[{"data":1,"prerenderedAt":5039},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11298":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":250,"related":253},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-09-16T04:45:26.395Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-09-16T04:44:00.147Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},43,42,1,23,4,26,40,37,36,0,4116,4105,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":37,"topPackage":71},2457,50,7121,9,55,2423,34,795,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5348837209302325,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":32,"advisoryIds":105,"advisoryCount":248,"providers":249},"opencode:11298","opencode-11298",11298,"URBAN.KI Sovia","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia","b961d043e77a4561b9f77c65c6818627c1f34c22","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia\u002F-\u002Fcommit\u002Fb961d043e77a4561b9f77c65c6818627c1f34c22","2026-09-15T13:10:29.040Z","2026-09-14T08:20:12.000Z",{"complete":90,"entryCount":91,"truncated":47},true,70,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","ddc57ad0a634363d7ebefcbde0786b734f6f5f81","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia\u002F-\u002Fblob\u002Fb961d043e77a4561b9f77c65c6818627c1f34c22\u002Fuv.lock","d444dfad7ad27a1821923a1fc11b3ae40b7e686a1c28dd4b750c45fa1cfa35b8",270188,"parsed",111,[102],"pypi",6,15,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247],"GHSA-248v-346w-9cwc","GHSA-284h-m62q-gf8w","GHSA-29pf-2h5f-8g72","GHSA-2f96-g7mh-g2hx","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3f7w-8rr8-f37f","GHSA-3rp5-jjmw-4wv2","GHSA-3wxw-xv34-2frg","GHSA-3x9g-8vmp-wqvf","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4gmw-gg2m-w46p","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-539m-9xh6-q6rr","GHSA-53q9-r3pm-6pq6","GHSA-59p9-h35m-wg4g","GHSA-5rjg-fvgr-3xxf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-5xxx-qhh7-9287","GHSA-62p4-gmf7-7g93","GHSA-6497-prx7-gpmq","GHSA-65pc-fj4g-8rjx","GHSA-69w3-r845-3855","GHSA-6p8h-3wgx-97gf","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-7545-fcxq-7j24","GHSA-768j-98cg-p3fv","GHSA-7833-fr7j-v32q","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7gcm-g887-7qv7","GHSA-7p48-42j8-8846","GHSA-8423-8fgw-73vq","GHSA-887c-mr87-cxwp","GHSA-8mcc-hrx5-hvxc","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-94p4-4cq8-9g67","GHSA-956x-8gvw-wg5v","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9rj7-rf2p-w77r","GHSA-9wx4-h78v-vm56","GHSA-c678-jfcj-6jmf","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fgcw-684q-jj6r","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-fpwr-67px-3qhx","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hh9p-6wh2-4mfc","GHSA-hmq2-w58f-27jc","GHSA-hxxf-235m-72v3","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm78-9fvv-mhgr","GHSA-jw8x-6495-233v","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-mpf4-983q-p7j4","GHSA-mv93-w799-cj2w","GHSA-p538-c434-8v24","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-r9mr-m37c-5fr3","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rwj8-pgh3-r573","GHSA-v87r-6q3f-2j67","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqwp-45wm-r9r5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wrfc-pvp9-mr9g","GHSA-wvpp-8hx9-p66j","GHSA-wwv5-g3v4-889x","GHSA-x2qx-6953-8485","GHSA-x3gm-94wq-g975","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","GHSA-xrqw-3rrv-vx5w","PYSEC-2025-112","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286",142,[],{"files":251,"occurrenceCount":100},[252],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":254,"vulnerabilities":1275},[255,268,278,288,298,307,316,326,338,348,359,368,378,387,398,407,416,426,435,444,453,462,471,480,490,500,509,518,527,536,545,554,563,572,581,590,599,608,617,626,635,644,653,662,671,680,689,698,707,716,725,734,743,752,761,770,780,789,798,807,815,824,833,842,851,860,869,878,887,895,904,913,923,932,941,950,959,968,978,987,996,1005,1014,1023,1032,1041,1050,1059,1069,1078,1087,1096,1105,1114,1123,1132,1140,1149,1158,1167,1176,1185,1194,1203,1212,1221,1230,1240,1248,1257,1266],{"id":256,"slug":257,"identity":258,"label":259,"aiRelevant":90,"provider":260,"advisoryCount":35,"licenseExpressions":263,"versions":265,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":267},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":261,"label":262},"hugging-face","Hugging Face",[264],"Apache-2.0",[266],"4.51.0",[56],{"id":269,"slug":270,"identity":271,"label":272,"aiRelevant":90,"provider":83,"advisoryCount":33,"licenseExpressions":273,"versions":275,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":277},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[274],"BSD-3-Clause",[276],"2.9.1",[56],{"id":279,"slug":280,"identity":281,"label":282,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":283,"versions":285,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":287},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[274,284],"non-standard",[286],"1.6.1",[56],{"id":289,"slug":290,"identity":291,"label":292,"aiRelevant":90,"provider":293,"advisoryCount":39,"licenseExpressions":294,"versions":295,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":297},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":261,"label":262},[264],[296],"4.0.2",[56],{"id":299,"slug":300,"identity":301,"label":302,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":303,"versions":304,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":306},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[284],[305],"0.21.1",[56],{"id":308,"slug":309,"identity":310,"label":311,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":312,"versions":313,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":315},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[264],[314],"4.11.0.86",[56],{"id":317,"slug":318,"identity":319,"label":320,"aiRelevant":47,"provider":83,"advisoryCount":321,"licenseExpressions":322,"versions":323,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":325},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",27,[274],[324],"3.1.45",[56],{"id":327,"slug":328,"identity":329,"label":330,"aiRelevant":47,"provider":83,"advisoryCount":331,"licenseExpressions":332,"versions":335,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":337},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[333,334],"HPND","MIT-CMU",[336],"11.1.0",[56],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":47,"provider":83,"advisoryCount":343,"licenseExpressions":344,"versions":345,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":347},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",13,[264],[346],"6.5.2",[56],{"id":349,"slug":350,"identity":351,"label":352,"aiRelevant":47,"provider":83,"advisoryCount":353,"licenseExpressions":354,"versions":356,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":358},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[355],"MIT",[357],"2.3.0",[56],{"id":360,"slug":361,"identity":362,"label":363,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":364,"versions":365,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":367},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[274,284],[366],"3.1.6",[56],{"id":369,"slug":370,"identity":371,"label":372,"aiRelevant":47,"provider":83,"advisoryCount":373,"licenseExpressions":374,"versions":375,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":377},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[264],[376],"2.32.3",[56],{"id":379,"slug":380,"identity":381,"label":382,"aiRelevant":47,"provider":83,"advisoryCount":373,"licenseExpressions":383,"versions":384,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":386},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[355],[385],"78.1.0",[56],{"id":388,"slug":389,"identity":390,"label":391,"aiRelevant":47,"provider":83,"advisoryCount":392,"licenseExpressions":393,"versions":395,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":397},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[355,394],"Unlicense",[396],"3.18.0",[56],{"id":399,"slug":400,"identity":401,"label":402,"aiRelevant":47,"provider":83,"advisoryCount":392,"licenseExpressions":403,"versions":404,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":406},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[274],[405],"6.32.1",[56],{"id":408,"slug":409,"identity":410,"label":411,"aiRelevant":47,"provider":83,"advisoryCount":392,"licenseExpressions":412,"versions":413,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":415},"package:pypi:streamlit","streamlit-b61aa01e","pypi:streamlit","streamlit",[264],[414],"1.49.1",[56],{"id":417,"slug":418,"identity":419,"label":420,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":421,"versions":423,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":425},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[422],"MPL-2.0",[424],"2025.1.31",[56],{"id":427,"slug":428,"identity":429,"label":430,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":431,"versions":432,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":434},"package:pypi:click","click-ef97f731","pypi:click","click",[274,284],[433],"8.2.1",[56],{"id":436,"slug":437,"identity":438,"label":439,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":440,"versions":441,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":443},"package:pypi:duckdb","duckdb-8c0332c9","pypi:duckdb","duckdb",[355],[442],"1.3.2",[56],{"id":445,"slug":446,"identity":447,"label":448,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":449,"versions":450,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":452},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[355],[451],"4.55.8",[56],{"id":454,"slug":455,"identity":456,"label":457,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":458,"versions":459,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":461},"package:pypi:geopandas","geopandas-968b51b0","pypi:geopandas","geopandas",[274],[460],"1.0.1",[56],{"id":463,"slug":464,"identity":465,"label":466,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":467,"versions":468,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":470},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[274,284],[469],"3.10",[56],{"id":472,"slug":473,"identity":474,"label":475,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":476,"versions":477,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":479},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[264,284],[478],"21.0.0",[56],{"id":481,"slug":482,"identity":483,"label":484,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":485,"versions":487,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":489},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[486],"BSD-2-Clause",[488],"2.19.1",[56],{"id":491,"slug":492,"identity":493,"label":494,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":495,"versions":497,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":499},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[496],"MIT AND MPL-2.0",[498],"4.67.1",[56],{"id":501,"slug":502,"identity":503,"label":504,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":505,"versions":506,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":508},"package:pypi:altair","altair-01b7f976","pypi:altair","altair",[284],[507],"5.5.0",[56],{"id":510,"slug":511,"identity":512,"label":513,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":514,"versions":515,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":517},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[264],[516],"3.0.0",[56],{"id":519,"slug":520,"identity":521,"label":522,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":523,"versions":524,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":526},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[355],[525],"25.3.0",[56],{"id":528,"slug":529,"identity":530,"label":531,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":532,"versions":533,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":535},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[355],[534],"1.9.0",[56],{"id":537,"slug":538,"identity":539,"label":540,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":541,"versions":542,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":544},"package:pypi:branca","branca-e1a3550c","pypi:branca","branca",[355],[543],"0.8.1",[56],{"id":546,"slug":547,"identity":548,"label":549,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":550,"versions":551,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":553},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[355],[552],"6.2.0",[56],{"id":555,"slug":556,"identity":557,"label":558,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":559,"versions":560,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":562},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[355],[561],"3.4.1",[56],{"id":564,"slug":565,"identity":566,"label":567,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":568,"versions":569,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":571},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[284],[570],"0.4.6",[56],{"id":573,"slug":574,"identity":575,"label":576,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":577,"versions":578,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":580},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[284],[579],"1.3.1",[56],{"id":582,"slug":583,"identity":584,"label":585,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":586,"versions":587,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":589},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[284],[588],"0.12.1",[56],{"id":591,"slug":592,"identity":593,"label":594,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":595,"versions":596,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":598},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[486,284],[597],"5.2.1",[56],{"id":600,"slug":601,"identity":602,"label":603,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":604,"versions":605,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":607},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[355],[606],"2.2.0",[56],{"id":609,"slug":610,"identity":611,"label":612,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":613,"versions":614,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":616},"package:pypi:folium","folium-6e89a148","pypi:folium","folium",[355],[615],"0.20.0",[56],{"id":618,"slug":619,"identity":620,"label":621,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":622,"versions":623,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":625},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[274,284],[624],"2025.3.2",[56],{"id":627,"slug":628,"identity":629,"label":630,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":631,"versions":632,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":634},"package:pypi:ftfy","ftfy-b3100e16","pypi:ftfy","ftfy",[264],[633],"6.3.1",[56],{"id":636,"slug":637,"identity":638,"label":639,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":640,"versions":641,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":643},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[284],[642],"4.0.12",[56],{"id":645,"slug":646,"identity":647,"label":648,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":649,"versions":650,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":652},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[264,284],[651],"0.30.1",[56],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":658,"versions":659,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":661},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[274],[660],"9.2.0",[56],{"id":663,"slug":664,"identity":665,"label":666,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":667,"versions":668,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":670},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[284],[669],"1.1.1",[56],{"id":672,"slug":673,"identity":674,"label":675,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":676,"versions":677,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":679},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[355],[678],"0.19.2",[56],{"id":681,"slug":682,"identity":683,"label":684,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":685,"versions":686,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":688},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[274],[687],"1.4.2",[56],{"id":690,"slug":691,"identity":692,"label":693,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":694,"versions":695,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":697},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[355],[696],"4.25.1",[56],{"id":699,"slug":700,"identity":701,"label":702,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":703,"versions":704,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":706},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[355],[705],"2025.9.1",[56],{"id":708,"slug":709,"identity":710,"label":711,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":712,"versions":713,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":715},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[284],[714],"1.4.8",[56],{"id":717,"slug":718,"identity":719,"label":720,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":721,"versions":722,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":724},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[274,284],[723],"3.0.2",[56],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":730,"versions":731,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":733},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[284],[732],"3.10.0",[56],{"id":735,"slug":736,"identity":737,"label":738,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":739,"versions":740,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":742},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[274,284],[741],"0.1.7",[56],{"id":744,"slug":745,"identity":746,"label":747,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":748,"versions":749,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":751},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[284],[750],"1.3.0",[56],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":757,"versions":758,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":760},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[355,284],[759],"2.4.0",[56],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":766,"versions":767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":769},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[274,284],[768],"3.4.2",[56],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":775,"versions":777,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":779},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[776,284],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[778],"2.3.2",[56],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":785,"versions":786,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":788},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[284],[787],"12.8.3.14",[56],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":794,"versions":795,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":797},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[284],[796],"12.8.57",[56],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":803,"versions":804,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":806},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[284],[805],"12.8.61",[56],{"id":808,"slug":809,"identity":810,"label":811,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":812,"versions":813,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":814},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[284],[796],[56],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":820,"versions":821,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":823},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[284],[822],"9.7.1.26",[56],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":829,"versions":830,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":832},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[284],[831],"11.3.3.41",[56],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":838,"versions":839,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":841},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[284],[840],"1.13.0.11",[56],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":847,"versions":848,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":850},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[284],[849],"10.3.9.55",[56],{"id":852,"slug":853,"identity":854,"label":855,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":856,"versions":857,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":859},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[284],[858],"11.7.2.55",[56],{"id":861,"slug":862,"identity":863,"label":864,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":865,"versions":866,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":868},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[284],[867],"12.5.7.53",[56],{"id":870,"slug":871,"identity":872,"label":873,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":874,"versions":875,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":877},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[284],[876],"0.6.3",[56],{"id":879,"slug":880,"identity":881,"label":882,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":883,"versions":884,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":886},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[274,284],[885],"2.26.2",[56],{"id":888,"slug":889,"identity":890,"label":891,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":892,"versions":893,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":894},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[284],[805],[56],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":900,"versions":901,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":903},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[264,284],[902],"12.8.55",[56],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":909,"versions":910,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":912},"package:pypi:open-clip-torch","open-clip-torch-1f82ec28","pypi:open-clip-torch","open-clip-torch",[355],[911],"2.32.0",[56],{"id":914,"slug":915,"identity":916,"label":917,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":918,"versions":920,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":922},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[919,284],"Apache-2.0 OR BSD-2-Clause",[921],"24.2",[56],{"id":924,"slug":925,"identity":926,"label":927,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":928,"versions":929,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":931},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[284],[930],"2.2.3",[56],{"id":933,"slug":934,"identity":935,"label":936,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":937,"versions":938,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":940},"package:pypi:pandas-stubs","pandas-stubs-b4eaabf3","pypi:pandas-stubs","pandas-stubs",[274],[939],"2.3.2.250827",[56],{"id":942,"slug":943,"identity":944,"label":945,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":946,"versions":947,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":949},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[355],[948],"0.8.4",[56],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":955,"versions":956,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":958},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[284],[957],"4.9.0",[56],{"id":960,"slug":961,"identity":962,"label":963,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":964,"versions":965,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":967},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[274,284],[966],"3.0.51",[56],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":973,"versions":975,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":977},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[974],"ISC",[976],"0.7.0",[56],{"id":979,"slug":980,"identity":981,"label":982,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":983,"versions":984,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":986},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[355],[985],"0.2.3",[56],{"id":988,"slug":989,"identity":990,"label":991,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":992,"versions":993,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":995},"package:pypi:pydeck","pydeck-75380c92","pypi:pydeck","pydeck",[264],[994],"0.9.1",[56],{"id":997,"slug":998,"identity":999,"label":1000,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1001,"versions":1002,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1004},"package:pypi:pyogrio","pyogrio-ff34272a","pypi:pyogrio","pyogrio",[284],[1003],"0.10.0",[56],{"id":1006,"slug":1007,"identity":1008,"label":1009,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1010,"versions":1011,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1013},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[355],[1012],"3.2.1",[56],{"id":1015,"slug":1016,"identity":1017,"label":1018,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1019,"versions":1020,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1022},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[355],[1021],"3.7.0",[56],{"id":1024,"slug":1025,"identity":1026,"label":1027,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1028,"versions":1029,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1031},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[284],[1030],"2.9.0.post0",[56],{"id":1033,"slug":1034,"identity":1035,"label":1036,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1037,"versions":1038,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1040},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[355],[1039],"2025.1",[56],{"id":1042,"slug":1043,"identity":1044,"label":1045,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1046,"versions":1047,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1049},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[355],[1048],"6.0.2",[56],{"id":1051,"slug":1052,"identity":1053,"label":1054,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1055,"versions":1056,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1058},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[355],[1057],"0.36.2",[56],{"id":1060,"slug":1061,"identity":1062,"label":1063,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1064,"versions":1066,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1068},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1065,284],"Apache-2.0 AND CNRI-Python",[1067],"2024.11.6",[56],{"id":1070,"slug":1071,"identity":1072,"label":1073,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1074,"versions":1075,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1077},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[355],[1076],"0.27.1",[56],{"id":1079,"slug":1080,"identity":1081,"label":1082,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1083,"versions":1084,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1086},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[284],[1085],"0.5.3",[56],{"id":1088,"slug":1089,"identity":1090,"label":1091,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1092,"versions":1093,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1095},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[284],[1094],"1.15.2",[56],{"id":1097,"slug":1098,"identity":1099,"label":1100,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1101,"versions":1102,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1104},"package:pypi:seaborn","seaborn-1018de9a","pypi:seaborn","seaborn",[284],[1103],"0.13.2",[56],{"id":1106,"slug":1107,"identity":1108,"label":1109,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1110,"versions":1111,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1113},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[274],[1112],"2.0.7",[56],{"id":1115,"slug":1116,"identity":1117,"label":1118,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1119,"versions":1120,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1122},"package:pypi:six","six-3c3888bd","pypi:six","six",[355],[1121],"1.17.0",[56],{"id":1124,"slug":1125,"identity":1126,"label":1127,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1128,"versions":1129,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1131},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[274],[1130],"5.0.2",[56],{"id":1133,"slug":1134,"identity":1135,"label":1136,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1137,"versions":1138,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1139},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[355],[876],[56],{"id":1141,"slug":1142,"identity":1143,"label":1144,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1145,"versions":1146,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1148},"package:pypi:streamlit-folium","streamlit-folium-e76fb4ea","pypi:streamlit-folium","streamlit-folium",[],[1147],"0.25.1",[56],{"id":1150,"slug":1151,"identity":1152,"label":1153,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1154,"versions":1155,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1157},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[284],[1156],"1.14.0",[56],{"id":1159,"slug":1160,"identity":1161,"label":1162,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1163,"versions":1164,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1166},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[264],[1165],"9.1.2",[56],{"id":1168,"slug":1169,"identity":1170,"label":1171,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1172,"versions":1173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1175},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[274],[1174],"3.6.0",[56],{"id":1177,"slug":1178,"identity":1179,"label":1180,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1181,"versions":1182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1184},"package:pypi:timm","timm-4594fb75","pypi:timm","timm",[264],[1183],"1.0.15",[56],{"id":1186,"slug":1187,"identity":1188,"label":1189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1190,"versions":1191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1193},"package:pypi:toml","toml-490ac3c8","pypi:toml","toml",[355],[1192],"0.10.2",[56],{"id":1195,"slug":1196,"identity":1197,"label":1198,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1199,"versions":1200,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1202},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[284],[1201],"0.24.1",[56],{"id":1204,"slug":1205,"identity":1206,"label":1207,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1208,"versions":1209,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1211},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[284],[1210],"5.14.3",[56],{"id":1213,"slug":1214,"identity":1215,"label":1216,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1217,"versions":1218,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1220},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[355],[1219],"3.3.0",[56],{"id":1222,"slug":1223,"identity":1224,"label":1225,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1226,"versions":1227,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1229},"package:pypi:types-pytz","types-pytz-327ed57f","pypi:types-pytz","types-pytz",[264],[1228],"2025.2.0.20250809",[56],{"id":1231,"slug":1232,"identity":1233,"label":1234,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1235,"versions":1237,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1239},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[1236,284],"PSF-2.0",[1238],"4.13.1",[56],{"id":1241,"slug":1242,"identity":1243,"label":1244,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1245,"versions":1246,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1247},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[264],[1039],[56],{"id":1249,"slug":1250,"identity":1251,"label":1252,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1253,"versions":1254,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1256},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[264],[1255],"6.0.0",[56],{"id":1258,"slug":1259,"identity":1260,"label":1261,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1262,"versions":1263,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1265},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[355],[1264],"0.2.13",[56],{"id":1267,"slug":1268,"identity":1269,"label":1270,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1271,"versions":1272,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1274},"package:pypi:xyzservices","xyzservices-a1955a18","pypi:xyzservices","xyzservices",[274],[1273],"2025.4.0",[56],[1276,1315,1348,1381,1412,1444,1487,1514,1541,1568,1588,1618,1647,1683,1710,1739,1765,1794,1832,1856,1880,1903,1939,1962,1986,2009,2039,2076,2104,2131,2157,2183,2206,2229,2261,2293,2323,2348,2388,2417,2441,2480,2512,2544,2567,2592,2617,2645,2679,2705,2732,2762,2794,2818,2872,2904,2928,2960,2994,3033,3061,3080,3103,3136,3164,3187,3215,3249,3282,3309,3341,3371,3393,3420,3445,3469,3498,3520,3541,3566,3583,3610,3637,3662,3686,3710,3735,3751,3777,3799,3825,3846,3883,3910,3942,3969,3996,4024,4047,4074,4104,4124,4158,4186,4206,4234,4261,4304,4334,4386,4409,4434,4461,4484,4507,4539,4566,4591,4618,4640,4660,4677,4696,4713,4734,4750,4765,4782,4797,4814,4831,4848,4862,4875,4888,4901,4914,4927,4940,4953,4976,5009],{"id":106,"slug":1277,"dossier":47,"summary":1278,"aliases":1279,"sourceIds":1282,"published":1283,"modified":1284,"checkedAt":7,"severity":1285,"references":1289,"versionKeys":1313,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1280,1281],"CVE-2024-39689","PYSEC-2024-230",[106,1281],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[1286],{"type":1287,"score":1288},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1290,1293,1295,1298,1301,1304,1307,1309,1311],{"type":1291,"url":1292},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1291,"url":1294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1296,"url":1297},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1299,"url":1300},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1302,"url":1303},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1305,"url":1306},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1302,"url":1308},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1291,"url":1310},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1291,"url":1312},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1314],"pypi:certifi@2024.6.2",{"id":107,"slug":1316,"dossier":47,"summary":1317,"aliases":1318,"sourceIds":1321,"published":1322,"modified":1323,"checkedAt":7,"severity":1324,"references":1332,"versionKeys":1344,"packageCount":32,"repositoryCount":103},"ghsa-284h-m62q-gf8w-da9acb0c","GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE",[1319,1320],"CVE-2026-78676","PYSEC-2026-3786",[107,1320],"2026-08-25T02:16:52.030Z","2026-09-08T19:00:06.885837775Z",[1325,1327,1330],{"type":1287,"score":1326},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1328,"score":1329},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1328,"score":1331},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1333,1336,1338,1340,1342],{"type":1334,"url":1335},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-284h-m62q-gf8w",{"type":1291,"url":1337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78676",{"type":1299,"url":1339},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":1302,"url":1341},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3786.yaml",{"type":1291,"url":1343},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-config-injection",[1345,1346,1347],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":108,"slug":1349,"dossier":47,"summary":1350,"aliases":1351,"sourceIds":1354,"published":1355,"modified":1356,"checkedAt":7,"severity":1357,"references":1360,"versionKeys":1371,"packageCount":32,"repositoryCount":42},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1352,1353],"CVE-2026-4372","PYSEC-2026-2289",[108,1353],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[1358],{"type":1287,"score":1359},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1361,1363,1365,1367,1369],{"type":1291,"url":1362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1296,"url":1364},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1299,"url":1366},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1334,"url":1368},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1291,"url":1370},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1372,1373,1374,1375,1376,1377,1378,1379,1380],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":109,"slug":1382,"dossier":47,"summary":1383,"aliases":1384,"sourceIds":1387,"published":1388,"modified":1389,"checkedAt":7,"severity":1390,"references":1393,"versionKeys":1411,"packageCount":32,"repositoryCount":103},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[1385,1386],"CVE-2026-67325","PYSEC-2026-3836",[109,1386],"2026-07-21T19:43:43Z","2026-09-10T12:25:28.694037561Z",[1391],{"type":1287,"score":1392},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1394,1396,1398,1400,1402,1403,1405,1407,1409],{"type":1302,"url":1395},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":1291,"url":1397},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67325",{"type":1302,"url":1399},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":1302,"url":1401},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":1299,"url":1339},{"type":1302,"url":1404},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",{"type":1302,"url":1406},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-option-prefix-abbreviation",{"type":1299,"url":1408},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fgitpython",{"type":1291,"url":1410},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",[1345,1346,1347],{"id":110,"slug":1413,"dossier":90,"summary":1414,"aliases":1415,"sourceIds":1418,"published":1419,"modified":1420,"checkedAt":7,"severity":1421,"references":1424,"versionKeys":1437,"packageCount":32,"repositoryCount":1443},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1416,1417],"CVE-2025-66471","PYSEC-2026-1994",[110,1417],"2025-12-05T18:15:54Z","2026-09-10T03:50:31.327173527Z",[1422],{"type":1328,"score":1423},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1425,1427,1429,1431,1433,1435],{"type":1302,"url":1426},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1291,"url":1428},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1296,"url":1430},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1299,"url":1432},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1299,"url":1434},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1291,"url":1436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1438,1439,1440,1441,1442],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",16,{"id":111,"slug":1445,"dossier":47,"summary":1446,"aliases":1447,"sourceIds":1451,"published":1452,"modified":1453,"checkedAt":7,"severity":1454,"references":1461,"versionKeys":1483,"packageCount":32,"repositoryCount":373},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1448,1449,1450],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[111,1450],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[1455,1457,1459],{"type":1287,"score":1456},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1328,"score":1458},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1287,"score":1460},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1462,1464,1467,1469,1471,1473,1475,1477,1479,1481],{"type":1291,"url":1463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1465,"url":1466},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1465,"url":1468},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1302,"url":1470},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1299,"url":1472},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1302,"url":1474},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1465,"url":1476},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1291,"url":1478},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1291,"url":1480},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1291,"url":1482},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1484,1485,1486],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":112,"slug":1488,"dossier":47,"summary":1489,"aliases":1490,"sourceIds":1493,"published":1494,"modified":1495,"checkedAt":7,"severity":1496,"references":1499,"versionKeys":1513,"packageCount":32,"repositoryCount":373},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[1491,1492],"CVE-2025-3933","PYSEC-2026-1977",[112,1492],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[1497],{"type":1287,"score":1498},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1500,1502,1504,1506,1507,1509,1511],{"type":1291,"url":1501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1302,"url":1503},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1302,"url":1505},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1299,"url":1366},{"type":1302,"url":1508},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1299,"url":1510},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1291,"url":1512},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1372,1373,1374],{"id":113,"slug":1515,"dossier":90,"summary":1516,"aliases":1517,"sourceIds":1520,"published":1521,"modified":1522,"checkedAt":7,"severity":1523,"references":1527,"versionKeys":1540,"packageCount":32,"repositoryCount":1443},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1518,1519],"CVE-2026-21441","PYSEC-2026-1996",[113,1519],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1524,1526],{"type":1287,"score":1525},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":1328,"score":1423},[1528,1530,1532,1534,1535,1537,1538],{"type":1302,"url":1529},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1291,"url":1531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1296,"url":1533},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1299,"url":1432},{"type":1302,"url":1536},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1299,"url":1434},{"type":1291,"url":1539},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1438,1439,1440,1441,1442],{"id":114,"slug":1542,"dossier":47,"summary":1543,"aliases":1544,"sourceIds":1547,"published":1548,"modified":1549,"checkedAt":7,"severity":1550,"references":1555,"versionKeys":1567,"packageCount":32,"repositoryCount":103},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[1545,1546],"CVE-2026-73620","PYSEC-2026-3949",[114,1546],"2026-08-03T20:09:56Z","2026-09-10T13:10:44.075529324Z",[1551,1553],{"type":1287,"score":1552},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1328,"score":1554},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1556,1558,1560,1562,1563,1565],{"type":1334,"url":1557},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":1302,"url":1559},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":1302,"url":1561},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":1299,"url":1339},{"type":1302,"url":1564},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",{"type":1291,"url":1566},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-and-read",[1345,1346,1347],{"id":115,"slug":1569,"dossier":47,"summary":1570,"aliases":1571,"sourceIds":1573,"published":1574,"modified":1575,"checkedAt":7,"severity":1576,"references":1579,"versionKeys":1587,"packageCount":32,"repositoryCount":103},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[1572],"CVE-2026-69097",[115],"2026-07-24T16:22:02Z","2026-09-10T03:51:10.099586625Z",[1577],{"type":1287,"score":1578},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1580,1582,1584,1585],{"type":1302,"url":1581},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":1302,"url":1583},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":1299,"url":1339},{"type":1302,"url":1586},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",[1345,1346,1347],{"id":116,"slug":1589,"dossier":47,"summary":1590,"aliases":1591,"sourceIds":1594,"published":1595,"modified":1596,"checkedAt":7,"severity":1597,"references":1600,"versionKeys":1617,"packageCount":32,"repositoryCount":103},"ghsa-3wxw-xv34-2frg-c013ae2d","GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)",[1592,1593],"CVE-2026-78679","PYSEC-2026-3837",[116,1593],"2026-09-08T19:42:22Z","2026-09-10T12:25:33.369776672Z",[1598],{"type":1287,"score":1599},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1601,1603,1605,1607,1609,1610,1612,1614,1615],{"type":1302,"url":1602},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",{"type":1291,"url":1604},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78679",{"type":1302,"url":1606},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2208",{"type":1302,"url":1608},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6",{"type":1299,"url":1339},{"type":1302,"url":1611},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.59",{"type":1302,"url":1613},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-tagreference-create",{"type":1299,"url":1408},{"type":1291,"url":1616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",[1345,1346,1347],{"id":117,"slug":1619,"dossier":47,"summary":1620,"aliases":1621,"sourceIds":1624,"published":1625,"modified":1626,"checkedAt":7,"severity":1627,"references":1630,"versionKeys":1641,"packageCount":32,"repositoryCount":66},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[1622,1623],"CVE-2026-49853","PYSEC-2026-3387",[117,1623],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[1628],{"type":1287,"score":1629},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1631,1633,1635,1637,1639],{"type":1302,"url":1632},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":1299,"url":1634},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":1299,"url":1636},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":1291,"url":1638},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":1291,"url":1640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[1642,1643,1644,1645,1646],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":118,"slug":1648,"dossier":90,"summary":1649,"aliases":1650,"sourceIds":1654,"published":1655,"modified":1656,"checkedAt":7,"severity":1657,"references":1659,"versionKeys":1672,"packageCount":32,"repositoryCount":1682},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1651,1652,1653],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[118,1653],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[1658],{"type":1287,"score":1525},[1660,1662,1664,1666,1668,1670],{"type":1334,"url":1661},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1291,"url":1663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1296,"url":1665},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1302,"url":1667},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1299,"url":1669},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1291,"url":1671},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1673,1674,1675,1676,1677,1678,1679,1680,1681],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",17,{"id":119,"slug":1684,"dossier":47,"summary":1685,"aliases":1686,"sourceIds":1689,"published":1690,"modified":1691,"checkedAt":7,"severity":1692,"references":1695,"versionKeys":1708,"packageCount":32,"repositoryCount":1709},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1687,1688],"CVE-2025-50182","PYSEC-2026-1997",[119,1688],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1693],{"type":1287,"score":1694},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1696,1698,1700,1702,1703,1705,1706],{"type":1302,"url":1697},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1291,"url":1699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1296,"url":1701},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1299,"url":1432},{"type":1302,"url":1704},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1299,"url":1434},{"type":1291,"url":1707},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1438,1439,1440,1441],8,{"id":120,"slug":1711,"dossier":47,"summary":1712,"aliases":1713,"sourceIds":1716,"published":1717,"modified":1718,"checkedAt":7,"severity":1719,"references":1721,"versionKeys":1738,"packageCount":32,"repositoryCount":103},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[1714,1715],"CVE-2026-76219","PYSEC-2026-3838",[120,1715],"2026-08-07T15:33:57Z","2026-09-10T12:25:42.767166279Z",[1720],{"type":1287,"score":1552},[1722,1724,1726,1728,1730,1731,1733,1735,1736],{"type":1302,"url":1723},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":1291,"url":1725},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76219",{"type":1302,"url":1727},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":1302,"url":1729},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":1299,"url":1339},{"type":1302,"url":1732},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",{"type":1302,"url":1734},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-read-tree",{"type":1299,"url":1408},{"type":1291,"url":1737},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",[1345,1346,1347],{"id":121,"slug":1740,"dossier":47,"summary":1741,"aliases":1742,"sourceIds":1745,"published":1746,"modified":1747,"checkedAt":7,"severity":1748,"references":1751,"versionKeys":1764,"packageCount":32,"repositoryCount":34},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[1743,1744],"CVE-2025-6921","PYSEC-2026-1980",[121,1744],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[1749],{"type":1287,"score":1750},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1752,1754,1756,1758,1759,1761,1762],{"type":1291,"url":1753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1302,"url":1755},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1302,"url":1757},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1299,"url":1366},{"type":1302,"url":1760},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1299,"url":1510},{"type":1291,"url":1763},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1372,1373,1374,1375],{"id":122,"slug":1766,"dossier":90,"summary":1767,"aliases":1768,"sourceIds":1772,"published":1773,"modified":1774,"checkedAt":7,"severity":1775,"references":1778,"versionKeys":1793,"packageCount":32,"repositoryCount":1682},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1769,1770,1771],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[122,1771],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[1776],{"type":1287,"score":1777},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1779,1781,1783,1785,1787,1789,1791,1792],{"type":1334,"url":1780},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1291,"url":1782},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1296,"url":1784},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1296,"url":1786},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1296,"url":1788},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1302,"url":1790},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1299,"url":1669},{"type":1291,"url":1671},[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":123,"slug":1795,"dossier":47,"summary":1796,"aliases":1797,"sourceIds":1800,"published":1801,"modified":1802,"checkedAt":7,"severity":1803,"references":1806,"versionKeys":1829,"packageCount":32,"repositoryCount":104},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1798,1799],"CVE-2026-4539","PYSEC-2026-2987",[123,1799],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[1804,1805],{"type":1287,"score":1456},{"type":1328,"score":1458},[1807,1809,1811,1813,1815,1817,1819,1821,1823,1825,1827],{"type":1291,"url":1808},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1302,"url":1810},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1302,"url":1812},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1302,"url":1814},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1299,"url":1816},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1302,"url":1818},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1302,"url":1820},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1302,"url":1822},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1302,"url":1824},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1299,"url":1826},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1291,"url":1828},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1830,1831],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":124,"slug":1833,"dossier":47,"summary":1834,"aliases":1835,"sourceIds":1838,"published":1839,"modified":1840,"checkedAt":7,"severity":1841,"references":1845,"versionKeys":1855,"packageCount":32,"repositoryCount":103},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[1836,1837],"CVE-2026-73619","PYSEC-2026-3948",[124,1837],"2026-08-03T20:14:28Z","2026-09-10T13:11:01.695990206Z",[1842,1843],{"type":1287,"score":1599},{"type":1328,"score":1844},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1846,1848,1849,1851,1852,1853],{"type":1334,"url":1847},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":1302,"url":1559},{"type":1302,"url":1850},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":1299,"url":1339},{"type":1302,"url":1564},{"type":1291,"url":1854},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-archive",[1345,1346,1347],{"id":125,"slug":1857,"dossier":47,"summary":1858,"aliases":1859,"sourceIds":1863,"published":1864,"modified":1865,"checkedAt":7,"severity":1866,"references":1869,"versionKeys":1879,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1860,1861,1862],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[125,1862],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1867,1868],{"type":1328,"score":1329},{"type":1287,"score":1326},[1870,1872,1874,1876,1878],{"type":1291,"url":1871},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1291,"url":1873},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1302,"url":1875},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1302,"url":1877},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1299,"url":1472},[1484],{"id":126,"slug":1881,"dossier":47,"summary":1882,"aliases":1883,"sourceIds":1886,"published":1887,"modified":1888,"checkedAt":7,"severity":1889,"references":1891,"versionKeys":1902,"packageCount":32,"repositoryCount":34},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[1884,1885],"CVE-2025-6638","PYSEC-2026-1981",[126,1885],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[1890],{"type":1287,"score":1750},[1892,1894,1895,1896,1897,1899,1900],{"type":1291,"url":1893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1302,"url":1755},{"type":1302,"url":1757},{"type":1299,"url":1366},{"type":1302,"url":1898},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1299,"url":1510},{"type":1291,"url":1901},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1372,1373,1374,1375],{"id":127,"slug":1904,"dossier":47,"summary":1905,"aliases":1906,"sourceIds":1910,"published":1911,"modified":1912,"checkedAt":7,"severity":1913,"references":1917,"versionKeys":1934,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1907,1908,1909],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[127,1909],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[1914,1916],{"type":1328,"score":1915},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1287,"score":1392},[1918,1920,1922,1924,1926,1928,1930,1932],{"type":1334,"url":1919},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1291,"url":1921},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1465,"url":1923},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1296,"url":1925},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1302,"url":1927},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1299,"url":1929},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1302,"url":1931},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1305,"url":1933},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1935,1936,1937,1938],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":128,"slug":1940,"dossier":90,"summary":1941,"aliases":1942,"sourceIds":1946,"published":1947,"modified":1948,"checkedAt":7,"severity":1949,"references":1951,"versionKeys":1961,"packageCount":32,"repositoryCount":1682},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1943,1944,1945],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[128,1945],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[1950],{"type":1287,"score":1525},[1952,1954,1956,1957,1959,1960],{"type":1334,"url":1953},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1291,"url":1955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1296,"url":1665},{"type":1302,"url":1958},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1299,"url":1669},{"type":1291,"url":1671},[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":129,"slug":1963,"dossier":47,"summary":1964,"aliases":1965,"sourceIds":1969,"published":1970,"modified":1971,"checkedAt":7,"severity":1972,"references":1976,"versionKeys":1984,"packageCount":32,"repositoryCount":1985},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1966,1967,1968],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[129,1968],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[1973,1974],{"type":1287,"score":1460},{"type":1328,"score":1975},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1977,1979,1981,1982],{"type":1291,"url":1978},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1291,"url":1980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1299,"url":1669},{"type":1291,"url":1983},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1676,1677,1678,1679,1680],12,{"id":130,"slug":1987,"dossier":47,"summary":1988,"aliases":1989,"sourceIds":1992,"published":1993,"modified":1994,"checkedAt":7,"severity":1995,"references":1998,"versionKeys":2008,"packageCount":32,"repositoryCount":103},"ghsa-5xxx-qhh7-9287-87d91b3e","GitPython: Incomplete unsafe_git_revision_options denylist omits --contents\u002F-S, enabling arbitrary file read via Repo.blame()",[1990,1991],"CVE-2026-78678","PYSEC-2026-3788",[130,1991],"2026-08-25T02:16:52.313Z","2026-09-08T19:00:06.904435463Z",[1996,1997],{"type":1287,"score":1599},{"type":1328,"score":1844},[1999,2001,2003,2004,2006],{"type":1334,"url":2000},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-5xxx-qhh7-9287",{"type":1291,"url":2002},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78678",{"type":1299,"url":1339},{"type":1302,"url":2005},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3788.yaml",{"type":1291,"url":2007},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-blame",[1345,1346,1347],{"id":131,"slug":2010,"dossier":90,"summary":2011,"aliases":2012,"sourceIds":2016,"published":2017,"modified":2018,"checkedAt":7,"severity":2019,"references":2022,"versionKeys":2038,"packageCount":32,"repositoryCount":1682},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[2013,2014,2015],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[131,2015],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[2020],{"type":1328,"score":2021},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2023,2025,2027,2029,2031,2032,2034,2036],{"type":1302,"url":2024},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1291,"url":2026},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1302,"url":2028},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1302,"url":2030},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1299,"url":1669},{"type":1302,"url":2033},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1299,"url":2035},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1291,"url":2037},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":132,"slug":2040,"dossier":47,"summary":2041,"aliases":2042,"sourceIds":2045,"published":2046,"modified":2047,"checkedAt":7,"severity":2048,"references":2051,"versionKeys":2074,"packageCount":32,"repositoryCount":392},"ghsa-6497-prx7-gpmq-2b8ee85d","geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure",[2043,2044],"CVE-2025-69662","PYSEC-2026-62",[132,2044],"2026-01-30T19:16:11.967Z","2026-06-10T17:01:18.172032507Z",[2049],{"type":1287,"score":2050},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2052,2054,2056,2058,2060,2062,2064,2066,2068,2070,2072],{"type":1291,"url":2053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69662",{"type":1302,"url":2055},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fissues\u002F3679",{"type":1296,"url":2057},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fpull\u002F3681",{"type":1302,"url":2059},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fcommit\u002F6aa8ef14ffdee4ba1044349ab948e1a1fbfaf419",{"type":1302,"url":2061},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas",{"type":1299,"url":2063},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas",{"type":1302,"url":2065},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Freleases\u002Ftag\u002Fv1.1.2",{"type":1302,"url":2067},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgeopandas\u002FPYSEC-2026-62.yaml",{"type":1302,"url":2069},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00025.html",{"type":1334,"url":2071},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas\u002F",{"type":1291,"url":2073},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6497-prx7-gpmq",[2075],"pypi:geopandas@1.0.1",{"id":133,"slug":2077,"dossier":90,"summary":2078,"aliases":2079,"sourceIds":2082,"published":2083,"modified":2084,"checkedAt":7,"severity":2085,"references":2089,"versionKeys":2098,"packageCount":32,"repositoryCount":2103},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2080,2081],"CVE-2026-45409","PYSEC-2026-215",[133,2081],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[2086,2087],{"type":1287,"score":1498},{"type":1328,"score":2088},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2090,2092,2094,2096],{"type":1291,"url":2091},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1291,"url":2093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1299,"url":2095},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1302,"url":2097},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2099,2100,2101,2102],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":134,"slug":2105,"dossier":47,"summary":2106,"aliases":2107,"sourceIds":2110,"published":2111,"modified":2112,"checkedAt":7,"severity":2113,"references":2118,"versionKeys":2130,"packageCount":32,"repositoryCount":42},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2108,2109],"CVE-2026-1839","PYSEC-2026-2288",[134,2109],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[2114,2116],{"type":1287,"score":2115},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1287,"score":2117},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2119,2121,2123,2124,2126,2128],{"type":1291,"url":2120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1296,"url":2122},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1299,"url":1366},{"type":1302,"url":2125},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1334,"url":2127},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1291,"url":2129},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1372,1373,1374,1375,1376,1377,1378,1379,1380],{"id":135,"slug":2132,"dossier":47,"summary":2133,"aliases":2134,"sourceIds":2137,"published":2138,"modified":2139,"checkedAt":7,"severity":2140,"references":2144,"versionKeys":2156,"packageCount":32,"repositoryCount":103},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[2135,2136],"CVE-2026-73623","PYSEC-2026-3952",[135,2136],"2026-07-24T16:42:09Z","2026-09-10T13:11:03.995690741Z",[2141,2143],{"type":1287,"score":2142},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1287,"score":1392},[2145,2147,2149,2151,2152,2154],{"type":1334,"url":2146},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":1302,"url":2148},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":1302,"url":2150},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":1299,"url":1339},{"type":1302,"url":2153},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",{"type":1291,"url":2155},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-template",[1345,1346,1347],{"id":136,"slug":2158,"dossier":90,"summary":2159,"aliases":2160,"sourceIds":2164,"published":2165,"modified":2166,"checkedAt":7,"severity":2167,"references":2169,"versionKeys":2182,"packageCount":32,"repositoryCount":1682},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[2161,2162,2163],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[136,2163],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[2168],{"type":1287,"score":1525},[2170,2172,2174,2176,2178,2180,2181],{"type":1334,"url":2171},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1291,"url":2173},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1296,"url":2175},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1296,"url":2177},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1302,"url":2179},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1299,"url":1669},{"type":1291,"url":2033},[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":137,"slug":2184,"dossier":47,"summary":2185,"aliases":2186,"sourceIds":2189,"published":2190,"modified":2191,"checkedAt":7,"severity":2192,"references":2194,"versionKeys":2205,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2187,2188],"CVE-2024-12720","PYSEC-2026-1982",[137,2188],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[2193],{"type":1287,"score":1750},[2195,2197,2199,2200,2202,2203],{"type":1291,"url":2196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1302,"url":2198},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1299,"url":1366},{"type":1302,"url":2201},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1299,"url":1510},{"type":1291,"url":2204},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1372],{"id":138,"slug":2207,"dossier":47,"summary":2208,"aliases":2209,"sourceIds":2212,"published":2213,"modified":2214,"checkedAt":7,"severity":2215,"references":2220,"versionKeys":2228,"packageCount":32,"repositoryCount":103},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[2210,2211],"CVE-2026-44243","PYSEC-2026-2162",[138,2211],"2026-05-06T19:38:48Z","2026-09-10T03:50:45.903378498Z",[2216,2218],{"type":1287,"score":2217},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1328,"score":2219},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2221,2223,2225,2226],{"type":1334,"url":2222},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":1291,"url":2224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":1299,"url":1339},{"type":1296,"url":2227},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[1345,1346,1347],{"id":139,"slug":2230,"dossier":47,"summary":2231,"aliases":2232,"sourceIds":2235,"published":2236,"modified":2237,"checkedAt":7,"severity":2238,"references":2241,"versionKeys":2254,"packageCount":32,"repositoryCount":353},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[2233,2234],"CVE-2025-66034","PYSEC-2026-1389",[139,2234],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[2239],{"type":1287,"score":2240},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[2242,2244,2246,2248,2250,2252],{"type":1302,"url":2243},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":1291,"url":2245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":1302,"url":2247},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":1299,"url":2249},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":1299,"url":2251},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":1291,"url":2253},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[2255,2256,2257,2258,2259,2260],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":140,"slug":2262,"dossier":47,"summary":2263,"aliases":2264,"sourceIds":2267,"published":2268,"modified":2269,"checkedAt":7,"severity":2270,"references":2277,"versionKeys":2292,"packageCount":32,"repositoryCount":103},"ghsa-7833-fr7j-v32q-fd003872","GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)",[2265,2266],"CVE-2026-78675","PYSEC-2026-3785",[140,2266],"2026-08-25T02:16:51.887Z","2026-09-08T18:45:10.860686865Z",[2271,2273,2275],{"type":1287,"score":2272},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1328,"score":2274},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1287,"score":2276},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2278,2280,2282,2284,2286,2287,2288,2290],{"type":1334,"url":2279},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7833-fr7j-v32q",{"type":1291,"url":2281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78675",{"type":1302,"url":2283},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2211",{"type":1302,"url":2285},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fef7568e3b317ce617eacda39b8b54dcdff8c3b5c",{"type":1299,"url":1339},{"type":1302,"url":1611},{"type":1302,"url":2289},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3785.yaml",{"type":1291,"url":2291},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-local-file-content-disclosure-via-gitmodules",[1345,1346,1347],{"id":141,"slug":2294,"dossier":47,"summary":2295,"aliases":2296,"sourceIds":2300,"published":2301,"modified":2302,"checkedAt":7,"severity":2303,"references":2310,"versionKeys":2322,"packageCount":32,"repositoryCount":66},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[2297,2298,2299],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[141,2298,2299],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[2304,2306,2308],{"type":1287,"score":2305},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":1287,"score":2307},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":1287,"score":2309},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2311,2313,2315,2316,2318,2320],{"type":1291,"url":2312},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":1302,"url":2314},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":1299,"url":1634},{"type":1302,"url":2317},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":1291,"url":2319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":1291,"url":2321},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[1642,1643,1644,1645],{"id":142,"slug":2324,"dossier":47,"summary":2325,"aliases":2326,"sourceIds":2329,"published":2330,"modified":2331,"checkedAt":7,"severity":2332,"references":2334,"versionKeys":2347,"packageCount":32,"repositoryCount":392},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[2327,2328],"CVE-2025-47287","PYSEC-2026-1974",[142,2328],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[2333],{"type":1287,"score":1525},[2335,2337,2339,2341,2342,2344,2345],{"type":1302,"url":2336},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":1291,"url":2338},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":1302,"url":2340},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":1299,"url":1634},{"type":1302,"url":2343},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":1299,"url":1636},{"type":1291,"url":2346},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[1642],{"id":143,"slug":2349,"dossier":47,"summary":2350,"aliases":2351,"sourceIds":2354,"published":2355,"modified":2356,"checkedAt":7,"severity":2357,"references":2360,"versionKeys":2377,"packageCount":32,"repositoryCount":343},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[2352,2353],"CVE-2026-0994","PYSEC-2026-1805",[143,2353],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[2358],{"type":1328,"score":2359},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[2361,2363,2365,2367,2369,2371,2373,2375],{"type":1291,"url":2362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":1302,"url":2364},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":1302,"url":2366},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":1302,"url":2368},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":1302,"url":2370},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":1299,"url":2372},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":1299,"url":2374},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":1291,"url":2376},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[2378,2379,2380,2381,2382,2383,2384,2385,2386,2387],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":144,"slug":2389,"dossier":47,"summary":2390,"aliases":2391,"sourceIds":2394,"published":2395,"modified":2396,"checkedAt":7,"severity":2397,"references":2402,"versionKeys":2413,"packageCount":32,"repositoryCount":373},"ghsa-7p48-42j8-8846-584b0522","Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)",[2392,2393],"CVE-2026-33682","PYSEC-2026-2285",[144,2393],"2026-03-25T21:20:52Z","2026-07-13T07:26:25.253864212Z",[2398,2400],{"type":1287,"score":2399},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":1287,"score":2401},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2403,2405,2407,2409,2411],{"type":1291,"url":2404},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fsecurity\u002Fadvisories\u002FGHSA-7p48-42j8-8846",{"type":1291,"url":2406},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33682",{"type":1296,"url":2408},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002F23692ca70b2f2ac720c72d1feb4f190c9d6eed76",{"type":1299,"url":2410},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit",{"type":1291,"url":2412},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Freleases\u002Ftag\u002F1.54.0",[2414,2415,2416],"pypi:streamlit@1.49.0","pypi:streamlit@1.49.1","pypi:streamlit@1.51.0",{"id":145,"slug":2418,"dossier":47,"summary":2419,"aliases":2420,"sourceIds":2422,"published":2423,"modified":2424,"checkedAt":7,"severity":2425,"references":2427,"versionKeys":2439,"packageCount":32,"repositoryCount":42},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[2421],"CVE-2026-91990",[145],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[2426],{"type":1328,"score":2088},[2428,2430,2432,2434,2436,2437],{"type":1302,"url":2429},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":1302,"url":2431},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":1302,"url":2433},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":1302,"url":2435},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":1299,"url":1634},{"type":1302,"url":2438},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[1642,1643,1644,1645,1646,2440],"pypi:tornado@6.5.7",{"id":146,"slug":2442,"dossier":47,"summary":2443,"aliases":2444,"sourceIds":2448,"published":2449,"modified":2450,"checkedAt":7,"severity":2451,"references":2455,"versionKeys":2477,"packageCount":32,"repositoryCount":1709},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[2445,2446,2447],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[146,2447],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[2452,2453],{"type":1287,"score":1456},{"type":1328,"score":2454},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2456,2458,2460,2462,2464,2466,2467,2469,2471,2473,2475],{"type":1291,"url":2457},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1302,"url":2459},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1302,"url":2461},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1302,"url":2463},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1302,"url":2465},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1299,"url":1472},{"type":1302,"url":2468},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1302,"url":2470},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1302,"url":2472},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1299,"url":2474},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1291,"url":2476},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1484,1485,1486,2478,2479],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":147,"slug":2481,"dossier":47,"summary":2482,"aliases":2483,"sourceIds":2486,"published":2487,"modified":2488,"checkedAt":7,"severity":2489,"references":2496,"versionKeys":2511,"packageCount":32,"repositoryCount":103},"ghsa-8mcc-hrx5-hvxc-9da62a9f","GitPython: clone_from()\u002Fclone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination",[2484,2485],"CVE-2026-78677","PYSEC-2026-3787",[147,2485],"2026-08-25T02:16:52.173Z","2026-09-08T19:00:06.914140693Z",[2490,2492,2494],{"type":1287,"score":2491},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1328,"score":2493},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1328,"score":2495},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2497,2499,2501,2503,2505,2506,2507,2509],{"type":1334,"url":2498},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-8mcc-hrx5-hvxc",{"type":1291,"url":2500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78677",{"type":1302,"url":2502},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2210",{"type":1302,"url":2504},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fb68afff45af0f49e79a3e2d2162018986b37ad5d",{"type":1299,"url":1339},{"type":1302,"url":1611},{"type":1302,"url":2508},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3787.yaml",{"type":1291,"url":2510},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-separate-git-dir",[1345,1346,1347],{"id":148,"slug":2513,"dossier":47,"summary":2514,"aliases":2515,"sourceIds":2518,"published":2519,"modified":2520,"checkedAt":7,"severity":2521,"references":2524,"versionKeys":2543,"packageCount":32,"repositoryCount":373},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[2516,2517],"CVE-2025-4565","PYSEC-2026-1806",[148,2517],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[2522],{"type":1328,"score":2523},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2525,2527,2529,2531,2533,2534,2536,2538,2540,2541],{"type":1302,"url":2526},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":1302,"url":2528},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":1291,"url":2530},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":1302,"url":2532},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":1299,"url":2372},{"type":1302,"url":2535},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":1302,"url":2537},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":1302,"url":2539},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":1299,"url":2374},{"type":1291,"url":2542},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[2378,2380,2381],{"id":149,"slug":2545,"dossier":90,"summary":2546,"aliases":2547,"sourceIds":2551,"published":2552,"modified":2553,"checkedAt":7,"severity":2554,"references":2556,"versionKeys":2566,"packageCount":32,"repositoryCount":1682},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[2548,2549,2550],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[149,2550],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[2555],{"type":1287,"score":1525},[2557,2559,2561,2562,2564,2565],{"type":1334,"url":2558},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1291,"url":2560},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1296,"url":1665},{"type":1302,"url":2563},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1299,"url":1669},{"type":1291,"url":1671},[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":150,"slug":2568,"dossier":47,"summary":2569,"aliases":2570,"sourceIds":2573,"published":2574,"modified":2575,"checkedAt":7,"severity":2576,"references":2578,"versionKeys":2591,"packageCount":32,"repositoryCount":34},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2571,2572],"CVE-2025-5197","PYSEC-2026-1983",[150,2572],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[2577],{"type":1287,"score":1750},[2579,2581,2583,2585,2586,2588,2589],{"type":1291,"url":2580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1302,"url":2582},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1302,"url":2584},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1299,"url":1366},{"type":1302,"url":2587},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1299,"url":1510},{"type":1291,"url":2590},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1372,1373,1374,1375],{"id":151,"slug":2593,"dossier":47,"summary":2594,"aliases":2595,"sourceIds":2598,"published":2599,"modified":2600,"checkedAt":7,"severity":2601,"references":2604,"versionKeys":2616,"packageCount":32,"repositoryCount":103},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[2596,2597],"CVE-2026-73622","PYSEC-2026-3951",[151,2597],"2026-07-24T21:45:16Z","2026-09-10T13:10:44.445262446Z",[2602,2603],{"type":1287,"score":2491},{"type":1328,"score":2495},[2605,2607,2609,2610,2612,2614],{"type":1334,"url":2606},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":1302,"url":2608},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":1299,"url":1339},{"type":1302,"url":2611},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",{"type":1291,"url":2613},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-remote-add",{"type":1296,"url":2615},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",[1345,1346,1347],{"id":152,"slug":2618,"dossier":47,"summary":2619,"aliases":2620,"sourceIds":2623,"published":2624,"modified":2625,"checkedAt":7,"severity":2626,"references":2628,"versionKeys":2644,"packageCount":32,"repositoryCount":103},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[2621,2622],"CVE-2026-67323","PYSEC-2026-3839",[152,2622],"2026-07-21T20:10:06Z","2026-09-10T12:25:39.217544351Z",[2627],{"type":1287,"score":2272},[2629,2631,2633,2635,2637,2638,2639,2641,2642],{"type":1302,"url":2630},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":1291,"url":2632},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67323",{"type":1302,"url":2634},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":1302,"url":2636},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":1299,"url":1339},{"type":1302,"url":1404},{"type":1302,"url":2640},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-unguarded-git-options",{"type":1299,"url":1408},{"type":1291,"url":2643},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",[1345,1346,1347],{"id":153,"slug":2646,"dossier":47,"summary":2647,"aliases":2648,"sourceIds":2651,"published":2652,"modified":2653,"checkedAt":7,"severity":2654,"references":2657,"versionKeys":2676,"packageCount":32,"repositoryCount":1709},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2649,2650],"CVE-2024-47081","PYSEC-2026-1872",[153,2650],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2655],{"type":1287,"score":2656},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2658,2660,2662,2664,2666,2668,2670,2672,2674],{"type":1302,"url":2659},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1291,"url":2661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1302,"url":2663},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1296,"url":2665},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1299,"url":2667},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1302,"url":2669},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1302,"url":2671},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1299,"url":2673},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1291,"url":2675},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2677,2678],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":154,"slug":2680,"dossier":90,"summary":2681,"aliases":2682,"sourceIds":2686,"published":2687,"modified":2688,"checkedAt":7,"severity":2689,"references":2691,"versionKeys":2704,"packageCount":32,"repositoryCount":1682},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[2683,2684,2685],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[154,2685],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[2690],{"type":1287,"score":1525},[2692,2694,2696,2698,2700,2702,2703],{"type":1334,"url":2693},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1291,"url":2695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1296,"url":2697},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1296,"url":2699},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1302,"url":2701},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1299,"url":1669},{"type":1291,"url":2033},[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":155,"slug":2706,"dossier":47,"summary":2707,"aliases":2708,"sourceIds":2711,"published":2712,"modified":2713,"checkedAt":7,"severity":2714,"references":2716,"versionKeys":2731,"packageCount":32,"repositoryCount":103},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[2709,2710],"CVE-2026-76218","PYSEC-2026-3840",[155,2710],"2026-08-07T15:36:43Z","2026-09-10T12:25:55.324487522Z",[2715],{"type":1287,"score":2142},[2717,2719,2721,2722,2724,2725,2726,2728,2729],{"type":1302,"url":2718},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":1291,"url":2720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76218",{"type":1302,"url":1727},{"type":1302,"url":2723},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":1299,"url":1339},{"type":1302,"url":1732},{"type":1302,"url":2727},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-repo-init",{"type":1299,"url":1408},{"type":1291,"url":2730},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",[1345,1346,1347],{"id":156,"slug":2733,"dossier":47,"summary":2734,"aliases":2735,"sourceIds":2738,"published":2739,"modified":2740,"checkedAt":7,"severity":2741,"references":2744,"versionKeys":2761,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2736,2737],"CVE-2024-35195","PYSEC-2026-1873",[156,2737],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2742],{"type":1287,"score":2743},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2745,2747,2749,2751,2753,2754,2756,2758,2759],{"type":1302,"url":2746},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1291,"url":2748},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1302,"url":2750},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1296,"url":2752},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1299,"url":2667},{"type":1302,"url":2755},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1302,"url":2757},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1299,"url":2673},{"type":1291,"url":2760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2677],{"id":157,"slug":2763,"dossier":47,"summary":2764,"aliases":2765,"sourceIds":2769,"published":2770,"modified":2771,"checkedAt":7,"severity":2772,"references":2777,"versionKeys":2793,"packageCount":32,"repositoryCount":392},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[2766,2767,2768],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[157],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[2773,2775],{"type":1287,"score":2774},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1328,"score":2776},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2778,2780,2782,2784,2785,2787,2789,2791],{"type":1291,"url":2779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1302,"url":2781},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1302,"url":2783},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1299,"url":1472},{"type":1302,"url":2786},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1302,"url":2788},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1302,"url":2790},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1302,"url":2792},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1484,1485],{"id":158,"slug":2795,"dossier":47,"summary":2796,"aliases":2797,"sourceIds":2800,"published":2801,"modified":2802,"checkedAt":7,"severity":2803,"references":2805,"versionKeys":2817,"packageCount":32,"repositoryCount":1709},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[2798,2799],"CVE-2025-67725","PYSEC-2025-266",[158,2799],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[2804],{"type":1287,"score":1525},[2806,2808,2810,2812,2814,2815],{"type":1291,"url":2807},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":1291,"url":2809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":1296,"url":2811},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":1302,"url":2813},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":1299,"url":1634},{"type":1291,"url":2816},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[1642,1643,1644],{"id":159,"slug":2819,"dossier":47,"summary":2820,"aliases":2821,"sourceIds":2825,"published":2826,"modified":2827,"checkedAt":7,"severity":2828,"references":2831,"versionKeys":2871,"packageCount":32,"repositoryCount":104},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2822,2823,2824],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[159,2824],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[2829,2830],{"type":1328,"score":2274},{"type":1287,"score":1525},[2832,2834,2836,2838,2840,2842,2843,2845,2847,2849,2851,2853,2855,2857,2859,2861,2863,2865,2867,2869],{"type":1302,"url":2833},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1291,"url":2835},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1302,"url":2837},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1302,"url":2839},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1302,"url":2841},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1299,"url":1669},{"type":1302,"url":2844},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1302,"url":2846},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1302,"url":2848},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1291,"url":2850},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1291,"url":2852},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1291,"url":2854},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1291,"url":2856},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1291,"url":2858},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1291,"url":2860},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1291,"url":2862},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1291,"url":2864},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1291,"url":2866},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1291,"url":2868},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1291,"url":2870},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1673,1674,1675,1676,1677,1678,1679],{"id":160,"slug":2873,"dossier":47,"summary":2874,"aliases":2875,"sourceIds":2878,"published":2879,"modified":2880,"checkedAt":7,"severity":2881,"references":2884,"versionKeys":2901,"packageCount":32,"repositoryCount":392},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2876,2877],"CVE-2025-27516","PYSEC-2026-1471",[160,2877],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2882],{"type":1328,"score":2883},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2885,2887,2889,2891,2893,2895,2897,2899],{"type":1302,"url":2886},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1291,"url":2888},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1296,"url":2890},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1299,"url":2892},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1302,"url":2894},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1302,"url":2896},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1299,"url":2898},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1291,"url":2900},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2902,2903],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":161,"slug":2905,"dossier":47,"summary":2906,"aliases":2907,"sourceIds":2910,"published":2911,"modified":2912,"checkedAt":7,"severity":2913,"references":2916,"versionKeys":2927,"packageCount":32,"repositoryCount":66},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[2908,2909],"CVE-2026-49854","PYSEC-2026-3388",[161,2909],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[2914],{"type":1287,"score":2915},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2917,2919,2920,2922,2923,2925],{"type":1302,"url":2918},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":1299,"url":1634},{"type":1302,"url":2921},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":1299,"url":1636},{"type":1291,"url":2924},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":1291,"url":2926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[1642,1643,1644,1645,1646],{"id":162,"slug":2929,"dossier":47,"summary":2930,"aliases":2931,"sourceIds":2935,"published":2936,"modified":2937,"checkedAt":7,"severity":2938,"references":2943,"versionKeys":2959,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2932,2933,2934],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[162,2934],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[2939,2941],{"type":1287,"score":2940},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1328,"score":2942},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2944,2946,2948,2950,2951,2953,2955,2957],{"type":1291,"url":2945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1302,"url":2947},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1302,"url":2949},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1299,"url":1929},{"type":1302,"url":2952},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1302,"url":2954},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1299,"url":2956},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1291,"url":2958},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1935],{"id":163,"slug":2961,"dossier":47,"summary":2962,"aliases":2963,"sourceIds":2967,"published":2968,"modified":2969,"checkedAt":7,"severity":2970,"references":2975,"versionKeys":2993,"packageCount":32,"repositoryCount":392},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[2964,2965,2966],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[163],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[2971,2973],{"type":1287,"score":2972},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1328,"score":2974},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2976,2978,2980,2982,2984,2986,2987,2989,2991],{"type":1291,"url":2977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1302,"url":2979},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1302,"url":2981},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1302,"url":2983},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1302,"url":2985},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1299,"url":1472},{"type":1302,"url":2988},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1302,"url":2990},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1302,"url":2992},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1484,1485],{"id":164,"slug":2995,"dossier":47,"summary":2996,"aliases":2997,"sourceIds":3000,"published":3001,"modified":3002,"checkedAt":7,"severity":3003,"references":3008,"versionKeys":3032,"packageCount":32,"repositoryCount":42},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[2998,2999],"CVE-2026-5241","PYSEC-2026-2290",[164,2999],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[3004,3006],{"type":1287,"score":3005},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1287,"score":3007},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3009,3011,3013,3015,3017,3019,3021,3023,3024,3026,3028,3030],{"type":1291,"url":3010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1296,"url":3012},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1291,"url":3014},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1291,"url":3016},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1302,"url":3018},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":1302,"url":3020},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":1465,"url":3022},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1299,"url":1366},{"type":1302,"url":3025},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1334,"url":3027},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1302,"url":3029},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":1291,"url":3031},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[1372,1373,1374,1375,1376,1377,1378,1379,1380],{"id":165,"slug":3034,"dossier":90,"summary":3035,"aliases":3036,"sourceIds":3040,"published":3041,"modified":3042,"checkedAt":7,"severity":3043,"references":3046,"versionKeys":3060,"packageCount":32,"repositoryCount":1682},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[3037,3038,3039],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[165,3039],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[3044],{"type":1287,"score":3045},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[3047,3049,3051,3053,3055,3056,3057,3058],{"type":1302,"url":3048},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1291,"url":3050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1302,"url":3052},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1302,"url":3054},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1299,"url":1669},{"type":1302,"url":2033},{"type":1299,"url":2035},{"type":1291,"url":3059},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":166,"slug":3062,"dossier":47,"summary":3063,"aliases":3064,"sourceIds":3066,"published":3067,"modified":3068,"checkedAt":7,"severity":3069,"references":3071,"versionKeys":3079,"packageCount":32,"repositoryCount":103},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[3065],"CVE-2026-73624",[166],"2026-07-24T16:41:20Z","2026-09-10T03:50:51.919825118Z",[3070],{"type":1287,"score":1552},[3072,3074,3075,3077,3078],{"type":1302,"url":3073},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":1302,"url":2148},{"type":1302,"url":3076},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":1299,"url":1339},{"type":1302,"url":2153},[1345,1346,1347],{"id":167,"slug":3081,"dossier":47,"summary":2185,"aliases":3082,"sourceIds":3085,"published":3086,"modified":3087,"checkedAt":7,"severity":3088,"references":3091,"versionKeys":3102,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[3083,3084],"CVE-2025-1194","PYSEC-2026-1984",[167,3084],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[3089],{"type":1287,"score":3090},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3092,3094,3096,3097,3099,3100],{"type":1291,"url":3093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1302,"url":3095},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1299,"url":1366},{"type":1302,"url":3098},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1299,"url":1510},{"type":1291,"url":3101},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1372],{"id":168,"slug":3104,"dossier":47,"summary":3105,"aliases":3106,"sourceIds":3109,"published":3110,"modified":3111,"checkedAt":7,"severity":3112,"references":3115,"versionKeys":3134,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[3107,3108],"CVE-2024-34062","PYSEC-2026-1976",[168,3108],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[3113],{"type":1287,"score":3114},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3116,3118,3120,3122,3124,3126,3128,3130,3132],{"type":1302,"url":3117},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1291,"url":3119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1302,"url":3121},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1299,"url":3123},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1302,"url":3125},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1302,"url":3127},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1302,"url":3129},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1299,"url":3131},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1291,"url":3133},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[3135],"pypi:tqdm@4.66.2",{"id":169,"slug":3137,"dossier":90,"summary":3138,"aliases":3139,"sourceIds":3142,"published":3143,"modified":3144,"checkedAt":7,"severity":3145,"references":3150,"versionKeys":3160,"packageCount":32,"repositoryCount":3163},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3140,3141],"CVE-2026-25645","PYSEC-2026-2275",[169,3141],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[3146,3148],{"type":1287,"score":3147},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1287,"score":3149},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3151,3153,3155,3157,3158],{"type":1291,"url":3152},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1291,"url":3154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1296,"url":3156},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1299,"url":2667},{"type":1291,"url":3159},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2677,2678,3161,3162],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":170,"slug":3165,"dossier":90,"summary":3166,"aliases":3167,"sourceIds":3170,"published":3171,"modified":3172,"checkedAt":7,"severity":3173,"references":3175,"versionKeys":3186,"packageCount":32,"repositoryCount":1443},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3168,3169],"CVE-2025-66418","PYSEC-2026-1998",[170,3169],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[3174],{"type":1328,"score":1423},[3176,3178,3180,3182,3183,3184],{"type":1302,"url":3177},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1291,"url":3179},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1296,"url":3181},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1299,"url":1432},{"type":1299,"url":1434},{"type":1291,"url":3185},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1438,1439,1440,1441,1442],{"id":171,"slug":3188,"dossier":47,"summary":3189,"aliases":3190,"sourceIds":3193,"published":3194,"modified":3195,"checkedAt":7,"severity":3196,"references":3199,"versionKeys":3214,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3191,3192],"CVE-2024-56201","PYSEC-2026-1472",[171,3192],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[3197,3198],{"type":1287,"score":1392},{"type":1328,"score":2883},[3200,3202,3204,3206,3208,3209,3211,3212],{"type":1302,"url":3201},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1291,"url":3203},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1302,"url":3205},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1296,"url":3207},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1299,"url":2892},{"type":1302,"url":3210},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1299,"url":2898},{"type":1291,"url":3213},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2902],{"id":172,"slug":3216,"dossier":90,"summary":3217,"aliases":3218,"sourceIds":3222,"published":3223,"modified":3224,"checkedAt":7,"severity":3225,"references":3228,"versionKeys":3240,"packageCount":32,"repositoryCount":3163},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[3219,3220,3221],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[172,3221],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[3226],{"type":1287,"score":3227},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3229,3231,3233,3235,3237,3238],{"type":1334,"url":3230},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":1291,"url":3232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":1296,"url":3234},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1302,"url":3236},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":1299,"url":1929},{"type":1291,"url":3239},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1935,1936,1937,1938,3241,3242,3243,3244,3245,3246,3247,3248],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":173,"slug":3250,"dossier":47,"summary":3251,"aliases":3252,"sourceIds":3255,"published":3256,"modified":3257,"checkedAt":7,"severity":3258,"references":3260,"versionKeys":3281,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3253,3254],"CVE-2024-34064","PYSEC-2026-1474",[173,3254],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[3259],{"type":1287,"score":2305},[3261,3263,3265,3267,3268,3270,3272,3274,3276,3278,3279],{"type":1302,"url":3262},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1291,"url":3264},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1296,"url":3266},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1299,"url":2892},{"type":1302,"url":3269},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1302,"url":3271},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1302,"url":3273},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1302,"url":3275},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1302,"url":3277},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1299,"url":2898},{"type":1291,"url":3280},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2902],{"id":174,"slug":3283,"dossier":47,"summary":3284,"aliases":3285,"sourceIds":3288,"published":3289,"modified":3290,"checkedAt":7,"severity":3291,"references":3293,"versionKeys":3308,"packageCount":32,"repositoryCount":103},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[3286,3287],"CVE-2026-76217","PYSEC-2026-3841",[174,3287],"2026-08-07T15:43:56Z","2026-09-10T12:26:07.095223621Z",[3292],{"type":1287,"score":1599},[3294,3296,3298,3299,3301,3302,3303,3305,3306],{"type":1302,"url":3295},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":1291,"url":3297},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76217",{"type":1302,"url":1727},{"type":1302,"url":3300},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":1299,"url":1339},{"type":1302,"url":1732},{"type":1302,"url":3304},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-pathspec-from-file",{"type":1299,"url":1408},{"type":1291,"url":3307},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",[1345,1346,1347],{"id":175,"slug":3310,"dossier":47,"summary":3311,"aliases":3312,"sourceIds":3315,"published":3316,"modified":3317,"checkedAt":7,"severity":3318,"references":3323,"versionKeys":3340,"packageCount":32,"repositoryCount":103},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[3313,3314],"CVE-2026-76222","PYSEC-2026-3784",[175,3314],"2026-08-07T15:45:39Z","2026-09-08T21:00:05.149418166Z",[3319,3321],{"type":1287,"score":3320},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",{"type":1328,"score":3322},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:H\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3324,3326,3328,3330,3332,3334,3335,3336,3338],{"type":1334,"url":3325},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":1291,"url":3327},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76222",{"type":1302,"url":3329},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":1302,"url":3331},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":1302,"url":3333},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":1299,"url":1339},{"type":1302,"url":1732},{"type":1302,"url":3337},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3784.yaml",{"type":1291,"url":3339},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-gitmodules-submodule-name",[1345,1346,1347],{"id":176,"slug":3342,"dossier":47,"summary":3343,"aliases":3344,"sourceIds":3347,"published":3348,"modified":3349,"checkedAt":7,"severity":3350,"references":3354,"versionKeys":3370,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[3345,3346],"CVE-2024-11394","PYSEC-2024-229",[176,3346],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[3351,3353],{"type":1287,"score":3352},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1287,"score":2940},[3355,3357,3359,3361,3362,3364,3366,3368],{"type":1291,"url":3356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1302,"url":3358},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1302,"url":3360},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1299,"url":1366},{"type":1302,"url":3363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1302,"url":3365},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1291,"url":3367},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1291,"url":3369},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1372],{"id":177,"slug":3372,"dossier":47,"summary":3373,"aliases":3374,"sourceIds":3377,"published":3378,"modified":3379,"checkedAt":7,"severity":3380,"references":3382,"versionKeys":3392,"packageCount":32,"repositoryCount":1709},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[3375,3376],"CVE-2025-67726","PYSEC-2025-267",[177,3376],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[3381],{"type":1287,"score":1525},[3383,3385,3387,3388,3390,3391],{"type":1291,"url":3384},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":1291,"url":3386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":1296,"url":2811},{"type":1302,"url":3389},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":1299,"url":1634},{"type":1291,"url":2816},[1642,1643,1644],{"id":178,"slug":3394,"dossier":90,"summary":3395,"aliases":3396,"sourceIds":3400,"published":3401,"modified":3402,"checkedAt":7,"severity":3403,"references":3405,"versionKeys":3419,"packageCount":32,"repositoryCount":1682},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[3397,3398,3399],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[178,3399],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[3404],{"type":1287,"score":1525},[3406,3408,3410,3412,3414,3415,3416,3417],{"type":1302,"url":3407},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1291,"url":3409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1302,"url":3411},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1302,"url":3413},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1299,"url":1669},{"type":1302,"url":2033},{"type":1299,"url":2035},{"type":1291,"url":3418},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":179,"slug":3421,"dossier":47,"summary":3422,"aliases":3423,"sourceIds":3426,"published":3427,"modified":3428,"checkedAt":7,"severity":3429,"references":3431,"versionKeys":3444,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[3424,3425],"CVE-2025-3264","PYSEC-2026-1985",[179,3425],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[3430],{"type":1287,"score":1750},[3432,3434,3436,3438,3439,3441,3442],{"type":1291,"url":3433},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1302,"url":3435},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1302,"url":3437},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1299,"url":1366},{"type":1302,"url":3440},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1299,"url":1510},{"type":1291,"url":3443},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1372],{"id":180,"slug":3446,"dossier":47,"summary":3447,"aliases":3448,"sourceIds":3451,"published":3452,"modified":3453,"checkedAt":7,"severity":3454,"references":3458,"versionKeys":3468,"packageCount":32,"repositoryCount":103},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[3449,3450],"CVE-2026-76221","PYSEC-2026-3783",[180,3450],"2026-08-07T15:46:35Z","2026-09-10T03:51:14.296736368Z",[3455,3456],{"type":1287,"score":1392},{"type":1328,"score":3457},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3459,3461,3462,3464,3465,3466],{"type":1334,"url":3460},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":1302,"url":1727},{"type":1302,"url":3463},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":1299,"url":1339},{"type":1302,"url":1732},{"type":1291,"url":3467},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-option-name",[1345,1346,1347],{"id":181,"slug":3470,"dossier":47,"summary":3471,"aliases":3472,"sourceIds":3475,"published":3476,"modified":3477,"checkedAt":7,"severity":3478,"references":3483,"versionKeys":3496,"packageCount":32,"repositoryCount":32},"ghsa-jw8x-6495-233v-cb32b711","scikit-learn sensitive data leakage vulnerability",[3473,3474],"CVE-2024-5206","PYSEC-2024-110",[181,3474],"2024-06-06T19:16:00Z","2026-09-10T03:50:15.628224747Z",[3479,3481],{"type":1287,"score":3480},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1287,"score":3482},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3484,3486,3488,3490,3492,3494],{"type":1291,"url":3485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5206",{"type":1296,"url":3487},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn\u002Fcommit\u002F70ca21f106b603b611da73012c9ade7cd8e438b8",{"type":1302,"url":3489},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fscikit-learn\u002FPYSEC-2024-110.yaml",{"type":1299,"url":3491},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn",{"type":1302,"url":3493},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F14bc0917-a85b-4106-a170-d09d5191517c",{"type":1291,"url":3495},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw8x-6495-233v",[3497],"pypi:scikit-learn@1.3.2",{"id":182,"slug":3499,"dossier":47,"summary":3500,"aliases":3501,"sourceIds":3504,"published":3505,"modified":3506,"checkedAt":7,"severity":3507,"references":3510,"versionKeys":3518,"packageCount":32,"repositoryCount":373},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[3502,3503],"CVE-2026-44432","PYSEC-2026-142",[182,3503],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[3508,3509],{"type":1287,"score":1525},{"type":1328,"score":1423},[3511,3513,3515,3517],{"type":1291,"url":3512},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1291,"url":3514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1302,"url":3516},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1299,"url":1432},[3519],"pypi:urllib3@2.6.3",{"id":183,"slug":3521,"dossier":47,"summary":3522,"aliases":3523,"sourceIds":3526,"published":3527,"modified":3528,"checkedAt":7,"severity":3529,"references":3531,"versionKeys":3540,"packageCount":32,"repositoryCount":66},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[3524,3525],"CVE-2026-49855","PYSEC-2026-3389",[183,3525],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[3530],{"type":1287,"score":1525},[3532,3534,3535,3536,3538],{"type":1302,"url":3533},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":1299,"url":1634},{"type":1299,"url":1636},{"type":1291,"url":3537},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":1291,"url":3539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[1642,1643,1644,1645,1646],{"id":184,"slug":3542,"dossier":47,"summary":3543,"aliases":3544,"sourceIds":3547,"published":3548,"modified":3549,"checkedAt":7,"severity":3550,"references":3552,"versionKeys":3565,"packageCount":32,"repositoryCount":42},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[3545,3546],"CVE-2026-82397","PYSEC-2026-3928",[184,3546],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[3551],{"type":1287,"score":1525},[3553,3555,3557,3558,3560,3561,3562,3563],{"type":1302,"url":3554},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":1291,"url":3556},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":1302,"url":2431},{"type":1302,"url":3559},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":1299,"url":1634},{"type":1302,"url":2438},{"type":1299,"url":1636},{"type":1291,"url":3564},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[1642,1643,1644,1645,1646,2440],{"id":185,"slug":3567,"dossier":47,"summary":3568,"aliases":3569,"sourceIds":3571,"published":3572,"modified":3573,"checkedAt":7,"severity":3574,"references":3576,"versionKeys":3582,"packageCount":32,"repositoryCount":103},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[3570],"CVE-2026-67326",[185],"2026-05-08T23:19:02Z","2026-09-10T03:51:06.521467170Z",[3575],{"type":1287,"score":1578},[3577,3579,3581],{"type":1302,"url":3578},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":1291,"url":3580},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":1299,"url":1339},[1345,1346,1347],{"id":186,"slug":3584,"dossier":47,"summary":3585,"aliases":3586,"sourceIds":3589,"published":3590,"modified":3591,"checkedAt":7,"severity":3592,"references":3597,"versionKeys":3609,"packageCount":32,"repositoryCount":103},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[3587,3588],"CVE-2026-73621","PYSEC-2026-3950",[186,3588],"2026-08-03T20:23:17Z","2026-09-10T13:10:55.177009469Z",[3593,3595],{"type":1287,"score":3594},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":1328,"score":3596},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3598,3600,3602,3604,3605,3607],{"type":1334,"url":3599},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":1302,"url":3601},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":1302,"url":3603},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":1299,"url":1339},{"type":1302,"url":3606},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",{"type":1291,"url":3608},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-truncation-via-commit-count",[1345,1346,1347],{"id":187,"slug":3611,"dossier":47,"summary":3612,"aliases":3613,"sourceIds":3617,"published":3618,"modified":3619,"checkedAt":7,"severity":3620,"references":3623,"versionKeys":3636,"packageCount":32,"repositoryCount":103},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[3614,3615,3616],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[187,3616],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[3621,3622],{"type":1287,"score":1498},{"type":1287,"score":1525},[3624,3626,3628,3630,3632,3634,3635],{"type":1334,"url":3625},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1291,"url":3627},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1296,"url":3629},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1296,"url":3631},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1302,"url":3633},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1299,"url":1669},{"type":1291,"url":2033},[1678,1679,1680,1681],{"id":188,"slug":3638,"dossier":47,"summary":3639,"aliases":3640,"sourceIds":3643,"published":3427,"modified":3644,"checkedAt":7,"severity":3645,"references":3648,"versionKeys":3661,"packageCount":32,"repositoryCount":373},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[3641,3642],"CVE-2025-3777","PYSEC-2026-1986",[188,3642],"2026-09-10T03:50:26.198077196Z",[3646],{"type":1287,"score":3647},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3649,3651,3653,3654,3656,3658,3659],{"type":1291,"url":3650},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1302,"url":3652},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1299,"url":1366},{"type":1302,"url":3655},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1302,"url":3657},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1299,"url":1510},{"type":1291,"url":3660},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1372,1373,1374],{"id":189,"slug":3663,"dossier":90,"summary":3664,"aliases":3665,"sourceIds":3669,"published":3670,"modified":3671,"checkedAt":7,"severity":3672,"references":3674,"versionKeys":3685,"packageCount":32,"repositoryCount":1682},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[3666,3667,3668],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[189,3668],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[3673],{"type":1287,"score":1525},[3675,3677,3679,3681,3683,3684],{"type":1334,"url":3676},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1291,"url":3678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1296,"url":3680},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1302,"url":3682},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1299,"url":1669},{"type":1291,"url":1671},[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":190,"slug":3687,"dossier":47,"summary":3688,"aliases":3689,"sourceIds":3692,"published":3693,"modified":3694,"checkedAt":7,"severity":3695,"references":3697,"versionKeys":3709,"packageCount":32,"repositoryCount":1709},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3690,3691],"CVE-2025-50181","PYSEC-2026-1999",[190,3691],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[3696],{"type":1287,"score":1694},[3698,3700,3702,3704,3705,3706,3707],{"type":1302,"url":3699},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1291,"url":3701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1296,"url":3703},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1299,"url":1432},{"type":1302,"url":1704},{"type":1299,"url":1434},{"type":1291,"url":3708},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1438,1439,1440,1441],{"id":191,"slug":3711,"dossier":47,"summary":3712,"aliases":3713,"sourceIds":3716,"published":3717,"modified":3718,"checkedAt":7,"severity":3719,"references":3723,"versionKeys":3734,"packageCount":32,"repositoryCount":1709},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[3714,3715],"CVE-2025-67724","PYSEC-2025-265",[191,3715],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[3720,3721],{"type":1287,"score":2305},{"type":1287,"score":3722},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3724,3726,3728,3730,3732,3733],{"type":1291,"url":3725},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":1291,"url":3727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":1296,"url":3729},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":1302,"url":3731},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":1299,"url":1634},{"type":1291,"url":2816},[1642,1643,1644],{"id":192,"slug":3736,"dossier":47,"summary":3737,"aliases":3738,"sourceIds":3740,"published":3741,"modified":3742,"checkedAt":7,"severity":3743,"references":3746,"versionKeys":3750,"packageCount":32,"repositoryCount":66},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[3739],"CVE-2026-91992",[192],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[3744],{"type":1287,"score":3745},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3747,3749],{"type":1302,"url":3748},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":1299,"url":1634},[1642,1643,1644,1645,1646],{"id":193,"slug":3752,"dossier":47,"summary":3753,"aliases":3754,"sourceIds":3758,"published":3759,"modified":3760,"checkedAt":7,"severity":3761,"references":3764,"versionKeys":3776,"packageCount":32,"repositoryCount":1443},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[3755,3756,3757],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[193,3757],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[3762,3763],{"type":1328,"score":2274},{"type":1287,"score":2117},[3765,3766,3768,3770,3772,3774,3775],{"type":1302,"url":2833},{"type":1296,"url":3767},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1291,"url":3769},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1296,"url":3771},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1296,"url":3773},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1299,"url":1669},{"type":1291,"url":1983},[1673,1674,1675,1676,1677,1678,1679,1680],{"id":194,"slug":3778,"dossier":47,"summary":3779,"aliases":3780,"sourceIds":3783,"published":3427,"modified":3784,"checkedAt":7,"severity":3785,"references":3787,"versionKeys":3798,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[3781,3782],"CVE-2025-3263","PYSEC-2026-1987",[194,3782],"2026-07-07T17:56:57.889099913Z",[3786],{"type":1287,"score":1750},[3788,3790,3791,3792,3793,3795,3796],{"type":1291,"url":3789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1302,"url":3435},{"type":1302,"url":3437},{"type":1299,"url":1366},{"type":1302,"url":3794},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1299,"url":1510},{"type":1291,"url":3797},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1372],{"id":195,"slug":3800,"dossier":47,"summary":3801,"aliases":3802,"sourceIds":3805,"published":3806,"modified":3807,"checkedAt":7,"severity":3808,"references":3811,"versionKeys":3824,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[3803,3804],"CVE-2024-56326","PYSEC-2026-1475",[195,3804],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[3809,3810],{"type":1287,"score":2276},{"type":1328,"score":2883},[3812,3814,3816,3818,3819,3820,3821,3822],{"type":1302,"url":3813},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1291,"url":3815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1296,"url":3817},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1299,"url":2892},{"type":1302,"url":3210},{"type":1302,"url":2894},{"type":1299,"url":2898},{"type":1291,"url":3823},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2902],{"id":196,"slug":3826,"dossier":90,"summary":3827,"aliases":3828,"sourceIds":3831,"published":3832,"modified":3833,"checkedAt":7,"severity":3834,"references":3839,"versionKeys":3845,"packageCount":32,"repositoryCount":3163},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[3829,3830],"CVE-2026-44431","PYSEC-2026-141",[196,3830],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[3835,3837],{"type":1287,"score":3836},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1328,"score":3838},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3840,3842,3844],{"type":1291,"url":3841},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1291,"url":3843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1299,"url":1432},[1438,1439,1440,1441,1442,3519],{"id":197,"slug":3847,"dossier":47,"summary":3848,"aliases":3849,"sourceIds":3853,"published":3854,"modified":3855,"checkedAt":7,"severity":3856,"references":3860,"versionKeys":3878,"packageCount":32,"repositoryCount":343},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[3850,3851,3852],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[197],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[3857,3858],{"type":1287,"score":2972},{"type":1328,"score":3859},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3861,3863,3865,3867,3869,3871,3872,3874,3876],{"type":1291,"url":3862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1302,"url":3864},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1302,"url":3866},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1302,"url":3868},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1302,"url":3870},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1299,"url":1472},{"type":1302,"url":3873},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1302,"url":3875},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1302,"url":3877},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1484,1485,1486,2478,2479,3879,3880,3881,3882],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":198,"slug":3884,"dossier":47,"summary":3885,"aliases":3886,"sourceIds":3889,"published":3890,"modified":3891,"checkedAt":7,"severity":3892,"references":3896,"versionKeys":3909,"packageCount":32,"repositoryCount":66},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[3887,3888],"CVE-2026-31958","PYSEC-2026-140",[198,3888],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[3893,3894],{"type":1287,"score":1525},{"type":1328,"score":3895},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3897,3899,3901,3903,3905,3906,3907],{"type":1291,"url":3898},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":1291,"url":3900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":1302,"url":3902},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":1302,"url":3904},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":1299,"url":1634},{"type":1302,"url":2317},{"type":1302,"url":3908},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[1642,1643,1644,1645],{"id":199,"slug":3911,"dossier":47,"summary":3912,"aliases":3913,"sourceIds":3916,"published":3917,"modified":3918,"checkedAt":7,"severity":3919,"references":3922,"versionKeys":3937,"packageCount":32,"repositoryCount":343},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[3914,3915],"CVE-2026-22701","PYSEC-2026-1374",[199,3915],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[3920],{"type":1287,"score":3921},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3923,3925,3927,3929,3931,3933,3935],{"type":1302,"url":3924},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1291,"url":3926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1302,"url":3928},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1302,"url":3930},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1299,"url":3932},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1299,"url":3934},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1291,"url":3936},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[3938,3939,3940,3941],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":200,"slug":3943,"dossier":47,"summary":3944,"aliases":3945,"sourceIds":3948,"published":3949,"modified":3950,"checkedAt":7,"severity":3951,"references":3954,"versionKeys":3968,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[3946,3947],"CVE-2025-2099","PYSEC-2025-40",[200,3947],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[3952,3953],{"type":1287,"score":1750},{"type":1287,"score":1525},[3955,3957,3959,3961,3962,3964,3966],{"type":1291,"url":3956},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1302,"url":3958},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1296,"url":3960},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1299,"url":1366},{"type":1302,"url":3963},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1302,"url":3965},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1291,"url":3967},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1372],{"id":201,"slug":3970,"dossier":47,"summary":3343,"aliases":3971,"sourceIds":3974,"published":3975,"modified":3976,"checkedAt":7,"severity":3977,"references":3981,"versionKeys":3995,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[3972,3973],"CVE-2024-11392","PYSEC-2024-227",[201,3973],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[3978,3980],{"type":1287,"score":3979},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1287,"score":2940},[3982,3984,3985,3986,3987,3989,3991,3993],{"type":1291,"url":3983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1302,"url":3358},{"type":1302,"url":3360},{"type":1299,"url":1366},{"type":1302,"url":3988},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1302,"url":3990},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1291,"url":3992},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1291,"url":3994},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1372],{"id":202,"slug":3997,"dossier":47,"summary":3998,"aliases":3999,"sourceIds":4003,"published":4004,"modified":4005,"checkedAt":7,"severity":4006,"references":4009,"versionKeys":4023,"packageCount":32,"repositoryCount":1443},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[4000,4001,4002],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[202,4002],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[4007,4008],{"type":1287,"score":1460},{"type":1328,"score":1975},[4010,4012,4014,4016,4018,4019,4020,4021],{"type":1302,"url":4011},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1291,"url":4013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1302,"url":4015},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1302,"url":4017},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1299,"url":1669},{"type":1302,"url":1983},{"type":1299,"url":2035},{"type":1291,"url":4022},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1673,1674,1675,1676,1677,1678,1679,1680],{"id":203,"slug":4025,"dossier":47,"summary":4026,"aliases":4027,"sourceIds":4030,"published":4031,"modified":4032,"checkedAt":7,"severity":4033,"references":4036,"versionKeys":4046,"packageCount":32,"repositoryCount":103},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[4028,4029],"CVE-2026-73625","PYSEC-2026-3953",[203,4029],"2026-07-24T16:42:57Z","2026-09-10T13:10:47.448946391Z",[4034,4035],{"type":1287,"score":1392},{"type":1328,"score":3457},[4037,4039,4040,4042,4043,4044],{"type":1334,"url":4038},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":1302,"url":2148},{"type":1302,"url":4041},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":1299,"url":1339},{"type":1302,"url":2153},{"type":1291,"url":4045},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-kwarg-value-smuggling",[1345,1346,1347],{"id":204,"slug":4048,"dossier":47,"summary":4049,"aliases":4050,"sourceIds":4053,"published":4054,"modified":4055,"checkedAt":7,"severity":4056,"references":4058,"versionKeys":4073,"packageCount":32,"repositoryCount":34},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[4051,4052],"CVE-2025-6051","PYSEC-2026-1988",[204,4052],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[4057],{"type":1287,"score":1750},[4059,4061,4063,4065,4067,4068,4070,4071],{"type":1291,"url":4060},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1302,"url":4062},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1302,"url":4064},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1302,"url":4066},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1299,"url":1366},{"type":1302,"url":4069},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1299,"url":1510},{"type":1291,"url":4072},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1372,1373,1374,1375],{"id":205,"slug":4075,"dossier":47,"summary":4076,"aliases":4077,"sourceIds":4080,"published":4081,"modified":4082,"checkedAt":7,"severity":4083,"references":4086,"versionKeys":4099,"packageCount":32,"repositoryCount":343},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[4078,4079],"CVE-2026-25087","PYSEC-2026-113",[205,4079],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[4084],{"type":1287,"score":4085},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[4087,4089,4091,4093,4095,4097],{"type":1291,"url":4088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1296,"url":4090},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1299,"url":4092},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1302,"url":4094},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1291,"url":4096},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1291,"url":4098},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[4100,4101,4102,4103],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":206,"slug":4105,"dossier":47,"summary":4106,"aliases":4107,"sourceIds":4110,"published":4111,"modified":4112,"checkedAt":7,"severity":4113,"references":4115,"versionKeys":4123,"packageCount":32,"repositoryCount":103},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[4108,4109],"CVE-2026-42215","PYSEC-2026-2160",[206,4109],"2026-04-25T23:42:16Z","2026-09-10T03:51:03.167884784Z",[4114],{"type":1287,"score":1392},[4116,4118,4120,4121],{"type":1334,"url":4117},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":1291,"url":4119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":1299,"url":1339},{"type":1296,"url":4122},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[1345,1346,1347],{"id":207,"slug":4125,"dossier":47,"summary":4126,"aliases":4127,"sourceIds":4131,"published":2968,"modified":4132,"checkedAt":7,"severity":4133,"references":4136,"versionKeys":4154,"packageCount":32,"repositoryCount":1443},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[4128,4129,4130],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[207],"2026-09-10T03:49:48.419046410Z",[4134,4135],{"type":1287,"score":2972},{"type":1328,"score":3859},[4137,4139,4141,4143,4145,4147,4148,4150,4152],{"type":1291,"url":4138},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1302,"url":4140},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1302,"url":4142},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1302,"url":4144},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1302,"url":4146},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1299,"url":1472},{"type":1302,"url":4149},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1302,"url":4151},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1302,"url":4153},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[4155,4156,4157,1484,1485,1486,2478,2479,3879,3880,3881,3882],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":208,"slug":4159,"dossier":47,"summary":4160,"aliases":4161,"sourceIds":4164,"published":4165,"modified":4166,"checkedAt":7,"severity":4167,"references":4169,"versionKeys":4185,"packageCount":32,"repositoryCount":103},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[4162,4163],"CVE-2026-67322","PYSEC-2026-3842",[208,4163],"2026-07-21T22:06:09Z","2026-09-10T12:25:44.904800513Z",[4168],{"type":1287,"score":2491},[4170,4172,4174,4176,4177,4178,4180,4182,4183],{"type":1302,"url":4171},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":1291,"url":4173},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67322",{"type":1302,"url":4175},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":1302,"url":2615},{"type":1299,"url":1339},{"type":1302,"url":4179},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",{"type":1302,"url":4181},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-clone-from",{"type":1299,"url":1408},{"type":1291,"url":4184},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",[1345,1346,1347],{"id":209,"slug":4187,"dossier":47,"summary":4188,"aliases":4189,"sourceIds":4192,"published":4193,"modified":4194,"checkedAt":7,"severity":4195,"references":4197,"versionKeys":4205,"packageCount":32,"repositoryCount":103},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[4190,4191],"CVE-2026-44244","PYSEC-2026-2163",[209,4191],"2026-05-06T21:58:00Z","2026-09-10T03:50:47.691444343Z",[4196],{"type":1287,"score":2276},[4198,4200,4202,4203],{"type":1334,"url":4199},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":1291,"url":4201},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":1299,"url":1339},{"type":1296,"url":4204},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[1345,1346,1347],{"id":210,"slug":4207,"dossier":47,"summary":4208,"aliases":4209,"sourceIds":4213,"published":2968,"modified":4214,"checkedAt":7,"severity":4215,"references":4218,"versionKeys":4233,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[4210,4211,4212],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[210],"2026-06-10T17:41:15.774477397Z",[4216,4217],{"type":1287,"score":2972},{"type":1328,"score":2974},[4219,4221,4222,4223,4224,4226,4227,4229,4231],{"type":1291,"url":4220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1302,"url":2979},{"type":1302,"url":2981},{"type":1302,"url":2983},{"type":1302,"url":4225},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1299,"url":1472},{"type":1302,"url":4228},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1302,"url":4230},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1302,"url":4232},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1484,1485,1486,2478,2479,3879,3880],{"id":211,"slug":4235,"dossier":90,"summary":4236,"aliases":4237,"sourceIds":4241,"published":4242,"modified":4243,"checkedAt":7,"severity":4244,"references":4246,"versionKeys":4260,"packageCount":32,"repositoryCount":1682},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[4238,4239,4240],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[211,4240],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[4245],{"type":1328,"score":3895},[4247,4249,4251,4253,4255,4256,4257,4258],{"type":1302,"url":4248},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1291,"url":4250},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1302,"url":4252},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1302,"url":4254},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1299,"url":1669},{"type":1302,"url":2033},{"type":1299,"url":2035},{"type":1291,"url":4259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":212,"slug":4262,"dossier":47,"summary":4263,"aliases":4264,"sourceIds":4267,"published":4268,"modified":4269,"checkedAt":7,"severity":4270,"references":4277,"versionKeys":4303,"packageCount":32,"repositoryCount":373},"ghsa-vqwp-45wm-r9r5-eaa960a2","Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission",[4265,4266],"CVE-2026-10804","PYSEC-2026-212",[212,4266],"2026-06-04T12:16:24.620Z","2026-07-23T15:00:23.893493649Z",[4271,4273,4275],{"type":1287,"score":4272},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":1328,"score":4274},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1287,"score":4276},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4278,4280,4282,4284,4286,4288,4290,4291,4293,4295,4297,4299,4301],{"type":1291,"url":4279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10804",{"type":1296,"url":4281},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fissues\u002F14622",{"type":1296,"url":4283},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F14635",{"type":1302,"url":4285},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F15397",{"type":1302,"url":4287},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002Ffec0f584dae9261abed16cad35b32922104bb933",{"type":1302,"url":4289},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstreamlit\u002FPYSEC-2026-212.yaml",{"type":1299,"url":2410},{"type":1291,"url":4292},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10804",{"type":1291,"url":4294},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831508",{"type":1291,"url":4296},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253",{"type":1465,"url":4298},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253\u002Fcti",{"type":1302,"url":4300},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002F",{"type":1291,"url":4302},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqwp-45wm-r9r5",[2414,2415,2416],{"id":213,"slug":4305,"dossier":47,"summary":4306,"aliases":4307,"sourceIds":4310,"published":4311,"modified":4312,"checkedAt":7,"severity":4313,"references":4316,"versionKeys":4333,"packageCount":32,"repositoryCount":343},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[4308,4309],"CVE-2025-68146","PYSEC-2026-1375",[213,4309],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[4314],{"type":1287,"score":4315},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4317,4319,4321,4322,4324,4326,4328,4329,4331],{"type":1302,"url":4318},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1302,"url":4320},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1299,"url":3932},{"type":1302,"url":4323},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1302,"url":4325},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1302,"url":4327},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1299,"url":3934},{"type":1291,"url":4330},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1291,"url":4332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[3938,3939,3940,3941],{"id":214,"slug":4335,"dossier":47,"summary":4336,"aliases":4337,"sourceIds":4341,"published":4342,"modified":4343,"checkedAt":7,"severity":4344,"references":4347,"versionKeys":4385,"packageCount":32,"repositoryCount":1443},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[4338,4339,4340],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[214,4340],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[4345,4346],{"type":1287,"score":1525},{"type":1328,"score":3895},[4348,4350,4352,4354,4356,4357,4359,4361,4363,4365,4367,4369,4370,4372,4374,4376,4377,4379,4381,4383],{"type":1302,"url":4349},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1291,"url":4351},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1302,"url":4353},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1302,"url":4355},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1299,"url":1669},{"type":1302,"url":4358},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1302,"url":4360},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1302,"url":4362},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1291,"url":4364},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1291,"url":4366},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1291,"url":4368},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1291,"url":2856},{"type":1291,"url":4371},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1291,"url":4373},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1291,"url":4375},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1291,"url":2858},{"type":1291,"url":4378},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1291,"url":4380},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1291,"url":4382},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1291,"url":4384},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1673,1674,1675,1676,1677,1678,1679,1680],{"id":215,"slug":4387,"dossier":47,"summary":4388,"aliases":4389,"sourceIds":4393,"published":4394,"modified":4395,"checkedAt":7,"severity":4396,"references":4399,"versionKeys":4408,"packageCount":32,"repositoryCount":1443},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[4390,4391,4392],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[215,4392],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[4397,4398],{"type":1287,"score":1460},{"type":1328,"score":1975},[4400,4402,4404,4406,4407],{"type":1291,"url":4401},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1291,"url":4403},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1302,"url":4405},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1299,"url":1669},{"type":1291,"url":1983},[1673,1674,1675,1676,1677,1678,1679,1680],{"id":216,"slug":4410,"dossier":47,"summary":3343,"aliases":4411,"sourceIds":4414,"published":3348,"modified":4415,"checkedAt":7,"severity":4416,"references":4419,"versionKeys":4433,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[4412,4413],"CVE-2024-11393","PYSEC-2024-228",[216,4413],"2026-09-10T03:50:55.987633957Z",[4417,4418],{"type":1287,"score":3352},{"type":1287,"score":2940},[4420,4422,4423,4424,4425,4427,4429,4431],{"type":1291,"url":4421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1302,"url":3358},{"type":1302,"url":3360},{"type":1299,"url":1366},{"type":1302,"url":4426},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1302,"url":4428},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1291,"url":4430},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1291,"url":4432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1372],{"id":217,"slug":4435,"dossier":47,"summary":4436,"aliases":4437,"sourceIds":4440,"published":4441,"modified":4442,"checkedAt":7,"severity":4443,"references":4445,"versionKeys":4460,"packageCount":32,"repositoryCount":103},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[4438,4439],"CVE-2026-76220","PYSEC-2026-3843",[217,4439],"2026-08-07T15:49:07Z","2026-09-10T12:26:01.792035310Z",[4444],{"type":1287,"score":1392},[4446,4448,4450,4451,4453,4454,4455,4457,4458],{"type":1302,"url":4447},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":1291,"url":4449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76220",{"type":1302,"url":1727},{"type":1302,"url":4452},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":1299,"url":1339},{"type":1302,"url":1732},{"type":1302,"url":4456},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-execution-via-split-single-char-options",{"type":1299,"url":1408},{"type":1291,"url":4459},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",[1345,1346,1347],{"id":218,"slug":4462,"dossier":47,"summary":4463,"aliases":4464,"sourceIds":4465,"published":4466,"modified":4467,"checkedAt":7,"severity":4468,"references":4471,"versionKeys":4483,"packageCount":32,"repositoryCount":373},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[],[218],"2026-09-01T20:17:23Z","2026-09-10T03:50:54.582059531Z",[4469],{"type":1328,"score":4470},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4472,4474,4475,4477,4479,4481,4482],{"type":1302,"url":4473},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":1302,"url":2431},{"type":1302,"url":4476},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":1302,"url":4478},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":1302,"url":4480},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":1299,"url":1634},{"type":1302,"url":2438},[1646,2440],{"id":219,"slug":4485,"dossier":47,"summary":4486,"aliases":4487,"sourceIds":4490,"published":4491,"modified":4492,"checkedAt":7,"severity":4493,"references":4497,"versionKeys":4506,"packageCount":32,"repositoryCount":103},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[4488,4489],"CVE-2026-42284","PYSEC-2026-2161",[219,4489],"2026-04-25T23:41:49Z","2026-09-10T03:51:03.787491179Z",[4494,4496],{"type":1287,"score":4495},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1287,"score":1326},[4498,4500,4502,4503,4504],{"type":1334,"url":4499},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":1291,"url":4501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":1299,"url":1339},{"type":1296,"url":4122},{"type":1302,"url":4505},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[1345,1346,1347],{"id":220,"slug":4508,"dossier":47,"summary":4509,"aliases":4510,"sourceIds":4514,"published":4515,"modified":4516,"checkedAt":7,"severity":4517,"references":4522,"versionKeys":4538,"packageCount":32,"repositoryCount":392},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[4511,4512,4513],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[220],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[4518,4520],{"type":1287,"score":4519},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1328,"score":4521},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4523,4525,4527,4529,4531,4532,4534,4536],{"type":1291,"url":4524},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1302,"url":4526},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1302,"url":4528},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1302,"url":4530},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1299,"url":1472},{"type":1302,"url":4533},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1302,"url":4535},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1302,"url":4537},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1484,1485],{"id":221,"slug":4540,"dossier":47,"summary":4541,"aliases":4542,"sourceIds":4546,"published":4547,"modified":4548,"checkedAt":7,"severity":4549,"references":4551,"versionKeys":4565,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[4543,4544,4545],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[221,4545],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[4550],{"type":1287,"score":2217},[4552,4554,4556,4558,4560,4562,4563],{"type":1291,"url":4553},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1291,"url":4555},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1302,"url":4557},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1296,"url":4559},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1302,"url":4561},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1299,"url":1669},{"type":1302,"url":4564},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1676],{"id":222,"slug":4567,"dossier":90,"summary":4568,"aliases":4569,"sourceIds":4573,"published":4574,"modified":4575,"checkedAt":7,"severity":4576,"references":4579,"versionKeys":4590,"packageCount":32,"repositoryCount":1682},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[4570,4571,4572],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[222,4572],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[4577],{"type":1287,"score":4578},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4580,4582,4584,4586,4588,4589],{"type":1334,"url":4581},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1291,"url":4583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1296,"url":4585},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1296,"url":4587},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1299,"url":1669},{"type":1291,"url":2033},[1673,1674,1675,1676,1677,1678,1679,1680,1681],{"id":223,"slug":4592,"dossier":47,"summary":4593,"aliases":4594,"sourceIds":4597,"published":4598,"modified":4599,"checkedAt":7,"severity":4600,"references":4603,"versionKeys":4616,"packageCount":32,"repositoryCount":1985},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[4595,4596],"CVE-2026-9856","PYSEC-2026-3929",[223,4596],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[4601],{"type":1287,"score":4602},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[4604,4606,4608,4610,4611,4613,4614],{"type":1291,"url":4605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":1302,"url":4607},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":1302,"url":4609},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":1299,"url":1366},{"type":1302,"url":4612},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":1299,"url":1510},{"type":1291,"url":4615},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[1372,1373,1374,1375,1376,1377,1378,1379,1380,4617],"pypi:transformers@5.8.0",{"id":224,"slug":4619,"dossier":47,"summary":83,"aliases":4620,"sourceIds":4623,"published":4624,"modified":4625,"checkedAt":7,"severity":4626,"references":4629,"versionKeys":4638,"packageCount":32,"repositoryCount":32},"pysec-2025-112-653e8a7c",[4621,4622],"CVE-2025-64429","GHSA-vmp8-hg63-v2hp",[224],"2025-11-12T22:15:49.813Z","2026-05-20T09:18:59.601738Z",[4627],{"type":1287,"score":4628},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4630,4632,4634,4636],{"type":1302,"url":4631},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fblob\u002F029a5b87ff5b1cd22f7f9717d48cd8830d00807c\u002Fsrc\u002Fcommon\u002Frandom_engine.cpp#L20",{"type":1291,"url":4633},"https:\u002F\u002Fduckdb.org\u002F2025\u002F09\u002F16\u002Fannouncing-duckdb-140.html",{"type":1291,"url":4635},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fsecurity\u002Fadvisories\u002FGHSA-vmp8-hg63-v2hp",{"type":1296,"url":4637},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fpull\u002F17275",[4639],"pypi:duckdb@1.4.1",{"id":225,"slug":4641,"dossier":47,"summary":83,"aliases":4642,"sourceIds":4645,"published":4646,"modified":4647,"checkedAt":7,"severity":4648,"references":4650,"versionKeys":4659,"packageCount":32,"repositoryCount":392},"pysec-2025-198-62b25ed4",[4643,4644],"BIT-pytorch-2025-46148","CVE-2025-46148",[225],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[4649],{"type":1287,"score":3836},[4651,4653,4655,4657],{"type":1291,"url":4652},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1291,"url":4654},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1465,"url":4656},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1296,"url":4658},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1484,1485],{"id":226,"slug":4661,"dossier":47,"summary":83,"aliases":4662,"sourceIds":4665,"published":4666,"modified":4667,"checkedAt":7,"severity":4668,"references":4670,"versionKeys":4676,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[4663,4664],"BIT-pytorch-2025-46149","CVE-2025-46149",[226],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[4669],{"type":1287,"score":3836},[4671,4672,4674],{"type":1291,"url":4652},{"type":1465,"url":4673},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1296,"url":4675},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1485],{"id":227,"slug":4678,"dossier":47,"summary":83,"aliases":4679,"sourceIds":4682,"published":4683,"modified":4684,"checkedAt":7,"severity":4685,"references":4687,"versionKeys":4695,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[4680,4681],"BIT-pytorch-2025-46150","CVE-2025-46150",[227],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[4686],{"type":1287,"score":3836},[4688,4689,4691,4693],{"type":1291,"url":4652},{"type":1465,"url":4690},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1465,"url":4692},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1296,"url":4694},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1485],{"id":228,"slug":4697,"dossier":47,"summary":83,"aliases":4698,"sourceIds":4701,"published":4702,"modified":4703,"checkedAt":7,"severity":4704,"references":4706,"versionKeys":4712,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[4699,4700],"BIT-pytorch-2025-46152","CVE-2025-46152",[228],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[4705],{"type":1287,"score":1498},[4707,4708,4710],{"type":1291,"url":4652},{"type":1465,"url":4709},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1296,"url":4711},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1485],{"id":229,"slug":4714,"dossier":47,"summary":83,"aliases":4715,"sourceIds":4718,"published":4719,"modified":4720,"checkedAt":7,"severity":4721,"references":4723,"versionKeys":4733,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[4716,4717],"BIT-pytorch-2025-46153","CVE-2025-46153",[229],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[4722],{"type":1287,"score":3836},[4724,4726,4727,4729,4731],{"type":1302,"url":4725},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1291,"url":4652},{"type":1291,"url":4728},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1465,"url":4730},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1296,"url":4732},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1485],{"id":230,"slug":4735,"dossier":47,"summary":83,"aliases":4736,"sourceIds":4739,"published":4740,"modified":4741,"checkedAt":7,"severity":4742,"references":4744,"versionKeys":4749,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[4737,4738],"BIT-pytorch-2025-55551","CVE-2025-55551",[230],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[4743],{"type":1287,"score":1525},[4745,4747],{"type":1291,"url":4746},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1465,"url":4748},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1484,1485,1486,2478,2479,3879],{"id":231,"slug":4751,"dossier":47,"summary":83,"aliases":4752,"sourceIds":4755,"published":4756,"modified":4757,"checkedAt":7,"severity":4758,"references":4760,"versionKeys":4764,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[4753,4754],"BIT-pytorch-2025-55552","CVE-2025-55552",[231],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[4759],{"type":1287,"score":1525},[4761,4762],{"type":1291,"url":4746},{"type":1465,"url":4763},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1484,1485,1486,2478,2479,3879],{"id":232,"slug":4766,"dossier":47,"summary":83,"aliases":4767,"sourceIds":4770,"published":4771,"modified":4772,"checkedAt":7,"severity":4773,"references":4775,"versionKeys":4781,"packageCount":32,"repositoryCount":373},"pysec-2025-205-fd5e58fd",[4768,4769],"BIT-pytorch-2025-55553","CVE-2025-55553",[232],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[4774],{"type":1287,"score":1525},[4776,4777,4779],{"type":1291,"url":4746},{"type":1465,"url":4778},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1296,"url":4780},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1484,1485,1486],{"id":233,"slug":4783,"dossier":47,"summary":83,"aliases":4784,"sourceIds":4787,"published":4788,"modified":4789,"checkedAt":7,"severity":4790,"references":4792,"versionKeys":4796,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[4785,4786],"BIT-pytorch-2025-55554","CVE-2025-55554",[233],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[4791],{"type":1287,"score":1498},[4793,4794],{"type":1291,"url":4746},{"type":1465,"url":4795},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1484,1485,1486,2478,2479,3879],{"id":234,"slug":4798,"dossier":47,"summary":83,"aliases":4799,"sourceIds":4802,"published":4803,"modified":4804,"checkedAt":7,"severity":4805,"references":4807,"versionKeys":4813,"packageCount":32,"repositoryCount":373},"pysec-2025-207-2abef3fc",[4800,4801],"BIT-pytorch-2025-55557","CVE-2025-55557",[234],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[4806],{"type":1287,"score":1525},[4808,4809,4811],{"type":1291,"url":4746},{"type":1465,"url":4810},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1296,"url":4812},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1484,1485,1486],{"id":235,"slug":4815,"dossier":47,"summary":83,"aliases":4816,"sourceIds":4819,"published":4820,"modified":4821,"checkedAt":7,"severity":4822,"references":4824,"versionKeys":4830,"packageCount":32,"repositoryCount":373},"pysec-2025-208-6e93fe9d",[4817,4818],"BIT-pytorch-2025-55558","CVE-2025-55558",[235],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[4823],{"type":1287,"score":1525},[4825,4826,4828],{"type":1291,"url":4746},{"type":1465,"url":4827},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1296,"url":4829},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1484,1485,1486],{"id":236,"slug":4832,"dossier":47,"summary":83,"aliases":4833,"sourceIds":4836,"published":4837,"modified":4838,"checkedAt":7,"severity":4839,"references":4841,"versionKeys":4847,"packageCount":32,"repositoryCount":373},"pysec-2025-209-e6f352b0",[4834,4835],"BIT-pytorch-2025-55560","CVE-2025-55560",[236],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[4840],{"type":1287,"score":1525},[4842,4843,4845],{"type":1291,"url":4746},{"type":1465,"url":4844},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1296,"url":4846},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1484,1485,1486],{"id":237,"slug":4849,"dossier":47,"summary":83,"aliases":4850,"sourceIds":4852,"published":4853,"modified":4854,"checkedAt":7,"severity":4855,"references":4857,"versionKeys":4860,"packageCount":32,"repositoryCount":4861},"pysec-2025-211-d8bd15de",[4851],"CVE-2025-14920",[237],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[4856],{"type":1287,"score":1359},[4858],{"type":1291,"url":4859},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1372,1373,1374,1375,1376],5,{"id":238,"slug":4863,"dossier":47,"summary":83,"aliases":4864,"sourceIds":4866,"published":4867,"modified":4868,"checkedAt":7,"severity":4869,"references":4871,"versionKeys":4874,"packageCount":32,"repositoryCount":4861},"pysec-2025-212-a011b97d",[4865],"CVE-2025-14921",[238],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[4870],{"type":1287,"score":1359},[4872],{"type":1291,"url":4873},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1372,1373,1374,1375,1376],{"id":239,"slug":4876,"dossier":47,"summary":83,"aliases":4877,"sourceIds":4879,"published":4880,"modified":4881,"checkedAt":7,"severity":4882,"references":4884,"versionKeys":4887,"packageCount":32,"repositoryCount":4861},"pysec-2025-213-9043dc9b",[4878],"CVE-2025-14924",[239],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[4883],{"type":1287,"score":1359},[4885],{"type":1291,"url":4886},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1372,1373,1374,1375,1376],{"id":240,"slug":4889,"dossier":47,"summary":83,"aliases":4890,"sourceIds":4892,"published":4893,"modified":4894,"checkedAt":7,"severity":4895,"references":4897,"versionKeys":4900,"packageCount":32,"repositoryCount":4861},"pysec-2025-214-eb241255",[4891],"CVE-2025-14926",[240],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[4896],{"type":1287,"score":1359},[4898],{"type":1291,"url":4899},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1372,1373,1374,1375,1376],{"id":241,"slug":4902,"dossier":47,"summary":83,"aliases":4903,"sourceIds":4905,"published":4906,"modified":4907,"checkedAt":7,"severity":4908,"references":4910,"versionKeys":4913,"packageCount":32,"repositoryCount":4861},"pysec-2025-215-6064f491",[4904],"CVE-2025-14927",[241],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[4909],{"type":1287,"score":1359},[4911],{"type":1291,"url":4912},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1372,1373,1374,1375,1376],{"id":242,"slug":4915,"dossier":47,"summary":83,"aliases":4916,"sourceIds":4918,"published":4919,"modified":4920,"checkedAt":7,"severity":4921,"references":4923,"versionKeys":4926,"packageCount":32,"repositoryCount":4861},"pysec-2025-216-5708ed01",[4917],"CVE-2025-14928",[242],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[4922],{"type":1287,"score":1359},[4924],{"type":1291,"url":4925},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1372,1373,1374,1375,1376],{"id":243,"slug":4928,"dossier":47,"summary":83,"aliases":4929,"sourceIds":4931,"published":4932,"modified":4933,"checkedAt":7,"severity":4934,"references":4936,"versionKeys":4939,"packageCount":32,"repositoryCount":42},"pysec-2025-217-2c1ad388",[4930],"CVE-2025-14929",[243],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[4935],{"type":1287,"score":1359},[4937],{"type":1291,"url":4938},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1372,1373,1374,1375,1376,1377,1378,1379,1380],{"id":244,"slug":4941,"dossier":47,"summary":83,"aliases":4942,"sourceIds":4944,"published":4945,"modified":4946,"checkedAt":7,"severity":4947,"references":4949,"versionKeys":4952,"packageCount":32,"repositoryCount":1709},"pysec-2025-218-39811fc3",[4943],"CVE-2025-14930",[244],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[4948],{"type":1287,"score":1359},[4950],{"type":1291,"url":4951},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1372,1373,1374,1375,1376,1377],{"id":245,"slug":4954,"dossier":47,"summary":83,"aliases":4955,"sourceIds":4958,"published":4959,"modified":4960,"checkedAt":7,"severity":4961,"references":4963,"versionKeys":4974,"packageCount":32,"repositoryCount":4975},"pysec-2026-139-96951ff6",[4956,4957],"BIT-pytorch-2026-4538","CVE-2026-4538",[245],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[4962],{"type":1287,"score":2276},[4964,4966,4968,4970,4972],{"type":1302,"url":4965},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1291,"url":4967},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1291,"url":4969},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1465,"url":4971},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1296,"url":4973},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[4155,1484,1485,1486,2478,2479,3879,3880,3881,3882],14,{"id":246,"slug":4977,"dossier":90,"summary":83,"aliases":4978,"sourceIds":4981,"published":4982,"modified":4983,"checkedAt":7,"severity":4984,"references":4987,"versionKeys":5002,"packageCount":32,"repositoryCount":1682},"pysec-2026-2132-627bf7c7",[4979,4980],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[246],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[4985],{"type":1287,"score":4986},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4988,4990,4992,4994,4996,4998,5000],{"type":1302,"url":4989},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1302,"url":4991},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1291,"url":4993},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1291,"url":4995},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1465,"url":4997},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1296,"url":4999},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1334,"url":5001},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5003,5004,5005,5006,5007,5008],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":247,"slug":5010,"dossier":47,"summary":83,"aliases":5011,"sourceIds":5016,"published":5017,"modified":5018,"checkedAt":7,"severity":5019,"references":5021,"versionKeys":5038,"packageCount":32,"repositoryCount":343},"pysec-2026-2286-8795b007",[5012,5013,5014,5015],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[247],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[5020],{"type":1287,"score":2940},[5022,5024,5026,5028,5030,5032,5034,5036],{"type":1302,"url":5023},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1302,"url":5025},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1291,"url":5027},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1291,"url":5029},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1291,"url":5031},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1465,"url":5033},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1465,"url":5035},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1296,"url":5037},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1484,1485,1486,2478,2479,3879,3880,3881,3882],1789534491185]