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2389,"url":2445},{"type":2392,"url":4854},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2392,"url":4856},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2381,"url":4858},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2381,"url":4860},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2452],{"id":203,"slug":4863,"dossier":46,"summary":4864,"aliases":4865,"sourceIds":4868,"published":4869,"modified":4870,"checkedAt":7,"severity":4871,"references":4873,"versionKeys":4886,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[4866,4867],"CVE-2025-3264","PYSEC-2026-1985",[203,4867],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[4872],{"type":2377,"score":2904},[4874,4876,4878,4880,4881,4883,4884],{"type":2381,"url":4875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2392,"url":4877},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2392,"url":4879},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2389,"url":2445},{"type":2392,"url":4882},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2389,"url":2711},{"type":2381,"url":4885},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2452],{"id":204,"slug":4888,"dossier":46,"summary":4889,"aliases":4890,"sourceIds":4893,"published":4894,"modified":4895,"checkedAt":7,"severity":4896,"references":4900,"versionKeys":4908,"packageCount":32,"repositoryCount":412},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[4891,4892],"CVE-2026-54282","PYSEC-2026-248",[204,4892],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[4897,4899],{"type":2377,"score":4898},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2377,"score":3510},[4901,4903,4905,4906],{"type":2381,"url":4902},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2381,"url":4904},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2389,"url":3599},{"type":2392,"url":4907},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2519,2520,2521,3606,3607,3738,3739],{"id":205,"slug":4910,"dossier":46,"summary":4911,"aliases":4912,"sourceIds":4915,"published":4916,"modified":4917,"checkedAt":7,"severity":4918,"references":4922,"versionKeys":4936,"packageCount":32,"repositoryCount":65},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[4913,4914],"CVE-2026-30922","PYSEC-2026-2263",[205,4914],"2026-03-17T16:17:33Z","2026-07-13T07:26:46.403932690Z",[4919,4921],{"type":2377,"score":4920},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2377,"score":2726},[4923,4925,4927,4929,4931,4932,4934],{"type":2447,"url":4924},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2381,"url":4926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2386,"url":4928},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2392,"url":4930},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2389,"url":3234},{"type":2392,"url":4933},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.3",{"type":2392,"url":4935},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[3246],{"id":206,"slug":4938,"dossier":46,"summary":4939,"aliases":4940,"sourceIds":4943,"published":4944,"modified":4945,"checkedAt":7,"severity":4946,"references":4950,"versionKeys":4958,"packageCount":32,"repositoryCount":65},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[4941,4942],"CVE-2026-34073","PYSEC-2026-35",[206,4942],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[4947,4948],{"type":2377,"score":3510},{"type":2414,"score":4949},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4951,4953,4955,4956],{"type":2381,"url":4952},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2381,"url":4954},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2389,"url":2995},{"type":2392,"url":4957},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[2999,3000,3001,3002,3003,3004],{"id":207,"slug":4960,"dossier":46,"summary":4961,"aliases":4962,"sourceIds":4965,"published":4966,"modified":4967,"checkedAt":7,"severity":4968,"references":4971,"versionKeys":4979,"packageCount":32,"repositoryCount":479},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[4963,4964],"CVE-2026-44432","PYSEC-2026-142",[207,4964],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[4969,4970],{"type":2377,"score":2726},{"type":2414,"score":2598},[4972,4974,4976,4978],{"type":2381,"url":4973},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2381,"url":4975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2392,"url":4977},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2389,"url":2607},[4980],"pypi:urllib3@2.6.3",{"id":208,"slug":4982,"dossier":46,"summary":4983,"aliases":4984,"sourceIds":4987,"published":4988,"modified":4989,"checkedAt":7,"severity":4990,"references":4993,"versionKeys":5006,"packageCount":32,"repositoryCount":5011},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[4985,4986],"CVE-2026-28684","PYSEC-2026-2270",[208,4986],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[4991],{"type":2377,"score":4992},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4994,4996,4998,5000,5002,5004],{"type":2386,"url":4995},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2381,"url":4997},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2386,"url":4999},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2392,"url":5001},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2389,"url":5003},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2381,"url":5005},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[5007,5008,5009,5010],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":209,"slug":5013,"dossier":46,"summary":5014,"aliases":5015,"sourceIds":5018,"published":5019,"modified":5020,"checkedAt":7,"severity":5021,"references":5023,"versionKeys":5032,"packageCount":32,"repositoryCount":431},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[5016,5017],"CVE-2026-49855","PYSEC-2026-3389",[209,5017],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[5022],{"type":2377,"score":2726},[5024,5026,5027,5028,5030],{"type":2392,"url":5025},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2389,"url":2758},{"type":2389,"url":2760},{"type":2381,"url":5029},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2381,"url":5031},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[2766,2767,2768,2769,2770],{"id":210,"slug":5034,"dossier":46,"summary":5035,"aliases":5036,"sourceIds":5037,"published":5038,"modified":5039,"checkedAt":7,"severity":5040,"references":5043,"versionKeys":5049,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[],[210],"2026-05-08T23:19:02Z","2026-05-10T04:44:28.835923654Z",[5041],{"type":2377,"score":5042},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5044,5046,5048],{"type":2392,"url":5045},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":2381,"url":5047},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2389,"url":3432},[3436,3437,3438],{"id":211,"slug":5051,"dossier":46,"summary":5052,"aliases":5053,"sourceIds":5056,"published":5057,"modified":5058,"checkedAt":7,"severity":5059,"references":5062,"versionKeys":5070,"packageCount":32,"repositoryCount":479},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[5054,5055],"CVE-2026-39892","PYSEC-2026-36",[211,5055],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[5060,5061],{"type":2414,"score":3283},{"type":2377,"score":3019},[5063,5065,5067,5068],{"type":2381,"url":5064},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2381,"url":5066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2389,"url":2995},{"type":2392,"url":5069},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[3003,3004],{"id":212,"slug":5072,"dossier":46,"summary":5073,"aliases":5074,"sourceIds":5078,"published":5079,"modified":5080,"checkedAt":7,"severity":5081,"references":5084,"versionKeys":5097,"packageCount":32,"repositoryCount":113},"ghsa-pgqp-8h46-6x4j-303ca0ec","MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation",[5075,5076,5077],"BIT-mlflow-2025-14279","CVE-2025-14279","PYSEC-2026-1656",[212,5077],"2026-01-12T09:30:31Z","2026-07-07T17:56:18.060826978Z",[5082],{"type":2377,"score":5083},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5085,5087,5089,5091,5092,5094,5095],{"type":2381,"url":5086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14279",{"type":2392,"url":5088},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F17910",{"type":2392,"url":5090},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fb0ffd289e9b0d0cc32c9e3a9b9f3843ae83dbec3",{"type":2389,"url":2790},{"type":2392,"url":5093},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fef478f72-2e4f-44dc-8055-fc06bef03108",{"type":2389,"url":2794},{"type":2381,"url":5096},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pgqp-8h46-6x4j",[2798,2799],{"id":213,"slug":5099,"dossier":46,"summary":5100,"aliases":5101,"sourceIds":5104,"published":4869,"modified":5105,"checkedAt":7,"severity":5106,"references":5109,"versionKeys":5122,"packageCount":32,"repositoryCount":113},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[5102,5103],"CVE-2025-3777","PYSEC-2026-1986",[213,5103],"2026-07-07T17:56:47.225461188Z",[5107],{"type":2377,"score":5108},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5110,5112,5114,5115,5117,5119,5120],{"type":2381,"url":5111},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2392,"url":5113},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2389,"url":2445},{"type":2392,"url":5116},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2392,"url":5118},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2389,"url":2711},{"type":2381,"url":5121},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2452,2453],{"id":214,"slug":5124,"dossier":46,"summary":5125,"aliases":5126,"sourceIds":5129,"published":5130,"modified":5131,"checkedAt":7,"severity":5132,"references":5134,"versionKeys":5146,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[5127,5128],"CVE-2025-50181","PYSEC-2026-1999",[214,5128],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[5133],{"type":2377,"score":2878},[5135,5137,5139,5141,5142,5143,5144],{"type":2392,"url":5136},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2381,"url":5138},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2386,"url":5140},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2389,"url":2607},{"type":2392,"url":2888},{"type":2389,"url":2609},{"type":2381,"url":5145},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2613,2614,2615,2616],{"id":215,"slug":5148,"dossier":46,"summary":5149,"aliases":5150,"sourceIds":5151,"published":5152,"modified":5153,"checkedAt":7,"severity":5154,"references":5157,"versionKeys":5161,"packageCount":32,"repositoryCount":431},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[215],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[5155],{"type":2377,"score":5156},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5158,5160],{"type":2392,"url":5159},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":2389,"url":2758},[2766,2767,2768,2769,2770],{"id":216,"slug":5163,"dossier":91,"summary":5164,"aliases":5165,"sourceIds":5169,"published":5170,"modified":5171,"checkedAt":7,"severity":5172,"references":5175,"versionKeys":5187,"packageCount":32,"repositoryCount":2618},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[5166,5167,5168],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[216,5168],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[5173,5174],{"type":2414,"score":4137},{"type":2377,"score":3339},[5176,5177,5179,5181,5183,5185,5186],{"type":2392,"url":4141},{"type":2386,"url":5178},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2381,"url":5180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2386,"url":5182},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2386,"url":5184},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2389,"url":3177},{"type":2381,"url":3179},[4180,4181,4182,3181,3182,3183,3184,3185],{"id":217,"slug":5189,"dossier":46,"summary":5190,"aliases":5191,"sourceIds":5194,"published":4699,"modified":5195,"checkedAt":7,"severity":5196,"references":5199,"versionKeys":5211,"packageCount":32,"repositoryCount":113},"ghsa-q2r8-vmq7-fpx2-63c75ef0","MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability",[5192,5193],"CVE-2026-2033","PYSEC-2026-2658",[217,5193],"2026-07-13T16:43:16.528255849Z",[5197],{"type":2377,"score":5198},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5200,5202,5203,5204,5205,5206,5208,5209],{"type":2381,"url":5201},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2033",{"type":2392,"url":4708},{"type":2392,"url":4710},{"type":2389,"url":2790},{"type":2392,"url":4713},{"type":2392,"url":5207},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-105",{"type":2389,"url":2794},{"type":2381,"url":5210},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2r8-vmq7-fpx2",[2798,2799],{"id":218,"slug":5213,"dossier":46,"summary":5214,"aliases":5215,"sourceIds":5218,"published":4869,"modified":5219,"checkedAt":7,"severity":5220,"references":5222,"versionKeys":5233,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[5216,5217],"CVE-2025-3263","PYSEC-2026-1987",[218,5217],"2026-07-07T17:56:57.889099913Z",[5221],{"type":2377,"score":2904},[5223,5225,5226,5227,5228,5230,5231],{"type":2381,"url":5224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2392,"url":4877},{"type":2392,"url":4879},{"type":2389,"url":2445},{"type":2392,"url":5229},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2389,"url":2711},{"type":2381,"url":5232},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2452],{"id":219,"slug":5235,"dossier":46,"summary":5236,"aliases":5237,"sourceIds":5240,"published":5241,"modified":5242,"checkedAt":7,"severity":5243,"references":5247,"versionKeys":5260,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[5238,5239],"CVE-2024-56326","PYSEC-2026-1475",[219,5239],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[5244,5246],{"type":2377,"score":5245},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2414,"score":4195},[5248,5250,5252,5254,5255,5256,5257,5258],{"type":2392,"url":5249},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2381,"url":5251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2386,"url":5253},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2389,"url":4204},{"type":2392,"url":4687},{"type":2392,"url":4206},{"type":2389,"url":4210},{"type":2381,"url":5259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4214],{"id":220,"slug":5262,"dossier":46,"summary":5263,"aliases":5264,"sourceIds":5268,"published":5269,"modified":5270,"checkedAt":7,"severity":5271,"references":5274,"versionKeys":5294,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[5265,5266,5267],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[220,5267],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[5272,5273],{"type":2377,"score":2726},{"type":2414,"score":3283},[5275,5277,5279,5281,5283,5285,5287,5288,5289,5291,5292],{"type":2392,"url":5276},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2381,"url":5278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2392,"url":5280},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2392,"url":5282},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2392,"url":5284},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2392,"url":5286},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2389,"url":2481},{"type":2392,"url":4378},{"type":2392,"url":5290},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2389,"url":2551},{"type":2381,"url":5293},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2485],{"id":221,"slug":5296,"dossier":91,"summary":5297,"aliases":5298,"sourceIds":5301,"published":5302,"modified":5303,"checkedAt":7,"severity":5304,"references":5309,"versionKeys":5315,"packageCount":32,"repositoryCount":390},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[5299,5300],"CVE-2026-44431","PYSEC-2026-141",[221,5300],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[5305,5307],{"type":2377,"score":5306},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2414,"score":5308},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5310,5312,5314],{"type":2381,"url":5311},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2381,"url":5313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2389,"url":2607},[2613,2614,2615,2616,2617,4980],{"id":222,"slug":5317,"dossier":46,"summary":5318,"aliases":5319,"sourceIds":5323,"published":5324,"modified":5325,"checkedAt":7,"severity":5326,"references":5330,"versionKeys":5348,"packageCount":32,"repositoryCount":5352},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[5320,5321,5322],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[222],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[5327,5328],{"type":2377,"score":4309},{"type":2414,"score":5329},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5331,5333,5335,5337,5339,5341,5342,5344,5346],{"type":2381,"url":5332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2392,"url":5334},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2392,"url":5336},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2392,"url":5338},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2392,"url":5340},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2389,"url":2674},{"type":2392,"url":5343},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2392,"url":5345},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2392,"url":5347},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2686,2687,2688,3879,3880,5349,5350,5351],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",9,{"id":223,"slug":5354,"dossier":46,"summary":5355,"aliases":5356,"sourceIds":5359,"published":5360,"modified":5361,"checkedAt":7,"severity":5362,"references":5365,"versionKeys":5378,"packageCount":32,"repositoryCount":431},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[5357,5358],"CVE-2026-31958","PYSEC-2026-140",[223,5358],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[5363,5364],{"type":2377,"score":2726},{"type":2414,"score":4344},[5366,5368,5370,5372,5374,5375,5376],{"type":2381,"url":5367},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":2381,"url":5369},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":2392,"url":5371},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":2392,"url":5373},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":2389,"url":2758},{"type":2392,"url":3518},{"type":2392,"url":5377},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[2766,2767,2768,2769],{"id":224,"slug":5380,"dossier":46,"summary":5381,"aliases":5382,"sourceIds":5385,"published":5386,"modified":5387,"checkedAt":7,"severity":5388,"references":5391,"versionKeys":5406,"packageCount":32,"repositoryCount":402},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[5383,5384],"CVE-2026-22701","PYSEC-2026-1374",[224,5384],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[5389],{"type":2377,"score":5390},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5392,5394,5396,5398,5400,5402,5404],{"type":2392,"url":5393},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2381,"url":5395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2392,"url":5397},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2392,"url":5399},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2389,"url":5401},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2389,"url":5403},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2381,"url":5405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[5407,5408,5409,5410],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":225,"slug":5412,"dossier":46,"summary":5413,"aliases":5414,"sourceIds":5417,"published":5418,"modified":5419,"checkedAt":7,"severity":5420,"references":5423,"versionKeys":5437,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[5415,5416],"CVE-2025-2099","PYSEC-2025-40",[225,5416],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[5421,5422],{"type":2377,"score":2904},{"type":2377,"score":2726},[5424,5426,5428,5430,5431,5433,5435],{"type":2381,"url":5425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2392,"url":5427},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2386,"url":5429},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2389,"url":2445},{"type":2392,"url":5432},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2392,"url":5434},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2381,"url":5436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2452],{"id":226,"slug":5439,"dossier":46,"summary":4834,"aliases":5440,"sourceIds":5443,"published":5444,"modified":5445,"checkedAt":7,"severity":5446,"references":5450,"versionKeys":5464,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[5441,5442],"CVE-2024-11392","PYSEC-2024-227",[226,5442],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[5447,5449],{"type":2377,"score":5448},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2377,"score":4252},[5451,5453,5454,5455,5456,5458,5460,5462],{"type":2381,"url":5452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2392,"url":4849},{"type":2392,"url":4851},{"type":2389,"url":2445},{"type":2392,"url":5457},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2392,"url":5459},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2381,"url":5461},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2381,"url":5463},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2452],{"id":227,"slug":5466,"dossier":46,"summary":5467,"aliases":5468,"sourceIds":5472,"published":5473,"modified":5474,"checkedAt":7,"severity":5475,"references":5478,"versionKeys":5491,"packageCount":32,"repositoryCount":113},"ghsa-r23q-823p-vmf7-9a5ef709","MLflow Command Injection vulnerability",[5469,5470,5471],"BIT-mlflow-2025-15379","CVE-2025-15379","PYSEC-2026-423",[227,5471],"2026-03-30T09:31:28Z","2026-07-01T20:22:58.350388Z",[5476],{"type":2377,"score":5477},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5479,5481,5483,5485,5486,5488,5489],{"type":2381,"url":5480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15379",{"type":2392,"url":5482},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F361b6f620adf98385c6721e384fb5ef9a30bb05e",{"type":2392,"url":5484},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fa22ce7157f646bdce4c95106fc38ccc9ca289205",{"type":2389,"url":2790},{"type":2392,"url":5487},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdc9c1c20-7879-4050-87df-4d095fe5ca75",{"type":2389,"url":2794},{"type":2381,"url":5490},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r23q-823p-vmf7",[2798,2799],{"id":228,"slug":5493,"dossier":46,"summary":5494,"aliases":5495,"sourceIds":5499,"published":5500,"modified":5501,"checkedAt":7,"severity":5502,"references":5505,"versionKeys":5516,"packageCount":32,"repositoryCount":479},"ghsa-r5m9-wm49-959f-62964e46","MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions",[5496,5497,5498],"BIT-mlflow-2026-3198","CVE-2026-3198","PYSEC-2026-2659",[228,5498],"2026-06-02T06:30:26Z","2026-07-13T16:42:37.733340178Z",[5503],{"type":2377,"score":5504},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5506,5508,5510,5511,5513,5514],{"type":2381,"url":5507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3198",{"type":2392,"url":5509},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6989066af33fdcb03588fd71a1a67f8fc5ef12c9",{"type":2389,"url":2790},{"type":2392,"url":5512},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe57db731-97d3-40c3-a429-831ee959807f",{"type":2389,"url":2794},{"type":2381,"url":5515},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r5m9-wm49-959f",[2798,2799,2800],{"id":229,"slug":5518,"dossier":46,"summary":5519,"aliases":5520,"sourceIds":5523,"published":5524,"modified":5525,"checkedAt":7,"severity":5526,"references":5531,"versionKeys":5569,"packageCount":32,"repositoryCount":65},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[5521,5522],"CVE-2026-26007","PYSEC-2026-2141",[229,5522],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[5527,5529],{"type":2414,"score":5528},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2377,"score":5530},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5532,5534,5536,5538,5539,5541,5543,5545,5546,5548,5550,5552,5554,5556,5558,5560,5562,5564,5566,5568],{"type":2392,"url":5533},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2381,"url":5535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2392,"url":5537},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2389,"url":2995},{"type":2392,"url":5540},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2392,"url":5542},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2392,"url":5544},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2381,"url":4158},{"type":2381,"url":5547},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2381,"url":5549},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2381,"url":5551},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2381,"url":5553},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2381,"url":5555},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2381,"url":5557},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2381,"url":5559},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2381,"url":5561},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2381,"url":5563},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2381,"url":5565},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2381,"url":5567},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2381,"url":4178},[2999,3000,3001,3002,3003,3004],{"id":230,"slug":5571,"dossier":91,"summary":5572,"aliases":5573,"sourceIds":5577,"published":5578,"modified":5579,"checkedAt":7,"severity":5580,"references":5583,"versionKeys":5598,"packageCount":32,"repositoryCount":2618},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[5574,5575,5576],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[230,5576],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[5581,5582],{"type":2377,"score":2662},{"type":2414,"score":3170},[5584,5586,5588,5590,5592,5593,5594,5596],{"type":2392,"url":5585},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2381,"url":5587},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2392,"url":5589},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2392,"url":5591},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2389,"url":3177},{"type":2392,"url":3179},{"type":2389,"url":5595},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2381,"url":5597},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":231,"slug":5600,"dossier":46,"summary":5601,"aliases":5602,"sourceIds":5605,"published":5606,"modified":5607,"checkedAt":7,"severity":5608,"references":5610,"versionKeys":5625,"packageCount":32,"repositoryCount":113},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[5603,5604],"CVE-2025-6051","PYSEC-2026-1988",[231,5604],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[5609],{"type":2377,"score":2904},[5611,5613,5615,5617,5619,5620,5622,5623],{"type":2381,"url":5612},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2392,"url":5614},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2392,"url":5616},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2392,"url":5618},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2389,"url":2445},{"type":2392,"url":5621},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2389,"url":2711},{"type":2381,"url":5624},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2452,2453],{"id":232,"slug":5627,"dossier":46,"summary":5628,"aliases":5629,"sourceIds":5632,"published":5633,"modified":5634,"checkedAt":7,"severity":5635,"references":5638,"versionKeys":5651,"packageCount":32,"repositoryCount":402},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[5630,5631],"CVE-2026-25087","PYSEC-2026-113",[232,5631],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[5636],{"type":2377,"score":5637},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[5639,5641,5643,5645,5647,5649],{"type":2381,"url":5640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2386,"url":5642},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2389,"url":5644},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2392,"url":5646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2381,"url":5648},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2381,"url":5650},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[5652,5653,5654,5655],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":233,"slug":5657,"dossier":46,"summary":5658,"aliases":5659,"sourceIds":5662,"published":5663,"modified":5664,"checkedAt":7,"severity":5665,"references":5667,"versionKeys":5675,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[5660,5661],"CVE-2026-42215","PYSEC-2026-2160",[233,5661],"2026-04-25T23:42:16Z","2026-07-13T07:26:42.486885613Z",[5666],{"type":2377,"score":3106},[5668,5670,5672,5673],{"type":2447,"url":5669},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2381,"url":5671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":2389,"url":3432},{"type":2386,"url":5674},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[3436,3437,3438],{"id":234,"slug":5677,"dossier":46,"summary":5678,"aliases":5679,"sourceIds":5683,"published":4305,"modified":5684,"checkedAt":7,"severity":5685,"references":5688,"versionKeys":5706,"packageCount":32,"repositoryCount":402},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[5680,5681,5682],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[234],"2026-07-17T17:15:51.452848951Z",[5686,5687],{"type":2377,"score":4309},{"type":2414,"score":5329},[5689,5691,5693,5695,5697,5699,5700,5702,5704],{"type":2381,"url":5690},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2392,"url":5692},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2392,"url":5694},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2392,"url":5696},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2392,"url":5698},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2389,"url":2674},{"type":2392,"url":5701},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2392,"url":5703},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2392,"url":5705},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[5707,2686,2687,2688,3879,3880,5349,5350,5351],"pypi:torch@2.10.0",{"id":235,"slug":5709,"dossier":46,"summary":5710,"aliases":5711,"sourceIds":5715,"published":5716,"modified":5717,"checkedAt":7,"severity":5718,"references":5721,"versionKeys":5734,"packageCount":32,"repositoryCount":479},"ghsa-rvhj-8chj-8v3c-edfd1899","Mlflow: Command Injection when serving models with enable_mlserver=True",[5712,5713,5714],"BIT-mlflow-2026-0596","CVE-2026-0596","PYSEC-2026-424",[235,5714],"2026-03-31T15:31:56Z","2026-07-01T20:22:58.365246Z",[5719],{"type":2377,"score":5720},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5722,5724,5726,5728,5729,5731,5732],{"type":2381,"url":5723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0596",{"type":2392,"url":5725},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19738",{"type":2392,"url":5727},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F202fac4c83ccc8544c087c142b80196d0e60695c",{"type":2389,"url":2790},{"type":2392,"url":5730},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2e905add-f9f5-4309-a3db-b17de5981285",{"type":2389,"url":2794},{"type":2381,"url":5733},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rvhj-8chj-8v3c",[2798,2799,2800],{"id":236,"slug":5736,"dossier":46,"summary":5737,"aliases":5738,"sourceIds":5741,"published":5742,"modified":5743,"checkedAt":7,"severity":5744,"references":5746,"versionKeys":5754,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[5739,5740],"CVE-2026-44244","PYSEC-2026-2163",[236,5740],"2026-05-06T21:58:00Z","2026-07-13T07:26:38.585123077Z",[5745],{"type":2377,"score":5245},[5747,5749,5751,5752],{"type":2447,"url":5748},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":2381,"url":5750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":2389,"url":3432},{"type":2386,"url":5753},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[3436,3437,3438],{"id":237,"slug":5756,"dossier":46,"summary":5757,"aliases":5758,"sourceIds":5761,"published":5762,"modified":5763,"checkedAt":7,"severity":5764,"references":5768,"versionKeys":5780,"packageCount":32,"repositoryCount":451},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[5759,5760],"CVE-2026-41205","PYSEC-2026-88",[237,5760],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[5765,5766],{"type":2377,"score":4803},{"type":2414,"score":5767},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5769,5771,5773,5775,5777,5778],{"type":2381,"url":5770},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2381,"url":5772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2392,"url":5774},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2392,"url":5776},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2389,"url":2577},{"type":2392,"url":5779},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2585,2586],{"id":238,"slug":5782,"dossier":46,"summary":5783,"aliases":5784,"sourceIds":5788,"published":4305,"modified":5789,"checkedAt":7,"severity":5790,"references":5793,"versionKeys":5808,"packageCount":32,"repositoryCount":412},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[5785,5786,5787],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[238],"2026-06-10T17:41:15.774477397Z",[5791,5792],{"type":2377,"score":4309},{"type":2414,"score":4311},[5794,5796,5797,5798,5799,5801,5802,5804,5806],{"type":2381,"url":5795},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2392,"url":4316},{"type":2392,"url":4318},{"type":2392,"url":4320},{"type":2392,"url":5800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2389,"url":2674},{"type":2392,"url":5803},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2392,"url":5805},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2392,"url":5807},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2686,2687,2688,3879,3880,5349],{"id":239,"slug":5810,"dossier":46,"summary":5811,"aliases":5812,"sourceIds":5816,"published":5817,"modified":5818,"checkedAt":7,"severity":5819,"references":5822,"versionKeys":5832,"packageCount":32,"repositoryCount":479},"ghsa-vhcx-3pq2-4fvc-4147c43c","MLFlow path traversal vulnerability",[5813,5814,5815],"BIT-mlflow-2025-15036","CVE-2025-15036","PYSEC-2026-425",[239,5815],"2026-03-30T03:30:19Z","2026-07-01T20:22:58.380148Z",[5820],{"type":2377,"score":5821},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5823,5825,5826,5827,5829,5830],{"type":2381,"url":5824},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15036",{"type":2392,"url":4467},{"type":2389,"url":2790},{"type":2392,"url":5828},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0",{"type":2389,"url":2794},{"type":2381,"url":5831},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vhcx-3pq2-4fvc",[2798,2799,2800],{"id":240,"slug":5834,"dossier":46,"summary":5835,"aliases":5836,"sourceIds":5839,"published":5840,"modified":5841,"checkedAt":7,"severity":5842,"references":5845,"versionKeys":5858,"packageCount":32,"repositoryCount":479},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[5837,5838],"CVE-2025-43859","PYSEC-2026-348",[240,5838],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[5843],{"type":2377,"score":5844},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5846,5848,5850,5852,5854,5856],{"type":2392,"url":5847},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2381,"url":5849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2392,"url":5851},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2389,"url":5853},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2389,"url":5855},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2381,"url":5857},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[5859],"pypi:h11@0.14.0",{"id":241,"slug":5861,"dossier":46,"summary":5862,"aliases":5863,"sourceIds":5866,"published":5867,"modified":5868,"checkedAt":7,"severity":5869,"references":5874,"versionKeys":5898,"packageCount":32,"repositoryCount":32},"ghsa-vqwp-45wm-r9r5-eaa960a2","Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission",[5864,5865],"CVE-2026-10804","PYSEC-2026-212",[241,5865],"2026-06-04T12:16:24.620Z","2026-07-15T22:11:39.128778462Z",[5870,5871,5872],{"type":2377,"score":3066},{"type":2414,"score":3068},{"type":2377,"score":5873},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5875,5877,5879,5881,5883,5885,5887,5888,5890,5892,5894,5896],{"type":2381,"url":5876},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10804",{"type":2386,"url":5878},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fissues\u002F14622",{"type":2386,"url":5880},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F14635",{"type":2392,"url":5882},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F15397",{"type":2392,"url":5884},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002Ffec0f584dae9261abed16cad35b32922104bb933",{"type":2392,"url":5886},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstreamlit\u002FPYSEC-2026-212.yaml",{"type":2389,"url":3669},{"type":2381,"url":5889},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10804",{"type":2381,"url":5891},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831508",{"type":2381,"url":5893},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253",{"type":2667,"url":5895},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253\u002Fcti",{"type":2392,"url":5897},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002F",[3673],{"id":242,"slug":5900,"dossier":46,"summary":5901,"aliases":5902,"sourceIds":5906,"published":5907,"modified":5908,"checkedAt":7,"severity":5909,"references":5911,"versionKeys":5921,"packageCount":32,"repositoryCount":479},"ghsa-w5xq-c4pf-ghq7-a926672a","MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks",[5903,5904,5905],"BIT-mlflow-2026-2734","CVE-2026-2734","PYSEC-2026-2660",[242,5905],"2026-05-21T06:31:31Z","2026-07-13T16:43:34.965176091Z",[5910],{"type":2377,"score":5504},[5912,5914,5915,5916,5918,5919],{"type":2381,"url":5913},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2734",{"type":2392,"url":5509},{"type":2389,"url":2790},{"type":2392,"url":5917},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd632f783-b2c7-4a3b-af5e-1d693e841c08",{"type":2389,"url":2794},{"type":2381,"url":5920},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w5xq-c4pf-ghq7",[2798,2799,2800],{"id":243,"slug":5923,"dossier":46,"summary":5924,"aliases":5925,"sourceIds":5928,"published":5929,"modified":5930,"checkedAt":7,"severity":5931,"references":5934,"versionKeys":5951,"packageCount":32,"repositoryCount":402},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[5926,5927],"CVE-2025-68146","PYSEC-2026-1375",[243,5927],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[5932],{"type":2377,"score":5933},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5935,5937,5939,5940,5942,5944,5946,5947,5949],{"type":2392,"url":5936},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2392,"url":5938},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2389,"url":5401},{"type":2392,"url":5941},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2392,"url":5943},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2392,"url":5945},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2389,"url":5403},{"type":2381,"url":5948},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2381,"url":5950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[5407,5408,5409,5410],{"id":244,"slug":5953,"dossier":46,"summary":5954,"aliases":5955,"sourceIds":5959,"published":5960,"modified":5961,"checkedAt":7,"severity":5962,"references":5964,"versionKeys":5973,"packageCount":32,"repositoryCount":113},"ghsa-wf7f-8fxf-xfxc-07509bf2","MLFlow unsafe deserialization",[5956,5957,5958],"BIT-mlflow-2024-37059","CVE-2024-37059","PYSEC-2026-1660",[244,5958],"2024-06-04T12:31:05Z","2026-07-07T17:56:49.672624556Z",[5963],{"type":2377,"score":4252},[5965,5967,5968,5970,5971],{"type":2381,"url":5966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-37059",{"type":2389,"url":2790},{"type":2392,"url":5969},"https:\u002F\u002Fhiddenlayer.com\u002Fsai-security-advisory\u002Fmlflow-june2024",{"type":2389,"url":2794},{"type":2381,"url":5972},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf7f-8fxf-xfxc",[2798,2799],{"id":245,"slug":5975,"dossier":91,"summary":5976,"aliases":5977,"sourceIds":5981,"published":5982,"modified":5983,"checkedAt":7,"severity":5984,"references":5987,"versionKeys":6025,"packageCount":32,"repositoryCount":2618},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[5978,5979,5980],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[245,5980],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[5985,5986],{"type":2377,"score":2726},{"type":2414,"score":4344},[5988,5990,5992,5994,5996,5997,5999,6001,6003,6005,6007,6009,6010,6012,6014,6016,6017,6019,6021,6023],{"type":2392,"url":5989},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2381,"url":5991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2392,"url":5993},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2392,"url":5995},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2389,"url":3177},{"type":2392,"url":5998},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2392,"url":6000},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2392,"url":6002},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2381,"url":6004},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2381,"url":6006},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2381,"url":6008},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2381,"url":4164},{"type":2381,"url":6011},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2381,"url":6013},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2381,"url":6015},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2381,"url":4166},{"type":2381,"url":6018},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2381,"url":6020},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2381,"url":6022},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2381,"url":6024},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":246,"slug":6027,"dossier":91,"summary":6028,"aliases":6029,"sourceIds":6033,"published":6034,"modified":6035,"checkedAt":7,"severity":6036,"references":6039,"versionKeys":6048,"packageCount":32,"repositoryCount":2618},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[6030,6031,6032],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[246,6032],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[6037,6038],{"type":2377,"score":2662},{"type":2414,"score":3170},[6040,6042,6044,6046,6047],{"type":2381,"url":6041},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2381,"url":6043},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2392,"url":6045},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2389,"url":3177},{"type":2381,"url":3179},[4180,4181,4182,3181,3182,3183,3184,3185],{"id":247,"slug":6050,"dossier":46,"summary":6051,"aliases":6052,"sourceIds":6055,"published":6056,"modified":6057,"checkedAt":7,"severity":6058,"references":6060,"versionKeys":6082,"packageCount":32,"repositoryCount":412},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[6053,6054],"CVE-2026-48818","PYSEC-2026-2281",[247,6054],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[6059],{"type":2377,"score":4803},[6061,6063,6064,6066,6068,6070,6072,6074,6076,6078,6080],{"type":2381,"url":6062},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2389,"url":3599},{"type":2392,"url":6065},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2392,"url":6067},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2381,"url":6069},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2381,"url":6071},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2381,"url":6073},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2381,"url":6075},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2667,"url":6077},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2386,"url":6079},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2386,"url":6081},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2519,2520,2521,3606,3607,3738,3739],{"id":248,"slug":6084,"dossier":46,"summary":4834,"aliases":6085,"sourceIds":6088,"published":4839,"modified":6089,"checkedAt":7,"severity":6090,"references":6093,"versionKeys":6107,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[6086,6087],"CVE-2024-11393","PYSEC-2024-228",[248,6087],"2026-06-10T17:00:13.252500033Z",[6091,6092],{"type":2377,"score":4843},{"type":2377,"score":4252},[6094,6096,6097,6098,6099,6101,6103,6105],{"type":2381,"url":6095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2392,"url":4849},{"type":2392,"url":4851},{"type":2389,"url":2445},{"type":2392,"url":6100},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2392,"url":6102},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2381,"url":6104},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2381,"url":6106},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2452],{"id":249,"slug":6109,"dossier":46,"summary":6110,"aliases":6111,"sourceIds":6114,"published":6115,"modified":6116,"checkedAt":7,"severity":6117,"references":6121,"versionKeys":6130,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[6112,6113],"CVE-2026-42284","PYSEC-2026-2161",[249,6113],"2026-04-25T23:41:49Z","2026-07-13T07:26:44.494568822Z",[6118,6120],{"type":2377,"score":6119},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2377,"score":3019},[6122,6124,6126,6127,6128],{"type":2447,"url":6123},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":2381,"url":6125},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":2389,"url":3432},{"type":2386,"url":5674},{"type":2392,"url":6129},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[3436,3437,3438],{"id":250,"slug":6132,"dossier":46,"summary":6133,"aliases":6134,"sourceIds":6138,"published":6139,"modified":6140,"checkedAt":7,"severity":6141,"references":6146,"versionKeys":6162,"packageCount":32,"repositoryCount":113},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[6135,6136,6137],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[250],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[6142,6144],{"type":2377,"score":6143},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2414,"score":6145},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6147,6149,6151,6153,6155,6156,6158,6160],{"type":2381,"url":6148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2392,"url":6150},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2392,"url":6152},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2392,"url":6154},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2389,"url":2674},{"type":2392,"url":6157},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2392,"url":6159},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2392,"url":6161},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2686,2687],{"id":251,"slug":6164,"dossier":46,"summary":6165,"aliases":6166,"sourceIds":6169,"published":6170,"modified":6171,"checkedAt":7,"severity":6172,"references":6174,"versionKeys":6181,"packageCount":32,"repositoryCount":412},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[6167,6168],"CVE-2026-48817","PYSEC-2026-2280",[251,6168],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[6173],{"type":2377,"score":3510},[6175,6177,6179,6180],{"type":2381,"url":6176},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2381,"url":6178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2389,"url":3599},{"type":2381,"url":6075},[2519,2520,2521,3606,3607,3738,3739],{"id":252,"slug":6183,"dossier":46,"summary":6184,"aliases":6185,"sourceIds":6189,"published":6190,"modified":6191,"checkedAt":7,"severity":6192,"references":6194,"versionKeys":6208,"packageCount":32,"repositoryCount":113},"ghsa-xch3-2f9x-wh9f-70e88660","MLflow has a command injection in mlflow\u002Fsagemaker\u002F__init__.py",[6186,6187,6188],"BIT-mlflow-2025-14287","CVE-2025-14287","PYSEC-2026-2661",[252,6188],"2026-03-16T15:30:41Z","2026-07-13T16:42:49.591762139Z",[6193],{"type":2377,"score":5448},[6195,6197,6199,6201,6202,6203,6205,6206],{"type":2381,"url":6196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14287",{"type":2392,"url":6198},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19277",{"type":2392,"url":6200},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F8b8792a7034fb33a14b0b31cabcaa9b912d3485f",{"type":2389,"url":2790},{"type":2392,"url":4713},{"type":2392,"url":6204},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F229cd526-41aa-4819-b6f0-e2d0371c89e3",{"type":2389,"url":2794},{"type":2381,"url":6207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xch3-2f9x-wh9f",[2798,2799],{"id":253,"slug":6210,"dossier":46,"summary":6211,"aliases":6212,"sourceIds":6216,"published":6217,"modified":6218,"checkedAt":7,"severity":6219,"references":6221,"versionKeys":6235,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[6213,6214,6215],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[253,6215],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[6220],{"type":2377,"score":3423},[6222,6224,6226,6228,6230,6232,6233],{"type":2381,"url":6223},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2381,"url":6225},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2392,"url":6227},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2386,"url":6229},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2392,"url":6231},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2389,"url":3177},{"type":2392,"url":6234},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3181],{"id":254,"slug":6237,"dossier":46,"summary":320,"aliases":6238,"sourceIds":6241,"published":6242,"modified":6243,"checkedAt":7,"severity":6244,"references":6246,"versionKeys":6255,"packageCount":32,"repositoryCount":113},"pysec-2025-198-62b25ed4",[6239,6240],"BIT-pytorch-2025-46148","CVE-2025-46148",[254],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[6245],{"type":2377,"score":5306},[6247,6249,6251,6253],{"type":2381,"url":6248},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2381,"url":6250},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2667,"url":6252},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2386,"url":6254},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2686,2687],{"id":255,"slug":6257,"dossier":46,"summary":320,"aliases":6258,"sourceIds":6261,"published":6262,"modified":6263,"checkedAt":7,"severity":6264,"references":6266,"versionKeys":6272,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[6259,6260],"BIT-pytorch-2025-46149","CVE-2025-46149",[255],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[6265],{"type":2377,"score":5306},[6267,6268,6270],{"type":2381,"url":6248},{"type":2667,"url":6269},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2386,"url":6271},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2687],{"id":256,"slug":6274,"dossier":46,"summary":320,"aliases":6275,"sourceIds":6278,"published":6279,"modified":6280,"checkedAt":7,"severity":6281,"references":6283,"versionKeys":6291,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[6276,6277],"BIT-pytorch-2025-46150","CVE-2025-46150",[256],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[6282],{"type":2377,"score":5306},[6284,6285,6287,6289],{"type":2381,"url":6248},{"type":2667,"url":6286},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2667,"url":6288},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2386,"url":6290},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2687],{"id":257,"slug":6293,"dossier":46,"summary":320,"aliases":6294,"sourceIds":6297,"published":6298,"modified":6299,"checkedAt":7,"severity":6300,"references":6302,"versionKeys":6308,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[6295,6296],"BIT-pytorch-2025-46152","CVE-2025-46152",[257],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[6301],{"type":2377,"score":2472},[6303,6304,6306],{"type":2381,"url":6248},{"type":2667,"url":6305},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2386,"url":6307},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2687],{"id":258,"slug":6310,"dossier":46,"summary":320,"aliases":6311,"sourceIds":6314,"published":6315,"modified":6316,"checkedAt":7,"severity":6317,"references":6319,"versionKeys":6329,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[6312,6313],"BIT-pytorch-2025-46153","CVE-2025-46153",[258],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[6318],{"type":2377,"score":5306},[6320,6322,6323,6325,6327],{"type":2392,"url":6321},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2381,"url":6248},{"type":2381,"url":6324},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2667,"url":6326},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2386,"url":6328},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2687],{"id":259,"slug":6331,"dossier":46,"summary":320,"aliases":6332,"sourceIds":6335,"published":6336,"modified":6337,"checkedAt":7,"severity":6338,"references":6340,"versionKeys":6345,"packageCount":32,"repositoryCount":412},"pysec-2025-203-2febb201",[6333,6334],"BIT-pytorch-2025-55551","CVE-2025-55551",[259],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[6339],{"type":2377,"score":2726},[6341,6343],{"type":2381,"url":6342},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2667,"url":6344},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2686,2687,2688,3879,3880,5349],{"id":260,"slug":6347,"dossier":46,"summary":320,"aliases":6348,"sourceIds":6351,"published":6352,"modified":6353,"checkedAt":7,"severity":6354,"references":6356,"versionKeys":6360,"packageCount":32,"repositoryCount":412},"pysec-2025-204-cdae47da",[6349,6350],"BIT-pytorch-2025-55552","CVE-2025-55552",[260],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[6355],{"type":2377,"score":2726},[6357,6358],{"type":2381,"url":6342},{"type":2667,"url":6359},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2686,2687,2688,3879,3880,5349],{"id":261,"slug":6362,"dossier":46,"summary":320,"aliases":6363,"sourceIds":6366,"published":6367,"modified":6368,"checkedAt":7,"severity":6369,"references":6371,"versionKeys":6377,"packageCount":32,"repositoryCount":479},"pysec-2025-205-fd5e58fd",[6364,6365],"BIT-pytorch-2025-55553","CVE-2025-55553",[261],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[6370],{"type":2377,"score":2726},[6372,6373,6375],{"type":2381,"url":6342},{"type":2667,"url":6374},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2386,"url":6376},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2686,2687,2688],{"id":262,"slug":6379,"dossier":46,"summary":320,"aliases":6380,"sourceIds":6383,"published":6384,"modified":6385,"checkedAt":7,"severity":6386,"references":6388,"versionKeys":6392,"packageCount":32,"repositoryCount":412},"pysec-2025-206-58322476",[6381,6382],"BIT-pytorch-2025-55554","CVE-2025-55554",[262],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[6387],{"type":2377,"score":2472},[6389,6390],{"type":2381,"url":6342},{"type":2667,"url":6391},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2686,2687,2688,3879,3880,5349],{"id":263,"slug":6394,"dossier":46,"summary":320,"aliases":6395,"sourceIds":6398,"published":6399,"modified":6400,"checkedAt":7,"severity":6401,"references":6403,"versionKeys":6409,"packageCount":32,"repositoryCount":479},"pysec-2025-207-2abef3fc",[6396,6397],"BIT-pytorch-2025-55557","CVE-2025-55557",[263],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[6402],{"type":2377,"score":2726},[6404,6405,6407],{"type":2381,"url":6342},{"type":2667,"url":6406},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2386,"url":6408},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2686,2687,2688],{"id":264,"slug":6411,"dossier":46,"summary":320,"aliases":6412,"sourceIds":6415,"published":6416,"modified":6417,"checkedAt":7,"severity":6418,"references":6420,"versionKeys":6426,"packageCount":32,"repositoryCount":479},"pysec-2025-208-6e93fe9d",[6413,6414],"BIT-pytorch-2025-55558","CVE-2025-55558",[264],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[6419],{"type":2377,"score":2726},[6421,6422,6424],{"type":2381,"url":6342},{"type":2667,"url":6423},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2386,"url":6425},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2686,2687,2688],{"id":265,"slug":6428,"dossier":46,"summary":320,"aliases":6429,"sourceIds":6432,"published":6433,"modified":6434,"checkedAt":7,"severity":6435,"references":6437,"versionKeys":6443,"packageCount":32,"repositoryCount":479},"pysec-2025-209-e6f352b0",[6430,6431],"BIT-pytorch-2025-55560","CVE-2025-55560",[265],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[6436],{"type":2377,"score":2726},[6438,6439,6441],{"type":2381,"url":6342},{"type":2667,"url":6440},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2386,"url":6442},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2686,2687,2688],{"id":266,"slug":6445,"dossier":46,"summary":320,"aliases":6446,"sourceIds":6448,"published":6449,"modified":6450,"checkedAt":7,"severity":6451,"references":6453,"versionKeys":6456,"packageCount":32,"repositoryCount":479},"pysec-2025-211-d8bd15de",[6447],"CVE-2025-14920",[266],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[6452],{"type":2377,"score":2438},[6454],{"type":2381,"url":6455},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2452,2453,2454],{"id":267,"slug":6458,"dossier":46,"summary":320,"aliases":6459,"sourceIds":6461,"published":6462,"modified":6463,"checkedAt":7,"severity":6464,"references":6466,"versionKeys":6469,"packageCount":32,"repositoryCount":479},"pysec-2025-212-a011b97d",[6460],"CVE-2025-14921",[267],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[6465],{"type":2377,"score":2438},[6467],{"type":2381,"url":6468},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2452,2453,2454],{"id":268,"slug":6471,"dossier":46,"summary":320,"aliases":6472,"sourceIds":6474,"published":6475,"modified":6476,"checkedAt":7,"severity":6477,"references":6479,"versionKeys":6482,"packageCount":32,"repositoryCount":479},"pysec-2025-213-9043dc9b",[6473],"CVE-2025-14924",[268],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[6478],{"type":2377,"score":2438},[6480],{"type":2381,"url":6481},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2452,2453,2454],{"id":269,"slug":6484,"dossier":46,"summary":320,"aliases":6485,"sourceIds":6487,"published":6488,"modified":6489,"checkedAt":7,"severity":6490,"references":6492,"versionKeys":6495,"packageCount":32,"repositoryCount":479},"pysec-2025-214-eb241255",[6486],"CVE-2025-14926",[269],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[6491],{"type":2377,"score":2438},[6493],{"type":2381,"url":6494},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2452,2453,2454],{"id":270,"slug":6497,"dossier":46,"summary":320,"aliases":6498,"sourceIds":6500,"published":6501,"modified":6502,"checkedAt":7,"severity":6503,"references":6505,"versionKeys":6508,"packageCount":32,"repositoryCount":479},"pysec-2025-215-6064f491",[6499],"CVE-2025-14927",[270],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[6504],{"type":2377,"score":2438},[6506],{"type":2381,"url":6507},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2452,2453,2454],{"id":271,"slug":6510,"dossier":46,"summary":320,"aliases":6511,"sourceIds":6513,"published":6514,"modified":6515,"checkedAt":7,"severity":6516,"references":6518,"versionKeys":6521,"packageCount":32,"repositoryCount":479},"pysec-2025-216-5708ed01",[6512],"CVE-2025-14928",[271],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[6517],{"type":2377,"score":2438},[6519],{"type":2381,"url":6520},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2452,2453,2454],{"id":272,"slug":6523,"dossier":46,"summary":320,"aliases":6524,"sourceIds":6526,"published":6527,"modified":6528,"checkedAt":7,"severity":6529,"references":6531,"versionKeys":6534,"packageCount":32,"repositoryCount":412},"pysec-2025-217-2c1ad388",[6525],"CVE-2025-14929",[272],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[6530],{"type":2377,"score":2438},[6532],{"type":2381,"url":6533},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2452,2453,2454,2455,2456,2457,2458],{"id":273,"slug":6536,"dossier":46,"summary":320,"aliases":6537,"sourceIds":6539,"published":6540,"modified":6541,"checkedAt":7,"severity":6542,"references":6544,"versionKeys":6547,"packageCount":32,"repositoryCount":451},"pysec-2025-218-39811fc3",[6538],"CVE-2025-14930",[273],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[6543],{"type":2377,"score":2438},[6545],{"type":2381,"url":6546},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2452,2453,2454,2455],{"id":274,"slug":6549,"dossier":46,"summary":320,"aliases":6550,"sourceIds":6553,"published":6554,"modified":6555,"checkedAt":7,"severity":6556,"references":6558,"versionKeys":6565,"packageCount":32,"repositoryCount":451},"pysec-2025-265-33beac08",[6551,6552],"CVE-2025-67724","GHSA-pr2v-jx2c-wg9f",[274],"2025-12-12T06:15:41.213Z","2026-07-13T07:15:44.068555841Z",[6557],{"type":2377,"score":3924},[6559,6561,6563],{"type":2381,"url":6560},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",{"type":2381,"url":6562},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":2386,"url":6564},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",[2766,2767,2768],{"id":275,"slug":6567,"dossier":46,"summary":320,"aliases":6568,"sourceIds":6571,"published":6572,"modified":6573,"checkedAt":7,"severity":6574,"references":6576,"versionKeys":6582,"packageCount":32,"repositoryCount":451},"pysec-2025-266-c9802ae6",[6569,6570],"CVE-2025-67725","GHSA-c98p-7wgm-6p64",[275],"2025-12-12T06:15:41.380Z","2026-07-13T07:15:44.064352714Z",[6575],{"type":2377,"score":2726},[6577,6578,6580],{"type":2381,"url":6560},{"type":2381,"url":6579},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":2386,"url":6581},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",[2766,2767,2768],{"id":276,"slug":6584,"dossier":46,"summary":320,"aliases":6585,"sourceIds":6588,"published":6589,"modified":6590,"checkedAt":7,"severity":6591,"references":6593,"versionKeys":6598,"packageCount":32,"repositoryCount":451},"pysec-2025-267-ca9685ba",[6586,6587],"CVE-2025-67726","GHSA-jhmp-mqwm-3gq8",[276],"2025-12-12T07:15:44.920Z","2026-07-13T07:15:45.375541292Z",[6592],{"type":2377,"score":2726},[6594,6595,6597],{"type":2381,"url":6560},{"type":2381,"url":6596},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":2386,"url":6581},[2766,2767,2768],{"id":277,"slug":6600,"dossier":46,"summary":320,"aliases":6601,"sourceIds":6604,"published":6605,"modified":6606,"checkedAt":7,"severity":6607,"references":6609,"versionKeys":6620,"packageCount":32,"repositoryCount":402},"pysec-2026-139-96951ff6",[6602,6603],"BIT-pytorch-2026-4538","CVE-2026-4538",[277],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[6608],{"type":2377,"score":5245},[6610,6612,6614,6616,6618],{"type":2392,"url":6611},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2381,"url":6613},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2381,"url":6615},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2667,"url":6617},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2386,"url":6619},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[5707,2686,2687,2688,3879,3880,5349,5350,5351],{"id":278,"slug":6622,"dossier":91,"summary":320,"aliases":6623,"sourceIds":6626,"published":6627,"modified":6628,"checkedAt":7,"severity":6629,"references":6632,"versionKeys":6647,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[6624,6625],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[278],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[6630],{"type":2377,"score":6631},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6633,6635,6637,6639,6641,6643,6645],{"type":2392,"url":6634},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2392,"url":6636},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2381,"url":6638},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2381,"url":6640},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2667,"url":6642},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2386,"url":6644},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2447,"url":6646},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[6648,6649,6650,6651,6652,6653],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":279,"slug":6655,"dossier":91,"summary":320,"aliases":6656,"sourceIds":6660,"published":6661,"modified":6662,"checkedAt":7,"severity":6663,"references":6665,"versionKeys":6672,"packageCount":32,"repositoryCount":2618},"pysec-2026-2253-e1ccf3df",[6657,6658,6659],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[279],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[6664],{"type":2377,"score":2726},[6666,6668,6670],{"type":2381,"url":6667},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":2386,"url":6669},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2447,"url":6671},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":280,"slug":6674,"dossier":91,"summary":320,"aliases":6675,"sourceIds":6679,"published":6680,"modified":6681,"checkedAt":7,"severity":6682,"references":6684,"versionKeys":6689,"packageCount":32,"repositoryCount":2618},"pysec-2026-2254-a1ed1fd2",[6676,6677,6678],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[280],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[6683],{"type":2377,"score":2726},[6685,6686,6687],{"type":2381,"url":6667},{"type":2386,"url":6669},{"type":2447,"url":6688},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":281,"slug":6691,"dossier":91,"summary":320,"aliases":6692,"sourceIds":6696,"published":6697,"modified":6698,"checkedAt":7,"severity":6699,"references":6701,"versionKeys":6706,"packageCount":32,"repositoryCount":2618},"pysec-2026-2255-d0951b98",[6693,6694,6695],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[281],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[6700],{"type":2377,"score":2726},[6702,6703,6704],{"type":2381,"url":6667},{"type":2386,"url":6669},{"type":2447,"url":6705},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":282,"slug":6708,"dossier":91,"summary":320,"aliases":6709,"sourceIds":6713,"published":6714,"modified":6715,"checkedAt":7,"severity":6716,"references":6718,"versionKeys":6724,"packageCount":32,"repositoryCount":2618},"pysec-2026-2256-0f333f0b",[6710,6711,6712],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[282],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[6717],{"type":2377,"score":2726},[6719,6720,6722],{"type":2381,"url":6667},{"type":2386,"url":6721},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2447,"url":6723},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":283,"slug":6726,"dossier":91,"summary":320,"aliases":6727,"sourceIds":6731,"published":6732,"modified":6733,"checkedAt":7,"severity":6734,"references":6737,"versionKeys":6747,"packageCount":32,"repositoryCount":2618},"pysec-2026-2257-bcbe5d79",[6728,6729,6730],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[283],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[6735],{"type":2377,"score":6736},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[6738,6739,6741,6743,6745],{"type":2381,"url":6667},{"type":2386,"url":6740},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2386,"url":6742},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2386,"url":6744},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2447,"url":6746},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":284,"slug":6749,"dossier":46,"summary":320,"aliases":6750,"sourceIds":6755,"published":6756,"modified":6757,"checkedAt":7,"severity":6758,"references":6760,"versionKeys":6777,"packageCount":32,"repositoryCount":5352},"pysec-2026-2286-8795b007",[6751,6752,6753,6754],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[284],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[6759],{"type":2377,"score":4252},[6761,6763,6765,6767,6769,6771,6773,6775],{"type":2392,"url":6762},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2392,"url":6764},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2381,"url":6766},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2381,"url":6768},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2381,"url":6770},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2667,"url":6772},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2667,"url":6774},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2386,"url":6776},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2686,2687,2688,3879,3880,5349,5350,5351],{"id":285,"slug":6779,"dossier":91,"summary":320,"aliases":6780,"sourceIds":6784,"published":6785,"modified":6786,"checkedAt":7,"severity":6787,"references":6790,"versionKeys":6797,"packageCount":32,"repositoryCount":2618},"pysec-2026-3447-df031425",[6781,6782,6783],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[285],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[6788],{"type":2377,"score":6789},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[6791,6793,6795],{"type":2381,"url":6792},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":2386,"url":6794},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2447,"url":6796},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[3125,3126,6798,6799,6800,6801,6802,6803,6804],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":286,"slug":6806,"dossier":91,"summary":320,"aliases":6807,"sourceIds":6811,"published":6812,"modified":6813,"checkedAt":7,"severity":6814,"references":6816,"versionKeys":6825,"packageCount":32,"repositoryCount":2618},"pysec-2026-3451-3e5eac34",[6808,6809,6810],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[286],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[6815],{"type":2377,"score":2726},[6817,6819,6821,6823],{"type":2381,"url":6818},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2386,"url":6820},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2386,"url":6822},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2447,"url":6824},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[4180,4181,4182,3181,3182,3183,3184,3185],{"id":287,"slug":6827,"dossier":46,"summary":320,"aliases":6828,"sourceIds":6832,"published":6833,"modified":6834,"checkedAt":7,"severity":6835,"references":6837,"versionKeys":6845,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[6829,6830,6831],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[287],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[6836],{"type":2377,"score":2726},[6838,6839,6841,6843],{"type":2381,"url":6818},{"type":2386,"url":6840},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2386,"url":6842},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2447,"url":6844},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[3183,3184,3185],{"id":288,"slug":6847,"dossier":91,"summary":320,"aliases":6848,"sourceIds":6852,"published":6853,"modified":6854,"checkedAt":7,"severity":6855,"references":6857,"versionKeys":6865,"packageCount":32,"repositoryCount":2618},"pysec-2026-3453-83974725",[6849,6850,6851],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[288],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[6856],{"type":2377,"score":2726},[6858,6859,6861,6863],{"type":2381,"url":6818},{"type":2386,"url":6860},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2386,"url":6862},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2447,"url":6864},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[4180,4181,4182,3181,3182,3183,3184,3185],1784558560540]