[{"data":1,"prerenderedAt":9440},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-10787":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":371,"related":374},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":65,"licenseExpressionCount":104,"unknownLicensePackageCount":105,"advisoryIds":106,"advisoryCount":369,"providers":370},"opencode:10787","opencode-10787",10787,"LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework","Reproducible benchmarking framework for evaluating LLMs using structured multiple-choice and numeric questionnaires","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fcommit\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd","2026-07-13T00:00:12.759Z","2026-06-28T20:48:20.000Z",{"complete":91,"entryCount":92,"truncated":46},true,120,[94],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","e0cfb7dbb1f83b9adb3c422816068eefba3a17e5146d084022722da579e14760",734464,"parsed",241,[103],"pypi",26,3,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368],"GHSA-248v-346w-9cwc","GHSA-27jp-wm6q-gp25","GHSA-29pf-2h5f-8g72","GHSA-29vq-49wr-vm6x","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g68-c3qc-8985","GHSA-2h4p-vjrc-8xpq","GHSA-2pc9-4j83-qjmr","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-38vq-g6vr-w8wf","GHSA-3c37-wwvx-h642","GHSA-3f6c-7fw2-ppm4","GHSA-3mwp-wvh9-7528","GHSA-3wq7-rqq7-wx6j","GHSA-3ww4-5jv9-j5gm","GHSA-42h5-h8qh-vv9v","GHSA-46r5-x6jq-v8g6","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-4w7r-h757-3r74","GHSA-4x5p-f36r-mxxr","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cmr-4px5-23pc","GHSA-5h2m-4q8j-pqpj","GHSA-5jv2-g5wq-cmr4","GHSA-5qmp-p3c4-72qj","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65h7-c7c4-mghx","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-69f9-5gxw-wvc2","GHSA-69j4-grxj-j64p","GHSA-69w3-r845-3855","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6wgj-66m2-xxp2","GHSA-7432-952r-cw78","GHSA-7545-fcxq-7j24","GHSA-75cm-x2w3-8mgf","GHSA-768j-98cg-p3fv","GHSA-7972-pg2x-xr59","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7h4p-rffg-7823","GHSA-7qhf-v65m-g5f3","GHSA-7rgv-gqhr-fxg3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-87hc-h4r5-73f7","GHSA-887c-mr87-cxwp","GHSA-8c7q-86fq-vvmh","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-8qvm-5x2c-j2w7","GHSA-9356-575x-2w9m","GHSA-94f4-hr76-p5j6","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-98f3-hwg4-4rf7","GHSA-9h52-p55h-vw2f","GHSA-9hcf-v7m4-6m2j","GHSA-9hjg-9r4m-mvj7","GHSA-9pcc-gvx5-r5wm","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c2jp-c369-7pvx","GHSA-c427-h43c-vf67","GHSA-c65p-x677-fgj6","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f2m9-wcf4-cwwx","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-f9vj-2wh5-fj8j","GHSA-fg6f-75jq-6523","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fh64-r2vc-xvhr","GHSA-fhff-qmm8-h2fp","GHSA-fpwr-67px-3qhx","GHSA-g35p-px32-whv6","GHSA-g3cq-j2xw-wf74","GHSA-g6pg-52vf-843h","GHSA-g7f3-828f-7h7m","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gq3w-7jj3-x7gr","GHSA-grg2-63fw-f2qr","GHSA-gx77-xgc2-4888","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgf8-39gv-g3f2","GHSA-hgg8-fqqc-vfmw","GHSA-hpj7-wq8m-9hgp","GHSA-hpv8-x276-m59f","GHSA-hxxf-235m-72v3","GHSA-j828-28rj-hfhp","GHSA-j842-xgm4-wf88","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jj8c-mmj3-mmgv","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jr27-m4p2-rc6r","GHSA-m344-f55w-2m6j","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m8x7-r2rg-vh5g","GHSA-m959-cc7f-wv43","GHSA-mcmc-2m55-j8jj","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mj87-hwqh-73pj","GHSA-mqqc-3gqh-h2x8","GHSA-mrw7-hf4f-83pf","GHSA-mv93-w799-cj2w","GHSA-mw35-8rx3-xf9r","GHSA-mwh4-6h8g-pg8w","GHSA-mxxr-jv3v-6pgc","GHSA-p423-j2cm-9vmq","GHSA-p998-jp59-783m","GHSA-pgqp-8h46-6x4j","GHSA-phhr-52qp-3mj4","GHSA-pmqf-x6x8-p7qw","GHSA-pp6c-gr5w-3c5g","GHSA-pq5c-rjhq-qp7p","GHSA-pq5p-34cr-23v9","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q279-jhrf-cc6v","GHSA-q2r8-vmq7-fpx2","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-q5fh-2hc8-f6rq","GHSA-q8gq-377p-jq3r","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qh4c-xf7m-gxfc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r23q-823p-vmf7","GHSA-r5m9-wm49-959f","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-r95x-qfjj-fjj2","GHSA-rcfx-77hg-w2wv","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rj5c-58rq-j5g5","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rvhj-8chj-8v3c","GHSA-rww4-4w9c-7733","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-v87r-6q3f-2j67","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vhcx-3pq2-4fvc","GHSA-vj7q-gjh5-988w","GHSA-vqfr-h8mv-ghfj","GHSA-vrq3-r879-7m65","GHSA-vv7q-7jx5-f767","GHSA-w2fm-2cpv-w7v5","GHSA-w5xq-c4pf-ghq7","GHSA-w6q7-j642-7c25","GHSA-w6vg-jg77-2qg6","GHSA-w853-jp5j-5j7f","GHSA-w8p2-r796-3vmq","GHSA-w8v5-vhqr-4h9v","GHSA-wcj4-jw5j-44wh","GHSA-wf7f-8fxf-xfxc","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wr9h-g72x-mwhm","GHSA-wrfc-pvp9-mr9g","GHSA-wvwj-cvrp-7pv5","GHSA-x2qx-6953-8485","GHSA-x368-4g9h-fvv4","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xch3-2f9x-wh9f","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-238","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-227","PYSEC-2026-2273","PYSEC-2026-2286","PYSEC-2026-2302","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",262,[],{"files":372,"occurrenceCount":101},[373],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":375,"vulnerabilities":2550},[376,388,400,411,420,430,439,448,458,467,479,489,499,508,517,527,538,547,556,566,575,584,593,602,611,622,631,640,649,659,668,678,687,696,705,714,723,732,741,750,759,768,776,785,794,804,813,823,832,841,850,859,868,877,885,894,904,913,922,931,940,948,957,966,975,984,993,1002,1011,1020,1029,1038,1046,1054,1064,1073,1082,1091,1099,1108,1117,1126,1135,1144,1153,1162,1171,1180,1189,1198,1207,1216,1225,1233,1242,1251,1262,1271,1280,1289,1298,1307,1316,1325,1334,1343,1352,1361,1370,1379,1388,1397,1406,1415,1423,1432,1441,1450,1459,1468,1477,1486,1495,1504,1513,1522,1531,1539,1547,1556,1564,1573,1581,1589,1598,1607,1616,1625,1635,1644,1653,1662,1670,1679,1688,1697,1706,1715,1724,1733,1742,1751,1760,1768,1776,1785,1794,1803,1811,1819,1828,1837,1846,1855,1864,1873,1881,1889,1897,1906,1916,1925,1934,1943,1952,1960,1969,1978,1986,1995,2004,2013,2022,2031,2039,2048,2057,2067,2076,2085,2094,2103,2112,2121,2130,2139,2148,2157,2166,2175,2184,2193,2203,2212,2221,2230,2239,2247,2256,2265,2274,2283,2292,2301,2310,2319,2328,2337,2346,2355,2366,2375,2383,2392,2401,2409,2417,2426,2435,2444,2452,2460,2469,2478,2487,2496,2505,2514,2523,2532,2541],{"id":377,"slug":378,"identity":379,"label":380,"aiRelevant":91,"provider":381,"advisoryCount":382,"licenseExpressions":383,"versions":385,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":387},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","vLLM",null,39,[384],"Apache-2.0",[386],"0.10.1.1",[55],{"id":389,"slug":390,"identity":391,"label":392,"aiRelevant":91,"provider":393,"advisoryCount":70,"licenseExpressions":396,"versions":397,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":399},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":394,"label":395},"hugging-face","Hugging Face",[384],[398],"4.57.6",[55],{"id":401,"slug":402,"identity":403,"label":404,"aiRelevant":91,"provider":381,"advisoryCount":405,"licenseExpressions":406,"versions":408,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":410},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[407],"BSD-3-Clause",[409],"2.7.1",[55],{"id":72,"slug":73,"identity":412,"label":74,"aiRelevant":91,"provider":413,"advisoryCount":38,"licenseExpressions":416,"versions":417,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":419},"pypi:openai",{"id":414,"label":415},"openai","OpenAI",[384],[418],"1.104.2",[55],{"id":421,"slug":422,"identity":423,"label":424,"aiRelevant":91,"provider":381,"advisoryCount":38,"licenseExpressions":425,"versions":427,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":429},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[426],"non-standard",[428],"0.22.0",[55],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":91,"provider":381,"advisoryCount":38,"licenseExpressions":435,"versions":436,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":438},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[407,426],[437],"1.7.1",[55],{"id":440,"slug":441,"identity":442,"label":443,"aiRelevant":91,"provider":381,"advisoryCount":38,"licenseExpressions":444,"versions":445,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":447},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[426],[446],"0.11.0",[55],{"id":449,"slug":450,"identity":451,"label":452,"aiRelevant":46,"provider":381,"advisoryCount":30,"licenseExpressions":453,"versions":455,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":457},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[384,454],"Apache-2.0 AND MIT",[456],"3.12.15",[55],{"id":459,"slug":460,"identity":461,"label":462,"aiRelevant":46,"provider":381,"advisoryCount":405,"licenseExpressions":463,"versions":464,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":466},"package:pypi:mlflow","mlflow-43f98b3c","pypi:mlflow","mlflow",[426],[465],"3.4.0",[55],{"id":468,"slug":469,"identity":470,"label":471,"aiRelevant":46,"provider":381,"advisoryCount":472,"licenseExpressions":473,"versions":476,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":478},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[474,475],"HPND","MIT-CMU",[477],"11.3.0",[55],{"id":480,"slug":481,"identity":482,"label":483,"aiRelevant":46,"provider":381,"advisoryCount":484,"licenseExpressions":485,"versions":486,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":488},"package:pypi:authlib","authlib-c1d999b9","pypi:authlib","authlib",9,[407],[487],"1.6.4",[55],{"id":490,"slug":491,"identity":492,"label":493,"aiRelevant":46,"provider":381,"advisoryCount":494,"licenseExpressions":495,"versions":496,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":498},"package:pypi:fastmcp","fastmcp-62abcf82","pypi:fastmcp","fastmcp",8,[384],[497],"2.12.3",[55],{"id":500,"slug":501,"identity":502,"label":503,"aiRelevant":46,"provider":381,"advisoryCount":494,"licenseExpressions":504,"versions":505,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":507},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",[384],[506],"0.0.20",[55],{"id":509,"slug":510,"identity":511,"label":512,"aiRelevant":46,"provider":381,"advisoryCount":494,"licenseExpressions":513,"versions":514,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":516},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[407],[515],"0.47.3",[55],{"id":518,"slug":519,"identity":520,"label":521,"aiRelevant":46,"provider":381,"advisoryCount":65,"licenseExpressions":522,"versions":524,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":526},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[523],"MIT",[525],"2.5.0",[55],{"id":528,"slug":529,"identity":530,"label":531,"aiRelevant":46,"provider":381,"advisoryCount":532,"licenseExpressions":533,"versions":535,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":537},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",6,[534],"Apache-2.0 OR BSD-3-Clause",[536],"45.0.7",[55],{"id":539,"slug":540,"identity":541,"label":542,"aiRelevant":46,"provider":381,"advisoryCount":532,"licenseExpressions":543,"versions":544,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":546},"package:pypi:ray","ray-f8b4a0d3","pypi:ray","ray",[384],[545],"2.49.1",[55],{"id":548,"slug":549,"identity":550,"label":551,"aiRelevant":46,"provider":381,"advisoryCount":532,"licenseExpressions":552,"versions":553,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":555},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[407,426],[554],"3.1.1",[55],{"id":557,"slug":558,"identity":559,"label":560,"aiRelevant":46,"provider":381,"advisoryCount":561,"licenseExpressions":562,"versions":563,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":565},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",5,[407],[564],"3.1.45",[55],{"id":567,"slug":568,"identity":569,"label":570,"aiRelevant":46,"provider":381,"advisoryCount":34,"licenseExpressions":571,"versions":572,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":574},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[407,426],[573],"3.1.6",[55],{"id":576,"slug":577,"identity":578,"label":579,"aiRelevant":46,"provider":381,"advisoryCount":105,"licenseExpressions":580,"versions":581,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":583},"package:pypi:cbor2","cbor2-9a57866f","pypi:cbor2","cbor2",[523],[582],"5.7.0",[55],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":46,"provider":381,"advisoryCount":105,"licenseExpressions":589,"versions":590,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":592},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[523],[591],"1.14.1",[55],{"id":594,"slug":595,"identity":596,"label":597,"aiRelevant":46,"provider":381,"advisoryCount":105,"licenseExpressions":598,"versions":599,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":601},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[384],[600],"2.32.5",[55],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":46,"provider":381,"advisoryCount":105,"licenseExpressions":607,"versions":608,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":610},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[523],[609],"79.0.1",[55],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":46,"provider":381,"advisoryCount":616,"licenseExpressions":617,"versions":619,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":621},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[523,618],"Unlicense",[620],"3.19.1",[55],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":46,"provider":381,"advisoryCount":616,"licenseExpressions":627,"versions":628,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":630},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[523],[629],"1.3.10",[55],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":46,"provider":381,"advisoryCount":616,"licenseExpressions":636,"versions":637,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":639},"package:pypi:mlx","mlx-6c82b549","pypi:mlx","mlx",[523],[638],"0.29.0",[55],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":46,"provider":381,"advisoryCount":616,"licenseExpressions":645,"versions":646,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":648},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[407],[647],"6.32.0",[55],{"id":650,"slug":651,"identity":652,"label":653,"aiRelevant":46,"provider":381,"advisoryCount":616,"licenseExpressions":654,"versions":656,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":658},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",[655],"BSD-2-Clause",[657],"0.6.1",[55],{"id":660,"slug":661,"identity":662,"label":663,"aiRelevant":46,"provider":381,"advisoryCount":616,"licenseExpressions":664,"versions":665,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":667},"package:pypi:xgrammar","xgrammar-5ebaef86","pypi:xgrammar","xgrammar",[384],[666],"0.1.21",[55],{"id":669,"slug":670,"identity":671,"label":672,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":673,"versions":675,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":677},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[674],"MPL-2.0",[676],"2025.8.3",[55],{"id":679,"slug":680,"identity":681,"label":682,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":683,"versions":684,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":686},"package:pypi:click","click-ef97f731","pypi:click","click",[407,426],[685],"8.2.1",[55],{"id":688,"slug":689,"identity":690,"label":691,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":692,"versions":693,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":695},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[384],[694],"5.6.3",[55],{"id":697,"slug":698,"identity":699,"label":700,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":701,"versions":702,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":704},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[407,426],[703],"3.1.2",[55],{"id":706,"slug":707,"identity":708,"label":709,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":710,"versions":711,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":713},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[523],[712],"4.59.2",[55],{"id":715,"slug":716,"identity":717,"label":718,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":719,"versions":720,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":722},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[523],[721],"0.16.0",[55],{"id":724,"slug":725,"identity":726,"label":727,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":728,"versions":729,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":731},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[407,426],[730],"3.10",[55],{"id":733,"slug":734,"identity":735,"label":736,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":737,"versions":738,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":740},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[384],[739],"1.1.1",[55],{"id":742,"slug":743,"identity":744,"label":745,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":746,"versions":747,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":749},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[384,426],[748],"21.0.0",[55],{"id":751,"slug":752,"identity":753,"label":754,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":755,"versions":756,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":758},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[523],[757],"2.10.1",[55],{"id":760,"slug":761,"identity":762,"label":763,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":764,"versions":765,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":767},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[655],[766],"2.19.2",[55],{"id":769,"slug":770,"identity":771,"label":772,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":773,"versions":774,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":775},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[407],[739],[55],{"id":777,"slug":778,"identity":779,"label":780,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":781,"versions":782,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":784},"package:pypi:sentencepiece","sentencepiece-dda4c7df","pypi:sentencepiece","sentencepiece",[426],[783],"0.2.1",[55],{"id":786,"slug":787,"identity":788,"label":789,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":790,"versions":791,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":793},"package:pypi:sqlparse","sqlparse-96380dda","pypi:sqlparse","sqlparse",[426],[792],"0.5.3",[55],{"id":795,"slug":796,"identity":797,"label":798,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":799,"versions":801,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":803},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[800],"MIT AND MPL-2.0",[802],"4.67.1",[55],{"id":805,"slug":806,"identity":807,"label":808,"aiRelevant":46,"provider":381,"advisoryCount":32,"licenseExpressions":809,"versions":810,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":812},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[523],[811],"20.34.0",[55],{"id":814,"slug":815,"identity":816,"label":817,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":818,"versions":820,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":822},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[819],"PSF-2.0",[821],"2.6.1",[55],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":828,"versions":829,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":831},"package:pypi:aiohttp-cors","aiohttp-cors-2026df90","pypi:aiohttp-cors","aiohttp-cors",[384],[830],"0.8.1",[55],{"id":833,"slug":834,"identity":835,"label":836,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":837,"versions":838,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":840},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[384],[839],"1.4.0",[55],{"id":842,"slug":843,"identity":844,"label":845,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":846,"versions":847,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":849},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[523],[848],"1.16.5",[55],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":855,"versions":856,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":858},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[523],[857],"0.7.0",[55],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":864,"versions":865,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":867},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[426],[866],"4.9.3",[55],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":873,"versions":874,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":876},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[523],[875],"4.10.0",[55],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":882,"versions":883,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":884},"package:pypi:astor","astor-5ea47d9f","pypi:astor","astor",[407],[830],[55],{"id":886,"slug":887,"identity":888,"label":889,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":890,"versions":891,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":893},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[523],[892],"25.3.0",[55],{"id":895,"slug":896,"identity":897,"label":898,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":899,"versions":901,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":903},"package:pypi:blake3","blake3-71cab3aa","pypi:blake3","blake3",[900],"Apache-2.0 OR CC0-1.0",[902],"1.0.5",[55],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":909,"versions":910,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":912},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[523],[911],"1.9.0",[55],{"id":914,"slug":915,"identity":916,"label":917,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":918,"versions":919,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":921},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[523],[920],"5.5.2",[55],{"id":923,"slug":924,"identity":925,"label":926,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":927,"versions":928,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":930},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[523],[929],"1.17.1",[55],{"id":932,"slug":933,"identity":934,"label":935,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":936,"versions":937,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":939},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[523],[938],"3.4.3",[55],{"id":941,"slug":942,"identity":943,"label":944,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":945,"versions":946,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":947},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[407],[554],[55],{"id":949,"slug":950,"identity":951,"label":952,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":953,"versions":954,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":956},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[426],[955],"0.4.6",[55],{"id":958,"slug":959,"identity":960,"label":961,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":962,"versions":963,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":965},"package:pypi:colorful","colorful-3d452f6a","pypi:colorful","colorful",[523],[964],"0.5.7",[55],{"id":967,"slug":968,"identity":969,"label":970,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":971,"versions":972,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":974},"package:pypi:compressed-tensors","compressed-tensors-e8905144","pypi:compressed-tensors","compressed-tensors",[384],[973],"0.10.2",[55],{"id":976,"slug":977,"identity":978,"label":979,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":980,"versions":981,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":983},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[426],[982],"1.3.3",[55],{"id":985,"slug":986,"identity":987,"label":988,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":989,"versions":990,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":992},"package:pypi:cupy-cuda12x","cupy-cuda12x-8ab55f02","pypi:cupy-cuda12x","cupy-cuda12x",[523],[991],"13.6.0",[55],{"id":994,"slug":995,"identity":996,"label":997,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":998,"versions":999,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1001},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[426],[1000],"0.12.1",[55],{"id":1003,"slug":1004,"identity":1005,"label":1006,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1007,"versions":1008,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1010},"package:pypi:cyclopts","cyclopts-479397c2","pypi:cyclopts","cyclopts",[384],[1009],"3.24.0",[55],{"id":1012,"slug":1013,"identity":1014,"label":1015,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1016,"versions":1017,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1019},"package:pypi:databricks-sdk","databricks-sdk-26867d3a","pypi:databricks-sdk","databricks-sdk",[426],[1018],"0.65.0",[55],{"id":1021,"slug":1022,"identity":1023,"label":1024,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1025,"versions":1026,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1028},"package:pypi:depyf","depyf-44ccc3bb","pypi:depyf","depyf",[523],[1027],"0.19.0",[55],{"id":1030,"slug":1031,"identity":1032,"label":1033,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1034,"versions":1035,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1037},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[407],[1036],"0.4.0",[55],{"id":1039,"slug":1040,"identity":1041,"label":1042,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1043,"versions":1044,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1045},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[819],[1036],[55],{"id":1047,"slug":1048,"identity":1049,"label":1050,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1051,"versions":1052,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1053},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[384],[911],[55],{"id":1055,"slug":1056,"identity":1057,"label":1058,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1059,"versions":1061,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1063},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[1060],"ISC",[1062],"2.7.0",[55],{"id":1065,"slug":1066,"identity":1067,"label":1068,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1069,"versions":1070,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1072},"package:pypi:docker","docker-fa61cb72","pypi:docker","docker",[384],[1071],"7.1.0",[55],{"id":1074,"slug":1075,"identity":1076,"label":1077,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1078,"versions":1079,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1081},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[523],[1080],"0.17.0",[55],{"id":1083,"slug":1084,"identity":1085,"label":1086,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1087,"versions":1088,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1090},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[426],[1089],"0.22.1",[55],{"id":1092,"slug":1093,"identity":1094,"label":1095,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1096,"versions":1097,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1098},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[523],[830],[55],{"id":1100,"slug":1101,"identity":1102,"label":1103,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1104,"versions":1105,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1107},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[618],[1106],"2.3.0",[55],{"id":1109,"slug":1110,"identity":1111,"label":1112,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1113,"versions":1114,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1116},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[523],[1115],"2.0.0",[55],{"id":1118,"slug":1119,"identity":1120,"label":1121,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1122,"versions":1123,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1125},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[523],[1124],"1.3.0",[55],{"id":1127,"slug":1128,"identity":1129,"label":1130,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1131,"versions":1132,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1134},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[523],[1133],"0.116.1",[55],{"id":1136,"slug":1137,"identity":1138,"label":1139,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1140,"versions":1141,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1143},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[523],[1142],"0.0.10",[55],{"id":1145,"slug":1146,"identity":1147,"label":1148,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1149,"versions":1150,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1152},"package:pypi:fastapi-cloud-cli","fastapi-cloud-cli-9011df6b","pypi:fastapi-cloud-cli","fastapi-cloud-cli",[523],[1151],"0.1.5",[55],{"id":1154,"slug":1155,"identity":1156,"label":1157,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1158,"versions":1159,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1161},"package:pypi:fastrlock","fastrlock-0757e61e","pypi:fastrlock","fastrlock",[426],[1160],"0.8.3",[55],{"id":1163,"slug":1164,"identity":1165,"label":1166,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1167,"versions":1168,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1170},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[384],[1169],"1.7.0",[55],{"id":1172,"slug":1173,"identity":1174,"label":1175,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1176,"versions":1177,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1179},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[407,426],[1178],"2025.9.0",[55],{"id":1181,"slug":1182,"identity":1183,"label":1184,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1185,"versions":1186,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1188},"package:pypi:gguf","gguf-828fa24b","pypi:gguf","gguf",[523],[1187],"0.17.1",[55],{"id":1190,"slug":1191,"identity":1192,"label":1193,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1194,"versions":1195,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1197},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[426],[1196],"4.0.12",[55],{"id":1199,"slug":1200,"identity":1201,"label":1202,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1203,"versions":1204,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1206},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[384],[1205],"2.25.1",[55],{"id":1208,"slug":1209,"identity":1210,"label":1211,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1212,"versions":1213,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1215},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[384],[1214],"2.40.3",[55],{"id":1217,"slug":1218,"identity":1219,"label":1220,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1221,"versions":1222,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1224},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[384],[1223],"1.70.0",[55],{"id":1226,"slug":1227,"identity":1228,"label":1229,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1230,"versions":1231,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1232},"package:pypi:graphene","graphene-e89251f5","pypi:graphene","graphene",[523],[938],[55],{"id":1234,"slug":1235,"identity":1236,"label":1237,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1238,"versions":1239,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1241},"package:pypi:graphql-core","graphql-core-6d217145","pypi:graphql-core","graphql-core",[523],[1240],"3.2.6",[55],{"id":1243,"slug":1244,"identity":1245,"label":1246,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1247,"versions":1248,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1250},"package:pypi:graphql-relay","graphql-relay-f4584f38","pypi:graphql-relay","graphql-relay",[523],[1249],"3.2.0",[55],{"id":1252,"slug":1253,"identity":1254,"label":1255,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1256,"versions":1259,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1261},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[523,1257,1258],"MIT AND PSF-2.0","MIT AND Python-2.0",[1260],"3.2.4",[55],{"id":1263,"slug":1264,"identity":1265,"label":1266,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1267,"versions":1268,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1270},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[384],[1269],"1.74.0",[55],{"id":1272,"slug":1273,"identity":1274,"label":1275,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1276,"versions":1277,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1279},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[523],[1278],"23.0.0",[55],{"id":1281,"slug":1282,"identity":1283,"label":1284,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1285,"versions":1286,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1288},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[384],[1287],"1.1.9",[55],{"id":1290,"slug":1291,"identity":1292,"label":1293,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1294,"versions":1295,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1297},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[407],[1296],"1.0.9",[55],{"id":1299,"slug":1300,"identity":1301,"label":1302,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1303,"versions":1304,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1306},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[523],[1305],"0.6.4",[55],{"id":1308,"slug":1309,"identity":1310,"label":1311,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1312,"versions":1313,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1315},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[407],[1314],"0.28.1",[55],{"id":1317,"slug":1318,"identity":1319,"label":1320,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1321,"versions":1322,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1324},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[523],[1323],"0.4.1",[55],{"id":1326,"slug":1327,"identity":1328,"label":1329,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1330,"versions":1331,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1333},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[384,426],[1332],"0.34.4",[55],{"id":1335,"slug":1336,"identity":1337,"label":1338,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1339,"versions":1340,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1342},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[523],[1341],"1.3.2",[55],{"id":1344,"slug":1345,"identity":1346,"label":1347,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1348,"versions":1349,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1351},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[384,426],[1350],"8.7.0",[55],{"id":1353,"slug":1354,"identity":1355,"label":1356,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1357,"versions":1358,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1360},"package:pypi:inquirerpy","inquirerpy-7155acae","pypi:inquirerpy","inquirerpy",[523],[1359],"0.3.4",[55],{"id":1362,"slug":1363,"identity":1364,"label":1365,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1366,"versions":1367,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1369},"package:pypi:interegular","interegular-393a5327","pypi:interegular","interegular",[523],[1368],"0.3.3",[55],{"id":1371,"slug":1372,"identity":1373,"label":1374,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1375,"versions":1376,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1378},"package:pypi:isodate","isodate-fdef8b9b","pypi:isodate","isodate",[426],[1377],"0.7.2",[55],{"id":1380,"slug":1381,"identity":1382,"label":1383,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1384,"versions":1385,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1387},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[407,426],[1386],"2.2.0",[55],{"id":1389,"slug":1390,"identity":1391,"label":1392,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1393,"versions":1394,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1396},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[523],[1395],"0.10.0",[55],{"id":1398,"slug":1399,"identity":1400,"label":1401,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1402,"versions":1403,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1405},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[407],[1404],"1.5.2",[55],{"id":1407,"slug":1408,"identity":1409,"label":1410,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1411,"versions":1412,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1414},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[523],[1413],"4.25.1",[55],{"id":1416,"slug":1417,"identity":1418,"label":1419,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1420,"versions":1421,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1422},"package:pypi:jsonschema-path","jsonschema-path-7b9c625e","pypi:jsonschema-path","jsonschema-path",[384],[1359],[55],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1428,"versions":1429,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1431},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[523],[1430],"2025.4.1",[55],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1437,"versions":1438,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1440},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[426],[1439],"1.4.9",[55],{"id":1442,"slug":1443,"identity":1444,"label":1445,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1446,"versions":1447,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1449},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[523],[1448],"1.2.2",[55],{"id":1451,"slug":1452,"identity":1453,"label":1454,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1455,"versions":1456,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1458},"package:pypi:lazy-object-proxy","lazy-object-proxy-a9867681","pypi:lazy-object-proxy","lazy-object-proxy",[655],[1457],"1.12.0",[55],{"id":1460,"slug":1461,"identity":1462,"label":1463,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1464,"versions":1465,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1467},"package:pypi:llguidance","llguidance-a18efde0","pypi:llguidance","llguidance",[523],[1466],"0.7.30",[55],{"id":1469,"slug":1470,"identity":1471,"label":1472,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1473,"versions":1474,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1476},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[426],[1475],"0.44.0",[55],{"id":1478,"slug":1479,"identity":1480,"label":1481,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1482,"versions":1483,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1485},"package:pypi:lm-format-enforcer","lm-format-enforcer-9e319c1b","pypi:lm-format-enforcer","lm-format-enforcer",[523],[1484],"0.10.12",[55],{"id":1487,"slug":1488,"identity":1489,"label":1490,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1491,"versions":1492,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1494},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[523],[1493],"4.0.0",[55],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1500,"versions":1501,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1503},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[407,426],[1502],"3.0.2",[55],{"id":1505,"slug":1506,"identity":1507,"label":1508,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1509,"versions":1510,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1512},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[426],[1511],"3.10.6",[55],{"id":1514,"slug":1515,"identity":1516,"label":1517,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1518,"versions":1519,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1521},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[523],[1520],"0.1.2",[55],{"id":1523,"slug":1524,"identity":1525,"label":1526,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1527,"versions":1528,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1530},"package:pypi:mistral-common","mistral-common-038e1158","pypi:mistral-common","mistral-common",[384],[1529],"1.8.4",[55],{"id":1532,"slug":1533,"identity":1534,"label":1535,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1536,"versions":1537,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1538},"package:pypi:mlflow-skinny","mlflow-skinny-05e8b169","pypi:mlflow-skinny","mlflow-skinny",[426],[465],[55],{"id":1540,"slug":1541,"identity":1542,"label":1543,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1544,"versions":1545,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1546},"package:pypi:mlflow-tracing","mlflow-tracing-6ac72d11","pypi:mlflow-tracing","mlflow-tracing",[426],[465],[55],{"id":1548,"slug":1549,"identity":1550,"label":1551,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1552,"versions":1553,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1555},"package:pypi:mlx-lm","mlx-lm-c2e88814","pypi:mlx-lm","mlx-lm",[523],[1554],"0.27.0",[55],{"id":1557,"slug":1558,"identity":1559,"label":1560,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1561,"versions":1562,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1563},"package:pypi:mlx-metal","mlx-metal-fdc0094a","pypi:mlx-metal","mlx-metal",[],[638],[55],{"id":1565,"slug":1566,"identity":1567,"label":1568,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1569,"versions":1570,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1572},"package:pypi:more-itertools","more-itertools-fa46f32b","pypi:more-itertools","more-itertools",[523],[1571],"10.8.0",[55],{"id":1574,"slug":1575,"identity":1576,"label":1577,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1578,"versions":1579,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1580},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[426],[1124],[55],{"id":1582,"slug":1583,"identity":1584,"label":1585,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1586,"versions":1587,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1588},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[407,426],[1027],[55],{"id":1590,"slug":1591,"identity":1592,"label":1593,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1594,"versions":1595,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1597},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[384],[1596],"6.6.4",[55],{"id":1599,"slug":1600,"identity":1601,"label":1602,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1603,"versions":1604,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1606},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[407,426],[1605],"3.5",[55],{"id":1608,"slug":1609,"identity":1610,"label":1611,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1612,"versions":1613,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1615},"package:pypi:ninja","ninja-d45560ae","pypi:ninja","ninja",[426],[1614],"1.13.0",[55],{"id":1617,"slug":1618,"identity":1619,"label":1620,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1621,"versions":1622,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1624},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[426],[1623],"0.61.2",[55],{"id":1626,"slug":1627,"identity":1628,"label":1629,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1630,"versions":1632,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1634},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1631,426],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1633],"2.2.6",[55],{"id":1636,"slug":1637,"identity":1638,"label":1639,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1640,"versions":1641,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1643},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[426],[1642],"12.6.4.1",[55],{"id":1645,"slug":1646,"identity":1647,"label":1648,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1649,"versions":1650,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1652},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[426],[1651],"12.6.80",[55],{"id":1654,"slug":1655,"identity":1656,"label":1657,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1658,"versions":1659,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1661},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[426],[1660],"12.6.77",[55],{"id":1663,"slug":1664,"identity":1665,"label":1666,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1667,"versions":1668,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1669},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[426],[1660],[55],{"id":1671,"slug":1672,"identity":1673,"label":1674,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1675,"versions":1676,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1678},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[426],[1677],"9.5.1.17",[55],{"id":1680,"slug":1681,"identity":1682,"label":1683,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1684,"versions":1685,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1687},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[426],[1686],"11.3.0.4",[55],{"id":1689,"slug":1690,"identity":1691,"label":1692,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1693,"versions":1694,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1696},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[426],[1695],"1.11.1.6",[55],{"id":1698,"slug":1699,"identity":1700,"label":1701,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1702,"versions":1703,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1705},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[426],[1704],"10.3.7.77",[55],{"id":1707,"slug":1708,"identity":1709,"label":1710,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1711,"versions":1712,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1714},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[426],[1713],"11.7.1.2",[55],{"id":1716,"slug":1717,"identity":1718,"label":1719,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1720,"versions":1721,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1723},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[426],[1722],"12.5.4.2",[55],{"id":1725,"slug":1726,"identity":1727,"label":1728,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1729,"versions":1730,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1732},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[426],[1731],"0.6.3",[55],{"id":1734,"slug":1735,"identity":1736,"label":1737,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1738,"versions":1739,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1741},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[426],[1740],"12.575.51",[55],{"id":1743,"slug":1744,"identity":1745,"label":1746,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1747,"versions":1748,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1750},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[407,426],[1749],"2.26.2",[55],{"id":1752,"slug":1753,"identity":1754,"label":1755,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1756,"versions":1757,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1759},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[426],[1758],"12.6.85",[55],{"id":1761,"slug":1762,"identity":1763,"label":1764,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1765,"versions":1766,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1767},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[384,426],[1660],[55],{"id":1769,"slug":1770,"identity":1771,"label":1772,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1773,"versions":1774,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1775},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[407],[1106],[55],{"id":1777,"slug":1778,"identity":1779,"label":1780,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1781,"versions":1782,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1784},"package:pypi:openai-harmony","openai-harmony-030f1d71","pypi:openai-harmony","openai-harmony",[],[1783],"0.0.4",[55],{"id":1786,"slug":1787,"identity":1788,"label":1789,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1790,"versions":1791,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1793},"package:pypi:openapi-core","openapi-core-24597bf8","pypi:openapi-core","openapi-core",[407],[1792],"0.19.5",[55],{"id":1795,"slug":1796,"identity":1797,"label":1798,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1799,"versions":1800,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1802},"package:pypi:openapi-pydantic","openapi-pydantic-b637b931","pypi:openapi-pydantic","openapi-pydantic",[523],[1801],"0.5.1",[55],{"id":1804,"slug":1805,"identity":1806,"label":1807,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1808,"versions":1809,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1810},"package:pypi:openapi-schema-validator","openapi-schema-validator-fe7e601b","pypi:openapi-schema-validator","openapi-schema-validator",[407],[1731],[55],{"id":1812,"slug":1813,"identity":1814,"label":1815,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1816,"versions":1817,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1818},"package:pypi:openapi-spec-validator","openapi-spec-validator-77311710","pypi:openapi-spec-validator","openapi-spec-validator",[384],[1377],[55],{"id":1820,"slug":1821,"identity":1822,"label":1823,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1824,"versions":1825,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1827},"package:pypi:opencensus","opencensus-a78c415d","pypi:opencensus","opencensus",[384],[1826],"0.11.4",[55],{"id":1829,"slug":1830,"identity":1831,"label":1832,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1833,"versions":1834,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1836},"package:pypi:opencensus-context","opencensus-context-22acaa15","pypi:opencensus-context","opencensus-context",[384],[1835],"0.1.3",[55],{"id":1838,"slug":1839,"identity":1840,"label":1841,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1842,"versions":1843,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1845},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[384],[1844],"4.12.0.88",[55],{"id":1847,"slug":1848,"identity":1849,"label":1850,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1851,"versions":1852,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1854},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[523],[1853],"3.1.5",[55],{"id":1856,"slug":1857,"identity":1858,"label":1859,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1860,"versions":1861,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1863},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[384],[1862],"1.36.0",[55],{"id":1865,"slug":1866,"identity":1867,"label":1868,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1869,"versions":1870,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1872},"package:pypi:opentelemetry-exporter-prometheus","opentelemetry-exporter-prometheus-512d2564","pypi:opentelemetry-exporter-prometheus","opentelemetry-exporter-prometheus",[384],[1871],"0.57b0",[55],{"id":1874,"slug":1875,"identity":1876,"label":1877,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1878,"versions":1879,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1880},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[384],[1862],[55],{"id":1882,"slug":1883,"identity":1884,"label":1885,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1886,"versions":1887,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1888},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[384],[1862],[55],{"id":1890,"slug":1891,"identity":1892,"label":1893,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1894,"versions":1895,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1896},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[384],[1871],[55],{"id":1898,"slug":1899,"identity":1900,"label":1901,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1902,"versions":1903,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1905},"package:pypi:outlines-core","outlines-core-16063b2f","pypi:outlines-core","outlines-core",[384],[1904],"0.2.10",[55],{"id":1907,"slug":1908,"identity":1909,"label":1910,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1911,"versions":1913,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1915},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1912,426],"Apache-2.0 OR BSD-2-Clause",[1914],"25.0",[55],{"id":1917,"slug":1918,"identity":1919,"label":1920,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1921,"versions":1922,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1924},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[426],[1923],"2.3.2",[55],{"id":1926,"slug":1927,"identity":1928,"label":1929,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1930,"versions":1931,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1933},"package:pypi:parse","parse-31eb237c","pypi:parse","parse",[426],[1932],"1.20.2",[55],{"id":1935,"slug":1936,"identity":1937,"label":1938,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1939,"versions":1940,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1942},"package:pypi:partial-json-parser","partial-json-parser-185436fc","pypi:partial-json-parser","partial-json-parser",[523],[1941],"0.2.1.1.post6",[55],{"id":1944,"slug":1945,"identity":1946,"label":1947,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1948,"versions":1949,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1951},"package:pypi:pathable","pathable-3c4e83c8","pypi:pathable","pathable",[384],[1950],"0.4.4",[55],{"id":1953,"slug":1954,"identity":1955,"label":1956,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1957,"versions":1958,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1959},"package:pypi:pfzy","pfzy-9297092e","pypi:pfzy","pfzy",[523],[1359],[55],{"id":1961,"slug":1962,"identity":1963,"label":1964,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1965,"versions":1966,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1968},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[523],[1967],"4.4.0",[55],{"id":1970,"slug":1971,"identity":1972,"label":1973,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1974,"versions":1976,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1977},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[384,1975],"Apache-2.0 AND BSD-2-Clause",[1089],[55],{"id":1979,"slug":1980,"identity":1981,"label":1982,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1983,"versions":1984,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1985},"package:pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator-6b62ecc9","pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator",[1060],[1071],[55],{"id":1987,"slug":1988,"identity":1989,"label":1990,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":1991,"versions":1992,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1994},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[407,426],[1993],"3.0.52",[55],{"id":1996,"slug":1997,"identity":1998,"label":1999,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2000,"versions":2001,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2003},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[384],[2002],"0.3.2",[55],{"id":2005,"slug":2006,"identity":2007,"label":2008,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2009,"versions":2010,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2012},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[384],[2011],"1.26.1",[55],{"id":2014,"slug":2015,"identity":2016,"label":2017,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2018,"versions":2019,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2021},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[407],[2020],"7.0.0",[55],{"id":2023,"slug":2024,"identity":2025,"label":2026,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2027,"versions":2028,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2030},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[523],[2029],"9.0.0",[55],{"id":2032,"slug":2033,"identity":2034,"label":2035,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2036,"versions":2037,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2038},"package:pypi:py-spy","py-spy-5be0886a","pypi:py-spy","py-spy",[523],[1323],[55],{"id":2040,"slug":2041,"identity":2042,"label":2043,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2044,"versions":2045,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2047},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[426],[2046],"0.4.2",[55],{"id":2049,"slug":2050,"identity":2051,"label":2052,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2053,"versions":2054,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2056},"package:pypi:pybase64","pybase64-d848d924","pypi:pybase64","pybase64",[655],[2055],"1.4.2",[55],{"id":2058,"slug":2059,"identity":2060,"label":2061,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2062,"versions":2064,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2066},"package:pypi:pycountry","pycountry-938c3061","pypi:pycountry","pycountry",[2063],"LGPL-2.1-only",[2065],"24.6.1",[55],{"id":2068,"slug":2069,"identity":2070,"label":2071,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2072,"versions":2073,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2075},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[407],[2074],"2.22",[55],{"id":2077,"slug":2078,"identity":2079,"label":2080,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2081,"versions":2082,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2084},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[523],[2083],"2.11.7",[55],{"id":2086,"slug":2087,"identity":2088,"label":2089,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2090,"versions":2091,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2093},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[523],[2092],"2.33.2",[55],{"id":2095,"slug":2096,"identity":2097,"label":2098,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2099,"versions":2100,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2102},"package:pypi:pydantic-extra-types","pydantic-extra-types-dddc16ef","pypi:pydantic-extra-types","pydantic-extra-types",[523],[2101],"2.10.5",[55],{"id":2104,"slug":2105,"identity":2106,"label":2107,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2108,"versions":2109,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2111},"package:pypi:pynvml","pynvml-46c48fc0","pypi:pynvml","pynvml",[407],[2110],"12.0.0",[55],{"id":2113,"slug":2114,"identity":2115,"label":2116,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2117,"versions":2118,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2120},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[523],[2119],"3.2.3",[55],{"id":2122,"slug":2123,"identity":2124,"label":2125,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2126,"versions":2127,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2129},"package:pypi:pyperclip","pyperclip-4b45e1af","pypi:pyperclip","pyperclip",[426],[2128],"1.10.0",[55],{"id":2131,"slug":2132,"identity":2133,"label":2134,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2135,"versions":2136,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2138},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[426],[2137],"2.9.0.post0",[55],{"id":2140,"slug":2141,"identity":2142,"label":2143,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2144,"versions":2145,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2147},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[426],[2146],"3.3.0",[55],{"id":2149,"slug":2150,"identity":2151,"label":2152,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2153,"versions":2154,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2156},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[523],[2155],"2025.2",[55],{"id":2158,"slug":2159,"identity":2160,"label":2161,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2162,"versions":2163,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2165},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2164],"311",[55],{"id":2167,"slug":2168,"identity":2169,"label":2170,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2171,"versions":2172,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2174},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[523],[2173],"6.0.2",[55],{"id":2176,"slug":2177,"identity":2178,"label":2179,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2180,"versions":2181,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2183},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[426],[2182],"27.0.2",[55],{"id":2185,"slug":2186,"identity":2187,"label":2188,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2189,"versions":2190,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2192},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[523],[2191],"0.36.2",[55],{"id":2194,"slug":2195,"identity":2196,"label":2197,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2198,"versions":2200,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2202},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2199,426],"Apache-2.0 AND CNRI-Python",[2201],"2025.9.1",[55],{"id":2204,"slug":2205,"identity":2206,"label":2207,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2208,"versions":2209,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2211},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[523],[2210],"0.1.4",[55],{"id":2213,"slug":2214,"identity":2215,"label":2216,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2217,"versions":2218,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2220},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[523],[2219],"14.1.0",[55],{"id":2222,"slug":2223,"identity":2224,"label":2225,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2226,"versions":2227,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2229},"package:pypi:rich-rst","rich-rst-fda043f5","pypi:rich-rst","rich-rst",[523],[2228],"1.3.1",[55],{"id":2231,"slug":2232,"identity":2233,"label":2234,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2235,"versions":2236,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2238},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[523],[2237],"0.15.0",[55],{"id":2240,"slug":2241,"identity":2242,"label":2243,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2244,"versions":2245,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2246},"package:pypi:rignore","rignore-bc5396c6","pypi:rignore","rignore",[523],[1305],[55],{"id":2248,"slug":2249,"identity":2250,"label":2251,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2252,"versions":2253,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2255},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[523],[2254],"0.27.1",[55],{"id":2257,"slug":2258,"identity":2259,"label":2260,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2261,"versions":2262,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2264},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[384],[2263],"4.9.1",[55],{"id":2266,"slug":2267,"identity":2268,"label":2269,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2270,"versions":2271,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2273},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[426],[2272],"0.6.2",[55],{"id":2275,"slug":2276,"identity":2277,"label":2278,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2279,"versions":2280,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2282},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[426],[2281],"1.16.1",[55],{"id":2284,"slug":2285,"identity":2286,"label":2287,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2288,"versions":2289,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2291},"package:pypi:sentry-sdk","sentry-sdk-2727cc69","pypi:sentry-sdk","sentry-sdk",[523],[2290],"2.35.2",[55],{"id":2293,"slug":2294,"identity":2295,"label":2296,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2297,"versions":2298,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2300},"package:pypi:setproctitle","setproctitle-5acfd9d9","pypi:setproctitle","setproctitle",[407],[2299],"1.3.6",[55],{"id":2302,"slug":2303,"identity":2304,"label":2305,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2306,"versions":2307,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2309},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[426],[2308],"1.5.4",[55],{"id":2311,"slug":2312,"identity":2313,"label":2314,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2315,"versions":2316,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2318},"package:pypi:six","six-3c3888bd","pypi:six","six",[523],[2317],"1.17.0",[55],{"id":2320,"slug":2321,"identity":2322,"label":2323,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2324,"versions":2325,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2327},"package:pypi:smart-open","smart-open-6f8d7c36","pypi:smart-open","smart-open",[523],[2326],"7.3.0.post1",[55],{"id":2329,"slug":2330,"identity":2331,"label":2332,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2333,"versions":2334,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2336},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[407],[2335],"5.0.2",[55],{"id":2338,"slug":2339,"identity":2340,"label":2341,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2342,"versions":2344,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2345},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2343],"Apache-2.0 OR MIT",[2228],[55],{"id":2347,"slug":2348,"identity":2349,"label":2350,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2351,"versions":2352,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2354},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[407],[2353],"0.13.1",[55],{"id":2356,"slug":2357,"identity":2358,"label":2359,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2360,"versions":2363,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2365},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[2361,2362],"LGPL-2.0-or-later","LGPL-2.1-or-later",[2364],"0.5.0.post1",[55],{"id":2367,"slug":2368,"identity":2369,"label":2370,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2371,"versions":2372,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2374},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[523],[2373],"2.0.43",[55],{"id":2376,"slug":2377,"identity":2378,"label":2379,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2380,"versions":2381,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2382},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[407],[1502],[55],{"id":2384,"slug":2385,"identity":2386,"label":2387,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2388,"versions":2389,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2391},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[426],[2390],"1.14.0",[55],{"id":2393,"slug":2394,"identity":2395,"label":2396,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2397,"versions":2398,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2400},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[407],[2399],"3.6.0",[55],{"id":2402,"slug":2403,"identity":2404,"label":2405,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2406,"versions":2407,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2408},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[655,426],[409],[55],{"id":2410,"slug":2411,"identity":2412,"label":2413,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2414,"versions":2415,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2416},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[426],[1089],[55],{"id":2418,"slug":2419,"identity":2420,"label":2421,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2422,"versions":2423,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2425},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[523],[2424],"3.3.1",[55],{"id":2427,"slug":2428,"identity":2429,"label":2430,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2431,"versions":2432,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2434},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[523],[2433],"0.17.3",[55],{"id":2436,"slug":2437,"identity":2438,"label":2439,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2440,"versions":2441,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2443},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[819,426],[2442],"4.15.0",[55],{"id":2445,"slug":2446,"identity":2447,"label":2448,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2449,"versions":2450,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2451},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[523],[1323],[55],{"id":2453,"slug":2454,"identity":2455,"label":2456,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2457,"versions":2458,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2459},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[384],[2155],[55],{"id":2461,"slug":2462,"identity":2463,"label":2464,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2465,"versions":2466,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2468},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[407],[2467],"0.35.0",[55],{"id":2470,"slug":2471,"identity":2472,"label":2473,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2474,"versions":2475,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2477},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[523],[2476],"0.21.0",[55],{"id":2479,"slug":2480,"identity":2481,"label":2482,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2483,"versions":2485,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2486},"package:pypi:waitress","waitress-e47950e2","pypi:waitress","waitress",[2484],"ZPL-2.1",[1502],[55],{"id":2488,"slug":2489,"identity":2490,"label":2491,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2492,"versions":2493,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2495},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[523],[2494],"1.1.0",[55],{"id":2497,"slug":2498,"identity":2499,"label":2500,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2501,"versions":2502,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2504},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[523],[2503],"0.2.13",[55],{"id":2506,"slug":2507,"identity":2508,"label":2509,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2510,"versions":2511,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2513},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[407],[2512],"15.0.1",[55],{"id":2515,"slug":2516,"identity":2517,"label":2518,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2519,"versions":2520,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2522},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[426],[2521],"1.17.3",[55],{"id":2524,"slug":2525,"identity":2526,"label":2527,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2528,"versions":2529,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2531},"package:pypi:xformers","xformers-0f6528e3","pypi:xformers","xformers",[407],[2530],"0.0.31",[55],{"id":2533,"slug":2534,"identity":2535,"label":2536,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2537,"versions":2538,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2540},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[384],[2539],"1.20.1",[55],{"id":2542,"slug":2543,"identity":2544,"label":2545,"aiRelevant":46,"provider":381,"advisoryCount":38,"licenseExpressions":2546,"versions":2547,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2549},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[523],[2548],"3.23.0",[55],[2551,2590,2612,2644,2675,2707,2737,2770,2802,2850,2875,2907,2950,2976,3002,3029,3057,3086,3121,3144,3171,3201,3235,3261,3281,3299,3324,3365,3391,3416,3434,3472,3495,3520,3545,3578,3606,3629,3659,3684,3714,3752,3787,3810,3840,3867,3886,3920,3944,3970,4000,4023,4054,4081,4110,4135,4158,4180,4203,4232,4258,4281,4304,4351,4378,4405,4429,4460,4510,4538,4569,4608,4637,4659,4695,4713,4763,4787,4826,4858,4886,4918,4950,4975,5012,5036,5059,5092,5122,5146,5180,5208,5238,5258,5274,5299,5324,5356,5412,5444,5475,5500,5533,5558,5586,5613,5647,5671,5702,5729,5752,5784,5803,5827,5852,5885,5910,5937,5960,5988,6016,6041,6075,6090,6124,6146,6168,6192,6219,6240,6265,6295,6315,6339,6371,6394,6414,6439,6460,6488,6515,6556,6580,6599,6625,6647,6668,6690,6721,6744,6767,6794,6811,6840,6862,6888,6909,6931,6958,6983,7012,7033,7065,7089,7113,7139,7173,7197,7219,7246,7280,7307,7339,7359,7395,7434,7466,7493,7520,7547,7572,7625,7654,7678,7693,7720,7750,7772,7792,7824,7851,7875,7900,7927,7947,7973,7995,8018,8046,8070,8093,8120,8144,8174,8197,8220,8244,8270,8300,8322,8347,8372,8394,8446,8469,8495,8527,8556,8581,8605,8628,8664,8696,8715,8734,8761,8788,8808,8825,8844,8861,8882,8898,8913,8930,8945,8962,8979,8996,9009,9022,9035,9048,9061,9074,9087,9100,9117,9139,9172,9191,9208,9225,9243,9266,9280,9303,9332,9352,9379,9400,9420],{"id":107,"slug":2552,"dossier":46,"summary":2553,"aliases":2554,"sourceIds":2557,"published":2558,"modified":2559,"checkedAt":7,"severity":2560,"references":2564,"versionKeys":2588,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2555,2556],"CVE-2024-39689","PYSEC-2024-230",[107,2556],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2561],{"type":2562,"score":2563},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2565,2568,2570,2573,2576,2579,2582,2584,2586],{"type":2566,"url":2567},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2566,"url":2569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2571,"url":2572},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2574,"url":2575},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2577,"url":2578},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2580,"url":2581},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2577,"url":2583},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2566,"url":2585},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2566,"url":2587},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2589],"pypi:certifi@2024.6.2",{"id":108,"slug":2591,"dossier":46,"summary":2592,"aliases":2593,"sourceIds":2594,"published":2595,"modified":2596,"checkedAt":7,"severity":2597,"references":2601,"versionKeys":2610,"packageCount":32,"repositoryCount":616},"ghsa-27jp-wm6q-gp25-5ce03f88","sqlparse: formatting list of tuples leads to denial of service",[],[108],"2026-02-13T16:16:11Z","2026-02-19T02:59:07.083683Z",[2598],{"type":2599,"score":2600},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2602,2604,2606,2608],{"type":2577,"url":2603},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fsecurity\u002Fadvisories\u002FGHSA-27jp-wm6q-gp25",{"type":2577,"url":2605},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fcommit\u002F40ed3aa958657fa4a82055927fa9de70ab903360",{"type":2574,"url":2607},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse",{"type":2577,"url":2609},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Freleases\u002Ftag\u002F0.5.4",[2611],"pypi:sqlparse@0.5.3",{"id":109,"slug":2613,"dossier":46,"summary":2614,"aliases":2615,"sourceIds":2618,"published":2619,"modified":2620,"checkedAt":7,"severity":2621,"references":2624,"versionKeys":2636,"packageCount":32,"repositoryCount":494},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2616,2617],"CVE-2026-4372","PYSEC-2026-2289",[109,2617],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2622],{"type":2562,"score":2623},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2625,2627,2629,2631,2634],{"type":2566,"url":2626},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2571,"url":2628},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2574,"url":2630},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2632,"url":2633},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2566,"url":2635},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2637,2638,2639,2640,2641,2642,2643],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":110,"slug":2645,"dossier":46,"summary":2646,"aliases":2647,"sourceIds":2650,"published":2651,"modified":2652,"checkedAt":7,"severity":2653,"references":2658,"versionKeys":2669,"packageCount":32,"repositoryCount":532},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2648,2649],"CVE-2026-27199","PYSEC-2026-2320",[110,2649],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[2654,2656],{"type":2599,"score":2655},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2562,"score":2657},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2659,2661,2663,2665,2667],{"type":2566,"url":2660},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2566,"url":2662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2571,"url":2664},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2574,"url":2666},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2566,"url":2668},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2670,2671,2672,2673,2674],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":111,"slug":2676,"dossier":46,"summary":2677,"aliases":2678,"sourceIds":2681,"published":2682,"modified":2683,"checkedAt":7,"severity":2684,"references":2686,"versionKeys":2703,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2679,2680],"CVE-2025-54121","PYSEC-2026-1941",[111,2680],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2685],{"type":2562,"score":2657},[2687,2689,2691,2693,2695,2697,2699,2701],{"type":2577,"url":2688},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2566,"url":2690},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2571,"url":2692},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2574,"url":2694},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2577,"url":2696},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2577,"url":2698},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2574,"url":2700},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2566,"url":2702},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2704,2705,2706],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":112,"slug":2708,"dossier":46,"summary":2709,"aliases":2710,"sourceIds":2713,"published":2714,"modified":2715,"checkedAt":7,"severity":2716,"references":2721,"versionKeys":2728,"packageCount":32,"repositoryCount":484},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2711,2712],"CVE-2026-54279","PYSEC-2026-2112",[112,2712],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2717,2719],{"type":2599,"score":2718},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2562,"score":2720},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2722,2724,2726],{"type":2566,"url":2723},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2574,"url":2725},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2571,"url":2727},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2729,2730,2731,2732,2733,2734,2735,2736],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":113,"slug":2738,"dossier":46,"summary":2739,"aliases":2740,"sourceIds":2743,"published":2744,"modified":2745,"checkedAt":7,"severity":2746,"references":2749,"versionKeys":2769,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2741,2742],"CVE-2024-34069","PYSEC-2026-2043",[113,2742],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[2747],{"type":2562,"score":2748},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2750,2752,2754,2756,2757,2759,2761,2763,2765,2767],{"type":2577,"url":2751},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2566,"url":2753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2577,"url":2755},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2574,"url":2666},{"type":2577,"url":2758},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2577,"url":2760},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2577,"url":2762},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2577,"url":2764},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2574,"url":2766},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2566,"url":2768},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2670],{"id":114,"slug":2771,"dossier":46,"summary":2772,"aliases":2773,"sourceIds":2776,"published":2777,"modified":2778,"checkedAt":7,"severity":2779,"references":2782,"versionKeys":2799,"packageCount":32,"repositoryCount":561},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2774,2775],"CVE-2026-44307","PYSEC-2026-2617",[114,2775],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2780],{"type":2599,"score":2781},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2783,2785,2787,2789,2791,2793,2795,2797],{"type":2577,"url":2784},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2566,"url":2786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2577,"url":2788},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2577,"url":2790},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2574,"url":2792},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2577,"url":2794},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2574,"url":2796},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2566,"url":2798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2800,2801],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":115,"slug":2803,"dossier":46,"summary":2804,"aliases":2805,"sourceIds":2808,"published":2809,"modified":2810,"checkedAt":7,"severity":2811,"references":2814,"versionKeys":2847,"packageCount":32,"repositoryCount":616},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[2806,2807],"CVE-2026-22807","PYSEC-2026-2010",[115,2807],"2026-01-21T16:12:54Z","2026-07-17T16:30:29.025047931Z",[2812],{"type":2562,"score":2813},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2815,2817,2819,2821,2823,2825,2827,2829,2831,2833,2835,2837,2839,2841,2843,2845],{"type":2577,"url":2816},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2566,"url":2818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":2577,"url":2820},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":2577,"url":2822},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":2577,"url":2824},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":2574,"url":2826},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":2577,"url":2828},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":2574,"url":2830},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"type":2577,"url":2832},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":2566,"url":2834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2577,"url":2836},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":2577,"url":2838},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":2577,"url":2840},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":2577,"url":2842},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":2577,"url":2844},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",{"type":2577,"url":2846},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",[2848,2849],"pypi:vllm@0.10.1.1","pypi:vllm@0.11.0",{"id":116,"slug":2851,"dossier":46,"summary":2852,"aliases":2853,"sourceIds":2856,"published":2857,"modified":2858,"checkedAt":7,"severity":2859,"references":2864,"versionKeys":2874,"packageCount":32,"repositoryCount":484},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2854,2855],"CVE-2026-34514","PYSEC-2026-2096",[116,2855],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2860,2862],{"type":2599,"score":2861},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2562,"score":2863},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2865,2867,2869,2871,2872],{"type":2571,"url":2866},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2566,"url":2868},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2571,"url":2870},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2574,"url":2725},{"type":2566,"url":2873},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2729,2730,2731,2732,2733,2734,2735,2736],{"id":117,"slug":2876,"dossier":91,"summary":2877,"aliases":2878,"sourceIds":2881,"published":2882,"modified":2883,"checkedAt":7,"severity":2884,"references":2887,"versionKeys":2900,"packageCount":32,"repositoryCount":2906},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2879,2880],"CVE-2025-66471","PYSEC-2026-1994",[117,2880],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2885],{"type":2599,"score":2886},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2888,2890,2892,2894,2896,2898],{"type":2577,"url":2889},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2566,"url":2891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2571,"url":2893},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2574,"url":2895},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2574,"url":2897},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2566,"url":2899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2901,2902,2903,2904,2905],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":118,"slug":2908,"dossier":46,"summary":2909,"aliases":2910,"sourceIds":2914,"published":2915,"modified":2916,"checkedAt":7,"severity":2917,"references":2924,"versionKeys":2946,"packageCount":32,"repositoryCount":105},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2911,2912,2913],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[118,2913],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2918,2920,2922],{"type":2562,"score":2919},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2599,"score":2921},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2562,"score":2923},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2925,2927,2930,2932,2934,2936,2938,2940,2942,2944],{"type":2566,"url":2926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2928,"url":2929},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2928,"url":2931},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2577,"url":2933},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2574,"url":2935},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2577,"url":2937},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2928,"url":2939},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2566,"url":2941},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2566,"url":2943},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2566,"url":2945},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2947,2948,2949],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":119,"slug":2951,"dossier":46,"summary":2952,"aliases":2953,"sourceIds":2956,"published":2957,"modified":2958,"checkedAt":7,"severity":2959,"references":2961,"versionKeys":2975,"packageCount":32,"repositoryCount":616},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2954,2955],"CVE-2025-3933","PYSEC-2026-1977",[119,2955],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2960],{"type":2562,"score":2657},[2962,2964,2966,2968,2969,2971,2973],{"type":2566,"url":2963},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2577,"url":2965},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2577,"url":2967},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2574,"url":2630},{"type":2577,"url":2970},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2574,"url":2972},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2566,"url":2974},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2637,2638],{"id":120,"slug":2977,"dossier":91,"summary":2978,"aliases":2979,"sourceIds":2982,"published":2983,"modified":2984,"checkedAt":7,"severity":2985,"references":2988,"versionKeys":3001,"packageCount":32,"repositoryCount":2906},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2980,2981],"CVE-2026-21441","PYSEC-2026-1996",[120,2981],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2986,2987],{"type":2562,"score":2720},{"type":2599,"score":2886},[2989,2991,2993,2995,2996,2998,2999],{"type":2577,"url":2990},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2566,"url":2992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2571,"url":2994},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2574,"url":2895},{"type":2577,"url":2997},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2574,"url":2897},{"type":2566,"url":3000},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2901,2902,2903,2904,2905],{"id":121,"slug":3003,"dossier":46,"summary":3004,"aliases":3005,"sourceIds":3008,"published":3009,"modified":3010,"checkedAt":7,"severity":3011,"references":3014,"versionKeys":3027,"packageCount":32,"repositoryCount":32},"ghsa-38vq-g6vr-w8wf-91b7e775","Sentencepiece has a a heap overflow issue",[3006,3007],"CVE-2026-1260","PYSEC-2026-1909",[121,3007],"2026-01-22T18:30:39Z","2026-07-07T17:56:14.124737800Z",[3012],{"type":2599,"score":3013},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3015,3017,3019,3021,3023,3025],{"type":2566,"url":3016},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1260",{"type":2577,"url":3018},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Fcommit\u002Fd856b67fdb3492e035489abf9b3aaf486144b2c0",{"type":2574,"url":3020},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece",{"type":2577,"url":3022},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Freleases\u002Ftag\u002Fv0.2.1",{"type":2574,"url":3024},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsentencepiece",{"type":2566,"url":3026},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38vq-g6vr-w8wf",[3028],"pypi:sentencepiece@0.2.0",{"id":122,"slug":3030,"dossier":46,"summary":3031,"aliases":3032,"sourceIds":3035,"published":3036,"modified":3037,"checkedAt":7,"severity":3038,"references":3041,"versionKeys":3054,"packageCount":32,"repositoryCount":616},"ghsa-3c37-wwvx-h642-8520854e","cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads",[3033,3034],"CVE-2026-26209","PYSEC-2026-2123",[122,3034],"2026-03-23T19:16:39.530Z","2026-07-13T07:26:16.551981788Z",[3039],{"type":2562,"score":3040},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3042,3044,3046,3048,3050,3052],{"type":2632,"url":3043},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-3c37-wwvx-h642",{"type":2566,"url":3045},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26209",{"type":2571,"url":3047},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F275",{"type":2571,"url":3049},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Fe61a5f365ba610d5907a0ae1bc72769bba34294b",{"type":2574,"url":3051},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2",{"type":2566,"url":3053},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Freleases\u002Ftag\u002F5.9.0",[3055,3056],"pypi:cbor2@5.7.0","pypi:cbor2@5.7.1",{"id":123,"slug":3058,"dossier":46,"summary":3059,"aliases":3060,"sourceIds":3063,"published":3064,"modified":3065,"checkedAt":7,"severity":3066,"references":3069,"versionKeys":3084,"packageCount":32,"repositoryCount":616},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[3061,3062],"CVE-2025-6242","PYSEC-2026-2011",[123,3062],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[3067],{"type":2562,"score":3068},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[3070,3072,3074,3076,3078,3080,3081,3082],{"type":2577,"url":3071},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":2566,"url":3073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":2577,"url":3075},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":2577,"url":3077},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":2577,"url":3079},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":2574,"url":2830},{"type":2574,"url":2826},{"type":2566,"url":3083},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[2848,3085],"pypi:vllm@0.8.5.post1",{"id":124,"slug":3087,"dossier":46,"summary":3088,"aliases":3089,"sourceIds":3092,"published":3093,"modified":3094,"checkedAt":7,"severity":3095,"references":3098,"versionKeys":3120,"packageCount":32,"repositoryCount":105},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[3090,3091],"CVE-2026-34756","PYSEC-2026-2298",[124,3091],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[3096],{"type":2562,"score":3097},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3099,3101,3103,3105,3107,3109,3111,3113,3115,3117,3118],{"type":2571,"url":3100},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":2566,"url":3102},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":2571,"url":3104},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":2571,"url":3106},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":2566,"url":3108},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":2566,"url":3110},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":2577,"url":3112},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":2928,"url":3114},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":2577,"url":3116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":2574,"url":2830},{"type":2577,"url":3119},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[2848,2849,3085],{"id":125,"slug":3122,"dossier":46,"summary":3123,"aliases":3124,"sourceIds":3127,"published":3128,"modified":3129,"checkedAt":7,"severity":3130,"references":3134,"versionKeys":3143,"packageCount":32,"repositoryCount":484},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[3125,3126],"CVE-2026-34517","PYSEC-2026-2099",[125,3126],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[3131,3133],{"type":2599,"score":3132},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2562,"score":2657},[3135,3137,3139,3141,3142],{"type":2571,"url":3136},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2566,"url":3138},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2571,"url":3140},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":126,"slug":3145,"dossier":46,"summary":3146,"aliases":3147,"sourceIds":3150,"published":3151,"modified":3152,"checkedAt":7,"severity":3153,"references":3156,"versionKeys":3170,"packageCount":32,"repositoryCount":105},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[3148,3149],"CVE-2026-47155","PYSEC-2026-2301",[126,3149],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[3154],{"type":2562,"score":3155},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[3157,3159,3161,3163,3165,3167,3168],{"type":2566,"url":3158},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":2566,"url":3160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":2928,"url":3162},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":2571,"url":3164},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":2577,"url":3166},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":2574,"url":2830},{"type":2566,"url":3169},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[2848,2849,3085],{"id":127,"slug":3172,"dossier":46,"summary":3173,"aliases":3174,"sourceIds":3178,"published":3179,"modified":3180,"checkedAt":7,"severity":3181,"references":3184,"versionKeys":3197,"packageCount":32,"repositoryCount":105},"ghsa-42h5-h8qh-vv9v-4d35a1ef","MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem",[3175,3176,3177],"BIT-mlflow-2026-2614","CVE-2026-2614","PYSEC-2026-2654",[127,3177],"2026-05-11T21:31:35Z","2026-07-13T16:42:45.636199436Z",[3182],{"type":2562,"score":3183},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3185,3187,3189,3191,3193,3195],{"type":2566,"url":3186},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2614",{"type":2577,"url":3188},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6e801f4259d96804c73107315b24cef0f6aa115a",{"type":2574,"url":3190},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow",{"type":2577,"url":3192},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F19380271-3fbf-4beb-987e-6fd7069c55e6",{"type":2574,"url":3194},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmlflow",{"type":2566,"url":3196},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42h5-h8qh-vv9v",[3198,3199,3200],"pypi:mlflow@3.1.1","pypi:mlflow@3.4.0","pypi:mlflow@3.8.1",{"id":128,"slug":3202,"dossier":46,"summary":3203,"aliases":3204,"sourceIds":3208,"published":3209,"modified":3210,"checkedAt":7,"severity":3211,"references":3216,"versionKeys":3234,"packageCount":32,"repositoryCount":105},"ghsa-46r5-x6jq-v8g6-fda1ffbe","MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint",[3205,3206,3207],"BIT-mlflow-2026-33866","CVE-2026-33866","PYSEC-2026-94",[128,3207],"2026-04-07T13:16:47Z","2026-06-10T17:02:20.749690187Z",[3212,3214],{"type":2562,"score":3213},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2599,"score":3215},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3217,3219,3221,3223,3225,3227,3228,3230,3232],{"type":2566,"url":3218},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33866",{"type":2571,"url":3220},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21708",{"type":2577,"url":3222},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F005b959cacda05d1423356cfcbd9ebeda8ff96a7",{"type":2632,"url":3224},"https:\u002F\u002Fafine.com\u002Fblogs\u002Fattacking-mlflow-how-ml-artifacts-become-attack-vectors",{"type":2577,"url":3226},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865",{"type":2574,"url":3190},{"type":2577,"url":3229},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-94.yaml",{"type":2566,"url":3231},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865\u002F",{"type":2566,"url":3233},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-46r5-x6jq-v8g6",[3198,3199,3200],{"id":129,"slug":3236,"dossier":46,"summary":3237,"aliases":3238,"sourceIds":3241,"published":3242,"modified":3243,"checkedAt":7,"severity":3244,"references":3247,"versionKeys":3260,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[3239,3240],"CVE-2025-50182","PYSEC-2026-1997",[129,3240],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[3245],{"type":2562,"score":3246},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3248,3250,3252,3254,3255,3257,3258],{"type":2577,"url":3249},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2566,"url":3251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2571,"url":3253},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2574,"url":2895},{"type":2577,"url":3256},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2574,"url":2897},{"type":2566,"url":3259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2901,2902,2903,2904],{"id":130,"slug":3262,"dossier":46,"summary":3263,"aliases":3264,"sourceIds":3267,"published":3268,"modified":3269,"checkedAt":7,"severity":3270,"references":3274,"versionKeys":3280,"packageCount":32,"repositoryCount":484},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[3265,3266],"CVE-2026-54273","PYSEC-2026-2107",[130,3266],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[3271,3273],{"type":2599,"score":3272},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2562,"score":2720},[3275,3277,3279],{"type":2566,"url":3276},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2571,"url":3278},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2574,"url":2725},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":131,"slug":3282,"dossier":46,"summary":3283,"aliases":3284,"sourceIds":3287,"published":3288,"modified":3289,"checkedAt":7,"severity":3290,"references":3294,"versionKeys":3298,"packageCount":32,"repositoryCount":484},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3285,3286],"CVE-2026-54275","PYSEC-2026-237",[131,3286],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[3291,3293],{"type":2599,"score":3292},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2562,"score":2720},[3295,3297],{"type":2566,"url":3296},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2574,"url":2725},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":132,"slug":3300,"dossier":46,"summary":3301,"aliases":3302,"sourceIds":3305,"published":3306,"modified":3307,"checkedAt":7,"severity":3308,"references":3311,"versionKeys":3323,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[3303,3304],"CVE-2025-46570","PYSEC-2025-53",[132,3304],"2025-05-28T18:02:24Z","2026-02-04T03:48:23.274649Z",[3309],{"type":2562,"score":3310},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3312,3314,3316,3318,3320,3322],{"type":2566,"url":3313},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":2566,"url":3315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":2928,"url":3317},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":2571,"url":3319},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":2577,"url":3321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":2574,"url":2830},[3085],{"id":133,"slug":3325,"dossier":46,"summary":3326,"aliases":3327,"sourceIds":3330,"published":3331,"modified":3332,"checkedAt":7,"severity":3333,"references":3336,"versionKeys":3364,"packageCount":32,"repositoryCount":105},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[3328,3329],"CVE-2026-22778","PYSEC-2026-565",[133,3329],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[3334],{"type":2562,"score":3335},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3337,3339,3341,3343,3345,3347,3348,3350,3351,3353,3355,3357,3359,3360,3361,3362],{"type":2577,"url":3338},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2566,"url":3340},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":2577,"url":3342},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":2577,"url":3344},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":2577,"url":3346},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":2574,"url":2826},{"type":2577,"url":3349},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":2574,"url":2830},{"type":2577,"url":3352},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":2566,"url":3354},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2577,"url":3356},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":2577,"url":3358},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":2577,"url":2842},{"type":2577,"url":2844},{"type":2577,"url":2846},{"type":2577,"url":3363},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[2848,2849,3085],{"id":134,"slug":3366,"dossier":46,"summary":3367,"aliases":3368,"sourceIds":3371,"published":3372,"modified":3373,"checkedAt":7,"severity":3374,"references":3377,"versionKeys":3390,"packageCount":32,"repositoryCount":616},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[3369,3370],"CVE-2025-6921","PYSEC-2026-1980",[134,3370],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[3375],{"type":2562,"score":3376},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3378,3380,3382,3384,3385,3387,3388],{"type":2566,"url":3379},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2577,"url":3381},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2577,"url":3383},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2574,"url":2630},{"type":2577,"url":3386},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2574,"url":2972},{"type":2566,"url":3389},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2637,2638],{"id":135,"slug":3392,"dossier":46,"summary":3393,"aliases":3394,"sourceIds":3398,"published":3399,"modified":3400,"checkedAt":7,"severity":3401,"references":3404,"versionKeys":3415,"packageCount":32,"repositoryCount":32},"ghsa-4x5p-f36r-mxxr-f02b9eff","mlflow Creates of Temporary File in Directory with Insecure Permissions",[3395,3396,3397],"BIT-mlflow-2025-10279","CVE-2025-10279","PYSEC-2026-1639",[135,3397],"2026-02-02T12:31:14Z","2026-07-07T17:56:10.135090160Z",[3402],{"type":2562,"score":3403},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3405,3407,3409,3410,3412,3413],{"type":2566,"url":3406},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-10279",{"type":2577,"url":3408},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a",{"type":2574,"url":3190},{"type":2577,"url":3411},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F01d3b81e-13d1-43aa-b91a-443aec68bdc8",{"type":2574,"url":3194},{"type":2566,"url":3414},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4x5p-f36r-mxxr",[3198],{"id":136,"slug":3417,"dossier":46,"summary":3418,"aliases":3419,"sourceIds":3421,"published":3422,"modified":3423,"checkedAt":7,"severity":3424,"references":3427,"versionKeys":3432,"packageCount":32,"repositoryCount":616},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[3420],"CVE-2026-58203",[136],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[3425],{"type":2562,"score":3426},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3428,3430],{"type":2577,"url":3429},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":2574,"url":3431},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[3433],"pypi:pydantic-settings@2.12.0",{"id":137,"slug":3435,"dossier":91,"summary":3436,"aliases":3437,"sourceIds":3440,"published":3441,"modified":3442,"checkedAt":7,"severity":3443,"references":3446,"versionKeys":3469,"packageCount":32,"repositoryCount":2906},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3438,3439],"CVE-2026-4539","PYSEC-2026-2987",[137,3439],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3444,3445],{"type":2562,"score":2919},{"type":2599,"score":2921},[3447,3449,3451,3453,3455,3457,3459,3461,3463,3465,3467],{"type":2566,"url":3448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2577,"url":3450},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2577,"url":3452},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2577,"url":3454},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2574,"url":3456},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2577,"url":3458},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2577,"url":3460},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2577,"url":3462},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2577,"url":3464},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2574,"url":3466},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2566,"url":3468},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3470,3471],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":138,"slug":3473,"dossier":46,"summary":3474,"aliases":3475,"sourceIds":3476,"published":3477,"modified":3478,"checkedAt":7,"severity":3479,"references":3481,"versionKeys":3488,"packageCount":32,"repositoryCount":65},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[138],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[3480],{"type":2562,"score":2720},[3482,3484,3486],{"type":2577,"url":3483},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2574,"url":3485},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2577,"url":3487},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[3489,3490,3491,3492,3493,3494],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":139,"slug":3496,"dossier":46,"summary":3497,"aliases":3498,"sourceIds":3502,"published":3503,"modified":3504,"checkedAt":7,"severity":3505,"references":3509,"versionKeys":3519,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3499,3500,3501],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[139,3501],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[3506,3508],{"type":2599,"score":3507},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2562,"score":3335},[3510,3512,3514,3516,3518],{"type":2566,"url":3511},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2566,"url":3513},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2577,"url":3515},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2577,"url":3517},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2574,"url":2935},[2947],{"id":140,"slug":3521,"dossier":46,"summary":3522,"aliases":3523,"sourceIds":3526,"published":3527,"modified":3528,"checkedAt":7,"severity":3529,"references":3532,"versionKeys":3544,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3524,3525],"CVE-2025-69226","PYSEC-2026-1097",[140,3525],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[3530],{"type":2599,"score":3531},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3533,3535,3537,3539,3540,3542],{"type":2577,"url":3534},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2566,"url":3536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2571,"url":3538},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2574,"url":2725},{"type":2574,"url":3541},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2566,"url":3543},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2729,2730,2731,2732,2733,2734,2735],{"id":141,"slug":3546,"dossier":46,"summary":3547,"aliases":3548,"sourceIds":3552,"published":3553,"modified":3554,"checkedAt":7,"severity":3555,"references":3558,"versionKeys":3573,"packageCount":32,"repositoryCount":532},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[3549,3550,3551],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[141,3551],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[3556],{"type":2562,"score":3557},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3559,3561,3563,3565,3567,3569,3571],{"type":2577,"url":3560},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":2566,"url":3562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":2577,"url":3564},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":2571,"url":3566},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":2574,"url":3568},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":2574,"url":3570},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":2566,"url":3572},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[3574,3575,3576,3577],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":142,"slug":3579,"dossier":46,"summary":3580,"aliases":3581,"sourceIds":3584,"published":3585,"modified":3586,"checkedAt":7,"severity":3587,"references":3591,"versionKeys":3604,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3582,3583],"CVE-2024-53981","PYSEC-2026-1851",[142,3583],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[3588,3589],{"type":2562,"score":2720},{"type":2599,"score":3590},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3592,3594,3596,3598,3600,3602],{"type":2577,"url":3593},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2566,"url":3595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2577,"url":3597},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2574,"url":3599},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2574,"url":3601},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2566,"url":3603},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3605],"pypi:python-multipart@0.0.9",{"id":143,"slug":3607,"dossier":46,"summary":3608,"aliases":3609,"sourceIds":3612,"published":3613,"modified":3614,"checkedAt":7,"severity":3615,"references":3617,"versionKeys":3628,"packageCount":32,"repositoryCount":616},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3610,3611],"CVE-2025-6638","PYSEC-2026-1981",[143,3611],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3616],{"type":2562,"score":3376},[3618,3620,3621,3622,3623,3625,3626],{"type":2566,"url":3619},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2577,"url":3381},{"type":2577,"url":3383},{"type":2574,"url":2630},{"type":2577,"url":3624},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2574,"url":2972},{"type":2566,"url":3627},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2637,2638],{"id":144,"slug":3630,"dossier":46,"summary":3631,"aliases":3632,"sourceIds":3635,"published":3636,"modified":3637,"checkedAt":7,"severity":3638,"references":3642,"versionKeys":3657,"packageCount":32,"repositoryCount":32},"ghsa-5cmr-4px5-23pc-6775b484","XGrammar affected by Denial of Service by infinite recursion grammars",[3633,3634],"CVE-2025-57809","PYSEC-2026-2054",[144,3634],"2025-08-25T20:43:45Z","2026-07-07T17:56:43.683032784Z",[3639,3640],{"type":2562,"score":2720},{"type":2599,"score":3641},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3643,3645,3647,3649,3651,3653,3655],{"type":2577,"url":3644},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",{"type":2566,"url":3646},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57809",{"type":2577,"url":3648},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fissues\u002F250",{"type":2577,"url":3650},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fcommit\u002Fb943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",{"type":2574,"url":3652},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar",{"type":2574,"url":3654},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fxgrammar",{"type":2566,"url":3656},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",[3658],"pypi:xgrammar@0.1.18",{"id":145,"slug":3660,"dossier":46,"summary":3661,"aliases":3662,"sourceIds":3665,"published":3666,"modified":3667,"checkedAt":7,"severity":3668,"references":3671,"versionKeys":3682,"packageCount":32,"repositoryCount":32},"ghsa-5h2m-4q8j-pqpj-f167fb9b","FastMCP OAuth Proxy token reuse across MCP servers",[3663,3664],"CVE-2025-69196","PYSEC-2026-2474",[145,3664],"2026-03-16T15:14:55Z","2026-07-13T16:43:46.045162193Z",[3669],{"type":2599,"score":3670},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3672,3674,3676,3678,3680],{"type":2577,"url":3673},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-5h2m-4q8j-pqpj",{"type":2566,"url":3675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69196",{"type":2574,"url":3677},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp",{"type":2574,"url":3679},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffastmcp",{"type":2566,"url":3681},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5h2m-4q8j-pqpj",[3683],"pypi:fastmcp@2.12.3",{"id":146,"slug":3685,"dossier":46,"summary":3686,"aliases":3687,"sourceIds":3690,"published":3691,"modified":3692,"checkedAt":7,"severity":3693,"references":3698,"versionKeys":3713,"packageCount":32,"repositoryCount":105},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[3688,3689],"CVE-2026-53923","PYSEC-2026-3403",[146,3689],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[3694,3696],{"type":2562,"score":3695},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2599,"score":3697},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3699,3701,3703,3705,3707,3709,3711,3712],{"type":2577,"url":3700},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2566,"url":3702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":2577,"url":3704},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":2577,"url":3706},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":2566,"url":3708},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2577,"url":3710},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2848,2849,3085],{"id":147,"slug":3715,"dossier":46,"summary":3716,"aliases":3717,"sourceIds":3721,"published":3722,"modified":3723,"checkedAt":7,"severity":3724,"references":3731,"versionKeys":3751,"packageCount":32,"repositoryCount":105},"ghsa-5qmp-p3c4-72qj-0f202987","MLflow: Deterministic sampling in dataset digest enables predictable collisions",[3718,3719,3720],"BIT-mlflow-2026-10803","CVE-2026-10803","PYSEC-2026-195",[147,3720],"2026-06-04T12:16:24.440Z","2026-07-15T18:11:16.191752741Z",[3725,3727,3729],{"type":2562,"score":3726},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2599,"score":3728},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2599,"score":3730},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3732,3734,3736,3738,3739,3741,3743,3745,3747,3749],{"type":2566,"url":3733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10803",{"type":2928,"url":3735},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fissues\u002F22419",{"type":2928,"url":3737},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F22420",{"type":2574,"url":3190},{"type":2577,"url":3740},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-195.yaml",{"type":2566,"url":3742},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10803",{"type":2566,"url":3744},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831462",{"type":2566,"url":3746},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252",{"type":2928,"url":3748},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252\u002Fcti",{"type":2577,"url":3750},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002F",[3198,3199,3200],{"id":148,"slug":3753,"dossier":46,"summary":3754,"aliases":3755,"sourceIds":3759,"published":3760,"modified":3761,"checkedAt":7,"severity":3762,"references":3767,"versionKeys":3784,"packageCount":32,"repositoryCount":616},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3756,3757,3758],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[148,3758],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3763,3765],{"type":2599,"score":3764},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2562,"score":3766},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3768,3770,3772,3774,3776,3778,3780,3782],{"type":2632,"url":3769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2566,"url":3771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2928,"url":3773},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2571,"url":3775},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2577,"url":3777},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2574,"url":3779},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2577,"url":3781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2580,"url":3783},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3785,3786],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":149,"slug":3788,"dossier":46,"summary":3789,"aliases":3790,"sourceIds":3793,"published":3794,"modified":3795,"checkedAt":7,"severity":3796,"references":3798,"versionKeys":3807,"packageCount":32,"repositoryCount":561},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[3791,3792],"CVE-2026-53539","PYSEC-2026-3036",[149,3792],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[3797],{"type":2562,"score":2720},[3799,3801,3802,3803,3805],{"type":2577,"url":3800},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2574,"url":3599},{"type":2574,"url":3601},{"type":2566,"url":3804},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2566,"url":3806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[3808,3809,3605],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":150,"slug":3811,"dossier":46,"summary":3812,"aliases":3813,"sourceIds":3817,"published":3818,"modified":3819,"checkedAt":7,"severity":3820,"references":3824,"versionKeys":3833,"packageCount":32,"repositoryCount":3839},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3814,3815,3816],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[150,3816],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3821,3822],{"type":2562,"score":2923},{"type":2599,"score":3823},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3825,3827,3829,3831],{"type":2566,"url":3826},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2566,"url":3828},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2574,"url":3830},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2566,"url":3832},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3834,3835,3836,3837,3838],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":151,"slug":3841,"dossier":46,"summary":3842,"aliases":3843,"sourceIds":3846,"published":3847,"modified":3848,"checkedAt":7,"severity":3849,"references":3855,"versionKeys":3866,"packageCount":32,"repositoryCount":484},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[3844,3845],"CVE-2026-34520","PYSEC-2026-2102",[151,3845],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[3850,3852,3853],{"type":2562,"score":3851},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2599,"score":2861},{"type":2599,"score":3854},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3856,3858,3860,3862,3863,3864],{"type":2571,"url":3857},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2566,"url":3859},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2571,"url":3861},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2574,"url":2725},{"type":2566,"url":2873},{"type":2577,"url":3865},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2729,2730,2731,2732,2733,2734,2735,2736],{"id":152,"slug":3868,"dossier":46,"summary":3869,"aliases":3870,"sourceIds":3873,"published":3874,"modified":3875,"checkedAt":7,"severity":3876,"references":3879,"versionKeys":3885,"packageCount":32,"repositoryCount":484},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[3871,3872],"CVE-2026-54277","PYSEC-2026-2110",[152,3872],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[3877,3878],{"type":2599,"score":3272},{"type":2562,"score":2720},[3880,3882,3884],{"type":2566,"url":3881},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2571,"url":3883},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2574,"url":2725},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":153,"slug":3887,"dossier":46,"summary":3888,"aliases":3889,"sourceIds":3892,"published":3893,"modified":3894,"checkedAt":7,"severity":3895,"references":3897,"versionKeys":3918,"packageCount":32,"repositoryCount":65},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[3890,3891],"CVE-2026-23490","PYSEC-2026-1810",[153,3891],"2026-01-16T19:19:25Z","2026-07-07T17:56:27.705413895Z",[3896],{"type":2562,"score":2720},[3898,3900,3902,3904,3906,3908,3910,3912,3914,3916],{"type":2577,"url":3899},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2566,"url":3901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2577,"url":3903},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2577,"url":3905},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2574,"url":3907},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2577,"url":3909},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2577,"url":3911},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2577,"url":3913},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",{"type":2574,"url":3915},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyasn1",{"type":2566,"url":3917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",[3919],"pypi:pyasn1@0.6.1",{"id":154,"slug":3921,"dossier":46,"summary":3922,"aliases":3923,"sourceIds":3927,"published":3928,"modified":3929,"checkedAt":7,"severity":3930,"references":3933,"versionKeys":3943,"packageCount":32,"repositoryCount":105},"ghsa-65h7-c7c4-mghx-fc09466d","MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability",[3924,3925,3926],"BIT-mlflow-2026-2393","CVE-2026-2393","PYSEC-2026-2219",[154,3926],"2026-05-11T18:16:31.500Z","2026-07-13T16:45:08.114491424Z",[3931],{"type":2562,"score":3932},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3934,3936,3938,3939,3941],{"type":2566,"url":3935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2393",{"type":2571,"url":3937},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F64aa0ab7207f9c649b59ba1a5f40d82196817389",{"type":2574,"url":3190},{"type":2632,"url":3940},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F04ef100d-06b5-4a70-95b1-b7be23aa8150",{"type":2566,"url":3942},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-65h7-c7c4-mghx",[3198,3199,3200],{"id":155,"slug":3945,"dossier":91,"summary":3946,"aliases":3947,"sourceIds":3950,"published":3951,"modified":3952,"checkedAt":7,"severity":3953,"references":3957,"versionKeys":3966,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3948,3949],"CVE-2026-45409","PYSEC-2026-215",[155,3949],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3954,3955],{"type":2562,"score":2657},{"type":2599,"score":3956},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3958,3960,3962,3964],{"type":2566,"url":3959},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2566,"url":3961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2574,"url":3963},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2577,"url":3965},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3967,3968,3969],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":156,"slug":3971,"dossier":46,"summary":3972,"aliases":3973,"sourceIds":3976,"published":3977,"modified":3978,"checkedAt":7,"severity":3979,"references":3984,"versionKeys":3995,"packageCount":32,"repositoryCount":532},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[3974,3975],"CVE-2026-27205","PYSEC-2026-2151",[156,3975],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[3980,3982],{"type":2599,"score":3981},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2562,"score":3983},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3985,3987,3989,3991,3993],{"type":2566,"url":3986},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":2566,"url":3988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":2571,"url":3990},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":2574,"url":3992},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":2566,"url":3994},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[3996,3997,3998,3999],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":157,"slug":4001,"dossier":46,"summary":4002,"aliases":4003,"sourceIds":4006,"published":4007,"modified":4008,"checkedAt":7,"severity":4009,"references":4011,"versionKeys":4022,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[4004,4005],"CVE-2025-69224","PYSEC-2026-1099",[157,4005],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[4010],{"type":2599,"score":2861},[4012,4014,4016,4018,4019,4020],{"type":2577,"url":4013},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2566,"url":4015},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2571,"url":4017},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":4021},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2729,2730,2731,2732,2733,2734,2735],{"id":158,"slug":4024,"dossier":46,"summary":4025,"aliases":4026,"sourceIds":4029,"published":4030,"modified":4031,"checkedAt":7,"severity":4032,"references":4034,"versionKeys":4053,"packageCount":32,"repositoryCount":105},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[4027,4028],"CVE-2025-62426","PYSEC-2026-2012",[158,4028],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[4033],{"type":2562,"score":3097},[4035,4037,4039,4041,4043,4045,4047,4048,4050,4052],{"type":2577,"url":4036},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2566,"url":4038},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":2577,"url":4040},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":2577,"url":4042},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":2566,"url":4044},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2577,"url":4046},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":2574,"url":2830},{"type":2577,"url":4049},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":2577,"url":4051},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":2574,"url":2826},[2848,2849,3085],{"id":159,"slug":4055,"dossier":46,"summary":4056,"aliases":4057,"sourceIds":4060,"published":4061,"modified":4062,"checkedAt":7,"severity":4063,"references":4068,"versionKeys":4080,"packageCount":32,"repositoryCount":494},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[4058,4059],"CVE-2026-1839","PYSEC-2026-2288",[159,4059],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[4064,4066],{"type":2562,"score":4065},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2562,"score":4067},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4069,4071,4073,4074,4076,4078],{"type":2566,"url":4070},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2571,"url":4072},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2574,"url":2630},{"type":2577,"url":4075},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2632,"url":4077},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2566,"url":4079},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2637,2638,2639,2640,2641,2642,2643],{"id":160,"slug":4082,"dossier":46,"summary":4083,"aliases":4084,"sourceIds":4087,"published":4088,"modified":4089,"checkedAt":7,"severity":4090,"references":4095,"versionKeys":4109,"packageCount":32,"repositoryCount":105},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[4085,4086],"CVE-2026-34760","PYSEC-2026-2299",[160,4086],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[4091,4093],{"type":2562,"score":4092},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":2562,"score":4094},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[4096,4098,4100,4102,4104,4106,4107],{"type":2566,"url":4097},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":2566,"url":4099},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":2928,"url":4101},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":2571,"url":4103},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":2577,"url":4105},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":2574,"url":2830},{"type":2566,"url":4108},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[2848,2849,3085],{"id":161,"slug":4111,"dossier":46,"summary":4112,"aliases":4113,"sourceIds":4116,"published":4117,"modified":4118,"checkedAt":7,"severity":4119,"references":4121,"versionKeys":4134,"packageCount":32,"repositoryCount":616},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[4114,4115],"CVE-2025-61620","PYSEC-2026-2013",[161,4115],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[4120],{"type":2562,"score":3097},[4122,4124,4126,4128,4129,4130,4132],{"type":2577,"url":4123},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2577,"url":4125},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":2577,"url":4127},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":2574,"url":2830},{"type":2574,"url":2826},{"type":2566,"url":4131},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2566,"url":4133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[2848,3085],{"id":162,"slug":4136,"dossier":46,"summary":4137,"aliases":4138,"sourceIds":4141,"published":4142,"modified":4143,"checkedAt":7,"severity":4144,"references":4146,"versionKeys":4157,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[4139,4140],"CVE-2025-69228","PYSEC-2026-1100",[162,4140],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[4145],{"type":2599,"score":3272},[4147,4149,4151,4153,4154,4155],{"type":2577,"url":4148},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2566,"url":4150},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2571,"url":4152},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":4156},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2729,2730,2731,2732,2733,2734,2735],{"id":163,"slug":4159,"dossier":46,"summary":4160,"aliases":4161,"sourceIds":4164,"published":4165,"modified":4166,"checkedAt":7,"severity":4167,"references":4170,"versionKeys":4179,"packageCount":32,"repositoryCount":561},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4162,4163],"CVE-2026-53538","PYSEC-2026-3037",[163,4163],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[4168],{"type":2562,"score":4169},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4171,4173,4174,4175,4177],{"type":2577,"url":4172},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2574,"url":3599},{"type":2574,"url":3601},{"type":2566,"url":4176},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2566,"url":4178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[3808,3809,3605],{"id":164,"slug":4181,"dossier":46,"summary":4182,"aliases":4183,"sourceIds":4186,"published":4187,"modified":4188,"checkedAt":7,"severity":4189,"references":4191,"versionKeys":4202,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4184,4185],"CVE-2025-69223","PYSEC-2026-1101",[164,4185],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[4190],{"type":2562,"score":2720},[4192,4194,4196,4198,4199,4200],{"type":2577,"url":4193},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2566,"url":4195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2571,"url":4197},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":4201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2729,2730,2731,2732,2733,2734,2735],{"id":165,"slug":4204,"dossier":46,"summary":4205,"aliases":4206,"sourceIds":4209,"published":4210,"modified":4211,"checkedAt":7,"severity":4212,"references":4214,"versionKeys":4231,"packageCount":32,"repositoryCount":105},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[4207,4208],"CVE-2026-54233","PYSEC-2026-3404",[165,4208],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[4213],{"type":2562,"score":3097},[4215,4217,4219,4221,4223,4225,4227,4228,4230],{"type":2577,"url":4216},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2566,"url":4218},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":2577,"url":4220},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":2577,"url":4222},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":2566,"url":4224},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2577,"url":4226},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":2574,"url":2830},{"type":2577,"url":4229},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":2574,"url":2826},[2848,2849,3085],{"id":166,"slug":4233,"dossier":46,"summary":4234,"aliases":4235,"sourceIds":4238,"published":4239,"modified":4240,"checkedAt":7,"severity":4241,"references":4243,"versionKeys":4257,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[4236,4237],"CVE-2025-48942","PYSEC-2025-54",[166,4237],"2025-05-28T19:41:53Z","2026-02-04T02:16:15.150519Z",[4242],{"type":2562,"score":3097},[4244,4246,4248,4250,4252,4254,4256],{"type":2632,"url":4245},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":2566,"url":4247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":2928,"url":4249},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":2928,"url":4251},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":2571,"url":4253},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":2577,"url":4255},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":2574,"url":2830},[3085],{"id":167,"slug":4259,"dossier":46,"summary":4260,"aliases":4261,"sourceIds":4264,"published":4265,"modified":4266,"checkedAt":7,"severity":4267,"references":4269,"versionKeys":4280,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4262,4263],"CVE-2024-12720","PYSEC-2026-1982",[167,4263],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[4268],{"type":2562,"score":3376},[4270,4272,4274,4275,4277,4278],{"type":2566,"url":4271},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2577,"url":4273},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2574,"url":2630},{"type":2577,"url":4276},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2574,"url":2972},{"type":2566,"url":4279},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2637],{"id":168,"slug":4282,"dossier":46,"summary":4283,"aliases":4284,"sourceIds":4286,"published":4287,"modified":4288,"checkedAt":7,"severity":4289,"references":4291,"versionKeys":4300,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[4285],"CVE-2026-57585",[168],"2026-06-19T21:42:55Z","2026-07-08T08:26:50.587609817Z",[4290],{"type":2562,"score":2720},[4292,4294,4296,4298],{"type":2577,"url":4293},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":2577,"url":4295},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":2574,"url":4297},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":2577,"url":4299},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[4301,4302,4303],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":169,"slug":4305,"dossier":46,"summary":4306,"aliases":4307,"sourceIds":4310,"published":4311,"modified":4312,"checkedAt":7,"severity":4313,"references":4315,"versionKeys":4348,"packageCount":32,"repositoryCount":616},"ghsa-6wgj-66m2-xxp2-37eb592b","Ray has arbitrary code execution via jobs submission API",[4308,4309],"CVE-2023-48022","PYSEC-2026-517",[169,4309],"2023-11-28T09:30:26Z","2026-07-01T20:23:03.600233Z",[4314],{"type":2562,"score":3335},[4316,4318,4320,4322,4324,4326,4328,4330,4332,4334,4336,4338,4340,4342,4344,4346],{"type":2566,"url":4317},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-48022",{"type":2577,"url":4319},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F978947083b1e192dba61ef653c863b11d56b0936",{"type":2577,"url":4321},"https:\u002F\u002Fatlas.mitre.org\u002Fstudies\u002FAML.CS0023",{"type":2577,"url":4323},"https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fray-versions-2-6-3-2-8-0",{"type":2577,"url":4325},"https:\u002F\u002Fconsole.vulncheck.com\u002Fcve\u002FCVE-2023-48022",{"type":2577,"url":4327},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Findex.html",{"type":2577,"url":4329},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Ftoken-auth.html",{"type":2566,"url":4331},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xg2h-7cxj-3gvh",{"type":2577,"url":4333},"https:\u002F\u002Fgithub.com\u002Fhonysyang\u002FRay",{"type":2574,"url":4335},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray",{"type":2577,"url":4337},"https:\u002F\u002Fwww.anyscale.com\u002Fblog\u002Fupdate-on-ray-cve-2023-48022-new-verification-tooling-available",{"type":2577,"url":4339},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-attack-ai-workloads-actively-exploited-in-the-wild",{"type":2577,"url":4341},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fshadowray-cve-2023-48022-exploit",{"type":2577,"url":4343},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fthe-story-of-shadowray-cve-2023-48022",{"type":2577,"url":4345},"https:\u002F\u002Fwww.vulncheck.com\u002Fblog\u002Finitial-access-intelligence-august-2024",{"type":2574,"url":4347},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fray",[4349,4350],"pypi:ray@2.45.0","pypi:ray@2.49.1",{"id":170,"slug":4352,"dossier":46,"summary":4353,"aliases":4354,"sourceIds":4357,"published":4358,"modified":4359,"checkedAt":7,"severity":4360,"references":4365,"versionKeys":4376,"packageCount":32,"repositoryCount":32},"ghsa-7432-952r-cw78-bf3fc71f","Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle",[4355,4356],"CVE-2026-28490","PYSEC-2026-2116",[170,4356],"2026-03-16T15:17:28Z","2026-07-13T07:26:14.887077371Z",[4361,4363],{"type":2599,"score":4362},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2562,"score":4364},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4366,4368,4370,4372,4374],{"type":2632,"url":4367},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-7432-952r-cw78",{"type":2566,"url":4369},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28490",{"type":2571,"url":4371},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F48b345f29f6c459f11c6a40162b6c0b742ef2e22",{"type":2574,"url":4373},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib",{"type":2566,"url":4375},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.9",[4377],"pypi:authlib@1.6.4",{"id":171,"slug":4379,"dossier":46,"summary":4380,"aliases":4381,"sourceIds":4384,"published":4385,"modified":4386,"checkedAt":7,"severity":4387,"references":4392,"versionKeys":4401,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[4382,4383],"CVE-2026-44243","PYSEC-2026-2162",[171,4383],"2026-05-06T19:38:48Z","2026-07-13T07:26:30.186818349Z",[4388,4390],{"type":2562,"score":4389},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2599,"score":4391},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4393,4395,4397,4399],{"type":2632,"url":4394},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":2566,"url":4396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":2574,"url":4398},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":2571,"url":4400},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[4402,4403,4404],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":172,"slug":4406,"dossier":46,"summary":4407,"aliases":4408,"sourceIds":4412,"published":4413,"modified":4414,"checkedAt":7,"severity":4415,"references":4418,"versionKeys":4428,"packageCount":32,"repositoryCount":105},"ghsa-75cm-x2w3-8mgf-213b4d71","MLflow: unauthenticated access to certain FastAPI routes",[4409,4410,4411],"BIT-mlflow-2026-2652","CVE-2026-2652","PYSEC-2026-2221",[172,4411],"2026-05-15T03:16:23.127Z","2026-07-13T16:45:09.381556404Z",[4416],{"type":2562,"score":4417},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[4419,4421,4423,4424,4426],{"type":2566,"url":4420},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2652",{"type":2571,"url":4422},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fbb62e773263c14e9ba4d1a82fe72d0de2442c6aa",{"type":2574,"url":3190},{"type":2632,"url":4425},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F5aeff5f0-49c7-4180-b5cb-c9a046f16756",{"type":2566,"url":4427},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-75cm-x2w3-8mgf",[3198,3199,3200],{"id":173,"slug":4430,"dossier":46,"summary":4431,"aliases":4432,"sourceIds":4435,"published":4436,"modified":4437,"checkedAt":7,"severity":4438,"references":4441,"versionKeys":4454,"packageCount":32,"repositoryCount":532},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[4433,4434],"CVE-2025-66034","PYSEC-2026-1389",[173,4434],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[4439],{"type":2562,"score":4440},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[4442,4444,4446,4448,4450,4452],{"type":2577,"url":4443},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2566,"url":4445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2577,"url":4447},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2574,"url":4449},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2574,"url":4451},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2566,"url":4453},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[4455,4456,4457,4458,4459],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":174,"slug":4461,"dossier":46,"summary":4462,"aliases":4463,"sourceIds":4466,"published":4467,"modified":4468,"checkedAt":7,"severity":4469,"references":4471,"versionKeys":4509,"packageCount":32,"repositoryCount":616},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[4464,4465],"CVE-2026-27893","PYSEC-2026-2297",[174,4465],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[4470],{"type":2562,"score":2813},[4472,4474,4476,4478,4480,4482,4483,4485,4487,4489,4491,4493,4495,4497,4499,4501,4503,4505,4507],{"type":2566,"url":4473},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":2566,"url":4475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":2928,"url":4477},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":2571,"url":4479},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":2577,"url":4481},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":2574,"url":2830},{"type":2577,"url":4484},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":2928,"url":4486},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":2577,"url":4488},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":2566,"url":4490},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":2566,"url":4492},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":2566,"url":4494},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":2566,"url":4496},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2566,"url":4498},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2566,"url":4500},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":2566,"url":4502},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":2566,"url":4504},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":2566,"url":4506},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":2566,"url":4508},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[2848,2849],{"id":175,"slug":4511,"dossier":46,"summary":3474,"aliases":4512,"sourceIds":4515,"published":4516,"modified":4517,"checkedAt":7,"severity":4518,"references":4519,"versionKeys":4537,"packageCount":32,"repositoryCount":105},"ghsa-79v4-65xg-pq4g-b911b371",[4513,4514],"CVE-2024-12797","PYSEC-2026-1284",[175,4514],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[4520,4522,4524,4526,4528,4530,4531,4533,4535],{"type":2577,"url":4521},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2566,"url":4523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2577,"url":4525},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2577,"url":4527},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2577,"url":4529},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2574,"url":3485},{"type":2577,"url":4532},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2574,"url":4534},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2566,"url":4536},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[3489,3490,3491],{"id":176,"slug":4539,"dossier":46,"summary":4540,"aliases":4541,"sourceIds":4544,"published":4545,"modified":4546,"checkedAt":7,"severity":4547,"references":4549,"versionKeys":4566,"packageCount":32,"repositoryCount":561},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4542,4543],"CVE-2025-62727","PYSEC-2026-1942",[176,4543],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[4548],{"type":2562,"score":2720},[4550,4552,4554,4556,4559,4561,4563,4564],{"type":2577,"url":4551},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2566,"url":4553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2571,"url":4555},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4557,"url":4558},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2574,"url":4560},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2577,"url":4562},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2574,"url":2700},{"type":2566,"url":4565},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2705,2706,4567,4568],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":177,"slug":4570,"dossier":46,"summary":4571,"aliases":4572,"sourceIds":4575,"published":4576,"modified":4577,"checkedAt":7,"severity":4578,"references":4581,"versionKeys":4598,"packageCount":32,"repositoryCount":3839},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4573,4574],"CVE-2026-0994","PYSEC-2026-1805",[177,4574],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[4579],{"type":2599,"score":4580},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4582,4584,4586,4588,4590,4592,4594,4596],{"type":2566,"url":4583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2577,"url":4585},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2577,"url":4587},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2577,"url":4589},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2577,"url":4591},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2574,"url":4593},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2574,"url":4595},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2566,"url":4597},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4599,4600,4601,4602,4603,4604,4605,4606,4607],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":178,"slug":4609,"dossier":46,"summary":4610,"aliases":4611,"sourceIds":4614,"published":4615,"modified":4616,"checkedAt":7,"severity":4617,"references":4621,"versionKeys":4636,"packageCount":32,"repositoryCount":105},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[4612,4613],"CVE-2026-54235","PYSEC-2026-3405",[178,4613],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[4618,4620],{"type":2562,"score":4619},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2599,"score":3956},[4622,4624,4626,4628,4630,4632,4634,4635],{"type":2577,"url":4623},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2566,"url":4625},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":2577,"url":4627},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":2577,"url":4629},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":2566,"url":4631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2577,"url":4633},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2848,2849,3085],{"id":179,"slug":4638,"dossier":46,"summary":4639,"aliases":4640,"sourceIds":4643,"published":4644,"modified":4645,"checkedAt":7,"severity":4646,"references":4649,"versionKeys":4658,"packageCount":32,"repositoryCount":105},"ghsa-7qhf-v65m-g5f3-235f2d72","mlflow: FastAPI job endpoints under `\u002Fajax-api\u002F3.0\u002Fjobs\u002F*` are not protected by authentication or authorization",[4641,4642],"CVE-2026-0545","PYSEC-2026-419",[179,4642],"2026-04-03T18:31:23Z","2026-07-01T20:22:58.301401Z",[4647],{"type":2562,"score":4648},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4650,4652,4653,4655,4656],{"type":2566,"url":4651},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0545",{"type":2574,"url":3190},{"type":2577,"url":4654},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fb2e5b028-9541-4d29-8703-a76f1a3734d8",{"type":2574,"url":3194},{"type":2566,"url":4657},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7qhf-v65m-g5f3",[3198,3199,3200],{"id":180,"slug":4660,"dossier":46,"summary":4661,"aliases":4662,"sourceIds":4665,"published":4666,"modified":4667,"checkedAt":7,"severity":4668,"references":4671,"versionKeys":4692,"packageCount":32,"repositoryCount":105},"ghsa-7rgv-gqhr-fxg3-3d33cce2","xgrammar vulnerable to DoS via multi-layer nesting",[4663,4664],"CVE-2026-25048","PYSEC-2026-2322",[180,4664],"2026-03-05T16:16:15.853Z","2026-07-13T07:26:24.793294058Z",[4669,4670],{"type":2599,"score":3590},{"type":2562,"score":2720},[4672,4674,4676,4677,4679,4681,4683,4684,4686,4688,4690],{"type":2632,"url":4673},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-7rgv-gqhr-fxg3",{"type":2566,"url":4675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25048",{"type":2574,"url":3652},{"type":2566,"url":4678},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Freleases\u002Ftag\u002Fv0.1.32",{"type":2577,"url":4680},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25048",{"type":2577,"url":4682},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25048.json",{"type":2566,"url":4498},{"type":2566,"url":4685},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5809",{"type":2566,"url":4687},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6761",{"type":2566,"url":4689},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6762",{"type":2928,"url":4691},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444840",[3658,4693,4694],"pypi:xgrammar@0.1.21","pypi:xgrammar@0.1.25",{"id":181,"slug":4696,"dossier":46,"summary":4697,"aliases":4698,"sourceIds":4701,"published":4702,"modified":4703,"checkedAt":7,"severity":4704,"references":4706,"versionKeys":4710,"packageCount":32,"repositoryCount":494},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[4699,4700],"CVE-2026-54283","PYSEC-2026-249",[181,4700],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[4705],{"type":2562,"score":2720},[4707,4709],{"type":2566,"url":4708},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2574,"url":4560},[2704,2705,2706,4567,4568,4711,4712],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":182,"slug":4714,"dossier":46,"summary":4715,"aliases":4716,"sourceIds":4720,"published":4721,"modified":4722,"checkedAt":7,"severity":4723,"references":4726,"versionKeys":4762,"packageCount":32,"repositoryCount":494},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[4717,4718,4719],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[182,4718],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[4724],{"type":2562,"score":4725},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4727,4729,4731,4733,4735,4737,4739,4741,4743,4745,4746,4748,4751,4753,4754,4756,4758,4760],{"type":2566,"url":4728},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2566,"url":4730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2571,"url":4732},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2577,"url":4734},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2580,"url":4736},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2577,"url":4738},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2577,"url":4740},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2577,"url":4742},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2577,"url":4744},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2574,"url":4560},{"type":2577,"url":4747},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":4749,"url":4750},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2577,"url":4752},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2577,"url":4496},{"type":2577,"url":4755},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":2577,"url":4757},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":2580,"url":4759},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2566,"url":4761},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2704,2705,2706,4567,4568,4711,4712],{"id":183,"slug":4764,"dossier":46,"summary":4765,"aliases":4766,"sourceIds":4769,"published":4770,"modified":4771,"checkedAt":7,"severity":4772,"references":4775,"versionKeys":4786,"packageCount":32,"repositoryCount":561},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[4767,4768],"CVE-2026-21860","PYSEC-2026-2044",[183,4768],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[4773,4774],{"type":2562,"score":2657},{"type":2599,"score":2655},[4776,4778,4780,4782,4783,4784],{"type":2577,"url":4777},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2566,"url":4779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2577,"url":4781},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2574,"url":2666},{"type":2574,"url":2766},{"type":2566,"url":4785},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2670,2671,2672,2673],{"id":184,"slug":4788,"dossier":46,"summary":4789,"aliases":4790,"sourceIds":4794,"published":4795,"modified":4796,"checkedAt":7,"severity":4797,"references":4801,"versionKeys":4823,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[4791,4792,4793],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[184,4793],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[4798,4799],{"type":2562,"score":2919},{"type":2599,"score":4800},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4802,4804,4806,4808,4810,4812,4813,4815,4817,4819,4821],{"type":2566,"url":4803},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2577,"url":4805},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2577,"url":4807},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2577,"url":4809},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2577,"url":4811},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2574,"url":2935},{"type":2577,"url":4814},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2577,"url":4816},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2577,"url":4818},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2574,"url":4820},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2566,"url":4822},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2947,2948,2949,4824,4825],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":185,"slug":4827,"dossier":46,"summary":4828,"aliases":4829,"sourceIds":4833,"published":4834,"modified":4835,"checkedAt":7,"severity":4836,"references":4841,"versionKeys":4857,"packageCount":32,"repositoryCount":105},"ghsa-8c7q-86fq-vvmh-be4df9cc","MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled",[4830,4831,4832],"BIT-mlflow-2026-2651","CVE-2026-2651","PYSEC-2026-2220",[185,4832],"2026-05-25T07:16:15.100Z","2026-07-14T05:30:20.380332392Z",[4837,4839],{"type":2562,"score":4838},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2562,"score":4840},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4842,4844,4846,4848,4850,4851,4853,4855],{"type":2566,"url":4843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2651",{"type":2571,"url":4845},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fd7290811d8f3c95366d80109424edc1fb1ad966f",{"type":2577,"url":4847},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-2651",{"type":2928,"url":4849},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481117",{"type":2574,"url":3190},{"type":2632,"url":4852},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F65beb119-d3e0-4e03-af2f-fa98f78f83dc",{"type":2577,"url":4854},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-2651.json",{"type":2566,"url":4856},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8c7q-86fq-vvmh",[3198,3199,3200],{"id":186,"slug":4859,"dossier":46,"summary":4860,"aliases":4861,"sourceIds":4864,"published":4865,"modified":4866,"checkedAt":7,"severity":4867,"references":4870,"versionKeys":4885,"packageCount":32,"repositoryCount":105},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[4862,4863],"CVE-2025-66448","PYSEC-2026-2015",[186,4863],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[4868],{"type":2562,"score":4869},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4871,4873,4875,4877,4879,4881,4883,4884],{"type":2577,"url":4872},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2566,"url":4874},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":2577,"url":4876},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":2577,"url":4878},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":2566,"url":4880},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2577,"url":4882},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2848,2849,3085],{"id":187,"slug":4887,"dossier":46,"summary":4888,"aliases":4889,"sourceIds":4892,"published":4893,"modified":4894,"checkedAt":7,"severity":4895,"references":4898,"versionKeys":4917,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[4890,4891],"CVE-2026-12491","PYSEC-2026-3406",[187,4891],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[4896],{"type":2562,"score":4897},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[4899,4901,4903,4905,4907,4909,4911,4913,4915,4916],{"type":2577,"url":4900},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2566,"url":4902},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":2577,"url":4904},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":2577,"url":4906},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":2577,"url":4908},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":2577,"url":4910},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":2566,"url":4912},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2577,"url":4914},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2849],{"id":188,"slug":4919,"dossier":46,"summary":4920,"aliases":4921,"sourceIds":4924,"published":4925,"modified":4926,"checkedAt":7,"severity":4927,"references":4930,"versionKeys":4949,"packageCount":32,"repositoryCount":105},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[4922,4923],"CVE-2025-4565","PYSEC-2026-1806",[188,4923],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[4928],{"type":2599,"score":4929},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4931,4933,4935,4937,4939,4940,4942,4944,4946,4947],{"type":2577,"url":4932},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2577,"url":4934},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2566,"url":4936},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2577,"url":4938},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2574,"url":4593},{"type":2577,"url":4941},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2577,"url":4943},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2577,"url":4945},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2574,"url":4595},{"type":2566,"url":4948},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4599,4601,4602],{"id":189,"slug":4951,"dossier":46,"summary":4952,"aliases":4953,"sourceIds":4956,"published":4957,"modified":4958,"checkedAt":7,"severity":4959,"references":4961,"versionKeys":4974,"packageCount":32,"repositoryCount":616},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4954,4955],"CVE-2025-5197","PYSEC-2026-1983",[189,4955],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[4960],{"type":2562,"score":3376},[4962,4964,4966,4968,4969,4971,4972],{"type":2566,"url":4963},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2577,"url":4965},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2577,"url":4967},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2574,"url":2630},{"type":2577,"url":4970},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2574,"url":2972},{"type":2566,"url":4973},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2637,2638],{"id":190,"slug":4976,"dossier":46,"summary":4977,"aliases":4978,"sourceIds":4981,"published":4982,"modified":4983,"checkedAt":7,"severity":4984,"references":4987,"versionKeys":5011,"packageCount":32,"repositoryCount":105},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[4979,4980],"CVE-2026-48746","PYSEC-2026-226",[190,4980],"2026-06-16T17:36:41Z","2026-07-17T16:30:30.589294814Z",[4985],{"type":2562,"score":4986},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[4988,4990,4992,4994,4996,4998,4999,5000,5002,5004,5006,5007,5009],{"type":2566,"url":4989},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":2566,"url":4991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":2928,"url":4993},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":2577,"url":4995},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2577,"url":4997},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2577,"url":3108},{"type":2577,"url":3110},{"type":2577,"url":5001},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":2577,"url":5003},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":2577,"url":5005},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":2574,"url":2830},{"type":2577,"url":5008},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":2566,"url":5010},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",[2848,2849,3085],{"id":191,"slug":5013,"dossier":46,"summary":5014,"aliases":5015,"sourceIds":5018,"published":5019,"modified":5020,"checkedAt":7,"severity":5021,"references":5024,"versionKeys":5035,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[5016,5017],"CVE-2025-53643","PYSEC-2026-1104",[191,5017],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[5022],{"type":2599,"score":5023},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5025,5027,5029,5031,5032,5033],{"type":2577,"url":5026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2566,"url":5028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2571,"url":5030},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":5034},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2729,2730,2731,2732],{"id":192,"slug":5037,"dossier":46,"summary":5038,"aliases":5039,"sourceIds":5042,"published":5043,"modified":5044,"checkedAt":7,"severity":5045,"references":5049,"versionKeys":5058,"packageCount":32,"repositoryCount":484},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[5040,5041],"CVE-2026-34518","PYSEC-2026-2100",[192,5041],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[5046,5048],{"type":2562,"score":5047},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2599,"score":3531},[5050,5052,5054,5056,5057],{"type":2571,"url":5051},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2566,"url":5053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2571,"url":5055},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":193,"slug":5060,"dossier":46,"summary":5061,"aliases":5062,"sourceIds":5065,"published":5066,"modified":5067,"checkedAt":7,"severity":5068,"references":5072,"versionKeys":5091,"packageCount":32,"repositoryCount":105},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[5063,5064],"CVE-2026-9540","PYSEC-2026-3407",[193,5064],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[5069,5070],{"type":2562,"score":2657},{"type":2599,"score":5071},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5073,5075,5077,5079,5080,5082,5084,5086,5088,5089],{"type":2566,"url":5074},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":2577,"url":5076},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":2577,"url":5078},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":2574,"url":2830},{"type":2577,"url":5081},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":2577,"url":5083},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":2577,"url":5085},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":2577,"url":5087},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":2574,"url":2826},{"type":2566,"url":5090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[2848,2849,3085],{"id":194,"slug":5093,"dossier":46,"summary":5094,"aliases":5095,"sourceIds":5098,"published":5099,"modified":5100,"checkedAt":7,"severity":5101,"references":5104,"versionKeys":5119,"packageCount":32,"repositoryCount":616},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[5096,5097],"CVE-2025-66416","PYSEC-2026-1617",[194,5097],"2025-12-02T16:52:08Z","2026-07-16T18:45:48.199773308Z",[5102],{"type":2599,"score":5103},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5105,5107,5109,5111,5113,5115,5117],{"type":2577,"url":5106},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":2566,"url":5108},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":2577,"url":5110},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":2566,"url":5112},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":2574,"url":5114},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":2577,"url":5116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":2574,"url":5118},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[5120,5121],"pypi:mcp@1.10.0","pypi:mcp@1.14.1",{"id":195,"slug":5123,"dossier":46,"summary":5124,"aliases":5125,"sourceIds":5128,"published":5129,"modified":5130,"checkedAt":7,"severity":5131,"references":5133,"versionKeys":5145,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[5126,5127],"CVE-2025-48943","PYSEC-2025-55",[195,5127],"2025-05-28T19:42:12Z","2026-02-04T02:59:05.360205Z",[5132],{"type":2562,"score":3097},[5134,5136,5138,5140,5141,5142,5144],{"type":2566,"url":5135},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":2566,"url":5137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":2928,"url":5139},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":2928,"url":4251},{"type":2571,"url":4253},{"type":2577,"url":5143},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":2574,"url":2830},[3085],{"id":196,"slug":5147,"dossier":46,"summary":5148,"aliases":5149,"sourceIds":5152,"published":5153,"modified":5154,"checkedAt":7,"severity":5155,"references":5158,"versionKeys":5177,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[5150,5151],"CVE-2024-47081","PYSEC-2026-1872",[196,5151],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[5156],{"type":2562,"score":5157},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5159,5161,5163,5165,5167,5169,5171,5173,5175],{"type":2577,"url":5160},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2566,"url":5162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2577,"url":5164},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2571,"url":5166},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2574,"url":5168},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2577,"url":5170},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2577,"url":5172},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2574,"url":5174},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2566,"url":5176},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[5178,5179],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":197,"slug":5181,"dossier":46,"summary":5182,"aliases":5183,"sourceIds":5186,"published":5187,"modified":5188,"checkedAt":7,"severity":5189,"references":5192,"versionKeys":5207,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[5184,5185],"CVE-2025-30165","PYSEC-2026-2017",[197,5185],"2025-05-06T16:38:35Z","2026-07-17T16:30:32.007556436Z",[5190],{"type":2562,"score":5191},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5193,5195,5197,5199,5201,5202,5204,5206],{"type":2577,"url":5194},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2566,"url":5196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":2566,"url":5198},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2577,"url":5200},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":2574,"url":2830},{"type":2577,"url":5203},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":2577,"url":5205},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":2574,"url":2826},[3085],{"id":198,"slug":5209,"dossier":46,"summary":5210,"aliases":5211,"sourceIds":5214,"published":5215,"modified":5216,"checkedAt":7,"severity":5217,"references":5220,"versionKeys":5237,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[5212,5213],"CVE-2024-35195","PYSEC-2026-1873",[198,5213],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[5218],{"type":2562,"score":5219},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5221,5223,5225,5227,5229,5230,5232,5234,5235],{"type":2577,"url":5222},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2566,"url":5224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2577,"url":5226},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2571,"url":5228},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2574,"url":5168},{"type":2577,"url":5231},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2577,"url":5233},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2574,"url":5174},{"type":2566,"url":5236},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[5178],{"id":199,"slug":5239,"dossier":46,"summary":5240,"aliases":5241,"sourceIds":5244,"published":5245,"modified":5246,"checkedAt":7,"severity":5247,"references":5251,"versionKeys":5257,"packageCount":32,"repositoryCount":484},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[5242,5243],"CVE-2026-54280","PYSEC-2026-2113",[199,5243],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[5248,5250],{"type":2599,"score":5249},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2562,"score":2720},[5252,5254,5256],{"type":2566,"url":5253},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2571,"url":5255},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2574,"url":2725},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":200,"slug":5259,"dossier":46,"summary":5260,"aliases":5261,"sourceIds":5262,"published":5263,"modified":5264,"checkedAt":7,"severity":5265,"references":5268,"versionKeys":5273,"packageCount":32,"repositoryCount":32},"ghsa-c2jp-c369-7pvx-e9d6578c","FastMCP Auth Integration Allows for Confused Deputy Account Takeover",[],[200],"2025-10-29T15:38:07Z","2026-02-03T03:11:14.390341Z",[5266],{"type":2599,"score":5267},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5269,5271],{"type":2577,"url":5270},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-c2jp-c369-7pvx",{"type":2574,"url":5272},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp",[3683],{"id":201,"slug":5275,"dossier":46,"summary":5276,"aliases":5277,"sourceIds":5280,"published":5281,"modified":5282,"checkedAt":7,"severity":5283,"references":5287,"versionKeys":5298,"packageCount":32,"repositoryCount":484},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[5278,5279],"CVE-2026-34525","PYSEC-2026-2103",[201,5279],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[5284,5286],{"type":2599,"score":5285},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2562,"score":2863},[5288,5290,5292,5294,5296,5297],{"type":2571,"url":5289},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2566,"url":5291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2571,"url":5293},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2571,"url":5295},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":202,"slug":5300,"dossier":46,"summary":5301,"aliases":5302,"sourceIds":5305,"published":5306,"modified":5307,"checkedAt":7,"severity":5308,"references":5311,"versionKeys":5323,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[5303,5304],"CVE-2025-46722","PYSEC-2025-43",[202,5304],"2025-05-28T18:03:41Z","2026-02-04T03:00:21.842092Z",[5309],{"type":2562,"score":5310},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[5312,5314,5316,5318,5320,5322],{"type":2566,"url":5313},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":2566,"url":5315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":2577,"url":5317},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":2571,"url":5319},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":2577,"url":5321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":2574,"url":2830},[3085],{"id":203,"slug":5325,"dossier":46,"summary":5326,"aliases":5327,"sourceIds":5331,"published":5332,"modified":5333,"checkedAt":7,"severity":5334,"references":5339,"versionKeys":5355,"packageCount":32,"repositoryCount":616},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[5328,5329,5330],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[203],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[5335,5337],{"type":2562,"score":5336},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2599,"score":5338},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5340,5342,5344,5346,5347,5349,5351,5353],{"type":2566,"url":5341},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2577,"url":5343},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2577,"url":5345},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2574,"url":2935},{"type":2577,"url":5348},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2577,"url":5350},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2577,"url":5352},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2577,"url":5354},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2947,2948],{"id":204,"slug":5357,"dossier":46,"summary":5358,"aliases":5359,"sourceIds":5363,"published":5364,"modified":5365,"checkedAt":7,"severity":5366,"references":5370,"versionKeys":5407,"packageCount":32,"repositoryCount":5411},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[5360,5361,5362],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[204,5362],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[5367,5369],{"type":2599,"score":5368},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2562,"score":2720},[5371,5373,5375,5377,5379,5381,5382,5384,5386,5388,5390,5392,5394,5396,5397,5399,5400,5401,5403,5405],{"type":2577,"url":5372},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2566,"url":5374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2577,"url":5376},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2577,"url":5378},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2577,"url":5380},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2574,"url":3830},{"type":2577,"url":5383},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2577,"url":5385},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2577,"url":5387},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2566,"url":5389},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2566,"url":5391},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2566,"url":5393},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2566,"url":5395},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2566,"url":4508},{"type":2566,"url":5398},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2566,"url":3363},{"type":2566,"url":2846},{"type":2566,"url":5402},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2566,"url":5404},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2566,"url":5406},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[5408,5409,5410,3834,3835,3836,3837],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":205,"slug":5413,"dossier":46,"summary":5414,"aliases":5415,"sourceIds":5418,"published":5419,"modified":5420,"checkedAt":7,"severity":5421,"references":5424,"versionKeys":5441,"packageCount":32,"repositoryCount":616},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5416,5417],"CVE-2025-27516","PYSEC-2026-1471",[205,5417],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[5422],{"type":2599,"score":5423},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5425,5427,5429,5431,5433,5435,5437,5439],{"type":2577,"url":5426},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2566,"url":5428},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2571,"url":5430},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2574,"url":5432},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2577,"url":5434},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2577,"url":5436},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2574,"url":5438},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2566,"url":5440},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[5442,5443],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":206,"slug":5445,"dossier":46,"summary":5446,"aliases":5447,"sourceIds":5451,"published":5452,"modified":5453,"checkedAt":7,"severity":5454,"references":5458,"versionKeys":5474,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[5448,5449,5450],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[206,5450],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[5455,5456],{"type":2562,"score":2813},{"type":2599,"score":5457},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5459,5461,5463,5465,5466,5468,5470,5472],{"type":2566,"url":5460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2577,"url":5462},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2577,"url":5464},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2574,"url":3779},{"type":2577,"url":5467},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2577,"url":5469},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2574,"url":5471},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2566,"url":5473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3785],{"id":207,"slug":5476,"dossier":46,"summary":5477,"aliases":5478,"sourceIds":5482,"published":5483,"modified":5484,"checkedAt":7,"severity":5485,"references":5487,"versionKeys":5499,"packageCount":32,"repositoryCount":105},"ghsa-f2m9-wcf4-cwwx-e7c3cfb2","MLFlow Creates a Temporary File With Insecure Permissions",[5479,5480,5481],"BIT-mlflow-2026-4137","CVE-2026-4137","PYSEC-2026-2655",[207,5481],"2026-05-18T21:31:53Z","2026-07-13T16:43:33.416174314Z",[5486],{"type":2562,"score":3403},[5488,5490,5492,5493,5494,5496,5497],{"type":2566,"url":5489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4137",{"type":2577,"url":5491},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1dcbb0c2fbd1f446c328830e601ca13a28219b8a",{"type":2566,"url":3414},{"type":2574,"url":3190},{"type":2577,"url":5495},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F648dc30b-76c7-4433-86b8-f43d926fd8d6",{"type":2574,"url":3194},{"type":2566,"url":5498},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2m9-wcf4-cwwx",[3198,3199,3200],{"id":208,"slug":5501,"dossier":46,"summary":5502,"aliases":5503,"sourceIds":5507,"published":5508,"modified":5509,"checkedAt":7,"severity":5510,"references":5514,"versionKeys":5532,"packageCount":32,"repositoryCount":616},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[5504,5505,5506],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[208],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[5511,5512],{"type":2562,"score":3426},{"type":2599,"score":5513},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5515,5517,5519,5521,5523,5525,5526,5528,5530],{"type":2566,"url":5516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2577,"url":5518},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2577,"url":5520},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2577,"url":5522},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2577,"url":5524},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2574,"url":2935},{"type":2577,"url":5527},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2577,"url":5529},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2577,"url":5531},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2947,2948],{"id":209,"slug":5534,"dossier":46,"summary":5535,"aliases":5536,"sourceIds":5539,"published":5540,"modified":5541,"checkedAt":7,"severity":5542,"references":5546,"versionKeys":5557,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[5537,5538],"CVE-2024-47874","PYSEC-2026-1943",[209,5538],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[5543,5545],{"type":2562,"score":5544},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2599,"score":3590},[5547,5549,5551,5553,5554,5555],{"type":2577,"url":5548},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2566,"url":5550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2571,"url":5552},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2574,"url":2694},{"type":2574,"url":2700},{"type":2566,"url":5556},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2704],{"id":210,"slug":5559,"dossier":46,"summary":5560,"aliases":5561,"sourceIds":5564,"published":5565,"modified":5566,"checkedAt":7,"severity":5567,"references":5570,"versionKeys":5585,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[5562,5563],"CVE-2024-49766","PYSEC-2026-2045",[210,5563],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[5568],{"type":2599,"score":5569},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5571,5573,5575,5577,5578,5580,5582,5583],{"type":2577,"url":5572},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2566,"url":5574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2571,"url":5576},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2574,"url":2666},{"type":2577,"url":5579},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2577,"url":5581},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2574,"url":2766},{"type":2566,"url":5584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2670],{"id":211,"slug":5587,"dossier":46,"summary":5588,"aliases":5589,"sourceIds":5592,"published":5593,"modified":5594,"checkedAt":7,"severity":5595,"references":5598,"versionKeys":5612,"packageCount":32,"repositoryCount":32},"ghsa-fg6f-75jq-6523-c927e5c8","Authlib has 1-click Account Takeover vulnerability",[5590,5591],"CVE-2025-68158","PYSEC-2026-1201",[211,5591],"2026-01-08T22:40:56Z","2026-07-07T17:56:30.898731290Z",[5596],{"type":2562,"score":5597},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5599,5601,5603,5605,5607,5608,5610],{"type":2577,"url":5600},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",{"type":2566,"url":5602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68158",{"type":2577,"url":5604},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F2808378611dd6fb2532b189a9087877d8f0c0489",{"type":2577,"url":5606},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F7974f45e4d7492ab5f527577677f2770ce423228",{"type":2574,"url":4373},{"type":2574,"url":5609},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fauthlib",{"type":2566,"url":5611},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",[4377],{"id":212,"slug":5614,"dossier":46,"summary":5615,"aliases":5616,"sourceIds":5619,"published":5620,"modified":5621,"checkedAt":7,"severity":5622,"references":5627,"versionKeys":5646,"packageCount":32,"repositoryCount":494},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[5617,5618],"CVE-2026-5241","PYSEC-2026-2290",[212,5618],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[5623,5625],{"type":2562,"score":5624},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2562,"score":5626},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5628,5630,5632,5634,5635,5637,5639,5640,5642,5644],{"type":2566,"url":5629},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2571,"url":5631},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2566,"url":5633},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2566,"url":4496},{"type":2577,"url":5636},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2928,"url":5638},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2574,"url":2630},{"type":2577,"url":5641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2632,"url":5643},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2577,"url":5645},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[2637,2638,2639,2640,2641,2642,2643],{"id":213,"slug":5648,"dossier":46,"summary":5649,"aliases":5650,"sourceIds":5653,"published":5654,"modified":5655,"checkedAt":7,"severity":5656,"references":5659,"versionKeys":5670,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[5651,5652],"CVE-2025-69230","PYSEC-2026-1105",[213,5652],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[5657],{"type":2599,"score":5658},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5660,5662,5664,5666,5667,5668],{"type":2577,"url":5661},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2566,"url":5663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2571,"url":5665},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":5669},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2729,2730,2731,2732,2733,2734,2735],{"id":214,"slug":5672,"dossier":46,"summary":5673,"aliases":5674,"sourceIds":5678,"published":5679,"modified":5680,"checkedAt":7,"severity":5681,"references":5686,"versionKeys":5701,"packageCount":32,"repositoryCount":105},"ghsa-fh64-r2vc-xvhr-8b7ea4aa","MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface",[5675,5676,5677],"BIT-mlflow-2026-33865","CVE-2026-33865","PYSEC-2026-93",[214,5677],"2026-04-07T13:16:46.840Z","2026-06-10T17:02:20.155874108Z",[5682,5684],{"type":2562,"score":5683},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2599,"score":5685},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:P\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[5687,5689,5691,5693,5694,5695,5696,5698,5699],{"type":2566,"url":5688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33865",{"type":2571,"url":5690},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21435",{"type":2577,"url":5692},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Faca4dd0ec88a12f7655155c224371280e9b45dda",{"type":2632,"url":3224},{"type":2577,"url":3226},{"type":2574,"url":3190},{"type":2577,"url":5697},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-93.yaml",{"type":2566,"url":3231},{"type":2566,"url":5700},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh64-r2vc-xvhr",[3198,3199,3200],{"id":215,"slug":5703,"dossier":46,"summary":5704,"aliases":5705,"sourceIds":5709,"published":5710,"modified":5711,"checkedAt":7,"severity":5712,"references":5715,"versionKeys":5728,"packageCount":32,"repositoryCount":105},"ghsa-fhff-qmm8-h2fp-244bab2b","Arbitrary file write via tar traversal in mlflow",[5706,5707,5708],"BIT-mlflow-2025-15031","CVE-2025-15031","PYSEC-2026-2656",[215,5708],"2026-03-19T00:30:20Z","2026-07-13T16:43:21.433539748Z",[5713],{"type":2562,"score":5714},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5716,5718,5720,5721,5723,5725,5726],{"type":2566,"url":5717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15031",{"type":2577,"url":5719},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346",{"type":2574,"url":3190},{"type":2577,"url":5722},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Ffe4d9be330426904283401f1d2ed914238b6fc37\u002Fmlflow\u002Fpyfunc\u002Fdbconnect_artifact_cache.py#L140",{"type":2577,"url":5724},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F09856f77-f968-446f-a930-657d126efe4e",{"type":2574,"url":3194},{"type":2566,"url":5727},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fhff-qmm8-h2fp",[3198,3199,3200],{"id":216,"slug":5730,"dossier":46,"summary":4260,"aliases":5731,"sourceIds":5734,"published":5735,"modified":5736,"checkedAt":7,"severity":5737,"references":5740,"versionKeys":5751,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[5732,5733],"CVE-2025-1194","PYSEC-2026-1984",[216,5733],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[5738],{"type":2562,"score":5739},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5741,5743,5745,5746,5748,5749],{"type":2566,"url":5742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2577,"url":5744},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2574,"url":2630},{"type":2577,"url":5747},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2574,"url":2972},{"type":2566,"url":5750},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2637],{"id":217,"slug":5753,"dossier":46,"summary":5754,"aliases":5755,"sourceIds":5759,"published":5760,"modified":5761,"checkedAt":7,"severity":5762,"references":5767,"versionKeys":5783,"packageCount":32,"repositoryCount":105},"ghsa-g35p-px32-whv6-8b66e41b","MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration",[5756,5757,5758],"BIT-mlflow-2026-4035","CVE-2026-4035","PYSEC-2026-2222",[217,5758],"2026-06-03T09:16:13.083Z","2026-07-13T16:45:04.877817766Z",[5763,5765],{"type":2562,"score":5764},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:L",{"type":2562,"score":5766},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[5768,5770,5772,5774,5776,5777,5779,5781],{"type":2566,"url":5769},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4035",{"type":2571,"url":5771},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F4a3f2f720cb4f058c9e0c5b883e0acc9ab64a7f3",{"type":2577,"url":5773},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-4035",{"type":2928,"url":5775},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484318",{"type":2574,"url":3190},{"type":2632,"url":5778},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff8e591a0-0f19-4910-b82e-16c9956f2233",{"type":2577,"url":5780},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-4035.json",{"type":2566,"url":5782},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g35p-px32-whv6",[3198,3199,3200],{"id":218,"slug":5785,"dossier":46,"summary":5786,"aliases":5787,"sourceIds":5790,"published":5791,"modified":5792,"checkedAt":7,"severity":5793,"references":5796,"versionKeys":5802,"packageCount":32,"repositoryCount":484},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[5788,5789],"CVE-2026-54278","PYSEC-2026-2111",[218,5789],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[5794,5795],{"type":2599,"score":3272},{"type":2562,"score":2720},[5797,5799,5800],{"type":2566,"url":5798},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2574,"url":2725},{"type":2571,"url":5801},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2729,2730,2731,2732,2733,2734,2735,2736],{"id":219,"slug":5804,"dossier":46,"summary":5805,"aliases":5806,"sourceIds":5809,"published":5810,"modified":5811,"checkedAt":7,"severity":5812,"references":5815,"versionKeys":5826,"packageCount":32,"repositoryCount":105},"ghsa-g6pg-52vf-843h-da352526","MLFlow allows Tracing + Assessments Access",[5807,5808],"CVE-2025-15381","PYSEC-2026-2657",[219,5808],"2026-03-27T18:31:27Z","2026-07-13T16:43:42.935139106Z",[5813],{"type":2562,"score":5814},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5816,5818,5819,5821,5823,5824],{"type":2566,"url":5817},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15381",{"type":2574,"url":3190},{"type":2577,"url":5820},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Fb569ebc74c14af593c326143bee2df44a5d59edf\u002Fmlflow\u002Fserver\u002Fauth\u002F__init__.py#L752",{"type":2577,"url":5822},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F149fb2f9-ef4b-4136-a25c-20563451904c",{"type":2574,"url":3194},{"type":2566,"url":5825},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6pg-52vf-843h",[3198,3199,3200],{"id":220,"slug":5828,"dossier":46,"summary":5829,"aliases":5830,"sourceIds":5833,"published":5834,"modified":5835,"checkedAt":7,"severity":5836,"references":5838,"versionKeys":5851,"packageCount":32,"repositoryCount":32},"ghsa-g7f3-828f-7h7m-12134915","Authlib : JWE zip=DEF decompression bomb enables DoS",[5831,5832],"CVE-2025-62706","PYSEC-2026-1202",[220,5832],"2025-10-10T22:54:03Z","2026-07-07T17:57:19.270494442Z",[5837],{"type":2562,"score":3097},[5839,5841,5843,5845,5846,5848,5849],{"type":2577,"url":5840},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",{"type":2566,"url":5842},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62706",{"type":2577,"url":5844},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fe0863d5129316b1790eee5f14cece32a03b8184d",{"type":2574,"url":4373},{"type":2577,"url":5847},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00032.html",{"type":2574,"url":5609},{"type":2566,"url":5850},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",[4377],{"id":221,"slug":5853,"dossier":46,"summary":5854,"aliases":5855,"sourceIds":5858,"published":5859,"modified":5860,"checkedAt":7,"severity":5861,"references":5864,"versionKeys":5883,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[5856,5857],"CVE-2024-34062","PYSEC-2026-1976",[221,5857],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[5862],{"type":2562,"score":5863},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5865,5867,5869,5871,5873,5875,5877,5879,5881],{"type":2577,"url":5866},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2566,"url":5868},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2577,"url":5870},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2574,"url":5872},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2577,"url":5874},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2577,"url":5876},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2577,"url":5878},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2574,"url":5880},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2566,"url":5882},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[5884],"pypi:tqdm@4.66.2",{"id":222,"slug":5886,"dossier":46,"summary":5887,"aliases":5888,"sourceIds":5891,"published":5892,"modified":5893,"checkedAt":7,"severity":5894,"references":5896,"versionKeys":5909,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[5889,5890],"CVE-2025-69229","PYSEC-2026-1106",[222,5890],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[5895],{"type":2599,"score":3272},[5897,5899,5901,5903,5905,5906,5907],{"type":2577,"url":5898},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2566,"url":5900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2577,"url":5902},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2577,"url":5904},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":5908},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2729,2730,2731,2732,2733,2734,2735],{"id":223,"slug":5911,"dossier":91,"summary":5912,"aliases":5913,"sourceIds":5916,"published":5917,"modified":5918,"checkedAt":7,"severity":5919,"references":5924,"versionKeys":5934,"packageCount":32,"repositoryCount":472},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[5914,5915],"CVE-2026-25645","PYSEC-2026-2275",[223,5915],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[5920,5922],{"type":2562,"score":5921},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2562,"score":5923},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5925,5927,5929,5931,5932],{"type":2566,"url":5926},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2566,"url":5928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2571,"url":5930},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2574,"url":5168},{"type":2566,"url":5933},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[5178,5179,5935,5936],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":224,"slug":5938,"dossier":91,"summary":5939,"aliases":5940,"sourceIds":5943,"published":5944,"modified":5945,"checkedAt":7,"severity":5946,"references":5948,"versionKeys":5959,"packageCount":32,"repositoryCount":2906},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[5941,5942],"CVE-2025-66418","PYSEC-2026-1998",[224,5942],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[5947],{"type":2599,"score":2886},[5949,5951,5953,5955,5956,5957],{"type":2577,"url":5950},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2566,"url":5952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2571,"url":5954},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2574,"url":2895},{"type":2574,"url":2897},{"type":2566,"url":5958},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2901,2902,2903,2904,2905],{"id":225,"slug":5961,"dossier":46,"summary":5962,"aliases":5963,"sourceIds":5966,"published":5967,"modified":5968,"checkedAt":7,"severity":5969,"references":5972,"versionKeys":5987,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[5964,5965],"CVE-2024-56201","PYSEC-2026-1472",[225,5965],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[5970,5971],{"type":2562,"score":3766},{"type":2599,"score":5423},[5973,5975,5977,5979,5981,5982,5984,5985],{"type":2577,"url":5974},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2566,"url":5976},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2577,"url":5978},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2571,"url":5980},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2574,"url":5432},{"type":2577,"url":5983},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2574,"url":5438},{"type":2566,"url":5986},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[5442],{"id":226,"slug":5989,"dossier":46,"summary":5990,"aliases":5991,"sourceIds":5994,"published":5995,"modified":5996,"checkedAt":7,"severity":5997,"references":6000,"versionKeys":6015,"packageCount":32,"repositoryCount":616},"ghsa-gq3w-7jj3-x7gr-f80b7f86","MLflow Use of Default Password Authentication Bypass Vulnerability",[5992,5993],"CVE-2026-2635","PYSEC-2026-421",[226,5993],"2026-02-21T00:31:43Z","2026-07-01T20:22:58.325967Z",[5998],{"type":2562,"score":5999},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6001,6003,6005,6007,6008,6010,6012,6013],{"type":2566,"url":6002},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2635",{"type":2577,"url":6004},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19260",{"type":2577,"url":6006},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F5bf2ec2bd4222a18d78631183ac7f6b752afe8a4",{"type":2574,"url":3190},{"type":2577,"url":6009},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Freleases\u002Ftag\u002Fv3.8.0rc0",{"type":2577,"url":6011},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-111",{"type":2574,"url":3194},{"type":2566,"url":6014},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gq3w-7jj3-x7gr",[3198,3199],{"id":227,"slug":6017,"dossier":46,"summary":6018,"aliases":6019,"sourceIds":6022,"published":6023,"modified":6024,"checkedAt":7,"severity":6025,"references":6028,"versionKeys":6040,"packageCount":32,"repositoryCount":105},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[6020,6021],"CVE-2026-22773","PYSEC-2026-143",[227,6021],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[6026,6027],{"type":2562,"score":3097},{"type":2562,"score":2720},[6029,6031,6033,6035,6037,6039],{"type":2632,"url":6030},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":2566,"url":6032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":2577,"url":6034},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":2577,"url":6036},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":2577,"url":6038},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":2574,"url":2830},[2848,2849,3085],{"id":228,"slug":6042,"dossier":46,"summary":6043,"aliases":6044,"sourceIds":6047,"published":6048,"modified":6049,"checkedAt":7,"severity":6050,"references":6052,"versionKeys":6073,"packageCount":32,"repositoryCount":105},"ghsa-gx77-xgc2-4888-18e94d17","Ray's New Token Authentication is Disabled By Default",[6045,6046],"CVE-2025-34351","PYSEC-2026-518",[228,6046],"2025-11-27T03:30:26Z","2026-07-01T20:23:03.614509Z",[6051],{"type":2599,"score":3507},[6053,6055,6057,6058,6059,6061,6063,6065,6067,6068,6070,6071],{"type":2577,"url":6054},"https:\u002F\u002Fgithub.com\u002FJLLeitschuh\u002Fsecurity-research\u002Fsecurity\u002Fadvisories\u002FGHSA-w8vc-465m-jjw6",{"type":2566,"url":6056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-34351",{"type":2577,"url":4329},{"type":2574,"url":4335},{"type":2577,"url":6060},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.52.0",{"type":2577,"url":6062},"https:\u002F\u002Fwww.cve.org\u002Fresourcessupport\u002Fallresources\u002Fcnarules#section_4-1_Vulnerability_Determination",{"type":2577,"url":6064},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fjonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE",{"type":2577,"url":6066},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet",{"type":2577,"url":4339},{"type":2577,"url":6069},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fanyscale-ray-token-authentication-disabled-by-default-insecure-configuration",{"type":2574,"url":4347},{"type":2566,"url":6072},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gx77-xgc2-4888",[4349,4350,6074],"pypi:ray@2.50.1",{"id":229,"slug":6076,"dossier":46,"summary":6077,"aliases":6078,"sourceIds":6079,"published":6080,"modified":6081,"checkedAt":7,"severity":6082,"references":6083,"versionKeys":6089,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[229],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[6084,6086,6087],{"type":2577,"url":6085},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2574,"url":3485},{"type":2577,"url":6088},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[3489],{"id":230,"slug":6091,"dossier":46,"summary":6092,"aliases":6093,"sourceIds":6096,"published":6097,"modified":6098,"checkedAt":7,"severity":6099,"references":6102,"versionKeys":6123,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[6094,6095],"CVE-2024-34064","PYSEC-2026-1474",[230,6095],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[6100],{"type":2562,"score":6101},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6103,6105,6107,6109,6110,6112,6114,6116,6118,6120,6121],{"type":2577,"url":6104},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2566,"url":6106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2571,"url":6108},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2574,"url":5432},{"type":2577,"url":6111},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2577,"url":6113},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2577,"url":6115},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2577,"url":6117},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2577,"url":6119},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2574,"url":5438},{"type":2566,"url":6122},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[5442],{"id":231,"slug":6125,"dossier":46,"summary":6126,"aliases":6127,"sourceIds":6130,"published":6131,"modified":6132,"checkedAt":7,"severity":6133,"references":6136,"versionKeys":6145,"packageCount":32,"repositoryCount":484},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[6128,6129],"CVE-2026-34513","PYSEC-2026-2095",[231,6129],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[6134,6135],{"type":2599,"score":3132},{"type":2562,"score":2720},[6137,6139,6141,6143,6144],{"type":2571,"url":6138},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2566,"url":6140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2571,"url":6142},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":232,"slug":6147,"dossier":46,"summary":6148,"aliases":6149,"sourceIds":6152,"published":6153,"modified":6154,"checkedAt":7,"severity":6155,"references":6159,"versionKeys":6167,"packageCount":32,"repositoryCount":484},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[6150,6151],"CVE-2026-47265","PYSEC-2026-2105",[232,6151],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[6156,6158],{"type":2599,"score":6157},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2562,"score":3695},[6160,6162,6164,6166],{"type":2571,"url":6161},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2566,"url":6163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2571,"url":6165},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2574,"url":2725},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":233,"slug":6169,"dossier":46,"summary":2646,"aliases":6170,"sourceIds":6173,"published":6174,"modified":6175,"checkedAt":7,"severity":6176,"references":6178,"versionKeys":6191,"packageCount":32,"repositoryCount":561},"ghsa-hgf8-39gv-g3f2-0469b394",[6171,6172],"CVE-2025-66221","PYSEC-2026-2046",[233,6172],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[6177],{"type":2599,"score":2655},[6179,6181,6183,6185,6186,6188,6189],{"type":2577,"url":6180},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2566,"url":6182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2577,"url":6184},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2574,"url":2666},{"type":2577,"url":6187},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2574,"url":2766},{"type":2566,"url":6190},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2670,2671,2672,2673],{"id":234,"slug":6193,"dossier":46,"summary":6194,"aliases":6195,"sourceIds":6198,"published":6199,"modified":6200,"checkedAt":7,"severity":6201,"references":6203,"versionKeys":6218,"packageCount":32,"repositoryCount":105},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[6196,6197],"CVE-2026-54236","PYSEC-2026-3408",[234,6197],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[6202],{"type":2562,"score":5047},[6204,6206,6208,6210,6212,6214,6216,6217],{"type":2577,"url":6205},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2566,"url":6207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":2577,"url":6209},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":2577,"url":6211},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":2566,"url":6213},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2577,"url":6215},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2848,2849,3085],{"id":235,"slug":6220,"dossier":46,"summary":6221,"aliases":6222,"sourceIds":6225,"published":6226,"modified":6227,"checkedAt":7,"severity":6228,"references":6233,"versionKeys":6239,"packageCount":32,"repositoryCount":484},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[6223,6224],"CVE-2026-54276","PYSEC-2026-2109",[235,6224],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[6229,6231],{"type":2599,"score":6230},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2562,"score":6232},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[6234,6236,6238],{"type":2566,"url":6235},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2571,"url":6237},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2574,"url":2725},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":236,"slug":6241,"dossier":46,"summary":6242,"aliases":6243,"sourceIds":6246,"published":6247,"modified":6248,"checkedAt":7,"severity":6249,"references":6251,"versionKeys":6264,"packageCount":32,"repositoryCount":105},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[6244,6245],"CVE-2026-44222","PYSEC-2026-3409",[236,6245],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[6250],{"type":2562,"score":3097},[6252,6254,6256,6258,6260,6262,6263],{"type":2577,"url":6253},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2566,"url":6255},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":2577,"url":6257},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":2566,"url":6259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2577,"url":6261},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2848,2849,3085],{"id":237,"slug":6266,"dossier":46,"summary":6267,"aliases":6268,"sourceIds":6271,"published":6272,"modified":6273,"checkedAt":7,"severity":6274,"references":6278,"versionKeys":6294,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[6269,6270],"CVE-2024-11394","PYSEC-2024-229",[237,6270],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[6275,6277],{"type":2562,"score":6276},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2562,"score":2813},[6279,6281,6283,6285,6286,6288,6290,6292],{"type":2566,"url":6280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2577,"url":6282},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2577,"url":6284},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2574,"url":2630},{"type":2577,"url":6287},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2577,"url":6289},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2566,"url":6291},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2566,"url":6293},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2637],{"id":238,"slug":6296,"dossier":46,"summary":6297,"aliases":6298,"sourceIds":6300,"published":6301,"modified":6302,"checkedAt":7,"severity":6303,"references":6306,"versionKeys":6314,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[6299],"CVE-2025-71379",[238],"2025-05-28T17:50:06Z","2026-07-08T07:35:38.046987158Z",[6304],{"type":2562,"score":6305},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[6307,6309,6311,6313],{"type":2577,"url":6308},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":2577,"url":6310},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":2577,"url":6312},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":2574,"url":2830},[3085],{"id":239,"slug":6316,"dossier":46,"summary":6317,"aliases":6318,"sourceIds":6321,"published":6322,"modified":6323,"checkedAt":7,"severity":6324,"references":6327,"versionKeys":6336,"packageCount":32,"repositoryCount":616},"ghsa-j842-xgm4-wf88-5ee5f9f5","MLX has Wild Pointer Dereference in load_gguf()",[6319,6320],"CVE-2025-62609","PYSEC-2025-139",[239,6320],"2025-11-21T18:03:20Z","2026-06-06T00:45:47.874274188Z",[6325,6326],{"type":2599,"score":5071},{"type":2562,"score":2720},[6328,6330,6332,6334],{"type":2632,"url":6329},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-j842-xgm4-wf88",{"type":2566,"url":6331},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62609",{"type":2574,"url":6333},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx",{"type":2577,"url":6335},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-139.yaml",[6337,6338],"pypi:mlx@0.29.0","pypi:mlx@0.29.3",{"id":240,"slug":6340,"dossier":46,"summary":6341,"aliases":6342,"sourceIds":6345,"published":6346,"modified":6347,"checkedAt":7,"severity":6348,"references":6353,"versionKeys":6370,"packageCount":32,"repositoryCount":484},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[6343,6344],"CVE-2026-34993","PYSEC-2026-2104",[240,6344],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[6349,6351],{"type":2562,"score":6350},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2562,"score":6352},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6354,6356,6358,6360,6361,6363,6365,6366,6367,6368],{"type":2571,"url":6355},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2566,"url":6357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2571,"url":6359},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2574,"url":2725},{"type":2577,"url":6362},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2577,"url":6364},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2566,"url":4498},{"type":2566,"url":5633},{"type":2566,"url":4496},{"type":2928,"url":6369},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2729,2730,2731,2732,2733,2734,2735,2736],{"id":241,"slug":6372,"dossier":46,"summary":6373,"aliases":6374,"sourceIds":6377,"published":6378,"modified":6379,"checkedAt":7,"severity":6380,"references":6382,"versionKeys":6393,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[6375,6376],"CVE-2025-69227","PYSEC-2026-1107",[241,6376],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[6381],{"type":2599,"score":3272},[6383,6385,6387,6389,6390,6391],{"type":2577,"url":6384},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2566,"url":6386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2577,"url":6388},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":6392},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2729,2730,2731,2732,2733,2734,2735],{"id":242,"slug":6395,"dossier":46,"summary":6396,"aliases":6397,"sourceIds":6400,"published":6401,"modified":6402,"checkedAt":7,"severity":6403,"references":6405,"versionKeys":6413,"packageCount":32,"repositoryCount":32},"ghsa-jj8c-mmj3-mmgv-216e3367","Authlib: Cross-site request forging when using cache",[6398,6399],"CVE-2026-41425","PYSEC-2026-25",[242,6399],"2026-04-16T22:38:03Z","2026-06-05T14:45:30.092809707Z",[6404],{"type":2562,"score":6101},[6406,6408,6410,6411],{"type":2632,"url":6407},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-jj8c-mmj3-mmgv",{"type":2566,"url":6409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41425",{"type":2574,"url":4373},{"type":2577,"url":6412},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-25.yaml",[4377],{"id":243,"slug":6415,"dossier":46,"summary":6416,"aliases":6417,"sourceIds":6420,"published":6421,"modified":6422,"checkedAt":7,"severity":6423,"references":6425,"versionKeys":6438,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[6418,6419],"CVE-2025-3264","PYSEC-2026-1985",[243,6419],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[6424],{"type":2562,"score":3376},[6426,6428,6430,6432,6433,6435,6436],{"type":2566,"url":6427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2577,"url":6429},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2577,"url":6431},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2574,"url":2630},{"type":2577,"url":6434},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2574,"url":2972},{"type":2566,"url":6437},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2637],{"id":244,"slug":6440,"dossier":46,"summary":6441,"aliases":6442,"sourceIds":6445,"published":6446,"modified":6447,"checkedAt":7,"severity":6448,"references":6451,"versionKeys":6459,"packageCount":32,"repositoryCount":494},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[6443,6444],"CVE-2026-54282","PYSEC-2026-248",[244,6444],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[6449,6450],{"type":2562,"score":4169},{"type":2562,"score":2863},[6452,6454,6456,6457],{"type":2566,"url":6453},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2566,"url":6455},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2574,"url":4560},{"type":2577,"url":6458},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2704,2705,2706,4567,4568,4711,4712],{"id":245,"slug":6461,"dossier":46,"summary":6462,"aliases":6463,"sourceIds":6465,"published":6466,"modified":6467,"checkedAt":7,"severity":6468,"references":6471,"versionKeys":6487,"packageCount":32,"repositoryCount":616},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[6464],"CVE-2026-52869",[245],"2026-07-16T19:58:53Z","2026-07-16T20:15:16.135872152Z",[6469],{"type":2562,"score":6470},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[6472,6474,6476,6478,6480,6482,6484,6485],{"type":2577,"url":6473},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":2566,"url":6475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":2577,"url":6477},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":2577,"url":6479},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":2577,"url":6481},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":2577,"url":6483},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":2574,"url":5114},{"type":2577,"url":6486},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",[5120,5121],{"id":246,"slug":6489,"dossier":46,"summary":6490,"aliases":6491,"sourceIds":6494,"published":6495,"modified":6496,"checkedAt":7,"severity":6497,"references":6500,"versionKeys":6514,"packageCount":32,"repositoryCount":65},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[6492,6493],"CVE-2026-30922","PYSEC-2026-2263",[246,6493],"2026-03-17T16:17:33Z","2026-07-13T07:26:46.403932690Z",[6498,6499],{"type":2562,"score":3040},{"type":2562,"score":2720},[6501,6503,6505,6507,6509,6510,6512],{"type":2632,"url":6502},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2566,"url":6504},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2571,"url":6506},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2577,"url":6508},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2574,"url":3907},{"type":2577,"url":6511},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.3",{"type":2577,"url":6513},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[3919],{"id":247,"slug":6516,"dossier":46,"summary":6517,"aliases":6518,"sourceIds":6521,"published":6522,"modified":6523,"checkedAt":7,"severity":6524,"references":6528,"versionKeys":6555,"packageCount":32,"repositoryCount":32},"ghsa-m344-f55w-2m6j-43fc4846","Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding",[6519,6520],"CVE-2026-28498","PYSEC-2026-2117",[247,6520],"2026-03-16T16:15:06Z","2026-07-13T07:26:18.508336668Z",[6525,6527],{"type":2599,"score":6526},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2562,"score":2563},[6529,6531,6533,6535,6536,6537,6539,6541,6543,6545,6547,6549,6551,6553],{"type":2632,"url":6530},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-m344-f55w-2m6j",{"type":2566,"url":6532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28498",{"type":2571,"url":6534},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fb9bb2b25bf8b7e01512d847a95c1749646eaa72b",{"type":2574,"url":4373},{"type":2566,"url":4375},{"type":2577,"url":6538},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-28498",{"type":2577,"url":6540},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-28498.json",{"type":2566,"url":6542},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":2566,"url":6544},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6497",{"type":2566,"url":6546},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6567",{"type":2566,"url":6548},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":2566,"url":6550},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":2566,"url":6552},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":2928,"url":6554},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2448182",[4377],{"id":248,"slug":6557,"dossier":46,"summary":6558,"aliases":6559,"sourceIds":6562,"published":6563,"modified":6564,"checkedAt":7,"severity":6565,"references":6570,"versionKeys":6579,"packageCount":32,"repositoryCount":484},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[6560,6561],"CVE-2026-34516","PYSEC-2026-2098",[248,6561],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[6566,6567,6568],{"type":2562,"score":2720},{"type":2599,"score":3272},{"type":2599,"score":6569},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6571,6573,6575,6577,6578],{"type":2571,"url":6572},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2566,"url":6574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2571,"url":6576},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":249,"slug":6581,"dossier":46,"summary":6582,"aliases":6583,"sourceIds":6586,"published":6587,"modified":6588,"checkedAt":7,"severity":6589,"references":6592,"versionKeys":6598,"packageCount":32,"repositoryCount":484},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[6584,6585],"CVE-2026-50269","PYSEC-2026-2106",[249,6585],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[6590,6591],{"type":2599,"score":2861},{"type":2562,"score":2720},[6593,6595,6597],{"type":2566,"url":6594},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2571,"url":6596},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2574,"url":2725},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":250,"slug":6600,"dossier":46,"summary":6601,"aliases":6602,"sourceIds":6605,"published":6606,"modified":6607,"checkedAt":7,"severity":6608,"references":6611,"versionKeys":6624,"packageCount":32,"repositoryCount":32},"ghsa-m8x7-r2rg-vh5g-d7eda4e5","FastMCP has a Command Injection vulnerability - Gemini CLI",[6603,6604],"CVE-2025-64340","PYSEC-2026-2475",[250,6604],"2026-03-31T22:24:15Z","2026-07-18T14:44:31.250470362Z",[6609],{"type":2562,"score":6610},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6612,6614,6616,6618,6620,6621,6622],{"type":2577,"url":6613},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-m8x7-r2rg-vh5g",{"type":2577,"url":6615},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-m8x7-r2rg-vh5g",{"type":2566,"url":6617},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64340",{"type":2577,"url":6619},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fpull\u002F3522",{"type":2574,"url":3677},{"type":2574,"url":3679},{"type":2566,"url":6623},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m8x7-r2rg-vh5g",[3683],{"id":251,"slug":6626,"dossier":46,"summary":6627,"aliases":6628,"sourceIds":6631,"published":6632,"modified":6633,"checkedAt":7,"severity":6634,"references":6638,"versionKeys":6646,"packageCount":32,"repositoryCount":65},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[6629,6630],"CVE-2026-34073","PYSEC-2026-35",[251,6630],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[6635,6636],{"type":2562,"score":2863},{"type":2599,"score":6637},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6639,6641,6643,6644],{"type":2566,"url":6640},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2566,"url":6642},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2574,"url":3485},{"type":2577,"url":6645},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[3489,3490,3491,3492,3493,3494],{"id":252,"slug":6648,"dossier":46,"summary":6649,"aliases":6650,"sourceIds":6653,"published":6654,"modified":6655,"checkedAt":7,"severity":6656,"references":6659,"versionKeys":6667,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[6651,6652],"CVE-2026-56340","PYSEC-2026-250",[252,6652],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[6657,6658],{"type":2562,"score":3766},{"type":2562,"score":2720},[6660,6662,6664,6665],{"type":2566,"url":6661},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":2577,"url":6663},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":2574,"url":2830},{"type":2566,"url":6666},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[2849],{"id":253,"slug":6669,"dossier":46,"summary":6670,"aliases":6671,"sourceIds":6674,"published":6675,"modified":6676,"checkedAt":7,"severity":6677,"references":6680,"versionKeys":6688,"packageCount":32,"repositoryCount":105},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[6672,6673],"CVE-2026-44432","PYSEC-2026-142",[253,6673],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[6678,6679],{"type":2562,"score":2720},{"type":2599,"score":2886},[6681,6683,6685,6687],{"type":2566,"url":6682},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2566,"url":6684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2577,"url":6686},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2574,"url":2895},[6689],"pypi:urllib3@2.6.3",{"id":254,"slug":6691,"dossier":46,"summary":6692,"aliases":6693,"sourceIds":6696,"published":6697,"modified":6698,"checkedAt":7,"severity":6699,"references":6702,"versionKeys":6715,"packageCount":32,"repositoryCount":6720},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[6694,6695],"CVE-2026-28684","PYSEC-2026-2270",[254,6695],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[6700],{"type":2562,"score":6701},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6703,6705,6707,6709,6711,6713],{"type":2571,"url":6704},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2566,"url":6706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2571,"url":6708},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2577,"url":6710},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2574,"url":6712},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2566,"url":6714},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[6716,6717,6718,6719],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":255,"slug":6722,"dossier":46,"summary":6723,"aliases":6724,"sourceIds":6727,"published":6728,"modified":6729,"checkedAt":7,"severity":6730,"references":6732,"versionKeys":6743,"packageCount":32,"repositoryCount":561},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[6725,6726],"CVE-2026-40347","PYSEC-2026-3038",[255,6726],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[6731],{"type":2562,"score":2657},[6733,6735,6737,6738,6740,6741],{"type":2577,"url":6734},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2566,"url":6736},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2574,"url":3599},{"type":2577,"url":6739},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2574,"url":3601},{"type":2566,"url":6742},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[3808,3809,3605],{"id":256,"slug":6745,"dossier":46,"summary":6746,"aliases":6747,"sourceIds":6750,"published":6751,"modified":6752,"checkedAt":7,"severity":6753,"references":6755,"versionKeys":6766,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[6748,6749],"CVE-2025-69225","PYSEC-2026-1109",[256,6749],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[6754],{"type":2599,"score":2861},[6756,6758,6760,6762,6763,6764],{"type":2577,"url":6757},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2566,"url":6759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2571,"url":6761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2574,"url":2725},{"type":2574,"url":3541},{"type":2566,"url":6765},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2729,2730,2731,2732,2733,2734,2735],{"id":257,"slug":6768,"dossier":46,"summary":6769,"aliases":6770,"sourceIds":6773,"published":6774,"modified":6775,"checkedAt":7,"severity":6776,"references":6778,"versionKeys":6793,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[6771,6772],"CVE-2025-62164","PYSEC-2026-2018",[257,6772],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[6777],{"type":2562,"score":3766},[6779,6781,6783,6785,6787,6789,6791,6792],{"type":2577,"url":6780},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2566,"url":6782},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":2577,"url":6784},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":2577,"url":6786},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":2566,"url":6788},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2577,"url":6790},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2849],{"id":258,"slug":6795,"dossier":46,"summary":6796,"aliases":6797,"sourceIds":6798,"published":6799,"modified":6800,"checkedAt":7,"severity":6801,"references":6804,"versionKeys":6810,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[],[258],"2026-05-08T23:19:02Z","2026-05-10T04:44:28.835923654Z",[6802],{"type":2562,"score":6803},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6805,6807,6809],{"type":2577,"url":6806},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":2566,"url":6808},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2574,"url":4398},[4402,4403,4404],{"id":259,"slug":6812,"dossier":46,"summary":6813,"aliases":6814,"sourceIds":6818,"published":6819,"modified":6820,"checkedAt":7,"severity":6821,"references":6825,"versionKeys":6839,"packageCount":32,"repositoryCount":105},"ghsa-mw35-8rx3-xf9r-5497861f","Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization",[6815,6816,6817],"CVE-2026-41486","PYSEC-2026-2272","PYSEC-2026-2296",[259,6816],"2026-04-24T16:15:00Z","2026-07-13T07:26:16.094513511Z",[6822,6824],{"type":2599,"score":6823},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":2562,"score":2813},[6826,6828,6830,6832,6834,6836,6837],{"type":2566,"url":6827},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-mw35-8rx3-xf9r",{"type":2566,"url":6829},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41486",{"type":2577,"url":6831},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F54831",{"type":2571,"url":6833},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F62056",{"type":2571,"url":6835},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002Fc02bd31ae31996805868baa446a131a8d304525f",{"type":2574,"url":4335},{"type":2566,"url":6838},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.55.0",[4349,4350,6074],{"id":260,"slug":6841,"dossier":46,"summary":6842,"aliases":6843,"sourceIds":6846,"published":6847,"modified":6848,"checkedAt":7,"severity":6849,"references":6852,"versionKeys":6861,"packageCount":32,"repositoryCount":484},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[6844,6845],"CVE-2026-34519","PYSEC-2026-2101",[260,6845],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[6850,6851],{"type":2599,"score":2861},{"type":2562,"score":2863},[6853,6855,6857,6859,6860],{"type":2571,"url":6854},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2566,"url":6856},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2571,"url":6858},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":261,"slug":6863,"dossier":46,"summary":6864,"aliases":6865,"sourceIds":6868,"published":6869,"modified":6870,"checkedAt":7,"severity":6871,"references":6874,"versionKeys":6887,"packageCount":32,"repositoryCount":32},"ghsa-mxxr-jv3v-6pgc-cbbc697b","FastMCP vulnerable to reflected XSS in client's callback page",[6866,6867],"CVE-2025-62800","PYSEC-2026-1364",[261,6867],"2025-10-29T15:38:29Z","2026-07-07T17:56:05.411756133Z",[6872],{"type":2599,"score":6873},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[6875,6877,6879,6881,6883,6884,6885],{"type":2577,"url":6876},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-mxxr-jv3v-6pgc",{"type":2566,"url":6878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62800",{"type":2577,"url":6880},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fpull\u002F2090",{"type":2577,"url":6882},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fcommit\u002F2a20f54617a37213ed83894a8c2f0ac38a2e83a3",{"type":2574,"url":5272},{"type":2574,"url":3679},{"type":2566,"url":6886},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mxxr-jv3v-6pgc",[3683],{"id":262,"slug":6889,"dossier":46,"summary":6890,"aliases":6891,"sourceIds":6894,"published":6895,"modified":6896,"checkedAt":7,"severity":6897,"references":6900,"versionKeys":6908,"packageCount":32,"repositoryCount":105},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[6892,6893],"CVE-2026-39892","PYSEC-2026-36",[262,6893],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[6898,6899],{"type":2599,"score":3956},{"type":2562,"score":3335},[6901,6903,6905,6906],{"type":2566,"url":6902},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2566,"url":6904},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2574,"url":3485},{"type":2577,"url":6907},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[3493,3494],{"id":263,"slug":6910,"dossier":46,"summary":6911,"aliases":6912,"sourceIds":6915,"published":6916,"modified":6917,"checkedAt":7,"severity":6918,"references":6921,"versionKeys":6930,"packageCount":32,"repositoryCount":484},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[6913,6914],"CVE-2026-34515","PYSEC-2026-2097",[263,6914],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[6919,6920],{"type":2599,"score":6157},{"type":2562,"score":3695},[6922,6924,6926,6928,6929],{"type":2571,"url":6923},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2566,"url":6925},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2571,"url":6927},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":264,"slug":6932,"dossier":46,"summary":6933,"aliases":6934,"sourceIds":6938,"published":6939,"modified":6940,"checkedAt":7,"severity":6941,"references":6944,"versionKeys":6957,"packageCount":32,"repositoryCount":616},"ghsa-pgqp-8h46-6x4j-303ca0ec","MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation",[6935,6936,6937],"BIT-mlflow-2025-14279","CVE-2025-14279","PYSEC-2026-1656",[264,6937],"2026-01-12T09:30:31Z","2026-07-07T17:56:18.060826978Z",[6942],{"type":2562,"score":6943},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6945,6947,6949,6951,6952,6954,6955],{"type":2566,"url":6946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14279",{"type":2577,"url":6948},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F17910",{"type":2577,"url":6950},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fb0ffd289e9b0d0cc32c9e3a9b9f3843ae83dbec3",{"type":2574,"url":3190},{"type":2577,"url":6953},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fef478f72-2e4f-44dc-8055-fc06bef03108",{"type":2574,"url":3194},{"type":2566,"url":6956},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pgqp-8h46-6x4j",[3198,3199],{"id":265,"slug":6959,"dossier":46,"summary":6960,"aliases":6961,"sourceIds":6964,"published":6421,"modified":6965,"checkedAt":7,"severity":6966,"references":6969,"versionKeys":6982,"packageCount":32,"repositoryCount":616},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[6962,6963],"CVE-2025-3777","PYSEC-2026-1986",[265,6963],"2026-07-07T17:56:47.225461188Z",[6967],{"type":2562,"score":6968},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6970,6972,6974,6975,6977,6979,6980],{"type":2566,"url":6971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2577,"url":6973},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2574,"url":2630},{"type":2577,"url":6976},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2577,"url":6978},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2574,"url":2972},{"type":2566,"url":6981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2637,2638],{"id":266,"slug":6984,"dossier":46,"summary":6985,"aliases":6986,"sourceIds":6989,"published":6990,"modified":6991,"checkedAt":7,"severity":6992,"references":6996,"versionKeys":7011,"packageCount":32,"repositoryCount":105},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[6987,6988],"CVE-2025-62372","PYSEC-2026-2019",[266,6988],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[6993,6994],{"type":2562,"score":3097},{"type":2599,"score":6995},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[6997,6999,7001,7002,7004,7005,7007,7009,7010],{"type":2577,"url":6998},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2566,"url":7000},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":2577,"url":6784},{"type":2577,"url":7003},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":2577,"url":6786},{"type":2566,"url":7006},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2577,"url":7008},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[2848,2849,3085],{"id":267,"slug":7013,"dossier":46,"summary":7014,"aliases":7015,"sourceIds":7018,"published":7019,"modified":7020,"checkedAt":7,"severity":7021,"references":7023,"versionKeys":7032,"packageCount":32,"repositoryCount":561},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[7016,7017],"CVE-2026-42561","PYSEC-2026-3039",[267,7017],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[7022],{"type":2562,"score":2720},[7024,7026,7028,7029,7030],{"type":2577,"url":7025},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2566,"url":7027},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2574,"url":3599},{"type":2574,"url":3601},{"type":2566,"url":7031},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[3808,3809,3605],{"id":268,"slug":7034,"dossier":46,"summary":7035,"aliases":7036,"sourceIds":7039,"published":7040,"modified":7041,"checkedAt":7,"severity":7042,"references":7044,"versionKeys":7064,"packageCount":32,"repositoryCount":105},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[7037,7038],"CVE-2026-34755","PYSEC-2026-144",[268,7038],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[7043],{"type":2562,"score":3097},[7045,7047,7049,7051,7053,7054,7055,7057,7059,7061,7062],{"type":2571,"url":7046},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":2566,"url":7048},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":2577,"url":7050},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":2577,"url":7052},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":2577,"url":3108},{"type":2577,"url":3110},{"type":2577,"url":7056},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":2577,"url":7058},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":2577,"url":7060},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":2574,"url":2830},{"type":2577,"url":7063},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[2848,2849,3085],{"id":269,"slug":7066,"dossier":46,"summary":7067,"aliases":7068,"sourceIds":7071,"published":7072,"modified":7073,"checkedAt":7,"severity":7074,"references":7076,"versionKeys":7088,"packageCount":32,"repositoryCount":32},"ghsa-pq5p-34cr-23v9-127ea2b8","Authlib is vulnerable to Denial of Service via Oversized JOSE Segments",[7069,7070],"CVE-2025-61920","PYSEC-2026-1203",[269,7070],"2025-10-10T20:26:43Z","2026-07-07T17:56:17.886883361Z",[7075],{"type":2562,"score":2720},[7077,7079,7081,7083,7084,7085,7086],{"type":2577,"url":7078},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",{"type":2566,"url":7080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61920",{"type":2577,"url":7082},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F867e3f87b072347a1ae9cf6983cc8bbf88447e5e",{"type":2574,"url":4373},{"type":2577,"url":5847},{"type":2574,"url":5609},{"type":2566,"url":7087},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",[4377],{"id":270,"slug":7090,"dossier":46,"summary":7091,"aliases":7092,"sourceIds":7095,"published":7096,"modified":7097,"checkedAt":7,"severity":7098,"references":7100,"versionKeys":7112,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[7093,7094],"CVE-2025-50181","PYSEC-2026-1999",[270,7094],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[7099],{"type":2562,"score":3246},[7101,7103,7105,7107,7108,7109,7110],{"type":2577,"url":7102},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2566,"url":7104},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2571,"url":7106},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2574,"url":2895},{"type":2577,"url":3256},{"type":2574,"url":2897},{"type":2566,"url":7111},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2901,2902,2903,2904],{"id":271,"slug":7114,"dossier":91,"summary":7115,"aliases":7116,"sourceIds":7120,"published":7121,"modified":7122,"checkedAt":7,"severity":7123,"references":7126,"versionKeys":7138,"packageCount":32,"repositoryCount":2906},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[7117,7118,7119],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[271,7119],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[7124,7125],{"type":2599,"score":5368},{"type":2562,"score":4067},[7127,7128,7130,7132,7134,7136,7137],{"type":2577,"url":5372},{"type":2571,"url":7129},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2566,"url":7131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2571,"url":7133},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2571,"url":7135},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2574,"url":3830},{"type":2566,"url":3832},[5408,5409,5410,3834,3835,3836,3837,3838],{"id":272,"slug":7140,"dossier":46,"summary":7141,"aliases":7142,"sourceIds":7145,"published":7146,"modified":7147,"checkedAt":7,"severity":7148,"references":7151,"versionKeys":7172,"packageCount":32,"repositoryCount":105},"ghsa-q279-jhrf-cc6v-6a45143b","Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack",[7143,7144],"CVE-2025-62593","PYSEC-2026-520",[272,7144],"2025-11-26T19:35:23Z","2026-07-01T20:23:03.643178Z",[7149],{"type":2599,"score":7150},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[7152,7154,7156,7158,7160,7162,7164,7165,7167,7169,7170],{"type":2577,"url":7153},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",{"type":2566,"url":7155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62593",{"type":2577,"url":7157},"https:\u002F\u002Fgithub.com\u002Fnccgroup\u002Fsingularity\u002Fpull\u002F68",{"type":2577,"url":7159},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F70e7c72780bdec075dba6cad1afe0832772bfe09",{"type":2577,"url":7161},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Freleases-2.51.1\u002Fray-security\u002Findex.html",{"type":2577,"url":7163},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMalvertising",{"type":2574,"url":4335},{"type":2577,"url":7166},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Fe7889ae542bf0188610bc8b06d274cbf53790cbd\u002Fpython\u002Fray\u002Fdashboard\u002Fhttp_server_head.py#L184-L196",{"type":2577,"url":7168},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Ff39a860436dca3ed5b9dfae84bd867ac10c84dc6\u002Fpython\u002Fray\u002Fdashboard\u002Foptional_utils.py#L129-L155",{"type":2574,"url":4347},{"type":2566,"url":7171},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",[4349,4350,6074],{"id":273,"slug":7174,"dossier":46,"summary":7175,"aliases":7176,"sourceIds":7179,"published":5995,"modified":7180,"checkedAt":7,"severity":7181,"references":7184,"versionKeys":7196,"packageCount":32,"repositoryCount":616},"ghsa-q2r8-vmq7-fpx2-63c75ef0","MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability",[7177,7178],"CVE-2026-2033","PYSEC-2026-2658",[273,7178],"2026-07-13T16:43:16.528255849Z",[7182],{"type":2562,"score":7183},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[7185,7187,7188,7189,7190,7191,7193,7194],{"type":2566,"url":7186},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2033",{"type":2577,"url":6004},{"type":2577,"url":6006},{"type":2574,"url":3190},{"type":2577,"url":6009},{"type":2577,"url":7192},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-105",{"type":2574,"url":3194},{"type":2566,"url":7195},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2r8-vmq7-fpx2",[3198,3199],{"id":274,"slug":7198,"dossier":46,"summary":7199,"aliases":7200,"sourceIds":7203,"published":6421,"modified":7204,"checkedAt":7,"severity":7205,"references":7207,"versionKeys":7218,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[7201,7202],"CVE-2025-3263","PYSEC-2026-1987",[274,7202],"2026-07-07T17:56:57.889099913Z",[7206],{"type":2562,"score":3376},[7208,7210,7211,7212,7213,7215,7216],{"type":2566,"url":7209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2577,"url":6429},{"type":2577,"url":6431},{"type":2574,"url":2630},{"type":2577,"url":7214},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2574,"url":2972},{"type":2566,"url":7217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2637],{"id":275,"slug":7220,"dossier":46,"summary":7221,"aliases":7222,"sourceIds":7225,"published":7226,"modified":7227,"checkedAt":7,"severity":7228,"references":7232,"versionKeys":7245,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[7223,7224],"CVE-2024-56326","PYSEC-2026-1475",[275,7224],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[7229,7231],{"type":2562,"score":7230},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2599,"score":5423},[7233,7235,7237,7239,7240,7241,7242,7243],{"type":2577,"url":7234},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2566,"url":7236},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2571,"url":7238},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2574,"url":5432},{"type":2577,"url":5983},{"type":2577,"url":5434},{"type":2574,"url":5438},{"type":2566,"url":7244},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[5442],{"id":276,"slug":7247,"dossier":46,"summary":7248,"aliases":7249,"sourceIds":7253,"published":7254,"modified":7255,"checkedAt":7,"severity":7256,"references":7259,"versionKeys":7279,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[7250,7251,7252],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[276,7252],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[7257,7258],{"type":2562,"score":2720},{"type":2599,"score":3956},[7260,7262,7264,7266,7268,7270,7272,7273,7274,7276,7277],{"type":2577,"url":7261},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2566,"url":7263},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2577,"url":7265},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2577,"url":7267},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2577,"url":7269},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2577,"url":7271},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2574,"url":2666},{"type":2577,"url":5579},{"type":2577,"url":7275},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2574,"url":2766},{"type":2566,"url":7278},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2670],{"id":277,"slug":7281,"dossier":46,"summary":7282,"aliases":7283,"sourceIds":7286,"published":7287,"modified":7288,"checkedAt":7,"severity":7289,"references":7294,"versionKeys":7306,"packageCount":32,"repositoryCount":105},"ghsa-q5fh-2hc8-f6rq-8b758e91","Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown \u002F job deletion)",[7284,7285],"CVE-2026-27482","PYSEC-2026-2271",[277,7285],"2026-02-20T21:15:25Z","2026-07-13T07:26:45.034743516Z",[7290,7292],{"type":2562,"score":7291},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"type":2562,"score":7293},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[7295,7297,7299,7301,7303,7304],{"type":2632,"url":7296},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q5fh-2hc8-f6rq",{"type":2566,"url":7298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27482",{"type":2571,"url":7300},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F60526",{"type":2571,"url":7302},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",{"type":2574,"url":4335},{"type":2566,"url":7305},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.54.0",[4349,4350,6074],{"id":278,"slug":7308,"dossier":46,"summary":7309,"aliases":7310,"sourceIds":7313,"published":7314,"modified":7315,"checkedAt":7,"severity":7316,"references":7318,"versionKeys":7338,"packageCount":32,"repositoryCount":105},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[7311,7312],"CVE-2026-41523","PYSEC-2026-2300",[278,7312],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[7317],{"type":2562,"score":2748},[7319,7321,7323,7325,7326,7327,7329,7331,7333,7334,7336],{"type":2632,"url":7320},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":2566,"url":7322},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":2571,"url":7324},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":2566,"url":3108},{"type":2566,"url":3110},{"type":2577,"url":7328},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":2928,"url":7330},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":2577,"url":7332},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":2574,"url":2830},{"type":2566,"url":7335},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":2577,"url":7337},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[2848,2849,3085],{"id":279,"slug":7340,"dossier":91,"summary":7341,"aliases":7342,"sourceIds":7345,"published":7346,"modified":7347,"checkedAt":7,"severity":7348,"references":7352,"versionKeys":7358,"packageCount":32,"repositoryCount":472},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[7343,7344],"CVE-2026-44431","PYSEC-2026-141",[279,7344],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[7349,7350],{"type":2562,"score":5047},{"type":2599,"score":7351},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7353,7355,7357],{"type":2566,"url":7354},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2566,"url":7356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2574,"url":2895},[2901,2902,2903,2904,2905,6689],{"id":280,"slug":7360,"dossier":46,"summary":7361,"aliases":7362,"sourceIds":7366,"published":7367,"modified":7368,"checkedAt":7,"severity":7369,"references":7373,"versionKeys":7391,"packageCount":32,"repositoryCount":484},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[7363,7364,7365],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[280],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[7370,7371],{"type":2562,"score":3426},{"type":2599,"score":7372},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7374,7376,7378,7380,7382,7384,7385,7387,7389],{"type":2566,"url":7375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2577,"url":7377},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2577,"url":7379},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2577,"url":7381},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2577,"url":7383},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2574,"url":2935},{"type":2577,"url":7386},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2577,"url":7388},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2577,"url":7390},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2947,2948,2949,4824,4825,7392,7393,7394],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":281,"slug":7396,"dossier":46,"summary":7397,"aliases":7398,"sourceIds":7401,"published":7402,"modified":7403,"checkedAt":7,"severity":7404,"references":7407,"versionKeys":7433,"packageCount":32,"repositoryCount":105},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[7399,7400],"CVE-2026-24779","PYSEC-2026-2020",[281,7400],"2026-01-28T16:14:28Z","2026-07-17T16:30:32.009053490Z",[7405],{"type":2562,"score":7406},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[7408,7410,7412,7414,7416,7418,7419,7420,7422,7424,7426,7428,7429,7430,7431,7432],{"type":2577,"url":7409},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2566,"url":7411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":2577,"url":7413},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":2577,"url":7415},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":2577,"url":7417},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":2574,"url":2826},{"type":2574,"url":2830},{"type":2577,"url":7421},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":2566,"url":7423},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2577,"url":7425},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":2577,"url":7427},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":2577,"url":2842},{"type":2577,"url":2846},{"type":2577,"url":3363},{"type":2577,"url":4997},{"type":2577,"url":4995},[2848,2849,3085],{"id":282,"slug":7435,"dossier":46,"summary":7436,"aliases":7437,"sourceIds":7440,"published":7441,"modified":7442,"checkedAt":7,"severity":7443,"references":7446,"versionKeys":7461,"packageCount":32,"repositoryCount":3839},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[7438,7439],"CVE-2026-22701","PYSEC-2026-1374",[282,7439],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[7444],{"type":2562,"score":7445},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[7447,7449,7451,7453,7455,7457,7459],{"type":2577,"url":7448},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2566,"url":7450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2577,"url":7452},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2577,"url":7454},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2574,"url":7456},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2574,"url":7458},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2566,"url":7460},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[7462,7463,7464,7465],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":283,"slug":7467,"dossier":46,"summary":7468,"aliases":7469,"sourceIds":7472,"published":7473,"modified":7474,"checkedAt":7,"severity":7475,"references":7478,"versionKeys":7492,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[7470,7471],"CVE-2025-2099","PYSEC-2025-40",[283,7471],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[7476,7477],{"type":2562,"score":3376},{"type":2562,"score":2720},[7479,7481,7483,7485,7486,7488,7490],{"type":2566,"url":7480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2577,"url":7482},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2571,"url":7484},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2574,"url":2630},{"type":2577,"url":7487},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2577,"url":7489},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2566,"url":7491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2637],{"id":284,"slug":7494,"dossier":46,"summary":6267,"aliases":7495,"sourceIds":7498,"published":7499,"modified":7500,"checkedAt":7,"severity":7501,"references":7505,"versionKeys":7519,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[7496,7497],"CVE-2024-11392","PYSEC-2024-227",[284,7497],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[7502,7504],{"type":2562,"score":7503},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2562,"score":2813},[7506,7508,7509,7510,7511,7513,7515,7517],{"type":2566,"url":7507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2577,"url":6282},{"type":2577,"url":6284},{"type":2574,"url":2630},{"type":2577,"url":7512},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2577,"url":7514},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2566,"url":7516},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2566,"url":7518},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2637],{"id":285,"slug":7521,"dossier":46,"summary":7522,"aliases":7523,"sourceIds":7527,"published":7528,"modified":7529,"checkedAt":7,"severity":7530,"references":7533,"versionKeys":7546,"packageCount":32,"repositoryCount":616},"ghsa-r23q-823p-vmf7-9a5ef709","MLflow Command Injection vulnerability",[7524,7525,7526],"BIT-mlflow-2025-15379","CVE-2025-15379","PYSEC-2026-423",[285,7526],"2026-03-30T09:31:28Z","2026-07-01T20:22:58.350388Z",[7531],{"type":2562,"score":7532},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7534,7536,7538,7540,7541,7543,7544],{"type":2566,"url":7535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15379",{"type":2577,"url":7537},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F361b6f620adf98385c6721e384fb5ef9a30bb05e",{"type":2577,"url":7539},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fa22ce7157f646bdce4c95106fc38ccc9ca289205",{"type":2574,"url":3190},{"type":2577,"url":7542},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdc9c1c20-7879-4050-87df-4d095fe5ca75",{"type":2574,"url":3194},{"type":2566,"url":7545},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r23q-823p-vmf7",[3198,3199],{"id":286,"slug":7548,"dossier":46,"summary":7549,"aliases":7550,"sourceIds":7554,"published":7555,"modified":7556,"checkedAt":7,"severity":7557,"references":7560,"versionKeys":7571,"packageCount":32,"repositoryCount":105},"ghsa-r5m9-wm49-959f-62964e46","MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions",[7551,7552,7553],"BIT-mlflow-2026-3198","CVE-2026-3198","PYSEC-2026-2659",[286,7553],"2026-06-02T06:30:26Z","2026-07-13T16:42:37.733340178Z",[7558],{"type":2562,"score":7559},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[7561,7563,7565,7566,7568,7569],{"type":2566,"url":7562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3198",{"type":2577,"url":7564},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6989066af33fdcb03588fd71a1a67f8fc5ef12c9",{"type":2574,"url":3190},{"type":2577,"url":7567},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe57db731-97d3-40c3-a429-831ee959807f",{"type":2574,"url":3194},{"type":2566,"url":7570},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r5m9-wm49-959f",[3198,3199,3200],{"id":287,"slug":7573,"dossier":46,"summary":7574,"aliases":7575,"sourceIds":7578,"published":7579,"modified":7580,"checkedAt":7,"severity":7581,"references":7586,"versionKeys":7624,"packageCount":32,"repositoryCount":65},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[7576,7577],"CVE-2026-26007","PYSEC-2026-2141",[287,7577],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[7582,7584],{"type":2599,"score":7583},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2562,"score":7585},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[7587,7589,7591,7593,7594,7596,7598,7600,7601,7603,7605,7607,7609,7611,7613,7615,7617,7619,7621,7623],{"type":2577,"url":7588},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2566,"url":7590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2577,"url":7592},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2574,"url":3485},{"type":2577,"url":7595},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2577,"url":7597},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2577,"url":7599},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2566,"url":5389},{"type":2566,"url":7602},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2566,"url":7604},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2566,"url":7606},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2566,"url":7608},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2566,"url":7610},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2566,"url":7612},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2566,"url":7614},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2566,"url":7616},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2566,"url":7618},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2566,"url":7620},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2566,"url":7622},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2566,"url":5406},[3489,3490,3491,3492,3493,3494],{"id":288,"slug":7626,"dossier":91,"summary":7627,"aliases":7628,"sourceIds":7632,"published":7633,"modified":7634,"checkedAt":7,"severity":7635,"references":7638,"versionKeys":7653,"packageCount":32,"repositoryCount":2906},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[7629,7630,7631],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[288,7631],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[7636,7637],{"type":2562,"score":2923},{"type":2599,"score":3823},[7639,7641,7643,7645,7647,7648,7649,7651],{"type":2577,"url":7640},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2566,"url":7642},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2577,"url":7644},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2577,"url":7646},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2574,"url":3830},{"type":2577,"url":3832},{"type":2574,"url":7650},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2566,"url":7652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":289,"slug":7655,"dossier":46,"summary":7656,"aliases":7657,"sourceIds":7660,"published":7661,"modified":7662,"checkedAt":7,"severity":7663,"references":7665,"versionKeys":7677,"packageCount":32,"repositoryCount":32},"ghsa-r95x-qfjj-fjj2-df4fdb80","Authlib OIDC Implicit\u002FHybrid Authorization Vulnerable to Open Redirect",[7658,7659],"CVE-2026-44681","PYSEC-2026-188",[289,7659],"2026-05-13T01:36:03Z","2026-06-09T00:00:25.468861825Z",[7664],{"type":2562,"score":6232},[7666,7668,7670,7671,7673,7675],{"type":2632,"url":7667},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-r95x-qfjj-fjj2",{"type":2566,"url":7669},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44681",{"type":2574,"url":4373},{"type":2577,"url":7672},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.12",{"type":2577,"url":7674},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.7.1",{"type":2577,"url":7676},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-188.yaml",[4377],{"id":290,"slug":7679,"dossier":46,"summary":7680,"aliases":7681,"sourceIds":7682,"published":7683,"modified":7684,"checkedAt":7,"severity":7685,"references":7686,"versionKeys":7692,"packageCount":32,"repositoryCount":32},"ghsa-rcfx-77hg-w2wv-60228d8d","FastMCP updated to MCP 1.23+ due to CVE-2025-66416",[],[290],"2025-12-26T23:20:50Z","2025-12-26T23:27:27.257304Z",[],[7687,7689,7690,7691],{"type":2577,"url":7688},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rcfx-77hg-w2wv",{"type":2577,"url":5106},{"type":2566,"url":5108},{"type":2574,"url":5272},[3683],{"id":291,"slug":7694,"dossier":46,"summary":7695,"aliases":7696,"sourceIds":7699,"published":7700,"modified":7701,"checkedAt":7,"severity":7702,"references":7704,"versionKeys":7719,"packageCount":32,"repositoryCount":616},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[7697,7698],"CVE-2025-6051","PYSEC-2026-1988",[291,7698],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[7703],{"type":2562,"score":3376},[7705,7707,7709,7711,7713,7714,7716,7717],{"type":2566,"url":7706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2577,"url":7708},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2577,"url":7710},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2577,"url":7712},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2574,"url":2630},{"type":2577,"url":7715},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2574,"url":2972},{"type":2566,"url":7718},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2637,2638],{"id":292,"slug":7721,"dossier":46,"summary":7722,"aliases":7723,"sourceIds":7726,"published":7727,"modified":7728,"checkedAt":7,"severity":7729,"references":7732,"versionKeys":7745,"packageCount":32,"repositoryCount":3839},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[7724,7725],"CVE-2026-25087","PYSEC-2026-113",[292,7725],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[7730],{"type":2562,"score":7731},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[7733,7735,7737,7739,7741,7743],{"type":2566,"url":7734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2571,"url":7736},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2574,"url":7738},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2577,"url":7740},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2566,"url":7742},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2566,"url":7744},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[7746,7747,7748,7749],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":293,"slug":7751,"dossier":46,"summary":7752,"aliases":7753,"sourceIds":7756,"published":7757,"modified":7758,"checkedAt":7,"severity":7759,"references":7762,"versionKeys":7771,"packageCount":32,"repositoryCount":32},"ghsa-rj5c-58rq-j5g5-60d8d6a7","FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name",[7754,7755],"CVE-2025-62801","PYSEC-2026-1365",[293,7755],"2025-10-29T15:39:03Z","2026-07-07T17:56:56.677841650Z",[7760],{"type":2599,"score":7761},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7763,7765,7767,7768,7769],{"type":2577,"url":7764},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rj5c-58rq-j5g5",{"type":2566,"url":7766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62801",{"type":2574,"url":5272},{"type":2574,"url":3679},{"type":2566,"url":7770},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rj5c-58rq-j5g5",[3683],{"id":294,"slug":7773,"dossier":46,"summary":7774,"aliases":7775,"sourceIds":7778,"published":7779,"modified":7780,"checkedAt":7,"severity":7781,"references":7783,"versionKeys":7791,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[7776,7777],"CVE-2026-42215","PYSEC-2026-2160",[294,7777],"2026-04-25T23:42:16Z","2026-07-13T07:26:42.486885613Z",[7782],{"type":2562,"score":3766},[7784,7786,7788,7789],{"type":2632,"url":7785},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2566,"url":7787},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":2574,"url":4398},{"type":2571,"url":7790},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[4402,4403,4404],{"id":295,"slug":7793,"dossier":46,"summary":7794,"aliases":7795,"sourceIds":7799,"published":5508,"modified":7800,"checkedAt":7,"severity":7801,"references":7804,"versionKeys":7822,"packageCount":32,"repositoryCount":3839},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[7796,7797,7798],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[295],"2026-07-17T17:15:51.452848951Z",[7802,7803],{"type":2562,"score":3426},{"type":2599,"score":7372},[7805,7807,7809,7811,7813,7815,7816,7818,7820],{"type":2566,"url":7806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2577,"url":7808},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2577,"url":7810},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2577,"url":7812},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2577,"url":7814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2574,"url":2935},{"type":2577,"url":7817},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2577,"url":7819},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2577,"url":7821},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[7823,2947,2948,2949,4824,4825,7392,7393,7394],"pypi:torch@2.10.0",{"id":296,"slug":7825,"dossier":46,"summary":7826,"aliases":7827,"sourceIds":7831,"published":7832,"modified":7833,"checkedAt":7,"severity":7834,"references":7837,"versionKeys":7850,"packageCount":32,"repositoryCount":105},"ghsa-rvhj-8chj-8v3c-edfd1899","Mlflow: Command Injection when serving models with enable_mlserver=True",[7828,7829,7830],"BIT-mlflow-2026-0596","CVE-2026-0596","PYSEC-2026-424",[296,7830],"2026-03-31T15:31:56Z","2026-07-01T20:22:58.365246Z",[7835],{"type":2562,"score":7836},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7838,7840,7842,7844,7845,7847,7848],{"type":2566,"url":7839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0596",{"type":2577,"url":7841},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19738",{"type":2577,"url":7843},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F202fac4c83ccc8544c087c142b80196d0e60695c",{"type":2574,"url":3190},{"type":2577,"url":7846},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2e905add-f9f5-4309-a3db-b17de5981285",{"type":2574,"url":3194},{"type":2566,"url":7849},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rvhj-8chj-8v3c",[3198,3199,3200],{"id":297,"slug":7852,"dossier":46,"summary":7853,"aliases":7854,"sourceIds":7857,"published":7858,"modified":7859,"checkedAt":7,"severity":7860,"references":7863,"versionKeys":7874,"packageCount":32,"repositoryCount":32},"ghsa-rww4-4w9c-7733-0e0ef0e5","FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities",[7855,7856],"CVE-2026-27124","PYSEC-2026-2476",[297,7856],"2026-03-31T22:32:28Z","2026-07-18T14:44:30.738106660Z",[7861],{"type":2599,"score":7862},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7864,7866,7868,7870,7871,7872],{"type":2577,"url":7865},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rww4-4w9c-7733",{"type":2577,"url":7867},"https:\u002F\u002Fgithub.com\u002Fjlowin\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-rww4-4w9c-7733",{"type":2566,"url":7869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27124",{"type":2574,"url":3677},{"type":2574,"url":3679},{"type":2566,"url":7873},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rww4-4w9c-7733",[3683],{"id":298,"slug":7876,"dossier":46,"summary":7877,"aliases":7878,"sourceIds":7881,"published":7882,"modified":7883,"checkedAt":7,"severity":7884,"references":7887,"versionKeys":7899,"packageCount":32,"repositoryCount":105},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[7879,7880],"CVE-2026-55574","PYSEC-2026-2304",[298,7880],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[7885,7886],{"type":2562,"score":2720},{"type":2599,"score":3590},[7888,7890,7892,7894,7896,7898],{"type":2566,"url":7889},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":2566,"url":7891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":2571,"url":7893},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":2571,"url":7895},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":2577,"url":7897},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":2574,"url":2830},[2848,2849,3085],{"id":299,"slug":7901,"dossier":46,"summary":7902,"aliases":7903,"sourceIds":7906,"published":7907,"modified":7908,"checkedAt":7,"severity":7909,"references":7911,"versionKeys":7926,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[7904,7905],"CVE-2025-48956","PYSEC-2026-2021",[299,7905],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[7910],{"type":2562,"score":2720},[7912,7914,7916,7918,7920,7922,7924,7925],{"type":2577,"url":7913},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2566,"url":7915},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":2577,"url":7917},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":2577,"url":7919},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":2566,"url":7921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2577,"url":7923},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[3085],{"id":300,"slug":7928,"dossier":46,"summary":7929,"aliases":7930,"sourceIds":7933,"published":7934,"modified":7935,"checkedAt":7,"severity":7936,"references":7938,"versionKeys":7946,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[7931,7932],"CVE-2026-44244","PYSEC-2026-2163",[300,7932],"2026-05-06T21:58:00Z","2026-07-13T07:26:38.585123077Z",[7937],{"type":2562,"score":7230},[7939,7941,7943,7944],{"type":2632,"url":7940},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":2566,"url":7942},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":2574,"url":4398},{"type":2571,"url":7945},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[4402,4403,4404],{"id":301,"slug":7948,"dossier":46,"summary":7949,"aliases":7950,"sourceIds":7953,"published":7954,"modified":7955,"checkedAt":7,"severity":7956,"references":7960,"versionKeys":7972,"packageCount":32,"repositoryCount":561},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[7951,7952],"CVE-2026-41205","PYSEC-2026-88",[301,7952],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[7957,7958],{"type":2562,"score":3695},{"type":2599,"score":7959},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7961,7963,7965,7967,7969,7970],{"type":2566,"url":7962},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2566,"url":7964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2577,"url":7966},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2577,"url":7968},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2574,"url":2792},{"type":2577,"url":7971},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2800,2801],{"id":302,"slug":7974,"dossier":46,"summary":7975,"aliases":7976,"sourceIds":7979,"published":7980,"modified":7981,"checkedAt":7,"severity":7982,"references":7985,"versionKeys":7994,"packageCount":32,"repositoryCount":561},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[7977,7978],"CVE-2026-53540","PYSEC-2026-3040",[302,7978],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[7983],{"type":2562,"score":7984},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7986,7988,7989,7990,7992],{"type":2577,"url":7987},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2574,"url":3599},{"type":2574,"url":3601},{"type":2566,"url":7991},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2566,"url":7993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[3808,3809,3605],{"id":303,"slug":7996,"dossier":46,"summary":7997,"aliases":7998,"sourceIds":8001,"published":8002,"modified":8003,"checkedAt":7,"severity":8004,"references":8006,"versionKeys":8017,"packageCount":32,"repositoryCount":561},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[7999,8000],"CVE-2026-53537","PYSEC-2026-3041",[303,8000],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[8005],{"type":2562,"score":4169},[8007,8009,8011,8012,8014,8016],{"type":2577,"url":8008},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2566,"url":8010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2574,"url":3599},{"type":2566,"url":8013},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2577,"url":8015},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2574,"url":3601},[3808,3809,3605],{"id":304,"slug":8019,"dossier":46,"summary":8020,"aliases":8021,"sourceIds":8025,"published":5508,"modified":8026,"checkedAt":7,"severity":8027,"references":8030,"versionKeys":8045,"packageCount":32,"repositoryCount":494},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[8022,8023,8024],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[304],"2026-06-10T17:41:15.774477397Z",[8028,8029],{"type":2562,"score":3426},{"type":2599,"score":5513},[8031,8033,8034,8035,8036,8038,8039,8041,8043],{"type":2566,"url":8032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2577,"url":5518},{"type":2577,"url":5520},{"type":2577,"url":5522},{"type":2577,"url":8037},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2574,"url":2935},{"type":2577,"url":8040},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2577,"url":8042},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2577,"url":8044},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2947,2948,2949,4824,4825,7392],{"id":305,"slug":8047,"dossier":46,"summary":8048,"aliases":8049,"sourceIds":8053,"published":8054,"modified":8055,"checkedAt":7,"severity":8056,"references":8059,"versionKeys":8069,"packageCount":32,"repositoryCount":105},"ghsa-vhcx-3pq2-4fvc-4147c43c","MLFlow path traversal vulnerability",[8050,8051,8052],"BIT-mlflow-2025-15036","CVE-2025-15036","PYSEC-2026-425",[305,8052],"2026-03-30T03:30:19Z","2026-07-01T20:22:58.380148Z",[8057],{"type":2562,"score":8058},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[8060,8062,8063,8064,8066,8067],{"type":2566,"url":8061},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15036",{"type":2577,"url":5719},{"type":2574,"url":3190},{"type":2577,"url":8065},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0",{"type":2574,"url":3194},{"type":2566,"url":8068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vhcx-3pq2-4fvc",[3198,3199,3200],{"id":306,"slug":8071,"dossier":46,"summary":8072,"aliases":8073,"sourceIds":8075,"published":8076,"modified":8077,"checkedAt":7,"severity":8078,"references":8080,"versionKeys":8092,"packageCount":32,"repositoryCount":616},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[8074],"CVE-2026-59950",[306],"2026-07-16T20:14:34Z","2026-07-16T20:30:09.565200126Z",[8079],{"type":2599,"score":5103},[8081,8083,8085,8087,8089,8090],{"type":2577,"url":8082},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":2566,"url":8084},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":2577,"url":8086},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":2577,"url":8088},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":2574,"url":5114},{"type":2577,"url":8091},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",[5120,5121],{"id":307,"slug":8094,"dossier":46,"summary":8095,"aliases":8096,"sourceIds":8099,"published":8100,"modified":8101,"checkedAt":7,"severity":8102,"references":8105,"versionKeys":8118,"packageCount":32,"repositoryCount":105},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[8097,8098],"CVE-2025-43859","PYSEC-2026-348",[307,8098],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[8103],{"type":2562,"score":8104},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[8106,8108,8110,8112,8114,8116],{"type":2577,"url":8107},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2566,"url":8109},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2577,"url":8111},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2574,"url":8113},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2574,"url":8115},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2566,"url":8117},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[8119],"pypi:h11@0.14.0",{"id":308,"slug":8121,"dossier":46,"summary":8122,"aliases":8123,"sourceIds":8126,"published":8127,"modified":8128,"checkedAt":7,"severity":8129,"references":8131,"versionKeys":8143,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[8124,8125],"CVE-2025-48944","PYSEC-2026-2023",[308,8125],"2025-05-28T19:42:32Z","2026-07-17T16:30:29.005158547Z",[8130],{"type":2562,"score":3097},[8132,8134,8136,8137,8139,8141,8142],{"type":2577,"url":8133},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2566,"url":8135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":2577,"url":4251},{"type":2566,"url":8138},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2577,"url":8140},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":2574,"url":2830},{"type":2574,"url":2826},[3085],{"id":309,"slug":8145,"dossier":46,"summary":8146,"aliases":8147,"sourceIds":8150,"published":8151,"modified":8152,"checkedAt":7,"severity":8153,"references":8158,"versionKeys":8173,"packageCount":32,"repositoryCount":32},"ghsa-vv7q-7jx5-f767-0be97d94","FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability",[8148,8149],"CVE-2026-32871","PYSEC-2026-338",[309,8149],"2026-03-31T22:53:21Z","2026-07-18T14:44:31.819120844Z",[8154,8156],{"type":2562,"score":8155},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2599,"score":8157},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[8159,8161,8163,8165,8167,8168,8170,8171],{"type":2577,"url":8160},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fsecurity\u002Fadvisories\u002FGHSA-vv7q-7jx5-f767",{"type":2566,"url":8162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32871",{"type":2577,"url":8164},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fpull\u002F3507",{"type":2577,"url":8166},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Fcommit\u002F40bdfb6b1de0ce30609ee9ba5bb95ecd04a9fb71",{"type":2574,"url":3677},{"type":2577,"url":8169},"https:\u002F\u002Fgithub.com\u002FPrefectHQ\u002Ffastmcp\u002Freleases\u002Ftag\u002Fv3.2.0",{"type":2574,"url":3679},{"type":2566,"url":8172},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vv7q-7jx5-f767",[3683],{"id":310,"slug":8175,"dossier":46,"summary":8176,"aliases":8177,"sourceIds":8180,"published":8181,"modified":8182,"checkedAt":7,"severity":8183,"references":8187,"versionKeys":8196,"packageCount":32,"repositoryCount":484},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[8178,8179],"CVE-2026-22815","PYSEC-2026-2094",[310,8179],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[8184,8185],{"type":2599,"score":3956},{"type":2599,"score":8186},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8188,8190,8192,8194,8195],{"type":2571,"url":8189},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2566,"url":8191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2571,"url":8193},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2574,"url":2725},{"type":2566,"url":2873},[2729,2730,2731,2732,2733,2734,2735,2736],{"id":311,"slug":8198,"dossier":46,"summary":8199,"aliases":8200,"sourceIds":8204,"published":8205,"modified":8206,"checkedAt":7,"severity":8207,"references":8209,"versionKeys":8219,"packageCount":32,"repositoryCount":105},"ghsa-w5xq-c4pf-ghq7-a926672a","MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks",[8201,8202,8203],"BIT-mlflow-2026-2734","CVE-2026-2734","PYSEC-2026-2660",[311,8203],"2026-05-21T06:31:31Z","2026-07-13T16:43:34.965176091Z",[8208],{"type":2562,"score":7559},[8210,8212,8213,8214,8216,8217],{"type":2566,"url":8211},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2734",{"type":2577,"url":7564},{"type":2574,"url":3190},{"type":2577,"url":8215},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd632f783-b2c7-4a3b-af5e-1d693e841c08",{"type":2574,"url":3194},{"type":2566,"url":8218},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w5xq-c4pf-ghq7",[3198,3199,3200],{"id":312,"slug":8221,"dossier":46,"summary":8222,"aliases":8223,"sourceIds":8226,"published":8227,"modified":8228,"checkedAt":7,"severity":8229,"references":8231,"versionKeys":8243,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[8224,8225],"CVE-2025-48887","PYSEC-2025-50",[312,8225],"2025-05-28T17:49:33Z","2026-06-10T17:14:19.371824623Z",[8230],{"type":2562,"score":3097},[8232,8234,8236,8237,8238,8240,8241],{"type":2632,"url":8233},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":2566,"url":8235},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":2928,"url":6310},{"type":2571,"url":6312},{"type":2577,"url":8239},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":2574,"url":2830},{"type":2566,"url":8242},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[3085],{"id":313,"slug":8245,"dossier":46,"summary":8246,"aliases":8247,"sourceIds":8250,"published":8251,"modified":8252,"checkedAt":7,"severity":8253,"references":8257,"versionKeys":8269,"packageCount":32,"repositoryCount":616},"ghsa-w6vg-jg77-2qg6-e819e20a","MLX has heap-buffer-overflow in load()",[8248,8249],"CVE-2025-62608","PYSEC-2025-138",[313,8249],"2025-11-21T18:02:38Z","2026-06-06T00:45:48.146084644Z",[8254,8256],{"type":2599,"score":8255},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2562,"score":4986},[8258,8260,8262,8264,8266,8267],{"type":2632,"url":8259},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-w6vg-jg77-2qg6",{"type":2566,"url":8261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62608",{"type":2571,"url":8263},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F1",{"type":2571,"url":8265},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F2",{"type":2574,"url":6333},{"type":2577,"url":8268},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-138.yaml",[6337,6338],{"id":314,"slug":8271,"dossier":46,"summary":8272,"aliases":8273,"sourceIds":8276,"published":8277,"modified":8278,"checkedAt":7,"severity":8279,"references":8282,"versionKeys":8299,"packageCount":32,"repositoryCount":3839},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[8274,8275],"CVE-2025-68146","PYSEC-2026-1375",[314,8275],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[8280],{"type":2562,"score":8281},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8283,8285,8287,8288,8290,8292,8294,8295,8297],{"type":2577,"url":8284},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2577,"url":8286},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2574,"url":7456},{"type":2577,"url":8289},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2577,"url":8291},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2577,"url":8293},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2574,"url":7458},{"type":2566,"url":8296},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2566,"url":8298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[7462,7463,7464,7465],{"id":315,"slug":8301,"dossier":46,"summary":8302,"aliases":8303,"sourceIds":8306,"published":8307,"modified":8308,"checkedAt":7,"severity":8309,"references":8311,"versionKeys":8321,"packageCount":32,"repositoryCount":32},"ghsa-w8p2-r796-3vmq-0e5f6b4f","Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type",[8304,8305],"CVE-2026-41479","PYSEC-2026-2119",[315,8305],"2026-06-08T17:52:04Z","2026-07-18T17:30:29.215396840Z",[8310],{"type":2562,"score":6101},[8312,8314,8316,8318,8319],{"type":2632,"url":8313},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-w8p2-r796-3vmq",{"type":2566,"url":8315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41479",{"type":2571,"url":8317},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F3be08468201a7766a93012ce149ea12822cab096",{"type":2574,"url":4373},{"type":2577,"url":8320},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-2119.yaml",[4377],{"id":316,"slug":8323,"dossier":46,"summary":8324,"aliases":8325,"sourceIds":8328,"published":8329,"modified":8330,"checkedAt":7,"severity":8331,"references":8334,"versionKeys":8345,"packageCount":32,"repositoryCount":532},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[8326,8327],"CVE-2025-69872","PYSEC-2026-2447",[316,8327],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[8332],{"type":2599,"score":8333},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8335,8337,8339,8341,8343],{"type":2566,"url":8336},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2577,"url":8338},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2574,"url":8340},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2574,"url":8342},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2566,"url":8344},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[8346],"pypi:diskcache@5.6.3",{"id":317,"slug":8348,"dossier":46,"summary":8349,"aliases":8350,"sourceIds":8353,"published":8354,"modified":8355,"checkedAt":7,"severity":8356,"references":8359,"versionKeys":8371,"packageCount":32,"repositoryCount":616},"ghsa-wcj4-jw5j-44wh-9e6393c7","CBORDecoder reuse can leak shareable values across decode calls",[8351,8352],"CVE-2025-68131","PYSEC-2025-90",[317,8352],"2025-12-31T02:15:42.527Z","2026-06-05T14:30:11.179250820Z",[8357,8358],{"type":2599,"score":8255},{"type":2562,"score":3695},[8360,8362,8364,8366,8368,8369],{"type":2632,"url":8361},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-wcj4-jw5j-44wh",{"type":2566,"url":8363},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68131",{"type":2571,"url":8365},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F268",{"type":2577,"url":8367},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Ff1d701cd2c411ee40bb1fe383afe7f365f35abf0",{"type":2574,"url":3051},{"type":2577,"url":8370},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcbor2\u002FPYSEC-2025-90.yaml",[3055,3056],{"id":318,"slug":8373,"dossier":46,"summary":8374,"aliases":8375,"sourceIds":8379,"published":8380,"modified":8381,"checkedAt":7,"severity":8382,"references":8384,"versionKeys":8393,"packageCount":32,"repositoryCount":616},"ghsa-wf7f-8fxf-xfxc-07509bf2","MLFlow unsafe deserialization",[8376,8377,8378],"BIT-mlflow-2024-37059","CVE-2024-37059","PYSEC-2026-1660",[318,8378],"2024-06-04T12:31:05Z","2026-07-07T17:56:49.672624556Z",[8383],{"type":2562,"score":2813},[8385,8387,8388,8390,8391],{"type":2566,"url":8386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-37059",{"type":2574,"url":3190},{"type":2577,"url":8389},"https:\u002F\u002Fhiddenlayer.com\u002Fsai-security-advisory\u002Fmlflow-june2024",{"type":2574,"url":3194},{"type":2566,"url":8392},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf7f-8fxf-xfxc",[3198,3199],{"id":319,"slug":8395,"dossier":91,"summary":8396,"aliases":8397,"sourceIds":8401,"published":8402,"modified":8403,"checkedAt":7,"severity":8404,"references":8407,"versionKeys":8445,"packageCount":32,"repositoryCount":2906},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[8398,8399,8400],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[319,8400],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[8405,8406],{"type":2562,"score":2720},{"type":2599,"score":3590},[8408,8410,8412,8414,8416,8417,8419,8421,8423,8425,8427,8429,8430,8432,8434,8436,8437,8439,8441,8443],{"type":2577,"url":8409},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2566,"url":8411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2577,"url":8413},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2577,"url":8415},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2574,"url":3830},{"type":2577,"url":8418},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2577,"url":8420},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2577,"url":8422},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2566,"url":8424},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2566,"url":8426},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2566,"url":8428},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2566,"url":5395},{"type":2566,"url":8431},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2566,"url":8433},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2566,"url":8435},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2566,"url":4508},{"type":2566,"url":8438},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2566,"url":8440},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2566,"url":8442},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2566,"url":8444},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":320,"slug":8447,"dossier":91,"summary":8448,"aliases":8449,"sourceIds":8453,"published":8454,"modified":8455,"checkedAt":7,"severity":8456,"references":8459,"versionKeys":8468,"packageCount":32,"repositoryCount":2906},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[8450,8451,8452],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[320,8452],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[8457,8458],{"type":2562,"score":2923},{"type":2599,"score":3823},[8460,8462,8464,8466,8467],{"type":2566,"url":8461},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2566,"url":8463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2577,"url":8465},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2574,"url":3830},{"type":2566,"url":3832},[5408,5409,5410,3834,3835,3836,3837,3838],{"id":321,"slug":8470,"dossier":46,"summary":8471,"aliases":8472,"sourceIds":8475,"published":8476,"modified":8477,"checkedAt":7,"severity":8478,"references":8481,"versionKeys":8494,"packageCount":32,"repositoryCount":561},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[8473,8474],"CVE-2026-24486","PYSEC-2026-1852",[321,8474],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[8479],{"type":2562,"score":8480},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[8482,8484,8486,8488,8489,8491,8492],{"type":2577,"url":8483},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2566,"url":8485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2577,"url":8487},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2574,"url":3599},{"type":2577,"url":8490},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2574,"url":3601},{"type":2566,"url":8493},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[3808,3809,3605],{"id":322,"slug":8496,"dossier":46,"summary":8497,"aliases":8498,"sourceIds":8501,"published":8502,"modified":8503,"checkedAt":7,"severity":8504,"references":8506,"versionKeys":8526,"packageCount":32,"repositoryCount":494},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[8499,8500],"CVE-2026-48818","PYSEC-2026-2281",[322,8500],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[8505],{"type":2562,"score":3695},[8507,8509,8510,8512,8514,8516,8517,8518,8520,8522,8524],{"type":2566,"url":8508},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2574,"url":4560},{"type":2577,"url":8511},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2577,"url":8513},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2566,"url":8515},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2566,"url":4995},{"type":2566,"url":4997},{"type":2566,"url":8519},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2928,"url":8521},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2571,"url":8523},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2571,"url":8525},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2704,2705,2706,4567,4568,4711,4712],{"id":323,"slug":8528,"dossier":46,"summary":8529,"aliases":8530,"sourceIds":8533,"published":8534,"modified":8535,"checkedAt":7,"severity":8536,"references":8538,"versionKeys":8555,"packageCount":32,"repositoryCount":616},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[8531,8532],"CVE-2025-59425","PYSEC-2026-2026",[323,8532],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[8537],{"type":2562,"score":3695},[8539,8541,8543,8545,8547,8549,8550,8552,8554],{"type":2577,"url":8540},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2566,"url":8542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":2577,"url":8544},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":2566,"url":8546},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2577,"url":8548},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":2574,"url":2830},{"type":2577,"url":8551},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":2577,"url":8553},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":2574,"url":2826},[2848,3085],{"id":324,"slug":8557,"dossier":46,"summary":6267,"aliases":8558,"sourceIds":8561,"published":6272,"modified":8562,"checkedAt":7,"severity":8563,"references":8566,"versionKeys":8580,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[8559,8560],"CVE-2024-11393","PYSEC-2024-228",[324,8560],"2026-06-10T17:00:13.252500033Z",[8564,8565],{"type":2562,"score":6276},{"type":2562,"score":2813},[8567,8569,8570,8571,8572,8574,8576,8578],{"type":2566,"url":8568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2577,"url":6282},{"type":2577,"url":6284},{"type":2574,"url":2630},{"type":2577,"url":8573},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2577,"url":8575},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2566,"url":8577},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2566,"url":8579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2637],{"id":325,"slug":8582,"dossier":46,"summary":8583,"aliases":8584,"sourceIds":8587,"published":8588,"modified":8589,"checkedAt":7,"severity":8590,"references":8592,"versionKeys":8604,"packageCount":32,"repositoryCount":32},"ghsa-wvwj-cvrp-7pv5-e187e76a","Authlib JWS JWK Header Injection: Signature Verification Bypass",[8585,8586],"CVE-2026-27962","PYSEC-2026-287",[325,8586],"2026-03-16T15:17:15Z","2026-07-13T16:15:15.641042659Z",[8591],{"type":2562,"score":8104},[8593,8595,8597,8599,8600,8601,8602],{"type":2577,"url":8594},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",{"type":2566,"url":8596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27962",{"type":2577,"url":8598},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fa5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681",{"type":2574,"url":4373},{"type":2577,"url":4375},{"type":2574,"url":5609},{"type":2566,"url":8603},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",[4377],{"id":326,"slug":8606,"dossier":46,"summary":8607,"aliases":8608,"sourceIds":8611,"published":8612,"modified":8613,"checkedAt":7,"severity":8614,"references":8618,"versionKeys":8627,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[8609,8610],"CVE-2026-42284","PYSEC-2026-2161",[326,8610],"2026-04-25T23:41:49Z","2026-07-13T07:26:44.494568822Z",[8615,8617],{"type":2562,"score":8616},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2562,"score":3335},[8619,8621,8623,8624,8625],{"type":2632,"url":8620},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":2566,"url":8622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":2574,"url":4398},{"type":2571,"url":7790},{"type":2577,"url":8626},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[4402,4403,4404],{"id":327,"slug":8629,"dossier":46,"summary":8630,"aliases":8631,"sourceIds":8634,"published":8635,"modified":8636,"checkedAt":7,"severity":8637,"references":8644,"versionKeys":8663,"packageCount":32,"repositoryCount":105},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[8632,8633],"CVE-2026-7141","PYSEC-2026-2306",[327,8633],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[8638,8640,8642],{"type":2562,"score":8639},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2599,"score":8641},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2599,"score":8643},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8645,8647,8649,8651,8653,8655,8657,8659,8661],{"type":2566,"url":8646},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":2928,"url":8648},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":2928,"url":8650},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":2571,"url":8652},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":2571,"url":8654},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":2566,"url":8656},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":2566,"url":8658},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":2928,"url":8660},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":2566,"url":8662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[2848,2849,3085],{"id":328,"slug":8665,"dossier":46,"summary":8666,"aliases":8667,"sourceIds":8671,"published":8672,"modified":8673,"checkedAt":7,"severity":8674,"references":8679,"versionKeys":8695,"packageCount":32,"repositoryCount":616},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[8668,8669,8670],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[328],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[8675,8677],{"type":2562,"score":8676},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2599,"score":8678},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8680,8682,8684,8686,8688,8689,8691,8693],{"type":2566,"url":8681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2577,"url":8683},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2577,"url":8685},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2577,"url":8687},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2574,"url":2935},{"type":2577,"url":8690},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2577,"url":8692},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2577,"url":8694},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2947,2948],{"id":329,"slug":8697,"dossier":46,"summary":8698,"aliases":8699,"sourceIds":8702,"published":8703,"modified":8704,"checkedAt":7,"severity":8705,"references":8707,"versionKeys":8714,"packageCount":32,"repositoryCount":494},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[8700,8701],"CVE-2026-48817","PYSEC-2026-2280",[329,8701],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[8706],{"type":2562,"score":2863},[8708,8710,8712,8713],{"type":2566,"url":8709},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2566,"url":8711},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2574,"url":4560},{"type":2566,"url":8519},[2704,2705,2706,4567,4568,4711,4712],{"id":330,"slug":8716,"dossier":46,"summary":8717,"aliases":8718,"sourceIds":8721,"published":8722,"modified":8723,"checkedAt":7,"severity":8724,"references":8727,"versionKeys":8733,"packageCount":32,"repositoryCount":484},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[8719,8720],"CVE-2026-54274","PYSEC-2026-2108",[330,8720],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[8725,8726],{"type":2599,"score":3272},{"type":2562,"score":2720},[8728,8730,8731],{"type":2566,"url":8729},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2574,"url":2725},{"type":2571,"url":8732},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2729,2730,2731,2732,2733,2734,2735,2736],{"id":331,"slug":8735,"dossier":46,"summary":8736,"aliases":8737,"sourceIds":8741,"published":8742,"modified":8743,"checkedAt":7,"severity":8744,"references":8746,"versionKeys":8760,"packageCount":32,"repositoryCount":616},"ghsa-xch3-2f9x-wh9f-70e88660","MLflow has a command injection in mlflow\u002Fsagemaker\u002F__init__.py",[8738,8739,8740],"BIT-mlflow-2025-14287","CVE-2025-14287","PYSEC-2026-2661",[331,8740],"2026-03-16T15:30:41Z","2026-07-13T16:42:49.591762139Z",[8745],{"type":2562,"score":7503},[8747,8749,8751,8753,8754,8755,8757,8758],{"type":2566,"url":8748},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14287",{"type":2577,"url":8750},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19277",{"type":2577,"url":8752},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F8b8792a7034fb33a14b0b31cabcaa9b912d3485f",{"type":2574,"url":3190},{"type":2577,"url":6009},{"type":2577,"url":8756},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F229cd526-41aa-4819-b6f0-e2d0371c89e3",{"type":2574,"url":3194},{"type":2566,"url":8759},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xch3-2f9x-wh9f",[3198,3199],{"id":332,"slug":8762,"dossier":46,"summary":8763,"aliases":8764,"sourceIds":8768,"published":8769,"modified":8770,"checkedAt":7,"severity":8771,"references":8773,"versionKeys":8787,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[8765,8766,8767],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[332,8767],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[8772],{"type":2562,"score":4389},[8774,8776,8778,8780,8782,8784,8785],{"type":2566,"url":8775},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2566,"url":8777},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2577,"url":8779},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2571,"url":8781},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2577,"url":8783},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2574,"url":3830},{"type":2577,"url":8786},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3834],{"id":333,"slug":8789,"dossier":46,"summary":381,"aliases":8790,"sourceIds":8793,"published":8794,"modified":8795,"checkedAt":7,"severity":8796,"references":8798,"versionKeys":8807,"packageCount":32,"repositoryCount":616},"pysec-2025-198-62b25ed4",[8791,8792],"BIT-pytorch-2025-46148","CVE-2025-46148",[333],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[8797],{"type":2562,"score":5047},[8799,8801,8803,8805],{"type":2566,"url":8800},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2566,"url":8802},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2928,"url":8804},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2571,"url":8806},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2947,2948],{"id":334,"slug":8809,"dossier":46,"summary":381,"aliases":8810,"sourceIds":8813,"published":8814,"modified":8815,"checkedAt":7,"severity":8816,"references":8818,"versionKeys":8824,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[8811,8812],"BIT-pytorch-2025-46149","CVE-2025-46149",[334],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[8817],{"type":2562,"score":5047},[8819,8820,8822],{"type":2566,"url":8800},{"type":2928,"url":8821},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2571,"url":8823},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2948],{"id":335,"slug":8826,"dossier":46,"summary":381,"aliases":8827,"sourceIds":8830,"published":8831,"modified":8832,"checkedAt":7,"severity":8833,"references":8835,"versionKeys":8843,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[8828,8829],"BIT-pytorch-2025-46150","CVE-2025-46150",[335],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[8834],{"type":2562,"score":5047},[8836,8837,8839,8841],{"type":2566,"url":8800},{"type":2928,"url":8838},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2928,"url":8840},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2571,"url":8842},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2948],{"id":336,"slug":8845,"dossier":46,"summary":381,"aliases":8846,"sourceIds":8849,"published":8850,"modified":8851,"checkedAt":7,"severity":8852,"references":8854,"versionKeys":8860,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[8847,8848],"BIT-pytorch-2025-46152","CVE-2025-46152",[336],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[8853],{"type":2562,"score":2657},[8855,8856,8858],{"type":2566,"url":8800},{"type":2928,"url":8857},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2571,"url":8859},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2948],{"id":337,"slug":8862,"dossier":46,"summary":381,"aliases":8863,"sourceIds":8866,"published":8867,"modified":8868,"checkedAt":7,"severity":8869,"references":8871,"versionKeys":8881,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[8864,8865],"BIT-pytorch-2025-46153","CVE-2025-46153",[337],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[8870],{"type":2562,"score":5047},[8872,8874,8875,8877,8879],{"type":2577,"url":8873},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2566,"url":8800},{"type":2566,"url":8876},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2928,"url":8878},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2571,"url":8880},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2948],{"id":338,"slug":8883,"dossier":46,"summary":381,"aliases":8884,"sourceIds":8887,"published":8888,"modified":8889,"checkedAt":7,"severity":8890,"references":8892,"versionKeys":8897,"packageCount":32,"repositoryCount":494},"pysec-2025-203-2febb201",[8885,8886],"BIT-pytorch-2025-55551","CVE-2025-55551",[338],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[8891],{"type":2562,"score":2720},[8893,8895],{"type":2566,"url":8894},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2928,"url":8896},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2947,2948,2949,4824,4825,7392],{"id":339,"slug":8899,"dossier":46,"summary":381,"aliases":8900,"sourceIds":8903,"published":8904,"modified":8905,"checkedAt":7,"severity":8906,"references":8908,"versionKeys":8912,"packageCount":32,"repositoryCount":494},"pysec-2025-204-cdae47da",[8901,8902],"BIT-pytorch-2025-55552","CVE-2025-55552",[339],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[8907],{"type":2562,"score":2720},[8909,8910],{"type":2566,"url":8894},{"type":2928,"url":8911},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2947,2948,2949,4824,4825,7392],{"id":340,"slug":8914,"dossier":46,"summary":381,"aliases":8915,"sourceIds":8918,"published":8919,"modified":8920,"checkedAt":7,"severity":8921,"references":8923,"versionKeys":8929,"packageCount":32,"repositoryCount":105},"pysec-2025-205-fd5e58fd",[8916,8917],"BIT-pytorch-2025-55553","CVE-2025-55553",[340],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[8922],{"type":2562,"score":2720},[8924,8925,8927],{"type":2566,"url":8894},{"type":2928,"url":8926},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2571,"url":8928},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2947,2948,2949],{"id":341,"slug":8931,"dossier":46,"summary":381,"aliases":8932,"sourceIds":8935,"published":8936,"modified":8937,"checkedAt":7,"severity":8938,"references":8940,"versionKeys":8944,"packageCount":32,"repositoryCount":494},"pysec-2025-206-58322476",[8933,8934],"BIT-pytorch-2025-55554","CVE-2025-55554",[341],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[8939],{"type":2562,"score":2657},[8941,8942],{"type":2566,"url":8894},{"type":2928,"url":8943},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2947,2948,2949,4824,4825,7392],{"id":342,"slug":8946,"dossier":46,"summary":381,"aliases":8947,"sourceIds":8950,"published":8951,"modified":8952,"checkedAt":7,"severity":8953,"references":8955,"versionKeys":8961,"packageCount":32,"repositoryCount":105},"pysec-2025-207-2abef3fc",[8948,8949],"BIT-pytorch-2025-55557","CVE-2025-55557",[342],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[8954],{"type":2562,"score":2720},[8956,8957,8959],{"type":2566,"url":8894},{"type":2928,"url":8958},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2571,"url":8960},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2947,2948,2949],{"id":343,"slug":8963,"dossier":46,"summary":381,"aliases":8964,"sourceIds":8967,"published":8968,"modified":8969,"checkedAt":7,"severity":8970,"references":8972,"versionKeys":8978,"packageCount":32,"repositoryCount":105},"pysec-2025-208-6e93fe9d",[8965,8966],"BIT-pytorch-2025-55558","CVE-2025-55558",[343],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[8971],{"type":2562,"score":2720},[8973,8974,8976],{"type":2566,"url":8894},{"type":2928,"url":8975},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2571,"url":8977},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2947,2948,2949],{"id":344,"slug":8980,"dossier":46,"summary":381,"aliases":8981,"sourceIds":8984,"published":8985,"modified":8986,"checkedAt":7,"severity":8987,"references":8989,"versionKeys":8995,"packageCount":32,"repositoryCount":105},"pysec-2025-209-e6f352b0",[8982,8983],"BIT-pytorch-2025-55560","CVE-2025-55560",[344],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[8988],{"type":2562,"score":2720},[8990,8991,8993],{"type":2566,"url":8894},{"type":2928,"url":8992},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2571,"url":8994},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2947,2948,2949],{"id":345,"slug":8997,"dossier":46,"summary":381,"aliases":8998,"sourceIds":9000,"published":9001,"modified":9002,"checkedAt":7,"severity":9003,"references":9005,"versionKeys":9008,"packageCount":32,"repositoryCount":105},"pysec-2025-211-d8bd15de",[8999],"CVE-2025-14920",[345],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[9004],{"type":2562,"score":2623},[9006],{"type":2566,"url":9007},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2637,2638,2639],{"id":346,"slug":9010,"dossier":46,"summary":381,"aliases":9011,"sourceIds":9013,"published":9014,"modified":9015,"checkedAt":7,"severity":9016,"references":9018,"versionKeys":9021,"packageCount":32,"repositoryCount":105},"pysec-2025-212-a011b97d",[9012],"CVE-2025-14921",[346],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[9017],{"type":2562,"score":2623},[9019],{"type":2566,"url":9020},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2637,2638,2639],{"id":347,"slug":9023,"dossier":46,"summary":381,"aliases":9024,"sourceIds":9026,"published":9027,"modified":9028,"checkedAt":7,"severity":9029,"references":9031,"versionKeys":9034,"packageCount":32,"repositoryCount":105},"pysec-2025-213-9043dc9b",[9025],"CVE-2025-14924",[347],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[9030],{"type":2562,"score":2623},[9032],{"type":2566,"url":9033},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2637,2638,2639],{"id":348,"slug":9036,"dossier":46,"summary":381,"aliases":9037,"sourceIds":9039,"published":9040,"modified":9041,"checkedAt":7,"severity":9042,"references":9044,"versionKeys":9047,"packageCount":32,"repositoryCount":105},"pysec-2025-214-eb241255",[9038],"CVE-2025-14926",[348],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[9043],{"type":2562,"score":2623},[9045],{"type":2566,"url":9046},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2637,2638,2639],{"id":349,"slug":9049,"dossier":46,"summary":381,"aliases":9050,"sourceIds":9052,"published":9053,"modified":9054,"checkedAt":7,"severity":9055,"references":9057,"versionKeys":9060,"packageCount":32,"repositoryCount":105},"pysec-2025-215-6064f491",[9051],"CVE-2025-14927",[349],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[9056],{"type":2562,"score":2623},[9058],{"type":2566,"url":9059},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2637,2638,2639],{"id":350,"slug":9062,"dossier":46,"summary":381,"aliases":9063,"sourceIds":9065,"published":9066,"modified":9067,"checkedAt":7,"severity":9068,"references":9070,"versionKeys":9073,"packageCount":32,"repositoryCount":105},"pysec-2025-216-5708ed01",[9064],"CVE-2025-14928",[350],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[9069],{"type":2562,"score":2623},[9071],{"type":2566,"url":9072},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2637,2638,2639],{"id":351,"slug":9075,"dossier":46,"summary":381,"aliases":9076,"sourceIds":9078,"published":9079,"modified":9080,"checkedAt":7,"severity":9081,"references":9083,"versionKeys":9086,"packageCount":32,"repositoryCount":494},"pysec-2025-217-2c1ad388",[9077],"CVE-2025-14929",[351],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[9082],{"type":2562,"score":2623},[9084],{"type":2566,"url":9085},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2637,2638,2639,2640,2641,2642,2643],{"id":352,"slug":9088,"dossier":46,"summary":381,"aliases":9089,"sourceIds":9091,"published":9092,"modified":9093,"checkedAt":7,"severity":9094,"references":9096,"versionKeys":9099,"packageCount":32,"repositoryCount":561},"pysec-2025-218-39811fc3",[9090],"CVE-2025-14930",[352],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[9095],{"type":2562,"score":2623},[9097],{"type":2566,"url":9098},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2637,2638,2639,2640],{"id":353,"slug":9101,"dossier":46,"summary":381,"aliases":9102,"sourceIds":9104,"published":9105,"modified":9106,"checkedAt":7,"severity":9107,"references":9109,"versionKeys":9116,"packageCount":32,"repositoryCount":32},"pysec-2025-238-fe0347f8",[9103],"CVE-2025-64076",[353],"2025-11-18T18:16:14.263Z","2026-07-13T07:15:16.765464311Z",[9108],{"type":2562,"score":2720},[9110,9112,9114],{"type":2928,"url":9111},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fissues\u002F264",{"type":2571,"url":9113},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002F851473490281f82d82560b2368284ef33cf6e8f9",{"type":2571,"url":9115},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F265",[3055],{"id":354,"slug":9118,"dossier":46,"summary":381,"aliases":9119,"sourceIds":9122,"published":9123,"modified":9124,"checkedAt":7,"severity":9125,"references":9127,"versionKeys":9138,"packageCount":32,"repositoryCount":3839},"pysec-2026-139-96951ff6",[9120,9121],"BIT-pytorch-2026-4538","CVE-2026-4538",[354],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[9126],{"type":2562,"score":7230},[9128,9130,9132,9134,9136],{"type":2577,"url":9129},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2566,"url":9131},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2566,"url":9133},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2928,"url":9135},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2571,"url":9137},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[7823,2947,2948,2949,4824,4825,7392,7393,7394],{"id":355,"slug":9140,"dossier":91,"summary":381,"aliases":9141,"sourceIds":9144,"published":9145,"modified":9146,"checkedAt":7,"severity":9147,"references":9150,"versionKeys":9165,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[9142,9143],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[355],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[9148],{"type":2562,"score":9149},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9151,9153,9155,9157,9159,9161,9163],{"type":2577,"url":9152},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2577,"url":9154},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2566,"url":9156},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2566,"url":9158},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2928,"url":9160},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2571,"url":9162},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2632,"url":9164},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[9166,9167,9168,9169,9170,9171],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":356,"slug":9173,"dossier":91,"summary":381,"aliases":9174,"sourceIds":9178,"published":9179,"modified":9180,"checkedAt":7,"severity":9181,"references":9183,"versionKeys":9190,"packageCount":32,"repositoryCount":2906},"pysec-2026-2253-e1ccf3df",[9175,9176,9177],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[356],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[9182],{"type":2562,"score":2720},[9184,9186,9188],{"type":2566,"url":9185},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":2571,"url":9187},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2632,"url":9189},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":357,"slug":9192,"dossier":91,"summary":381,"aliases":9193,"sourceIds":9197,"published":9198,"modified":9199,"checkedAt":7,"severity":9200,"references":9202,"versionKeys":9207,"packageCount":32,"repositoryCount":2906},"pysec-2026-2254-a1ed1fd2",[9194,9195,9196],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[357],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[9201],{"type":2562,"score":2720},[9203,9204,9205],{"type":2566,"url":9185},{"type":2571,"url":9187},{"type":2632,"url":9206},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":358,"slug":9209,"dossier":91,"summary":381,"aliases":9210,"sourceIds":9214,"published":9215,"modified":9216,"checkedAt":7,"severity":9217,"references":9219,"versionKeys":9224,"packageCount":32,"repositoryCount":2906},"pysec-2026-2255-d0951b98",[9211,9212,9213],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[358],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[9218],{"type":2562,"score":2720},[9220,9221,9222],{"type":2566,"url":9185},{"type":2571,"url":9187},{"type":2632,"url":9223},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":359,"slug":9226,"dossier":91,"summary":381,"aliases":9227,"sourceIds":9231,"published":9232,"modified":9233,"checkedAt":7,"severity":9234,"references":9236,"versionKeys":9242,"packageCount":32,"repositoryCount":2906},"pysec-2026-2256-0f333f0b",[9228,9229,9230],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[359],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[9235],{"type":2562,"score":2720},[9237,9238,9240],{"type":2566,"url":9185},{"type":2571,"url":9239},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2632,"url":9241},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":360,"slug":9244,"dossier":91,"summary":381,"aliases":9245,"sourceIds":9249,"published":9250,"modified":9251,"checkedAt":7,"severity":9252,"references":9255,"versionKeys":9265,"packageCount":32,"repositoryCount":2906},"pysec-2026-2257-bcbe5d79",[9246,9247,9248],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[360],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[9253],{"type":2562,"score":9254},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[9256,9257,9259,9261,9263],{"type":2566,"url":9185},{"type":2571,"url":9258},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2571,"url":9260},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2571,"url":9262},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2632,"url":9264},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":361,"slug":9267,"dossier":46,"summary":381,"aliases":9268,"sourceIds":9271,"published":9272,"modified":9273,"checkedAt":7,"severity":9274,"references":9276,"versionKeys":9279,"packageCount":32,"repositoryCount":105},"pysec-2026-227-5f5a1d28",[9269,9270],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[361],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[9275],{"type":2562,"score":2813},[9277],{"type":2632,"url":9278},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[2848,2849,3085],{"id":362,"slug":9281,"dossier":46,"summary":381,"aliases":9282,"sourceIds":9285,"published":9286,"modified":9287,"checkedAt":7,"severity":9288,"references":9291,"versionKeys":9302,"packageCount":32,"repositoryCount":105},"pysec-2026-2273-c0c1a62e",[9283,9284],"CVE-2026-57516","GHSA-hhrp-gw25-jr43",[362],"2026-07-01T17:16:37.390Z","2026-07-13T07:15:44.097966037Z",[9289],{"type":2599,"score":9290},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9292,9294,9296,9298,9300],{"type":2566,"url":9293},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.56.0",{"type":2566,"url":9295},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fray-unsafe-deserialization-rce-via-webdataset-reader",{"type":2571,"url":9297},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63469",{"type":2571,"url":9299},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63470",{"type":2571,"url":9301},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-hhrp-gw25-jr43",[4349,4350,6074],{"id":363,"slug":9304,"dossier":46,"summary":381,"aliases":9305,"sourceIds":9310,"published":9311,"modified":9312,"checkedAt":7,"severity":9313,"references":9315,"versionKeys":9331,"packageCount":32,"repositoryCount":484},"pysec-2026-2286-8795b007",[9306,9307,9308,9309],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[363],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[9314],{"type":2562,"score":2813},[9316,9318,9320,9321,9323,9325,9327,9329],{"type":2577,"url":9317},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2577,"url":9319},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2566,"url":4498},{"type":2566,"url":9322},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2566,"url":9324},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2928,"url":9326},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2928,"url":9328},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2571,"url":9330},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2947,2948,2949,4824,4825,7392,7393,7394],{"id":364,"slug":9333,"dossier":46,"summary":381,"aliases":9334,"sourceIds":9336,"published":9337,"modified":9338,"checkedAt":7,"severity":9339,"references":9341,"versionKeys":9351,"packageCount":32,"repositoryCount":105},"pysec-2026-2302-60c0b148",[9335],"CVE-2026-5497",[364],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[9340],{"type":2562,"score":2720},[9342,9344,9346,9348,9349],{"type":2577,"url":9343},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":2577,"url":9345},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":2928,"url":9347},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":2571,"url":7052},{"type":2632,"url":9350},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[2848,2849,3085],{"id":365,"slug":9353,"dossier":91,"summary":381,"aliases":9354,"sourceIds":9358,"published":9359,"modified":9360,"checkedAt":7,"severity":9361,"references":9364,"versionKeys":9371,"packageCount":32,"repositoryCount":2906},"pysec-2026-3447-df031425",[9355,9356,9357],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[365],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[9362],{"type":2562,"score":9363},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[9365,9367,9369],{"type":2566,"url":9366},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":2571,"url":9368},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2632,"url":9370},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[3785,3786,9372,9373,9374,9375,9376,9377,9378],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":366,"slug":9380,"dossier":91,"summary":381,"aliases":9381,"sourceIds":9385,"published":9386,"modified":9387,"checkedAt":7,"severity":9388,"references":9390,"versionKeys":9399,"packageCount":32,"repositoryCount":2906},"pysec-2026-3451-3e5eac34",[9382,9383,9384],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[366],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[9389],{"type":2562,"score":2720},[9391,9393,9395,9397],{"type":2566,"url":9392},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2571,"url":9394},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2571,"url":9396},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2632,"url":9398},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[5408,5409,5410,3834,3835,3836,3837,3838],{"id":367,"slug":9401,"dossier":46,"summary":381,"aliases":9402,"sourceIds":9406,"published":9407,"modified":9408,"checkedAt":7,"severity":9409,"references":9411,"versionKeys":9419,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[9403,9404,9405],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[367],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[9410],{"type":2562,"score":2720},[9412,9413,9415,9417],{"type":2566,"url":9392},{"type":2571,"url":9414},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2571,"url":9416},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2632,"url":9418},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[3836,3837,3838],{"id":368,"slug":9421,"dossier":91,"summary":381,"aliases":9422,"sourceIds":9426,"published":9427,"modified":9428,"checkedAt":7,"severity":9429,"references":9431,"versionKeys":9439,"packageCount":32,"repositoryCount":2906},"pysec-2026-3453-83974725",[9423,9424,9425],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[368],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[9430],{"type":2562,"score":2720},[9432,9433,9435,9437],{"type":2566,"url":9392},{"type":2571,"url":9434},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2571,"url":9436},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2632,"url":9438},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[5408,5409,5410,3834,3835,3836,3837,3838],1784558560598]