[{"data":1,"prerenderedAt":10914},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11299":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":401,"related":404},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-09-16T04:45:26.395Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-09-16T04:44:00.147Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},43,42,1,23,4,26,40,37,36,0,4116,4105,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":37,"topPackage":71},2457,50,7121,9,55,2423,34,795,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5348837209302325,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":105,"advisoryIds":106,"advisoryCount":399,"providers":400},"opencode:11299","opencode-11299",11299,"URBAN.KI SmartEnergie","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie","8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie\u002F-\u002Fcommit\u002F8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129","2026-09-15T13:09:00.895Z","2026-09-14T08:20:45.000Z",{"complete":90,"entryCount":91,"truncated":47},true,928,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","b999006073eed3c4ff84d359c9b073b0b3899f18","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-smartenergie\u002F-\u002Fblob\u002F8ed55e600cd8b3b1ba60a0aebd5cb7277dd2b129\u002Fuv.lock","5bc9c3742e46d283568bac153a2117227cbb749c54f13f479c74214dc47187f6",968814,"parsed",328,[102],"pypi",12,22,2,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398],"GHSA-23w6-3w8w-8484","GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g59-m95p-pgfq","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3936-cmfr-pm3m","GHSA-3crg-w4f6-42mx","GHSA-3gq4-3j92-5w49","GHSA-3gqm-fcw5-w839","GHSA-3hhw-38pf-pxj6","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-45hq-cxwh-f6vc","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4jhm-jv67-739f","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4vvm-4w3v-6mr8","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-55h5-xmcq-c37v","GHSA-568f-pv23-39p4","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5gh2-94qg-qppq","GHSA-5hgr-hg42-57jg","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5w7q-77mv-v69f","GHSA-5wp5-5229-5g6q","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6hm5-jgcp-p838","GHSA-6hwm-xvph-95vm","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6w46-j5rx-g56g","GHSA-6ww7-3frv-cqxh","GHSA-72r2-7mfr-5xr9","GHSA-752w-5fwx-jx9f","GHSA-763m-79hh-57f2","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7p94-766c-hgjp","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-8423-8fgw-73vq","GHSA-848c-c2cx-j7qx","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-887c-mr87-cxwp","GHSA-8mgp-746c-j5xp","GHSA-8mpw-7fpc-4gqj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-97qj-x29f-37w7","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9f4q-q82q-4359","GHSA-9h52-p55h-vw2f","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cgwc-pv48-fhj5","GHSA-cj93-chg6-vgv8","GHSA-cjqg-rq2h-2fvj","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cr42-rg2m-mq4q","GHSA-cv22-g7mw-8v73","GHSA-cw6x-m8jw-qmrh","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2v5-7jq9-h8cg","GHSA-f4hp-rmr7-r7v8","GHSA-f794-5jv7-7672","GHSA-f833-7jw8-xwrv","GHSA-f96h-pmfr-66vw","GHSA-fc8x-2rww-xw9m","GHSA-ff5c-cp5c-9wjf","GHSA-fg7f-2386-8897","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fj7x-q9j7-g6q6","GHSA-fp3f-mc75-235c","GHSA-fpwr-67px-3qhx","GHSA-fwg2-594c-jp42","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gphh-9q3h-jgpp","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hvfh-5mj3-5f3j","GHSA-hw26-mmpg-fqfg","GHSA-hxxf-235m-72v3","GHSA-j543-4vmf-qm7v","GHSA-j5xp-7m2f-49jv","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jmmv-h3mp-59v8","GHSA-jp53-mhqp-8xcg","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-m2v9-299j-rv96","GHSA-m42h-3232-vpv3","GHSA-m449-cwjh-6pw7","GHSA-m4rf-3fr8-xwx3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m88r-rg27-5xfg","GHSA-m9gh-vj53-gvh9","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mpf4-983q-p7j4","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p3m8-78j2-g5p3","GHSA-p4gq-832x-fm9v","GHSA-p4rw-rvv2-7xwr","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q29v-xc37-wh5m","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qpxp-75px-xjcp","GHSA-qq3j-4f4f-9583","GHSA-qvv7-cg9c-w4x3","GHSA-qx2g-xrx7-vfh8","GHSA-qxrp-vhvm-j765","GHSA-r3xg-rg9j-67fv","GHSA-r6gq-whwq-mvg9","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rhp5-r9x4-f5g2","GHSA-rrmf-rvhw-rf47","GHSA-rrv8-h7p8-rx55","GHSA-v492-6xx2-p57g","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vp2x-qp44-57v7","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-w2fm-2cpv-w7v5","GHSA-w3fx-mc44-mf6j","GHSA-w3v8-gmh9-3wv7","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-ww6m-cw3f-q94g","GHSA-wwv5-g3v4-889x","GHSA-x284-j5p8-9c5p","GHSA-x3gm-94wq-g975","GHSA-x5ph-mj9p-rfr8","GHSA-x746-7m8f-x49c","GHSA-x7hp-r3qg-r3cj","GHSA-x8wg-4xgc-vr54","GHSA-x99w-6fgc-pmfw","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","GHSA-xrqw-3rrv-vx5w","GHSA-xvp8-3mhv-424c","PYSEC-2025-183","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2120","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-3954","PYSEC-2026-3955","PYSEC-2026-598","PYSEC-2026-99",292,[],{"files":402,"occurrenceCount":100},[403],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":405,"vulnerabilities":3302},[406,419,429,439,452,461,470,479,488,498,507,516,525,535,545,556,568,578,588,597,607,616,626,636,645,655,664,673,682,691,700,709,719,728,737,746,756,765,774,783,792,801,810,819,828,838,847,856,865,874,884,893,902,912,921,930,939,948,957,966,975,984,993,1002,1011,1020,1029,1038,1048,1057,1066,1075,1084,1093,1102,1111,1120,1129,1138,1147,1156,1165,1174,1183,1192,1201,1209,1218,1227,1236,1245,1253,1261,1270,1279,1288,1297,1306,1315,1324,1333,1342,1351,1362,1372,1381,1389,1399,1408,1417,1425,1434,1443,1452,1461,1470,1479,1488,1497,1506,1515,1524,1533,1542,1551,1560,1569,1578,1587,1595,1603,1612,1621,1629,1638,1647,1656,1664,1673,1681,1690,1699,1708,1716,1724,1732,1740,1748,1756,1765,1774,1782,1791,1800,1809,1817,1826,1835,1843,1852,1861,1870,1879,1889,1898,1907,1916,1924,1933,1942,1951,1960,1969,1978,1986,1995,2003,2012,2020,2029,2037,2046,2055,2063,2071,2079,2087,2096,2105,2113,2121,2129,2137,2145,2153,2161,2169,2177,2185,2193,2201,2209,2217,2225,2233,2241,2249,2257,2265,2273,2281,2289,2297,2305,2313,2321,2329,2337,2345,2353,2361,2369,2377,2385,2393,2401,2410,2418,2428,2437,2445,2455,2464,2473,2482,2491,2499,2508,2516,2525,2534,2543,2552,2560,2569,2577,2585,2594,2603,2612,2621,2630,2639,2647,2656,2665,2674,2682,2690,2698,2706,2715,2724,2732,2741,2749,2758,2767,2776,2785,2794,2803,2812,2821,2830,2840,2848,2857,2866,2875,2884,2893,2902,2911,2920,2928,2937,2946,2954,2963,2972,2981,2990,2999,3008,3017,3026,3035,3043,3052,3061,3070,3079,3087,3096,3105,3113,3122,3130,3138,3147,3156,3165,3173,3182,3190,3198,3206,3215,3224,3232,3241,3249,3258,3267,3275,3284,3293],{"id":407,"slug":408,"identity":409,"label":410,"aiRelevant":90,"provider":411,"advisoryCount":35,"licenseExpressions":414,"versions":416,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":418},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":412,"label":413},"hugging-face","Hugging Face",[415],"Apache-2.0",[417],"4.57.1",[56],{"id":420,"slug":421,"identity":422,"label":423,"aiRelevant":90,"provider":83,"advisoryCount":33,"licenseExpressions":424,"versions":426,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":428},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[425],"BSD-3-Clause",[427],"2.9.0",[56],{"id":430,"slug":431,"identity":432,"label":433,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":434,"versions":436,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":438},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[435],"non-standard",[437],"1.11.0",[56],{"id":440,"slug":441,"identity":442,"label":443,"aiRelevant":90,"provider":444,"advisoryCount":39,"licenseExpressions":447,"versions":449,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":451},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":445,"label":446},"anthropic","Anthropic",[448],"MIT",[450],"0.72.0",[56],{"id":72,"slug":73,"identity":453,"label":74,"aiRelevant":90,"provider":454,"advisoryCount":39,"licenseExpressions":457,"versions":458,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":460},"pypi:openai",{"id":455,"label":456},"openai","OpenAI",[415],[459],"1.109.1",[56],{"id":462,"slug":463,"identity":464,"label":465,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":466,"versions":467,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":469},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[435],[468],"0.22.1",[56],{"id":471,"slug":472,"identity":473,"label":474,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":475,"versions":476,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":478},"package:pypi:llama-index-core","llama-index-core-6f097879","pypi:llama-index-core","LlamaIndex · Core",[448],[477],"0.14.6",[56],{"id":480,"slug":481,"identity":482,"label":483,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":484,"versions":485,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":487},"package:pypi:llama-index-llms-openai","llama-index-llms-openai-9155387e","pypi:llama-index-llms-openai","LlamaIndex · Llms OpenAI",[448],[486],"0.6.6",[56],{"id":489,"slug":490,"identity":491,"label":492,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":493,"versions":495,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":497},"package:pypi:llama-index-readers-web","llama-index-readers-web-ef09483c","pypi:llama-index-readers-web","LlamaIndex · Readers Web",[494],"GPL-3.0-or-later",[496],"0.5.5",[56],{"id":499,"slug":500,"identity":501,"label":502,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":503,"versions":504,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":506},"package:pypi:llama-index-vector-stores-lancedb","llama-index-vector-stores-lancedb-d8d9098c","pypi:llama-index-vector-stores-lancedb","LlamaIndex · Vector Stores Lancedb",[448],[505],"0.4.1",[56],{"id":508,"slug":509,"identity":510,"label":511,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":512,"versions":513,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":515},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[415],[514],"4.11.0.86",[56],{"id":517,"slug":518,"identity":519,"label":520,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":521,"versions":522,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":524},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[435],[523],"0.12.0",[56],{"id":526,"slug":527,"identity":528,"label":529,"aiRelevant":47,"provider":83,"advisoryCount":530,"licenseExpressions":531,"versions":532,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":534},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",47,[415],[533],"3.9.2",[56],{"id":536,"slug":537,"identity":538,"label":539,"aiRelevant":47,"provider":83,"advisoryCount":540,"licenseExpressions":541,"versions":542,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":544},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",41,[425,435],[543],"6.1.3",[56],{"id":546,"slug":547,"identity":548,"label":549,"aiRelevant":47,"provider":83,"advisoryCount":550,"licenseExpressions":551,"versions":553,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":555},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[415,552],"Apache-2.0 AND MIT",[554],"3.13.2",[56],{"id":557,"slug":558,"identity":559,"label":560,"aiRelevant":47,"provider":83,"advisoryCount":561,"licenseExpressions":562,"versions":565,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":567},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[563,564],"HPND","MIT-CMU",[566],"11.3.0",[56],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":47,"provider":83,"advisoryCount":573,"licenseExpressions":574,"versions":575,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":577},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",13,[415],[576],"6.5.2",[56],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":47,"provider":83,"advisoryCount":583,"licenseExpressions":584,"versions":585,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":587},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[415],[586],"0.0.20",[56],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":47,"provider":83,"advisoryCount":583,"licenseExpressions":593,"versions":594,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":596},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[425],[595],"0.48.0",[56],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":47,"provider":83,"advisoryCount":602,"licenseExpressions":603,"versions":604,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":606},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",7,[448],[605],"2.10.1",[56],{"id":608,"slug":609,"identity":610,"label":611,"aiRelevant":47,"provider":83,"advisoryCount":602,"licenseExpressions":612,"versions":613,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":615},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[448],[614],"2.5.0",[56],{"id":617,"slug":618,"identity":619,"label":620,"aiRelevant":47,"provider":83,"advisoryCount":621,"licenseExpressions":622,"versions":623,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":625},"package:pypi:docling","docling-61c4e452","pypi:docling","docling",6,[448],[624],"2.58.0",[56],{"id":627,"slug":628,"identity":629,"label":630,"aiRelevant":47,"provider":83,"advisoryCount":631,"licenseExpressions":632,"versions":633,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":635},"package:pypi:chainlit","chainlit-b11abd2e","pypi:chainlit","chainlit",5,[415],[634],"2.8.3",[56],{"id":637,"slug":638,"identity":639,"label":640,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":641,"versions":642,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":644},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[425,435],[643],"3.1.6",[56],{"id":646,"slug":647,"identity":648,"label":649,"aiRelevant":47,"provider":83,"advisoryCount":650,"licenseExpressions":651,"versions":652,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":654},"package:pypi:black","black-af583dd9","pypi:black","black",3,[448],[653],"25.9.0",[56],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":47,"provider":83,"advisoryCount":650,"licenseExpressions":660,"versions":661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":663},"package:pypi:lxml-html-clean","lxml-html-clean-a658348a","pypi:lxml-html-clean","lxml-html-clean",[425],[662],"0.4.3",[56],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":47,"provider":83,"advisoryCount":650,"licenseExpressions":669,"versions":670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":672},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[448],[671],"1.19.0",[56],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":47,"provider":83,"advisoryCount":650,"licenseExpressions":678,"versions":679,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":681},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[415],[680],"2.32.5",[56],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":47,"provider":83,"advisoryCount":650,"licenseExpressions":687,"versions":688,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":690},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[448],[689],"80.9.0",[56],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":696,"versions":697,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":699},"package:pypi:banks","banks-f10f5e94","pypi:banks","banks",[448],[698],"2.2.0",[56],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":705,"versions":706,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":708},"package:pypi:docling-core","docling-core-f56a60f5","pypi:docling-core","docling-core",[448],[707],"2.49.0",[56],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":714,"versions":716,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":718},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[448,715],"Unlicense",[717],"3.20.0",[56],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":724,"versions":725,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":727},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[425],[726],"6.33.0",[56],{"id":729,"slug":730,"identity":731,"label":732,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":733,"versions":734,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":736},"package:pypi:python-engineio","python-engineio-a8408602","pypi:python-engineio","python-engineio",[448],[735],"4.12.3",[56],{"id":738,"slug":739,"identity":740,"label":741,"aiRelevant":47,"provider":83,"advisoryCount":105,"licenseExpressions":742,"versions":743,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":745},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[448],[744],"2.8",[56],{"id":747,"slug":748,"identity":749,"label":750,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":751,"versions":753,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":755},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[752],"MPL-2.0",[754],"2025.10.5",[56],{"id":757,"slug":758,"identity":759,"label":760,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":761,"versions":762,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":764},"package:pypi:click","click-ef97f731","pypi:click","click",[425,435],[763],"8.3.0",[56],{"id":766,"slug":767,"identity":768,"label":769,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":770,"versions":771,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":773},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[448],[772],"0.16.0",[56],{"id":775,"slug":776,"identity":777,"label":778,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":779,"versions":780,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":782},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[425,435],[781],"3.11",[56],{"id":784,"slug":785,"identity":786,"label":787,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":788,"versions":789,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":791},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[425,435],[790],"5.9.1",[56],{"id":793,"slug":794,"identity":795,"label":796,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":797,"versions":798,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":800},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[425],[799],"5.4.0",[56],{"id":802,"slug":803,"identity":804,"label":805,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":806,"versions":807,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":809},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[448],[808],"3.26.1",[56],{"id":811,"slug":812,"identity":813,"label":814,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":815,"versions":816,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":818},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[415,435],[817],"22.0.0",[56],{"id":820,"slug":821,"identity":822,"label":823,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":824,"versions":825,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":827},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[448],[826],"2.11.0",[56],{"id":829,"slug":830,"identity":831,"label":832,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":833,"versions":835,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":837},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[834],"BSD-2-Clause",[836],"2.19.2",[56],{"id":839,"slug":840,"identity":841,"label":842,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":843,"versions":844,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":846},"package:pypi:pypdf2","pypdf2-eea60a87","pypi:pypdf2","pypdf2",[435],[845],"3.0.1",[56],{"id":848,"slug":849,"identity":850,"label":851,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":852,"versions":853,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":855},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[448],[854],"8.4.2",[56],{"id":857,"slug":858,"identity":859,"label":860,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":861,"versions":862,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":864},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[425],[863],"1.2.1",[56],{"id":866,"slug":867,"identity":868,"label":869,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":870,"versions":871,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":873},"package:pypi:python-socketio","python-socketio-6960be7a","pypi:python-socketio","python-socketio",[448],[872],"5.14.3",[56],{"id":875,"slug":876,"identity":877,"label":878,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":879,"versions":881,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":883},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[880],"MIT AND MPL-2.0",[882],"4.67.1",[56],{"id":885,"slug":886,"identity":887,"label":888,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":889,"versions":890,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":892},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[448],[891],"20.35.4",[56],{"id":894,"slug":895,"identity":896,"label":897,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":898,"versions":899,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":901},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[415],[900],"24.1.0",[56],{"id":903,"slug":904,"identity":905,"label":906,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":907,"versions":909,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":911},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[908],"PSF-2.0",[910],"2.6.1",[56],{"id":913,"slug":914,"identity":915,"label":916,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":917,"versions":918,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":920},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[415],[919],"1.4.0",[56],{"id":922,"slug":923,"identity":924,"label":925,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":926,"versions":927,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":929},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[448],[928],"0.21.0",[56],{"id":931,"slug":932,"identity":933,"label":934,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":935,"versions":936,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":938},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[448],[937],"0.7.0",[56],{"id":940,"slug":941,"identity":942,"label":943,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":944,"versions":945,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":947},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[435],[946],"4.9.3",[56],{"id":949,"slug":950,"identity":951,"label":952,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":953,"versions":954,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":956},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[448],[955],"4.11.0",[56],{"id":958,"slug":959,"identity":960,"label":961,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":962,"versions":963,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":965},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[435],[964],"0.1.4",[56],{"id":967,"slug":968,"identity":969,"label":970,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":971,"versions":972,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":974},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[448],[973],"3.11.0",[56],{"id":976,"slug":977,"identity":978,"label":979,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":980,"versions":981,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":983},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[415],[982],"3.0.0",[56],{"id":985,"slug":986,"identity":987,"label":988,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":989,"versions":990,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":992},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[448],[991],"0.0.10",[56],{"id":994,"slug":995,"identity":996,"label":997,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":998,"versions":999,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1001},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[448],[1000],"25.4.0",[56],{"id":1003,"slug":1004,"identity":1005,"label":1006,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1007,"versions":1008,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1010},"package:pypi:audioop-lts","audioop-lts-1da6267f","pypi:audioop-lts","audioop-lts",[908],[1009],"0.2.2",[56],{"id":1012,"slug":1013,"identity":1014,"label":1015,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1016,"versions":1017,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1019},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[448],[1018],"2.2.1",[56],{"id":1021,"slug":1022,"identity":1023,"label":1024,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1025,"versions":1026,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1028},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[448],[1027],"4.14.2",[56],{"id":1030,"slug":1031,"identity":1032,"label":1033,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1034,"versions":1035,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1037},"package:pypi:bidict","bidict-d2d69f19","pypi:bidict","bidict",[435],[1036],"0.23.1",[56],{"id":1039,"slug":1040,"identity":1041,"label":1042,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1043,"versions":1045,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1047},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[448,1044],"MIT-0",[1046],"2.0.0",[56],{"id":1049,"slug":1050,"identity":1051,"label":1052,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1053,"versions":1054,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1056},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[448],[1055],"3.4.0",[56],{"id":1058,"slug":1059,"identity":1060,"label":1061,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1062,"versions":1063,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1065},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[448],[1064],"3.4.4",[56],{"id":1067,"slug":1068,"identity":1069,"label":1070,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1071,"versions":1072,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1074},"package:pypi:chevron","chevron-e2cf8dfd","pypi:chevron","chevron",[448],[1073],"0.14.0",[56],{"id":1076,"slug":1077,"identity":1078,"label":1079,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1080,"versions":1081,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1083},"package:pypi:chromedriver-autoinstaller","chromedriver-autoinstaller-c57f66e8","pypi:chromedriver-autoinstaller","chromedriver-autoinstaller",[448],[1082],"0.6.4",[56],{"id":1085,"slug":1086,"identity":1087,"label":1088,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1089,"versions":1090,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1092},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[435],[1091],"0.4.6",[56],{"id":1094,"slug":1095,"identity":1096,"label":1097,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1098,"versions":1099,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1101},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[448],[1100],"6.10.1",[56],{"id":1103,"slug":1104,"identity":1105,"label":1106,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1107,"versions":1108,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1110},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[435],[1109],"0.2.3",[56],{"id":1112,"slug":1113,"identity":1114,"label":1115,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1116,"versions":1117,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1119},"package:pypi:cssselect","cssselect-2437b3c5","pypi:cssselect","cssselect",[435],[1118],"1.3.0",[56],{"id":1121,"slug":1122,"identity":1123,"label":1124,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1125,"versions":1126,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1128},"package:pypi:cuid","cuid-297d1f96","pypi:cuid","cuid",[435],[1127],"0.4",[56],{"id":1130,"slug":1131,"identity":1132,"label":1133,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1134,"versions":1135,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1137},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[448],[1136],"0.6.7",[56],{"id":1139,"slug":1140,"identity":1141,"label":1142,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1143,"versions":1144,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1146},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[448],[1145],"1.8.17",[56],{"id":1148,"slug":1149,"identity":1150,"label":1151,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1152,"versions":1153,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1155},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[834,435],[1154],"5.2.1",[56],{"id":1157,"slug":1158,"identity":1159,"label":1160,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1161,"versions":1162,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1164},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[435],[1163],"0.7.1",[56],{"id":1166,"slug":1167,"identity":1168,"label":1169,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1170,"versions":1171,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1173},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[448],[1172],"1.2.18",[56],{"id":1175,"slug":1176,"identity":1177,"label":1178,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1179,"versions":1180,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1182},"package:pypi:deprecation","deprecation-c367808e","pypi:deprecation","deprecation",[415],[1181],"2.1.0",[56],{"id":1184,"slug":1185,"identity":1186,"label":1187,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1188,"versions":1189,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1191},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[425],[1190],"0.4.0",[56],{"id":1193,"slug":1194,"identity":1195,"label":1196,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1197,"versions":1198,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1200},"package:pypi:dirtyjson","dirtyjson-e423c509","pypi:dirtyjson","dirtyjson",[448],[1199],"1.0.8",[56],{"id":1202,"slug":1203,"identity":1204,"label":1205,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1206,"versions":1207,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1208},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[908],[1190],[56],{"id":1210,"slug":1211,"identity":1212,"label":1213,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1214,"versions":1215,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1217},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[415],[1216],"1.9.0",[56],{"id":1219,"slug":1220,"identity":1221,"label":1222,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1223,"versions":1224,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1226},"package:pypi:docling-ibm-models","docling-ibm-models-4f15d6af","pypi:docling-ibm-models","docling-ibm-models",[448],[1225],"3.10.2",[56],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1232,"versions":1233,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1235},"package:pypi:docling-parse","docling-parse-b9af4bcb","pypi:docling-parse","docling-parse",[448],[1234],"4.7.0",[56],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1241,"versions":1242,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1244},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[448],[1243],"0.17.0",[56],{"id":1246,"slug":1247,"identity":1248,"label":1249,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1250,"versions":1251,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1252},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[448],[1046],[56],{"id":1254,"slug":1255,"identity":1256,"label":1257,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1258,"versions":1259,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1260},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[448],[1018],[56],{"id":1262,"slug":1263,"identity":1264,"label":1265,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1266,"versions":1267,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1269},"package:pypi:faker","faker-af8bb74a","pypi:faker","faker",[448],[1268],"37.12.0",[56],{"id":1271,"slug":1272,"identity":1273,"label":1274,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1275,"versions":1276,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1278},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[448],[1277],"0.116.2",[56],{"id":1280,"slug":1281,"identity":1282,"label":1283,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1284,"versions":1285,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1287},"package:pypi:feedfinder2","feedfinder2-a2efca90","pypi:feedfinder2","feedfinder2",[448],[1286],"0.0.4",[56],{"id":1289,"slug":1290,"identity":1291,"label":1292,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1293,"versions":1294,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1296},"package:pypi:feedparser","feedparser-7de97965","pypi:feedparser","feedparser",[834],[1295],"6.0.12",[56],{"id":1298,"slug":1299,"identity":1300,"label":1301,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1302,"versions":1303,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1305},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[448],[1304],"1.2.0",[56],{"id":1307,"slug":1308,"identity":1309,"label":1310,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1311,"versions":1312,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1314},"package:pypi:firecrawl-py","firecrawl-py-2dd84658","pypi:firecrawl-py","firecrawl-py",[448],[1313],"4.5.0",[56],{"id":1316,"slug":1317,"identity":1318,"label":1319,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1320,"versions":1321,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1323},"package:pypi:flake8","flake8-03083a13","pypi:flake8","flake8",[448],[1322],"7.3.0",[56],{"id":1325,"slug":1326,"identity":1327,"label":1328,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1329,"versions":1330,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1332},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[415],[1331],"1.8.0",[56],{"id":1334,"slug":1335,"identity":1336,"label":1337,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1338,"versions":1339,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1341},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[425,435],[1340],"2025.9.0",[56],{"id":1343,"slug":1344,"identity":1345,"label":1346,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1347,"versions":1348,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1350},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[415],[1349],"1.71.0",[56],{"id":1352,"slug":1353,"identity":1354,"label":1355,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1356,"versions":1359,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1361},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[448,1357,1358],"MIT AND PSF-2.0","MIT AND Python-2.0",[1360],"3.2.4",[56],{"id":1363,"slug":1364,"identity":1365,"label":1366,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1367,"versions":1369,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1371},"package:pypi:griffe","griffe-3cc58065","pypi:griffe","griffe",[1368],"ISC",[1370],"1.14.0",[56],{"id":1373,"slug":1374,"identity":1375,"label":1376,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1377,"versions":1378,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1380},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[415],[1379],"1.76.0",[56],{"id":1382,"slug":1383,"identity":1384,"label":1385,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1386,"versions":1387,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1388},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[415],[1304],[56],{"id":1390,"slug":1391,"identity":1392,"label":1393,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1394,"versions":1396,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1398},"package:pypi:html2text","html2text-351f3aea","pypi:html2text","html2text",[1395],"GPL-3.0",[1397],"2024.2.26",[56],{"id":1400,"slug":1401,"identity":1402,"label":1403,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1404,"versions":1405,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1407},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[425],[1406],"1.0.9",[56],{"id":1409,"slug":1410,"identity":1411,"label":1412,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1413,"versions":1414,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1416},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[425],[1415],"0.28.1",[56],{"id":1418,"slug":1419,"identity":1420,"label":1421,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1422,"versions":1423,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1424},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[448],[662],[56],{"id":1426,"slug":1427,"identity":1428,"label":1429,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1430,"versions":1431,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1433},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[415,435],[1432],"0.36.0",[56],{"id":1435,"slug":1436,"identity":1437,"label":1438,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1439,"versions":1440,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1442},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[448],[1441],"2.6.15",[56],{"id":1444,"slug":1445,"identity":1446,"label":1447,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1448,"versions":1449,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1451},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[415,435],[1450],"8.7.0",[56],{"id":1453,"slug":1454,"identity":1455,"label":1456,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1457,"versions":1458,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1460},"package:pypi:inflection","inflection-ad66c7ec","pypi:inflection","inflection",[448],[1459],"0.5.1",[56],{"id":1462,"slug":1463,"identity":1464,"label":1465,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1466,"versions":1467,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1469},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[448],[1468],"2.3.0",[56],{"id":1471,"slug":1472,"identity":1473,"label":1474,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1475,"versions":1476,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1478},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[425,435],[1477],"7.1.0",[56],{"id":1480,"slug":1481,"identity":1482,"label":1483,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1484,"versions":1485,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1487},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[425],[1486],"9.6.0",[56],{"id":1489,"slug":1490,"identity":1491,"label":1492,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1493,"versions":1494,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1496},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[435],[1495],"1.1.1",[56],{"id":1498,"slug":1499,"identity":1500,"label":1501,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1502,"versions":1503,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1505},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[448],[1504],"7.0.0",[56],{"id":1507,"slug":1508,"identity":1509,"label":1510,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1511,"versions":1512,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1514},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[448],[1513],"0.19.2",[56],{"id":1516,"slug":1517,"identity":1518,"label":1519,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1520,"versions":1521,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1523},"package:pypi:jieba3k","jieba3k-2ef848d4","pypi:jieba3k","jieba3k",[],[1522],"0.35.1",[56],{"id":1525,"slug":1526,"identity":1527,"label":1528,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1529,"versions":1530,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1532},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[448],[1531],"0.11.1",[56],{"id":1534,"slug":1535,"identity":1536,"label":1537,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1538,"versions":1539,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1541},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[425],[1540],"1.5.2",[56],{"id":1543,"slug":1544,"identity":1545,"label":1546,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1547,"versions":1548,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1550},"package:pypi:jsonlines","jsonlines-779d1204","pypi:jsonlines","jsonlines",[435],[1549],"4.0.0",[56],{"id":1552,"slug":1553,"identity":1554,"label":1555,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1556,"versions":1557,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1559},"package:pypi:jsonref","jsonref-181eaf53","pypi:jsonref","jsonref",[448],[1558],"1.1.0",[56],{"id":1561,"slug":1562,"identity":1563,"label":1564,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1565,"versions":1566,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1568},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[448],[1567],"4.25.1",[56],{"id":1570,"slug":1571,"identity":1572,"label":1573,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1574,"versions":1575,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1577},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[448],[1576],"2025.9.1",[56],{"id":1579,"slug":1580,"identity":1581,"label":1582,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1583,"versions":1584,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1586},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[435],[1585],"8.6.3",[56],{"id":1588,"slug":1589,"identity":1590,"label":1591,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1592,"versions":1593,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1594},"package:pypi:lance-namespace","lance-namespace-70425b3b","pypi:lance-namespace","lance-namespace",[415],[586],[56],{"id":1596,"slug":1597,"identity":1598,"label":1599,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1600,"versions":1601,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1602},"package:pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client-1a0b30f8","pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client",[415],[586],[56],{"id":1604,"slug":1605,"identity":1606,"label":1607,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1608,"versions":1609,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1611},"package:pypi:lancedb","lancedb-b5c306b5","pypi:lancedb","lancedb",[435],[1610],"0.25.2",[56],{"id":1613,"slug":1614,"identity":1615,"label":1616,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1617,"versions":1618,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1620},"package:pypi:latex2mathml","latex2mathml-4b5e6391","pypi:latex2mathml","latex2mathml",[448],[1619],"3.78.1",[56],{"id":1622,"slug":1623,"identity":1624,"label":1625,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1626,"versions":1627,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1628},"package:pypi:lazify","lazify-bfb0197d","pypi:lazify","lazify",[435],[1190],[56],{"id":1630,"slug":1631,"identity":1632,"label":1633,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1634,"versions":1635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1637},"package:pypi:literalai","literalai-7854f46d","pypi:literalai","literalai",[415],[1636],"0.1.201",[56],{"id":1639,"slug":1640,"identity":1641,"label":1642,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1643,"versions":1644,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1646},"package:pypi:llama-cloud","llama-cloud-b191f0f9","pypi:llama-cloud","llama-cloud",[448],[1645],"0.1.35",[56],{"id":1648,"slug":1649,"identity":1650,"label":1651,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1652,"versions":1653,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1655},"package:pypi:llama-cloud-services","llama-cloud-services-bef88366","pypi:llama-cloud-services","llama-cloud-services",[448],[1654],"0.6.54",[56],{"id":1657,"slug":1658,"identity":1659,"label":1660,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1661,"versions":1662,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1663},"package:pypi:llama-index","llama-index-0f867dab","pypi:llama-index","llama-index",[448],[477],[56],{"id":1665,"slug":1666,"identity":1667,"label":1668,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1669,"versions":1670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1672},"package:pypi:llama-index-cli","llama-index-cli-03ecd5c5","pypi:llama-index-cli","llama-index-cli",[448],[1671],"0.5.3",[56],{"id":1674,"slug":1675,"identity":1676,"label":1677,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1678,"versions":1679,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1680},"package:pypi:llama-index-embeddings-openai","llama-index-embeddings-openai-b4ccbb6b","pypi:llama-index-embeddings-openai","llama-index-embeddings-openai",[448],[1459],[56],{"id":1682,"slug":1683,"identity":1684,"label":1685,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1686,"versions":1687,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1689},"package:pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud-ddf42c36","pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud",[448],[1688],"0.9.4",[56],{"id":1691,"slug":1692,"identity":1693,"label":1694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1695,"versions":1696,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1698},"package:pypi:llama-index-instrumentation","llama-index-instrumentation-abea2496","pypi:llama-index-instrumentation","llama-index-instrumentation",[448],[1697],"0.4.2",[56],{"id":1700,"slug":1701,"identity":1702,"label":1703,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1704,"versions":1705,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1707},"package:pypi:llama-index-readers-file","llama-index-readers-file-c8a58a84","pypi:llama-index-readers-file","llama-index-readers-file",[448],[1706],"0.5.4",[56],{"id":1709,"slug":1710,"identity":1711,"label":1712,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1713,"versions":1714,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1715},"package:pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse-58739d42","pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse",[448],[1459],[56],{"id":1717,"slug":1718,"identity":1719,"label":1720,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1721,"versions":1722,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1723},"package:pypi:llama-index-workflows","llama-index-workflows-a24215fc","pypi:llama-index-workflows","llama-index-workflows",[448],[427],[56],{"id":1725,"slug":1726,"identity":1727,"label":1728,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1729,"versions":1730,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1731},"package:pypi:llama-parse","llama-parse-f89f5dbf","pypi:llama-parse","llama-parse",[448],[1654],[56],{"id":1733,"slug":1734,"identity":1735,"label":1736,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1737,"versions":1738,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1739},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[448],[1549],[56],{"id":1741,"slug":1742,"identity":1743,"label":1744,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1745,"versions":1746,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1747},"package:pypi:markdownify","markdownify-f49bbc0a","pypi:markdownify","markdownify",[448],[1304],[56],{"id":1749,"slug":1750,"identity":1751,"label":1752,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1753,"versions":1754,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1755},"package:pypi:marko","marko-cf8df36c","pypi:marko","marko",[448],[1018],[56],{"id":1757,"slug":1758,"identity":1759,"label":1760,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1761,"versions":1762,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1764},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[425,435],[1763],"3.0.3",[56],{"id":1766,"slug":1767,"identity":1768,"label":1769,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1770,"versions":1771,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1773},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[425,435],[1772],"0.2.1",[56],{"id":1775,"slug":1776,"identity":1777,"label":1778,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1779,"versions":1780,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1781},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[435],[937],[56],{"id":1783,"slug":1784,"identity":1785,"label":1786,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1787,"versions":1788,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1790},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[448],[1789],"0.1.2",[56],{"id":1792,"slug":1793,"identity":1794,"label":1795,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1796,"versions":1797,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1799},"package:pypi:monotonic","monotonic-c3c6b23a","pypi:monotonic","monotonic",[435],[1798],"1.6",[56],{"id":1801,"slug":1802,"identity":1803,"label":1804,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1805,"versions":1806,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1808},"package:pypi:mpire","mpire-1706081d","pypi:mpire","mpire",[448],[1807],"2.10.2",[56],{"id":1810,"slug":1811,"identity":1812,"label":1813,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1814,"versions":1815,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1816},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[435],[1118],[56],{"id":1818,"slug":1819,"identity":1820,"label":1821,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1822,"versions":1823,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1825},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[415],[1824],"6.7.0",[56],{"id":1827,"slug":1828,"identity":1829,"label":1830,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1831,"versions":1832,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1834},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[425],[1833],"0.70.18",[56],{"id":1836,"slug":1837,"identity":1838,"label":1839,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1840,"versions":1841,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1842},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[448],[1558],[56],{"id":1844,"slug":1845,"identity":1846,"label":1847,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1848,"versions":1849,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1851},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[435],[1850],"1.6.0",[56],{"id":1853,"slug":1854,"identity":1855,"label":1856,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1857,"versions":1858,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1860},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[425,435],[1859],"3.5",[56],{"id":1862,"slug":1863,"identity":1864,"label":1865,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1866,"versions":1867,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1869},"package:pypi:newspaper3k","newspaper3k-139e17f3","pypi:newspaper3k","newspaper3k",[448],[1868],"0.2.8",[56],{"id":1871,"slug":1872,"identity":1873,"label":1874,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1875,"versions":1876,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1878},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[435],[1877],"1.9.1",[56],{"id":1880,"slug":1881,"identity":1882,"label":1883,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1884,"versions":1886,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1888},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1885,435],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1887],"2.3.4",[56],{"id":1890,"slug":1891,"identity":1892,"label":1893,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1894,"versions":1895,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1897},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[435],[1896],"12.8.4.1",[56],{"id":1899,"slug":1900,"identity":1901,"label":1902,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1903,"versions":1904,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1906},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[435],[1905],"12.8.90",[56],{"id":1908,"slug":1909,"identity":1910,"label":1911,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1912,"versions":1913,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1915},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[435],[1914],"12.8.93",[56],{"id":1917,"slug":1918,"identity":1919,"label":1920,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1921,"versions":1922,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1923},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[435],[1905],[56],{"id":1925,"slug":1926,"identity":1927,"label":1928,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1929,"versions":1930,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1932},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[435],[1931],"9.10.2.21",[56],{"id":1934,"slug":1935,"identity":1936,"label":1937,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1938,"versions":1939,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1941},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[435],[1940],"11.3.3.83",[56],{"id":1943,"slug":1944,"identity":1945,"label":1946,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1947,"versions":1948,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1950},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[435],[1949],"1.13.1.3",[56],{"id":1952,"slug":1953,"identity":1954,"label":1955,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1956,"versions":1957,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1959},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[435],[1958],"10.3.9.90",[56],{"id":1961,"slug":1962,"identity":1963,"label":1964,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1965,"versions":1966,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1968},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[435],[1967],"11.7.3.90",[56],{"id":1970,"slug":1971,"identity":1972,"label":1973,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1974,"versions":1975,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1977},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[435],[1976],"12.5.8.93",[56],{"id":1979,"slug":1980,"identity":1981,"label":1982,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1983,"versions":1984,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1985},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[435],[1163],[56],{"id":1987,"slug":1988,"identity":1989,"label":1990,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1991,"versions":1992,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1994},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[425,435],[1993],"2.27.5",[56],{"id":1996,"slug":1997,"identity":1998,"label":1999,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2000,"versions":2001,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2002},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[435],[1914],[56],{"id":2004,"slug":2005,"identity":2006,"label":2007,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2008,"versions":2009,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2011},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[425,435],[2010],"3.3.20",[56],{"id":2013,"slug":2014,"identity":2015,"label":2016,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2017,"versions":2018,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2019},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[415,435],[1905],[56],{"id":2021,"slug":2022,"identity":2023,"label":2024,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2025,"versions":2026,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2028},"package:pypi:ocrmac","ocrmac-7acc3c55","pypi:ocrmac","ocrmac",[448],[2027],"1.0.0",[56],{"id":2030,"slug":2031,"identity":2032,"label":2033,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2034,"versions":2035,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2036},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[425],[1468],[56],{"id":2038,"slug":2039,"identity":2040,"label":2041,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2042,"versions":2043,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2045},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[448],[2044],"3.1.5",[56],{"id":2047,"slug":2048,"identity":2049,"label":2050,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2051,"versions":2052,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2054},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[415],[2053],"1.38.0",[56],{"id":2056,"slug":2057,"identity":2058,"label":2059,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2060,"versions":2061,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2062},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[415],[2053],[56],{"id":2064,"slug":2065,"identity":2066,"label":2067,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2068,"versions":2069,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2070},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[415],[2053],[56],{"id":2072,"slug":2073,"identity":2074,"label":2075,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2076,"versions":2077,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2078},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[415],[2053],[56],{"id":2080,"slug":2081,"identity":2082,"label":2083,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2084,"versions":2085,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2086},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[415],[2053],[56],{"id":2088,"slug":2089,"identity":2090,"label":2091,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2092,"versions":2093,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2095},"package:pypi:opentelemetry-instrumentation","opentelemetry-instrumentation-9bcfbe9e","pypi:opentelemetry-instrumentation","opentelemetry-instrumentation",[415],[2094],"0.59b0",[56],{"id":2097,"slug":2098,"identity":2099,"label":2100,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2101,"versions":2102,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2104},"package:pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha-b1a8b6f5","pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha",[415],[2103],"0.47.5",[56],{"id":2106,"slug":2107,"identity":2108,"label":2109,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2110,"versions":2111,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2112},"package:pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic-bf5e49cb","pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic",[415],[2103],[56],{"id":2114,"slug":2115,"identity":2116,"label":2117,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2118,"versions":2119,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2120},"package:pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock-8f6fc7c9","pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock",[415],[2103],[56],{"id":2122,"slug":2123,"identity":2124,"label":2125,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2126,"versions":2127,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2128},"package:pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb-9eb598fd","pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb",[415],[2103],[56],{"id":2130,"slug":2131,"identity":2132,"label":2133,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2134,"versions":2135,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2136},"package:pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere-83896a35","pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere",[415],[2103],[56],{"id":2138,"slug":2139,"identity":2140,"label":2141,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2142,"versions":2143,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2144},"package:pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai-236cb6a6","pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai",[415],[2103],[56],{"id":2146,"slug":2147,"identity":2148,"label":2149,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2150,"versions":2151,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2152},"package:pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai-dd555f24","pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai",[415],[2103],[56],{"id":2154,"slug":2155,"identity":2156,"label":2157,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2158,"versions":2159,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2160},"package:pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq-a9bf4841","pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq",[415],[2103],[56],{"id":2162,"slug":2163,"identity":2164,"label":2165,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2166,"versions":2167,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2168},"package:pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack-92025ed0","pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack",[415],[2103],[56],{"id":2170,"slug":2171,"identity":2172,"label":2173,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2174,"versions":2175,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2176},"package:pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb-337c7f86","pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb",[415],[2103],[56],{"id":2178,"slug":2179,"identity":2180,"label":2181,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2182,"versions":2183,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2184},"package:pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain-f89d1133","pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain",[415],[2103],[56],{"id":2186,"slug":2187,"identity":2188,"label":2189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2190,"versions":2191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2192},"package:pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex-866eb99d","pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex",[415],[2103],[56],{"id":2194,"slug":2195,"identity":2196,"label":2197,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2198,"versions":2199,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2200},"package:pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging-23ee835f","pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging",[415],[2094],[56],{"id":2202,"slug":2203,"identity":2204,"label":2205,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2206,"versions":2207,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2208},"package:pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo-7fffb308","pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo",[415],[2103],[56],{"id":2210,"slug":2211,"identity":2212,"label":2213,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2214,"versions":2215,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2216},"package:pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp-6fbe8e0d","pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp",[415],[2103],[56],{"id":2218,"slug":2219,"identity":2220,"label":2221,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2222,"versions":2223,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2224},"package:pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus-dc786c2a","pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus",[415],[2103],[56],{"id":2226,"slug":2227,"identity":2228,"label":2229,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2230,"versions":2231,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2232},"package:pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai-af29742c","pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai",[415],[2103],[56],{"id":2234,"slug":2235,"identity":2236,"label":2237,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2238,"versions":2239,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2240},"package:pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama-2cbe8996","pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama",[415],[2103],[56],{"id":2242,"slug":2243,"identity":2244,"label":2245,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2246,"versions":2247,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2248},"package:pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai-68db94bf","pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai",[415],[2103],[56],{"id":2250,"slug":2251,"identity":2252,"label":2253,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2254,"versions":2255,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2256},"package:pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents-ac759c8f","pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents",[415],[2103],[56],{"id":2258,"slug":2259,"identity":2260,"label":2261,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2262,"versions":2263,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2264},"package:pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone-08d2858e","pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone",[415],[2103],[56],{"id":2266,"slug":2267,"identity":2268,"label":2269,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2270,"versions":2271,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2272},"package:pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant-3cbb3bd9","pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant",[415],[2103],[56],{"id":2274,"slug":2275,"identity":2276,"label":2277,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2278,"versions":2279,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2280},"package:pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis-c10bb4c6","pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis",[415],[2094],[56],{"id":2282,"slug":2283,"identity":2284,"label":2285,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2286,"versions":2287,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2288},"package:pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate-c6f5732e","pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate",[415],[2103],[56],{"id":2290,"slug":2291,"identity":2292,"label":2293,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2294,"versions":2295,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2296},"package:pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests-baaa9f76","pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests",[415],[2094],[56],{"id":2298,"slug":2299,"identity":2300,"label":2301,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2302,"versions":2303,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2304},"package:pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker-55be6260","pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker",[415],[2103],[56],{"id":2306,"slug":2307,"identity":2308,"label":2309,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2310,"versions":2311,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2312},"package:pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy-8d638a32","pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy",[415],[2094],[56],{"id":2314,"slug":2315,"identity":2316,"label":2317,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2318,"versions":2319,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2320},"package:pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading-8d47431d","pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading",[415],[2094],[56],{"id":2322,"slug":2323,"identity":2324,"label":2325,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2326,"versions":2327,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2328},"package:pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together-e40c9610","pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together",[415],[2103],[56],{"id":2330,"slug":2331,"identity":2332,"label":2333,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2334,"versions":2335,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2336},"package:pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers-bbb71ecf","pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers",[415],[2103],[56],{"id":2338,"slug":2339,"identity":2340,"label":2341,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2342,"versions":2343,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2344},"package:pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3-32a4545b","pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3",[415],[2094],[56],{"id":2346,"slug":2347,"identity":2348,"label":2349,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2350,"versions":2351,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2352},"package:pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai-6a8490d9","pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai",[415],[2103],[56],{"id":2354,"slug":2355,"identity":2356,"label":2357,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2358,"versions":2359,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2360},"package:pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx-012d35eb","pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx",[415],[2103],[56],{"id":2362,"slug":2363,"identity":2364,"label":2365,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2366,"versions":2367,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2368},"package:pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate-95b5df11","pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate",[415],[2103],[56],{"id":2370,"slug":2371,"identity":2372,"label":2373,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2374,"versions":2375,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2376},"package:pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer-62ab002f","pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer",[415],[2103],[56],{"id":2378,"slug":2379,"identity":2380,"label":2381,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2382,"versions":2383,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2384},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[415],[2053],[56],{"id":2386,"slug":2387,"identity":2388,"label":2389,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2390,"versions":2391,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2392},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[415],[2053],[56],{"id":2394,"slug":2395,"identity":2396,"label":2397,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2398,"versions":2399,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2400},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[415],[2094],[56],{"id":2402,"slug":2403,"identity":2404,"label":2405,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2406,"versions":2407,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2409},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[415],[2408],"0.4.13",[56],{"id":2411,"slug":2412,"identity":2413,"label":2414,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2415,"versions":2416,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2417},"package:pypi:opentelemetry-util-http","opentelemetry-util-http-03fc7f64","pypi:opentelemetry-util-http","opentelemetry-util-http",[415],[2094],[56],{"id":2419,"slug":2420,"identity":2421,"label":2422,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2423,"versions":2425,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2427},"package:pypi:outcome","outcome-807eda1a","pypi:outcome","outcome",[2424],"Apache-2.0 OR MIT",[2426],"1.3.0.post0",[56],{"id":2429,"slug":2430,"identity":2431,"label":2432,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2433,"versions":2434,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2436},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[415],[2435],"7.7.0",[56],{"id":2438,"slug":2439,"identity":2440,"label":2441,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2442,"versions":2443,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2444},"package:pypi:oxylabs","oxylabs-2206b7c8","pypi:oxylabs","oxylabs",[448],[1046],[56],{"id":2446,"slug":2447,"identity":2448,"label":2449,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2450,"versions":2452,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2454},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[2451,435],"Apache-2.0 OR BSD-2-Clause",[2453],"25.0",[56],{"id":2456,"slug":2457,"identity":2458,"label":2459,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2460,"versions":2461,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2463},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[435],[2462],"2.2.3",[56],{"id":2465,"slug":2466,"identity":2467,"label":2468,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2469,"versions":2470,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2472},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[448],[2471],"0.8.5",[56],{"id":2474,"slug":2475,"identity":2476,"label":2477,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2478,"versions":2479,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2481},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[752],[2480],"0.12.1",[56],{"id":2483,"slug":2484,"identity":2485,"label":2486,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2487,"versions":2488,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2490},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[435],[2489],"4.9.0",[56],{"id":2492,"slug":2493,"identity":2494,"label":2495,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2496,"versions":2497,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2498},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[448],[1313],[56],{"id":2500,"slug":2501,"identity":2502,"label":2503,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2504,"versions":2505,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2507},"package:pypi:playwright","playwright-33f38203","pypi:playwright","playwright",[415],[2506],"1.55.0",[56],{"id":2509,"slug":2510,"identity":2511,"label":2512,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2513,"versions":2514,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2515},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[448],[1850],[56],{"id":2517,"slug":2518,"identity":2519,"label":2520,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2521,"versions":2522,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2524},"package:pypi:polyfactory","polyfactory-6f8eab4d","pypi:polyfactory","polyfactory",[448],[2523],"2.22.3",[56],{"id":2526,"slug":2527,"identity":2528,"label":2529,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2530,"versions":2531,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2533},"package:pypi:posthog","posthog-fa78df25","pypi:posthog","posthog",[448],[2532],"3.25.0",[56],{"id":2535,"slug":2536,"identity":2537,"label":2538,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2539,"versions":2540,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2542},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[448],[2541],"4.3.0",[56],{"id":2544,"slug":2545,"identity":2546,"label":2547,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2548,"versions":2549,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2551},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[425,435],[2550],"3.0.52",[56],{"id":2553,"slug":2554,"identity":2555,"label":2556,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2557,"versions":2558,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2559},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[415],[505],[56],{"id":2561,"slug":2562,"identity":2563,"label":2564,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2565,"versions":2566,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2568},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[425],[2567],"7.1.2",[56],{"id":2570,"slug":2571,"identity":2572,"label":2573,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2574,"versions":2575,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2576},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1368],[937],[56],{"id":2578,"slug":2579,"identity":2580,"label":2581,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2582,"versions":2583,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2584},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[448],[1109],[56],{"id":2586,"slug":2587,"identity":2588,"label":2589,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2590,"versions":2591,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2593},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[448],[2592],"1.3.0.post6",[56],{"id":2595,"slug":2596,"identity":2597,"label":2598,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2599,"versions":2600,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2602},"package:pypi:pycodestyle","pycodestyle-2b26445c","pypi:pycodestyle","pycodestyle",[448],[2601],"2.14.0",[56],{"id":2604,"slug":2605,"identity":2606,"label":2607,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2608,"versions":2609,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2611},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[425],[2610],"2.23",[56],{"id":2613,"slug":2614,"identity":2615,"label":2616,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2617,"versions":2618,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2620},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[448],[2619],"2.12.3",[56],{"id":2622,"slug":2623,"identity":2624,"label":2625,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2626,"versions":2627,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2629},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[448],[2628],"2.41.4",[56],{"id":2631,"slug":2632,"identity":2633,"label":2634,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2635,"versions":2636,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2638},"package:pypi:pyee","pyee-885d20c2","pypi:pyee","pyee",[448],[2637],"13.0.0",[56],{"id":2640,"slug":2641,"identity":2642,"label":2643,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2644,"versions":2645,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2646},"package:pypi:pyflakes","pyflakes-9bd8cac4","pypi:pyflakes","pyflakes",[448],[1055],[56],{"id":2648,"slug":2649,"identity":2650,"label":2651,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2652,"versions":2653,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2655},"package:pypi:pylance","pylance-da7c006a","pypi:pylance","pylance",[435],[2654],"0.38.3",[56],{"id":2657,"slug":2658,"identity":2659,"label":2660,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2661,"versions":2662,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2664},"package:pypi:pylatexenc","pylatexenc-e20f6acb","pypi:pylatexenc","pylatexenc",[448],[2663],"2.10",[56],{"id":2666,"slug":2667,"identity":2668,"label":2669,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2670,"versions":2671,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2673},"package:pypi:pyobjc-core","pyobjc-core-adc05bb4","pypi:pyobjc-core","pyobjc-core",[448],[2672],"12.0",[56],{"id":2675,"slug":2676,"identity":2677,"label":2678,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2679,"versions":2680,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2681},"package:pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa-8e347170","pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa",[448],[2672],[56],{"id":2683,"slug":2684,"identity":2685,"label":2686,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2687,"versions":2688,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2689},"package:pypi:pyobjc-framework-coreml","pyobjc-framework-coreml-5e7c3b2a","pypi:pyobjc-framework-coreml","pyobjc-framework-coreml",[448],[2672],[56],{"id":2691,"slug":2692,"identity":2693,"label":2694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2695,"versions":2696,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2697},"package:pypi:pyobjc-framework-quartz","pyobjc-framework-quartz-6a98fc9b","pypi:pyobjc-framework-quartz","pyobjc-framework-quartz",[448],[2672],[56],{"id":2699,"slug":2700,"identity":2701,"label":2702,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2703,"versions":2704,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2705},"package:pypi:pyobjc-framework-vision","pyobjc-framework-vision-7145bcee","pypi:pyobjc-framework-vision","pyobjc-framework-vision",[448],[2672],[56],{"id":2707,"slug":2708,"identity":2709,"label":2710,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2711,"versions":2712,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2714},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[435],[2713],"4.30.0",[56],{"id":2716,"slug":2717,"identity":2718,"label":2719,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2720,"versions":2721,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2723},"package:pypi:pysocks","pysocks-7cd576a7","pypi:pysocks","pysocks",[435],[2722],"1.7.1",[56],{"id":2725,"slug":2726,"identity":2727,"label":2728,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2729,"versions":2730,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2731},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[415],[1304],[56],{"id":2733,"slug":2734,"identity":2735,"label":2736,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2737,"versions":2738,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2740},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[435],[2739],"2.9.0.post0",[56],{"id":2742,"slug":2743,"identity":2744,"label":2745,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2746,"versions":2747,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2748},"package:pypi:python-docx","python-docx-734c6d0d","pypi:python-docx","python-docx",[448],[1304],[56],{"id":2750,"slug":2751,"identity":2752,"label":2753,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2754,"versions":2755,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2757},"package:pypi:python-pptx","python-pptx-8826554c","pypi:python-pptx","python-pptx",[448],[2756],"1.0.2",[56],{"id":2759,"slug":2760,"identity":2761,"label":2762,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2763,"versions":2764,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2766},"package:pypi:pytokens","pytokens-4f13eeb2","pypi:pytokens","pytokens",[448],[2765],"0.2.0",[56],{"id":2768,"slug":2769,"identity":2770,"label":2771,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2772,"versions":2773,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2775},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[448],[2774],"2025.2",[56],{"id":2777,"slug":2778,"identity":2779,"label":2780,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2781,"versions":2782,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2784},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2783],"311",[56],{"id":2786,"slug":2787,"identity":2788,"label":2789,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2790,"versions":2791,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2793},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[448],[2792],"6.0.3",[56],{"id":2795,"slug":2796,"identity":2797,"label":2798,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2799,"versions":2800,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2802},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[435],[2801],"27.1.0",[56],{"id":2804,"slug":2805,"identity":2806,"label":2807,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2808,"versions":2809,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2811},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[448],[2810],"3.14.1",[56],{"id":2813,"slug":2814,"identity":2815,"label":2816,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2817,"versions":2818,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2820},"package:pypi:rapidocr","rapidocr-452b83bd","pypi:rapidocr","rapidocr",[415],[2819],"3.4.2",[56],{"id":2822,"slug":2823,"identity":2824,"label":2825,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2826,"versions":2827,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2829},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[448],[2828],"0.37.0",[56],{"id":2831,"slug":2832,"identity":2833,"label":2834,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2835,"versions":2837,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2839},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2836,435],"Apache-2.0 AND CNRI-Python",[2838],"2025.10.23",[56],{"id":2841,"slug":2842,"identity":2843,"label":2844,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2845,"versions":2846,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2847},"package:pypi:requests-file","requests-file-706ecfac","pypi:requests-file","requests-file",[415],[845],[56],{"id":2849,"slug":2850,"identity":2851,"label":2852,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2853,"versions":2854,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2856},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[448],[2855],"14.2.0",[56],{"id":2858,"slug":2859,"identity":2860,"label":2861,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2862,"versions":2863,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2865},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[448],[2864],"0.28.0",[56],{"id":2867,"slug":2868,"identity":2869,"label":2870,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2871,"versions":2872,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2874},"package:pypi:rtree","rtree-0efed1c9","pypi:rtree","rtree",[448],[2873],"1.4.1",[56],{"id":2876,"slug":2877,"identity":2878,"label":2879,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2880,"versions":2881,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2883},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[448],[2882],"0.14.2",[56],{"id":2885,"slug":2886,"identity":2887,"label":2888,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2889,"versions":2890,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2892},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[435],[2891],"0.6.2",[56],{"id":2894,"slug":2895,"identity":2896,"label":2897,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2898,"versions":2899,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2901},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[435],[2900],"1.16.3",[56],{"id":2903,"slug":2904,"identity":2905,"label":2906,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2907,"versions":2908,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2910},"package:pypi:selenium","selenium-e3f15a24","pypi:selenium","selenium",[415],[2909],"4.38.0",[56],{"id":2912,"slug":2913,"identity":2914,"label":2915,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2916,"versions":2917,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2919},"package:pypi:semchunk","semchunk-c2c8e504","pypi:semchunk","semchunk",[448],[2918],"2.2.2",[56],{"id":2921,"slug":2922,"identity":2923,"label":2924,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2925,"versions":2926,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2927},"package:pypi:sgmllib3k","sgmllib3k-c3d7a6ca","pypi:sgmllib3k","sgmllib3k",[435],[2027],[56],{"id":2929,"slug":2930,"identity":2931,"label":2932,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2933,"versions":2934,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2936},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[425],[2935],"2.1.2",[56],{"id":2938,"slug":2939,"identity":2940,"label":2941,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2942,"versions":2943,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2945},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[435],[2944],"1.5.4",[56],{"id":2947,"slug":2948,"identity":2949,"label":2950,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2951,"versions":2952,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2953},"package:pypi:simple-websocket","simple-websocket-2bc2e925","pypi:simple-websocket","simple-websocket",[448],[1558],[56],{"id":2955,"slug":2956,"identity":2957,"label":2958,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2959,"versions":2960,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2962},"package:pypi:six","six-3c3888bd","pypi:six","six",[448],[2961],"1.17.0",[56],{"id":2964,"slug":2965,"identity":2966,"label":2967,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2968,"versions":2969,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2971},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2424],[2970],"1.3.1",[56],{"id":2973,"slug":2974,"identity":2975,"label":2976,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2977,"versions":2978,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2980},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[415],[2979],"2.4.0",[56],{"id":2982,"slug":2983,"identity":2984,"label":2985,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2986,"versions":2987,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2989},"package:pypi:spider-client","spider-client-04bbfc07","pypi:spider-client","spider-client",[448],[2988],"0.0.27",[56],{"id":2991,"slug":2992,"identity":2993,"label":2994,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2995,"versions":2996,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2998},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[448],[2997],"2.0.44",[56],{"id":3000,"slug":3001,"identity":3002,"label":3003,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3004,"versions":3005,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3007},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[425],[3006],"3.0.2",[56],{"id":3009,"slug":3010,"identity":3011,"label":3012,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3013,"versions":3014,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3016},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[448],[3015],"0.6.3",[56],{"id":3018,"slug":3019,"identity":3020,"label":3021,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3022,"versions":3023,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3025},"package:pypi:striprtf","striprtf-bb61a6b5","pypi:striprtf","striprtf",[425],[3024],"0.0.26",[56],{"id":3027,"slug":3028,"identity":3029,"label":3030,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3031,"versions":3032,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3034},"package:pypi:structlog","structlog-2a5a47ec","pypi:structlog","structlog",[2424],[3033],"25.5.0",[56],{"id":3036,"slug":3037,"identity":3038,"label":3039,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3040,"versions":3041,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3042},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[435],[1370],[56],{"id":3044,"slug":3045,"identity":3046,"label":3047,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3048,"versions":3049,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3051},"package:pypi:syncer","syncer-7ac13616","pypi:syncer","syncer",[448],[3050],"2.0.3",[56],{"id":3053,"slug":3054,"identity":3055,"label":3056,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3057,"versions":3058,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3060},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[448],[3059],"0.9.0",[56],{"id":3062,"slug":3063,"identity":3064,"label":3065,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3066,"versions":3067,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3069},"package:pypi:tantivy","tantivy-b8e058c3","pypi:tantivy","tantivy",[448],[3068],"0.25.0",[56],{"id":3071,"slug":3072,"identity":3073,"label":3074,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3075,"versions":3076,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3078},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[415],[3077],"9.1.2",[56],{"id":3080,"slug":3081,"identity":3082,"label":3083,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3084,"versions":3085,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3086},"package:pypi:thefuzz","thefuzz-77e9a0e0","pypi:thefuzz","thefuzz",[448],[468],[56],{"id":3088,"slug":3089,"identity":3090,"label":3091,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3092,"versions":3093,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3095},"package:pypi:tinysegmenter","tinysegmenter-eaea99bf","pypi:tinysegmenter","tinysegmenter",[435],[3094],"0.3",[56],{"id":3097,"slug":3098,"identity":3099,"label":3100,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3101,"versions":3102,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3104},"package:pypi:tldextract","tldextract-ed3c967e","pypi:tldextract","tldextract",[425],[3103],"5.3.0",[56],{"id":3106,"slug":3107,"identity":3108,"label":3109,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3110,"versions":3111,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3112},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[448],[1468],[56],{"id":3114,"slug":3115,"identity":3116,"label":3117,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3118,"versions":3119,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3121},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[435],[3120],"0.24.0",[56],{"id":3123,"slug":3124,"identity":3125,"label":3126,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3127,"versions":3128,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3129},"package:pypi:traceloop-sdk","traceloop-sdk-64e27d1c","pypi:traceloop-sdk","traceloop-sdk",[415],[2103],[56],{"id":3131,"slug":3132,"identity":3133,"label":3134,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3135,"versions":3136,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3137},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[435],[872],[56],{"id":3139,"slug":3140,"identity":3141,"label":3142,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3143,"versions":3144,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3146},"package:pypi:trio","trio-5952fcdf","pypi:trio","trio",[2424],[3145],"0.31.0",[56],{"id":3148,"slug":3149,"identity":3150,"label":3151,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3152,"versions":3153,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3155},"package:pypi:trio-websocket","trio-websocket-71803d22","pypi:trio-websocket","trio-websocket",[448],[3154],"0.12.2",[56],{"id":3157,"slug":3158,"identity":3159,"label":3160,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3161,"versions":3162,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3164},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[448],[3163],"3.5.0",[56],{"id":3166,"slug":3167,"identity":3168,"label":3169,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3170,"versions":3171,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3172},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[448],[1513],[56],{"id":3174,"slug":3175,"identity":3176,"label":3177,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3178,"versions":3179,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3181},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[908,435],[3180],"4.15.0",[56],{"id":3183,"slug":3184,"identity":3185,"label":3186,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3187,"versions":3188,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3189},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[448],[3059],[56],{"id":3191,"slug":3192,"identity":3193,"label":3194,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3195,"versions":3196,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3197},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[448],[1697],[56],{"id":3199,"slug":3200,"identity":3201,"label":3202,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3203,"versions":3204,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3205},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[415],[2774],[56],{"id":3207,"slug":3208,"identity":3209,"label":3210,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3211,"versions":3212,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3214},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[448],[3213],"5.3.1",[56],{"id":3216,"slug":3217,"identity":3218,"label":3219,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3220,"versions":3221,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3223},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[425],[3222],"0.38.0",[56],{"id":3225,"slug":3226,"identity":3227,"label":3228,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3229,"versions":3230,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3231},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[448],[3120],[56],{"id":3233,"slug":3234,"identity":3235,"label":3236,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3237,"versions":3238,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3240},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[448],[3239],"0.2.14",[56],{"id":3242,"slug":3243,"identity":3244,"label":3245,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3246,"versions":3247,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3248},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[415],[1216],[56],{"id":3250,"slug":3251,"identity":3252,"label":3253,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3254,"versions":3255,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3257},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[425],[3256],"15.0.1",[56],{"id":3259,"slug":3260,"identity":3261,"label":3262,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3263,"versions":3264,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3266},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[435],[3265],"1.17.3",[56],{"id":3268,"slug":3269,"identity":3270,"label":3271,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3272,"versions":3273,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3274},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[448],[1304],[56],{"id":3276,"slug":3277,"identity":3278,"label":3279,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3280,"versions":3281,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3283},"package:pypi:xlsxwriter","xlsxwriter-fab6ebdd","pypi:xlsxwriter","xlsxwriter",[834],[3282],"3.2.9",[56],{"id":3285,"slug":3286,"identity":3287,"label":3288,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3289,"versions":3290,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3292},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[415],[3291],"1.22.0",[56],{"id":3294,"slug":3295,"identity":3296,"label":3297,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3298,"versions":3299,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3301},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[448],[3300],"3.23.0",[56],[3303,3340,3371,3406,3440,3473,3504,3537,3564,3590,3616,3642,3674,3701,3744,3770,3796,3843,3872,3905,3936,3969,3992,4020,4047,4083,4115,4141,4168,4188,4224,4249,4267,4297,4330,4356,4385,4409,4427,4466,4492,4518,4543,4570,4606,4639,4667,4690,4719,4744,4770,4807,4831,4855,4892,4915,4942,4964,4994,5021,5040,5067,5091,5114,5141,5162,5191,5214,5236,5259,5285,5308,5345,5373,5404,5429,5453,5482,5507,5539,5579,5606,5635,5664,5683,5704,5728,5762,5813,5839,5878,5917,5945,5977,6000,6025,6049,6072,6099,6122,6149,6173,6204,6238,6264,6291,6317,6347,6367,6392,6424,6448,6501,6525,6549,6579,6611,6640,6661,6691,6719,6743,6774,6801,6834,6866,6895,6920,6947,6973,6994,7032,7056,7079,7107,7133,7159,7182,7208,7227,7260,7285,7312,7337,7365,7388,7411,7439,7465,7499,7532,7559,7581,7603,7623,7650,7677,7697,7727,7751,7778,7805,7837,7859,7882,7910,7937,7962,7991,8010,8033,8060,8081,8113,8134,8157,8190,8218,8244,8268,8287,8316,8337,8359,8389,8417,8438,8461,8486,8511,8534,8556,8584,8613,8639,8661,8688,8713,8737,8758,8782,8806,8821,8847,8871,8893,8919,8939,8976,9002,9034,9059,9086,9108,9140,9167,9190,9221,9249,9276,9301,9331,9361,9395,9424,9456,9477,9500,9528,9556,9583,9610,9637,9664,9690,9712,9735,9763,9783,9813,9839,9891,9916,9939,9965,9999,10024,10049,10072,10097,10129,10157,10176,10203,10231,10256,10275,10302,10323,10344,10369,10396,10416,10432,10452,10469,10488,10505,10526,10542,10557,10574,10589,10606,10623,10640,10653,10666,10679,10692,10705,10718,10731,10744,10767,10780,10796,10829,10858,10872,10886,10901],{"id":107,"slug":3304,"dossier":47,"summary":3305,"aliases":3306,"sourceIds":3309,"published":3310,"modified":3311,"checkedAt":7,"severity":3312,"references":3316,"versionKeys":3336,"packageCount":32,"repositoryCount":650},"ghsa-23w6-3w8w-8484-7e1b73d9","pypdf: Possible long runtimes\u002Flarge memory usage when retrieving outlines",[3307,3308],"CVE-2026-84310","PYSEC-2026-3910",[107,3308],"2026-09-01T21:28:37Z","2026-09-10T12:25:45.197931157Z",[3313],{"type":3314,"score":3315},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3317,3320,3322,3324,3327,3329,3331,3334],{"type":3318,"url":3319},"WEB","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3318,"url":3321},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3966",{"type":3318,"url":3323},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fd91ab705fd81ed1a9cec175c6958600dea1a4942",{"type":3325,"url":3326},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":3318,"url":3328},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.1",{"type":3325,"url":3330},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":3332,"url":3333},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3332,"url":3335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84310",[3337,3338,3339],"pypi:pypdf@5.1.0","pypi:pypdf@6.1.3","pypi:pypdf@6.14.2",{"id":108,"slug":3341,"dossier":47,"summary":3342,"aliases":3343,"sourceIds":3346,"published":3347,"modified":3348,"checkedAt":7,"severity":3349,"references":3355,"versionKeys":3370,"packageCount":32,"repositoryCount":105},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[3344,3345],"CVE-2026-48156","PYSEC-2026-3004",[108,3345],"2026-06-12T18:29:59Z","2026-09-10T03:51:07.304973624Z",[3350,3353],{"type":3351,"score":3352},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3314,"score":3354},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3356,3358,3360,3362,3364,3365,3367,3368],{"type":3318,"url":3357},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":3332,"url":3359},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":3318,"url":3361},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":3318,"url":3363},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":3325,"url":3326},{"type":3318,"url":3366},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":3325,"url":3330},{"type":3332,"url":3369},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[3337,3338],{"id":109,"slug":3372,"dossier":47,"summary":3373,"aliases":3374,"sourceIds":3377,"published":3378,"modified":3379,"checkedAt":7,"severity":3380,"references":3383,"versionKeys":3404,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[3375,3376],"CVE-2024-39689","PYSEC-2024-230",[109,3376],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[3381],{"type":3351,"score":3382},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3384,3386,3388,3391,3393,3395,3398,3400,3402],{"type":3332,"url":3385},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":3332,"url":3387},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":3389,"url":3390},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":3325,"url":3392},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":3318,"url":3394},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":3396,"url":3397},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":3318,"url":3399},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":3332,"url":3401},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":3332,"url":3403},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[3405],"pypi:certifi@2024.6.2",{"id":110,"slug":3407,"dossier":47,"summary":3408,"aliases":3409,"sourceIds":3412,"published":3413,"modified":3414,"checkedAt":7,"severity":3415,"references":3418,"versionKeys":3430,"packageCount":32,"repositoryCount":42},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[3410,3411],"CVE-2026-4372","PYSEC-2026-2289",[110,3411],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[3416],{"type":3351,"score":3417},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3419,3421,3423,3425,3428],{"type":3332,"url":3420},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":3389,"url":3422},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":3325,"url":3424},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":3426,"url":3427},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":3332,"url":3429},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[3431,3432,3433,3434,3435,3436,3437,3438,3439],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":111,"slug":3441,"dossier":47,"summary":3442,"aliases":3443,"sourceIds":3446,"published":3447,"modified":3448,"checkedAt":7,"severity":3449,"references":3452,"versionKeys":3469,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[3444,3445],"CVE-2025-54121","PYSEC-2026-1941",[111,3445],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[3450],{"type":3351,"score":3451},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3453,3455,3457,3459,3461,3463,3465,3467],{"type":3318,"url":3454},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":3332,"url":3456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":3389,"url":3458},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":3325,"url":3460},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":3318,"url":3462},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":3318,"url":3464},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":3325,"url":3466},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":3332,"url":3468},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[3470,3471,3472],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":112,"slug":3474,"dossier":47,"summary":3475,"aliases":3476,"sourceIds":3479,"published":3480,"modified":3481,"checkedAt":7,"severity":3482,"references":3487,"versionKeys":3494,"packageCount":32,"repositoryCount":42},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[3477,3478],"CVE-2026-54279","PYSEC-2026-2112",[112,3478],"2026-06-15T20:08:51Z","2026-09-10T03:51:07.471021274Z",[3483,3485],{"type":3314,"score":3484},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":3351,"score":3486},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3488,3490,3492],{"type":3332,"url":3489},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":3325,"url":3491},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":3389,"url":3493},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[3495,3496,3497,3498,3499,3500,3501,3502,3503],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":113,"slug":3505,"dossier":47,"summary":3506,"aliases":3507,"sourceIds":3510,"published":3511,"modified":3512,"checkedAt":7,"severity":3513,"references":3518,"versionKeys":3535,"packageCount":32,"repositoryCount":32},"ghsa-2g59-m95p-pgfq-b960a1a2","Chainlit contain a server-side request forgery (SSRF) vulnerability",[3508,3509],"CVE-2026-22219","PYSEC-2026-1237",[113,3509],"2026-01-20T00:30:28Z","2026-07-07T17:57:22.370684872Z",[3514,3516],{"type":3351,"score":3515},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"type":3314,"score":3517},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",[3519,3521,3523,3525,3527,3529,3531,3533],{"type":3332,"url":3520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22219",{"type":3318,"url":3522},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002Fffc3cce648b343b933e10e85ee5805c7e02ab3bf",{"type":3325,"url":3524},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit",{"type":3318,"url":3526},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.9.4",{"type":3318,"url":3528},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-sqlalchemy-data-layer-ssrf-via-project-element",{"type":3318,"url":3530},"https:\u002F\u002Fwww.zafran.io\u002Fresources\u002Fchainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover",{"type":3325,"url":3532},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fchainlit",{"type":3332,"url":3534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g59-m95p-pgfq",[3536],"pypi:chainlit@2.8.3",{"id":114,"slug":3538,"dossier":47,"summary":3539,"aliases":3540,"sourceIds":3543,"published":3544,"modified":3545,"checkedAt":7,"severity":3546,"references":3548,"versionKeys":3563,"packageCount":32,"repositoryCount":105},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[3541,3542],"CVE-2026-24688","PYSEC-2026-1827",[114,3542],"2026-01-26T23:37:57Z","2026-09-10T03:50:32.300137224Z",[3547],{"type":3314,"score":3354},[3549,3551,3553,3555,3557,3558,3560,3561],{"type":3318,"url":3550},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":3332,"url":3552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":3318,"url":3554},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":3318,"url":3556},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":3325,"url":3326},{"type":3318,"url":3559},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":3325,"url":3330},{"type":3332,"url":3562},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[3337,3338],{"id":115,"slug":3565,"dossier":47,"summary":3566,"aliases":3567,"sourceIds":3570,"published":3571,"modified":3572,"checkedAt":7,"severity":3573,"references":3576,"versionKeys":3589,"packageCount":32,"repositoryCount":105},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[3568,3569],"CVE-2026-27628","PYSEC-2026-3005",[115,3569],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[3574],{"type":3314,"score":3575},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3577,3579,3581,3583,3585,3586,3587],{"type":3318,"url":3578},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":3332,"url":3580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":3318,"url":3582},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":3318,"url":3584},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":3325,"url":3326},{"type":3325,"url":3330},{"type":3332,"url":3588},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[3337,3338],{"id":116,"slug":3591,"dossier":47,"summary":3592,"aliases":3593,"sourceIds":3596,"published":3597,"modified":3598,"checkedAt":7,"severity":3599,"references":3604,"versionKeys":3614,"packageCount":32,"repositoryCount":3615},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[3594,3595],"CVE-2026-34514","PYSEC-2026-2096",[116,3595],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[3600,3602],{"type":3314,"score":3601},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3351,"score":3603},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3605,3607,3609,3611,3612],{"type":3389,"url":3606},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":3332,"url":3608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":3389,"url":3610},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":3325,"url":3491},{"type":3332,"url":3613},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[3495,3496,3497,3498,3499,3500,3501,3502],10,{"id":117,"slug":3617,"dossier":47,"summary":3618,"aliases":3619,"sourceIds":3622,"published":3623,"modified":3624,"checkedAt":7,"severity":3625,"references":3627,"versionKeys":3638,"packageCount":32,"repositoryCount":631},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[3620,3621],"CVE-2026-49476","PYSEC-2026-3071",[117,3621],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[3626],{"type":3351,"score":3486},[3628,3630,3632,3634,3636],{"type":3318,"url":3629},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3325,"url":3631},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":3325,"url":3633},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":3332,"url":3635},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3332,"url":3637},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[3639,3640,3641],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":118,"slug":3643,"dossier":90,"summary":3644,"aliases":3645,"sourceIds":3648,"published":3649,"modified":3650,"checkedAt":7,"severity":3651,"references":3654,"versionKeys":3667,"packageCount":32,"repositoryCount":3673},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[3646,3647],"CVE-2025-66471","PYSEC-2026-1994",[118,3647],"2025-12-05T18:15:54Z","2026-09-10T03:50:31.327173527Z",[3652],{"type":3314,"score":3653},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[3655,3657,3659,3661,3663,3665],{"type":3318,"url":3656},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3332,"url":3658},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":3389,"url":3660},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":3325,"url":3662},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":3325,"url":3664},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":3332,"url":3666},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[3668,3669,3670,3671,3672],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",16,{"id":119,"slug":3675,"dossier":47,"summary":3676,"aliases":3677,"sourceIds":3680,"published":3681,"modified":3682,"checkedAt":7,"severity":3683,"references":3686,"versionKeys":3699,"packageCount":32,"repositoryCount":105},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[3678,3679],"CVE-2025-30167","PYSEC-2026-1477",[119,3679],"2025-06-04T21:00:23Z","2026-09-10T03:50:24.754946270Z",[3684],{"type":3351,"score":3685},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3687,3689,3691,3693,3695,3697],{"type":3318,"url":3688},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":3332,"url":3690},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":3318,"url":3692},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":3325,"url":3694},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":3325,"url":3696},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":3332,"url":3698},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[3700],"pypi:jupyter-core@5.7.2",{"id":120,"slug":3702,"dossier":47,"summary":3703,"aliases":3704,"sourceIds":3708,"published":3709,"modified":3710,"checkedAt":7,"severity":3711,"references":3718,"versionKeys":3740,"packageCount":32,"repositoryCount":650},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[3705,3706,3707],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[120,3707],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[3712,3714,3716],{"type":3351,"score":3713},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3314,"score":3715},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3351,"score":3717},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3719,3721,3724,3726,3728,3730,3732,3734,3736,3738],{"type":3332,"url":3720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":3722,"url":3723},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":3722,"url":3725},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":3318,"url":3727},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":3325,"url":3729},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":3318,"url":3731},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":3722,"url":3733},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":3332,"url":3735},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":3332,"url":3737},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":3332,"url":3739},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[3741,3742,3743],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":121,"slug":3745,"dossier":47,"summary":3746,"aliases":3747,"sourceIds":3750,"published":3751,"modified":3752,"checkedAt":7,"severity":3753,"references":3755,"versionKeys":3769,"packageCount":32,"repositoryCount":650},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[3748,3749],"CVE-2025-3933","PYSEC-2026-1977",[121,3749],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[3754],{"type":3351,"score":3451},[3756,3758,3760,3762,3763,3765,3767],{"type":3332,"url":3757},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":3318,"url":3759},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":3318,"url":3761},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":3325,"url":3424},{"type":3318,"url":3764},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":3325,"url":3766},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":3332,"url":3768},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[3431,3432,3433],{"id":122,"slug":3771,"dossier":90,"summary":3772,"aliases":3773,"sourceIds":3776,"published":3777,"modified":3778,"checkedAt":7,"severity":3779,"references":3782,"versionKeys":3795,"packageCount":32,"repositoryCount":3673},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3774,3775],"CVE-2026-21441","PYSEC-2026-1996",[122,3775],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[3780,3781],{"type":3351,"score":3486},{"type":3314,"score":3653},[3783,3785,3787,3789,3790,3792,3793],{"type":3318,"url":3784},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":3332,"url":3786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":3389,"url":3788},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":3325,"url":3662},{"type":3318,"url":3791},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":3325,"url":3664},{"type":3332,"url":3794},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[3668,3669,3670,3671,3672],{"id":123,"slug":3797,"dossier":47,"summary":3798,"aliases":3799,"sourceIds":3802,"published":3803,"modified":3804,"checkedAt":7,"severity":3805,"references":3809,"versionKeys":3840,"packageCount":32,"repositoryCount":105},"ghsa-3936-cmfr-pm3m-b8e96095","Black: Arbitrary file writes from unsanitized user input in cache file name",[3800,3801],"CVE-2026-32274","PYSEC-2026-2121",[123,3801],"2026-03-12T18:33:10Z","2026-09-10T03:50:36.703011526Z",[3806,3807],{"type":3351,"score":3382},{"type":3314,"score":3808},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3810,3812,3814,3816,3818,3820,3822,3824,3826,3828,3830,3832,3834,3836,3838],{"type":3332,"url":3811},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-3936-cmfr-pm3m",{"type":3332,"url":3813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32274",{"type":3318,"url":3815},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F4176",{"type":3389,"url":3817},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5038",{"type":3389,"url":3819},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F4937fe6cf241139ddbfc16b0bdbb5b422798909d",{"type":3318,"url":3821},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Fed770ba4dd50c419148a0fca2b43937a7447e1f9",{"type":3332,"url":3823},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":3332,"url":3825},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":3332,"url":3827},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":3318,"url":3829},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32274",{"type":3722,"url":3831},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2447111",{"type":3325,"url":3833},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack",{"type":3332,"url":3835},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.3.1",{"type":3318,"url":3837},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2026-2121.yaml",{"type":3318,"url":3839},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32274.json",[3841,3842],"pypi:black@23.12.1","pypi:black@25.9.0",{"id":124,"slug":3844,"dossier":47,"summary":3845,"aliases":3846,"sourceIds":3849,"published":3850,"modified":3851,"checkedAt":7,"severity":3852,"references":3856,"versionKeys":3871,"packageCount":32,"repositoryCount":105},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[3847,3848],"CVE-2026-40260","PYSEC-2026-3006",[124,3848],"2026-04-10T20:59:36Z","2026-09-10T03:50:42.398553260Z",[3853,3854],{"type":3351,"score":3451},{"type":3314,"score":3855},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3857,3859,3861,3863,3865,3866,3868,3869],{"type":3318,"url":3858},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":3332,"url":3860},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":3318,"url":3862},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":3318,"url":3864},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":3325,"url":3326},{"type":3318,"url":3867},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":3325,"url":3330},{"type":3332,"url":3870},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[3337,3338],{"id":125,"slug":3873,"dossier":47,"summary":3874,"aliases":3875,"sourceIds":3878,"published":3879,"modified":3880,"checkedAt":7,"severity":3881,"references":3886,"versionKeys":3901,"packageCount":32,"repositoryCount":631},"ghsa-3gq4-3j92-5w49-897f59b8","NLTK: Corpus Reader Sandbox Bypass",[3876,3877],"CVE-2026-79674","PYSEC-2026-3736",[125,3877],"2026-08-25T16:17:27.873Z","2026-09-08T17:15:03.431037417Z",[3882,3884],{"type":3314,"score":3883},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3314,"score":3885},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3887,3889,3891,3893,3895,3897,3899],{"type":3426,"url":3888},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gq4-3j92-5w49",{"type":3332,"url":3890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79674",{"type":3318,"url":3892},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbc007200d123c1a98d74c2eb230f5e06c53886b8",{"type":3325,"url":3894},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":3318,"url":3896},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.3",{"type":3318,"url":3898},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3736.yaml",{"type":3332,"url":3900},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-corpus-reader-constructors",[3902,3903,3904],"pypi:nltk@3.10.0","pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":126,"slug":3906,"dossier":47,"summary":3907,"aliases":3908,"sourceIds":3911,"published":3912,"modified":3913,"checkedAt":7,"severity":3914,"references":3919,"versionKeys":3935,"packageCount":32,"repositoryCount":34},"ghsa-3gqm-fcw5-w839-cc39684a","NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure",[3909,3910],"CVE-2026-63311","PYSEC-2026-3723",[126,3910],"2026-08-22T15:16:19.233Z","2026-09-02T16:00:17.562331221Z",[3915,3917],{"type":3314,"score":3916},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L",{"type":3314,"score":3918},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3920,3922,3924,3926,3928,3929,3931,3933],{"type":3426,"url":3921},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gqm-fcw5-w839",{"type":3332,"url":3923},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63311",{"type":3318,"url":3925},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3582",{"type":3318,"url":3927},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F4a820afa58810cd05049b6c6eae306694d6cfe65",{"type":3325,"url":3894},{"type":3318,"url":3930},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.0",{"type":3318,"url":3932},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3723.yaml",{"type":3332,"url":3934},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-via-dns-resolution-failure",[3903,3904],{"id":127,"slug":3937,"dossier":47,"summary":3938,"aliases":3939,"sourceIds":3942,"published":3943,"modified":3944,"checkedAt":7,"severity":3945,"references":3952,"versionKeys":3968,"packageCount":32,"repositoryCount":32},"ghsa-3hhw-38pf-pxj6-71b22ab9","NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely",[3940,3941],"CVE-2026-62383","PYSEC-2026-3726",[127,3941],"2026-08-22T15:16:17.883Z","2026-09-08T16:45:03.602432270Z",[3946,3948,3950],{"type":3351,"score":3947},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3314,"score":3949},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3314,"score":3951},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3953,3955,3957,3959,3961,3962,3964,3966],{"type":3426,"url":3954},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3hhw-38pf-pxj6",{"type":3332,"url":3956},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62383",{"type":3318,"url":3958},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3727",{"type":3318,"url":3960},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fee1a42e51982c4dce6ad3ee77ff1ac43894288ab",{"type":3325,"url":3894},{"type":3318,"url":3963},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.2",{"type":3318,"url":3965},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3726.yaml",{"type":3332,"url":3967},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-ipipancorpusreader-symlink-arbitrary-file-read",[3902],{"id":128,"slug":3970,"dossier":47,"summary":3971,"aliases":3972,"sourceIds":3975,"published":3976,"modified":3977,"checkedAt":7,"severity":3978,"references":3982,"versionKeys":3991,"packageCount":32,"repositoryCount":3615},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[3973,3974],"CVE-2026-34517","PYSEC-2026-2099",[128,3974],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[3979,3981],{"type":3314,"score":3980},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3351,"score":3451},[3983,3985,3987,3989,3990],{"type":3389,"url":3984},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":3332,"url":3986},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":3389,"url":3988},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":129,"slug":3993,"dossier":47,"summary":3994,"aliases":3995,"sourceIds":3998,"published":3999,"modified":4000,"checkedAt":7,"severity":4001,"references":4003,"versionKeys":4014,"packageCount":32,"repositoryCount":66},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[3996,3997],"CVE-2026-49853","PYSEC-2026-3387",[129,3997],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[4002],{"type":3351,"score":3515},[4004,4006,4008,4010,4012],{"type":3318,"url":4005},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3325,"url":4007},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":3325,"url":4009},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":3332,"url":4011},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3332,"url":4013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[4015,4016,4017,4018,4019],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":130,"slug":4021,"dossier":47,"summary":4022,"aliases":4023,"sourceIds":4026,"published":4027,"modified":4028,"checkedAt":7,"severity":4029,"references":4031,"versionKeys":4044,"packageCount":32,"repositoryCount":650},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[4024,4025],"CVE-2025-68480","PYSEC-2026-1605",[130,4025],"2025-12-22T20:20:07Z","2026-09-10T03:50:31.208550852Z",[4030],{"type":3351,"score":3451},[4032,4034,4036,4038,4040,4042],{"type":3318,"url":4033},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":3332,"url":4035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":3318,"url":4037},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":3325,"url":4039},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":3325,"url":4041},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":3332,"url":4043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[4045,4046],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":131,"slug":4048,"dossier":90,"summary":4049,"aliases":4050,"sourceIds":4054,"published":4055,"modified":4056,"checkedAt":7,"severity":4057,"references":4059,"versionKeys":4072,"packageCount":32,"repositoryCount":4082},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[4051,4052,4053],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[131,4053],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[4058],{"type":3351,"score":3486},[4060,4062,4064,4066,4068,4070],{"type":3426,"url":4061},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":3332,"url":4063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":3389,"url":4065},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":3318,"url":4067},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":3325,"url":4069},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":3332,"url":4071},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[4073,4074,4075,4076,4077,4078,4079,4080,4081],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",17,{"id":132,"slug":4084,"dossier":47,"summary":4085,"aliases":4086,"sourceIds":4089,"published":4090,"modified":4091,"checkedAt":7,"severity":4092,"references":4095,"versionKeys":4114,"packageCount":32,"repositoryCount":34},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[4087,4088],"CVE-2026-33236","PYSEC-2026-2237",[132,4088],"2026-03-19T12:42:42Z","2026-09-10T03:50:36.939520178Z",[4093],{"type":3351,"score":4094},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4096,4098,4100,4102,4103,4105,4107,4108,4110,4112],{"type":3426,"url":4097},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":3332,"url":4099},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":3389,"url":4101},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":3325,"url":3894},{"type":3318,"url":4104},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":3318,"url":4106},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":3332,"url":3823},{"type":3332,"url":4109},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":3332,"url":4111},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3722,"url":4113},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[3903,3904],{"id":133,"slug":4116,"dossier":47,"summary":4117,"aliases":4118,"sourceIds":4121,"published":4122,"modified":4123,"checkedAt":7,"severity":4124,"references":4127,"versionKeys":4140,"packageCount":32,"repositoryCount":583},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[4119,4120],"CVE-2025-50182","PYSEC-2026-1997",[133,4120],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[4125],{"type":3351,"score":4126},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4128,4130,4132,4134,4135,4137,4138],{"type":3318,"url":4129},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":3332,"url":4131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":3389,"url":4133},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":3325,"url":3662},{"type":3318,"url":4136},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":3325,"url":3664},{"type":3332,"url":4139},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[3668,3669,3670,3671],{"id":134,"slug":4142,"dossier":47,"summary":4143,"aliases":4144,"sourceIds":4147,"published":4148,"modified":4149,"checkedAt":7,"severity":4150,"references":4152,"versionKeys":4167,"packageCount":32,"repositoryCount":105},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[4145,4146],"CVE-2026-22691","PYSEC-2026-1828",[134,4146],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[4151],{"type":3314,"score":3980},[4153,4155,4157,4159,4161,4162,4164,4165],{"type":3318,"url":4154},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":3332,"url":4156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":3318,"url":4158},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":3318,"url":4160},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":3325,"url":3326},{"type":3318,"url":4163},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":3325,"url":3330},{"type":3332,"url":4166},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[3337,3338],{"id":135,"slug":4169,"dossier":47,"summary":4170,"aliases":4171,"sourceIds":4174,"published":4175,"modified":4176,"checkedAt":7,"severity":4177,"references":4181,"versionKeys":4187,"packageCount":32,"repositoryCount":42},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[4172,4173],"CVE-2026-54273","PYSEC-2026-2107",[135,4173],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[4178,4180],{"type":3314,"score":4179},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3351,"score":3486},[4182,4184,4186],{"type":3332,"url":4183},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":3389,"url":4185},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":3325,"url":3491},[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":136,"slug":4189,"dossier":47,"summary":4190,"aliases":4191,"sourceIds":4194,"published":4195,"modified":4196,"checkedAt":7,"severity":4197,"references":4202,"versionKeys":4219,"packageCount":32,"repositoryCount":34},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[4192,4193],"CVE-2026-69112","PYSEC-2026-3804",[136,4193],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[4198,4200],{"type":3351,"score":4199},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":3314,"score":4201},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4203,4205,4207,4209,4211,4213,4215,4217],{"type":3332,"url":4204},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":3318,"url":4206},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":3318,"url":4208},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":3318,"url":4210},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":3325,"url":4212},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":3318,"url":4214},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":3325,"url":4216},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":3332,"url":4218},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[4220,4221,4222,4223],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":137,"slug":4225,"dossier":47,"summary":4226,"aliases":4227,"sourceIds":4230,"published":4231,"modified":4232,"checkedAt":7,"severity":4233,"references":4236,"versionKeys":4247,"packageCount":32,"repositoryCount":32},"ghsa-4jhm-jv67-739f-fdb585fa","`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes",[4228,4229],"CVE-2026-49825","PYSEC-2026-2614",[137,4229],"2026-07-08T20:23:22Z","2026-07-13T16:42:41.379452174Z",[4234],{"type":3351,"score":4235},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[4237,4239,4241,4243,4245],{"type":3318,"url":4238},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3325,"url":4240},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean",{"type":3325,"url":4242},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flxml-html-clean",{"type":3332,"url":4244},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3332,"url":4246},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49825",[4248],"pypi:lxml-html-clean@0.4.3",{"id":138,"slug":4250,"dossier":47,"summary":4251,"aliases":4252,"sourceIds":4255,"published":4256,"modified":4257,"checkedAt":7,"severity":4258,"references":4262,"versionKeys":4266,"packageCount":32,"repositoryCount":42},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[4253,4254],"CVE-2026-54275","PYSEC-2026-237",[138,4254],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[4259,4261],{"type":3314,"score":4260},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3351,"score":3486},[4263,4265],{"type":3332,"url":4264},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":3325,"url":3491},[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":139,"slug":4268,"dossier":47,"summary":4269,"aliases":4270,"sourceIds":4273,"published":4274,"modified":4275,"checkedAt":7,"severity":4276,"references":4281,"versionKeys":4296,"packageCount":32,"repositoryCount":105},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[4271,4272],"CVE-2026-41313","PYSEC-2026-3007",[139,4272],"2026-04-16T21:30:12Z","2026-09-10T03:50:42.729754195Z",[4277,4279],{"type":3351,"score":4278},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3314,"score":4280},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4282,4284,4286,4288,4290,4291,4293,4294],{"type":3318,"url":4283},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":3332,"url":4285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":3318,"url":4287},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":3318,"url":4289},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":3325,"url":3326},{"type":3318,"url":4292},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":3325,"url":3330},{"type":3332,"url":4295},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[3337,3338],{"id":140,"slug":4298,"dossier":47,"summary":4299,"aliases":4300,"sourceIds":4304,"published":4305,"modified":4306,"checkedAt":7,"severity":4307,"references":4310,"versionKeys":4328,"packageCount":32,"repositoryCount":105},"ghsa-4vvm-4w3v-6mr8-41f51ef4","pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character",[4301,4302,4303],"CVE-2023-36464","PYSEC-2026-1835","PYSEC-2026-3008",[140,4302],"2023-06-30T20:33:57Z","2026-09-10T03:50:01.918644849Z",[4308],{"type":3351,"score":4309},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4311,4313,4315,4317,4319,4321,4322,4324,4326],{"type":3318,"url":4312},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",{"type":3332,"url":4314},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-36464",{"type":3318,"url":4316},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F1828",{"type":3318,"url":4318},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F969",{"type":3389,"url":4320},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb0e5c689df689ab173df84dacd77b6fc3c161932",{"type":3325,"url":3326},{"type":3318,"url":4323},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F3.9.0",{"type":3325,"url":4325},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf2",{"type":3332,"url":4327},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",[4329],"pypi:pypdf2@3.0.1",{"id":141,"slug":4331,"dossier":47,"summary":4332,"aliases":4333,"sourceIds":4336,"published":4337,"modified":4338,"checkedAt":7,"severity":4339,"references":4342,"versionKeys":4355,"packageCount":32,"repositoryCount":34},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[4334,4335],"CVE-2025-6921","PYSEC-2026-1980",[141,4335],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[4340],{"type":3351,"score":4341},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4343,4345,4347,4349,4350,4352,4353],{"type":3332,"url":4344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":3318,"url":4346},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":3318,"url":4348},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":3325,"url":3424},{"type":3318,"url":4351},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":3325,"url":3766},{"type":3332,"url":4354},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[3431,3432,3433,3434],{"id":142,"slug":4357,"dossier":90,"summary":4358,"aliases":4359,"sourceIds":4363,"published":4364,"modified":4365,"checkedAt":7,"severity":4366,"references":4369,"versionKeys":4384,"packageCount":32,"repositoryCount":4082},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[4360,4361,4362],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[142,4362],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[4367],{"type":3351,"score":4368},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4370,4372,4374,4376,4378,4380,4382,4383],{"type":3426,"url":4371},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":3332,"url":4373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":3389,"url":4375},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":3389,"url":4377},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":3389,"url":4379},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":3318,"url":4381},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":3325,"url":4069},{"type":3332,"url":4071},[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":143,"slug":4386,"dossier":47,"summary":4387,"aliases":4388,"sourceIds":4391,"published":4392,"modified":4393,"checkedAt":7,"severity":4394,"references":4396,"versionKeys":4408,"packageCount":32,"repositoryCount":105},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[4389,4390],"CVE-2026-22690","PYSEC-2026-1829",[143,4390],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[4395],{"type":3314,"score":3980},[4397,4399,4401,4402,4403,4404,4405,4406],{"type":3318,"url":4398},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":3332,"url":4400},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":3318,"url":4158},{"type":3318,"url":4160},{"type":3325,"url":3326},{"type":3318,"url":4163},{"type":3325,"url":3330},{"type":3332,"url":4407},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[3337,3338],{"id":144,"slug":4410,"dossier":47,"summary":4411,"aliases":4412,"sourceIds":4414,"published":4415,"modified":4416,"checkedAt":7,"severity":4417,"references":4420,"versionKeys":4425,"packageCount":32,"repositoryCount":105},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[4413],"CVE-2026-58203",[144],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[4418],{"type":3351,"score":4419},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4421,4423],{"type":3318,"url":4422},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":3325,"url":4424},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[4426],"pypi:pydantic-settings@2.12.0",{"id":145,"slug":4428,"dossier":47,"summary":4429,"aliases":4430,"sourceIds":4433,"published":4434,"modified":4435,"checkedAt":7,"severity":4436,"references":4439,"versionKeys":4462,"packageCount":32,"repositoryCount":4465},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[4431,4432],"CVE-2026-4539","PYSEC-2026-2987",[145,4432],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[4437,4438],{"type":3351,"score":3713},{"type":3314,"score":3715},[4440,4442,4444,4446,4448,4450,4452,4454,4456,4458,4460],{"type":3332,"url":4441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":3318,"url":4443},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":3318,"url":4445},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":3318,"url":4447},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":3325,"url":4449},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":3318,"url":4451},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":3318,"url":4453},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":3318,"url":4455},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":3318,"url":4457},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":3325,"url":4459},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":3332,"url":4461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[4463,4464],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",15,{"id":146,"slug":4467,"dossier":47,"summary":4468,"aliases":4469,"sourceIds":4472,"published":4473,"modified":4474,"checkedAt":7,"severity":4475,"references":4478,"versionKeys":4491,"packageCount":32,"repositoryCount":105},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[4470,4471],"CVE-2026-54530","PYSEC-2026-3009",[146,4471],"2026-06-16T14:05:40Z","2026-09-10T03:50:48.282377637Z",[4476],{"type":3314,"score":4477},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4479,4481,4483,4484,4486,4487,4489],{"type":3318,"url":4480},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3318,"url":4482},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":3325,"url":3326},{"type":3318,"url":4485},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":3325,"url":3330},{"type":3332,"url":4488},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3332,"url":4490},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[3337,3338],{"id":147,"slug":4493,"dossier":47,"summary":4494,"aliases":4495,"sourceIds":4499,"published":4500,"modified":4501,"checkedAt":7,"severity":4502,"references":4507,"versionKeys":4517,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[4496,4497,4498],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[147,4498],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[4503,4505],{"type":3314,"score":4504},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3351,"score":4506},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4508,4510,4512,4514,4516],{"type":3332,"url":4509},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":3332,"url":4511},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":3318,"url":4513},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":3318,"url":4515},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":3325,"url":3729},[3741],{"id":148,"slug":4519,"dossier":47,"summary":4520,"aliases":4521,"sourceIds":4524,"published":4525,"modified":4526,"checkedAt":7,"severity":4527,"references":4530,"versionKeys":4542,"packageCount":32,"repositoryCount":583},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[4522,4523],"CVE-2025-69226","PYSEC-2026-1097",[148,4523],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[4528],{"type":3314,"score":4529},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4531,4533,4535,4537,4538,4540],{"type":3318,"url":4532},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":3332,"url":4534},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":3389,"url":4536},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":3325,"url":3491},{"type":3325,"url":4539},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":3332,"url":4541},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[3495,3496,3497,3498,3499,3500,3501],{"id":149,"slug":4544,"dossier":47,"summary":4545,"aliases":4546,"sourceIds":4549,"published":4550,"modified":4551,"checkedAt":7,"severity":4552,"references":4554,"versionKeys":4569,"packageCount":32,"repositoryCount":105},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[4547,4548],"CVE-2026-59937","PYSEC-2026-3610",[149,4548],"2026-07-23T15:07:33Z","2026-09-10T03:50:12.272620075Z",[4553],{"type":3314,"score":3855},[4555,4557,4559,4561,4563,4564,4566,4567],{"type":3318,"url":4556},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":3332,"url":4558},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":3318,"url":4560},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":3318,"url":4562},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":3325,"url":3326},{"type":3318,"url":4565},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",{"type":3325,"url":3330},{"type":3332,"url":4568},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",[3337,3338],{"id":150,"slug":4571,"dossier":47,"summary":4572,"aliases":4573,"sourceIds":4576,"published":4577,"modified":4578,"checkedAt":7,"severity":4579,"references":4586,"versionKeys":4605,"packageCount":32,"repositoryCount":34},"ghsa-568f-pv23-39p4-570af882","NLTK: Stable FrameNet and NKJP readers parse outside-root XML",[4574,4575],"CVE-2026-62385","PYSEC-2026-3728",[150,4575],"2026-08-22T15:16:18.833Z","2026-09-08T16:45:03.600943920Z",[4580,4582,4584],{"type":3351,"score":4581},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3314,"score":4583},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3351,"score":4585},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4587,4589,4591,4593,4595,4597,4599,4600,4601,4603],{"type":3426,"url":4588},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-568f-pv23-39p4",{"type":3332,"url":4590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62385",{"type":3318,"url":4592},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3579",{"type":3318,"url":4594},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3581",{"type":3318,"url":4596},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7d1389d0789c1eca56bd0ed444089e0a3972e3ed",{"type":3318,"url":4598},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbf3bf32786791394a1008258b4917a7f2d4dbcda",{"type":3325,"url":3894},{"type":3318,"url":3930},{"type":3318,"url":4602},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3728.yaml",{"type":3332,"url":4604},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-framenet-and-nkjp-readers",[3903,3904],{"id":151,"slug":4607,"dossier":47,"summary":4608,"aliases":4609,"sourceIds":4613,"published":4614,"modified":4615,"checkedAt":7,"severity":4616,"references":4619,"versionKeys":4634,"packageCount":32,"repositoryCount":602},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[4610,4611,4612],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[151,4612],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[4617],{"type":3351,"score":4618},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4620,4622,4624,4626,4628,4630,4632],{"type":3318,"url":4621},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":3332,"url":4623},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":3318,"url":4625},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":3389,"url":4627},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":3325,"url":4629},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":3325,"url":4631},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":3332,"url":4633},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[4635,4636,4637,4638],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":152,"slug":4640,"dossier":47,"summary":4641,"aliases":4642,"sourceIds":4645,"published":4646,"modified":4647,"checkedAt":7,"severity":4648,"references":4652,"versionKeys":4665,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[4643,4644],"CVE-2024-53981","PYSEC-2026-1851",[152,4644],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[4649,4650],{"type":3351,"score":3486},{"type":3314,"score":4651},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4653,4655,4657,4659,4661,4663],{"type":3318,"url":4654},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":3332,"url":4656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":3318,"url":4658},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":3325,"url":4660},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":3325,"url":4662},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":3332,"url":4664},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[4666],"pypi:python-multipart@0.0.9",{"id":153,"slug":4668,"dossier":47,"summary":4669,"aliases":4670,"sourceIds":4673,"published":4674,"modified":4675,"checkedAt":7,"severity":4676,"references":4678,"versionKeys":4689,"packageCount":32,"repositoryCount":34},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[4671,4672],"CVE-2025-6638","PYSEC-2026-1981",[153,4672],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[4677],{"type":3351,"score":4341},[4679,4681,4682,4683,4684,4686,4687],{"type":3332,"url":4680},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":3318,"url":4346},{"type":3318,"url":4348},{"type":3325,"url":3424},{"type":3318,"url":4685},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":3325,"url":3766},{"type":3332,"url":4688},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[3431,3432,3433,3434],{"id":154,"slug":4691,"dossier":47,"summary":4692,"aliases":4693,"sourceIds":4696,"published":4697,"modified":4698,"checkedAt":7,"severity":4699,"references":4704,"versionKeys":4718,"packageCount":32,"repositoryCount":32},"ghsa-5gh2-94qg-qppq-247161cc","NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution",[4694,4695],"CVE-2026-71513","PYSEC-2026-3867",[154,4695],"2026-08-22T15:31:03Z","2026-09-10T12:25:33.900504877Z",[4700,4702],{"type":3351,"score":4701},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3314,"score":4703},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4705,4707,4709,4710,4712,4714,4716],{"type":3332,"url":4706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71513",{"type":3318,"url":4708},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fc3e37113742a1ebeeb4f2ca58941f320f98805ea",{"type":3325,"url":3894},{"type":3318,"url":4711},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fpicklesec.py#L119-L124",{"type":3318,"url":4713},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-remote-code-execution-via-allowlistunpickler-dotted-name-bypass",{"type":3325,"url":4715},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":3332,"url":4717},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5gh2-94qg-qppq",[3902],{"id":155,"slug":4720,"dossier":47,"summary":4721,"aliases":4722,"sourceIds":4725,"published":4726,"modified":4727,"checkedAt":7,"severity":4728,"references":4730,"versionKeys":4743,"packageCount":32,"repositoryCount":105},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[4723,4724],"CVE-2026-49460","PYSEC-2026-3010",[155,4724],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[4729],{"type":3314,"score":3354},[4731,4733,4735,4736,4738,4739,4741],{"type":3318,"url":4732},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3318,"url":4734},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":3325,"url":3326},{"type":3318,"url":4737},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":3325,"url":3330},{"type":3332,"url":4740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3332,"url":4742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[3337,3338],{"id":156,"slug":4745,"dossier":47,"summary":4746,"aliases":4747,"sourceIds":4750,"published":4751,"modified":4752,"checkedAt":7,"severity":4753,"references":4755,"versionKeys":4769,"packageCount":32,"repositoryCount":105},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[4748,4749],"CVE-2026-59938","PYSEC-2026-3611",[156,4749],"2026-07-23T15:06:58Z","2026-09-10T03:51:10.495417380Z",[4754],{"type":3314,"score":3855},[4756,4758,4760,4762,4764,4765,4766,4767],{"type":3318,"url":4757},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":3332,"url":4759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":3318,"url":4761},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":3318,"url":4763},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":3325,"url":3326},{"type":3318,"url":4565},{"type":3325,"url":3330},{"type":3332,"url":4768},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",[3337,3338],{"id":157,"slug":4771,"dossier":47,"summary":4772,"aliases":4773,"sourceIds":4777,"published":4778,"modified":4779,"checkedAt":7,"severity":4780,"references":4785,"versionKeys":4802,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[4774,4775,4776],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[157,4776],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[4781,4783],{"type":3314,"score":4782},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3351,"score":4784},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4786,4788,4790,4792,4794,4796,4798,4800],{"type":3426,"url":4787},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":3332,"url":4789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3722,"url":4791},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":3389,"url":4793},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":3318,"url":4795},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":3325,"url":4797},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":3318,"url":4799},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":3396,"url":4801},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[4803,4804,4805,4806],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":158,"slug":4808,"dossier":47,"summary":4809,"aliases":4810,"sourceIds":4813,"published":4814,"modified":4815,"checkedAt":7,"severity":4816,"references":4818,"versionKeys":4827,"packageCount":32,"repositoryCount":602},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[4811,4812],"CVE-2026-53539","PYSEC-2026-3036",[158,4812],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[4817],{"type":3351,"score":3486},[4819,4821,4822,4823,4825],{"type":3318,"url":4820},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3325,"url":4660},{"type":3325,"url":4662},{"type":3332,"url":4824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3332,"url":4826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[4828,4829,4830,4666],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":159,"slug":4832,"dossier":47,"summary":4833,"aliases":4834,"sourceIds":4837,"published":4838,"modified":4839,"checkedAt":7,"severity":4840,"references":4842,"versionKeys":4853,"packageCount":32,"repositoryCount":32},"ghsa-5w7q-77mv-v69f-f2198303","python-socketio: Binary attachment accumulation can cause denial of service",[4835,4836],"CVE-2026-48804","PYSEC-2026-3042",[159,4836],"2026-06-26T20:51:58Z","2026-07-13T16:43:50.745760053Z",[4841],{"type":3351,"score":3486},[4843,4845,4847,4849,4851],{"type":3318,"url":4844},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio\u002Fsecurity\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3325,"url":4846},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio",{"type":3325,"url":4848},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-socketio",{"type":3332,"url":4850},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3332,"url":4852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48804",[4854],"pypi:python-socketio@5.14.3",{"id":160,"slug":4856,"dossier":47,"summary":4857,"aliases":4858,"sourceIds":4863,"published":4864,"modified":4865,"checkedAt":7,"severity":4866,"references":4871,"versionKeys":4891,"packageCount":32,"repositoryCount":34},"ghsa-5wp5-5229-5g6q-fd7d105f","NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection",[4859,4860,4861,4862],"CVE-2026-12259","CVE-2026-63310","GHSA-gf32-cmjh-8m9v","PYSEC-2026-3729",[160,4862],"2026-08-22T15:16:19.100Z","2026-09-10T11:25:57.355843699Z",[4867,4869],{"type":3351,"score":4868},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3351,"score":4870},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[4872,4874,4876,4878,4880,4881,4883,4885,4887,4889],{"type":3426,"url":4873},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",{"type":3332,"url":4875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12259",{"type":3318,"url":4877},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3449",{"type":3318,"url":4879},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0e26734a61094b628d93e26dc18dd7302567ac46",{"type":3325,"url":3894},{"type":3318,"url":4882},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":3318,"url":4884},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3729.yaml",{"type":3318,"url":4886},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F659ccf6d-12d4-4d4a-84c0-078633c35a5d",{"type":3332,"url":4888},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-missing-post-download-integrity-verification",{"type":3332,"url":4890},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",[3903,3904],{"id":161,"slug":4893,"dossier":90,"summary":4894,"aliases":4895,"sourceIds":4899,"published":4900,"modified":4901,"checkedAt":7,"severity":4902,"references":4904,"versionKeys":4914,"packageCount":32,"repositoryCount":4082},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[4896,4897,4898],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[161,4898],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[4903],{"type":3351,"score":3486},[4905,4907,4909,4910,4912,4913],{"type":3426,"url":4906},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":3332,"url":4908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":3389,"url":4065},{"type":3318,"url":4911},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":3325,"url":4069},{"type":3332,"url":4071},[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":162,"slug":4916,"dossier":47,"summary":4917,"aliases":4918,"sourceIds":4921,"published":4922,"modified":4923,"checkedAt":7,"severity":4924,"references":4926,"versionKeys":4941,"packageCount":32,"repositoryCount":105},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[4919,4920],"CVE-2026-59936","PYSEC-2026-3612",[162,4920],"2026-07-23T16:36:41Z","2026-09-10T03:51:10.501615101Z",[4925],{"type":3314,"score":4651},[4927,4929,4931,4933,4935,4936,4938,4939],{"type":3318,"url":4928},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":3332,"url":4930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":3318,"url":4932},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":3318,"url":4934},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":3325,"url":3326},{"type":3318,"url":4937},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",{"type":3325,"url":3330},{"type":3332,"url":4940},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",[3337,3338],{"id":163,"slug":4943,"dossier":47,"summary":4944,"aliases":4945,"sourceIds":4949,"published":4950,"modified":4951,"checkedAt":7,"severity":4952,"references":4955,"versionKeys":4963,"packageCount":32,"repositoryCount":103},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[4946,4947,4948],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[163,4948],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[4953,4954],{"type":3351,"score":3717},{"type":3314,"score":3354},[4956,4958,4960,4961],{"type":3332,"url":4957},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":3332,"url":4959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":3325,"url":4069},{"type":3332,"url":4962},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[4076,4077,4078,4079,4080],{"id":164,"slug":4965,"dossier":90,"summary":4966,"aliases":4967,"sourceIds":4971,"published":4972,"modified":4973,"checkedAt":7,"severity":4974,"references":4977,"versionKeys":4993,"packageCount":32,"repositoryCount":4082},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[4968,4969,4970],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[164,4970],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[4975],{"type":3314,"score":4976},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4978,4980,4982,4984,4986,4987,4989,4991],{"type":3318,"url":4979},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":3332,"url":4981},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":3318,"url":4983},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":3318,"url":4985},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":3325,"url":4069},{"type":3318,"url":4988},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":3325,"url":4990},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":3332,"url":4992},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":165,"slug":4995,"dossier":47,"summary":4996,"aliases":4997,"sourceIds":5000,"published":5001,"modified":5002,"checkedAt":7,"severity":5003,"references":5009,"versionKeys":5020,"packageCount":32,"repositoryCount":3615},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[4998,4999],"CVE-2026-34520","PYSEC-2026-2102",[165,4999],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[5004,5006,5007],{"type":3351,"score":5005},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3314,"score":3601},{"type":3314,"score":5008},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5010,5012,5014,5016,5017,5018],{"type":3389,"url":5011},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":3332,"url":5013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":3389,"url":5015},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":3325,"url":3491},{"type":3332,"url":3613},{"type":3318,"url":5019},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[3495,3496,3497,3498,3499,3500,3501,3502],{"id":166,"slug":5022,"dossier":47,"summary":5023,"aliases":5024,"sourceIds":5027,"published":5028,"modified":5029,"checkedAt":7,"severity":5030,"references":5033,"versionKeys":5039,"packageCount":32,"repositoryCount":42},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[5025,5026],"CVE-2026-54277","PYSEC-2026-2110",[166,5026],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[5031,5032],{"type":3314,"score":4179},{"type":3351,"score":3486},[5034,5036,5038],{"type":3332,"url":5035},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":3389,"url":5037},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":3325,"url":3491},[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":167,"slug":5041,"dossier":90,"summary":5042,"aliases":5043,"sourceIds":5046,"published":5047,"modified":5048,"checkedAt":7,"severity":5049,"references":5052,"versionKeys":5061,"packageCount":32,"repositoryCount":5066},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[5044,5045],"CVE-2026-45409","PYSEC-2026-215",[167,5045],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[5050,5051],{"type":3351,"score":3451},{"type":3314,"score":3855},[5053,5055,5057,5059],{"type":3332,"url":5054},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":3332,"url":5056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":3325,"url":5058},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":3318,"url":5060},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[5062,5063,5064,5065],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":168,"slug":5068,"dossier":47,"summary":5069,"aliases":5070,"sourceIds":5073,"published":5074,"modified":5075,"checkedAt":7,"severity":5076,"references":5080,"versionKeys":5090,"packageCount":32,"repositoryCount":34},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[5071,5072],"CVE-2026-0847","PYSEC-2026-98",[168,5072],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[5077,5079],{"type":3351,"score":5078},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3351,"score":4585},[5081,5083,5084,5086,5088],{"type":3332,"url":5082},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":3325,"url":3894},{"type":3318,"url":5085},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":3426,"url":5087},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":3332,"url":5089},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3903,3904],{"id":169,"slug":5092,"dossier":47,"summary":5093,"aliases":5094,"sourceIds":5097,"published":5098,"modified":5099,"checkedAt":7,"severity":5100,"references":5102,"versionKeys":5113,"packageCount":32,"repositoryCount":583},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[5095,5096],"CVE-2025-69224","PYSEC-2026-1099",[169,5096],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[5101],{"type":3314,"score":3601},[5103,5105,5107,5109,5110,5111],{"type":3318,"url":5104},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":3332,"url":5106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":3389,"url":5108},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":5112},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[3495,3496,3497,3498,3499,3500,3501],{"id":170,"slug":5115,"dossier":47,"summary":5116,"aliases":5117,"sourceIds":5120,"published":5121,"modified":5122,"checkedAt":7,"severity":5123,"references":5128,"versionKeys":5140,"packageCount":32,"repositoryCount":42},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[5118,5119],"CVE-2026-1839","PYSEC-2026-2288",[170,5119],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[5124,5126],{"type":3351,"score":5125},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":3351,"score":5127},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5129,5131,5133,5134,5136,5138],{"type":3332,"url":5130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":3389,"url":5132},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":3325,"url":3424},{"type":3318,"url":5135},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":3426,"url":5137},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":3332,"url":5139},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[3431,3432,3433,3434,3435,3436,3437,3438,3439],{"id":171,"slug":5142,"dossier":47,"summary":5143,"aliases":5144,"sourceIds":5147,"published":5148,"modified":5149,"checkedAt":7,"severity":5150,"references":5152,"versionKeys":5161,"packageCount":32,"repositoryCount":34},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[5145,5146],"CVE-2026-12072","PYSEC-2026-3581",[171,5146],"2026-07-31T16:50:55Z","2026-09-10T03:51:10.746883878Z",[5151],{"type":3351,"score":4585},[5153,5155,5156,5157,5159],{"type":3318,"url":5154},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3325,"url":3894},{"type":3325,"url":4715},{"type":3332,"url":5158},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3332,"url":5160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[3903,3904],{"id":172,"slug":5163,"dossier":47,"summary":5164,"aliases":5165,"sourceIds":5168,"published":5169,"modified":5170,"checkedAt":7,"severity":5171,"references":5176,"versionKeys":5190,"packageCount":32,"repositoryCount":631},"ghsa-6hwm-xvph-95vm-a4237eb0","NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary",[5166,5167],"CVE-2026-78680","PYSEC-2026-3868",[172,5167],"2026-09-01T20:27:20Z","2026-09-10T12:25:25.368160026Z",[5172,5174],{"type":3351,"score":5173},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3314,"score":5175},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5177,5179,5181,5183,5184,5185,5187,5188],{"type":3318,"url":5178},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",{"type":3332,"url":5180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78680",{"type":3318,"url":5182},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1a3cd1764ab3deb084fb66d0ffb4873717659538",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":5186},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-code-execution-via-graphviz-dot-binary",{"type":3325,"url":4715},{"type":3332,"url":5189},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",[3902,3903,3904],{"id":173,"slug":5192,"dossier":47,"summary":5193,"aliases":5194,"sourceIds":5197,"published":5198,"modified":5199,"checkedAt":7,"severity":5200,"references":5202,"versionKeys":5213,"packageCount":32,"repositoryCount":583},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[5195,5196],"CVE-2025-69228","PYSEC-2026-1100",[173,5196],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[5201],{"type":3314,"score":4179},[5203,5205,5207,5209,5210,5211],{"type":3318,"url":5204},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":3332,"url":5206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":3389,"url":5208},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":5212},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[3495,3496,3497,3498,3499,3500,3501],{"id":174,"slug":5215,"dossier":47,"summary":5216,"aliases":5217,"sourceIds":5220,"published":5221,"modified":5222,"checkedAt":7,"severity":5223,"references":5226,"versionKeys":5235,"packageCount":32,"repositoryCount":602},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[5218,5219],"CVE-2026-53538","PYSEC-2026-3037",[174,5219],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[5224],{"type":3351,"score":5225},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[5227,5229,5230,5231,5233],{"type":3318,"url":5228},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3325,"url":4660},{"type":3325,"url":4662},{"type":3332,"url":5232},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3332,"url":5234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[4828,4829,4830,4666],{"id":175,"slug":5237,"dossier":47,"summary":5238,"aliases":5239,"sourceIds":5242,"published":5243,"modified":5244,"checkedAt":7,"severity":5245,"references":5247,"versionKeys":5258,"packageCount":32,"repositoryCount":583},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[5240,5241],"CVE-2025-69223","PYSEC-2026-1101",[175,5241],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[5246],{"type":3351,"score":3486},[5248,5250,5252,5254,5255,5256],{"type":3318,"url":5249},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":3332,"url":5251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":3389,"url":5253},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":5257},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[3495,3496,3497,3498,3499,3500,3501],{"id":176,"slug":5260,"dossier":90,"summary":5261,"aliases":5262,"sourceIds":5266,"published":5267,"modified":5268,"checkedAt":7,"severity":5269,"references":5271,"versionKeys":5284,"packageCount":32,"repositoryCount":4082},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[5263,5264,5265],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[176,5265],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[5270],{"type":3351,"score":3486},[5272,5274,5276,5278,5280,5282,5283],{"type":3426,"url":5273},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":3332,"url":5275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":3389,"url":5277},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":3389,"url":5279},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":3318,"url":5281},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":3325,"url":4069},{"type":3332,"url":4988},[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":177,"slug":5286,"dossier":47,"summary":5287,"aliases":5288,"sourceIds":5291,"published":5292,"modified":5293,"checkedAt":7,"severity":5294,"references":5296,"versionKeys":5307,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[5289,5290],"CVE-2024-12720","PYSEC-2026-1982",[177,5290],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[5295],{"type":3351,"score":4341},[5297,5299,5301,5302,5304,5305],{"type":3332,"url":5298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":3318,"url":5300},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":3325,"url":3424},{"type":3318,"url":5303},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":3325,"url":3766},{"type":3332,"url":5306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[3431],{"id":178,"slug":5309,"dossier":47,"summary":5310,"aliases":5311,"sourceIds":5314,"published":5315,"modified":5316,"checkedAt":7,"severity":5317,"references":5320,"versionKeys":5339,"packageCount":32,"repositoryCount":602},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[5312,5313],"CVE-2025-71176","PYSEC-2026-1845",[178,5313],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[5318],{"type":3351,"score":5319},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[5321,5323,5325,5327,5329,5331,5333,5335,5337],{"type":3332,"url":5322},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":3318,"url":5324},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":3318,"url":5326},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":3318,"url":5328},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":3325,"url":5330},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":3318,"url":5332},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":3318,"url":5334},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":3325,"url":5336},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":3332,"url":5338},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[5340,5341,5342,5343,5344],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":179,"slug":5346,"dossier":47,"summary":5347,"aliases":5348,"sourceIds":5351,"published":5352,"modified":5353,"checkedAt":7,"severity":5354,"references":5359,"versionKeys":5372,"packageCount":32,"repositoryCount":631},"ghsa-6ww7-3frv-cqxh-c6d40b97","NLTK: pathsec SSRF protection can be bypassed when a proxy is configured",[5349,5350],"CVE-2026-78682","PYSEC-2026-3733",[179,5350],"2026-08-25T02:16:52.890Z","2026-09-08T16:45:04.147588108Z",[5355,5357],{"type":3314,"score":5356},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3314,"score":5358},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5360,5362,5364,5366,5367,5368,5370],{"type":3426,"url":5361},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6ww7-3frv-cqxh",{"type":3332,"url":5363},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78682",{"type":3318,"url":5365},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F767333a005a1cd3d82d2029215f2dbe66a5844d9",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":5369},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3733.yaml",{"type":3332,"url":5371},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-protection-bypass-via-proxy",[3902,3903,3904],{"id":180,"slug":5374,"dossier":47,"summary":5375,"aliases":5376,"sourceIds":5379,"published":5380,"modified":5381,"checkedAt":7,"severity":5382,"references":5387,"versionKeys":5403,"packageCount":32,"repositoryCount":34},"ghsa-72r2-7mfr-5xr9-919ee5d0","NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:\u002F\u002F protocol",[5377,5378],"CVE-2026-65915","PYSEC-2026-3731",[180,5378],"2026-08-22T15:16:19.500Z","2026-09-08T15:46:56.329043767Z",[5383,5385],{"type":3351,"score":5384},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3314,"score":5386},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5388,5390,5392,5394,5396,5397,5399,5401],{"type":3426,"url":5389},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-72r2-7mfr-5xr9",{"type":3332,"url":5391},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-65915",{"type":3318,"url":5393},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3522",{"type":3318,"url":5395},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F69db9911fdba914ceeaca7aec6e892d1b14586a9",{"type":3325,"url":3894},{"type":3318,"url":5398},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3731.yaml",{"type":3318,"url":5400},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa510de7b-ffaf-4a83-9bf8-fa7e63f4bd2d",{"type":3332,"url":5402},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-file-read-via-filesystempathpointer",[3903,3904],{"id":181,"slug":5405,"dossier":47,"summary":5406,"aliases":5407,"sourceIds":5410,"published":5411,"modified":5412,"checkedAt":7,"severity":5413,"references":5415,"versionKeys":5426,"packageCount":32,"repositoryCount":650},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[5408,5409],"CVE-2026-32597","PYSEC-2026-120",[181,5409],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[5414],{"type":3351,"score":3382},[5416,5418,5420,5422,5424],{"type":3426,"url":5417},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":3332,"url":5419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":3325,"url":5421},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":3318,"url":5423},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":3318,"url":5425},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[5427,5428],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.9.0",{"id":182,"slug":5430,"dossier":47,"summary":5431,"aliases":5432,"sourceIds":5435,"published":5436,"modified":5437,"checkedAt":7,"severity":5438,"references":5440,"versionKeys":5452,"packageCount":32,"repositoryCount":650},"ghsa-763m-79hh-57f2-630348b0","pypdf: Possible long runtimes\u002Flarge memory usage when extracting XForm objects",[5433,5434],"CVE-2026-84311","PYSEC-2026-3911",[182,5434],"2026-09-01T21:27:22Z","2026-09-10T12:26:04.098858222Z",[5439],{"type":3314,"score":3315},[5441,5443,5444,5445,5446,5447,5448,5450],{"type":3318,"url":5442},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3318,"url":3321},{"type":3318,"url":3323},{"type":3325,"url":3326},{"type":3318,"url":3328},{"type":3325,"url":3330},{"type":3332,"url":5449},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3332,"url":5451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84311",[3337,3338,3339],{"id":183,"slug":5454,"dossier":47,"summary":5455,"aliases":5456,"sourceIds":5460,"published":5461,"modified":5462,"checkedAt":7,"severity":5463,"references":5469,"versionKeys":5481,"packageCount":32,"repositoryCount":66},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[5457,5458,5459],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[183,5458,5459],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[5464,5466,5468],{"type":3351,"score":5465},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3351,"score":5467},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3351,"score":3603},[5470,5472,5474,5475,5477,5479],{"type":3332,"url":5471},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":3318,"url":5473},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":3325,"url":4007},{"type":3318,"url":5476},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":3332,"url":5478},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":3332,"url":5480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[4015,4016,4017,4018],{"id":184,"slug":5483,"dossier":47,"summary":5484,"aliases":5485,"sourceIds":5488,"published":5489,"modified":5490,"checkedAt":7,"severity":5491,"references":5493,"versionKeys":5506,"packageCount":32,"repositoryCount":105},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[5486,5487],"CVE-2025-47287","PYSEC-2026-1974",[184,5487],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[5492],{"type":3351,"score":3486},[5494,5496,5498,5500,5501,5503,5504],{"type":3318,"url":5495},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":3332,"url":5497},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":3318,"url":5499},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":3325,"url":4007},{"type":3318,"url":5502},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":3325,"url":4009},{"type":3332,"url":5505},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[4015],{"id":185,"slug":5508,"dossier":47,"summary":5509,"aliases":5510,"sourceIds":5513,"published":5514,"modified":5515,"checkedAt":7,"severity":5516,"references":5518,"versionKeys":5535,"packageCount":32,"repositoryCount":621},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[5511,5512],"CVE-2025-62727","PYSEC-2026-1942",[185,5512],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[5517],{"type":3351,"score":3486},[5519,5521,5523,5525,5528,5530,5532,5533],{"type":3318,"url":5520},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":3332,"url":5522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":3389,"url":5524},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":5526,"url":5527},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":3325,"url":5529},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":3318,"url":5531},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":3325,"url":3466},{"type":3332,"url":5534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[3471,3472,5536,5537,5538],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":186,"slug":5540,"dossier":47,"summary":5541,"aliases":5542,"sourceIds":5545,"published":5546,"modified":5547,"checkedAt":7,"severity":5548,"references":5551,"versionKeys":5568,"packageCount":32,"repositoryCount":573},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[5543,5544],"CVE-2026-0994","PYSEC-2026-1805",[186,5544],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[5549],{"type":3314,"score":5550},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[5552,5554,5556,5558,5560,5562,5564,5566],{"type":3332,"url":5553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":3318,"url":5555},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":3318,"url":5557},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":3318,"url":5559},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":3318,"url":5561},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":3325,"url":5563},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":3325,"url":5565},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":3332,"url":5567},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[5569,5570,5571,5572,5573,5574,5575,5576,5577,5578],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":187,"slug":5580,"dossier":47,"summary":5581,"aliases":5582,"sourceIds":5585,"published":5586,"modified":5587,"checkedAt":7,"severity":5588,"references":5591,"versionKeys":5605,"packageCount":32,"repositoryCount":105},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[5583,5584],"CVE-2026-41312","PYSEC-2026-3011",[187,5584],"2026-04-16T21:30:00Z","2026-09-10T03:50:43.750842855Z",[5589,5590],{"type":3351,"score":4278},{"type":3314,"score":4280},[5592,5594,5596,5598,5600,5601,5602,5603],{"type":3318,"url":5593},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":3332,"url":5595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":3318,"url":5597},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":3318,"url":5599},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":3325,"url":3326},{"type":3318,"url":4292},{"type":3325,"url":3330},{"type":3332,"url":5604},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[3337,3338],{"id":188,"slug":5607,"dossier":47,"summary":5608,"aliases":5609,"sourceIds":5612,"published":5613,"modified":5614,"checkedAt":7,"severity":5615,"references":5617,"versionKeys":5634,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[5610,5611],"CVE-2025-55197","PYSEC-2026-1830",[188,5611],"2025-08-13T19:51:24Z","2026-09-10T03:50:26.651449913Z",[5616],{"type":3314,"score":4179},[5618,5620,5622,5624,5626,5627,5629,5631,5632],{"type":3318,"url":5619},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":3332,"url":5621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":3318,"url":5623},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":3318,"url":5625},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":3325,"url":3326},{"type":3318,"url":5628},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":3318,"url":5630},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":3325,"url":3330},{"type":3332,"url":5633},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[3337],{"id":189,"slug":5636,"dossier":47,"summary":5637,"aliases":5638,"sourceIds":5641,"published":5642,"modified":5643,"checkedAt":7,"severity":5644,"references":5647,"versionKeys":5663,"packageCount":32,"repositoryCount":34},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[5639,5640],"CVE-2025-14009","PYSEC-2026-96",[189,5640],"2026-02-18T18:24:19.410Z","2026-09-10T03:50:34.416389229Z",[5645],{"type":3351,"score":5646},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5648,5650,5652,5654,5655,5657,5659,5661],{"type":3332,"url":5649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":3318,"url":5651},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":3318,"url":5653},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":3325,"url":3894},{"type":3318,"url":5656},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":3318,"url":5658},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":3426,"url":5660},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":3332,"url":5662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3903,3904],{"id":190,"slug":5665,"dossier":47,"summary":5666,"aliases":5667,"sourceIds":5670,"published":5671,"modified":5672,"checkedAt":7,"severity":5673,"references":5675,"versionKeys":5679,"packageCount":32,"repositoryCount":3615},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[5668,5669],"CVE-2026-54283","PYSEC-2026-249",[190,5669],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[5674],{"type":3351,"score":3486},[5676,5678],{"type":3332,"url":5677},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":3325,"url":5529},[3470,3471,3472,5536,5537,5538,5680,5681,5682],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":191,"slug":5684,"dossier":47,"summary":5685,"aliases":5686,"sourceIds":5689,"published":5690,"modified":5691,"checkedAt":7,"severity":5692,"references":5694,"versionKeys":5703,"packageCount":32,"repositoryCount":631},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[5687,5688],"CVE-2026-49477","PYSEC-2026-3072",[191,5688],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[5693],{"type":3351,"score":3486},[5695,5697,5698,5699,5701],{"type":3318,"url":5696},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3325,"url":3631},{"type":3325,"url":3633},{"type":3332,"url":5700},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3332,"url":5702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[3639,3640,3641],{"id":192,"slug":5705,"dossier":47,"summary":5706,"aliases":5707,"sourceIds":5709,"published":5710,"modified":5711,"checkedAt":7,"severity":5712,"references":5714,"versionKeys":5726,"packageCount":32,"repositoryCount":42},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[5708],"CVE-2026-91990",[192],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[5713],{"type":3314,"score":3855},[5715,5717,5719,5721,5723,5724],{"type":3318,"url":5716},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":3318,"url":5718},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":3318,"url":5720},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":3318,"url":5722},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":3325,"url":4007},{"type":3318,"url":5725},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[4015,4016,4017,4018,4019,5727],"pypi:tornado@6.5.7",{"id":193,"slug":5729,"dossier":47,"summary":5730,"aliases":5731,"sourceIds":5734,"published":5735,"modified":5736,"checkedAt":7,"severity":5737,"references":5742,"versionKeys":5761,"packageCount":32,"repositoryCount":34},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[5732,5733],"CVE-2025-71408","PYSEC-2026-3657",[193,5733],"2026-07-24T22:16:50.063Z","2026-08-19T12:15:03.319052318Z",[5738,5739,5740],{"type":3351,"score":5173},{"type":3314,"score":5175},{"type":3314,"score":5741},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5743,5745,5747,5749,5751,5752,5753,5755,5757,5759],{"type":3332,"url":5744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":3389,"url":5746},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":3389,"url":5748},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":3318,"url":5750},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":3325,"url":3894},{"type":3332,"url":4882},{"type":3318,"url":5754},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":3389,"url":5756},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":3426,"url":5758},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",{"type":3332,"url":5760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-848c-c2cx-j7qx",[3903,3904],{"id":194,"slug":5763,"dossier":47,"summary":5764,"aliases":5765,"sourceIds":5769,"published":5770,"modified":5771,"checkedAt":7,"severity":5772,"references":5775,"versionKeys":5812,"packageCount":32,"repositoryCount":3615},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[5766,5767,5768],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[194,5767],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[5773],{"type":3351,"score":5774},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5776,5778,5780,5782,5784,5786,5788,5790,5792,5794,5795,5797,5800,5802,5804,5806,5808,5810],{"type":3332,"url":5777},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":3332,"url":5779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":3389,"url":5781},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":3318,"url":5783},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":3396,"url":5785},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":3318,"url":5787},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":3318,"url":5789},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":3318,"url":5791},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":3318,"url":5793},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":3325,"url":5529},{"type":3318,"url":5796},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":5798,"url":5799},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":3318,"url":5801},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":3318,"url":5803},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":3318,"url":5805},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":3318,"url":5807},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":3396,"url":5809},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":3332,"url":5811},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[3470,3471,3472,5536,5537,5538,5680,5681,5682],{"id":195,"slug":5814,"dossier":47,"summary":5815,"aliases":5816,"sourceIds":5819,"published":5820,"modified":5821,"checkedAt":7,"severity":5822,"references":5825,"versionKeys":5838,"packageCount":32,"repositoryCount":105},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[5817,5818],"CVE-2026-33699","PYSEC-2026-3012",[195,5818],"2026-03-25T20:05:22Z","2026-09-10T03:51:00.069856672Z",[5823],{"type":3314,"score":5824},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5826,5828,5830,5832,5833,5835,5836],{"type":3318,"url":5827},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":3332,"url":5829},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":3318,"url":5831},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":3325,"url":3326},{"type":3318,"url":5834},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":3325,"url":3330},{"type":3332,"url":5837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[3337,3338],{"id":196,"slug":5840,"dossier":47,"summary":5841,"aliases":5842,"sourceIds":5846,"published":5847,"modified":5848,"checkedAt":7,"severity":5849,"references":5853,"versionKeys":5875,"packageCount":32,"repositoryCount":583},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[5843,5844,5845],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[196,5845],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[5850,5851],{"type":3351,"score":3713},{"type":3314,"score":5852},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5854,5856,5858,5860,5862,5864,5865,5867,5869,5871,5873],{"type":3332,"url":5855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":3318,"url":5857},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":3318,"url":5859},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":3318,"url":5861},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":3318,"url":5863},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":3325,"url":3729},{"type":3318,"url":5866},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":3318,"url":5868},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":3318,"url":5870},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":3325,"url":5872},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":3332,"url":5874},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[3741,3742,3743,5876,5877],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":197,"slug":5879,"dossier":47,"summary":5880,"aliases":5881,"sourceIds":5884,"published":5885,"modified":5886,"checkedAt":7,"severity":5887,"references":5894,"versionKeys":5916,"packageCount":32,"repositoryCount":631},"ghsa-8mgp-746c-j5xp-7f3a80b8","NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots",[5882,5883],"CVE-2026-81726","PYSEC-2026-3740",[197,5883],"2026-08-27T17:21:03.387Z","2026-09-02T14:45:06.878867805Z",[5888,5890,5892],{"type":3351,"score":5889},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3314,"score":5891},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3314,"score":5893},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5895,5897,5899,5901,5903,5905,5907,5909,5911,5912,5914],{"type":3426,"url":5896},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mgp-746c-j5xp",{"type":3332,"url":5898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81726",{"type":3318,"url":5900},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3757",{"type":3318,"url":5902},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3759",{"type":3318,"url":5904},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3813",{"type":3318,"url":5906},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F2a92b71827d754ae8920261e7ed0c4bb283ab2d7",{"type":3318,"url":5908},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fa44a7af69bca87e92d9c4a701fcbbe4512e8d450",{"type":3318,"url":5910},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fcbc98458b43de5f792f0382583c16df39e5c5117",{"type":3325,"url":3894},{"type":3318,"url":5913},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3740.yaml",{"type":3332,"url":5915},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-3.10.3-path-traversal-via-model-artifact-apis",[3902,3903,3904],{"id":198,"slug":5918,"dossier":47,"summary":5919,"aliases":5920,"sourceIds":5923,"published":5924,"modified":5925,"checkedAt":7,"severity":5926,"references":5931,"versionKeys":5944,"packageCount":32,"repositoryCount":631},"ghsa-8mpw-7fpc-4gqj-e47ea3c3","NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks",[5921,5922],"CVE-2026-81725","PYSEC-2026-3752",[198,5922],"2026-08-27T17:21:03.247Z","2026-09-08T20:45:04.346016767Z",[5927,5929],{"type":3314,"score":5928},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3314,"score":5930},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5932,5934,5936,5938,5939,5940,5942],{"type":3426,"url":5933},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpw-7fpc-4gqj",{"type":3332,"url":5935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81725",{"type":3318,"url":5937},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7808692d451b962711005d954859bb83aabcf8fa",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":5941},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3752.yaml",{"type":3332,"url":5943},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-regular-expression-denial-of-service-via-pl196xcorpusreader",[3902,3903,3904],{"id":199,"slug":5946,"dossier":47,"summary":5947,"aliases":5948,"sourceIds":5951,"published":5952,"modified":5953,"checkedAt":7,"severity":5954,"references":5957,"versionKeys":5976,"packageCount":32,"repositoryCount":650},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[5949,5950],"CVE-2025-4565","PYSEC-2026-1806",[199,5950],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[5955],{"type":3314,"score":5956},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5958,5960,5962,5964,5966,5967,5969,5971,5973,5974],{"type":3318,"url":5959},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":3318,"url":5961},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":3332,"url":5963},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":3318,"url":5965},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":3325,"url":5563},{"type":3318,"url":5968},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":3318,"url":5970},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":3318,"url":5972},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":3325,"url":5565},{"type":3332,"url":5975},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[5569,5571,5572],{"id":200,"slug":5978,"dossier":90,"summary":5979,"aliases":5980,"sourceIds":5984,"published":5985,"modified":5986,"checkedAt":7,"severity":5987,"references":5989,"versionKeys":5999,"packageCount":32,"repositoryCount":4082},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[5981,5982,5983],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[200,5983],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[5988],{"type":3351,"score":3486},[5990,5992,5994,5995,5997,5998],{"type":3426,"url":5991},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":3332,"url":5993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":3389,"url":4065},{"type":3318,"url":5996},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":3325,"url":4069},{"type":3332,"url":4071},[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":201,"slug":6001,"dossier":47,"summary":6002,"aliases":6003,"sourceIds":6006,"published":6007,"modified":6008,"checkedAt":7,"severity":6009,"references":6011,"versionKeys":6024,"packageCount":32,"repositoryCount":34},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[6004,6005],"CVE-2025-5197","PYSEC-2026-1983",[201,6005],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[6010],{"type":3351,"score":4341},[6012,6014,6016,6018,6019,6021,6022],{"type":3332,"url":6013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":3318,"url":6015},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":3318,"url":6017},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":3325,"url":3424},{"type":3318,"url":6020},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":3325,"url":3766},{"type":3332,"url":6023},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[3431,3432,3433,3434],{"id":202,"slug":6026,"dossier":47,"summary":6027,"aliases":6028,"sourceIds":6031,"published":6032,"modified":6033,"checkedAt":7,"severity":6034,"references":6037,"versionKeys":6048,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[6029,6030],"CVE-2025-53643","PYSEC-2026-1104",[202,6030],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[6035],{"type":3314,"score":6036},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6038,6040,6042,6044,6045,6046],{"type":3318,"url":6039},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":3332,"url":6041},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":3389,"url":6043},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":6047},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[3495,3496,3497,3498],{"id":203,"slug":6050,"dossier":47,"summary":6051,"aliases":6052,"sourceIds":6055,"published":6056,"modified":6057,"checkedAt":7,"severity":6058,"references":6062,"versionKeys":6071,"packageCount":32,"repositoryCount":3615},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[6053,6054],"CVE-2026-34518","PYSEC-2026-2100",[203,6054],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[6059,6061],{"type":3351,"score":6060},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3314,"score":4529},[6063,6065,6067,6069,6070],{"type":3389,"url":6064},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":3332,"url":6066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":3389,"url":6068},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":204,"slug":6073,"dossier":47,"summary":6074,"aliases":6075,"sourceIds":6078,"published":6079,"modified":6080,"checkedAt":7,"severity":6081,"references":6085,"versionKeys":6098,"packageCount":32,"repositoryCount":631},"ghsa-97qj-x29f-37w7-98509369","NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses",[6076,6077],"CVE-2026-78681","PYSEC-2026-3748",[204,6077],"2026-08-25T02:16:52.750Z","2026-09-08T16:45:04.193148017Z",[6082,6083],{"type":3314,"score":4651},{"type":3314,"score":6084},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6086,6088,6090,6092,6093,6094,6096],{"type":3426,"url":6087},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-97qj-x29f-37w7",{"type":3332,"url":6089},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78681",{"type":3318,"url":6091},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe91789c9a043296ad04912ce171c22776d45963b",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":6095},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3748.yaml",{"type":3332,"url":6097},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-entity-expansion-dos-via-elementtree",[3902,3903,3904],{"id":205,"slug":6100,"dossier":47,"summary":6101,"aliases":6102,"sourceIds":6105,"published":6106,"modified":6107,"checkedAt":7,"severity":6108,"references":6111,"versionKeys":6121,"packageCount":32,"repositoryCount":650},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[6103,6104],"CVE-2026-48522","PYSEC-2026-175",[205,6104],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[6109],{"type":3351,"score":6110},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6112,6114,6116,6118,6119],{"type":3426,"url":6113},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":3332,"url":6115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":3318,"url":6117},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":3325,"url":5421},{"type":3318,"url":6120},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[5427,5428],{"id":206,"slug":6123,"dossier":47,"summary":6124,"aliases":6125,"sourceIds":6128,"published":6129,"modified":6130,"checkedAt":7,"severity":6131,"references":6133,"versionKeys":6148,"packageCount":32,"repositoryCount":105},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[6126,6127],"CVE-2026-27024","PYSEC-2026-3013",[206,6127],"2026-02-18T22:40:49Z","2026-09-10T03:50:34.616221084Z",[6132],{"type":3314,"score":4477},[6134,6136,6138,6140,6142,6143,6145,6146],{"type":3318,"url":6135},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":3332,"url":6137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":3318,"url":6139},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":3318,"url":6141},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":3325,"url":3326},{"type":3318,"url":6144},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":3325,"url":3330},{"type":3332,"url":6147},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[3337,3338],{"id":207,"slug":6150,"dossier":47,"summary":6151,"aliases":6152,"sourceIds":6155,"published":6156,"modified":6157,"checkedAt":7,"severity":6158,"references":6160,"versionKeys":6171,"packageCount":32,"repositoryCount":32},"ghsa-9f4q-q82q-4359-c9ca91c1","Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks",[6153,6154],"CVE-2026-31248","PYSEC-2026-2454",[207,6154],"2026-05-11T18:31:44Z","2026-07-13T16:43:41.210892318Z",[6159],{"type":3351,"score":3486},[6161,6163,6165,6167,6169],{"type":3332,"url":6162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31248",{"type":3325,"url":6164},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling",{"type":3318,"url":6166},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31248-35d1e1393188818585b2ce3b9ce24686",{"type":3325,"url":6168},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling",{"type":3332,"url":6170},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9f4q-q82q-4359",[6172],"pypi:docling@2.58.0",{"id":208,"slug":6174,"dossier":47,"summary":6175,"aliases":6176,"sourceIds":6179,"published":6180,"modified":6181,"checkedAt":7,"severity":6182,"references":6185,"versionKeys":6200,"packageCount":32,"repositoryCount":650},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[6177,6178],"CVE-2025-66416","PYSEC-2026-1617",[208,6178],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[6183],{"type":3314,"score":6184},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6186,6188,6190,6192,6194,6196,6198],{"type":3318,"url":6187},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3332,"url":6189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":3318,"url":6191},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":3332,"url":6193},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3325,"url":6195},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":3318,"url":6197},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":3325,"url":6199},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[6201,6202,6203],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0",{"id":209,"slug":6205,"dossier":47,"summary":6206,"aliases":6207,"sourceIds":6210,"published":6211,"modified":6212,"checkedAt":7,"severity":6213,"references":6216,"versionKeys":6235,"packageCount":32,"repositoryCount":583},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[6208,6209],"CVE-2024-47081","PYSEC-2026-1872",[209,6209],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[6214],{"type":3351,"score":6215},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6217,6219,6221,6223,6225,6227,6229,6231,6233],{"type":3318,"url":6218},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3332,"url":6220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":3318,"url":6222},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":3389,"url":6224},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":3325,"url":6226},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":3318,"url":6228},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":3318,"url":6230},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":3325,"url":6232},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":3332,"url":6234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[6236,6237],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":210,"slug":6239,"dossier":90,"summary":6240,"aliases":6241,"sourceIds":6245,"published":6246,"modified":6247,"checkedAt":7,"severity":6248,"references":6250,"versionKeys":6263,"packageCount":32,"repositoryCount":4082},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[6242,6243,6244],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[210,6244],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[6249],{"type":3351,"score":3486},[6251,6253,6255,6257,6259,6261,6262],{"type":3426,"url":6252},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":3332,"url":6254},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":3389,"url":6256},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":3389,"url":6258},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":3318,"url":6260},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":3325,"url":4069},{"type":3332,"url":4988},[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":211,"slug":6265,"dossier":47,"summary":6266,"aliases":6267,"sourceIds":6270,"published":6271,"modified":6272,"checkedAt":7,"severity":6273,"references":6275,"versionKeys":6290,"packageCount":32,"repositoryCount":105},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[6268,6269],"CVE-2026-28804","PYSEC-2026-3014",[211,6269],"2026-03-02T22:03:45Z","2026-09-10T03:50:38.603469156Z",[6274],{"type":3314,"score":3855},[6276,6278,6280,6282,6284,6285,6287,6288],{"type":3318,"url":6277},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":3332,"url":6279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":3318,"url":6281},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":3318,"url":6283},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":3325,"url":3326},{"type":3318,"url":6286},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":3325,"url":3330},{"type":3332,"url":6289},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[3337,3338],{"id":212,"slug":6292,"dossier":47,"summary":6293,"aliases":6294,"sourceIds":6297,"published":6298,"modified":6299,"checkedAt":7,"severity":6300,"references":6302,"versionKeys":6316,"packageCount":32,"repositoryCount":105},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[6295,6296],"CVE-2026-27026","PYSEC-2026-3015",[212,6296],"2026-02-18T22:41:24Z","2026-09-10T03:50:34.680998937Z",[6301],{"type":3314,"score":4477},[6303,6305,6307,6309,6311,6312,6313,6314],{"type":3318,"url":6304},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":3332,"url":6306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":3318,"url":6308},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":3318,"url":6310},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":3325,"url":3326},{"type":3318,"url":6144},{"type":3325,"url":3330},{"type":3332,"url":6315},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[3337,3338],{"id":213,"slug":6318,"dossier":47,"summary":6319,"aliases":6320,"sourceIds":6323,"published":6324,"modified":6325,"checkedAt":7,"severity":6326,"references":6329,"versionKeys":6346,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[6321,6322],"CVE-2024-35195","PYSEC-2026-1873",[213,6322],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[6327],{"type":3351,"score":6328},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6330,6332,6334,6336,6338,6339,6341,6343,6344],{"type":3318,"url":6331},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":3332,"url":6333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":3318,"url":6335},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":3389,"url":6337},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":3325,"url":6226},{"type":3318,"url":6340},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":3318,"url":6342},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":3325,"url":6232},{"type":3332,"url":6345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[6236],{"id":214,"slug":6348,"dossier":47,"summary":6349,"aliases":6350,"sourceIds":6353,"published":6354,"modified":6355,"checkedAt":7,"severity":6356,"references":6360,"versionKeys":6366,"packageCount":32,"repositoryCount":42},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[6351,6352],"CVE-2026-54280","PYSEC-2026-2113",[214,6352],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[6357,6359],{"type":3314,"score":6358},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3351,"score":3486},[6361,6363,6365],{"type":3332,"url":6362},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":3389,"url":6364},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":3325,"url":3491},[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":215,"slug":6368,"dossier":47,"summary":6369,"aliases":6370,"sourceIds":6373,"published":6374,"modified":6375,"checkedAt":7,"severity":6376,"references":6380,"versionKeys":6391,"packageCount":32,"repositoryCount":3615},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[6371,6372],"CVE-2026-34525","PYSEC-2026-2103",[215,6372],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[6377,6379],{"type":3314,"score":6378},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3351,"score":3603},[6381,6383,6385,6387,6389,6390],{"type":3389,"url":6382},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":3332,"url":6384},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":3389,"url":6386},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":3389,"url":6388},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":216,"slug":6393,"dossier":47,"summary":6394,"aliases":6395,"sourceIds":6399,"published":6400,"modified":6401,"checkedAt":7,"severity":6402,"references":6407,"versionKeys":6423,"packageCount":32,"repositoryCount":105},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[6396,6397,6398],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[216],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[6403,6405],{"type":3351,"score":6404},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":3314,"score":6406},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6408,6410,6412,6414,6415,6417,6419,6421],{"type":3332,"url":6409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":3318,"url":6411},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":3318,"url":6413},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":3325,"url":3729},{"type":3318,"url":6416},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":3318,"url":6418},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":3318,"url":6420},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":3318,"url":6422},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[3741,3742],{"id":217,"slug":6425,"dossier":47,"summary":6426,"aliases":6427,"sourceIds":6430,"published":6431,"modified":6432,"checkedAt":7,"severity":6433,"references":6435,"versionKeys":6447,"packageCount":32,"repositoryCount":583},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[6428,6429],"CVE-2025-67725","PYSEC-2025-266",[217,6429],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[6434],{"type":3351,"score":3486},[6436,6438,6440,6442,6444,6445],{"type":3332,"url":6437},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":3332,"url":6439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":3389,"url":6441},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":3318,"url":6443},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":3325,"url":4007},{"type":3332,"url":6446},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[4015,4016,4017],{"id":218,"slug":6449,"dossier":47,"summary":6450,"aliases":6451,"sourceIds":6455,"published":6456,"modified":6457,"checkedAt":7,"severity":6458,"references":6462,"versionKeys":6500,"packageCount":32,"repositoryCount":4465},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[6452,6453,6454],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[218,6454],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[6459,6461],{"type":3314,"score":6460},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3351,"score":3486},[6463,6465,6467,6469,6471,6473,6474,6476,6478,6480,6481,6483,6485,6487,6488,6490,6492,6494,6496,6498],{"type":3318,"url":6464},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":3332,"url":6466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":3318,"url":6468},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":3318,"url":6470},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":3318,"url":6472},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":3325,"url":4069},{"type":3318,"url":6475},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":3318,"url":6477},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":3318,"url":6479},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":3332,"url":3823},{"type":3332,"url":6482},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":3332,"url":6484},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":3332,"url":6486},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":3332,"url":4109},{"type":3332,"url":6489},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":3332,"url":6491},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":3332,"url":6493},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":3332,"url":6495},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":3332,"url":6497},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":3332,"url":6499},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4073,4074,4075,4076,4077,4078,4079],{"id":219,"slug":6502,"dossier":47,"summary":6503,"aliases":6504,"sourceIds":6507,"published":6508,"modified":6509,"checkedAt":7,"severity":6510,"references":6512,"versionKeys":6523,"packageCount":32,"repositoryCount":32},"ghsa-cgwc-pv48-fhj5-6739bcab","python-engineio has unbound thread allocation that can cause denial of service",[6505,6506],"CVE-2026-48802","PYSEC-2026-3032",[219,6506],"2026-06-26T20:51:37Z","2026-07-13T16:42:35.099677221Z",[6511],{"type":3351,"score":3486},[6513,6515,6517,6519,6521],{"type":3318,"url":6514},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3325,"url":6516},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio",{"type":3325,"url":6518},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-engineio",{"type":3332,"url":6520},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3332,"url":6522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48802",[6524],"pypi:python-engineio@4.12.3",{"id":220,"slug":6526,"dossier":47,"summary":6527,"aliases":6528,"sourceIds":6531,"published":6532,"modified":6533,"checkedAt":7,"severity":6534,"references":6536,"versionKeys":6548,"packageCount":32,"repositoryCount":105},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[6529,6530],"CVE-2026-48155","PYSEC-2026-3016",[220,6530],"2026-06-12T18:29:15Z","2026-09-10T03:51:08.468487559Z",[6535],{"type":3314,"score":3315},[6537,6539,6541,6543,6544,6545,6546],{"type":3318,"url":6538},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":3332,"url":6540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":3318,"url":6542},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":3325,"url":3326},{"type":3318,"url":3366},{"type":3325,"url":3330},{"type":3332,"url":6547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[3337,3338],{"id":221,"slug":6550,"dossier":47,"summary":6551,"aliases":6552,"sourceIds":6555,"published":6556,"modified":6557,"checkedAt":7,"severity":6558,"references":6561,"versionKeys":6578,"packageCount":32,"repositoryCount":32},"ghsa-cjqg-rq2h-2fvj-04722096","Docling: Unsafe Zip Extraction in EasyOCR Model Download",[6553,6554],"CVE-2026-44017","PYSEC-2026-2143",[221,6554],"2026-06-03T20:02:42Z","2026-08-28T18:45:06.860507459Z",[6559],{"type":3351,"score":6560},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6562,6564,6566,6567,6569,6571,6572,6574,6576],{"type":3389,"url":6563},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-cjqg-rq2h-2fvj",{"type":3332,"url":6565},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44017",{"type":3318,"url":5803},{"type":3318,"url":6568},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44017",{"type":3722,"url":6570},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492448",{"type":3325,"url":6164},{"type":3332,"url":6573},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.91.0",{"type":3318,"url":6575},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2143.yaml",{"type":3318,"url":6577},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44017.json",[6172],{"id":222,"slug":6580,"dossier":47,"summary":6581,"aliases":6582,"sourceIds":6585,"published":6586,"modified":6587,"checkedAt":7,"severity":6588,"references":6591,"versionKeys":6608,"packageCount":32,"repositoryCount":105},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[6583,6584],"CVE-2025-27516","PYSEC-2026-1471",[222,6584],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[6589],{"type":3314,"score":6590},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6592,6594,6596,6598,6600,6602,6604,6606],{"type":3318,"url":6593},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":3332,"url":6595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":3389,"url":6597},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":3325,"url":6599},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":3318,"url":6601},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":3318,"url":6603},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":3325,"url":6605},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":3332,"url":6607},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[6609,6610],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":223,"slug":6612,"dossier":47,"summary":6613,"aliases":6614,"sourceIds":6617,"published":6618,"modified":6619,"checkedAt":7,"severity":6620,"references":6623,"versionKeys":6638,"packageCount":32,"repositoryCount":573},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[6615,6616],"CVE-2026-69244","PYSEC-2026-3545",[223,6616],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[6621],{"type":3314,"score":6622},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6624,6626,6628,6630,6631,6633,6634,6636],{"type":3318,"url":6625},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3318,"url":6627},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":3318,"url":6629},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":3325,"url":3491},{"type":3318,"url":6632},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":3325,"url":4539},{"type":3332,"url":6635},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3332,"url":6637},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[3495,3496,3497,3498,3499,3500,3501,3502,3503,6639],"pypi:aiohttp@3.14.1",{"id":224,"slug":6641,"dossier":47,"summary":6642,"aliases":6643,"sourceIds":6646,"published":6647,"modified":6648,"checkedAt":7,"severity":6649,"references":6651,"versionKeys":6660,"packageCount":32,"repositoryCount":32},"ghsa-cr42-rg2m-mq4q-72336d81","Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks",[6644,6645],"CVE-2026-31247","PYSEC-2026-2455",[224,6645],"2026-05-11T18:31:43Z","2026-07-13T16:43:07.440539926Z",[6650],{"type":3351,"score":3486},[6652,6654,6655,6657,6658],{"type":3332,"url":6653},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31247",{"type":3325,"url":6164},{"type":3318,"url":6656},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31247-35d1e1393188818fa654c116c6a470bb",{"type":3325,"url":6168},{"type":3332,"url":6659},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cr42-rg2m-mq4q",[6172],{"id":225,"slug":6662,"dossier":47,"summary":6663,"aliases":6664,"sourceIds":6667,"published":6668,"modified":6669,"checkedAt":7,"severity":6670,"references":6677,"versionKeys":6690,"packageCount":32,"repositoryCount":32},"ghsa-cv22-g7mw-8v73-34774163","NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure",[6665,6666],"CVE-2026-71514","PYSEC-2026-3790",[225,6666],"2026-08-22T14:16:33.560Z","2026-09-10T11:15:08.990306396Z",[6671,6673,6675],{"type":3351,"score":6672},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3314,"score":6674},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3351,"score":6676},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6678,6680,6682,6683,6685,6686,6688],{"type":3332,"url":6679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71514",{"type":3389,"url":6681},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F10d34b3f4fe3fec74b76527a409eb0acbac2e8ab",{"type":3325,"url":3894},{"type":3389,"url":6684},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fcorpus\u002Freader\u002Fcrubadan.py#L90-L98",{"type":3318,"url":3896},{"type":3332,"url":6687},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-path-traversal-via-crubadancorpusreader-pathsec-bypass",{"type":3332,"url":6689},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cv22-g7mw-8v73",[3902],{"id":226,"slug":6692,"dossier":47,"summary":6693,"aliases":6694,"sourceIds":6697,"published":6698,"modified":6699,"checkedAt":7,"severity":6700,"references":6705,"versionKeys":6718,"packageCount":32,"repositoryCount":631},"ghsa-cw6x-m8jw-qmrh-dd458a88","NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input",[6695,6696],"CVE-2026-81724","PYSEC-2026-3739",[226,6696],"2026-08-27T17:21:03.100Z","2026-09-10T03:51:15.361788366Z",[6701,6702,6703],{"type":3351,"score":3451},{"type":3314,"score":3855},{"type":3314,"score":6704},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6706,6708,6710,6712,6713,6714,6716],{"type":3426,"url":6707},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-cw6x-m8jw-qmrh",{"type":3332,"url":6709},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81724",{"type":3318,"url":6711},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43c7b78cc8ea37e5cd3a129e27e32c415ea21cf1",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":6715},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3739.yaml",{"type":3332,"url":6717},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-denial-of-service-via-uncontrolled-recursion",[3902,3903,3904],{"id":227,"slug":6720,"dossier":47,"summary":6721,"aliases":6722,"sourceIds":6725,"published":6726,"modified":6727,"checkedAt":7,"severity":6728,"references":6731,"versionKeys":6742,"packageCount":32,"repositoryCount":66},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[6723,6724],"CVE-2026-49854","PYSEC-2026-3388",[227,6724],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[6729],{"type":3351,"score":6730},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6732,6734,6735,6737,6738,6740],{"type":3318,"url":6733},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3325,"url":4007},{"type":3318,"url":6736},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":3325,"url":4009},{"type":3332,"url":6739},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3332,"url":6741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[4015,4016,4017,4018,4019],{"id":228,"slug":6744,"dossier":47,"summary":6745,"aliases":6746,"sourceIds":6750,"published":6751,"modified":6752,"checkedAt":7,"severity":6753,"references":6757,"versionKeys":6773,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[6747,6748,6749],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[228,6749],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[6754,6755],{"type":3351,"score":4701},{"type":3314,"score":6756},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6758,6760,6762,6764,6765,6767,6769,6771],{"type":3332,"url":6759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":3318,"url":6761},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":3318,"url":6763},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":3325,"url":4797},{"type":3318,"url":6766},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":3318,"url":6768},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":3325,"url":6770},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":3332,"url":6772},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[4803],{"id":229,"slug":6775,"dossier":47,"summary":6776,"aliases":6777,"sourceIds":6780,"published":6781,"modified":6782,"checkedAt":7,"severity":6783,"references":6785,"versionKeys":6800,"packageCount":32,"repositoryCount":105},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[6778,6779],"CVE-2026-28351","PYSEC-2026-3017",[229,6779],"2026-02-28T02:46:10Z","2026-09-10T03:50:34.825129703Z",[6784],{"type":3314,"score":3855},[6786,6788,6790,6792,6794,6795,6797,6798],{"type":3318,"url":6787},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":3332,"url":6789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":3318,"url":6791},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":3318,"url":6793},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":3325,"url":3326},{"type":3318,"url":6796},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":3325,"url":3330},{"type":3332,"url":6799},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[3337,3338],{"id":230,"slug":6802,"dossier":47,"summary":6803,"aliases":6804,"sourceIds":6808,"published":6809,"modified":6810,"checkedAt":7,"severity":6811,"references":6815,"versionKeys":6833,"packageCount":32,"repositoryCount":105},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[6805,6806,6807],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[230],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[6812,6813],{"type":3351,"score":4419},{"type":3314,"score":6814},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6816,6818,6820,6822,6824,6826,6827,6829,6831],{"type":3332,"url":6817},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":3318,"url":6819},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":3318,"url":6821},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":3318,"url":6823},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":3318,"url":6825},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":3325,"url":3729},{"type":3318,"url":6828},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":3318,"url":6830},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":3318,"url":6832},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[3741,3742],{"id":231,"slug":6835,"dossier":47,"summary":6836,"aliases":6837,"sourceIds":6840,"published":6841,"modified":6842,"checkedAt":7,"severity":6843,"references":6850,"versionKeys":6865,"packageCount":32,"repositoryCount":631},"ghsa-f794-5jv7-7672-f614e21f","NLTK: Downloader.download follows hardlinks and overwrites outside-root files",[6838,6839],"CVE-2026-81727","PYSEC-2026-3741",[231,6839],"2026-08-27T17:21:03.533Z","2026-09-10T03:51:15.298800760Z",[6844,6846,6848],{"type":3351,"score":6845},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3314,"score":6847},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3314,"score":6849},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6851,6853,6855,6857,6859,6860,6861,6863],{"type":3426,"url":6852},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f794-5jv7-7672",{"type":3332,"url":6854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81727",{"type":3318,"url":6856},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3797",{"type":3318,"url":6858},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F9e6d5f05902b9aaa1221a0a565448d17a9c9b3e8",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":6862},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3741.yaml",{"type":3332,"url":6864},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-hardlink-file-overwrite-via-downloader",[3902,3903,3904],{"id":232,"slug":6867,"dossier":47,"summary":6868,"aliases":6869,"sourceIds":6872,"published":6873,"modified":6874,"checkedAt":7,"severity":6875,"references":6879,"versionKeys":6894,"packageCount":32,"repositoryCount":32},"ghsa-f833-7jw8-xwrv-24f4d846","NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)",[6870,6871],"CVE-2026-62384","PYSEC-2026-3789",[232,6871],"2026-08-22T15:16:18.700Z","2026-09-08T16:45:03.613881599Z",[6876,6877,6878],{"type":3351,"score":4585},{"type":3314,"score":5356},{"type":3314,"score":5358},[6880,6882,6884,6886,6888,6889,6890,6892],{"type":3426,"url":6881},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f833-7jw8-xwrv",{"type":3332,"url":6883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62384",{"type":3318,"url":6885},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3726",{"type":3318,"url":6887},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F736d3212a47de2005b85b785dde6720556d3925d",{"type":3325,"url":3894},{"type":3318,"url":3963},{"type":3318,"url":6891},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3789.yaml",{"type":3332,"url":6893},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-framenetcorpusreader-symlink-sandbox-bypass-before",[3902],{"id":233,"slug":6896,"dossier":47,"summary":6897,"aliases":6898,"sourceIds":6901,"published":6902,"modified":6903,"checkedAt":7,"severity":6904,"references":6908,"versionKeys":6919,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[6899,6900],"CVE-2024-47874","PYSEC-2026-1943",[233,6900],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[6905,6907],{"type":3351,"score":6906},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":3314,"score":4651},[6909,6911,6913,6915,6916,6917],{"type":3318,"url":6910},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":3332,"url":6912},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":3389,"url":6914},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":3325,"url":3460},{"type":3325,"url":3466},{"type":3332,"url":6918},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[3470],{"id":234,"slug":6921,"dossier":47,"summary":6922,"aliases":6923,"sourceIds":6926,"published":6927,"modified":6928,"checkedAt":7,"severity":6929,"references":6931,"versionKeys":6946,"packageCount":32,"repositoryCount":650},"ghsa-fc8x-2rww-xw9m-a14a13c8","pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace",[6924,6925],"CVE-2026-82398","PYSEC-2026-3912",[234,6925],"2026-09-02T14:38:12Z","2026-09-10T12:25:53.327187326Z",[6930],{"type":3314,"score":3855},[6932,6934,6936,6938,6940,6941,6943,6944],{"type":3318,"url":6933},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",{"type":3332,"url":6935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82398",{"type":3318,"url":6937},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3947",{"type":3318,"url":6939},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F4959848e057e37c218dccad7465259210923faaa",{"type":3325,"url":3326},{"type":3318,"url":6942},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.15.0",{"type":3325,"url":3330},{"type":3332,"url":6945},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",[3337,3338,3339],{"id":235,"slug":6948,"dossier":47,"summary":6949,"aliases":6950,"sourceIds":6953,"published":6954,"modified":6955,"checkedAt":7,"severity":6956,"references":6958,"versionKeys":6972,"packageCount":32,"repositoryCount":631},"ghsa-ff5c-cp5c-9wjf-c6e516dd","NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars",[6951,6952],"CVE-2026-12876","PYSEC-2026-3869",[235,6952],"2026-09-02T14:33:38Z","2026-09-10T12:25:59.672261950Z",[6957],{"type":3314,"score":3855},[6959,6961,6963,6965,6966,6967,6968,6970],{"type":3318,"url":6960},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3318,"url":6962},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3649",{"type":3318,"url":6964},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43aaca1b9024138421c97f970bf13ee19ac8129d",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3325,"url":4715},{"type":3332,"url":6969},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3332,"url":6971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12876",[3902,3903,3904],{"id":236,"slug":6974,"dossier":47,"summary":6975,"aliases":6976,"sourceIds":6979,"published":6980,"modified":6981,"checkedAt":7,"severity":6982,"references":6984,"versionKeys":6993,"packageCount":32,"repositoryCount":34},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[6977,6978],"CVE-2026-12061","PYSEC-2026-3582",[236,6978],"2026-07-31T16:51:09Z","2026-09-10T03:50:51.940502717Z",[6983],{"type":3351,"score":3486},[6985,6987,6988,6989,6991],{"type":3318,"url":6986},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3325,"url":3894},{"type":3325,"url":4715},{"type":3332,"url":6990},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3332,"url":6992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[3903,3904],{"id":237,"slug":6995,"dossier":47,"summary":6996,"aliases":6997,"sourceIds":7000,"published":7001,"modified":7002,"checkedAt":7,"severity":7003,"references":7008,"versionKeys":7031,"packageCount":32,"repositoryCount":42},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[6998,6999],"CVE-2026-5241","PYSEC-2026-2290",[237,6999],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[7004,7006],{"type":3351,"score":7005},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":3351,"score":7007},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7009,7011,7013,7015,7016,7018,7020,7022,7023,7025,7027,7029],{"type":3332,"url":7010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":3389,"url":7012},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":3332,"url":7014},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":3332,"url":4111},{"type":3318,"url":7017},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":3318,"url":7019},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":3722,"url":7021},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":3325,"url":3424},{"type":3318,"url":7024},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":3426,"url":7026},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":3318,"url":7028},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":3332,"url":7030},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[3431,3432,3433,3434,3435,3436,3437,3438,3439],{"id":238,"slug":7033,"dossier":47,"summary":7034,"aliases":7035,"sourceIds":7038,"published":7039,"modified":7040,"checkedAt":7,"severity":7041,"references":7044,"versionKeys":7055,"packageCount":32,"repositoryCount":583},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[7036,7037],"CVE-2025-69230","PYSEC-2026-1105",[238,7037],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[7042],{"type":3314,"score":7043},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7045,7047,7049,7051,7052,7053],{"type":3318,"url":7046},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":3332,"url":7048},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":3389,"url":7050},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":7054},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[3495,3496,3497,3498,3499,3500,3501],{"id":239,"slug":7057,"dossier":47,"summary":7058,"aliases":7059,"sourceIds":7062,"published":7063,"modified":7064,"checkedAt":7,"severity":7065,"references":7068,"versionKeys":7078,"packageCount":32,"repositoryCount":650},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[7060,7061],"CVE-2026-48524","PYSEC-2026-177",[239,7061],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[7066],{"type":3351,"score":7067},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7069,7071,7073,7075,7076],{"type":3332,"url":7070},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":3332,"url":7072},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":3318,"url":7074},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":3325,"url":5421},{"type":3318,"url":7077},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[5427,5428],{"id":240,"slug":7080,"dossier":90,"summary":7081,"aliases":7082,"sourceIds":7086,"published":7087,"modified":7088,"checkedAt":7,"severity":7089,"references":7092,"versionKeys":7106,"packageCount":32,"repositoryCount":4082},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[7083,7084,7085],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[240,7085],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[7090],{"type":3351,"score":7091},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[7093,7095,7097,7099,7101,7102,7103,7104],{"type":3318,"url":7094},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":3332,"url":7096},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":3318,"url":7098},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":3318,"url":7100},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":3325,"url":4069},{"type":3318,"url":4988},{"type":3325,"url":4990},{"type":3332,"url":7105},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":241,"slug":7108,"dossier":47,"summary":7109,"aliases":7110,"sourceIds":7113,"published":7114,"modified":7115,"checkedAt":7,"severity":7116,"references":7118,"versionKeys":7132,"packageCount":32,"repositoryCount":32},"ghsa-fj7x-q9j7-g6q6-b2dae37d","Black vulnerable to Regular Expression Denial of Service (ReDoS)",[7111,7112],"CVE-2024-21503","PYSEC-2024-48",[241,7112],"2024-03-19T05:15:00Z","2026-09-10T03:50:10.486429507Z",[7117],{"type":3351,"score":3451},[7119,7121,7123,7124,7126,7128,7130],{"type":3332,"url":7120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-21503",{"type":3389,"url":7122},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Ff00093672628d212b8965a8993cee8bedf5fe9b8",{"type":3325,"url":3833},{"type":3318,"url":7125},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F24.3.0",{"type":3318,"url":7127},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2024-48.yaml",{"type":3318,"url":7129},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-BLACK-6256273",{"type":3332,"url":7131},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7x-q9j7-g6q6",[3841],{"id":242,"slug":7134,"dossier":47,"summary":7135,"aliases":7136,"sourceIds":7139,"published":7140,"modified":7141,"checkedAt":7,"severity":7142,"references":7144,"versionKeys":7158,"packageCount":32,"repositoryCount":650},"ghsa-fp3f-mc75-235c-03ef9ecd","pypdf: Possible large memory usage for large \u002FToUnicode streams",[7137,7138],"CVE-2026-71870","PYSEC-2026-3655",[242,7138],"2026-08-07T19:29:09Z","2026-09-10T03:51:13.982103349Z",[7143],{"type":3314,"score":3315},[7145,7147,7149,7151,7152,7153,7154,7156],{"type":3318,"url":7146},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3318,"url":7148},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3944",{"type":3318,"url":7150},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fafba8080e19d29a3c256a742b340995e695b35aa",{"type":3325,"url":3326},{"type":3318,"url":6942},{"type":3325,"url":3330},{"type":3332,"url":7155},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3332,"url":7157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71870",[3337,3338,3339],{"id":243,"slug":7160,"dossier":47,"summary":5287,"aliases":7161,"sourceIds":7164,"published":7165,"modified":7166,"checkedAt":7,"severity":7167,"references":7170,"versionKeys":7181,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[7162,7163],"CVE-2025-1194","PYSEC-2026-1984",[243,7163],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[7168],{"type":3351,"score":7169},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7171,7173,7175,7176,7178,7179],{"type":3332,"url":7172},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":3318,"url":7174},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":3325,"url":3424},{"type":3318,"url":7177},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":3325,"url":3766},{"type":3332,"url":7180},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[3431],{"id":244,"slug":7183,"dossier":47,"summary":7184,"aliases":7185,"sourceIds":7188,"published":7189,"modified":7190,"checkedAt":7,"severity":7191,"references":7193,"versionKeys":7207,"packageCount":32,"repositoryCount":650},"ghsa-fwg2-594c-jp42-71ea2530","pypdf: Possible long runtimes\u002Flarge memory usage for large CID font width ranges",[7186,7187],"CVE-2026-71852","PYSEC-2026-3656",[244,7187],"2026-08-07T18:54:00Z","2026-09-10T03:51:13.932861945Z",[7192],{"type":3314,"score":3315},[7194,7196,7198,7200,7201,7202,7203,7205],{"type":3318,"url":7195},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3318,"url":7197},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3946",{"type":3318,"url":7199},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7",{"type":3325,"url":3326},{"type":3318,"url":6942},{"type":3325,"url":3330},{"type":3332,"url":7204},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3332,"url":7206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71852",[3337,3338,3339],{"id":245,"slug":7209,"dossier":47,"summary":7210,"aliases":7211,"sourceIds":7214,"published":7215,"modified":7216,"checkedAt":7,"severity":7217,"references":7220,"versionKeys":7226,"packageCount":32,"repositoryCount":42},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[7212,7213],"CVE-2026-54278","PYSEC-2026-2111",[245,7213],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[7218,7219],{"type":3314,"score":4179},{"type":3351,"score":3486},[7221,7223,7224],{"type":3332,"url":7222},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":3325,"url":3491},{"type":3389,"url":7225},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":246,"slug":7228,"dossier":47,"summary":7229,"aliases":7230,"sourceIds":7233,"published":7234,"modified":7235,"checkedAt":7,"severity":7236,"references":7239,"versionKeys":7258,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[7231,7232],"CVE-2024-34062","PYSEC-2026-1976",[246,7232],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[7237],{"type":3351,"score":7238},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7240,7242,7244,7246,7248,7250,7252,7254,7256],{"type":3318,"url":7241},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":3332,"url":7243},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":3318,"url":7245},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":3325,"url":7247},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":3318,"url":7249},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":3318,"url":7251},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":3318,"url":7253},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":3325,"url":7255},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":3332,"url":7257},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[7259],"pypi:tqdm@4.66.2",{"id":247,"slug":7261,"dossier":47,"summary":7262,"aliases":7263,"sourceIds":7266,"published":7267,"modified":7268,"checkedAt":7,"severity":7269,"references":7271,"versionKeys":7284,"packageCount":32,"repositoryCount":583},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[7264,7265],"CVE-2025-69229","PYSEC-2026-1106",[247,7265],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[7270],{"type":3314,"score":4179},[7272,7274,7276,7278,7280,7281,7282],{"type":3318,"url":7273},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":3332,"url":7275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":3318,"url":7277},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":3318,"url":7279},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":7283},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[3495,3496,3497,3498,3499,3500,3501],{"id":248,"slug":7286,"dossier":47,"summary":7287,"aliases":7288,"sourceIds":7291,"published":7292,"modified":7293,"checkedAt":7,"severity":7294,"references":7296,"versionKeys":7311,"packageCount":32,"repositoryCount":105},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[7289,7290],"CVE-2026-59935","PYSEC-2026-3613",[248,7290],"2026-07-23T16:37:07Z","2026-09-10T03:50:51.957724392Z",[7295],{"type":3314,"score":4651},[7297,7299,7301,7303,7305,7306,7308,7309],{"type":3318,"url":7298},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":3332,"url":7300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":3318,"url":7302},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":3318,"url":7304},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":3325,"url":3326},{"type":3318,"url":7307},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",{"type":3325,"url":3330},{"type":3332,"url":7310},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g867-7843-wf8q",[3337,3338],{"id":249,"slug":7313,"dossier":47,"summary":7314,"aliases":7315,"sourceIds":7318,"published":7319,"modified":7320,"checkedAt":7,"severity":7321,"references":7323,"versionKeys":7336,"packageCount":32,"repositoryCount":105},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[7316,7317],"CVE-2026-54651","PYSEC-2026-3018",[249,7317],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[7322],{"type":3314,"score":4477},[7324,7326,7328,7330,7331,7333,7334],{"type":3318,"url":7325},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":3332,"url":7327},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":3318,"url":7329},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":3325,"url":3326},{"type":3318,"url":7332},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":3325,"url":3330},{"type":3332,"url":7335},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[3337,3338],{"id":250,"slug":7338,"dossier":90,"summary":7339,"aliases":7340,"sourceIds":7343,"published":7344,"modified":7345,"checkedAt":7,"severity":7346,"references":7351,"versionKeys":7361,"packageCount":32,"repositoryCount":7364},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[7341,7342],"CVE-2026-25645","PYSEC-2026-2275",[250,7342],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[7347,7349],{"type":3351,"score":7348},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3351,"score":7350},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[7352,7354,7356,7358,7359],{"type":3332,"url":7353},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":3332,"url":7355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":3389,"url":7357},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":3325,"url":6226},{"type":3332,"url":7360},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[6236,6237,7362,7363],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":251,"slug":7366,"dossier":47,"summary":7367,"aliases":7368,"sourceIds":7371,"published":7372,"modified":7373,"checkedAt":7,"severity":7374,"references":7377,"versionKeys":7387,"packageCount":32,"repositoryCount":34},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[7369,7370],"CVE-2026-33230","PYSEC-2026-2235",[251,7370],"2026-03-18T20:23:33Z","2026-09-10T03:50:39.207692385Z",[7375],{"type":3351,"score":7376},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[7378,7380,7382,7384,7386],{"type":3426,"url":7379},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":3332,"url":7381},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":3389,"url":7383},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":3389,"url":7385},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":3325,"url":3894},[3903,3904],{"id":252,"slug":7389,"dossier":90,"summary":7390,"aliases":7391,"sourceIds":7394,"published":7395,"modified":7396,"checkedAt":7,"severity":7397,"references":7399,"versionKeys":7410,"packageCount":32,"repositoryCount":3673},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[7392,7393],"CVE-2025-66418","PYSEC-2026-1998",[252,7393],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[7398],{"type":3314,"score":3653},[7400,7402,7404,7406,7407,7408],{"type":3318,"url":7401},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":3332,"url":7403},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":3389,"url":7405},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":3325,"url":3662},{"type":3325,"url":3664},{"type":3332,"url":7409},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[3668,3669,3670,3671,3672],{"id":253,"slug":7412,"dossier":47,"summary":7413,"aliases":7414,"sourceIds":7417,"published":7418,"modified":7419,"checkedAt":7,"severity":7420,"references":7423,"versionKeys":7438,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[7415,7416],"CVE-2024-56201","PYSEC-2026-1472",[253,7416],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[7421,7422],{"type":3351,"score":4784},{"type":3314,"score":6590},[7424,7426,7428,7430,7432,7433,7435,7436],{"type":3318,"url":7425},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":3332,"url":7427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":3318,"url":7429},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":3389,"url":7431},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":3325,"url":6599},{"type":3318,"url":7434},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":3325,"url":6605},{"type":3332,"url":7437},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[6609],{"id":254,"slug":7440,"dossier":47,"summary":7441,"aliases":7442,"sourceIds":7445,"published":7446,"modified":7447,"checkedAt":7,"severity":7448,"references":7450,"versionKeys":7463,"packageCount":32,"repositoryCount":105},"ghsa-gphh-9q3h-jgpp-606af12e","banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI",[7443,7444],"CVE-2026-44209","PYSEC-2026-2390",[254,7444],"2026-05-08T20:36:22Z","2026-07-13T16:42:52.498372734Z",[7449],{"type":3351,"score":6560},[7451,7453,7455,7457,7459,7461],{"type":3318,"url":7452},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",{"type":3332,"url":7454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44209",{"type":3318,"url":7456},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F74",{"type":3325,"url":7458},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks",{"type":3325,"url":7460},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbanks",{"type":3332,"url":7462},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",[7464],"pypi:banks@2.2.0",{"id":255,"slug":7466,"dossier":90,"summary":7467,"aliases":7468,"sourceIds":7472,"published":7473,"modified":7474,"checkedAt":7,"severity":7475,"references":7478,"versionKeys":7490,"packageCount":32,"repositoryCount":7364},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[7469,7470,7471],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[255,7471],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[7476],{"type":3351,"score":7477},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[7479,7481,7483,7485,7487,7488],{"type":3426,"url":7480},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":3332,"url":7482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":3389,"url":7484},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":3318,"url":7486},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":3325,"url":4797},{"type":3332,"url":7489},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[4803,4804,4805,4806,7491,7492,7493,7494,7495,7496,7497,7498],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":256,"slug":7500,"dossier":47,"summary":7501,"aliases":7502,"sourceIds":7505,"published":7506,"modified":7507,"checkedAt":7,"severity":7508,"references":7510,"versionKeys":7531,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[7503,7504],"CVE-2024-34064","PYSEC-2026-1474",[256,7504],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[7509],{"type":3351,"score":5465},[7511,7513,7515,7517,7518,7520,7522,7524,7526,7528,7529],{"type":3318,"url":7512},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":3332,"url":7514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":3389,"url":7516},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":3325,"url":6599},{"type":3318,"url":7519},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":3318,"url":7521},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":3318,"url":7523},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":3318,"url":7525},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":3318,"url":7527},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":3325,"url":6605},{"type":3332,"url":7530},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[6609],{"id":257,"slug":7533,"dossier":47,"summary":7534,"aliases":7535,"sourceIds":7538,"published":7539,"modified":7540,"checkedAt":7,"severity":7541,"references":7544,"versionKeys":7558,"packageCount":32,"repositoryCount":34},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[7536,7537],"CVE-2026-0846","PYSEC-2026-97",[257,7537],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[7542,7543],{"type":3351,"score":5078},{"type":3351,"score":4585},[7545,7547,7549,7551,7552,7554,7556],{"type":3332,"url":7546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":3318,"url":7548},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":3318,"url":7550},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":3325,"url":3894},{"type":3318,"url":7553},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":3426,"url":7555},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":3332,"url":7557},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3903,3904],{"id":258,"slug":7560,"dossier":47,"summary":7561,"aliases":7562,"sourceIds":7565,"published":7566,"modified":7567,"checkedAt":7,"severity":7568,"references":7571,"versionKeys":7580,"packageCount":32,"repositoryCount":3615},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[7563,7564],"CVE-2026-34513","PYSEC-2026-2095",[258,7564],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[7569,7570],{"type":3314,"score":3980},{"type":3351,"score":3486},[7572,7574,7576,7578,7579],{"type":3389,"url":7573},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":3332,"url":7575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":3389,"url":7577},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":259,"slug":7582,"dossier":47,"summary":7583,"aliases":7584,"sourceIds":7587,"published":7588,"modified":7589,"checkedAt":7,"severity":7590,"references":7594,"versionKeys":7602,"packageCount":32,"repositoryCount":42},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[7585,7586],"CVE-2026-47265","PYSEC-2026-2105",[259,7586],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[7591,7593],{"type":3314,"score":7592},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3351,"score":4585},[7595,7597,7599,7601],{"type":3389,"url":7596},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":3332,"url":7598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":3389,"url":7600},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":3325,"url":3491},[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":260,"slug":7604,"dossier":47,"summary":7605,"aliases":7606,"sourceIds":7609,"published":7610,"modified":7611,"checkedAt":7,"severity":7612,"references":7616,"versionKeys":7622,"packageCount":32,"repositoryCount":42},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[7607,7608],"CVE-2026-54276","PYSEC-2026-2109",[260,7608],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[7613,7615],{"type":3314,"score":7614},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3351,"score":7376},[7617,7619,7621],{"type":3332,"url":7618},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":3389,"url":7620},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":3325,"url":3491},[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":261,"slug":7624,"dossier":47,"summary":7625,"aliases":7626,"sourceIds":7629,"published":7630,"modified":7631,"checkedAt":7,"severity":7632,"references":7634,"versionKeys":7649,"packageCount":32,"repositoryCount":105},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[7627,7628],"CVE-2026-31826","PYSEC-2026-3019",[261,7628],"2026-03-11T00:14:02Z","2026-09-10T03:50:39.503255117Z",[7633],{"type":3314,"score":4280},[7635,7637,7639,7641,7643,7644,7646,7647],{"type":3318,"url":7636},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":3332,"url":7638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":3318,"url":7640},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":3318,"url":7642},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":3325,"url":3326},{"type":3318,"url":7645},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":3325,"url":3330},{"type":3332,"url":7648},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[3337,3338],{"id":262,"slug":7651,"dossier":47,"summary":7652,"aliases":7653,"sourceIds":7656,"published":7657,"modified":7658,"checkedAt":7,"severity":7659,"references":7661,"versionKeys":7676,"packageCount":32,"repositoryCount":32},"ghsa-hvfh-5mj3-5f3j-627daf3f","Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access",[7654,7655],"CVE-2026-45019","PYSEC-2026-3811",[262,7655],"2026-08-25T19:21:40Z","2026-09-10T12:25:53.170074650Z",[7660],{"type":3351,"score":5467},[7662,7664,7666,7667,7669,7671,7672,7674],{"type":3318,"url":7663},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3318,"url":7665},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F0565fd0eccb915fce159929598b053ed79f6e0c9",{"type":3325,"url":3524},{"type":3318,"url":7668},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fblob\u002F2.12.0\u002Fdocs\u002Fsecurity-advisory-2026-mcp.md#spl-2026-002--ssrf-via-mcp-streamable-http--sse",{"type":3318,"url":7670},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.12.0",{"type":3325,"url":3532},{"type":3332,"url":7673},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3332,"url":7675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45019",[3536],{"id":263,"slug":7678,"dossier":47,"summary":7679,"aliases":7680,"sourceIds":7683,"published":7684,"modified":7685,"checkedAt":7,"severity":7686,"references":7688,"versionKeys":7696,"packageCount":32,"repositoryCount":32},"ghsa-hw26-mmpg-fqfg-673c67e1","lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes",[7681,7682],"CVE-2026-28348","PYSEC-2026-2201",[263,7682],"2026-03-02T19:19:15Z","2026-09-10T03:50:39.674211658Z",[7687],{"type":3351,"score":7376},[7689,7691,7693,7695],{"type":3426,"url":7690},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-hw26-mmpg-fqfg",{"type":3332,"url":7692},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28348",{"type":3389,"url":7694},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F2ef732667ddbc74ea59847bcf24b75809aaeed3b",{"type":3325,"url":4240},[4248],{"id":264,"slug":7698,"dossier":47,"summary":7699,"aliases":7700,"sourceIds":7703,"published":7704,"modified":7705,"checkedAt":7,"severity":7706,"references":7710,"versionKeys":7726,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[7701,7702],"CVE-2024-11394","PYSEC-2024-229",[264,7702],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[7707,7709],{"type":3351,"score":7708},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3351,"score":4701},[7711,7713,7715,7717,7718,7720,7722,7724],{"type":3332,"url":7712},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":3318,"url":7714},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":3318,"url":7716},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":3325,"url":3424},{"type":3318,"url":7719},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":3318,"url":7721},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":3332,"url":7723},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":3332,"url":7725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[3431],{"id":265,"slug":7728,"dossier":47,"summary":7729,"aliases":7730,"sourceIds":7733,"published":7734,"modified":7735,"checkedAt":7,"severity":7736,"references":7738,"versionKeys":7750,"packageCount":32,"repositoryCount":105},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[7731,7732],"CVE-2026-49461","PYSEC-2026-3020",[265,7732],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[7737],{"type":3314,"score":4477},[7739,7741,7743,7744,7745,7746,7748],{"type":3318,"url":7740},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3318,"url":7742},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":3325,"url":3326},{"type":3318,"url":4737},{"type":3325,"url":3330},{"type":3332,"url":7747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3332,"url":7749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[3337,3338],{"id":266,"slug":7752,"dossier":47,"summary":7753,"aliases":7754,"sourceIds":7757,"published":7758,"modified":7759,"checkedAt":7,"severity":7760,"references":7763,"versionKeys":7776,"packageCount":32,"repositoryCount":32},"ghsa-j5xp-7m2f-49jv-d5b13248","Docling Core: Insufficient validation of image reference URIs",[7755,7756],"CVE-2026-44019","PYSEC-2026-2456",[266,7756],"2026-06-03T21:15:31Z","2026-07-13T16:43:49.284243969Z",[7761],{"type":3351,"score":7762},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[7764,7766,7768,7770,7772,7774],{"type":3318,"url":7765},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3325,"url":7767},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core",{"type":3318,"url":7769},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Freleases\u002Ftag\u002Fv2.74.1",{"type":3325,"url":7771},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling-core",{"type":3332,"url":7773},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3332,"url":7775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44019",[7777],"pypi:docling-core@2.49.0",{"id":267,"slug":7779,"dossier":47,"summary":7780,"aliases":7781,"sourceIds":7784,"published":7785,"modified":7786,"checkedAt":7,"severity":7787,"references":7789,"versionKeys":7804,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[7782,7783],"CVE-2025-62708","PYSEC-2026-1831",[267,7783],"2025-10-22T19:40:50Z","2026-09-10T03:50:29.885611595Z",[7788],{"type":3314,"score":4179},[7790,7792,7794,7796,7798,7799,7801,7802],{"type":3318,"url":7791},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":3332,"url":7793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":3318,"url":7795},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":3318,"url":7797},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":3325,"url":3326},{"type":3318,"url":7800},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":3325,"url":3330},{"type":3332,"url":7803},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[3337],{"id":268,"slug":7806,"dossier":47,"summary":7807,"aliases":7808,"sourceIds":7811,"published":7812,"modified":7813,"checkedAt":7,"severity":7814,"references":7818,"versionKeys":7836,"packageCount":32,"repositoryCount":42},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[7809,7810],"CVE-2026-34993","PYSEC-2026-2104",[268,7810],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[7815,7817],{"type":3351,"score":7816},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":3351,"score":3685},[7819,7821,7823,7825,7826,7828,7830,7832,7833,7834],{"type":3389,"url":7820},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":3332,"url":7822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":3389,"url":7824},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":3325,"url":3491},{"type":3318,"url":7827},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":3318,"url":7829},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":3332,"url":7831},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3332,"url":7014},{"type":3332,"url":4111},{"type":3722,"url":7835},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":269,"slug":7838,"dossier":47,"summary":7839,"aliases":7840,"sourceIds":7843,"published":7844,"modified":7845,"checkedAt":7,"severity":7846,"references":7848,"versionKeys":7858,"packageCount":32,"repositoryCount":583},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[7841,7842],"CVE-2025-67726","PYSEC-2025-267",[269,7842],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[7847],{"type":3351,"score":3486},[7849,7851,7853,7854,7856,7857],{"type":3332,"url":7850},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":3332,"url":7852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":3389,"url":6441},{"type":3318,"url":7855},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":3325,"url":4007},{"type":3332,"url":6446},[4015,4016,4017],{"id":270,"slug":7860,"dossier":47,"summary":7861,"aliases":7862,"sourceIds":7865,"published":7866,"modified":7867,"checkedAt":7,"severity":7868,"references":7870,"versionKeys":7881,"packageCount":32,"repositoryCount":583},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[7863,7864],"CVE-2025-69227","PYSEC-2026-1107",[270,7864],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[7869],{"type":3314,"score":4179},[7871,7873,7875,7877,7878,7879],{"type":3318,"url":7872},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":3332,"url":7874},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":3318,"url":7876},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":7880},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[3495,3496,3497,3498,3499,3500,3501],{"id":271,"slug":7883,"dossier":47,"summary":7884,"aliases":7885,"sourceIds":7888,"published":7889,"modified":7890,"checkedAt":7,"severity":7891,"references":7894,"versionKeys":7909,"packageCount":32,"repositoryCount":105},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[7886,7887],"CVE-2026-41168","PYSEC-2026-3021",[271,7887],"2026-04-15T19:43:09Z","2026-09-10T03:50:44.569518277Z",[7892,7893],{"type":3351,"score":3451},{"type":3314,"score":3315},[7895,7897,7899,7901,7903,7904,7906,7907],{"type":3318,"url":7896},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":3332,"url":7898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":3318,"url":7900},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":3318,"url":7902},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":3325,"url":3326},{"type":3318,"url":7905},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":3325,"url":3330},{"type":3332,"url":7908},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[3337,3338],{"id":272,"slug":7911,"dossier":90,"summary":7912,"aliases":7913,"sourceIds":7917,"published":7918,"modified":7919,"checkedAt":7,"severity":7920,"references":7922,"versionKeys":7936,"packageCount":32,"repositoryCount":4082},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[7914,7915,7916],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[272,7916],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[7921],{"type":3351,"score":3486},[7923,7925,7927,7929,7931,7932,7933,7934],{"type":3318,"url":7924},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":3332,"url":7926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":3318,"url":7928},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":3318,"url":7930},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":3325,"url":4069},{"type":3318,"url":4988},{"type":3325,"url":4990},{"type":3332,"url":7935},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":273,"slug":7938,"dossier":47,"summary":7939,"aliases":7940,"sourceIds":7943,"published":7944,"modified":7945,"checkedAt":7,"severity":7946,"references":7948,"versionKeys":7961,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[7941,7942],"CVE-2025-3264","PYSEC-2026-1985",[273,7942],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[7947],{"type":3351,"score":4341},[7949,7951,7953,7955,7956,7958,7959],{"type":3332,"url":7950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":3318,"url":7952},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":3318,"url":7954},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":3325,"url":3424},{"type":3318,"url":7957},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":3325,"url":3766},{"type":3332,"url":7960},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[3431],{"id":274,"slug":7963,"dossier":47,"summary":7964,"aliases":7965,"sourceIds":7968,"published":7969,"modified":7970,"checkedAt":7,"severity":7971,"references":7973,"versionKeys":7990,"packageCount":32,"repositoryCount":34},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[7966,7967],"CVE-2026-33231","PYSEC-2026-2236",[274,7967],"2026-03-19T12:42:20Z","2026-09-10T03:50:39.952342228Z",[7972],{"type":3351,"score":3486},[7974,7976,7978,7980,7981,7983,7985,7986,7987,7988],{"type":3426,"url":7975},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":3332,"url":7977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":3389,"url":7979},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":3325,"url":3894},{"type":3318,"url":7982},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":3318,"url":7984},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":3332,"url":4109},{"type":3332,"url":7831},{"type":3332,"url":4111},{"type":3722,"url":7989},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3903,3904],{"id":275,"slug":7992,"dossier":47,"summary":7993,"aliases":7994,"sourceIds":7996,"published":7997,"modified":7998,"checkedAt":7,"severity":7999,"references":8001,"versionKeys":8009,"packageCount":32,"repositoryCount":105},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[7995],"CVE-2026-57204",[275],"2026-06-18T14:28:49Z","2026-09-10T03:51:08.790625588Z",[8000],{"type":3314,"score":4477},[8002,8004,8006,8007],{"type":3318,"url":8003},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":3318,"url":8005},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":3325,"url":3326},{"type":3318,"url":8008},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[3337,3338],{"id":276,"slug":8011,"dossier":47,"summary":8012,"aliases":8013,"sourceIds":8016,"published":8017,"modified":8018,"checkedAt":7,"severity":8019,"references":8022,"versionKeys":8032,"packageCount":32,"repositoryCount":32},"ghsa-jmmv-h3mp-59v8-f42633c7","Docling Core: Unsafe remote filename resolution",[8014,8015],"CVE-2026-44023","PYSEC-2026-2457",[276,8015],"2026-06-03T21:16:25Z","2026-07-13T16:43:42.701865915Z",[8020],{"type":3351,"score":8021},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",[8023,8025,8026,8027,8028,8030],{"type":3318,"url":8024},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3325,"url":7767},{"type":3318,"url":7769},{"type":3325,"url":7771},{"type":3332,"url":8029},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3332,"url":8031},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44023",[7777],{"id":277,"slug":8034,"dossier":47,"summary":8035,"aliases":8036,"sourceIds":8039,"published":8040,"modified":8041,"checkedAt":7,"severity":8042,"references":8044,"versionKeys":8059,"packageCount":32,"repositoryCount":650},"ghsa-jp53-mhqp-8xcg-b1841e34","pypdf: Possible infinite loop for TreeObject.insert_child",[8037,8038],"CVE-2026-84309","PYSEC-2026-3913",[277,8038],"2026-09-01T21:20:20Z","2026-09-10T12:25:36.667036932Z",[8043],{"type":3314,"score":4477},[8045,8047,8049,8051,8052,8054,8055,8057],{"type":3318,"url":8046},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3318,"url":8048},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3964",{"type":3318,"url":8050},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc9ba557d565d57c53a0b3a0be06c0a4c29b0559b",{"type":3325,"url":3326},{"type":3318,"url":8053},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.0",{"type":3325,"url":3330},{"type":3332,"url":8056},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3332,"url":8058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84309",[3337,3338,3339],{"id":278,"slug":8061,"dossier":47,"summary":8062,"aliases":8063,"sourceIds":8066,"published":8067,"modified":8068,"checkedAt":7,"severity":8069,"references":8072,"versionKeys":8080,"packageCount":32,"repositoryCount":3615},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[8064,8065],"CVE-2026-54282","PYSEC-2026-248",[278,8065],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[8070,8071],{"type":3351,"score":5225},{"type":3351,"score":3603},[8073,8075,8077,8078],{"type":3332,"url":8074},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":3332,"url":8076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":3325,"url":5529},{"type":3318,"url":8079},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[3470,3471,3472,5536,5537,5538,5680,5681,5682],{"id":279,"slug":8082,"dossier":47,"summary":8083,"aliases":8084,"sourceIds":8087,"published":8088,"modified":8089,"checkedAt":7,"severity":8090,"references":8093,"versionKeys":8112,"packageCount":32,"repositoryCount":650},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[8085,8086],"CVE-2026-52869","PYSEC-2026-3482",[279,8086],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[8091],{"type":3351,"score":8092},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[8094,8096,8098,8100,8102,8104,8106,8107,8109,8110],{"type":3318,"url":8095},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":3332,"url":8097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":3318,"url":8099},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":3318,"url":8101},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":3318,"url":8103},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":3318,"url":8105},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":3325,"url":6195},{"type":3318,"url":8108},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":3325,"url":6199},{"type":3332,"url":8111},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[6201,6202,6203],{"id":280,"slug":8114,"dossier":47,"summary":8115,"aliases":8116,"sourceIds":8119,"published":8120,"modified":8121,"checkedAt":7,"severity":8122,"references":8125,"versionKeys":8133,"packageCount":32,"repositoryCount":650},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[8117,8118],"CVE-2026-48523","PYSEC-2026-176",[280,8118],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[8123],{"type":3351,"score":8124},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[8126,8128,8130,8131],{"type":3426,"url":8127},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":3332,"url":8129},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":3325,"url":5421},{"type":3318,"url":8132},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[5427,5428],{"id":281,"slug":8135,"dossier":47,"summary":8136,"aliases":8137,"sourceIds":8140,"published":8141,"modified":8142,"checkedAt":7,"severity":8143,"references":8145,"versionKeys":8156,"packageCount":32,"repositoryCount":105},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[8138,8139],"CVE-2026-54531","PYSEC-2026-3022",[281,8139],"2026-06-16T14:05:57Z","2026-09-10T03:51:08.924739649Z",[8144],{"type":3314,"score":4477},[8146,8148,8149,8150,8151,8152,8154],{"type":3318,"url":8147},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3318,"url":4482},{"type":3325,"url":3326},{"type":3318,"url":4485},{"type":3325,"url":3330},{"type":3332,"url":8153},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3332,"url":8155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[3337,3338],{"id":282,"slug":8158,"dossier":47,"summary":8159,"aliases":8160,"sourceIds":8163,"published":8164,"modified":8165,"checkedAt":7,"severity":8166,"references":8170,"versionKeys":8189,"packageCount":32,"repositoryCount":34},"ghsa-m42h-3232-vpv3-b30ccceb","nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences",[8161,8162],"CVE-2026-12243","PYSEC-2026-597",[282,8162],"2026-06-30T01:16:29.063Z","2026-08-19T12:15:03.321869900Z",[8167,8168],{"type":3351,"score":4585},{"type":3351,"score":8169},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8171,8173,8175,8177,8178,8180,8181,8183,8185,8187],{"type":3318,"url":8172},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",{"type":3332,"url":8174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12243",{"type":3318,"url":8176},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3504",{"type":3318,"url":5393},{"type":3318,"url":8179},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Faec4fce1b84ad725b8975f7365b23a4f626572a9",{"type":3325,"url":3894},{"type":3318,"url":8182},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-597.yaml",{"type":3426,"url":8184},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",{"type":3318,"url":8186},"https:\u002F\u002Fsecurityinfinity.com\u002Fresearch\u002Fpath-traversal-in-nltks-nltk-data-load-via-percent-encoded-sequences",{"type":3332,"url":8188},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",[3903,3904],{"id":283,"slug":8191,"dossier":47,"summary":8192,"aliases":8193,"sourceIds":8196,"published":8197,"modified":8198,"checkedAt":7,"severity":8199,"references":8201,"versionKeys":8217,"packageCount":32,"repositoryCount":105},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[8194,8195],"CVE-2025-66019","PYSEC-2026-1832",[283,8195],"2025-11-24T22:42:07Z","2026-09-10T03:50:31.107367078Z",[8200],{"type":3314,"score":4179},[8202,8203,8205,8207,8209,8211,8212,8214,8215],{"type":3318,"url":7791},{"type":3318,"url":8204},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":3332,"url":8206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":3318,"url":8208},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":3318,"url":8210},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":3325,"url":3326},{"type":3318,"url":8213},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":3325,"url":3330},{"type":3332,"url":8216},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[3337,3338],{"id":284,"slug":8219,"dossier":47,"summary":8220,"aliases":8221,"sourceIds":8224,"published":8225,"modified":8226,"checkedAt":7,"severity":8227,"references":8232,"versionKeys":8243,"packageCount":32,"repositoryCount":631},"ghsa-m4rf-3fr8-xwx3-ed835593","NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)",[8222,8223],"CVE-2026-79675","PYSEC-2026-3749",[284,8223],"2026-08-25T16:17:28.013Z","2026-09-10T03:51:15.444696867Z",[8228,8229,8230],{"type":3351,"score":4506},{"type":3314,"score":4504},{"type":3314,"score":8231},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8233,8235,8237,8239,8240,8241],{"type":3426,"url":8234},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m4rf-3fr8-xwx3",{"type":3332,"url":8236},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79675",{"type":3318,"url":8238},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F8fa9650b6009aacfdebbc33d2a08d32c0858ea6c",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3332,"url":8242},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-jvm-argument-injection-via-per-call-options",[3902,3903,3904],{"id":285,"slug":8245,"dossier":47,"summary":8246,"aliases":8247,"sourceIds":8250,"published":8251,"modified":8252,"checkedAt":7,"severity":8253,"references":8258,"versionKeys":8267,"packageCount":32,"repositoryCount":3615},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[8248,8249],"CVE-2026-34516","PYSEC-2026-2098",[285,8249],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[8254,8255,8256],{"type":3351,"score":3486},{"type":3314,"score":4179},{"type":3314,"score":8257},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8259,8261,8263,8265,8266],{"type":3389,"url":8260},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":3332,"url":8262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":3389,"url":8264},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":286,"slug":8269,"dossier":47,"summary":8270,"aliases":8271,"sourceIds":8274,"published":8275,"modified":8276,"checkedAt":7,"severity":8277,"references":8280,"versionKeys":8286,"packageCount":32,"repositoryCount":42},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[8272,8273],"CVE-2026-50269","PYSEC-2026-2106",[286,8273],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[8278,8279],{"type":3314,"score":3601},{"type":3351,"score":3486},[8281,8283,8285],{"type":3332,"url":8282},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":3389,"url":8284},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":3325,"url":3491},[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":287,"slug":8288,"dossier":47,"summary":8289,"aliases":8290,"sourceIds":8293,"published":8294,"modified":8295,"checkedAt":7,"severity":8296,"references":8298,"versionKeys":8315,"packageCount":32,"repositoryCount":32},"ghsa-m88r-rg27-5xfg-642aa3a1","Docling: Unsafe XML Entity Expansion in USPTO Patent Backend",[8291,8292],"CVE-2026-44020","PYSEC-2026-240",[287,8292],"2026-06-03T21:14:15Z","2026-08-28T18:45:06.829347750Z",[8297],{"type":3351,"score":3486},[8299,8301,8303,8304,8306,8308,8309,8311,8313],{"type":3389,"url":8300},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-m88r-rg27-5xfg",{"type":3332,"url":8302},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44020",{"type":3318,"url":5803},{"type":3318,"url":8305},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44020",{"type":3318,"url":8307},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492456",{"type":3325,"url":6164},{"type":3318,"url":8310},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.74.0",{"type":3318,"url":8312},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-240.yaml",{"type":3318,"url":8314},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44020.json",[6172],{"id":288,"slug":8317,"dossier":47,"summary":8318,"aliases":8319,"sourceIds":8322,"published":8323,"modified":8324,"checkedAt":7,"severity":8325,"references":8327,"versionKeys":8336,"packageCount":32,"repositoryCount":32},"ghsa-m9gh-vj53-gvh9-764ccc6a","python-engineio has possible denial of service due to maximum payload size sometimes not being enforced",[8320,8321],"CVE-2026-48809","PYSEC-2026-3033",[288,8321],"2026-06-26T20:48:18Z","2026-07-13T16:43:30.815486921Z",[8326],{"type":3351,"score":3486},[8328,8330,8331,8332,8334],{"type":3318,"url":8329},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3325,"url":6516},{"type":3325,"url":6518},{"type":3332,"url":8333},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3332,"url":8335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48809",[6524],{"id":289,"slug":8338,"dossier":47,"summary":8339,"aliases":8340,"sourceIds":8343,"published":8344,"modified":8345,"checkedAt":7,"severity":8346,"references":8349,"versionKeys":8357,"packageCount":32,"repositoryCount":650},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[8341,8342],"CVE-2026-44432","PYSEC-2026-142",[289,8342],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[8347,8348],{"type":3351,"score":3486},{"type":3314,"score":3653},[8350,8352,8354,8356],{"type":3332,"url":8351},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":3332,"url":8353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":3318,"url":8355},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":3325,"url":3662},[8358],"pypi:urllib3@2.6.3",{"id":290,"slug":8360,"dossier":47,"summary":8361,"aliases":8362,"sourceIds":8365,"published":8366,"modified":8367,"checkedAt":7,"severity":8368,"references":8371,"versionKeys":8384,"packageCount":32,"repositoryCount":103},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[8363,8364],"CVE-2026-28684","PYSEC-2026-2270",[290,8364],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[8369],{"type":3351,"score":8370},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8372,8374,8376,8378,8380,8382],{"type":3389,"url":8373},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":3332,"url":8375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":3389,"url":8377},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":3318,"url":8379},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":3325,"url":8381},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":3332,"url":8383},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[8385,8386,8387,8388],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":291,"slug":8390,"dossier":47,"summary":8391,"aliases":8392,"sourceIds":8395,"published":8396,"modified":8397,"checkedAt":7,"severity":8398,"references":8401,"versionKeys":8416,"packageCount":32,"repositoryCount":573},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[8393,8394],"CVE-2026-69243","PYSEC-2026-3546",[291,8394],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[8399],{"type":3314,"score":8400},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8402,8404,8406,8408,8409,8411,8412,8414],{"type":3318,"url":8403},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3318,"url":8405},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":3318,"url":8407},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":3325,"url":3491},{"type":3318,"url":8410},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":3325,"url":4539},{"type":3332,"url":8413},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3332,"url":8415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[3495,3496,3497,3498,3499,3500,3501,3502,3503,6639],{"id":292,"slug":8418,"dossier":47,"summary":8419,"aliases":8420,"sourceIds":8423,"published":8424,"modified":8425,"checkedAt":7,"severity":8426,"references":8428,"versionKeys":8437,"packageCount":32,"repositoryCount":66},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[8421,8422],"CVE-2026-49855","PYSEC-2026-3389",[292,8422],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[8427],{"type":3351,"score":3486},[8429,8431,8432,8433,8435],{"type":3318,"url":8430},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3325,"url":4007},{"type":3325,"url":4009},{"type":3332,"url":8434},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3332,"url":8436},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[4015,4016,4017,4018,4019],{"id":293,"slug":8439,"dossier":47,"summary":8440,"aliases":8441,"sourceIds":8444,"published":8445,"modified":8446,"checkedAt":7,"severity":8447,"references":8449,"versionKeys":8460,"packageCount":32,"repositoryCount":621},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[8442,8443],"CVE-2026-40347","PYSEC-2026-3038",[293,8443],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[8448],{"type":3351,"score":3451},[8450,8452,8454,8455,8457,8458],{"type":3318,"url":8451},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":3332,"url":8453},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":3325,"url":4660},{"type":3318,"url":8456},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":3325,"url":4662},{"type":3332,"url":8459},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[4828,4829,4666],{"id":294,"slug":8462,"dossier":47,"summary":8463,"aliases":8464,"sourceIds":8467,"published":8468,"modified":8469,"checkedAt":7,"severity":8470,"references":8472,"versionKeys":8485,"packageCount":32,"repositoryCount":42},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[8465,8466],"CVE-2026-82397","PYSEC-2026-3928",[294,8466],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[8471],{"type":3351,"score":3486},[8473,8475,8477,8478,8480,8481,8482,8483],{"type":3318,"url":8474},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":3332,"url":8476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":3318,"url":5718},{"type":3318,"url":8479},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":3325,"url":4007},{"type":3318,"url":5725},{"type":3325,"url":4009},{"type":3332,"url":8484},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[4015,4016,4017,4018,4019,5727],{"id":295,"slug":8487,"dossier":47,"summary":8488,"aliases":8489,"sourceIds":8492,"published":8493,"modified":8494,"checkedAt":7,"severity":8495,"references":8497,"versionKeys":8510,"packageCount":32,"repositoryCount":573},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[8490,8491],"CVE-2026-59881","PYSEC-2026-3547",[295,8491],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[8496],{"type":3314,"score":3855},[8498,8500,8502,8504,8506,8507,8508],{"type":3318,"url":8499},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":3332,"url":8501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":3318,"url":8503},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":3318,"url":8505},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":8509},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[3495,3496,3497,3498,3499,3500,3501,3502,3503,6639],{"id":296,"slug":8512,"dossier":47,"summary":8513,"aliases":8514,"sourceIds":8517,"published":8518,"modified":8519,"checkedAt":7,"severity":8520,"references":8522,"versionKeys":8533,"packageCount":32,"repositoryCount":583},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[8515,8516],"CVE-2025-69225","PYSEC-2026-1109",[296,8516],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[8521],{"type":3314,"score":3601},[8523,8525,8527,8529,8530,8531],{"type":3318,"url":8524},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":3332,"url":8526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":3389,"url":8528},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":3325,"url":3491},{"type":3325,"url":4539},{"type":3332,"url":8532},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[3495,3496,3497,3498,3499,3500,3501],{"id":297,"slug":8535,"dossier":47,"summary":8536,"aliases":8537,"sourceIds":8540,"published":8541,"modified":8542,"checkedAt":7,"severity":8543,"references":8546,"versionKeys":8555,"packageCount":32,"repositoryCount":3615},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[8538,8539],"CVE-2026-34519","PYSEC-2026-2101",[297,8539],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[8544,8545],{"type":3314,"score":3601},{"type":3351,"score":3603},[8547,8549,8551,8553,8554],{"type":3389,"url":8548},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":3332,"url":8550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":3389,"url":8552},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":298,"slug":8557,"dossier":47,"summary":8558,"aliases":8559,"sourceIds":8562,"published":8563,"modified":8564,"checkedAt":7,"severity":8565,"references":8568,"versionKeys":8583,"packageCount":32,"repositoryCount":34},"ghsa-p3m8-78j2-g5p3-4d7419c0","NLTK: Default ENFORCE=False Disables All pathsec Security Controls",[8560,8561],"CVE-2026-62388","PYSEC-2026-3722",[298,8561],"2026-08-22T15:16:18.967Z","2026-09-02T16:00:17.572328596Z",[8566,8567],{"type":3314,"score":5356},{"type":3314,"score":5358},[8569,8571,8573,8575,8577,8578,8579,8581],{"type":3426,"url":8570},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p3m8-78j2-g5p3",{"type":3332,"url":8572},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62388",{"type":3318,"url":8574},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3593",{"type":3318,"url":8576},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F155e40343cff0bf50d233e274a12e04d1428b1d9",{"type":3325,"url":3894},{"type":3318,"url":3930},{"type":3318,"url":8580},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3722.yaml",{"type":3332,"url":8582},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-insecure-default-configuration-pathsec",[3903,3904],{"id":299,"slug":8585,"dossier":47,"summary":8586,"aliases":8587,"sourceIds":8590,"published":8591,"modified":8592,"checkedAt":7,"severity":8593,"references":8595,"versionKeys":8612,"packageCount":32,"repositoryCount":34},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[8588,8589],"CVE-2026-54293","PYSEC-2026-2078",[299,8589],"2026-06-16T14:34:15Z","2026-09-10T03:51:09.128527813Z",[8594],{"type":3351,"score":4585},[8596,8598,8600,8602,8603,8605,8607,8608,8610],{"type":3426,"url":8597},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":3332,"url":8599},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":3389,"url":8601},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":3318,"url":7017},{"type":3318,"url":8604},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3722,"url":8606},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":3325,"url":3894},{"type":3318,"url":8609},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":3318,"url":8611},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3903,3904],{"id":300,"slug":8614,"dossier":47,"summary":8615,"aliases":8616,"sourceIds":8619,"published":8620,"modified":8621,"checkedAt":7,"severity":8622,"references":8626,"versionKeys":8638,"packageCount":32,"repositoryCount":631},"ghsa-p4rw-rvv2-7xwr-ad10f74d","NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement",[8617,8618],"CVE-2026-79676","PYSEC-2026-3737",[300,8618],"2026-08-25T16:17:28.177Z","2026-09-08T17:00:04.101709807Z",[8623,8624],{"type":3314,"score":4583},{"type":3314,"score":8625},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8627,8629,8631,8632,8633,8634,8636],{"type":3426,"url":8628},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4rw-rvv2-7xwr",{"type":3332,"url":8630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79676",{"type":3318,"url":6681},{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":8635},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3737.yaml",{"type":3332,"url":8637},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-path-traversal-via-symlink-bypass",[3902,3903,3904],{"id":301,"slug":8640,"dossier":47,"summary":8641,"aliases":8642,"sourceIds":8645,"published":8646,"modified":8647,"checkedAt":7,"severity":8648,"references":8651,"versionKeys":8660,"packageCount":32,"repositoryCount":3615},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[8643,8644],"CVE-2026-34515","PYSEC-2026-2097",[301,8644],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[8649,8650],{"type":3314,"score":7592},{"type":3351,"score":4585},[8652,8654,8656,8658,8659],{"type":3389,"url":8653},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":3332,"url":8655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":3389,"url":8657},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":302,"slug":8662,"dossier":47,"summary":8663,"aliases":8664,"sourceIds":8668,"published":8669,"modified":8670,"checkedAt":7,"severity":8671,"references":8674,"versionKeys":8687,"packageCount":32,"repositoryCount":621},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[8665,8666,8667],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[302,8667],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[8672,8673],{"type":3351,"score":3451},{"type":3351,"score":3486},[8675,8677,8679,8681,8683,8685,8686],{"type":3426,"url":8676},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":3332,"url":8678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":3389,"url":8680},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":3389,"url":8682},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":3318,"url":8684},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":3325,"url":4069},{"type":3332,"url":4988},[4078,4079,4080,4081],{"id":303,"slug":8689,"dossier":47,"summary":8690,"aliases":8691,"sourceIds":8694,"published":7944,"modified":8695,"checkedAt":7,"severity":8696,"references":8699,"versionKeys":8712,"packageCount":32,"repositoryCount":650},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[8692,8693],"CVE-2025-3777","PYSEC-2026-1986",[303,8693],"2026-09-10T03:50:26.198077196Z",[8697],{"type":3351,"score":8698},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[8700,8702,8704,8705,8707,8709,8710],{"type":3332,"url":8701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":3318,"url":8703},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":3325,"url":3424},{"type":3318,"url":8706},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":3318,"url":8708},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":3325,"url":3766},{"type":3332,"url":8711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[3431,3432,3433],{"id":304,"slug":8714,"dossier":90,"summary":8715,"aliases":8716,"sourceIds":8720,"published":8721,"modified":8722,"checkedAt":7,"severity":8723,"references":8725,"versionKeys":8736,"packageCount":32,"repositoryCount":4082},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[8717,8718,8719],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[304,8719],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[8724],{"type":3351,"score":3486},[8726,8728,8730,8732,8734,8735],{"type":3426,"url":8727},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":3332,"url":8729},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":3389,"url":8731},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":3318,"url":8733},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":3325,"url":4069},{"type":3332,"url":4071},[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":305,"slug":8738,"dossier":47,"summary":8739,"aliases":8740,"sourceIds":8743,"published":8744,"modified":8745,"checkedAt":7,"severity":8746,"references":8748,"versionKeys":8757,"packageCount":32,"repositoryCount":621},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[8741,8742],"CVE-2026-42561","PYSEC-2026-3039",[305,8742],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[8747],{"type":3351,"score":3486},[8749,8751,8753,8754,8755],{"type":3318,"url":8750},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":3332,"url":8752},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":3325,"url":4660},{"type":3325,"url":4662},{"type":3332,"url":8756},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[4828,4829,4666],{"id":306,"slug":8759,"dossier":47,"summary":8760,"aliases":8761,"sourceIds":8764,"published":8765,"modified":8766,"checkedAt":7,"severity":8767,"references":8769,"versionKeys":8781,"packageCount":32,"repositoryCount":583},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[8762,8763],"CVE-2025-50181","PYSEC-2026-1999",[306,8763],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[8768],{"type":3351,"score":4126},[8770,8772,8774,8776,8777,8778,8779],{"type":3318,"url":8771},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":3332,"url":8773},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":3389,"url":8775},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":3325,"url":3662},{"type":3318,"url":4136},{"type":3325,"url":3664},{"type":3332,"url":8780},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[3668,3669,3670,3671],{"id":307,"slug":8783,"dossier":47,"summary":8784,"aliases":8785,"sourceIds":8788,"published":8789,"modified":8790,"checkedAt":7,"severity":8791,"references":8794,"versionKeys":8805,"packageCount":32,"repositoryCount":583},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[8786,8787],"CVE-2025-67724","PYSEC-2025-265",[307,8787],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[8792,8793],{"type":3351,"score":5465},{"type":3351,"score":7376},[8795,8797,8799,8801,8803,8804],{"type":3332,"url":8796},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":3332,"url":8798},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":3389,"url":8800},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":3318,"url":8802},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":3325,"url":4007},{"type":3332,"url":6446},[4015,4016,4017],{"id":308,"slug":8807,"dossier":47,"summary":8808,"aliases":8809,"sourceIds":8811,"published":8812,"modified":8813,"checkedAt":7,"severity":8814,"references":8816,"versionKeys":8820,"packageCount":32,"repositoryCount":66},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[8810],"CVE-2026-91992",[308],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[8815],{"type":3351,"score":4581},[8817,8819],{"type":3318,"url":8818},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":3325,"url":4007},[4015,4016,4017,4018,4019],{"id":309,"slug":8822,"dossier":47,"summary":8823,"aliases":8824,"sourceIds":8828,"published":8829,"modified":8830,"checkedAt":7,"severity":8831,"references":8834,"versionKeys":8846,"packageCount":32,"repositoryCount":3673},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[8825,8826,8827],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[309,8827],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[8832,8833],{"type":3314,"score":6460},{"type":3351,"score":5127},[8835,8836,8838,8840,8842,8844,8845],{"type":3318,"url":6464},{"type":3389,"url":8837},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":3332,"url":8839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":3389,"url":8841},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":3389,"url":8843},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":3325,"url":4069},{"type":3332,"url":4962},[4073,4074,4075,4076,4077,4078,4079,4080],{"id":310,"slug":8848,"dossier":47,"summary":8849,"aliases":8850,"sourceIds":8853,"published":8854,"modified":8855,"checkedAt":7,"severity":8856,"references":8859,"versionKeys":8870,"packageCount":32,"repositoryCount":32},"ghsa-q29v-xc37-wh5m-9bf51ff7","Docling: Unsafe URI and Path Handling in HTML Backend",[8851,8852],"CVE-2026-47214","PYSEC-2026-2146",[310,8852],"2026-06-03T21:15:02Z","2026-07-21T15:15:50.289662168Z",[8857],{"type":3351,"score":8858},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[8860,8862,8864,8865,8866,8868],{"type":3389,"url":8861},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-q29v-xc37-wh5m",{"type":3332,"url":8863},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47214",{"type":3325,"url":6164},{"type":3318,"url":6573},{"type":3389,"url":8867},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.94.0",{"type":3318,"url":8869},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2146.yaml",[6172],{"id":311,"slug":8872,"dossier":47,"summary":8873,"aliases":8874,"sourceIds":8877,"published":7944,"modified":8878,"checkedAt":7,"severity":8879,"references":8881,"versionKeys":8892,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[8875,8876],"CVE-2025-3263","PYSEC-2026-1987",[311,8876],"2026-07-07T17:56:57.889099913Z",[8880],{"type":3351,"score":4341},[8882,8884,8885,8886,8887,8889,8890],{"type":3332,"url":8883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":3318,"url":7952},{"type":3318,"url":7954},{"type":3325,"url":3424},{"type":3318,"url":8888},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":3325,"url":3766},{"type":3332,"url":8891},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[3431],{"id":312,"slug":8894,"dossier":47,"summary":8895,"aliases":8896,"sourceIds":8899,"published":8900,"modified":8901,"checkedAt":7,"severity":8902,"references":8905,"versionKeys":8918,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[8897,8898],"CVE-2024-56326","PYSEC-2026-1475",[312,8898],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[8903,8904],{"type":3351,"score":5173},{"type":3314,"score":6590},[8906,8908,8910,8912,8913,8914,8915,8916],{"type":3318,"url":8907},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":3332,"url":8909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":3389,"url":8911},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":3325,"url":6599},{"type":3318,"url":7434},{"type":3318,"url":6601},{"type":3325,"url":6605},{"type":3332,"url":8917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[6609],{"id":313,"slug":8920,"dossier":90,"summary":8921,"aliases":8922,"sourceIds":8925,"published":8926,"modified":8927,"checkedAt":7,"severity":8928,"references":8932,"versionKeys":8938,"packageCount":32,"repositoryCount":7364},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[8923,8924],"CVE-2026-44431","PYSEC-2026-141",[313,8924],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[8929,8930],{"type":3351,"score":6060},{"type":3314,"score":8931},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8933,8935,8937],{"type":3332,"url":8934},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":3332,"url":8936},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":3325,"url":3662},[3668,3669,3670,3671,3672,8358],{"id":314,"slug":8940,"dossier":47,"summary":8941,"aliases":8942,"sourceIds":8946,"published":8947,"modified":8948,"checkedAt":7,"severity":8949,"references":8953,"versionKeys":8971,"packageCount":32,"repositoryCount":573},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[8943,8944,8945],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[314],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[8950,8951],{"type":3351,"score":4419},{"type":3314,"score":8952},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8954,8956,8958,8960,8962,8964,8965,8967,8969],{"type":3332,"url":8955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":3318,"url":8957},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":3318,"url":8959},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":3318,"url":8961},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":3318,"url":8963},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":3325,"url":3729},{"type":3318,"url":8966},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":3318,"url":8968},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":3318,"url":8970},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[3741,3742,3743,5876,5877,8972,8973,8974,8975],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":315,"slug":8977,"dossier":47,"summary":8978,"aliases":8979,"sourceIds":8982,"published":8983,"modified":8984,"checkedAt":7,"severity":8985,"references":8988,"versionKeys":9001,"packageCount":32,"repositoryCount":66},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[8980,8981],"CVE-2026-31958","PYSEC-2026-140",[315,8981],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[8986,8987],{"type":3351,"score":3486},{"type":3314,"score":4651},[8989,8991,8993,8995,8997,8998,8999],{"type":3332,"url":8990},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":3332,"url":8992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":3318,"url":8994},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":3318,"url":8996},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":3325,"url":4007},{"type":3318,"url":5476},{"type":3318,"url":9000},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[4015,4016,4017,4018],{"id":316,"slug":9003,"dossier":47,"summary":9004,"aliases":9005,"sourceIds":9008,"published":9009,"modified":9010,"checkedAt":7,"severity":9011,"references":9014,"versionKeys":9029,"packageCount":32,"repositoryCount":573},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[9006,9007],"CVE-2026-22701","PYSEC-2026-1374",[316,9007],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[9012],{"type":3351,"score":9013},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[9015,9017,9019,9021,9023,9025,9027],{"type":3318,"url":9016},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":3332,"url":9018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":3318,"url":9020},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":3318,"url":9022},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":3325,"url":9024},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":3325,"url":9026},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":3332,"url":9028},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[9030,9031,9032,9033],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":317,"slug":9035,"dossier":47,"summary":9036,"aliases":9037,"sourceIds":9040,"published":9041,"modified":9042,"checkedAt":7,"severity":9043,"references":9045,"versionKeys":9058,"packageCount":32,"repositoryCount":105},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[9038,9039],"CVE-2026-33123","PYSEC-2026-3023",[317,9039],"2026-03-18T16:17:31Z","2026-09-10T03:51:00.643708515Z",[9044],{"type":3314,"score":3354},[9046,9048,9050,9052,9053,9055,9056],{"type":3318,"url":9047},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":3332,"url":9049},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":3318,"url":9051},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":3325,"url":3326},{"type":3318,"url":9054},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":3325,"url":3330},{"type":3332,"url":9057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[3337,3338],{"id":318,"slug":9060,"dossier":47,"summary":9061,"aliases":9062,"sourceIds":9065,"published":9066,"modified":9067,"checkedAt":7,"severity":9068,"references":9071,"versionKeys":9085,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[9063,9064],"CVE-2025-2099","PYSEC-2025-40",[318,9064],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[9069,9070],{"type":3351,"score":4341},{"type":3351,"score":3486},[9072,9074,9076,9078,9079,9081,9083],{"type":3332,"url":9073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":3318,"url":9075},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":3389,"url":9077},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":3325,"url":3424},{"type":3318,"url":9080},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":3318,"url":9082},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":3332,"url":9084},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[3431],{"id":319,"slug":9087,"dossier":47,"summary":9088,"aliases":9089,"sourceIds":9092,"published":9093,"modified":9094,"checkedAt":7,"severity":9095,"references":9098,"versionKeys":9107,"packageCount":32,"repositoryCount":34},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[9090,9091],"CVE-2026-12075","PYSEC-2026-3583",[319,9091],"2026-07-31T16:51:29Z","2026-09-10T03:50:53.081739885Z",[9096],{"type":3351,"score":9097},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[9099,9101,9102,9103,9105],{"type":3318,"url":9100},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3325,"url":3894},{"type":3325,"url":4715},{"type":3332,"url":9104},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3332,"url":9106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[3903,3904],{"id":320,"slug":9109,"dossier":47,"summary":9110,"aliases":9111,"sourceIds":9114,"published":9115,"modified":9116,"checkedAt":7,"severity":9117,"references":9120,"versionKeys":9139,"packageCount":32,"repositoryCount":631},"ghsa-qx2g-xrx7-vfh8-91db951d","NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking",[9112,9113],"CVE-2026-72818","PYSEC-2026-3870",[320,9113],"2026-08-21T00:31:23Z","2026-09-10T12:25:44.300334208Z",[9118,9119],{"type":3351,"score":3486},{"type":3314,"score":4651},[9121,9123,9125,9127,9129,9130,9132,9134,9136,9137],{"type":3332,"url":9122},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-72818",{"type":3318,"url":9124},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3704",{"type":3318,"url":9126},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3701",{"type":3318,"url":9128},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe092ed52eccae642304448bffc8d23cb301f85c1",{"type":3325,"url":3894},{"type":3318,"url":9131},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F3.9.4\u002Fnltk\u002Ftokenize\u002Fcasual.py",{"type":3318,"url":9133},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.1",{"type":3318,"url":9135},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-tweettokenizer-url-pattern-backtracks-catastrophically-on-naked-domain-like-input",{"type":3325,"url":4715},{"type":3332,"url":9138},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qx2g-xrx7-vfh8",[3902,3903,3904],{"id":321,"slug":9141,"dossier":47,"summary":7699,"aliases":9142,"sourceIds":9145,"published":9146,"modified":9147,"checkedAt":7,"severity":9148,"references":9152,"versionKeys":9166,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[9143,9144],"CVE-2024-11392","PYSEC-2024-227",[321,9144],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[9149,9151],{"type":3351,"score":9150},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3351,"score":4701},[9153,9155,9156,9157,9158,9160,9162,9164],{"type":3332,"url":9154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":3318,"url":7714},{"type":3318,"url":7716},{"type":3325,"url":3424},{"type":3318,"url":9159},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":3318,"url":9161},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":3332,"url":9163},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":3332,"url":9165},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[3431],{"id":322,"slug":9168,"dossier":47,"summary":9169,"aliases":9170,"sourceIds":9173,"published":9174,"modified":9175,"checkedAt":7,"severity":9176,"references":9180,"versionKeys":9189,"packageCount":32,"repositoryCount":32},"ghsa-r3xg-rg9j-67fv-878d1feb","Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend",[9171,9172],"CVE-2026-44018","PYSEC-2026-2144",[322,9172],"2026-06-03T21:13:32Z","2026-07-21T15:15:50.260072276Z",[9177,9179],{"type":3351,"score":9178},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3351,"score":4199},[9181,9183,9185,9186,9187],{"type":3389,"url":9182},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-r3xg-rg9j-67fv",{"type":3332,"url":9184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44018",{"type":3325,"url":6164},{"type":3332,"url":6573},{"type":3318,"url":9188},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2144.yaml",[6172],{"id":323,"slug":9191,"dossier":47,"summary":9192,"aliases":9193,"sourceIds":9196,"published":9197,"modified":9198,"checkedAt":7,"severity":9199,"references":9205,"versionKeys":9220,"packageCount":32,"repositoryCount":34},"ghsa-r6gq-whwq-mvg9-34c83a12","NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root",[9194,9195],"CVE-2026-70626","PYSEC-2026-3732",[323,9195],"2026-08-22T15:16:21.100Z","2026-09-08T15:30:07.726015360Z",[9200,9202,9203],{"type":3351,"score":9201},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3314,"score":6460},{"type":3314,"score":9204},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9206,9208,9210,9211,9213,9214,9216,9218],{"type":3426,"url":9207},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-r6gq-whwq-mvg9",{"type":3332,"url":9209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-70626",{"type":3318,"url":5393},{"type":3318,"url":9212},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1b0e519e2324bc1a273d56edee63e44d0ad85b48",{"type":3325,"url":3894},{"type":3318,"url":9215},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.4",{"type":3318,"url":9217},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3732.yaml",{"type":3332,"url":9219},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-symlink-escape-via-corpusreader",[3903,3904],{"id":324,"slug":9222,"dossier":47,"summary":9223,"aliases":9224,"sourceIds":9228,"published":9229,"modified":9230,"checkedAt":7,"severity":9231,"references":9234,"versionKeys":9248,"packageCount":32,"repositoryCount":3673},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[9225,9226,9227],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[324,9227],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[9232,9233],{"type":3351,"score":3717},{"type":3314,"score":3354},[9235,9237,9239,9241,9243,9244,9245,9246],{"type":3318,"url":9236},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":3332,"url":9238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":3318,"url":9240},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":3318,"url":9242},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":3325,"url":4069},{"type":3318,"url":4962},{"type":3325,"url":4990},{"type":3332,"url":9247},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4073,4074,4075,4076,4077,4078,4079,4080],{"id":325,"slug":9250,"dossier":47,"summary":9251,"aliases":9252,"sourceIds":9255,"published":9256,"modified":9257,"checkedAt":7,"severity":9258,"references":9260,"versionKeys":9275,"packageCount":32,"repositoryCount":34},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[9253,9254],"CVE-2025-6051","PYSEC-2026-1988",[325,9254],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[9259],{"type":3351,"score":4341},[9261,9263,9265,9267,9269,9270,9272,9273],{"type":3332,"url":9262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":3318,"url":9264},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":3318,"url":9266},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":3318,"url":9268},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":3325,"url":3424},{"type":3318,"url":9271},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":3325,"url":3766},{"type":3332,"url":9274},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[3431,3432,3433,3434],{"id":326,"slug":9277,"dossier":47,"summary":9278,"aliases":9279,"sourceIds":9282,"published":9283,"modified":9284,"checkedAt":7,"severity":9285,"references":9288,"versionKeys":9300,"packageCount":32,"repositoryCount":34},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[9280,9281],"CVE-2026-66393","PYSEC-2026-3724",[326,9281],"2026-03-18T20:17:43Z","2026-09-10T03:50:40.818763364Z",[9286,9287],{"type":3314,"score":3354},{"type":3314,"score":6084},[9289,9291,9293,9295,9296,9298],{"type":3426,"url":9290},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":3332,"url":9292},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-66393",{"type":3318,"url":9294},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F00cdcd392142e6c745e7120c8d50a24127df5fad",{"type":3325,"url":3894},{"type":3318,"url":9297},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3724.yaml",{"type":3332,"url":9299},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-denial-of-service-via-jsontaggeddecoder",[3903,3904],{"id":327,"slug":9302,"dossier":47,"summary":9303,"aliases":9304,"sourceIds":9307,"published":9308,"modified":9309,"checkedAt":7,"severity":9310,"references":9313,"versionKeys":9326,"packageCount":32,"repositoryCount":573},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[9305,9306],"CVE-2026-25087","PYSEC-2026-113",[327,9306],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[9311],{"type":3351,"score":9312},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[9314,9316,9318,9320,9322,9324],{"type":3332,"url":9315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":3389,"url":9317},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":3325,"url":9319},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":3318,"url":9321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":3332,"url":9323},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":3332,"url":9325},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[9327,9328,9329,9330],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":328,"slug":9332,"dossier":47,"summary":9333,"aliases":9334,"sourceIds":9337,"published":9338,"modified":9339,"checkedAt":7,"severity":9340,"references":9345,"versionKeys":9360,"packageCount":32,"repositoryCount":34},"ghsa-rhp5-r9x4-f5g2-737c7e67","NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",[9335,9336],"CVE-2026-78683","PYSEC-2026-3734",[328,9336],"2026-08-25T02:16:53.033Z","2026-09-08T16:45:04.193165862Z",[9341,9343],{"type":3314,"score":9342},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":3314,"score":9344},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9346,9348,9350,9352,9354,9355,9356,9358],{"type":3426,"url":9347},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rhp5-r9x4-f5g2",{"type":3332,"url":9349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78683",{"type":3318,"url":9351},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3631",{"type":3318,"url":9353},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Ff26b3753038d937b68145daf15e9636f8451053c",{"type":3325,"url":3894},{"type":3318,"url":3930},{"type":3318,"url":9357},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3734.yaml",{"type":3332,"url":9359},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-remote-code-execution-via-unsafe-pickle-deserialization",[3903,3904],{"id":329,"slug":9362,"dossier":47,"summary":9363,"aliases":9364,"sourceIds":9368,"published":6809,"modified":9369,"checkedAt":7,"severity":9370,"references":9373,"versionKeys":9391,"packageCount":32,"repositoryCount":3673},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[9365,9366,9367],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[329],"2026-09-10T03:49:48.419046410Z",[9371,9372],{"type":3351,"score":4419},{"type":3314,"score":8952},[9374,9376,9378,9380,9382,9384,9385,9387,9389],{"type":3332,"url":9375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":3318,"url":9377},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":3318,"url":9379},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":3318,"url":9381},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":3318,"url":9383},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":3325,"url":3729},{"type":3318,"url":9386},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":3318,"url":9388},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":3318,"url":9390},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[9392,9393,9394,3741,3742,3743,5876,5877,8972,8973,8974,8975],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":330,"slug":9396,"dossier":47,"summary":9397,"aliases":9398,"sourceIds":9401,"published":9402,"modified":9403,"checkedAt":7,"severity":9404,"references":9408,"versionKeys":9423,"packageCount":32,"repositoryCount":34},"ghsa-rrv8-h7p8-rx55-b07785af","NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions",[9399,9400],"CVE-2026-80205","PYSEC-2026-3750",[330,9400],"2026-08-26T11:16:39.950Z","2026-09-08T20:45:04.338061792Z",[9405,9406,9407],{"type":3351,"score":3486},{"type":3314,"score":4651},{"type":3314,"score":6084},[9409,9411,9413,9415,9417,9418,9419,9421],{"type":3426,"url":9410},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rrv8-h7p8-rx55",{"type":3332,"url":9412},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80205",{"type":3318,"url":9414},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3674",{"type":3318,"url":9416},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fd8e47539317b571ab1422981f5b9653d5eae1249",{"type":3325,"url":3894},{"type":3318,"url":3930},{"type":3318,"url":9420},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3750.yaml",{"type":3332,"url":9422},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.0-redos-via-text-findall-unvalidated-regex",[3903,3904],{"id":331,"slug":9425,"dossier":47,"summary":9426,"aliases":9427,"sourceIds":9430,"published":9431,"modified":9432,"checkedAt":7,"severity":9433,"references":9438,"versionKeys":9455,"packageCount":32,"repositoryCount":32},"ghsa-v492-6xx2-p57g-b1729313","Chainlit contains an authorization bypass vulnerability",[9428,9429],"CVE-2025-68492","PYSEC-2026-1238",[331,9429],"2026-01-14T09:31:21Z","2026-07-07T17:56:13.167928474Z",[9434,9436],{"type":3351,"score":9435},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3314,"score":9437},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9439,9441,9443,9445,9446,9448,9450,9452,9453],{"type":3332,"url":9440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68492",{"type":3318,"url":9442},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2637",{"type":3318,"url":9444},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F8f1153db439eca58ae5c50c8276ba6fdd311448e",{"type":3325,"url":3524},{"type":3318,"url":9447},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases",{"type":3318,"url":9449},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.8.5",{"type":3318,"url":9451},"https:\u002F\u002Fjvn.jp\u002Fen\u002Fjp\u002FJVN34964581",{"type":3325,"url":3532},{"type":3332,"url":9454},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v492-6xx2-p57g",[3536],{"id":332,"slug":9457,"dossier":47,"summary":9458,"aliases":9459,"sourceIds":9462,"published":9463,"modified":9464,"checkedAt":7,"severity":9465,"references":9467,"versionKeys":9476,"packageCount":32,"repositoryCount":602},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[9460,9461],"CVE-2026-53540","PYSEC-2026-3040",[332,9461],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[9466],{"type":3351,"score":7067},[9468,9470,9471,9472,9474],{"type":3318,"url":9469},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3325,"url":4660},{"type":3325,"url":4662},{"type":3332,"url":9473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3332,"url":9475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[4828,4829,4830,4666],{"id":333,"slug":9478,"dossier":47,"summary":9479,"aliases":9480,"sourceIds":9483,"published":9484,"modified":9485,"checkedAt":7,"severity":9486,"references":9488,"versionKeys":9499,"packageCount":32,"repositoryCount":602},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[9481,9482],"CVE-2026-53537","PYSEC-2026-3041",[333,9482],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[9487],{"type":3351,"score":5225},[9489,9491,9493,9494,9496,9498],{"type":3318,"url":9490},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3332,"url":9492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":3325,"url":4660},{"type":3332,"url":9495},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3318,"url":9497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":3325,"url":4662},[4828,4829,4830,4666],{"id":334,"slug":9501,"dossier":47,"summary":9502,"aliases":9503,"sourceIds":9506,"published":9507,"modified":9508,"checkedAt":7,"severity":9509,"references":9511,"versionKeys":9524,"packageCount":32,"repositoryCount":621},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[9504,9505],"CVE-2026-41066","PYSEC-2026-87",[334,9505],"2026-04-21T20:38:44Z","2026-09-10T03:51:03.302383702Z",[9510],{"type":3351,"score":4585},[9512,9514,9516,9518,9520,9522],{"type":3332,"url":9513},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":3332,"url":9515},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3722,"url":9517},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":3325,"url":9519},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":3318,"url":9521},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":3318,"url":9523},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[9525,9526,9527],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":335,"slug":9529,"dossier":47,"summary":9530,"aliases":9531,"sourceIds":9535,"published":6809,"modified":9536,"checkedAt":7,"severity":9537,"references":9540,"versionKeys":9555,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[9532,9533,9534],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[335],"2026-06-10T17:41:15.774477397Z",[9538,9539],{"type":3351,"score":4419},{"type":3314,"score":6814},[9541,9543,9544,9545,9546,9548,9549,9551,9553],{"type":3332,"url":9542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":3318,"url":6819},{"type":3318,"url":6821},{"type":3318,"url":6823},{"type":3318,"url":9547},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":3325,"url":3729},{"type":3318,"url":9550},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":3318,"url":9552},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":3318,"url":9554},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[3741,3742,3743,5876,5877,8972,8973],{"id":336,"slug":9557,"dossier":47,"summary":9558,"aliases":9559,"sourceIds":9562,"published":9563,"modified":9564,"checkedAt":7,"severity":9565,"references":9567,"versionKeys":9582,"packageCount":32,"repositoryCount":650},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[9560,9561],"CVE-2026-59950","PYSEC-2026-3483",[336,9561],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[9566],{"type":3314,"score":6184},[9568,9570,9572,9574,9576,9577,9579,9580],{"type":3318,"url":9569},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":3332,"url":9571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":3318,"url":9573},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":3318,"url":9575},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":3325,"url":6195},{"type":3318,"url":9578},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":3325,"url":6199},{"type":3332,"url":9581},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[6201,6202,6203],{"id":337,"slug":9584,"dossier":90,"summary":9585,"aliases":9586,"sourceIds":9590,"published":9591,"modified":9592,"checkedAt":7,"severity":9593,"references":9595,"versionKeys":9609,"packageCount":32,"repositoryCount":4082},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[9587,9588,9589],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[337,9589],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[9594],{"type":3314,"score":4651},[9596,9598,9600,9602,9604,9605,9606,9607],{"type":3318,"url":9597},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":3332,"url":9599},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":3318,"url":9601},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":3318,"url":9603},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":3325,"url":4069},{"type":3318,"url":4988},{"type":3325,"url":4990},{"type":3332,"url":9608},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":338,"slug":9611,"dossier":47,"summary":9612,"aliases":9613,"sourceIds":9616,"published":9617,"modified":9618,"checkedAt":7,"severity":9619,"references":9623,"versionKeys":9636,"packageCount":32,"repositoryCount":631},"ghsa-vp2x-qp44-57v7-6098fc6a","NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`",[9614,9615],"CVE-2026-81723","PYSEC-2026-3871",[338,9615],"2026-09-02T14:34:11Z","2026-09-10T12:25:42.010688905Z",[9620,9621],{"type":3351,"score":7067},{"type":3314,"score":9622},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[9624,9626,9628,9629,9630,9631,9633,9634],{"type":3318,"url":9625},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",{"type":3332,"url":9627},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81723",{"type":3318,"url":5937},{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":9632},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-quadratic-cpu-exhaustion-via-xmlcorpusview",{"type":3325,"url":4715},{"type":3332,"url":9635},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",[3902,3903,3904],{"id":339,"slug":9638,"dossier":47,"summary":9639,"aliases":9640,"sourceIds":9643,"published":9644,"modified":9645,"checkedAt":7,"severity":9646,"references":9649,"versionKeys":9662,"packageCount":32,"repositoryCount":650},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[9641,9642],"CVE-2025-43859","PYSEC-2026-348",[339,9642],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[9647],{"type":3351,"score":9648},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9650,9652,9654,9656,9658,9660],{"type":3318,"url":9651},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":3332,"url":9653},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":3318,"url":9655},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":3325,"url":9657},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":3325,"url":9659},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":3332,"url":9661},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[9663],"pypi:h11@0.14.0",{"id":340,"slug":9665,"dossier":47,"summary":9666,"aliases":9667,"sourceIds":9670,"published":9671,"modified":9672,"checkedAt":7,"severity":9673,"references":9675,"versionKeys":9689,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[9668,9669],"CVE-2025-62707","PYSEC-2026-1833",[340,9669],"2025-10-22T19:40:47Z","2026-09-10T03:50:58.424138377Z",[9674],{"type":3314,"score":4179},[9676,9678,9680,9682,9684,9685,9686,9687],{"type":3318,"url":9677},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":3332,"url":9679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":3318,"url":9681},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":3318,"url":9683},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":3325,"url":3326},{"type":3318,"url":7800},{"type":3325,"url":3330},{"type":3332,"url":9688},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[3337],{"id":341,"slug":9691,"dossier":47,"summary":9692,"aliases":9693,"sourceIds":9696,"published":9697,"modified":9698,"checkedAt":7,"severity":9699,"references":9702,"versionKeys":9711,"packageCount":32,"repositoryCount":3615},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[9694,9695],"CVE-2026-22815","PYSEC-2026-2094",[341,9695],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[9700,9701],{"type":3314,"score":3855},{"type":3314,"score":6704},[9703,9705,9707,9709,9710],{"type":3389,"url":9704},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":3332,"url":9706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":3389,"url":9708},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":3325,"url":3491},{"type":3332,"url":3613},[3495,3496,3497,3498,3499,3500,3501,3502],{"id":342,"slug":9713,"dossier":47,"summary":9714,"aliases":9715,"sourceIds":9718,"published":9719,"modified":9720,"checkedAt":7,"severity":9721,"references":9723,"versionKeys":9734,"packageCount":32,"repositoryCount":32},"ghsa-w3fx-mc44-mf6j-8eb1f0ed","Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution",[9716,9717],"CVE-2026-45018","PYSEC-2026-3812",[342,9717],"2026-08-25T19:19:28Z","2026-09-10T12:26:01.565580392Z",[9722],{"type":3351,"score":4506},[9724,9726,9727,9728,9729,9730,9732],{"type":3318,"url":9725},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3318,"url":7665},{"type":3325,"url":3524},{"type":3318,"url":7670},{"type":3325,"url":3532},{"type":3332,"url":9731},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3332,"url":9733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45018",[3536],{"id":343,"slug":9736,"dossier":47,"summary":9737,"aliases":9738,"sourceIds":9741,"published":9742,"modified":9743,"checkedAt":7,"severity":9744,"references":9749,"versionKeys":9762,"packageCount":32,"repositoryCount":631},"ghsa-w3v8-gmh9-3wv7-b77729c9","NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions",[9739,9740],"CVE-2026-80206","PYSEC-2026-3751",[343,9740],"2026-08-26T11:16:40.103Z","2026-09-08T20:45:04.333988177Z",[9745,9747],{"type":3314,"score":9746},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3314,"score":9748},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9750,9752,9754,9756,9757,9758,9760],{"type":3426,"url":9751},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-w3v8-gmh9-3wv7",{"type":3332,"url":9753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80206",{"type":3318,"url":9755},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0072ea2fb8be22e038a36e887b7061bb6b9339d9",{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":9759},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3751.yaml",{"type":3332,"url":9761},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-3.10.2-regular-expression-denial-of-service-via-tgrep",[3902,3903,3904],{"id":344,"slug":9764,"dossier":47,"summary":9765,"aliases":9766,"sourceIds":9769,"published":9770,"modified":9771,"checkedAt":7,"severity":9772,"references":9774,"versionKeys":9782,"packageCount":32,"repositoryCount":650},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[9767,9768],"CVE-2026-48525","PYSEC-2026-178",[344,9768],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[9773],{"type":3351,"score":3451},[9775,9777,9779,9780],{"type":3426,"url":9776},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":3332,"url":9778},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":3325,"url":5421},{"type":3318,"url":9781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[5427,5428],{"id":345,"slug":9784,"dossier":47,"summary":9785,"aliases":9786,"sourceIds":9789,"published":9790,"modified":9791,"checkedAt":7,"severity":9792,"references":9795,"versionKeys":9812,"packageCount":32,"repositoryCount":573},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[9787,9788],"CVE-2025-68146","PYSEC-2026-1375",[345,9788],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[9793],{"type":3351,"score":9794},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[9796,9798,9800,9801,9803,9805,9807,9808,9810],{"type":3318,"url":9797},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3318,"url":9799},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":3325,"url":9024},{"type":3318,"url":9802},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":3318,"url":9804},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":3318,"url":9806},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":3325,"url":9026},{"type":3332,"url":9809},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3332,"url":9811},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[9030,9031,9032,9033],{"id":346,"slug":9814,"dossier":47,"summary":9815,"aliases":9816,"sourceIds":9819,"published":9820,"modified":9821,"checkedAt":7,"severity":9822,"references":9824,"versionKeys":9838,"packageCount":32,"repositoryCount":105},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[9817,9818],"CVE-2026-27025","PYSEC-2026-3024",[346,9818],"2026-02-18T22:41:13Z","2026-09-10T03:50:36.045929384Z",[9823],{"type":3314,"score":4477},[9825,9827,9829,9831,9833,9834,9835,9836],{"type":3318,"url":9826},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":3332,"url":9828},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":3318,"url":9830},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":3318,"url":9832},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":3325,"url":3326},{"type":3318,"url":6144},{"type":3325,"url":3330},{"type":3332,"url":9837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[3337,3338],{"id":347,"slug":9840,"dossier":47,"summary":9841,"aliases":9842,"sourceIds":9846,"published":9847,"modified":9848,"checkedAt":7,"severity":9849,"references":9852,"versionKeys":9890,"packageCount":32,"repositoryCount":3673},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[9843,9844,9845],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[347,9845],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[9850,9851],{"type":3351,"score":3486},{"type":3314,"score":4651},[9853,9855,9857,9859,9861,9862,9864,9866,9868,9870,9872,9874,9875,9877,9879,9881,9882,9884,9886,9888],{"type":3318,"url":9854},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":3332,"url":9856},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":3318,"url":9858},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":3318,"url":9860},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":3325,"url":4069},{"type":3318,"url":9863},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":3318,"url":9865},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":3318,"url":9867},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":3332,"url":9869},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":3332,"url":9871},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":3332,"url":9873},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":3332,"url":6486},{"type":3332,"url":9876},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":3332,"url":9878},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":3332,"url":9880},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":3332,"url":4109},{"type":3332,"url":9883},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":3332,"url":9885},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":3332,"url":9887},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":3332,"url":9889},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4073,4074,4075,4076,4077,4078,4079,4080],{"id":348,"slug":9892,"dossier":47,"summary":9893,"aliases":9894,"sourceIds":9897,"published":9898,"modified":9899,"checkedAt":7,"severity":9900,"references":9902,"versionKeys":9915,"packageCount":32,"repositoryCount":105},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[9895,9896],"CVE-2026-48735","PYSEC-2026-3025",[348,9896],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[9901],{"type":3314,"score":4477},[9903,9905,9907,9909,9910,9912,9913],{"type":3318,"url":9904},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":3332,"url":9906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":3318,"url":9908},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":3325,"url":3326},{"type":3318,"url":9911},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":3325,"url":3330},{"type":3332,"url":9914},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[3337,3338],{"id":349,"slug":9917,"dossier":47,"summary":9918,"aliases":9919,"sourceIds":9923,"published":9924,"modified":9925,"checkedAt":7,"severity":9926,"references":9929,"versionKeys":9938,"packageCount":32,"repositoryCount":3673},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[9920,9921,9922],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[349,9922],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[9927,9928],{"type":3351,"score":3717},{"type":3314,"score":3354},[9930,9932,9934,9936,9937],{"type":3332,"url":9931},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":3332,"url":9933},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":3318,"url":9935},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":3325,"url":4069},{"type":3332,"url":4962},[4073,4074,4075,4076,4077,4078,4079,4080],{"id":350,"slug":9940,"dossier":47,"summary":9941,"aliases":9942,"sourceIds":9945,"published":9946,"modified":9947,"checkedAt":7,"severity":9948,"references":9951,"versionKeys":9964,"packageCount":32,"repositoryCount":621},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[9943,9944],"CVE-2026-24486","PYSEC-2026-1852",[350,9944],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[9949],{"type":3351,"score":9950},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[9952,9954,9956,9958,9959,9961,9962],{"type":3318,"url":9953},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":3332,"url":9955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":3318,"url":9957},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":3325,"url":4660},{"type":3318,"url":9960},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":3325,"url":4662},{"type":3332,"url":9963},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[4828,4829,4666],{"id":351,"slug":9966,"dossier":47,"summary":9967,"aliases":9968,"sourceIds":9971,"published":9972,"modified":9973,"checkedAt":7,"severity":9974,"references":9976,"versionKeys":9998,"packageCount":32,"repositoryCount":3615},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[9969,9970],"CVE-2026-48818","PYSEC-2026-2281",[351,9970],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[9975],{"type":3351,"score":4585},[9977,9979,9980,9982,9984,9986,9988,9990,9992,9994,9996],{"type":3332,"url":9978},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":3325,"url":5529},{"type":3318,"url":9981},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":3318,"url":9983},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":3332,"url":9985},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":3332,"url":9987},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":3332,"url":9989},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":3332,"url":9991},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3722,"url":9993},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":3389,"url":9995},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":3389,"url":9997},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[3470,3471,3472,5536,5537,5538,5680,5681,5682],{"id":352,"slug":10000,"dossier":47,"summary":7699,"aliases":10001,"sourceIds":10004,"published":7704,"modified":10005,"checkedAt":7,"severity":10006,"references":10009,"versionKeys":10023,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[10002,10003],"CVE-2024-11393","PYSEC-2024-228",[352,10003],"2026-09-10T03:50:55.987633957Z",[10007,10008],{"type":3351,"score":7708},{"type":3351,"score":4701},[10010,10012,10013,10014,10015,10017,10019,10021],{"type":3332,"url":10011},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":3318,"url":7714},{"type":3318,"url":7716},{"type":3325,"url":3424},{"type":3318,"url":10016},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":3318,"url":10018},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":3332,"url":10020},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":3332,"url":10022},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[3431],{"id":353,"slug":10025,"dossier":47,"summary":10026,"aliases":10027,"sourceIds":10030,"published":10031,"modified":10032,"checkedAt":7,"severity":10033,"references":10036,"versionKeys":10048,"packageCount":32,"repositoryCount":631},"ghsa-ww6m-cw3f-q94g-c2ac9639","NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'",[10028,10029],"CVE-2026-81722","PYSEC-2026-3738",[353,10029],"2026-08-27T17:21:02.800Z","2026-09-10T03:50:54.572733114Z",[10034,10035],{"type":3314,"score":3855},{"type":3314,"score":6084},[10037,10039,10041,10042,10043,10044,10046],{"type":3426,"url":10038},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ww6m-cw3f-q94g",{"type":3332,"url":10040},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81722",{"type":3318,"url":5937},{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":10045},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3738.yaml",{"type":3332,"url":10047},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-porterstemmer-before-3.10.3-quadratic-time-dos",[3902,3903,3904],{"id":354,"slug":10050,"dossier":47,"summary":10051,"aliases":10052,"sourceIds":10053,"published":10054,"modified":10055,"checkedAt":7,"severity":10056,"references":10059,"versionKeys":10071,"packageCount":32,"repositoryCount":650},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[],[354],"2026-09-01T20:17:23Z","2026-09-10T03:50:54.582059531Z",[10057],{"type":3314,"score":10058},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10060,10062,10063,10065,10067,10069,10070],{"type":3318,"url":10061},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":3318,"url":5718},{"type":3318,"url":10064},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":3318,"url":10066},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":3318,"url":10068},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":3325,"url":4007},{"type":3318,"url":5725},[4019,5727],{"id":355,"slug":10073,"dossier":47,"summary":10074,"aliases":10075,"sourceIds":10078,"published":10079,"modified":10080,"checkedAt":7,"severity":10081,"references":10084,"versionKeys":10096,"packageCount":32,"repositoryCount":105},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[10076,10077],"CVE-2026-41314","PYSEC-2026-3026",[355,10077],"2026-04-16T21:30:25Z","2026-09-10T03:51:03.926113177Z",[10082,10083],{"type":3351,"score":4278},{"type":3314,"score":4280},[10085,10087,10089,10090,10091,10092,10093,10094],{"type":3318,"url":10086},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":3332,"url":10088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":3318,"url":5597},{"type":3318,"url":5599},{"type":3325,"url":3326},{"type":3318,"url":4292},{"type":3325,"url":3330},{"type":3332,"url":10095},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[3337,3338],{"id":356,"slug":10098,"dossier":47,"summary":10099,"aliases":10100,"sourceIds":10104,"published":10105,"modified":10106,"checkedAt":7,"severity":10107,"references":10112,"versionKeys":10128,"packageCount":32,"repositoryCount":105},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[10101,10102,10103],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[356],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[10108,10110],{"type":3351,"score":10109},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":3314,"score":10111},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10113,10115,10117,10119,10121,10122,10124,10126],{"type":3332,"url":10114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":3318,"url":10116},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":3318,"url":10118},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":3318,"url":10120},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":3325,"url":3729},{"type":3318,"url":10123},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":3318,"url":10125},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":3318,"url":10127},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[3741,3742],{"id":357,"slug":10130,"dossier":47,"summary":10131,"aliases":10132,"sourceIds":10135,"published":10136,"modified":10137,"checkedAt":7,"severity":10138,"references":10141,"versionKeys":10156,"packageCount":32,"repositoryCount":34},"ghsa-x5ph-mj9p-rfr8-05f43684","NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read",[10133,10134],"CVE-2026-63312","PYSEC-2026-3730",[357,10134],"2026-08-22T15:16:19.367Z","2026-09-08T15:46:56.600781081Z",[10139,10140],{"type":3314,"score":5356},{"type":3314,"score":5358},[10142,10144,10146,10148,10150,10151,10152,10154],{"type":3426,"url":10143},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x5ph-mj9p-rfr8",{"type":3332,"url":10145},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63312",{"type":3318,"url":10147},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3588",{"type":3318,"url":10149},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F674ea75accdf08eca3782dee0a9c4ed7e0d0025b",{"type":3325,"url":3894},{"type":3318,"url":3930},{"type":3318,"url":10153},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3730.yaml",{"type":3332,"url":10155},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-streambackedcorpusview-bypasses-pathsec-enforce-arbitrary-file-read",[3903,3904],{"id":358,"slug":10158,"dossier":47,"summary":10159,"aliases":10160,"sourceIds":10163,"published":10164,"modified":10165,"checkedAt":7,"severity":10166,"references":10168,"versionKeys":10175,"packageCount":32,"repositoryCount":3615},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[10161,10162],"CVE-2026-48817","PYSEC-2026-2280",[358,10162],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[10167],{"type":3351,"score":3603},[10169,10171,10173,10174],{"type":3332,"url":10170},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":3332,"url":10172},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":3325,"url":5529},{"type":3332,"url":9991},[3470,3471,3472,5536,5537,5538,5680,5681,5682],{"id":359,"slug":10177,"dossier":47,"summary":10178,"aliases":10179,"sourceIds":10182,"published":10183,"modified":10184,"checkedAt":7,"severity":10185,"references":10187,"versionKeys":10202,"packageCount":32,"repositoryCount":105},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[10180,10181],"CVE-2026-27888","PYSEC-2026-3027",[359,10181],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[10186],{"type":3314,"score":4179},[10188,10190,10192,10194,10196,10197,10199,10200],{"type":3318,"url":10189},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":3332,"url":10191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":3318,"url":10193},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":3318,"url":10195},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":3325,"url":3326},{"type":3318,"url":10198},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":3325,"url":3330},{"type":3332,"url":10201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[3337,3338],{"id":360,"slug":10204,"dossier":47,"summary":10205,"aliases":10206,"sourceIds":10209,"published":10210,"modified":10211,"checkedAt":7,"severity":10212,"references":10215,"versionKeys":10230,"packageCount":32,"repositoryCount":105},"ghsa-x8wg-4xgc-vr54-f9dfa3b4","Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root",[10207,10208],"CVE-2026-71492","PYSEC-2026-3810",[360,10208],"2026-09-02T14:38:24Z","2026-09-10T12:25:29.001076918Z",[10213],{"type":3314,"score":10214},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10216,10218,10220,10222,10224,10225,10227,10228],{"type":3318,"url":10217},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",{"type":3332,"url":10219},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71492",{"type":3318,"url":10221},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F77",{"type":3318,"url":10223},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002Fa215f6d779966945c56e0af5abed1ae5916fd9d3",{"type":3325,"url":7458},{"type":3318,"url":10226},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.4.5",{"type":3325,"url":7460},{"type":3332,"url":10229},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",[7464],{"id":361,"slug":10232,"dossier":47,"summary":10233,"aliases":10234,"sourceIds":10237,"published":10238,"modified":10239,"checkedAt":7,"severity":10240,"references":10243,"versionKeys":10255,"packageCount":32,"repositoryCount":631},"ghsa-x99w-6fgc-pmfw-512b3e4e","NLTK: Allowlisted pickle loaders still permit code execution in current source",[10235,10236],"CVE-2026-79657","PYSEC-2026-3735",[361,10236],"2026-08-25T12:16:28.870Z","2026-09-08T17:00:04.111203038Z",[10241,10242],{"type":3314,"score":4504},{"type":3314,"score":8231},[10244,10246,10248,10249,10250,10251,10253],{"type":3426,"url":10245},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x99w-6fgc-pmfw",{"type":3332,"url":10247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79657",{"type":3318,"url":4708},{"type":3325,"url":3894},{"type":3318,"url":3896},{"type":3318,"url":10252},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3735.yaml",{"type":3332,"url":10254},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-remote-code-execution-via-unsafe-pickle-deserialization",[3902,3903,3904],{"id":362,"slug":10257,"dossier":47,"summary":10258,"aliases":10259,"sourceIds":10262,"published":10263,"modified":10264,"checkedAt":7,"severity":10265,"references":10268,"versionKeys":10274,"packageCount":32,"repositoryCount":42},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[10260,10261],"CVE-2026-54274","PYSEC-2026-2108",[362,10261],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[10266,10267],{"type":3314,"score":4179},{"type":3351,"score":3486},[10269,10271,10272],{"type":3332,"url":10270},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":3325,"url":3491},{"type":3389,"url":10273},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[3495,3496,3497,3498,3499,3500,3501,3502,3503],{"id":363,"slug":10276,"dossier":47,"summary":10277,"aliases":10278,"sourceIds":10282,"published":10283,"modified":10284,"checkedAt":7,"severity":10285,"references":10287,"versionKeys":10301,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[10279,10280,10281],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[363,10281],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[10286],{"type":3351,"score":6845},[10288,10290,10292,10294,10296,10298,10299],{"type":3332,"url":10289},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":3332,"url":10291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":3318,"url":10293},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":3389,"url":10295},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":3318,"url":10297},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":3325,"url":4069},{"type":3318,"url":10300},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[4076],{"id":364,"slug":10303,"dossier":47,"summary":10304,"aliases":10305,"sourceIds":10308,"published":10309,"modified":10310,"checkedAt":7,"severity":10311,"references":10314,"versionKeys":10322,"packageCount":32,"repositoryCount":650},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[10306,10307],"CVE-2026-48526","PYSEC-2026-179",[364,10307],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[10312],{"type":3351,"score":10313},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[10315,10317,10319,10320],{"type":3426,"url":10316},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":3332,"url":10318},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":3325,"url":5421},{"type":3318,"url":10321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[5427,5428],{"id":365,"slug":10324,"dossier":47,"summary":10325,"aliases":10326,"sourceIds":10329,"published":10330,"modified":10331,"checkedAt":7,"severity":10332,"references":10334,"versionKeys":10343,"packageCount":32,"repositoryCount":34},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[10327,10328],"CVE-2026-12074","PYSEC-2026-3584",[365,10328],"2026-07-31T16:50:41Z","2026-09-10T03:50:53.172593126Z",[10333],{"type":3351,"score":4585},[10335,10337,10338,10339,10341],{"type":3318,"url":10336},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3325,"url":3894},{"type":3325,"url":4715},{"type":3332,"url":10340},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3332,"url":10342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[3903,3904],{"id":366,"slug":10345,"dossier":90,"summary":10346,"aliases":10347,"sourceIds":10351,"published":10352,"modified":10353,"checkedAt":7,"severity":10354,"references":10357,"versionKeys":10368,"packageCount":32,"repositoryCount":4082},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[10348,10349,10350],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[366,10350],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[10355],{"type":3351,"score":10356},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[10358,10360,10362,10364,10366,10367],{"type":3426,"url":10359},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":3332,"url":10361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":3389,"url":10363},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":3389,"url":10365},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":3325,"url":4069},{"type":3332,"url":4988},[4073,4074,4075,4076,4077,4078,4079,4080,4081],{"id":367,"slug":10370,"dossier":47,"summary":10371,"aliases":10372,"sourceIds":10375,"published":10376,"modified":10377,"checkedAt":7,"severity":10378,"references":10381,"versionKeys":10394,"packageCount":32,"repositoryCount":103},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[10373,10374],"CVE-2026-9856","PYSEC-2026-3929",[367,10374],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[10379],{"type":3351,"score":10380},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[10382,10384,10386,10388,10389,10391,10392],{"type":3332,"url":10383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":3318,"url":10385},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":3318,"url":10387},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":3325,"url":3424},{"type":3318,"url":10390},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":3325,"url":3766},{"type":3332,"url":10393},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[3431,3432,3433,3434,3435,3436,3437,3438,3439,10395],"pypi:transformers@5.8.0",{"id":368,"slug":10397,"dossier":47,"summary":10398,"aliases":10399,"sourceIds":10402,"published":10403,"modified":10404,"checkedAt":7,"severity":10405,"references":10407,"versionKeys":10415,"packageCount":32,"repositoryCount":32},"ghsa-xvp8-3mhv-424c-5f064018","lxml-html-clean has \u003Cbase> tag injection through default Cleaner configuration",[10400,10401],"CVE-2026-28350","PYSEC-2026-2202",[368,10401],"2026-03-02T19:35:52Z","2026-09-10T03:50:41.927155700Z",[10406],{"type":3351,"score":7376},[10408,10410,10412,10414],{"type":3426,"url":10409},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-xvp8-3mhv-424c",{"type":3332,"url":10411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28350",{"type":3389,"url":10413},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F9c5612ca33b941eec4178abf8a5294b103403f34",{"type":3325,"url":4240},[4248],{"id":369,"slug":10417,"dossier":47,"summary":83,"aliases":10418,"sourceIds":10420,"published":10421,"modified":10422,"checkedAt":7,"severity":10423,"references":10425,"versionKeys":10431,"packageCount":32,"repositoryCount":650},"pysec-2025-183-08217171",[10419],"CVE-2025-45768",[369],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[10424],{"type":3351,"score":9312},[10426,10428,10430],{"type":3318,"url":10427},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3722,"url":10429},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":3325,"url":5421},[5427,5428],{"id":370,"slug":10433,"dossier":47,"summary":83,"aliases":10434,"sourceIds":10437,"published":10438,"modified":10439,"checkedAt":7,"severity":10440,"references":10442,"versionKeys":10451,"packageCount":32,"repositoryCount":105},"pysec-2025-198-62b25ed4",[10435,10436],"BIT-pytorch-2025-46148","CVE-2025-46148",[370],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[10441],{"type":3351,"score":6060},[10443,10445,10447,10449],{"type":3332,"url":10444},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":3332,"url":10446},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":3722,"url":10448},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":3389,"url":10450},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[3741,3742],{"id":371,"slug":10453,"dossier":47,"summary":83,"aliases":10454,"sourceIds":10457,"published":10458,"modified":10459,"checkedAt":7,"severity":10460,"references":10462,"versionKeys":10468,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[10455,10456],"BIT-pytorch-2025-46149","CVE-2025-46149",[371],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[10461],{"type":3351,"score":6060},[10463,10464,10466],{"type":3332,"url":10444},{"type":3722,"url":10465},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":3389,"url":10467},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[3742],{"id":372,"slug":10470,"dossier":47,"summary":83,"aliases":10471,"sourceIds":10474,"published":10475,"modified":10476,"checkedAt":7,"severity":10477,"references":10479,"versionKeys":10487,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[10472,10473],"BIT-pytorch-2025-46150","CVE-2025-46150",[372],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[10478],{"type":3351,"score":6060},[10480,10481,10483,10485],{"type":3332,"url":10444},{"type":3722,"url":10482},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":3722,"url":10484},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":3389,"url":10486},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[3742],{"id":373,"slug":10489,"dossier":47,"summary":83,"aliases":10490,"sourceIds":10493,"published":10494,"modified":10495,"checkedAt":7,"severity":10496,"references":10498,"versionKeys":10504,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[10491,10492],"BIT-pytorch-2025-46152","CVE-2025-46152",[373],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[10497],{"type":3351,"score":3451},[10499,10500,10502],{"type":3332,"url":10444},{"type":3722,"url":10501},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":3389,"url":10503},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[3742],{"id":374,"slug":10506,"dossier":47,"summary":83,"aliases":10507,"sourceIds":10510,"published":10511,"modified":10512,"checkedAt":7,"severity":10513,"references":10515,"versionKeys":10525,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[10508,10509],"BIT-pytorch-2025-46153","CVE-2025-46153",[374],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[10514],{"type":3351,"score":6060},[10516,10518,10519,10521,10523],{"type":3318,"url":10517},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":3332,"url":10444},{"type":3332,"url":10520},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":3722,"url":10522},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":3389,"url":10524},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[3742],{"id":375,"slug":10527,"dossier":47,"summary":83,"aliases":10528,"sourceIds":10531,"published":10532,"modified":10533,"checkedAt":7,"severity":10534,"references":10536,"versionKeys":10541,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[10529,10530],"BIT-pytorch-2025-55551","CVE-2025-55551",[375],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[10535],{"type":3351,"score":3486},[10537,10539],{"type":3332,"url":10538},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":3722,"url":10540},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[3741,3742,3743,5876,5877,8972],{"id":376,"slug":10543,"dossier":47,"summary":83,"aliases":10544,"sourceIds":10547,"published":10548,"modified":10549,"checkedAt":7,"severity":10550,"references":10552,"versionKeys":10556,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[10545,10546],"BIT-pytorch-2025-55552","CVE-2025-55552",[376],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[10551],{"type":3351,"score":3486},[10553,10554],{"type":3332,"url":10538},{"type":3722,"url":10555},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[3741,3742,3743,5876,5877,8972],{"id":377,"slug":10558,"dossier":47,"summary":83,"aliases":10559,"sourceIds":10562,"published":10563,"modified":10564,"checkedAt":7,"severity":10565,"references":10567,"versionKeys":10573,"packageCount":32,"repositoryCount":650},"pysec-2025-205-fd5e58fd",[10560,10561],"BIT-pytorch-2025-55553","CVE-2025-55553",[377],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[10566],{"type":3351,"score":3486},[10568,10569,10571],{"type":3332,"url":10538},{"type":3722,"url":10570},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":3389,"url":10572},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[3741,3742,3743],{"id":378,"slug":10575,"dossier":47,"summary":83,"aliases":10576,"sourceIds":10579,"published":10580,"modified":10581,"checkedAt":7,"severity":10582,"references":10584,"versionKeys":10588,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[10577,10578],"BIT-pytorch-2025-55554","CVE-2025-55554",[378],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[10583],{"type":3351,"score":3451},[10585,10586],{"type":3332,"url":10538},{"type":3722,"url":10587},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[3741,3742,3743,5876,5877,8972],{"id":379,"slug":10590,"dossier":47,"summary":83,"aliases":10591,"sourceIds":10594,"published":10595,"modified":10596,"checkedAt":7,"severity":10597,"references":10599,"versionKeys":10605,"packageCount":32,"repositoryCount":650},"pysec-2025-207-2abef3fc",[10592,10593],"BIT-pytorch-2025-55557","CVE-2025-55557",[379],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[10598],{"type":3351,"score":3486},[10600,10601,10603],{"type":3332,"url":10538},{"type":3722,"url":10602},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":3389,"url":10604},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[3741,3742,3743],{"id":380,"slug":10607,"dossier":47,"summary":83,"aliases":10608,"sourceIds":10611,"published":10612,"modified":10613,"checkedAt":7,"severity":10614,"references":10616,"versionKeys":10622,"packageCount":32,"repositoryCount":650},"pysec-2025-208-6e93fe9d",[10609,10610],"BIT-pytorch-2025-55558","CVE-2025-55558",[380],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[10615],{"type":3351,"score":3486},[10617,10618,10620],{"type":3332,"url":10538},{"type":3722,"url":10619},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":3389,"url":10621},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[3741,3742,3743],{"id":381,"slug":10624,"dossier":47,"summary":83,"aliases":10625,"sourceIds":10628,"published":10629,"modified":10630,"checkedAt":7,"severity":10631,"references":10633,"versionKeys":10639,"packageCount":32,"repositoryCount":650},"pysec-2025-209-e6f352b0",[10626,10627],"BIT-pytorch-2025-55560","CVE-2025-55560",[381],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[10632],{"type":3351,"score":3486},[10634,10635,10637],{"type":3332,"url":10538},{"type":3722,"url":10636},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":3389,"url":10638},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[3741,3742,3743],{"id":382,"slug":10641,"dossier":47,"summary":83,"aliases":10642,"sourceIds":10644,"published":10645,"modified":10646,"checkedAt":7,"severity":10647,"references":10649,"versionKeys":10652,"packageCount":32,"repositoryCount":631},"pysec-2025-211-d8bd15de",[10643],"CVE-2025-14920",[382],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[10648],{"type":3351,"score":3417},[10650],{"type":3332,"url":10651},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[3431,3432,3433,3434,3435],{"id":383,"slug":10654,"dossier":47,"summary":83,"aliases":10655,"sourceIds":10657,"published":10658,"modified":10659,"checkedAt":7,"severity":10660,"references":10662,"versionKeys":10665,"packageCount":32,"repositoryCount":631},"pysec-2025-212-a011b97d",[10656],"CVE-2025-14921",[383],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[10661],{"type":3351,"score":3417},[10663],{"type":3332,"url":10664},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[3431,3432,3433,3434,3435],{"id":384,"slug":10667,"dossier":47,"summary":83,"aliases":10668,"sourceIds":10670,"published":10671,"modified":10672,"checkedAt":7,"severity":10673,"references":10675,"versionKeys":10678,"packageCount":32,"repositoryCount":631},"pysec-2025-213-9043dc9b",[10669],"CVE-2025-14924",[384],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[10674],{"type":3351,"score":3417},[10676],{"type":3332,"url":10677},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[3431,3432,3433,3434,3435],{"id":385,"slug":10680,"dossier":47,"summary":83,"aliases":10681,"sourceIds":10683,"published":10684,"modified":10685,"checkedAt":7,"severity":10686,"references":10688,"versionKeys":10691,"packageCount":32,"repositoryCount":631},"pysec-2025-214-eb241255",[10682],"CVE-2025-14926",[385],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[10687],{"type":3351,"score":3417},[10689],{"type":3332,"url":10690},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[3431,3432,3433,3434,3435],{"id":386,"slug":10693,"dossier":47,"summary":83,"aliases":10694,"sourceIds":10696,"published":10697,"modified":10698,"checkedAt":7,"severity":10699,"references":10701,"versionKeys":10704,"packageCount":32,"repositoryCount":631},"pysec-2025-215-6064f491",[10695],"CVE-2025-14927",[386],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[10700],{"type":3351,"score":3417},[10702],{"type":3332,"url":10703},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[3431,3432,3433,3434,3435],{"id":387,"slug":10706,"dossier":47,"summary":83,"aliases":10707,"sourceIds":10709,"published":10710,"modified":10711,"checkedAt":7,"severity":10712,"references":10714,"versionKeys":10717,"packageCount":32,"repositoryCount":631},"pysec-2025-216-5708ed01",[10708],"CVE-2025-14928",[387],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[10713],{"type":3351,"score":3417},[10715],{"type":3332,"url":10716},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[3431,3432,3433,3434,3435],{"id":388,"slug":10719,"dossier":47,"summary":83,"aliases":10720,"sourceIds":10722,"published":10723,"modified":10724,"checkedAt":7,"severity":10725,"references":10727,"versionKeys":10730,"packageCount":32,"repositoryCount":42},"pysec-2025-217-2c1ad388",[10721],"CVE-2025-14929",[388],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[10726],{"type":3351,"score":3417},[10728],{"type":3332,"url":10729},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[3431,3432,3433,3434,3435,3436,3437,3438,3439],{"id":389,"slug":10732,"dossier":47,"summary":83,"aliases":10733,"sourceIds":10735,"published":10736,"modified":10737,"checkedAt":7,"severity":10738,"references":10740,"versionKeys":10743,"packageCount":32,"repositoryCount":583},"pysec-2025-218-39811fc3",[10734],"CVE-2025-14930",[389],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[10739],{"type":3351,"score":3417},[10741],{"type":3332,"url":10742},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[3431,3432,3433,3434,3435,3436],{"id":390,"slug":10745,"dossier":47,"summary":83,"aliases":10746,"sourceIds":10749,"published":10750,"modified":10751,"checkedAt":7,"severity":10752,"references":10754,"versionKeys":10765,"packageCount":32,"repositoryCount":10766},"pysec-2026-139-96951ff6",[10747,10748],"BIT-pytorch-2026-4538","CVE-2026-4538",[390],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[10753],{"type":3351,"score":5173},[10755,10757,10759,10761,10763],{"type":3318,"url":10756},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":3332,"url":10758},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":3332,"url":10760},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":3722,"url":10762},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":3389,"url":10764},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[9392,3741,3742,3743,5876,5877,8972,8973,8974,8975],14,{"id":391,"slug":10768,"dossier":47,"summary":83,"aliases":10769,"sourceIds":10771,"published":10772,"modified":10773,"checkedAt":7,"severity":10774,"references":10776,"versionKeys":10779,"packageCount":32,"repositoryCount":34},"pysec-2026-2085-e081ac1d",[10770],"CVE-2026-12252",[391],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[10775],{"type":3351,"score":3417},[10777],{"type":3426,"url":10778},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[3903,3904],{"id":392,"slug":10781,"dossier":47,"summary":83,"aliases":10782,"sourceIds":10785,"published":10786,"modified":10787,"checkedAt":7,"severity":10788,"references":10790,"versionKeys":10795,"packageCount":32,"repositoryCount":105},"pysec-2026-2120-174938a3",[10783,10784],"CVE-2026-31900","GHSA-v53h-f6m7-xcgm",[392],"2026-03-11T20:16:15.960Z","2026-07-13T07:15:15.712525536Z",[10789],{"type":3351,"score":4506},[10791,10793],{"type":3332,"url":10792},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-v53h-f6m7-xcgm",{"type":3389,"url":10794},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F0a2560b981364dde4c8cf8ce9d164c40669a8611",[3841,3842],{"id":393,"slug":10797,"dossier":90,"summary":83,"aliases":10798,"sourceIds":10801,"published":10802,"modified":10803,"checkedAt":7,"severity":10804,"references":10807,"versionKeys":10822,"packageCount":32,"repositoryCount":4082},"pysec-2026-2132-627bf7c7",[10799,10800],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[393],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[10805],{"type":3351,"score":10806},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[10808,10810,10812,10814,10816,10818,10820],{"type":3318,"url":10809},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":3318,"url":10811},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":3332,"url":10813},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":3332,"url":10815},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3722,"url":10817},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":3389,"url":10819},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":3426,"url":10821},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[10823,10824,10825,10826,10827,10828],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":394,"slug":10830,"dossier":47,"summary":83,"aliases":10831,"sourceIds":10836,"published":10837,"modified":10838,"checkedAt":7,"severity":10839,"references":10841,"versionKeys":10857,"packageCount":32,"repositoryCount":573},"pysec-2026-2286-8795b007",[10832,10833,10834,10835],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[394],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[10840],{"type":3351,"score":4701},[10842,10844,10846,10847,10849,10851,10853,10855],{"type":3318,"url":10843},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":3318,"url":10845},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":3332,"url":7831},{"type":3332,"url":10848},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":3332,"url":10850},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3722,"url":10852},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":3722,"url":10854},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":3389,"url":10856},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[3741,3742,3743,5876,5877,8972,8973,8974,8975],{"id":395,"slug":10859,"dossier":47,"summary":83,"aliases":10860,"sourceIds":10862,"published":10863,"modified":10864,"checkedAt":7,"severity":10865,"references":10868,"versionKeys":10871,"packageCount":32,"repositoryCount":34},"pysec-2026-3954-37000510",[10861],"CVE-2026-12261",[395],"2026-08-07T07:16:26.377Z","2026-09-10T13:00:04.157935205Z",[10866],{"type":3351,"score":10867},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[10869],{"type":3722,"url":10870},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8b8c381e-08a8-4e4f-bb46-a320c96a364f",[3903,3904],{"id":396,"slug":10873,"dossier":47,"summary":83,"aliases":10874,"sourceIds":10876,"published":10877,"modified":10878,"checkedAt":7,"severity":10879,"references":10882,"versionKeys":10885,"packageCount":32,"repositoryCount":34},"pysec-2026-3955-281f9a73",[10875],"CVE-2026-12372",[396],"2026-08-09T23:16:35.793Z","2026-09-10T13:00:03.318185640Z",[10880],{"type":3351,"score":10881},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[10883],{"type":3722,"url":10884},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2911b643-571c-42e4-b0c2-9a1fa6f491db",[3903,3904],{"id":397,"slug":10887,"dossier":47,"summary":83,"aliases":10888,"sourceIds":10890,"published":10891,"modified":10892,"checkedAt":7,"severity":10893,"references":10895,"versionKeys":10900,"packageCount":32,"repositoryCount":32},"pysec-2026-598-ff2a157b",[10889],"CVE-2026-22218",[397],"2026-01-20T00:15:48.910Z","2026-07-02T08:45:06.090293533Z",[10894],{"type":3351,"score":5384},[10896,10897,10899],{"type":3332,"url":3526},{"type":3332,"url":10898},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-arbitrary-file-read-via-project-element",{"type":3426,"url":3530},[3536],{"id":398,"slug":10902,"dossier":47,"summary":83,"aliases":10903,"sourceIds":10905,"published":10906,"modified":10907,"checkedAt":7,"severity":10908,"references":10910,"versionKeys":10913,"packageCount":32,"repositoryCount":34},"pysec-2026-99-2c63e84f",[10904],"CVE-2026-0848",[398],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[10909],{"type":3351,"score":5646},[10911],{"type":3426,"url":10912},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3903,3904],1789534488215]