[{"data":1,"prerenderedAt":9614},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-12239":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":362,"related":365},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-31T19:03:09.699Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-31T19:01:26.023Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,596,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":102,"licenseExpressionCount":68,"unknownLicensePackageCount":103,"advisoryIds":104,"advisoryCount":360,"providers":361},"opencode:12239","opencode-12239",12239,"LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service","318cda8c49da743f2c4a18a4f4d5c36fc22102fc","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fcommit\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc","2026-07-31T12:19:47.438Z","2026-07-31T10:12:04.000Z",{"complete":89,"entryCount":90,"truncated":45},true,241,[92],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","72d385efaa1c9d7ef74ecd2177161e9b80f5ec89cc764f9cf3892c4a65408df2",466608,"parsed",303,[101],"pypi",17,3,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359],"GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-24qx-w28j-9m6p","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g6r-c272-w58r","GHSA-2hm2-hc3v-44h9","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3644-q5cj-c5c7","GHSA-37w4-hwhx-4rc4","GHSA-38jv-5279-wg99","GHSA-3crg-w4f6-42mx","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-45hq-cxwh-f6vc","GHSA-45pg-36p6-83v9","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4c99-qj7h-p3vg","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4j32-57v6-6g45","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-537c-gmf6-5ccf","GHSA-54jq-c3m8-4m76","GHSA-55h5-xmcq-c37v","GHSA-5789-5fc7-67v3","GHSA-58cw-g322-p94v","GHSA-59g5-xgcq-4qw3","GHSA-5chr-fjjv-38qv","GHSA-5hgr-hg42-57jg","GHSA-5mrq-x3x5-8v8f","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-6hm5-jgcp-p838","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6qv9-48xg-fc7f","GHSA-6r8x-57c9-28j4","GHSA-6w46-j5rx-g56g","GHSA-7432-952r-cw78","GHSA-752w-5fwx-jx9f","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7jqv-fw35-gmx9","GHSA-7p94-766c-hgjp","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-89vp-jrxv-24w8","GHSA-8c25-4j27-2rv3","GHSA-8g87-j6q8-g93x","GHSA-8mp2-v27r-99xp","GHSA-8mpj-m6qm-5qr8","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-8rfp-98v4-mmr6","GHSA-8v84-f9pq-wr9x","GHSA-926x-3r5x-gfhw","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9h52-p55h-vw2f","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9q39-rmj3-p4r2","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c67j-w6g6-q2cm","GHSA-c8j7-8cv4-2xmq","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cj93-chg6-vgv8","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2v5-7jq9-h8cg","GHSA-f4xh-w4cj-qxq8","GHSA-f83h-ghpp-7wcc","GHSA-f96h-pmfr-66vw","GHSA-fcw5-x6j4-ccmp","GHSA-ffq3-xpv3-j92q","GHSA-fg6f-75jq-6523","GHSA-fg7f-2386-8897","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fjqc-hq36-qh5p","GHSA-fv5p-p927-qmxr","GHSA-g3cq-j2xw-wf74","GHSA-g48c-2wqr-h844","GHSA-g7f3-828f-7h7m","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g97x-gvcm-x72h","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gf7q-q4j7-hp7c","GHSA-gfwx-w7gr-fvh7","GHSA-gj48-438w-jh9v","GHSA-gm62-xv2j-4w53","GHSA-gm8q-m8mv-jj5m","GHSA-gmj6-6f8f-6699","GHSA-gr75-jv2w-4656","GHSA-gx64-gj6p-pc4c","GHSA-h35f-9h28-mq5c","GHSA-h4gh-qq45-vh27","GHSA-h5v5-8746-g7mm","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hm4w-wwcw-mr6r","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hx9q-6w63-j58v","GHSA-j543-4vmf-qm7v","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jj8c-mmj3-mmgv","GHSA-jjj6-mw9f-p565","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jr27-m4p2-rc6r","GHSA-m2v9-299j-rv96","GHSA-m344-f55w-2m6j","GHSA-m449-cwjh-6pw7","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mqcg-5x36-vfcg","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p4gq-832x-fm9v","GHSA-p998-jp59-783m","GHSA-pc6w-59fv-rh23","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pjwx-r37v-7724","GHSA-pp6c-gr5w-3c5g","GHSA-pppj-hq3g-57pj","GHSA-pq5p-34cr-23v9","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q25c-c977-4cmh","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qcq2-496w-v96p","GHSA-qfrw-5rxm-mhh2","GHSA-qh6h-p6c9-ff54","GHSA-qh7q-6qm3-653w","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qpxp-75px-xjcp","GHSA-qvv7-cg9c-w4x3","GHSA-r4rv-85jg-w4mf","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-r7w7-9xr2-qq2r","GHSA-r95x-qfjj-fjj2","GHSA-rch3-82jr-f9w9","GHSA-rf74-v2fm-23pw","GHSA-rr7j-v2q5-chgv","GHSA-v42x-x7jp-845h","GHSA-v87v-83h2-53w7","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vmhf-c436-hxj4","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-vvfj-2jqx-52jm","GHSA-w2fm-2cpv-w7v5","GHSA-w39p-vh2g-g8g5","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w8p2-r796-3vmq","GHSA-wf5f-4jwr-ppcp","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-whvh-wf3x-g77j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wvwj-cvrp-7pv5","GHSA-x284-j5p8-9c5p","GHSA-x746-7m8f-x49c","GHSA-x7hp-r3qg-r3cj","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","GHSA-xm59-rqc7-hhvf","PYSEC-2024-115","PYSEC-2024-323","PYSEC-2025-183","PYSEC-2026-2085","PYSEC-2026-2132","PYSEC-2026-2208","PYSEC-2026-2209","PYSEC-2026-3455","PYSEC-2026-597","PYSEC-2026-99",255,[],{"files":363,"occurrenceCount":99},[364],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":366,"vulnerabilities":3060},[367,378,387,396,406,418,427,439,447,457,466,475,484,493,502,511,520,530,540,550,562,572,582,591,600,610,620,629,638,647,656,666,677,686,695,704,713,722,731,740,749,759,768,777,786,796,805,814,823,832,841,850,858,867,876,887,896,904,913,922,932,941,950,960,969,978,987,996,1005,1014,1022,1030,1038,1047,1056,1065,1074,1083,1092,1101,1110,1119,1128,1138,1148,1157,1166,1175,1183,1192,1201,1210,1219,1227,1236,1244,1253,1263,1272,1281,1290,1299,1308,1316,1325,1334,1343,1352,1361,1370,1379,1388,1397,1406,1415,1423,1432,1440,1449,1460,1469,1478,1486,1495,1505,1514,1523,1532,1541,1550,1559,1568,1577,1585,1594,1603,1612,1621,1630,1639,1648,1657,1665,1674,1683,1692,1701,1710,1719,1728,1736,1746,1755,1764,1773,1782,1791,1799,1808,1817,1826,1834,1842,1850,1859,1868,1877,1886,1894,1903,1912,1920,1929,1938,1948,1957,1966,1975,1984,1993,2001,2009,2017,2025,2034,2042,2050,2058,2066,2074,2082,2090,2098,2106,2114,2122,2130,2138,2146,2154,2162,2170,2178,2186,2194,2202,2210,2218,2226,2234,2242,2251,2260,2270,2278,2287,2296,2305,2314,2323,2332,2342,2351,2360,2368,2377,2385,2393,2401,2409,2418,2427,2436,2445,2454,2463,2472,2480,2488,2497,2506,2515,2524,2533,2542,2551,2560,2569,2578,2587,2596,2605,2614,2623,2632,2642,2650,2659,2668,2677,2686,2694,2703,2711,2720,2728,2737,2746,2754,2763,2772,2781,2790,2799,2808,2816,2825,2834,2843,2851,2860,2869,2878,2886,2895,2904,2912,2921,2930,2939,2948,2957,2965,2974,2983,2991,2999,3008,3017,3026,3035,3044,3052],{"id":368,"slug":369,"identity":370,"label":371,"aiRelevant":89,"provider":82,"advisoryCount":372,"licenseExpressions":373,"versions":375,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":377},"package:pypi:langchain-core","langchain-core-82117efb","pypi:langchain-core","LangChain Core",7,[374],"MIT",[376],"1.4.9",[54],{"id":379,"slug":380,"identity":381,"label":382,"aiRelevant":89,"provider":82,"advisoryCount":34,"licenseExpressions":383,"versions":384,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":386},"package:pypi:langchain-community","langchain-community-b296254c","pypi:langchain-community","LangChain Community",[374],[385],"0.4.2",[54],{"id":388,"slug":389,"identity":390,"label":391,"aiRelevant":89,"provider":82,"advisoryCount":103,"licenseExpressions":392,"versions":393,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":395},"package:pypi:langchain","langchain-2b3b6a0b","pypi:langchain","LangChain",[374],[394],"1.3.13",[54],{"id":397,"slug":398,"identity":399,"label":400,"aiRelevant":89,"provider":82,"advisoryCount":401,"licenseExpressions":402,"versions":403,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":405},"package:pypi:langgraph","langgraph-6c1c645e","pypi:langgraph","LangGraph",2,[374],[404],"1.2.9",[54],{"id":407,"slug":408,"identity":409,"label":410,"aiRelevant":89,"provider":411,"advisoryCount":32,"licenseExpressions":414,"versions":415,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":417},"package:pypi:langchain-openai","langchain-openai-4985188e","pypi:langchain-openai","LangChain OpenAI",{"id":412,"label":413},"openai","OpenAI",[374],[416],"1.1.9",[54],{"id":419,"slug":420,"identity":421,"label":422,"aiRelevant":89,"provider":82,"advisoryCount":32,"licenseExpressions":423,"versions":424,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":426},"package:pypi:langchain-text-splitters","langchain-text-splitters-0c057788","pypi:langchain-text-splitters","LangChain · Text Splitters",[374],[425],"1.1.2",[54],{"id":428,"slug":429,"identity":430,"label":431,"aiRelevant":89,"provider":432,"advisoryCount":37,"licenseExpressions":435,"versions":436,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":438},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":433,"label":434},"anthropic","Anthropic",[374],[437],"0.116.0",[54],{"id":70,"slug":71,"identity":440,"label":72,"aiRelevant":89,"provider":441,"advisoryCount":37,"licenseExpressions":442,"versions":444,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":446},"pypi:openai",{"id":412,"label":413},[443],"Apache-2.0",[445],"1.109.1",[54],{"id":448,"slug":449,"identity":450,"label":451,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":452,"versions":454,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":456},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[453],"non-standard",[455],"0.23.1",[54],{"id":458,"slug":459,"identity":460,"label":461,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":462,"versions":463,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":465},"package:pypi:langchain-google-community","langchain-google-community-733aba30","pypi:langchain-google-community","LangChain · Google Community",[374],[464],"5.0.0",[54],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":471,"versions":472,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":474},"package:pypi:langchain-mcp-adapters","langchain-mcp-adapters-1c0e13c7","pypi:langchain-mcp-adapters","LangChain · MCP Adapters",[374],[473],"0.3.0",[54],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":480,"versions":481,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":483},"package:pypi:langchain-mistralai","langchain-mistralai-52e30148","pypi:langchain-mistralai","LangChain · Mistralai",[374],[482],"0.2.12",[54],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":489,"versions":490,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":492},"package:pypi:langchain-protocol","langchain-protocol-2715aeed","pypi:langchain-protocol","LangChain · Protocol",[374],[491],"0.0.18",[54],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":498,"versions":499,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":501},"package:pypi:langchain-weaviate","langchain-weaviate-707e0daa","pypi:langchain-weaviate","LangChain · Weaviate",[374],[500],"0.0.8",[54],{"id":503,"slug":504,"identity":505,"label":506,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":507,"versions":508,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":510},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[443],[509],"5.0.0.93",[54],{"id":512,"slug":513,"identity":514,"label":515,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":516,"versions":517,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":519},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[453],[518],"0.13.0",[54],{"id":521,"slug":522,"identity":523,"label":524,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":525,"versions":527,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":529},"package:pypi:weaviate-client","weaviate-client-c34ddc0e","pypi:weaviate-client","Weaviate Client",[526],"BSD-3-Clause",[528],"4.22.0",[54],{"id":531,"slug":532,"identity":533,"label":534,"aiRelevant":45,"provider":82,"advisoryCount":535,"licenseExpressions":536,"versions":537,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":539},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",35,[526,453],[538],"6.14.2",[54],{"id":541,"slug":542,"identity":543,"label":544,"aiRelevant":45,"provider":82,"advisoryCount":31,"licenseExpressions":545,"versions":547,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":549},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[443,546],"Apache-2.0 AND MIT",[548],"3.14.1",[54],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":45,"provider":82,"advisoryCount":555,"licenseExpressions":556,"versions":559,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":561},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[557,558],"HPND","MIT-CMU",[560],"12.3.0",[54],{"id":563,"slug":564,"identity":565,"label":566,"aiRelevant":45,"provider":82,"advisoryCount":567,"licenseExpressions":568,"versions":569,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":571},"package:pypi:mistune","mistune-883ae9a9","pypi:mistune","mistune",16,[526],[570],"3.3.3",[54],{"id":573,"slug":574,"identity":575,"label":576,"aiRelevant":45,"provider":82,"advisoryCount":577,"licenseExpressions":578,"versions":579,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":581},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",15,[443],[580],"3.10.0",[54],{"id":583,"slug":584,"identity":585,"label":586,"aiRelevant":45,"provider":82,"advisoryCount":40,"licenseExpressions":587,"versions":588,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":590},"package:pypi:jupyterlab","jupyterlab-da634f79","pypi:jupyterlab","jupyterlab",[453],[589],"4.6.1",[54],{"id":592,"slug":593,"identity":594,"label":595,"aiRelevant":45,"provider":82,"advisoryCount":40,"licenseExpressions":596,"versions":597,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":599},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[443],[598],"6.5.7",[54],{"id":601,"slug":602,"identity":603,"label":604,"aiRelevant":45,"provider":82,"advisoryCount":605,"licenseExpressions":606,"versions":607,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":609},"package:pypi:authlib","authlib-c1d999b9","pypi:authlib","authlib",9,[526],[608],"1.7.2",[54],{"id":611,"slug":612,"identity":613,"label":614,"aiRelevant":45,"provider":82,"advisoryCount":615,"licenseExpressions":616,"versions":617,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":619},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[443],[618],"0.0.32",[54],{"id":621,"slug":622,"identity":623,"label":624,"aiRelevant":45,"provider":82,"advisoryCount":615,"licenseExpressions":625,"versions":626,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":628},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[526],[627],"1.3.1",[54],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":45,"provider":82,"advisoryCount":372,"licenseExpressions":634,"versions":635,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":637},"package:pypi:jupyter-server","jupyter-server-bda3ce93","pypi:jupyter-server","jupyter-server",[453],[636],"2.20.0",[54],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":45,"provider":82,"advisoryCount":372,"licenseExpressions":643,"versions":644,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":646},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",[374],[645],"2.13.0",[54],{"id":648,"slug":649,"identity":650,"label":651,"aiRelevant":45,"provider":82,"advisoryCount":372,"licenseExpressions":652,"versions":653,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":655},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[374],[654],"2.7.0",[54],{"id":657,"slug":658,"identity":659,"label":660,"aiRelevant":45,"provider":82,"advisoryCount":64,"licenseExpressions":661,"versions":663,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":665},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",[662],"Apache-2.0 OR BSD-3-Clause",[664],"49.0.0",[54],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":45,"provider":82,"advisoryCount":671,"licenseExpressions":672,"versions":674,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":676},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",5,[673],"BSD-2-Clause",[675],"0.6.4",[54],{"id":678,"slug":679,"identity":680,"label":681,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":682,"versions":683,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":685},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[526,453],[684],"3.1.6",[54],{"id":687,"slug":688,"identity":689,"label":690,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":691,"versions":692,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":694},"package:pypi:langsmith","langsmith-a7ab7b96","pypi:langsmith","langsmith",[374],[693],"0.10.2",[54],{"id":696,"slug":697,"identity":698,"label":699,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":700,"versions":701,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":703},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[374],[702],"1.28.1",[54],{"id":705,"slug":706,"identity":707,"label":708,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":709,"versions":710,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":712},"package:pypi:nbconvert","nbconvert-a72151db","pypi:nbconvert","nbconvert",[453],[711],"7.17.1",[54],{"id":714,"slug":715,"identity":716,"label":717,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":718,"versions":719,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":721},"package:pypi:notebook","notebook-9683036a","pypi:notebook","notebook",[453],[720],"7.6.0",[54],{"id":723,"slug":724,"identity":725,"label":726,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":727,"versions":728,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":730},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[443],[729],"2.34.2",[54],{"id":732,"slug":733,"identity":734,"label":735,"aiRelevant":45,"provider":82,"advisoryCount":103,"licenseExpressions":736,"versions":737,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":739},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[374],[738],"72.2.0",[54],{"id":741,"slug":742,"identity":743,"label":744,"aiRelevant":45,"provider":82,"advisoryCount":401,"licenseExpressions":745,"versions":746,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":748},"package:pypi:bleach","bleach-b1747264","pypi:bleach","bleach",[453],[747],"6.4.0",[54],{"id":750,"slug":751,"identity":752,"label":753,"aiRelevant":45,"provider":82,"advisoryCount":401,"licenseExpressions":754,"versions":756,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":758},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[374,755],"Unlicense",[757],"3.29.7",[54],{"id":760,"slug":761,"identity":762,"label":763,"aiRelevant":45,"provider":82,"advisoryCount":401,"licenseExpressions":764,"versions":765,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":767},"package:pypi:pdfminer-six","pdfminer-six-53ae17a4","pypi:pdfminer-six","pdfminer-six",[374],[766],"20260107",[54],{"id":769,"slug":770,"identity":771,"label":772,"aiRelevant":45,"provider":82,"advisoryCount":401,"licenseExpressions":773,"versions":774,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":776},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[526],[775],"5.29.6",[54],{"id":778,"slug":779,"identity":780,"label":781,"aiRelevant":45,"provider":82,"advisoryCount":401,"licenseExpressions":782,"versions":783,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":785},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[374],[784],"2.8.4",[54],{"id":787,"slug":788,"identity":789,"label":790,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":791,"versions":793,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":795},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[792],"MPL-2.0",[794],"2026.6.17",[54],{"id":797,"slug":798,"identity":799,"label":800,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":801,"versions":802,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":804},"package:pypi:click","click-ef97f731","pypi:click","click",[526,453],[803],"8.4.2",[54],{"id":806,"slug":807,"identity":808,"label":809,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":810,"versions":811,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":813},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[374],[812],"0.16.0",[54],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":819,"versions":820,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":822},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[526,453],[821],"3.18",[54],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":828,"versions":829,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":831},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[526,453],[830],"5.9.1",[54],{"id":833,"slug":834,"identity":835,"label":836,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":837,"versions":838,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":840},"package:pypi:langchain-classic","langchain-classic-ee5360ab","pypi:langchain-classic","langchain-classic",[374],[839],"1.0.8",[54],{"id":842,"slug":843,"identity":844,"label":845,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":846,"versions":847,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":849},"package:pypi:langgraph-checkpoint","langgraph-checkpoint-b3039a64","pypi:langgraph-checkpoint","langgraph-checkpoint",[374],[848],"4.1.1",[54],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":855,"versions":856,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":857},"package:pypi:langgraph-sdk","langgraph-sdk-7670dc92","pypi:langgraph-sdk","langgraph-sdk",[374],[385],[54],{"id":859,"slug":860,"identity":861,"label":862,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":863,"versions":864,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":866},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[526],[865],"6.1.1",[54],{"id":868,"slug":869,"identity":870,"label":871,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":872,"versions":873,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":875},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[374],[874],"3.26.2",[54],{"id":877,"slug":878,"identity":879,"label":880,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":881,"versions":884,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":886},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[882,883],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[885],"3.11.9",[54],{"id":888,"slug":889,"identity":890,"label":891,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":892,"versions":893,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":895},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[374],[894],"2.14.2",[54],{"id":897,"slug":898,"identity":899,"label":900,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":901,"versions":902,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":903},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[673],[636],[54],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":909,"versions":910,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":912},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[374],[911],"9.1.1",[54],{"id":914,"slug":915,"identity":916,"label":917,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":918,"versions":919,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":921},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[526],[920],"1.2.2",[54],{"id":923,"slug":924,"identity":925,"label":926,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":927,"versions":929,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":931},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[928],"MIT AND MPL-2.0",[930],"4.68.4",[54],{"id":933,"slug":934,"identity":935,"label":936,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":937,"versions":938,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":940},"package:pypi:unstructured","unstructured-9ec9bd94","pypi:unstructured","unstructured",[443],[939],"0.17.2",[54],{"id":942,"slug":943,"identity":944,"label":945,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":946,"versions":947,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":949},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[443],[948],"25.1.0",[54],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":955,"versions":957,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":959},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[956],"PSF-2.0",[958],"2.7.1",[54],{"id":961,"slug":962,"identity":963,"label":964,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":965,"versions":966,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":968},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[443],[967],"1.4.0",[54],{"id":970,"slug":971,"identity":972,"label":973,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":974,"versions":975,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":977},"package:pypi:amqp","amqp-b7c07d93","pypi:amqp","amqp",[453],[976],"5.3.1",[54],{"id":979,"slug":980,"identity":981,"label":982,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":983,"versions":984,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":986},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[374],[985],"0.0.4",[54],{"id":988,"slug":989,"identity":990,"label":991,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":992,"versions":993,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":995},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[374],[994],"0.7.0",[54],{"id":997,"slug":998,"identity":999,"label":1000,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1001,"versions":1002,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1004},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[374],[1003],"4.14.2",[54],{"id":1006,"slug":1007,"identity":1008,"label":1009,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1010,"versions":1011,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1013},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[453],[1012],"0.1.4",[54],{"id":1015,"slug":1016,"identity":1017,"label":1018,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1019,"versions":1020,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1021},"package:pypi:argon2-cffi","argon2-cffi-0666afdc","pypi:argon2-cffi","argon2-cffi",[374],[948],[54],{"id":1023,"slug":1024,"identity":1025,"label":1026,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1027,"versions":1028,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1029},"package:pypi:argon2-cffi-bindings","argon2-cffi-bindings-8c6d8583","pypi:argon2-cffi-bindings","argon2-cffi-bindings",[374],[948],[54],{"id":1031,"slug":1032,"identity":1033,"label":1034,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1035,"versions":1036,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1037},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[453],[967],[54],{"id":1039,"slug":1040,"identity":1041,"label":1042,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1043,"versions":1044,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1046},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[443],[1045],"3.0.2",[54],{"id":1048,"slug":1049,"identity":1050,"label":1051,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1052,"versions":1053,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1055},"package:pypi:async-lru","async-lru-57db467a","pypi:async-lru","async-lru",[374],[1054],"2.3.0",[54],{"id":1057,"slug":1058,"identity":1059,"label":1060,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1061,"versions":1062,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1064},"package:pypi:async-timeout","async-timeout-218334ed","pypi:async-timeout","async-timeout",[443],[1063],"5.0.1",[54],{"id":1066,"slug":1067,"identity":1068,"label":1069,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1070,"versions":1071,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1073},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[374],[1072],"26.1.0",[54],{"id":1075,"slug":1076,"identity":1077,"label":1078,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1079,"versions":1080,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1082},"package:pypi:babel","babel-c668b0a9","pypi:babel","babel",[526],[1081],"2.18.0",[54],{"id":1084,"slug":1085,"identity":1086,"label":1087,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1088,"versions":1089,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1091},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[374],[1090],"2.2.1",[54],{"id":1093,"slug":1094,"identity":1095,"label":1096,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1097,"versions":1098,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1100},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[374],[1099],"4.15.0",[54],{"id":1102,"slug":1103,"identity":1104,"label":1105,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1106,"versions":1107,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1109},"package:pypi:billiard","billiard-87cdf8d8","pypi:billiard","billiard",[453],[1108],"4.2.4",[54],{"id":1111,"slug":1112,"identity":1113,"label":1114,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1115,"versions":1116,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1118},"package:pypi:cached-property","cached-property-4115aa7b","pypi:cached-property","cached-property",[453],[1117],"2.0.1",[54],{"id":1120,"slug":1121,"identity":1122,"label":1123,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1124,"versions":1125,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1127},"package:pypi:celery","celery-b40d49f4","pypi:celery","celery",[526],[1126],"5.6.3",[54],{"id":1129,"slug":1130,"identity":1131,"label":1132,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1133,"versions":1135,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1137},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[374,1134],"MIT-0",[1136],"2.1.0",[54],{"id":1139,"slug":1140,"identity":1141,"label":1142,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1143,"versions":1145,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1147},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[1144,453],"0BSD",[1146],"7.4.3",[54],{"id":1149,"slug":1150,"identity":1151,"label":1152,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1153,"versions":1154,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1156},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[374],[1155],"3.4.9",[54],{"id":1158,"slug":1159,"identity":1160,"label":1161,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1162,"versions":1163,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1165},"package:pypi:click-didyoumean","click-didyoumean-4dbcd2d4","pypi:click-didyoumean","click-didyoumean",[374],[1164],"0.3.1",[54],{"id":1167,"slug":1168,"identity":1169,"label":1170,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1171,"versions":1172,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1174},"package:pypi:click-plugins","click-plugins-b43a6bb3","pypi:click-plugins","click-plugins",[453],[1173],"1.1.1.2",[54],{"id":1176,"slug":1177,"identity":1178,"label":1179,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1180,"versions":1181,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1182},"package:pypi:click-repl","click-repl-3c545c47","pypi:click-repl","click-repl",[374],[473],[54],{"id":1184,"slug":1185,"identity":1186,"label":1187,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1188,"versions":1189,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1191},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[453],[1190],"0.4.6",[54],{"id":1193,"slug":1194,"identity":1195,"label":1196,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1197,"versions":1198,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1200},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[453],[1199],"0.2.3",[54],{"id":1202,"slug":1203,"identity":1204,"label":1205,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1206,"versions":1207,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1209},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[374],[1208],"0.6.7",[54],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1215,"versions":1216,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1218},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[374],[1217],"1.8.21",[54],{"id":1220,"slug":1221,"identity":1222,"label":1223,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1224,"versions":1225,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1226},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[673,453],[976],[54],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1232,"versions":1233,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1235},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[453],[1234],"0.7.1",[54],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1241,"versions":1242,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1243},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[374],[627],[54],{"id":1245,"slug":1246,"identity":1247,"label":1248,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1249,"versions":1250,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1252},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[443],[1251],"1.9.0",[54],{"id":1254,"slug":1255,"identity":1256,"label":1257,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1258,"versions":1260,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1262},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[1259],"ISC",[1261],"2.8.0",[54],{"id":1264,"slug":1265,"identity":1266,"label":1267,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1268,"versions":1269,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1271},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[374],[1270],"0.18.0",[54],{"id":1273,"slug":1274,"identity":1275,"label":1276,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1277,"versions":1278,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1280},"package:pypi:docx2txt","docx2txt-d7a05e45","pypi:docx2txt","docx2txt",[],[1279],"0.8",[54],{"id":1282,"slug":1283,"identity":1284,"label":1285,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1286,"versions":1287,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1289},"package:pypi:emoji","emoji-b8402ff3","pypi:emoji","emoji",[526,453],[1288],"2.15.0",[54],{"id":1291,"slug":1292,"identity":1293,"label":1294,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1295,"versions":1296,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1298},"package:pypi:eventlet","eventlet-d9e7dce2","pypi:eventlet","eventlet",[374],[1297],"0.41.0",[54],{"id":1300,"slug":1301,"identity":1302,"label":1303,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1304,"versions":1305,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1307},"package:pypi:exchangelib","exchangelib-2c02f617","pypi:exchangelib","exchangelib",[673],[1306],"5.6.0",[54],{"id":1309,"slug":1310,"identity":1311,"label":1312,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1313,"versions":1314,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1315},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[374],[1090],[54],{"id":1317,"slug":1318,"identity":1319,"label":1320,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1321,"versions":1322,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1324},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[374],[1323],"0.139.0",[54],{"id":1326,"slug":1327,"identity":1328,"label":1329,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1330,"versions":1331,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1333},"package:pypi:fastjsonschema","fastjsonschema-8288c29a","pypi:fastjsonschema","fastjsonschema",[453],[1332],"2.21.2",[54],{"id":1335,"slug":1336,"identity":1337,"label":1338,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1339,"versions":1340,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1342},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[374],[1341],"1.2.0",[54],{"id":1344,"slug":1345,"identity":1346,"label":1347,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1348,"versions":1349,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1351},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[443],[1350],"25.12.19",[54],{"id":1353,"slug":1354,"identity":1355,"label":1356,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1357,"versions":1358,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1360},"package:pypi:fqdn","fqdn-2616214a","pypi:fqdn","fqdn",[453],[1359],"1.5.1",[54],{"id":1362,"slug":1363,"identity":1364,"label":1365,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1366,"versions":1367,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1369},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[443],[1368],"1.8.0",[54],{"id":1371,"slug":1372,"identity":1373,"label":1374,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1375,"versions":1376,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1378},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[526,453],[1377],"2026.6.0",[54],{"id":1380,"slug":1381,"identity":1382,"label":1383,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1384,"versions":1385,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1387},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[443],[1386],"2.31.0",[54],{"id":1389,"slug":1390,"identity":1391,"label":1392,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1393,"versions":1394,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1396},"package:pypi:google-api-python-client","google-api-python-client-5dcdb5bd","pypi:google-api-python-client","google-api-python-client",[443],[1395],"2.198.0",[54],{"id":1398,"slug":1399,"identity":1400,"label":1401,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1402,"versions":1403,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1405},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[443],[1404],"2.55.2",[54],{"id":1407,"slug":1408,"identity":1409,"label":1410,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1411,"versions":1412,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1414},"package:pypi:google-auth-httplib2","google-auth-httplib2-dd7061f9","pypi:google-auth-httplib2","google-auth-httplib2",[443],[1413],"0.4.0",[54],{"id":1416,"slug":1417,"identity":1418,"label":1419,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1420,"versions":1421,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1422},"package:pypi:google-auth-oauthlib","google-auth-oauthlib-21213e6a","pypi:google-auth-oauthlib","google-auth-oauthlib",[443],[967],[54],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1428,"versions":1429,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1431},"package:pypi:google-cloud-core","google-cloud-core-99cecb76","pypi:google-cloud-core","google-cloud-core",[443],[1430],"2.6.0",[54],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1437,"versions":1438,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1439},"package:pypi:google-cloud-modelarmor","google-cloud-modelarmor-f880491c","pypi:google-cloud-modelarmor","google-cloud-modelarmor",[443],[994],[54],{"id":1441,"slug":1442,"identity":1443,"label":1444,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1445,"versions":1446,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1448},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[443],[1447],"1.75.0",[54],{"id":1450,"slug":1451,"identity":1452,"label":1453,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1454,"versions":1457,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1459},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[374,1455,1456],"MIT AND PSF-2.0","MIT AND Python-2.0",[1458],"3.5.3",[54],{"id":1461,"slug":1462,"identity":1463,"label":1464,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1465,"versions":1466,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1468},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[443],[1467],"1.78.0",[54],{"id":1470,"slug":1471,"identity":1472,"label":1473,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1474,"versions":1475,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1477},"package:pypi:grpcio-status","grpcio-status-f4c90de4","pypi:grpcio-status","grpcio-status",[443],[1476],"1.71.2",[54],{"id":1479,"slug":1480,"identity":1481,"label":1482,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1483,"versions":1484,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1485},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[443],[1359],[54],{"id":1487,"slug":1488,"identity":1489,"label":1490,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1491,"versions":1492,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1494},"package:pypi:highlight-io","highlight-io-a0246cc7","pypi:highlight-io","highlight-io",[443],[1493],"0.9.3",[54],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1500,"versions":1502,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1504},"package:pypi:html2text","html2text-351f3aea","pypi:html2text","html2text",[1501],"GPL-3.0",[1503],"2024.2.26",[54],{"id":1506,"slug":1507,"identity":1508,"label":1509,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1510,"versions":1511,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1513},"package:pypi:html5lib","html5lib-0ea30fe2","pypi:html5lib","html5lib",[374],[1512],"1.1",[54],{"id":1515,"slug":1516,"identity":1517,"label":1518,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1519,"versions":1520,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1522},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[526],[1521],"1.0.9",[54],{"id":1524,"slug":1525,"identity":1526,"label":1527,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1528,"versions":1529,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1531},"package:pypi:httplib2","httplib2-5ed73348","pypi:httplib2","httplib2",[374],[1530],"0.32.0",[54],{"id":1533,"slug":1534,"identity":1535,"label":1536,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1537,"versions":1538,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1540},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[526],[1539],"0.28.1",[54],{"id":1542,"slug":1543,"identity":1544,"label":1545,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1546,"versions":1547,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1549},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[374],[1548],"0.4.3",[54],{"id":1551,"slug":1552,"identity":1553,"label":1554,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1555,"versions":1556,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1558},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[443,453],[1557],"1.23.0",[54],{"id":1560,"slug":1561,"identity":1562,"label":1563,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1564,"versions":1565,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1567},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[443,453],[1566],"8.5.0",[54],{"id":1569,"slug":1570,"identity":1571,"label":1572,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1573,"versions":1574,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1576},"package:pypi:inflection","inflection-ad66c7ec","pypi:inflection","inflection",[374],[1575],"0.5.1",[54],{"id":1578,"slug":1579,"identity":1580,"label":1581,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1582,"versions":1583,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1584},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[374],[1054],[54],{"id":1586,"slug":1587,"identity":1588,"label":1589,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1590,"versions":1591,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1593},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[526,453],[1592],"7.3.0",[54],{"id":1595,"slug":1596,"identity":1597,"label":1598,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1599,"versions":1600,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1602},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[526],[1601],"9.15.0",[54],{"id":1604,"slug":1605,"identity":1606,"label":1607,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1608,"versions":1609,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1611},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[453],[1610],"1.1.1",[54],{"id":1613,"slug":1614,"identity":1615,"label":1616,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1617,"versions":1618,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1620},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[526],[1619],"8.1.8",[54],{"id":1622,"slug":1623,"identity":1624,"label":1625,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1626,"versions":1627,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1629},"package:pypi:isodate","isodate-fdef8b9b","pypi:isodate","isodate",[453],[1628],"0.7.2",[54],{"id":1631,"slug":1632,"identity":1633,"label":1634,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1635,"versions":1636,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1638},"package:pypi:isoduration","isoduration-e8f86ac8","pypi:isoduration","isoduration",[1259],[1637],"20.11.0",[54],{"id":1640,"slug":1641,"identity":1642,"label":1643,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1644,"versions":1645,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1647},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[374],[1646],"0.20.0",[54],{"id":1649,"slug":1650,"identity":1651,"label":1652,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1653,"versions":1654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1656},"package:pypi:jh2","jh2-5dba0ddb","pypi:jh2","jh2",[374],[1655],"5.0.13",[54],{"id":1658,"slug":1659,"identity":1660,"label":1661,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1662,"versions":1663,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1664},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[374],[812],[54],{"id":1666,"slug":1667,"identity":1668,"label":1669,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1670,"versions":1671,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1673},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[526],[1672],"1.5.3",[54],{"id":1675,"slug":1676,"identity":1677,"label":1678,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1679,"versions":1680,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1682},"package:pypi:joserfc","joserfc-f5385f6a","pypi:joserfc","joserfc",[526],[1681],"1.7.3",[54],{"id":1684,"slug":1685,"identity":1686,"label":1687,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1688,"versions":1689,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1691},"package:pypi:json5","json5-79be3697","pypi:json5","json5",[453],[1690],"0.15.0",[54],{"id":1693,"slug":1694,"identity":1695,"label":1696,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1697,"versions":1698,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1700},"package:pypi:jsonpatch","jsonpatch-ce7aa354","pypi:jsonpatch","jsonpatch",[453],[1699],"1.33",[54],{"id":1702,"slug":1703,"identity":1704,"label":1705,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1706,"versions":1707,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1709},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[453],[1708],"3.1.1",[54],{"id":1711,"slug":1712,"identity":1713,"label":1714,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1715,"versions":1716,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1718},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[374],[1717],"4.26.0",[54],{"id":1720,"slug":1721,"identity":1722,"label":1723,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1724,"versions":1725,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1727},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[374],[1726],"2025.9.1",[54],{"id":1729,"slug":1730,"identity":1731,"label":1732,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1733,"versions":1734,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1735},"package:pypi:jupyter","jupyter-cfc2388a","pypi:jupyter","jupyter",[453],[1610],[54],{"id":1737,"slug":1738,"identity":1739,"label":1740,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1741,"versions":1743,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1745},"package:pypi:jupyter-builder","jupyter-builder-a8b1b3d0","pypi:jupyter-builder","jupyter-builder",[1742],"BSD-3-Clause AND ISC AND MIT",[1744],"1.1.0",[54],{"id":1747,"slug":1748,"identity":1749,"label":1750,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1751,"versions":1752,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1754},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[453],[1753],"8.9.1",[54],{"id":1756,"slug":1757,"identity":1758,"label":1759,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1760,"versions":1761,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1763},"package:pypi:jupyter-console","jupyter-console-fe43250b","pypi:jupyter-console","jupyter-console",[453],[1762],"6.6.3",[54],{"id":1765,"slug":1766,"identity":1767,"label":1768,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1769,"versions":1770,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1772},"package:pypi:jupyter-events","jupyter-events-f8263fc3","pypi:jupyter-events","jupyter-events",[453],[1771],"0.12.1",[54],{"id":1774,"slug":1775,"identity":1776,"label":1777,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1778,"versions":1779,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1781},"package:pypi:jupyter-lsp","jupyter-lsp-e5008e78","pypi:jupyter-lsp","jupyter-lsp",[526],[1780],"2.3.1",[54],{"id":1783,"slug":1784,"identity":1785,"label":1786,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1787,"versions":1788,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1790},"package:pypi:jupyter-server-terminals","jupyter-server-terminals-908697b8","pypi:jupyter-server-terminals","jupyter-server-terminals",[453],[1789],"0.5.4",[54],{"id":1792,"slug":1793,"identity":1794,"label":1795,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1796,"versions":1797,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1798},"package:pypi:jupyterlab-pygments","jupyterlab-pygments-f3159f9e","pypi:jupyterlab-pygments","jupyterlab-pygments",[453],[473],[54],{"id":1800,"slug":1801,"identity":1802,"label":1803,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1804,"versions":1805,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1807},"package:pypi:jupyterlab-server","jupyterlab-server-87bbeff5","pypi:jupyterlab-server","jupyterlab-server",[453],[1806],"2.28.0",[54],{"id":1809,"slug":1810,"identity":1811,"label":1812,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1813,"versions":1814,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1816},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[526,453],[1815],"3.0.16",[54],{"id":1818,"slug":1819,"identity":1820,"label":1821,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1822,"versions":1823,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1825},"package:pypi:kombu","kombu-4085784d","pypi:kombu","kombu",[526],[1824],"5.6.2",[54],{"id":1827,"slug":1828,"identity":1829,"label":1830,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1831,"versions":1832,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1833},"package:pypi:langdetect","langdetect-3c0edcca","pypi:langdetect","langdetect",[374],[1521],[54],{"id":1835,"slug":1836,"identity":1837,"label":1838,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1839,"versions":1840,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1841},"package:pypi:langgraph-prebuilt","langgraph-prebuilt-84c4e144","pypi:langgraph-prebuilt","langgraph-prebuilt",[374],[1744],[54],{"id":1843,"slug":1844,"identity":1845,"label":1846,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1847,"versions":1848,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1849},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[374],[627],[54],{"id":1851,"slug":1852,"identity":1853,"label":1854,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1855,"versions":1856,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1858},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[526,453],[1857],"3.0.3",[54],{"id":1860,"slug":1861,"identity":1862,"label":1863,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1864,"versions":1865,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1867},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[526,453],[1866],"0.2.2",[54],{"id":1869,"slug":1870,"identity":1871,"label":1872,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1873,"versions":1874,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1876},"package:pypi:msal","msal-b77215ab","pypi:msal","msal",[374],[1875],"1.37.0",[54],{"id":1878,"slug":1879,"identity":1880,"label":1881,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1882,"versions":1883,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1885},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[443],[1884],"6.7.1",[54],{"id":1887,"slug":1888,"identity":1889,"label":1890,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1891,"versions":1892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1893},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[374],[1744],[54],{"id":1895,"slug":1896,"identity":1897,"label":1898,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1899,"versions":1900,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1902},"package:pypi:nbclient","nbclient-e201d8f1","pypi:nbclient","nbclient",[453],[1901],"0.11.0",[54],{"id":1904,"slug":1905,"identity":1906,"label":1907,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1908,"versions":1909,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1911},"package:pypi:nbformat","nbformat-2d86904f","pypi:nbformat","nbformat",[453],[1910],"5.10.4",[54],{"id":1913,"slug":1914,"identity":1915,"label":1916,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1917,"versions":1918,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1919},"package:pypi:nest-asyncio2","nest-asyncio2-ac071203","pypi:nest-asyncio2","nest-asyncio2",[453],[608],[54],{"id":1921,"slug":1922,"identity":1923,"label":1924,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1925,"versions":1926,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1928},"package:pypi:niquests","niquests-afbb79b2","pypi:niquests","niquests",[443],[1927],"3.20.1",[54],{"id":1930,"slug":1931,"identity":1932,"label":1933,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1934,"versions":1935,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1937},"package:pypi:notebook-shim","notebook-shim-6d442652","pypi:notebook-shim","notebook-shim",[453],[1936],"0.2.4",[54],{"id":1939,"slug":1940,"identity":1941,"label":1942,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1943,"versions":1945,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1947},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1944,453],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1946],"2.4.6",[54],{"id":1949,"slug":1950,"identity":1951,"label":1952,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1953,"versions":1954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1956},"package:pypi:oauthlib","oauthlib-5d97cdbc","pypi:oauthlib","oauthlib",[526,453],[1955],"3.3.1",[54],{"id":1958,"slug":1959,"identity":1960,"label":1961,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1962,"versions":1963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1965},"package:pypi:olefile","olefile-c842b5c6","pypi:olefile","olefile",[453],[1964],"0.47",[54],{"id":1967,"slug":1968,"identity":1969,"label":1970,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1971,"versions":1972,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1974},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[374],[1973],"1.27.0",[54],{"id":1976,"slug":1977,"identity":1978,"label":1979,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1980,"versions":1981,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1983},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[443],[1982],"1.28.2",[54],{"id":1985,"slug":1986,"identity":1987,"label":1988,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1989,"versions":1990,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1992},"package:pypi:opentelemetry-distro","opentelemetry-distro-dfa51d1d","pypi:opentelemetry-distro","opentelemetry-distro",[443],[1991],"0.49b2",[54],{"id":1994,"slug":1995,"identity":1996,"label":1997,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1998,"versions":1999,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2000},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[443],[1982],[54],{"id":2002,"slug":2003,"identity":2004,"label":2005,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2006,"versions":2007,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2008},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[443],[1982],[54],{"id":2010,"slug":2011,"identity":2012,"label":2013,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2014,"versions":2015,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2016},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[443],[1982],[54],{"id":2018,"slug":2019,"identity":2020,"label":2021,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2022,"versions":2023,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2024},"package:pypi:opentelemetry-instrumentation","opentelemetry-instrumentation-9bcfbe9e","pypi:opentelemetry-instrumentation","opentelemetry-instrumentation",[443],[1991],[54],{"id":2026,"slug":2027,"identity":2028,"label":2029,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2030,"versions":2031,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2033},"package:pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic-bf5e49cb","pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic",[443],[2032],"0.33.12",[54],{"id":2035,"slug":2036,"identity":2037,"label":2038,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2039,"versions":2040,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2041},"package:pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock-8f6fc7c9","pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock",[443],[2032],[54],{"id":2043,"slug":2044,"identity":2045,"label":2046,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2047,"versions":2048,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2049},"package:pypi:opentelemetry-instrumentation-boto","opentelemetry-instrumentation-boto-d95bfff1","pypi:opentelemetry-instrumentation-boto","opentelemetry-instrumentation-boto",[443],[1991],[54],{"id":2051,"slug":2052,"identity":2053,"label":2054,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2055,"versions":2056,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2057},"package:pypi:opentelemetry-instrumentation-boto3sqs","opentelemetry-instrumentation-boto3sqs-e0e650a8","pypi:opentelemetry-instrumentation-boto3sqs","opentelemetry-instrumentation-boto3sqs",[443],[1991],[54],{"id":2059,"slug":2060,"identity":2061,"label":2062,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2063,"versions":2064,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2065},"package:pypi:opentelemetry-instrumentation-celery","opentelemetry-instrumentation-celery-7a39e74e","pypi:opentelemetry-instrumentation-celery","opentelemetry-instrumentation-celery",[443],[1991],[54],{"id":2067,"slug":2068,"identity":2069,"label":2070,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2071,"versions":2072,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2073},"package:pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb-9eb598fd","pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb",[443],[2032],[54],{"id":2075,"slug":2076,"identity":2077,"label":2078,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2079,"versions":2080,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2081},"package:pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere-83896a35","pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere",[443],[2032],[54],{"id":2083,"slug":2084,"identity":2085,"label":2086,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2087,"versions":2088,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2089},"package:pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack-92025ed0","pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack",[443],[2032],[54],{"id":2091,"slug":2092,"identity":2093,"label":2094,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2095,"versions":2096,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2097},"package:pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain-f89d1133","pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain",[443],[2032],[54],{"id":2099,"slug":2100,"identity":2101,"label":2102,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2103,"versions":2104,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2105},"package:pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex-866eb99d","pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex",[443],[2032],[54],{"id":2107,"slug":2108,"identity":2109,"label":2110,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2111,"versions":2112,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2113},"package:pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging-23ee835f","pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging",[443],[1991],[54],{"id":2115,"slug":2116,"identity":2117,"label":2118,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2119,"versions":2120,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2121},"package:pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai-68db94bf","pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai",[443],[2032],[54],{"id":2123,"slug":2124,"identity":2125,"label":2126,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2127,"versions":2128,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2129},"package:pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone-08d2858e","pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone",[443],[2032],[54],{"id":2131,"slug":2132,"identity":2133,"label":2134,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2135,"versions":2136,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2137},"package:pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant-3cbb3bd9","pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant",[443],[2032],[54],{"id":2139,"slug":2140,"identity":2141,"label":2142,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2143,"versions":2144,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2145},"package:pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis-c10bb4c6","pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis",[443],[1991],[54],{"id":2147,"slug":2148,"identity":2149,"label":2150,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2151,"versions":2152,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2153},"package:pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate-c6f5732e","pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate",[443],[2032],[54],{"id":2155,"slug":2156,"identity":2157,"label":2158,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2159,"versions":2160,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2161},"package:pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests-baaa9f76","pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests",[443],[1991],[54],{"id":2163,"slug":2164,"identity":2165,"label":2166,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2167,"versions":2168,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2169},"package:pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy-8d638a32","pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy",[443],[1991],[54],{"id":2171,"slug":2172,"identity":2173,"label":2174,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2175,"versions":2176,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2177},"package:pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers-bbb71ecf","pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers",[443],[2032],[54],{"id":2179,"slug":2180,"identity":2181,"label":2182,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2183,"versions":2184,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2185},"package:pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai-6a8490d9","pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai",[443],[2032],[54],{"id":2187,"slug":2188,"identity":2189,"label":2190,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2191,"versions":2192,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2193},"package:pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx-012d35eb","pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx",[443],[2032],[54],{"id":2195,"slug":2196,"identity":2197,"label":2198,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2199,"versions":2200,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2201},"package:pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate-95b5df11","pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate",[443],[2032],[54],{"id":2203,"slug":2204,"identity":2205,"label":2206,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2207,"versions":2208,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2209},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[443],[1982],[54],{"id":2211,"slug":2212,"identity":2213,"label":2214,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2215,"versions":2216,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2217},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[443],[1982],[54],{"id":2219,"slug":2220,"identity":2221,"label":2222,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2223,"versions":2224,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2225},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[443],[1991],[54],{"id":2227,"slug":2228,"identity":2229,"label":2230,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2231,"versions":2232,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2233},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[443],[385],[54],{"id":2235,"slug":2236,"identity":2237,"label":2238,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2239,"versions":2240,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2241},"package:pypi:opentelemetry-util-http","opentelemetry-util-http-03fc7f64","pypi:opentelemetry-util-http","opentelemetry-util-http",[443],[1991],[54],{"id":2243,"slug":2244,"identity":2245,"label":2246,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2247,"versions":2248,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2250},"package:pypi:ormsgpack","ormsgpack-56a067ff","pypi:ormsgpack","ormsgpack",[882],[2249],"1.12.2",[54],{"id":2252,"slug":2253,"identity":2254,"label":2255,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2256,"versions":2257,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2259},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[443],[2258],"7.7.0",[54],{"id":2261,"slug":2262,"identity":2263,"label":2264,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2265,"versions":2267,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2269},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[2266,453],"Apache-2.0 OR BSD-2-Clause",[2268],"26.2",[54],{"id":2271,"slug":2272,"identity":2273,"label":2274,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2275,"versions":2276,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2277},"package:pypi:pandocfilters","pandocfilters-f452098e","pypi:pandocfilters","pandocfilters",[526],[1359],[54],{"id":2279,"slug":2280,"identity":2281,"label":2282,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2283,"versions":2284,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2286},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[374],[2285],"0.8.7",[54],{"id":2288,"slug":2289,"identity":2290,"label":2291,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2292,"versions":2293,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2295},"package:pypi:pdfplumber","pdfplumber-ba8dca54","pypi:pdfplumber","pdfplumber",[374],[2294],"0.11.10",[54],{"id":2297,"slug":2298,"identity":2299,"label":2300,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2301,"versions":2302,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2304},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[453],[2303],"4.9.0",[54],{"id":2306,"slug":2307,"identity":2308,"label":2309,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2310,"versions":2311,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2313},"package:pypi:pikepdf","pikepdf-9b0a0b6c","pypi:pikepdf","pikepdf",[792],[2312],"10.10.0",[54],{"id":2315,"slug":2316,"identity":2317,"label":2318,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2319,"versions":2320,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2322},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[374],[2321],"4.10.0",[54],{"id":2324,"slug":2325,"identity":2326,"label":2327,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2328,"versions":2329,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2331},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[374],[2330],"1.6.0",[54],{"id":2333,"slug":2334,"identity":2335,"label":2336,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2337,"versions":2339,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2341},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[443,2338],"Apache-2.0 AND BSD-2-Clause",[2340],"0.25.0",[54],{"id":2343,"slug":2344,"identity":2345,"label":2346,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2347,"versions":2348,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2350},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[526,453],[2349],"3.0.52",[54],{"id":2352,"slug":2353,"identity":2354,"label":2355,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2356,"versions":2357,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2359},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[443],[2358],"0.5.2",[54],{"id":2361,"slug":2362,"identity":2363,"label":2364,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2365,"versions":2366,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2367},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[443],[702],[54],{"id":2369,"slug":2370,"identity":2371,"label":2372,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2373,"versions":2374,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2376},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[526],[2375],"7.2.2",[54],{"id":2378,"slug":2379,"identity":2380,"label":2381,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2382,"versions":2383,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2384},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1259],[994],[54],{"id":2386,"slug":2387,"identity":2388,"label":2389,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2390,"versions":2391,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2392},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[374],[1199],[54],{"id":2394,"slug":2395,"identity":2396,"label":2397,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2398,"versions":2399,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2400},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[453],[385],[54],{"id":2402,"slug":2403,"identity":2404,"label":2405,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2406,"versions":2407,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2408},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[374],[967],[54],{"id":2410,"slug":2411,"identity":2412,"label":2413,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2414,"versions":2415,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2417},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[526],[2416],"3.0",[54],{"id":2419,"slug":2420,"identity":2421,"label":2422,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2423,"versions":2424,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2426},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[374],[2425],"2.13.4",[54],{"id":2428,"slug":2429,"identity":2430,"label":2431,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2432,"versions":2433,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2435},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[374],[2434],"2.46.4",[54],{"id":2437,"slug":2438,"identity":2439,"label":2440,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2441,"versions":2442,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2444},"package:pypi:pymongo","pymongo-367c417d","pypi:pymongo","pymongo",[443],[2443],"4.17.0",[54],{"id":2446,"slug":2447,"identity":2448,"label":2449,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2450,"versions":2451,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2453},"package:pypi:pyncclient","pyncclient-babf6882","pypi:pyncclient","pyncclient",[453],[2452],"0.7",[54],{"id":2455,"slug":2456,"identity":2457,"label":2458,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2459,"versions":2460,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2462},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[374],[2461],"3.3.2",[54],{"id":2464,"slug":2465,"identity":2466,"label":2467,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2468,"versions":2469,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2471},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[453],[2470],"5.11.0",[54],{"id":2473,"slug":2474,"identity":2475,"label":2476,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2477,"versions":2478,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2479},"package:pypi:pyspnego","pyspnego-51559592","pypi:pyspnego","pyspnego",[374],[1771],[54],{"id":2481,"slug":2482,"identity":2483,"label":2484,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2485,"versions":2486,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2487},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[443],[967],[54],{"id":2489,"slug":2490,"identity":2491,"label":2492,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2493,"versions":2494,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2496},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[453],[2495],"2.9.0.post0",[54],{"id":2498,"slug":2499,"identity":2500,"label":2501,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2502,"versions":2503,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2505},"package:pypi:python-iso639","python-iso639-ccd49637","pypi:python-iso639","python-iso639",[443],[2504],"2026.4.20",[54],{"id":2507,"slug":2508,"identity":2509,"label":2510,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2511,"versions":2512,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2514},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[673,453],[2513],"4.1.0",[54],{"id":2516,"slug":2517,"identity":2518,"label":2519,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2520,"versions":2521,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2523},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[374],[2522],"0.4.27",[54],{"id":2525,"slug":2526,"identity":2527,"label":2528,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2529,"versions":2530,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2532},"package:pypi:python-magic-bin","python-magic-bin-bfa92dc0","pypi:python-magic-bin","python-magic-bin",[],[2531],"0.4.14",[54],{"id":2534,"slug":2535,"identity":2536,"label":2537,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2538,"versions":2539,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2541},"package:pypi:python-oxmsg","python-oxmsg-1cecb37a","pypi:python-oxmsg","python-oxmsg",[374],[2540],"0.0.2",[54],{"id":2543,"slug":2544,"identity":2545,"label":2546,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2547,"versions":2548,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2550},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2549],"312",[54],{"id":2552,"slug":2553,"identity":2554,"label":2555,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2556,"versions":2557,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2559},"package:pypi:pywinpty","pywinpty-0eb4e04a","pypi:pywinpty","pywinpty",[374],[2558],"3.0.5",[54],{"id":2561,"slug":2562,"identity":2563,"label":2564,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2565,"versions":2566,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2568},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[374],[2567],"6.0.3",[54],{"id":2570,"slug":2571,"identity":2572,"label":2573,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2574,"versions":2575,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2577},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[453],[2576],"27.1.0",[54],{"id":2579,"slug":2580,"identity":2581,"label":2582,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2583,"versions":2584,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2586},"package:pypi:qh3","qh3-30fc4da7","pypi:qh3","qh3",[453],[2585],"1.9.4",[54],{"id":2588,"slug":2589,"identity":2590,"label":2591,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2592,"versions":2593,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2595},"package:pypi:qrcode","qrcode-dc7f5ffb","pypi:qrcode","qrcode",[453],[2594],"8.2",[54],{"id":2597,"slug":2598,"identity":2599,"label":2600,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2601,"versions":2602,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2604},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[374],[2603],"3.14.5",[54],{"id":2606,"slug":2607,"identity":2608,"label":2609,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2610,"versions":2611,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2613},"package:pypi:rapidocr-onnxruntime","rapidocr-onnxruntime-649d0188","pypi:rapidocr-onnxruntime","rapidocr-onnxruntime",[443],[2612],"1.4.4",[54],{"id":2615,"slug":2616,"identity":2617,"label":2618,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2619,"versions":2620,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2622},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[374],[2621],"8.0.1",[54],{"id":2624,"slug":2625,"identity":2626,"label":2627,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2628,"versions":2629,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2631},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[374],[2630],"0.37.0",[54],{"id":2633,"slug":2634,"identity":2635,"label":2636,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2637,"versions":2639,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2641},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2638,453],"Apache-2.0 AND CNRI-Python",[2640],"2026.7.10",[54],{"id":2643,"slug":2644,"identity":2645,"label":2646,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2647,"versions":2648,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2649},"package:pypi:reportlab","reportlab-c4bc3646","pypi:reportlab","reportlab",[453],[464],[54],{"id":2651,"slug":2652,"identity":2653,"label":2654,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2655,"versions":2656,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2658},"package:pypi:requests-mock","requests-mock-f997e834","pypi:requests-mock","requests-mock",[443],[2657],"1.12.1",[54],{"id":2660,"slug":2661,"identity":2662,"label":2663,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2664,"versions":2665,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2667},"package:pypi:requests-ntlm","requests-ntlm-3ab6d59c","pypi:requests-ntlm","requests-ntlm",[1259],[2666],"1.3.0",[54],{"id":2669,"slug":2670,"identity":2671,"label":2672,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2673,"versions":2674,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2676},"package:pypi:requests-oauthlib","requests-oauthlib-865bff2a","pypi:requests-oauthlib","requests-oauthlib",[1259],[2675],"2.0.0",[54],{"id":2678,"slug":2679,"identity":2680,"label":2681,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2682,"versions":2683,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2685},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[443],[2684],"1.0.0",[54],{"id":2687,"slug":2688,"identity":2689,"label":2690,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2691,"versions":2692,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2693},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[374],[1012],[54],{"id":2695,"slug":2696,"identity":2697,"label":2698,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2699,"versions":2700,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2702},"package:pypi:rfc3986-validator","rfc3986-validator-723c00af","pypi:rfc3986-validator","rfc3986-validator",[374],[2701],"0.1.1",[54],{"id":2704,"slug":2705,"identity":2706,"label":2707,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2708,"versions":2709,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2710},"package:pypi:rfc3987-syntax","rfc3987-syntax-1f7c3c6b","pypi:rfc3987-syntax","rfc3987-syntax",[374],[1744],[54],{"id":2712,"slug":2713,"identity":2714,"label":2715,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2716,"versions":2717,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2719},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[374],[2718],"2026.6.3",[54],{"id":2721,"slug":2722,"identity":2723,"label":2724,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2725,"versions":2726,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2727},"package:pypi:send2trash","send2trash-9494ed34","pypi:send2trash","send2trash",[526,453],[1136],[54],{"id":2729,"slug":2730,"identity":2731,"label":2732,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2733,"versions":2734,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2736},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[526],[2735],"2.1.2",[54],{"id":2738,"slug":2739,"identity":2740,"label":2741,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2742,"versions":2743,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2745},"package:pypi:six","six-3c3888bd","pypi:six","six",[374],[2744],"1.17.0",[54],{"id":2747,"slug":2748,"identity":2749,"label":2750,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2751,"versions":2752,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2753},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[882],[627],[54],{"id":2755,"slug":2756,"identity":2757,"label":2758,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2759,"versions":2760,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2762},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[374],[2761],"2.0.51",[54],{"id":2764,"slug":2765,"identity":2766,"label":2767,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2768,"versions":2769,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2771},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[526],[2770],"3.4.5",[54],{"id":2773,"slug":2774,"identity":2775,"label":2776,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2777,"versions":2778,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2780},"package:pypi:sspilib","sspilib-cdfba389","pypi:sspilib","sspilib",[374],[2779],"0.5.0",[54],{"id":2782,"slug":2783,"identity":2784,"label":2785,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2786,"versions":2787,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2789},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[374],[2788],"0.6.3",[54],{"id":2791,"slug":2792,"identity":2793,"label":2794,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2795,"versions":2796,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2798},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[443],[2797],"9.1.4",[54],{"id":2800,"slug":2801,"identity":2802,"label":2803,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2804,"versions":2805,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2807},"package:pypi:terminado","terminado-9ae7e4c0","pypi:terminado","terminado",[453],[2806],"0.18.1",[54],{"id":2809,"slug":2810,"identity":2811,"label":2812,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2813,"versions":2814,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2815},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[453],[1359],[54],{"id":2817,"slug":2818,"identity":2819,"label":2820,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2821,"versions":2822,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2824},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[453],[2823],"5.15.1",[54],{"id":2826,"slug":2827,"identity":2828,"label":2829,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2830,"versions":2831,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2833},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[956,453],[2832],"4.16.0",[54],{"id":2835,"slug":2836,"identity":2837,"label":2838,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2839,"versions":2840,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2842},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[374],[2841],"0.9.0",[54],{"id":2844,"slug":2845,"identity":2846,"label":2847,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2848,"versions":2849,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2850},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[374],[385],[54],{"id":2852,"slug":2853,"identity":2854,"label":2855,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2856,"versions":2857,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2859},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[443],[2858],"2026.3",[54],{"id":2861,"slug":2862,"identity":2863,"label":2864,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2865,"versions":2866,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2868},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[374],[2867],"5.4.4",[54],{"id":2870,"slug":2871,"identity":2872,"label":2873,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2874,"versions":2875,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2877},"package:pypi:unstructured-client","unstructured-client-182f0adb","pypi:unstructured-client","unstructured-client",[374],[2876],"0.45.0",[54],{"id":2879,"slug":2880,"identity":2881,"label":2882,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2883,"versions":2884,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2885},"package:pypi:uri-template","uri-template-04c43560","pypi:uri-template","uri-template",[374],[2666],[54],{"id":2887,"slug":2888,"identity":2889,"label":2890,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2891,"versions":2892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2894},"package:pypi:uritemplate","uritemplate-02f8e588","pypi:uritemplate","uritemplate",[453],[2893],"4.2.0",[54],{"id":2896,"slug":2897,"identity":2898,"label":2899,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2900,"versions":2901,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2903},"package:pypi:uritools","uritools-75c85cd3","pypi:uritools","uritools",[374],[2902],"6.1.2",[54],{"id":2905,"slug":2906,"identity":2907,"label":2908,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2909,"versions":2910,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2911},"package:pypi:urlextract","urlextract-e0b99c49","pypi:urlextract","urlextract",[374],[1251],[54],{"id":2913,"slug":2914,"identity":2915,"label":2916,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2917,"versions":2918,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2920},"package:pypi:urllib3-future","urllib3-future-fd77948f","pypi:urllib3-future","urllib3-future",[374],[2919],"2.22.901",[54],{"id":2922,"slug":2923,"identity":2924,"label":2925,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2926,"versions":2927,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2929},"package:pypi:uuid-utils","uuid-utils-c3d356a2","pypi:uuid-utils","uuid-utils",[526,453],[2928],"0.17.0",[54],{"id":2931,"slug":2932,"identity":2933,"label":2934,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2935,"versions":2936,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2938},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[526],[2937],"0.51.0",[54],{"id":2940,"slug":2941,"identity":2942,"label":2943,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2944,"versions":2945,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2947},"package:pypi:validators","validators-7f3ecc07","pypi:validators","validators",[374],[2946],"0.35.0",[54],{"id":2949,"slug":2950,"identity":2951,"label":2952,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2953,"versions":2954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2956},"package:pypi:vine","vine-fa93acc9","pypi:vine","vine",[453],[2955],"5.1.0",[54],{"id":2958,"slug":2959,"identity":2960,"label":2961,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2962,"versions":2963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2964},"package:pypi:wassima","wassima-de972895","pypi:wassima","wassima",[374],[2735],[54],{"id":2966,"slug":2967,"identity":2968,"label":2969,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2970,"versions":2971,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2973},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[374],[2972],"0.8.2",[54],{"id":2975,"slug":2976,"identity":2977,"label":2978,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2979,"versions":2980,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2982},"package:pypi:webcolors","webcolors-380e4f6b","pypi:webcolors","webcolors",[526],[2981],"25.10.0",[54],{"id":2984,"slug":2985,"identity":2986,"label":2987,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2988,"versions":2989,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2990},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[453],[1575],[54],{"id":2992,"slug":2993,"identity":2994,"label":2995,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2996,"versions":2997,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2998},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[443],[1251],[54],{"id":3000,"slug":3001,"identity":3002,"label":3003,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3004,"versions":3005,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3007},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[526],[3006],"15.0.1",[54],{"id":3009,"slug":3010,"identity":3011,"label":3012,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3013,"versions":3014,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3016},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[526],[3015],"4.0.15",[54],{"id":3018,"slug":3019,"identity":3020,"label":3021,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3022,"versions":3023,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3025},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[453],[3024],"1.17.3",[54],{"id":3027,"slug":3028,"identity":3029,"label":3030,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3031,"versions":3032,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3034},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[673,453],[3033],"3.8.1",[54],{"id":3036,"slug":3037,"identity":3038,"label":3039,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3040,"versions":3041,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3043},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[443],[3042],"1.24.2",[54],{"id":3045,"slug":3046,"identity":3047,"label":3048,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3049,"versions":3050,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3051},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[374],[2513],[54],{"id":3053,"slug":3054,"identity":3055,"label":3056,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":3057,"versions":3058,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":3059},"package:pypi:zstandard","zstandard-8fab007a","pypi:zstandard","zstandard",[526],[2340],[54],[3061,3099,3134,3170,3203,3233,3263,3291,3318,3344,3369,3395,3427,3454,3488,3518,3544,3573,3596,3625,3652,3686,3714,3750,3776,3799,3826,3846,3869,3887,3917,3946,3970,3988,4028,4054,4077,4102,4125,4149,4174,4202,4230,4255,4278,4300,4335,4358,4381,4404,4427,4457,4484,4503,4557,4582,4607,4630,4645,4668,4690,4713,4739,4765,4801,4828,4853,4882,4910,4935,4966,5005,5032,5061,5081,5110,5128,5149,5199,5225,5255,5278,5298,5322,5345,5368,5400,5419,5442,5476,5500,5522,5543,5570,5600,5634,5660,5687,5713,5747,5777,5797,5822,5856,5879,5903,5957,5982,6014,6038,6070,6097,6112,6139,6164,6200,6223,6250,6265,6289,6309,6337,6362,6383,6402,6427,6453,6486,6511,6534,6558,6583,6610,6632,6654,6670,6693,6721,6749,6775,6797,6831,6846,6868,6901,6928,6950,6972,6993,7013,7040,7075,7099,7126,7159,7181,7204,7232,7252,7279,7308,7327,7348,7379,7400,7447,7470,7507,7535,7559,7578,7600,7622,7653,7674,7697,7729,7752,7774,7795,7825,7847,7876,7903,7927,7949,7970,7992,8016,8040,8064,8079,8106,8134,8160,8180,8208,8230,8261,8283,8309,8341,8366,8382,8404,8456,8484,8508,8532,8562,8576,8597,8619,8638,8659,8682,8710,8737,8764,8785,8812,8838,8863,8886,8918,8938,8968,8990,9019,9045,9097,9119,9144,9167,9193,9227,9251,9276,9295,9322,9341,9369,9390,9405,9430,9463,9479,9496,9510,9541,9556,9571,9588,9601],{"id":105,"slug":3062,"dossier":45,"summary":3063,"aliases":3064,"sourceIds":3067,"published":3068,"modified":3069,"checkedAt":7,"severity":3070,"references":3077,"versionKeys":3097,"packageCount":32,"repositoryCount":32},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[3065,3066],"CVE-2026-48156","PYSEC-2026-3004",[105,3066],"2026-06-12T18:29:59Z","2026-07-13T16:43:52.833287270Z",[3071,3074],{"type":3072,"score":3073},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3075,"score":3076},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3078,3081,3084,3086,3088,3091,3093,3095],{"type":3079,"url":3080},"WEB","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":3082,"url":3083},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":3079,"url":3085},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":3079,"url":3087},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":3089,"url":3090},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":3079,"url":3092},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":3089,"url":3094},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":3082,"url":3096},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[3098],"pypi:pypdf@5.1.0",{"id":106,"slug":3100,"dossier":45,"summary":3101,"aliases":3102,"sourceIds":3105,"published":3106,"modified":3107,"checkedAt":7,"severity":3108,"references":3111,"versionKeys":3132,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[3103,3104],"CVE-2024-39689","PYSEC-2024-230",[106,3104],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[3109],{"type":3072,"score":3110},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3112,3114,3116,3119,3121,3123,3126,3128,3130],{"type":3082,"url":3113},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":3082,"url":3115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":3117,"url":3118},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":3089,"url":3120},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":3079,"url":3122},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":3124,"url":3125},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":3079,"url":3127},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":3082,"url":3129},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":3082,"url":3131},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[3133],"pypi:certifi@2024.6.2",{"id":107,"slug":3135,"dossier":45,"summary":3136,"aliases":3137,"sourceIds":3140,"published":3141,"modified":3142,"checkedAt":7,"severity":3143,"references":3148,"versionKeys":3168,"packageCount":32,"repositoryCount":32},"ghsa-24qx-w28j-9m6p-97a1f20a","Jupyter Server has a  CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat` (from huntr)",[3138,3139],"CVE-2026-40110","PYSEC-2026-2187",[107,3139],"2026-05-05T16:54:31Z","2026-07-13T07:26:55.845862407Z",[3144,3146],{"type":3075,"score":3145},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:L\u002FSI:L\u002FSA:L",{"type":3072,"score":3147},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3149,3151,3153,3156,3158,3160,3162,3164,3166],{"type":3117,"url":3150},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-24qx-w28j-9m6p",{"type":3082,"url":3152},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40110",{"type":3154,"url":3155},"REPORT","https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fpull\u002F603",{"type":3117,"url":3157},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F057869a327c46730afede3eab0ca2d2e3e74acea",{"type":3117,"url":3159},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F49b34392feaa97735b3b777e3baf8f22f2a14ed8",{"type":3089,"url":3161},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server",{"type":3079,"url":3163},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40110",{"type":3079,"url":3165},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40110.json",{"type":3154,"url":3167},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2466912",[3169],"pypi:jupyter-server@2.15.0",{"id":108,"slug":3171,"dossier":45,"summary":3172,"aliases":3173,"sourceIds":3176,"published":3177,"modified":3178,"checkedAt":7,"severity":3179,"references":3182,"versionKeys":3199,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[3174,3175],"CVE-2025-54121","PYSEC-2026-1941",[108,3175],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[3180],{"type":3072,"score":3181},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3183,3185,3187,3189,3191,3193,3195,3197],{"type":3079,"url":3184},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":3082,"url":3186},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":3117,"url":3188},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":3089,"url":3190},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":3079,"url":3192},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":3079,"url":3194},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":3089,"url":3196},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":3082,"url":3198},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[3200,3201,3202],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":109,"slug":3204,"dossier":45,"summary":3205,"aliases":3206,"sourceIds":3209,"published":3210,"modified":3211,"checkedAt":7,"severity":3212,"references":3217,"versionKeys":3224,"packageCount":32,"repositoryCount":605},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[3207,3208],"CVE-2026-54279","PYSEC-2026-2112",[109,3208],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[3213,3215],{"type":3075,"score":3214},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":3072,"score":3216},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3218,3220,3222],{"type":3082,"url":3219},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":3089,"url":3221},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":3117,"url":3223},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[3225,3226,3227,3228,3229,3230,3231,3232],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":110,"slug":3234,"dossier":45,"summary":3235,"aliases":3236,"sourceIds":3239,"published":3240,"modified":3241,"checkedAt":7,"severity":3242,"references":3245,"versionKeys":3260,"packageCount":32,"repositoryCount":401},"ghsa-2g6r-c272-w58r-4bbbcb01","LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages",[3237,3238],"CVE-2026-26013","PYSEC-2026-2562",[110,3238],"2026-02-11T14:23:13Z","2026-07-13T16:43:30.756724986Z",[3243],{"type":3072,"score":3244},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3246,3248,3250,3252,3254,3256,3258],{"type":3079,"url":3247},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",{"type":3082,"url":3249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26013",{"type":3079,"url":3251},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F2b4b1dc29a833d4053deba4c2b77a3848c834565",{"type":3089,"url":3253},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",{"type":3079,"url":3255},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.11",{"type":3089,"url":3257},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-core",{"type":3082,"url":3259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",[3261,3262],"pypi:langchain-core@0.2.28","pypi:langchain-core@1.2.7",{"id":111,"slug":3264,"dossier":45,"summary":3265,"aliases":3266,"sourceIds":3269,"published":3270,"modified":3271,"checkedAt":7,"severity":3272,"references":3275,"versionKeys":3289,"packageCount":32,"repositoryCount":32},"ghsa-2hm2-hc3v-44h9-93b1e859","Mistune toc \u002F TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id=\"toc_N\"` content",[3267,3268],"CVE-2026-59930","PYSEC-2026-2218",[111,3268],"2026-07-08T17:17:28.867Z","2026-07-20T21:46:43.352385519Z",[3273],{"type":3072,"score":3274},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3276,3279,3281,3283,3285,3287],{"type":3277,"url":3278},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-2hm2-hc3v-44h9",{"type":3082,"url":3280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59930",{"type":3117,"url":3282},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc4093c4742ed0d10d9332fb8edb455869b7b581b",{"type":3089,"url":3284},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune",{"type":3082,"url":3286},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.3.0",{"type":3079,"url":3288},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2218.yaml",[3290],"pypi:mistune@3.1.3",{"id":112,"slug":3292,"dossier":45,"summary":3293,"aliases":3294,"sourceIds":3297,"published":3298,"modified":3299,"checkedAt":7,"severity":3300,"references":3302,"versionKeys":3317,"packageCount":32,"repositoryCount":32},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[3295,3296],"CVE-2026-24688","PYSEC-2026-1827",[112,3296],"2026-01-26T23:37:57Z","2026-07-07T17:56:12.815561375Z",[3301],{"type":3075,"score":3076},[3303,3305,3307,3309,3311,3312,3314,3315],{"type":3079,"url":3304},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":3082,"url":3306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":3079,"url":3308},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":3079,"url":3310},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":3089,"url":3090},{"type":3079,"url":3313},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":3089,"url":3094},{"type":3082,"url":3316},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[3098],{"id":113,"slug":3319,"dossier":45,"summary":3320,"aliases":3321,"sourceIds":3324,"published":3325,"modified":3326,"checkedAt":7,"severity":3327,"references":3330,"versionKeys":3343,"packageCount":32,"repositoryCount":32},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[3322,3323],"CVE-2026-27628","PYSEC-2026-3005",[113,3323],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[3328],{"type":3075,"score":3329},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3331,3333,3335,3337,3339,3340,3341],{"type":3079,"url":3332},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":3082,"url":3334},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":3079,"url":3336},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":3079,"url":3338},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":3089,"url":3090},{"type":3089,"url":3094},{"type":3082,"url":3342},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[3098],{"id":114,"slug":3345,"dossier":45,"summary":3346,"aliases":3347,"sourceIds":3350,"published":3351,"modified":3352,"checkedAt":7,"severity":3353,"references":3358,"versionKeys":3368,"packageCount":32,"repositoryCount":605},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[3348,3349],"CVE-2026-34514","PYSEC-2026-2096",[114,3349],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[3354,3356],{"type":3075,"score":3355},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3072,"score":3357},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3359,3361,3363,3365,3366],{"type":3117,"url":3360},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":3082,"url":3362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":3117,"url":3364},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":3089,"url":3221},{"type":3082,"url":3367},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[3225,3226,3227,3228,3229,3230,3231,3232],{"id":115,"slug":3370,"dossier":45,"summary":3371,"aliases":3372,"sourceIds":3375,"published":3376,"modified":3377,"checkedAt":7,"severity":3378,"references":3380,"versionKeys":3391,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[3373,3374],"CVE-2026-49476","PYSEC-2026-3071",[115,3374],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[3379],{"type":3072,"score":3216},[3381,3383,3385,3387,3389],{"type":3079,"url":3382},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3089,"url":3384},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":3089,"url":3386},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":3082,"url":3388},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3082,"url":3390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[3392,3393,3394],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":116,"slug":3396,"dossier":89,"summary":3397,"aliases":3398,"sourceIds":3401,"published":3402,"modified":3403,"checkedAt":7,"severity":3404,"references":3407,"versionKeys":3420,"packageCount":32,"repositoryCount":3426},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[3399,3400],"CVE-2025-66471","PYSEC-2026-1994",[116,3400],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[3405],{"type":3075,"score":3406},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[3408,3410,3412,3414,3416,3418],{"type":3079,"url":3409},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3082,"url":3411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":3117,"url":3413},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":3089,"url":3415},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":3089,"url":3417},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":3082,"url":3419},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[3421,3422,3423,3424,3425],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":117,"slug":3428,"dossier":45,"summary":3429,"aliases":3430,"sourceIds":3433,"published":3434,"modified":3435,"checkedAt":7,"severity":3436,"references":3439,"versionKeys":3452,"packageCount":32,"repositoryCount":401},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[3431,3432],"CVE-2025-30167","PYSEC-2026-1477",[117,3432],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[3437],{"type":3072,"score":3438},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3440,3442,3444,3446,3448,3450],{"type":3079,"url":3441},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":3082,"url":3443},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":3079,"url":3445},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":3089,"url":3447},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":3089,"url":3449},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":3082,"url":3451},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[3453],"pypi:jupyter-core@5.7.2",{"id":118,"slug":3455,"dossier":45,"summary":3456,"aliases":3457,"sourceIds":3462,"published":3463,"modified":3464,"checkedAt":7,"severity":3465,"references":3468,"versionKeys":3483,"packageCount":103,"repositoryCount":103},"ghsa-3644-q5cj-c5c7-4c578cf2","LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning",[3458,3459,3460,3461],"CVE-2026-45134","PYSEC-2026-2555","PYSEC-2026-2560","PYSEC-2026-2582",[118,3459,3460,3461],"2026-05-13T15:29:30Z","2026-07-13T16:43:39.736848907Z",[3466],{"type":3072,"score":3467},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3469,3471,3473,3475,3477,3479,3481],{"type":3079,"url":3470},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":3082,"url":3472},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45134",{"type":3089,"url":3474},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk",{"type":3089,"url":3476},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain",{"type":3082,"url":3478},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":3089,"url":3480},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-classic",{"type":3089,"url":3482},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangsmith",[3484,3485,3486,3487],"pypi:langchain-classic@1.0.1","pypi:langchain@0.2.7","pypi:langchain@0.3.7","pypi:langsmith@0.6.4",{"id":119,"slug":3489,"dossier":45,"summary":3490,"aliases":3491,"sourceIds":3495,"published":3496,"modified":3497,"checkedAt":7,"severity":3498,"references":3501,"versionKeys":3516,"packageCount":32,"repositoryCount":32},"ghsa-37w4-hwhx-4rc4-705a8c0a","JupyterLab has an Extension Manager API\u002FGUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request",[3492,3493,3494],"BIT-jupyterlab-2026-42266","CVE-2026-42266","PYSEC-2026-164",[119,3494],"2026-05-05T20:53:18Z","2026-06-08T20:31:00.051032052Z",[3499],{"type":3072,"score":3500},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3502,3504,3506,3508,3510,3512,3514],{"type":3082,"url":3503},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-37w4-hwhx-4rc4",{"type":3082,"url":3505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42266",{"type":3089,"url":3507},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab",{"type":3117,"url":3509},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.7",{"type":3079,"url":3511},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyterlab\u002FPYSEC-2026-164.yaml",{"type":3079,"url":3513},"https:\u002F\u002Fjupyterhub.readthedocs.io\u002Fen\u002F5.2.1\u002Fexplanation\u002Fwebsecurity.html",{"type":3079,"url":3515},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fextensions.html#extension-manager-implementations",[3517],"pypi:jupyterlab@4.4.0",{"id":120,"slug":3519,"dossier":89,"summary":3520,"aliases":3521,"sourceIds":3524,"published":3525,"modified":3526,"checkedAt":7,"severity":3527,"references":3530,"versionKeys":3543,"packageCount":32,"repositoryCount":3426},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3522,3523],"CVE-2026-21441","PYSEC-2026-1996",[120,3523],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[3528,3529],{"type":3072,"score":3216},{"type":3075,"score":3406},[3531,3533,3535,3537,3538,3540,3541],{"type":3079,"url":3532},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":3082,"url":3534},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":3117,"url":3536},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":3089,"url":3415},{"type":3079,"url":3539},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":3089,"url":3417},{"type":3082,"url":3542},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[3421,3422,3423,3424,3425],{"id":121,"slug":3545,"dossier":45,"summary":3546,"aliases":3547,"sourceIds":3550,"published":3551,"modified":3552,"checkedAt":7,"severity":3553,"references":3557,"versionKeys":3572,"packageCount":32,"repositoryCount":32},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[3548,3549],"CVE-2026-40260","PYSEC-2026-3006",[121,3549],"2026-04-10T20:59:36Z","2026-07-13T16:42:24.793622978Z",[3554,3555],{"type":3072,"score":3181},{"type":3075,"score":3556},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3558,3560,3562,3564,3566,3567,3569,3570],{"type":3079,"url":3559},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":3082,"url":3561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":3079,"url":3563},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":3079,"url":3565},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":3089,"url":3090},{"type":3079,"url":3568},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":3089,"url":3094},{"type":3082,"url":3571},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[3098],{"id":122,"slug":3574,"dossier":45,"summary":3575,"aliases":3576,"sourceIds":3579,"published":3580,"modified":3581,"checkedAt":7,"severity":3582,"references":3586,"versionKeys":3595,"packageCount":32,"repositoryCount":605},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[3577,3578],"CVE-2026-34517","PYSEC-2026-2099",[122,3578],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[3583,3585],{"type":3075,"score":3584},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3072,"score":3181},[3587,3589,3591,3593,3594],{"type":3117,"url":3588},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":3082,"url":3590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":3117,"url":3592},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":123,"slug":3597,"dossier":45,"summary":3598,"aliases":3599,"sourceIds":3602,"published":3603,"modified":3604,"checkedAt":7,"severity":3605,"references":3608,"versionKeys":3619,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[3600,3601],"CVE-2026-49853","PYSEC-2026-3387",[123,3601],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[3606],{"type":3072,"score":3607},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[3609,3611,3613,3615,3617],{"type":3079,"url":3610},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3089,"url":3612},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":3089,"url":3614},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":3082,"url":3616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3082,"url":3618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[3620,3621,3622,3623,3624],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":124,"slug":3626,"dossier":45,"summary":3627,"aliases":3628,"sourceIds":3631,"published":3632,"modified":3633,"checkedAt":7,"severity":3634,"references":3636,"versionKeys":3649,"packageCount":32,"repositoryCount":401},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[3629,3630],"CVE-2025-68480","PYSEC-2026-1605",[124,3630],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[3635],{"type":3072,"score":3181},[3637,3639,3641,3643,3645,3647],{"type":3079,"url":3638},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":3082,"url":3640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":3079,"url":3642},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":3089,"url":3644},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":3089,"url":3646},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":3082,"url":3648},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[3650,3651],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":125,"slug":3653,"dossier":89,"summary":3654,"aliases":3655,"sourceIds":3659,"published":3660,"modified":3661,"checkedAt":7,"severity":3662,"references":3664,"versionKeys":3677,"packageCount":32,"repositoryCount":3426},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[3656,3657,3658],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[125,3658],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[3663],{"type":3072,"score":3216},[3665,3667,3669,3671,3673,3675],{"type":3277,"url":3666},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":3082,"url":3668},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":3117,"url":3670},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":3079,"url":3672},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":3089,"url":3674},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":3082,"url":3676},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[3678,3679,3680,3681,3682,3683,3684,3685],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":126,"slug":3687,"dossier":45,"summary":3688,"aliases":3689,"sourceIds":3692,"published":3693,"modified":3694,"checkedAt":7,"severity":3695,"references":3700,"versionKeys":3712,"packageCount":32,"repositoryCount":32},"ghsa-45pg-36p6-83v9-9505da12","Langchain SQL Injection vulnerability",[3690,350,3691],"CVE-2024-8309","PYSEC-2026-1507",[126],"2024-10-29T15:32:05Z","2026-07-07T17:57:12.591755527Z",[3696,3698],{"type":3072,"score":3697},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":3075,"score":3699},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3701,3703,3705,3707,3708,3710],{"type":3082,"url":3702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8309",{"type":3079,"url":3704},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F64c317eba05fbac0c6a6fc5aa192bc0d7130972e",{"type":3079,"url":3706},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc2a3021bb0c5f54649d380b42a0684ca5778c255",{"type":3089,"url":3253},{"type":3079,"url":3709},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain\u002FPYSEC-2024-115.yaml",{"type":3079,"url":3711},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5",[3713],"pypi:langchain-community@0.2.7",{"id":127,"slug":3715,"dossier":45,"summary":3716,"aliases":3717,"sourceIds":3720,"published":3721,"modified":3722,"checkedAt":7,"severity":3723,"references":3726,"versionKeys":3747,"packageCount":32,"repositoryCount":103},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[3718,3719],"CVE-2026-33236","PYSEC-2026-2237",[127,3719],"2026-03-19T12:42:42Z","2026-07-13T07:26:54.270611709Z",[3724],{"type":3072,"score":3725},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3727,3729,3731,3733,3735,3737,3739,3741,3743,3745],{"type":3277,"url":3728},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":3082,"url":3730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":3117,"url":3732},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":3089,"url":3734},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":3079,"url":3736},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":3079,"url":3738},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":3082,"url":3740},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":3082,"url":3742},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":3082,"url":3744},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3154,"url":3746},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[3748,3749],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":128,"slug":3751,"dossier":45,"summary":3752,"aliases":3753,"sourceIds":3756,"published":3757,"modified":3758,"checkedAt":7,"severity":3759,"references":3762,"versionKeys":3775,"packageCount":32,"repositoryCount":372},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[3754,3755],"CVE-2025-50182","PYSEC-2026-1997",[128,3755],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[3760],{"type":3072,"score":3761},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3763,3765,3767,3769,3770,3772,3773],{"type":3079,"url":3764},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":3082,"url":3766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":3117,"url":3768},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":3089,"url":3415},{"type":3079,"url":3771},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":3089,"url":3417},{"type":3082,"url":3774},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[3421,3422,3423,3424],{"id":129,"slug":3777,"dossier":45,"summary":3778,"aliases":3779,"sourceIds":3782,"published":3783,"modified":3784,"checkedAt":7,"severity":3785,"references":3788,"versionKeys":3797,"packageCount":32,"repositoryCount":32},"ghsa-4c99-qj7h-p3vg-9bb362f6","nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames",[3780,3781],"CVE-2026-39377","PYSEC-2026-2229",[129,3781],"2026-04-21T01:16:05.937Z","2026-07-13T07:26:39.970591013Z",[3786],{"type":3072,"score":3787},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3789,3791,3793,3795],{"type":3082,"url":3790},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-4c99-qj7h-p3vg",{"type":3082,"url":3792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39377",{"type":3089,"url":3794},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert",{"type":3079,"url":3796},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.1",[3798],"pypi:nbconvert@7.16.6",{"id":130,"slug":3800,"dossier":45,"summary":3801,"aliases":3802,"sourceIds":3805,"published":3806,"modified":3807,"checkedAt":7,"severity":3808,"references":3810,"versionKeys":3825,"packageCount":32,"repositoryCount":32},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[3803,3804],"CVE-2026-22691","PYSEC-2026-1828",[130,3804],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[3809],{"type":3075,"score":3584},[3811,3813,3815,3817,3819,3820,3822,3823],{"type":3079,"url":3812},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":3082,"url":3814},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":3079,"url":3816},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":3079,"url":3818},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":3089,"url":3090},{"type":3079,"url":3821},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":3089,"url":3094},{"type":3082,"url":3824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[3098],{"id":131,"slug":3827,"dossier":45,"summary":3828,"aliases":3829,"sourceIds":3832,"published":3833,"modified":3834,"checkedAt":7,"severity":3835,"references":3839,"versionKeys":3845,"packageCount":32,"repositoryCount":605},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[3830,3831],"CVE-2026-54273","PYSEC-2026-2107",[131,3831],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[3836,3838],{"type":3075,"score":3837},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3072,"score":3216},[3840,3842,3844],{"type":3082,"url":3841},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":3117,"url":3843},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":3089,"url":3221},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":132,"slug":3847,"dossier":45,"summary":3848,"aliases":3849,"sourceIds":3852,"published":3853,"modified":3854,"checkedAt":7,"severity":3855,"references":3857,"versionKeys":3868,"packageCount":32,"repositoryCount":32},"ghsa-4j32-57v6-6g45-cd8913d1","Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs",[3850,3851],"CVE-2026-59925","PYSEC-2026-2213",[132,3851],"2026-07-08T17:17:28.183Z","2026-07-20T21:46:43.348949802Z",[3856],{"type":3072,"score":3216},[3858,3860,3862,3864,3865,3866],{"type":3277,"url":3859},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-4j32-57v6-6g45",{"type":3082,"url":3861},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59925",{"type":3117,"url":3863},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F5de41fb8e527004dbc363e047a3c380c9288c74f",{"type":3089,"url":3284},{"type":3082,"url":3286},{"type":3079,"url":3867},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2213.yaml",[3290],{"id":133,"slug":3870,"dossier":45,"summary":3871,"aliases":3872,"sourceIds":3875,"published":3876,"modified":3877,"checkedAt":7,"severity":3878,"references":3882,"versionKeys":3886,"packageCount":32,"repositoryCount":605},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3873,3874],"CVE-2026-54275","PYSEC-2026-237",[133,3874],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[3879,3881],{"type":3075,"score":3880},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3072,"score":3216},[3883,3885],{"type":3082,"url":3884},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":3089,"url":3221},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":134,"slug":3888,"dossier":45,"summary":3889,"aliases":3890,"sourceIds":3893,"published":3894,"modified":3895,"checkedAt":7,"severity":3896,"references":3901,"versionKeys":3916,"packageCount":32,"repositoryCount":32},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[3891,3892],"CVE-2026-41313","PYSEC-2026-3007",[134,3892],"2026-04-16T21:30:12Z","2026-07-13T16:43:42.160859361Z",[3897,3899],{"type":3072,"score":3898},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3075,"score":3900},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3902,3904,3906,3908,3910,3911,3913,3914],{"type":3079,"url":3903},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":3082,"url":3905},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":3079,"url":3907},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":3079,"url":3909},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":3089,"url":3090},{"type":3079,"url":3912},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":3089,"url":3094},{"type":3082,"url":3915},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[3098],{"id":135,"slug":3918,"dossier":89,"summary":3919,"aliases":3920,"sourceIds":3924,"published":3925,"modified":3926,"checkedAt":7,"severity":3927,"references":3930,"versionKeys":3945,"packageCount":32,"repositoryCount":3426},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3921,3922,3923],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[135,3923],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[3928],{"type":3072,"score":3929},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3931,3933,3935,3937,3939,3941,3943,3944],{"type":3277,"url":3932},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":3082,"url":3934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":3117,"url":3936},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":3117,"url":3938},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":3117,"url":3940},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":3079,"url":3942},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":3089,"url":3674},{"type":3082,"url":3676},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":136,"slug":3947,"dossier":45,"summary":3948,"aliases":3949,"sourceIds":3952,"published":3953,"modified":3954,"checkedAt":7,"severity":3955,"references":3957,"versionKeys":3969,"packageCount":32,"repositoryCount":32},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[3950,3951],"CVE-2026-22690","PYSEC-2026-1829",[136,3951],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[3956],{"type":3075,"score":3584},[3958,3960,3962,3963,3964,3965,3966,3967],{"type":3079,"url":3959},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":3082,"url":3961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":3079,"url":3816},{"type":3079,"url":3818},{"type":3089,"url":3090},{"type":3079,"url":3821},{"type":3089,"url":3094},{"type":3082,"url":3968},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[3098],{"id":137,"slug":3971,"dossier":45,"summary":3972,"aliases":3973,"sourceIds":3975,"published":3976,"modified":3977,"checkedAt":7,"severity":3978,"references":3981,"versionKeys":3986,"packageCount":32,"repositoryCount":401},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[3974],"CVE-2026-58203",[137],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[3979],{"type":3072,"score":3980},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3982,3984],{"type":3079,"url":3983},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":3089,"url":3985},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[3987],"pypi:pydantic-settings@2.12.0",{"id":138,"slug":3989,"dossier":89,"summary":3990,"aliases":3991,"sourceIds":3994,"published":3995,"modified":3996,"checkedAt":7,"severity":3997,"references":4002,"versionKeys":4025,"packageCount":32,"repositoryCount":3426},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3992,3993],"CVE-2026-4539","PYSEC-2026-2987",[138,3993],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3998,4000],{"type":3072,"score":3999},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3075,"score":4001},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4003,4005,4007,4009,4011,4013,4015,4017,4019,4021,4023],{"type":3082,"url":4004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":3079,"url":4006},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":3079,"url":4008},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":3079,"url":4010},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":3089,"url":4012},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":3079,"url":4014},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":3079,"url":4016},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":3079,"url":4018},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":3079,"url":4020},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":3089,"url":4022},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":3082,"url":4024},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[4026,4027],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":139,"slug":4029,"dossier":45,"summary":4030,"aliases":4031,"sourceIds":4034,"published":4035,"modified":4036,"checkedAt":7,"severity":4037,"references":4040,"versionKeys":4053,"packageCount":32,"repositoryCount":32},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[4032,4033],"CVE-2026-54530","PYSEC-2026-3009",[139,4033],"2026-06-16T14:05:40Z","2026-07-13T16:43:09.668829202Z",[4038],{"type":3075,"score":4039},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4041,4043,4045,4046,4048,4049,4051],{"type":3079,"url":4042},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3079,"url":4044},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":3089,"url":3090},{"type":3079,"url":4047},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":3089,"url":3094},{"type":3082,"url":4050},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3082,"url":4052},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[3098],{"id":140,"slug":4055,"dossier":45,"summary":4056,"aliases":4057,"sourceIds":4058,"published":4059,"modified":4060,"checkedAt":7,"severity":4061,"references":4063,"versionKeys":4070,"packageCount":32,"repositoryCount":372},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[140],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[4062],{"type":3072,"score":3216},[4064,4066,4068],{"type":3079,"url":4065},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":3089,"url":4067},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":3079,"url":4069},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[4071,4072,4073,4074,4075,4076],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":141,"slug":4078,"dossier":45,"summary":4079,"aliases":4080,"sourceIds":4083,"published":4084,"modified":4085,"checkedAt":7,"severity":4086,"references":4089,"versionKeys":4101,"packageCount":32,"repositoryCount":372},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[4081,4082],"CVE-2025-69226","PYSEC-2026-1097",[141,4082],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[4087],{"type":3075,"score":4088},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4090,4092,4094,4096,4097,4099],{"type":3079,"url":4091},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":3082,"url":4093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":3117,"url":4095},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":3089,"url":3221},{"type":3089,"url":4098},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":3082,"url":4100},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[3225,3226,3227,3228,3229,3230,3231],{"id":142,"slug":4103,"dossier":45,"summary":4104,"aliases":4105,"sourceIds":4107,"published":4108,"modified":4109,"checkedAt":7,"severity":4110,"references":4112,"versionKeys":4124,"packageCount":32,"repositoryCount":32},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[4106],"CVE-2026-59937",[142],"2026-07-23T15:07:33Z","2026-07-29T21:14:53.988004211Z",[4111],{"type":3075,"score":3556},[4113,4115,4117,4119,4121,4122],{"type":3079,"url":4114},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":3082,"url":4116},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":3079,"url":4118},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":3079,"url":4120},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":3089,"url":3090},{"type":3079,"url":4123},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",[3098],{"id":143,"slug":4126,"dossier":45,"summary":4127,"aliases":4128,"sourceIds":4131,"published":4132,"modified":4133,"checkedAt":7,"severity":4134,"references":4140,"versionKeys":4148,"packageCount":32,"repositoryCount":32},"ghsa-5789-5fc7-67v3-d09440f9","Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories",[4129,4130],"CVE-2026-35397","PYSEC-2026-68",[143,4130],"2026-05-05T16:49:10Z","2026-06-06T00:30:08.780496042Z",[4135,4137,4139],{"type":3072,"score":4136},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",{"type":3075,"score":4138},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3072,"score":3500},[4141,4143,4145,4146],{"type":3277,"url":4142},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-5789-5fc7-67v3",{"type":3082,"url":4144},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35397",{"type":3089,"url":3161},{"type":3079,"url":4147},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-68.yaml",[3169],{"id":144,"slug":4150,"dossier":45,"summary":4151,"aliases":4152,"sourceIds":4155,"published":4156,"modified":4157,"checkedAt":7,"severity":4158,"references":4163,"versionKeys":4173,"packageCount":32,"repositoryCount":32},"ghsa-58cw-g322-p94v-a1eee673","Mistune has XSS via unescaped figclass\u002Ffigwidth in Figure directive",[4153,4154],"CVE-2026-44896","PYSEC-2026-168",[144,4154],"2026-05-08T23:43:12Z","2026-06-08T23:45:17.995583404Z",[4159,4161],{"type":3072,"score":4160},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3075,"score":4162},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[4164,4166,4168,4170,4171],{"type":3082,"url":4165},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-58cw-g322-p94v",{"type":3082,"url":4167},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44896",{"type":3079,"url":4169},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fa3cb6e5655308797e8be021d6c7b5bab13cbace2",{"type":3089,"url":3284},{"type":3079,"url":4172},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-168.yaml",[3290],{"id":145,"slug":4175,"dossier":45,"summary":4176,"aliases":4177,"sourceIds":4180,"published":4181,"modified":4182,"checkedAt":7,"severity":4183,"references":4187,"versionKeys":4200,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[4178,4179],"CVE-2024-53981","PYSEC-2026-1851",[145,4179],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[4184,4185],{"type":3072,"score":3216},{"type":3075,"score":4186},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4188,4190,4192,4194,4196,4198],{"type":3079,"url":4189},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":3082,"url":4191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":3079,"url":4193},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":3089,"url":4195},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":3089,"url":4197},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":3082,"url":4199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[4201],"pypi:python-multipart@0.0.9",{"id":146,"slug":4203,"dossier":45,"summary":4204,"aliases":4205,"sourceIds":4208,"published":4209,"modified":4210,"checkedAt":7,"severity":4211,"references":4214,"versionKeys":4229,"packageCount":32,"repositoryCount":32},"ghsa-5chr-fjjv-38qv-5f3dd755","langchain-core allows unauthorized users to read arbitrary files from the host file system",[4206,4207],"CVE-2024-10940","PYSEC-2026-1517",[146,4207],"2025-03-20T12:32:41Z","2026-07-07T17:56:35.905913395Z",[4212],{"type":3072,"score":4213},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4215,4217,4219,4221,4223,4224,4226,4227],{"type":3082,"url":4216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-10940",{"type":3079,"url":4218},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F7d481f10102f43559cc57bcad7eba291067939ee",{"type":3079,"url":4220},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc1e742347f9701aadba8920e4d1f79a636e50b68",{"type":3079,"url":4222},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fe711034713259ae448981bc0fd1d7a5671499c31",{"type":3089,"url":3253},{"type":3079,"url":4225},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fbe1ee1cb-2147-4ff4-a57b-b6045271cf27",{"type":3089,"url":3257},{"type":3082,"url":4228},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5chr-fjjv-38qv",[3261],{"id":147,"slug":4231,"dossier":45,"summary":4232,"aliases":4233,"sourceIds":4236,"published":4237,"modified":4238,"checkedAt":7,"severity":4239,"references":4241,"versionKeys":4254,"packageCount":32,"repositoryCount":32},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[4234,4235],"CVE-2026-49460","PYSEC-2026-3010",[147,4235],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[4240],{"type":3075,"score":3076},[4242,4244,4246,4247,4249,4250,4252],{"type":3079,"url":4243},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3079,"url":4245},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":3089,"url":3090},{"type":3079,"url":4248},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":3089,"url":3094},{"type":3082,"url":4251},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3082,"url":4253},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[3098],{"id":148,"slug":4256,"dossier":45,"summary":4257,"aliases":4258,"sourceIds":4261,"published":4262,"modified":4263,"checkedAt":7,"severity":4264,"references":4269,"versionKeys":4277,"packageCount":32,"repositoryCount":32},"ghsa-5mrq-x3x5-8v8f-c6e2734e","Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart",[4259,4260],"CVE-2026-40934","PYSEC-2026-69",[148,4260],"2026-05-05T17:03:24Z","2026-06-06T00:45:47.735760264Z",[4265,4267],{"type":3072,"score":4266},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"type":3075,"score":4268},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4270,4272,4274,4275],{"type":3277,"url":4271},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-5mrq-x3x5-8v8f",{"type":3082,"url":4273},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40934",{"type":3089,"url":3161},{"type":3079,"url":4276},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-69.yaml",[3169],{"id":149,"slug":4279,"dossier":45,"summary":4280,"aliases":4281,"sourceIds":4283,"published":4284,"modified":4285,"checkedAt":7,"severity":4286,"references":4288,"versionKeys":4299,"packageCount":32,"repositoryCount":32},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[4282],"CVE-2026-59938",[149],"2026-07-23T15:06:58Z","2026-07-29T21:14:52.909510373Z",[4287],{"type":3075,"score":3556},[4289,4291,4293,4295,4297,4298],{"type":3079,"url":4290},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":3082,"url":4292},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":3079,"url":4294},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":3079,"url":4296},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":3089,"url":3090},{"type":3079,"url":4123},[3098],{"id":150,"slug":4301,"dossier":45,"summary":4302,"aliases":4303,"sourceIds":4307,"published":4308,"modified":4309,"checkedAt":7,"severity":4310,"references":4314,"versionKeys":4331,"packageCount":32,"repositoryCount":103},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[4304,4305,4306],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[150,4306],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[4311,4313],{"type":3075,"score":4312},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3072,"score":3500},[4315,4317,4319,4321,4323,4325,4327,4329],{"type":3277,"url":4316},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":3082,"url":4318},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3154,"url":4320},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":3117,"url":4322},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":3079,"url":4324},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":3089,"url":4326},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":3079,"url":4328},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":3124,"url":4330},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[4332,4333,4334],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":151,"slug":4336,"dossier":45,"summary":4337,"aliases":4338,"sourceIds":4341,"published":4342,"modified":4343,"checkedAt":7,"severity":4344,"references":4346,"versionKeys":4355,"packageCount":32,"repositoryCount":671},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[4339,4340],"CVE-2026-53539","PYSEC-2026-3036",[151,4340],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[4345],{"type":3072,"score":3216},[4347,4349,4350,4351,4353],{"type":3079,"url":4348},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3089,"url":4195},{"type":3089,"url":4197},{"type":3082,"url":4352},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3082,"url":4354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[4356,4357,4201],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":152,"slug":4359,"dossier":89,"summary":4360,"aliases":4361,"sourceIds":4365,"published":4366,"modified":4367,"checkedAt":7,"severity":4368,"references":4370,"versionKeys":4380,"packageCount":32,"repositoryCount":3426},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[4362,4363,4364],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[152,4364],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[4369],{"type":3072,"score":3216},[4371,4373,4375,4376,4378,4379],{"type":3277,"url":4372},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":3082,"url":4374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":3117,"url":3670},{"type":3079,"url":4377},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":3089,"url":3674},{"type":3082,"url":3676},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":153,"slug":4382,"dossier":45,"summary":4383,"aliases":4384,"sourceIds":4386,"published":4387,"modified":4388,"checkedAt":7,"severity":4389,"references":4391,"versionKeys":4403,"packageCount":32,"repositoryCount":32},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[4385],"CVE-2026-59936",[153],"2026-07-23T16:36:41Z","2026-07-29T21:14:53.202932754Z",[4390],{"type":3075,"score":4186},[4392,4394,4396,4398,4400,4401],{"type":3079,"url":4393},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":3082,"url":4395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":3079,"url":4397},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":3079,"url":4399},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":3089,"url":3090},{"type":3079,"url":4402},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",[3098],{"id":154,"slug":4405,"dossier":45,"summary":4406,"aliases":4407,"sourceIds":4411,"published":4412,"modified":4413,"checkedAt":7,"severity":4414,"references":4418,"versionKeys":4426,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[4408,4409,4410],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[154,4410],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[4415,4417],{"type":3072,"score":4416},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3075,"score":3076},[4419,4421,4423,4424],{"type":3082,"url":4420},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":3082,"url":4422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":3089,"url":3674},{"type":3082,"url":4425},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3681,3682,3683,3684,3685],{"id":155,"slug":4428,"dossier":89,"summary":4429,"aliases":4430,"sourceIds":4434,"published":4435,"modified":4436,"checkedAt":7,"severity":4437,"references":4440,"versionKeys":4456,"packageCount":32,"repositoryCount":3426},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[4431,4432,4433],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[155,4433],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[4438],{"type":3075,"score":4439},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4441,4443,4445,4447,4449,4450,4452,4454],{"type":3079,"url":4442},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":3082,"url":4444},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":3079,"url":4446},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":3079,"url":4448},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":3089,"url":3674},{"type":3079,"url":4451},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":3089,"url":4453},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":3082,"url":4455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[3678,3679,3680,3681,3682,3683,3684,3685],{"id":156,"slug":4458,"dossier":45,"summary":4459,"aliases":4460,"sourceIds":4463,"published":4464,"modified":4465,"checkedAt":7,"severity":4466,"references":4472,"versionKeys":4483,"packageCount":32,"repositoryCount":605},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[4461,4462],"CVE-2026-34520","PYSEC-2026-2102",[156,4462],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[4467,4469,4470],{"type":3072,"score":4468},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3075,"score":3355},{"type":3075,"score":4471},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4473,4475,4477,4479,4480,4481],{"type":3117,"url":4474},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":3082,"url":4476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":3117,"url":4478},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":3089,"url":3221},{"type":3082,"url":3367},{"type":3079,"url":4482},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[3225,3226,3227,3228,3229,3230,3231,3232],{"id":157,"slug":4485,"dossier":45,"summary":4486,"aliases":4487,"sourceIds":4490,"published":4491,"modified":4492,"checkedAt":7,"severity":4493,"references":4496,"versionKeys":4502,"packageCount":32,"repositoryCount":605},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[4488,4489],"CVE-2026-54277","PYSEC-2026-2110",[157,4489],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[4494,4495],{"type":3075,"score":3837},{"type":3072,"score":3216},[4497,4499,4501],{"type":3082,"url":4498},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":3117,"url":4500},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":3089,"url":3221},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":158,"slug":4504,"dossier":45,"summary":4505,"aliases":4506,"sourceIds":4509,"published":4510,"modified":4511,"checkedAt":7,"severity":4512,"references":4514,"versionKeys":4555,"packageCount":32,"repositoryCount":372},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[4507,4508],"CVE-2026-23490","PYSEC-2026-1810",[158,4508],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[4513],{"type":3072,"score":3216},[4515,4517,4519,4521,4523,4525,4527,4529,4531,4533,4535,4537,4539,4541,4543,4545,4547,4549,4551,4553],{"type":3079,"url":4516},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":3082,"url":4518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":3079,"url":4520},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":3079,"url":4522},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":3079,"url":4524},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":3079,"url":4526},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":3079,"url":4528},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":3079,"url":4530},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":3079,"url":4532},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":3079,"url":4534},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":3079,"url":4536},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":3079,"url":4538},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":3079,"url":4540},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":3079,"url":4542},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":3079,"url":4544},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":3079,"url":4546},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":3089,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":3079,"url":4550},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":3079,"url":4552},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":3079,"url":4554},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[4556],"pypi:pyasn1@0.6.1",{"id":159,"slug":4558,"dossier":89,"summary":4559,"aliases":4560,"sourceIds":4563,"published":4564,"modified":4565,"checkedAt":7,"severity":4566,"references":4569,"versionKeys":4578,"packageCount":32,"repositoryCount":102},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[4561,4562],"CVE-2026-45409","PYSEC-2026-215",[159,4562],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[4567,4568],{"type":3072,"score":3181},{"type":3075,"score":3556},[4570,4572,4574,4576],{"type":3082,"url":4571},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":3082,"url":4573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":3089,"url":4575},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":3079,"url":4577},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[4579,4580,4581],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":160,"slug":4583,"dossier":45,"summary":4584,"aliases":4585,"sourceIds":4588,"published":4589,"modified":4590,"checkedAt":7,"severity":4591,"references":4596,"versionKeys":4606,"packageCount":32,"repositoryCount":103},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[4586,4587],"CVE-2026-0847","PYSEC-2026-98",[160,4587],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[4592,4594],{"type":3072,"score":4593},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3072,"score":4595},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4597,4599,4600,4602,4604],{"type":3082,"url":4598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":3089,"url":3734},{"type":3079,"url":4601},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":3277,"url":4603},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":3082,"url":4605},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3748,3749],{"id":161,"slug":4608,"dossier":45,"summary":4609,"aliases":4610,"sourceIds":4613,"published":4614,"modified":4615,"checkedAt":7,"severity":4616,"references":4618,"versionKeys":4629,"packageCount":32,"repositoryCount":372},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[4611,4612],"CVE-2025-69224","PYSEC-2026-1099",[161,4612],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[4617],{"type":3075,"score":3355},[4619,4621,4623,4625,4626,4627],{"type":3079,"url":4620},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":3082,"url":4622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":3117,"url":4624},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":4628},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[3225,3226,3227,3228,3229,3230,3231],{"id":162,"slug":4631,"dossier":45,"summary":4632,"aliases":4633,"sourceIds":4635,"published":4636,"modified":4637,"checkedAt":7,"severity":4638,"references":4640,"versionKeys":4644,"packageCount":32,"repositoryCount":103},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[4634],"CVE-2026-12072",[162],"2026-07-31T16:50:55Z","2026-07-31T17:00:21.718036171Z",[4639],{"type":3072,"score":4595},[4641,4643],{"type":3079,"url":4642},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3089,"url":3734},[3748,3749],{"id":163,"slug":4646,"dossier":45,"summary":4647,"aliases":4648,"sourceIds":4651,"published":4652,"modified":4653,"checkedAt":7,"severity":4654,"references":4656,"versionKeys":4667,"packageCount":32,"repositoryCount":372},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[4649,4650],"CVE-2025-69228","PYSEC-2026-1100",[163,4650],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[4655],{"type":3075,"score":3837},[4657,4659,4661,4663,4664,4665],{"type":3079,"url":4658},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":3082,"url":4660},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":3117,"url":4662},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":4666},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[3225,3226,3227,3228,3229,3230,3231],{"id":164,"slug":4669,"dossier":45,"summary":4670,"aliases":4671,"sourceIds":4674,"published":4675,"modified":4676,"checkedAt":7,"severity":4677,"references":4680,"versionKeys":4689,"packageCount":32,"repositoryCount":671},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4672,4673],"CVE-2026-53538","PYSEC-2026-3037",[164,4673],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[4678],{"type":3072,"score":4679},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4681,4683,4684,4685,4687],{"type":3079,"url":4682},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3089,"url":4195},{"type":3089,"url":4197},{"type":3082,"url":4686},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3082,"url":4688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[4356,4357,4201],{"id":165,"slug":4691,"dossier":45,"summary":4692,"aliases":4693,"sourceIds":4696,"published":4697,"modified":4698,"checkedAt":7,"severity":4699,"references":4701,"versionKeys":4712,"packageCount":32,"repositoryCount":372},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4694,4695],"CVE-2025-69223","PYSEC-2026-1101",[165,4695],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[4700],{"type":3072,"score":3216},[4702,4704,4706,4708,4709,4710],{"type":3079,"url":4703},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":3082,"url":4705},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":3117,"url":4707},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":4711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[3225,3226,3227,3228,3229,3230,3231],{"id":166,"slug":4714,"dossier":45,"summary":4715,"aliases":4716,"sourceIds":4719,"published":4720,"modified":4721,"checkedAt":7,"severity":4722,"references":4725,"versionKeys":4738,"packageCount":32,"repositoryCount":32},"ghsa-6qv9-48xg-fc7f-6f0bc426","LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates",[4717,4718],"CVE-2025-65106","PYSEC-2026-1518",[166,4718],"2025-11-20T17:42:12Z","2026-07-07T17:57:16.939269197Z",[4723],{"type":3075,"score":4724},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4726,4728,4730,4732,4734,4735,4736],{"type":3079,"url":4727},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",{"type":3082,"url":4729},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-65106",{"type":3079,"url":4731},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc4b6ba254e1a49ed91f2e268e6484011c540542a",{"type":3079,"url":4733},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Ffa7789d6c21222b85211755d822ef698d3b34e00",{"type":3089,"url":3253},{"type":3089,"url":3257},{"type":3082,"url":4737},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",[3261],{"id":167,"slug":4740,"dossier":89,"summary":4741,"aliases":4742,"sourceIds":4746,"published":4747,"modified":4748,"checkedAt":7,"severity":4749,"references":4751,"versionKeys":4764,"packageCount":32,"repositoryCount":3426},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[4743,4744,4745],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[167,4745],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[4750],{"type":3072,"score":3216},[4752,4754,4756,4758,4760,4762,4763],{"type":3277,"url":4753},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":3082,"url":4755},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":3117,"url":4757},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":3117,"url":4759},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":3079,"url":4761},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":3089,"url":3674},{"type":3082,"url":4451},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":168,"slug":4766,"dossier":45,"summary":4767,"aliases":4768,"sourceIds":4771,"published":4772,"modified":4773,"checkedAt":7,"severity":4774,"references":4777,"versionKeys":4796,"packageCount":32,"repositoryCount":64},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[4769,4770],"CVE-2025-71176","PYSEC-2026-1845",[168,4770],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[4775],{"type":3072,"score":4776},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[4778,4780,4782,4784,4786,4788,4790,4792,4794],{"type":3082,"url":4779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":3079,"url":4781},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":3079,"url":4783},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":3079,"url":4785},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":3089,"url":4787},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":3079,"url":4789},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":3079,"url":4791},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":3089,"url":4793},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":3082,"url":4795},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[4797,4798,4799,4800],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":169,"slug":4802,"dossier":45,"summary":4803,"aliases":4804,"sourceIds":4807,"published":4808,"modified":4809,"checkedAt":7,"severity":4810,"references":4815,"versionKeys":4826,"packageCount":32,"repositoryCount":32},"ghsa-7432-952r-cw78-bf3fc71f","Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle",[4805,4806],"CVE-2026-28490","PYSEC-2026-2116",[169,4806],"2026-03-16T15:17:28Z","2026-07-13T07:26:14.887077371Z",[4811,4813],{"type":3075,"score":4812},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3072,"score":4814},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[4816,4818,4820,4822,4824],{"type":3277,"url":4817},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-7432-952r-cw78",{"type":3082,"url":4819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28490",{"type":3117,"url":4821},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F48b345f29f6c459f11c6a40162b6c0b742ef2e22",{"type":3089,"url":4823},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib",{"type":3082,"url":4825},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.9",[4827],"pypi:authlib@1.6.4",{"id":170,"slug":4829,"dossier":45,"summary":4830,"aliases":4831,"sourceIds":4834,"published":4835,"modified":4836,"checkedAt":7,"severity":4837,"references":4839,"versionKeys":4850,"packageCount":32,"repositoryCount":401},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[4832,4833],"CVE-2026-32597","PYSEC-2026-120",[170,4833],"2026-03-13T19:55:09.500Z","2026-06-08T19:15:12.447890578Z",[4838],{"type":3072,"score":3110},[4840,4842,4844,4846,4848],{"type":3277,"url":4841},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":3082,"url":4843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":3089,"url":4845},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":3079,"url":4847},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":3079,"url":4849},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[4851,4852],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.9.0",{"id":171,"slug":4854,"dossier":45,"summary":4855,"aliases":4856,"sourceIds":4860,"published":4861,"modified":4862,"checkedAt":7,"severity":4863,"references":4869,"versionKeys":4881,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[4857,4858,4859],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[171,4858,4859],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[4864,4866,4868],{"type":3072,"score":4865},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3072,"score":4867},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3072,"score":3357},[4870,4872,4874,4875,4877,4879],{"type":3082,"url":4871},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":3079,"url":4873},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":3089,"url":3612},{"type":3079,"url":4876},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":3082,"url":4878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":3082,"url":4880},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[3620,3621,3622,3623],{"id":172,"slug":4883,"dossier":45,"summary":4056,"aliases":4884,"sourceIds":4887,"published":4888,"modified":4889,"checkedAt":7,"severity":4890,"references":4891,"versionKeys":4909,"packageCount":32,"repositoryCount":103},"ghsa-79v4-65xg-pq4g-b911b371",[4885,4886],"CVE-2024-12797","PYSEC-2026-1284",[172,4886],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[4892,4894,4896,4898,4900,4902,4903,4905,4907],{"type":3079,"url":4893},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":3082,"url":4895},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":3079,"url":4897},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":3079,"url":4899},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":3079,"url":4901},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":3089,"url":4067},{"type":3079,"url":4904},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":3089,"url":4906},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":3082,"url":4908},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[4071,4072,4073],{"id":173,"slug":4911,"dossier":45,"summary":4912,"aliases":4913,"sourceIds":4916,"published":4917,"modified":4918,"checkedAt":7,"severity":4919,"references":4921,"versionKeys":4934,"packageCount":32,"repositoryCount":401},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[4914,4915],"CVE-2025-47287","PYSEC-2026-1974",[173,4915],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[4920],{"type":3072,"score":3216},[4922,4924,4926,4928,4929,4931,4932],{"type":3079,"url":4923},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":3082,"url":4925},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":3079,"url":4927},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":3089,"url":3612},{"type":3079,"url":4930},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":3089,"url":3614},{"type":3082,"url":4933},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[3620],{"id":174,"slug":4936,"dossier":45,"summary":4937,"aliases":4938,"sourceIds":4941,"published":4942,"modified":4943,"checkedAt":7,"severity":4944,"references":4946,"versionKeys":4963,"packageCount":32,"repositoryCount":671},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4939,4940],"CVE-2025-62727","PYSEC-2026-1942",[174,4940],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[4945],{"type":3072,"score":3216},[4947,4949,4951,4953,4956,4958,4960,4961],{"type":3079,"url":4948},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":3082,"url":4950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":3117,"url":4952},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4954,"url":4955},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":3089,"url":4957},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":3079,"url":4959},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":3089,"url":3196},{"type":3082,"url":4962},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[3201,3202,4964,4965],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":175,"slug":4967,"dossier":45,"summary":4968,"aliases":4969,"sourceIds":4972,"published":4973,"modified":4974,"checkedAt":7,"severity":4975,"references":4978,"versionKeys":4995,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4970,4971],"CVE-2026-0994","PYSEC-2026-1805",[175,4971],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[4976],{"type":3075,"score":4977},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4979,4981,4983,4985,4987,4989,4991,4993],{"type":3082,"url":4980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":3079,"url":4982},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":3079,"url":4984},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":3079,"url":4986},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":3079,"url":4988},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":3089,"url":4990},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":3089,"url":4992},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":3082,"url":4994},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4996,4997,4998,4999,5000,5001,5002,5003,5004],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":176,"slug":5006,"dossier":45,"summary":5007,"aliases":5008,"sourceIds":5011,"published":5012,"modified":5013,"checkedAt":7,"severity":5014,"references":5017,"versionKeys":5031,"packageCount":32,"repositoryCount":32},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[5009,5010],"CVE-2026-41312","PYSEC-2026-3011",[176,5010],"2026-04-16T21:30:00Z","2026-07-13T16:42:36.454088588Z",[5015,5016],{"type":3072,"score":3898},{"type":3075,"score":3900},[5018,5020,5022,5024,5026,5027,5028,5029],{"type":3079,"url":5019},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":3082,"url":5021},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":3079,"url":5023},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":3079,"url":5025},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":3089,"url":3090},{"type":3079,"url":3912},{"type":3089,"url":3094},{"type":3082,"url":5030},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[3098],{"id":177,"slug":5033,"dossier":45,"summary":5034,"aliases":5035,"sourceIds":5038,"published":5039,"modified":5040,"checkedAt":7,"severity":5041,"references":5043,"versionKeys":5060,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[5036,5037],"CVE-2025-55197","PYSEC-2026-1830",[177,5037],"2025-08-13T19:51:24Z","2026-07-07T17:57:06.843769097Z",[5042],{"type":3075,"score":3837},[5044,5046,5048,5050,5052,5053,5055,5057,5058],{"type":3079,"url":5045},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":3082,"url":5047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":3079,"url":5049},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":3079,"url":5051},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":3089,"url":3090},{"type":3079,"url":5054},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":3079,"url":5056},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":3089,"url":3094},{"type":3082,"url":5059},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[3098],{"id":178,"slug":5062,"dossier":45,"summary":5063,"aliases":5064,"sourceIds":5067,"published":5068,"modified":5069,"checkedAt":7,"severity":5070,"references":5073,"versionKeys":5080,"packageCount":32,"repositoryCount":32},"ghsa-7jqv-fw35-gmx9-d6bf4abd","nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding",[5065,5066],"CVE-2026-39378","PYSEC-2026-2230",[178,5066],"2026-04-21T01:16:06.073Z","2026-07-13T07:26:18.607056830Z",[5071],{"type":3072,"score":5072},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5074,5076,5078,5079],{"type":3082,"url":5075},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-7jqv-fw35-gmx9",{"type":3082,"url":5077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39378",{"type":3089,"url":3794},{"type":3079,"url":3796},[3798],{"id":179,"slug":5082,"dossier":45,"summary":5083,"aliases":5084,"sourceIds":5087,"published":5088,"modified":5089,"checkedAt":7,"severity":5090,"references":5093,"versionKeys":5109,"packageCount":32,"repositoryCount":103},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[5085,5086],"CVE-2025-14009","PYSEC-2026-96",[179,5086],"2026-02-18T18:24:19.410Z","2026-06-10T17:02:23.646726882Z",[5091],{"type":3072,"score":5092},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5094,5096,5098,5100,5101,5103,5105,5107],{"type":3082,"url":5095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":3079,"url":5097},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":3079,"url":5099},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":3089,"url":3734},{"type":3079,"url":5102},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":3079,"url":5104},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":3277,"url":5106},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":3082,"url":5108},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3748,3749],{"id":180,"slug":5111,"dossier":45,"summary":5112,"aliases":5113,"sourceIds":5116,"published":5117,"modified":5118,"checkedAt":7,"severity":5119,"references":5121,"versionKeys":5125,"packageCount":32,"repositoryCount":615},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[5114,5115],"CVE-2026-54283","PYSEC-2026-249",[180,5115],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[5120],{"type":3072,"score":3216},[5122,5124],{"type":3082,"url":5123},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":3089,"url":4957},[3200,3201,3202,4964,4965,5126,5127],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":181,"slug":5129,"dossier":45,"summary":5130,"aliases":5131,"sourceIds":5134,"published":5135,"modified":5136,"checkedAt":7,"severity":5137,"references":5139,"versionKeys":5148,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[5132,5133],"CVE-2026-49477","PYSEC-2026-3072",[181,5133],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[5138],{"type":3072,"score":3216},[5140,5142,5143,5144,5146],{"type":3079,"url":5141},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3089,"url":3384},{"type":3089,"url":3386},{"type":3082,"url":5145},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3082,"url":5147},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[3392,3393,3394],{"id":182,"slug":5150,"dossier":45,"summary":5151,"aliases":5152,"sourceIds":5156,"published":5157,"modified":5158,"checkedAt":7,"severity":5159,"references":5162,"versionKeys":5198,"packageCount":32,"repositoryCount":615},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[5153,5154,5155],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[182,5154],"2026-05-22T13:10:03Z","2026-07-24T15:49:06.735363896Z",[5160],{"type":3072,"score":5161},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5163,5165,5167,5169,5171,5173,5175,5177,5179,5181,5182,5184,5187,5189,5191,5193,5194,5196],{"type":3082,"url":5164},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":3082,"url":5166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":3117,"url":5168},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":3079,"url":5170},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":3124,"url":5172},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":3079,"url":5174},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":3079,"url":5176},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":3079,"url":5178},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":3079,"url":5180},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":3089,"url":4957},{"type":3079,"url":5183},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":5185,"url":5186},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":3079,"url":5188},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":3079,"url":5190},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":3079,"url":5192},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":3079,"url":3744},{"type":3124,"url":5195},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":3082,"url":5197},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[3200,3201,3202,4964,4965,5126,5127],{"id":183,"slug":5200,"dossier":45,"summary":5201,"aliases":5202,"sourceIds":5205,"published":5206,"modified":5207,"checkedAt":7,"severity":5208,"references":5211,"versionKeys":5224,"packageCount":32,"repositoryCount":32},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[5203,5204],"CVE-2026-33699","PYSEC-2026-3012",[183,5204],"2026-03-25T20:05:22Z","2026-07-13T16:42:35.293920191Z",[5209],{"type":3075,"score":5210},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5212,5214,5216,5218,5219,5221,5222],{"type":3079,"url":5213},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":3082,"url":5215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":3079,"url":5217},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":3089,"url":3090},{"type":3079,"url":5220},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":3089,"url":3094},{"type":3082,"url":5223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[3098],{"id":184,"slug":5226,"dossier":45,"summary":5227,"aliases":5228,"sourceIds":5229,"published":5230,"modified":5231,"checkedAt":7,"severity":5232,"references":5235,"versionKeys":5253,"packageCount":32,"repositoryCount":32},"ghsa-89vp-jrxv-24w8-56cdaa85","JupyterLab: PyPI extension blocklist package-name canonicalization bypass",[],[184],"2026-07-22T23:14:27Z","2026-07-22T23:30:29.705646293Z",[5233],{"type":3075,"score":5234},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5236,5238,5240,5242,5244,5246,5248,5249,5251],{"type":3079,"url":5237},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-89vp-jrxv-24w8",{"type":3079,"url":5239},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19184",{"type":3079,"url":5241},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19185",{"type":3079,"url":5243},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fpull\u002F19186",{"type":3079,"url":5245},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Fbe9303f5bcd5308eaeae953c5a3c903046682c2c",{"type":3079,"url":5247},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Ff1beab4a2027af4719d6edc07d52d6cf5a39a432",{"type":3089,"url":3507},{"type":3079,"url":5250},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.10",{"type":3079,"url":5252},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.6.2",[5254],"pypi:jupyterlab@4.6.1",{"id":185,"slug":5256,"dossier":45,"summary":5257,"aliases":5258,"sourceIds":5261,"published":5262,"modified":5263,"checkedAt":7,"severity":5264,"references":5266,"versionKeys":5277,"packageCount":32,"repositoryCount":32},"ghsa-8c25-4j27-2rv3-4e2c246a","Mistune: XSS via percent-encoded javascript URI bypass in safe_url()",[5259,5260],"CVE-2026-59923","PYSEC-2026-2211",[185,5260],"2026-07-08T17:17:27.910Z","2026-07-20T21:46:43.351006286Z",[5265],{"type":3072,"score":4160},[5267,5269,5271,5273,5274,5275],{"type":3277,"url":5268},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8c25-4j27-2rv3",{"type":3082,"url":5270},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59923",{"type":3117,"url":5272},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc",{"type":3089,"url":3284},{"type":3082,"url":3286},{"type":3079,"url":5276},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2211.yaml",[3290],{"id":186,"slug":5279,"dossier":45,"summary":5280,"aliases":5281,"sourceIds":5284,"published":5285,"modified":5286,"checkedAt":7,"severity":5287,"references":5289,"versionKeys":5297,"packageCount":32,"repositoryCount":32},"ghsa-8g87-j6q8-g93x-2e837b39","Mistune Math Plugin has an XSS Escape Bypass",[5282,5283],"CVE-2026-44708","PYSEC-2026-2206",[186,5283],"2026-05-08T23:40:04Z","2026-07-13T07:26:26.365066334Z",[5288],{"type":3072,"score":4160},[5290,5292,5294,5295],{"type":3277,"url":5291},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8g87-j6q8-g93x",{"type":3082,"url":5293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44708",{"type":3089,"url":3284},{"type":3082,"url":5296},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.2.1",[3290],{"id":187,"slug":5299,"dossier":45,"summary":5300,"aliases":5301,"sourceIds":5304,"published":5305,"modified":5306,"checkedAt":7,"severity":5307,"references":5309,"versionKeys":5321,"packageCount":32,"repositoryCount":32},"ghsa-8mp2-v27r-99xp-3e3baa33","Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input",[5302,5303],"CVE-2026-33079","PYSEC-2026-2651",[187,5303],"2026-05-06T16:52:43Z","2026-07-13T16:42:39.431792280Z",[5308],{"type":3075,"score":4186},[5310,5312,5314,5315,5317,5319],{"type":3079,"url":5311},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",{"type":3082,"url":5313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33079",{"type":3089,"url":3284},{"type":3079,"url":5316},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fblob\u002Fdf23edd60b43b639d2e6760ef9dd3d618aa11c21\u002Fsrc\u002Fmistune\u002Fhelpers.py#L20-L25",{"type":3089,"url":5318},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmistune",{"type":3082,"url":5320},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",[3290],{"id":188,"slug":5323,"dossier":45,"summary":5324,"aliases":5325,"sourceIds":5328,"published":5329,"modified":5330,"checkedAt":7,"severity":5331,"references":5333,"versionKeys":5344,"packageCount":32,"repositoryCount":32},"ghsa-8mpj-m6qm-5qr8-24abd1d9","Mistune directives\u002Finclude: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files",[5326,5327],"CVE-2026-59927","PYSEC-2026-2215",[188,5327],"2026-07-08T17:17:28.450Z","2026-07-20T21:30:45.969881443Z",[5332],{"type":3072,"score":3181},[5334,5336,5338,5340,5341,5342],{"type":3277,"url":5335},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpj-m6qm-5qr8",{"type":3082,"url":5337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59927",{"type":3117,"url":5339},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F1bef343ade163fc3bb95572b15be720084cdb993",{"type":3089,"url":3284},{"type":3082,"url":3286},{"type":3079,"url":5343},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2215.yaml",[3290],{"id":189,"slug":5346,"dossier":45,"summary":5347,"aliases":5348,"sourceIds":5351,"published":5352,"modified":5353,"checkedAt":7,"severity":5354,"references":5356,"versionKeys":5366,"packageCount":32,"repositoryCount":615},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[5349,5350],"CVE-2026-59885","PYSEC-2026-3456",[189,5350],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[5355],{"type":3072,"score":3216},[5357,5359,5361,5363,5364],{"type":3082,"url":5358},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":3082,"url":5360},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":3117,"url":5362},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":3089,"url":4548},{"type":3082,"url":5365},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[4556,5367],"pypi:pyasn1@0.6.3",{"id":190,"slug":5369,"dossier":45,"summary":5370,"aliases":5371,"sourceIds":5374,"published":5375,"modified":5376,"checkedAt":7,"severity":5377,"references":5380,"versionKeys":5399,"packageCount":32,"repositoryCount":103},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[5372,5373],"CVE-2025-4565","PYSEC-2026-1806",[190,5373],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[5378],{"type":3075,"score":5379},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5381,5383,5385,5387,5389,5390,5392,5394,5396,5397],{"type":3079,"url":5382},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":3079,"url":5384},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":3082,"url":5386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":3079,"url":5388},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":3089,"url":4990},{"type":3079,"url":5391},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":3079,"url":5393},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":3079,"url":5395},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":3089,"url":4992},{"type":3082,"url":5398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4996,4998,4999],{"id":191,"slug":5401,"dossier":45,"summary":5402,"aliases":5403,"sourceIds":5404,"published":5405,"modified":5406,"checkedAt":7,"severity":5407,"references":5410,"versionKeys":5417,"packageCount":32,"repositoryCount":32},"ghsa-8rfp-98v4-mmr6-7ea7e5dd","Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output",[],[191],"2026-06-16T14:06:29Z","2026-06-18T13:29:27.505774604Z",[5408],{"type":3072,"score":5409},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:N",[5411,5413,5415],{"type":3079,"url":5412},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-8rfp-98v4-mmr6",{"type":3079,"url":5414},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=2023812",{"type":3089,"url":5416},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach",[5418],"pypi:bleach@6.2.0",{"id":192,"slug":5420,"dossier":89,"summary":5421,"aliases":5422,"sourceIds":5426,"published":5427,"modified":5428,"checkedAt":7,"severity":5429,"references":5431,"versionKeys":5441,"packageCount":32,"repositoryCount":3426},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[5423,5424,5425],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[192,5425],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[5430],{"type":3072,"score":3216},[5432,5434,5436,5437,5439,5440],{"type":3277,"url":5433},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":3082,"url":5435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":3117,"url":3670},{"type":3079,"url":5438},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":3089,"url":3674},{"type":3082,"url":3676},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":193,"slug":5443,"dossier":45,"summary":5444,"aliases":5445,"sourceIds":5448,"published":5449,"modified":5450,"checkedAt":7,"severity":5451,"references":5454,"versionKeys":5475,"packageCount":32,"repositoryCount":401},"ghsa-926x-3r5x-gfhw-b7d12e65","LangChain has incomplete f-string validation in prompt templates",[5446,5447],"CVE-2026-40087","PYSEC-2026-2563",[193,5447],"2026-04-08T21:51:32Z","2026-07-13T16:42:42.901211235Z",[5452],{"type":3072,"score":5453},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5455,5457,5459,5461,5463,5465,5467,5468,5470,5472,5473],{"type":3079,"url":5456},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",{"type":3082,"url":5458},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40087",{"type":3079,"url":5460},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36612",{"type":3079,"url":5462},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36613",{"type":3079,"url":5464},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F6bab0ba3c12328008ddca3e0d54ff5a6151cd27b",{"type":3079,"url":5466},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Faf2ed47c6f008cdd551f3c0d87db3774c8dfe258",{"type":3089,"url":3253},{"type":3079,"url":5469},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.84",{"type":3079,"url":5471},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.28",{"type":3089,"url":3257},{"type":3082,"url":5474},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",[3261,3262],{"id":194,"slug":5477,"dossier":45,"summary":5478,"aliases":5479,"sourceIds":5482,"published":5483,"modified":5484,"checkedAt":7,"severity":5485,"references":5488,"versionKeys":5499,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[5480,5481],"CVE-2025-53643","PYSEC-2026-1104",[194,5481],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[5486],{"type":3075,"score":5487},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5489,5491,5493,5495,5496,5497],{"type":3079,"url":5490},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":3082,"url":5492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":3117,"url":5494},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":5498},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[3225,3226,3227,3228],{"id":195,"slug":5501,"dossier":45,"summary":5502,"aliases":5503,"sourceIds":5506,"published":5507,"modified":5508,"checkedAt":7,"severity":5509,"references":5512,"versionKeys":5521,"packageCount":32,"repositoryCount":605},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[5504,5505],"CVE-2026-34518","PYSEC-2026-2100",[195,5505],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[5510,5511],{"type":3072,"score":5453},{"type":3075,"score":4088},[5513,5515,5517,5519,5520],{"type":3117,"url":5514},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":3082,"url":5516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":3117,"url":5518},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":196,"slug":5523,"dossier":45,"summary":5524,"aliases":5525,"sourceIds":5528,"published":5529,"modified":5530,"checkedAt":7,"severity":5531,"references":5534,"versionKeys":5542,"packageCount":32,"repositoryCount":401},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[5526,5527],"CVE-2026-48522","PYSEC-2026-175",[196,5527],"2026-05-28T16:16:29.150Z","2026-06-16T14:44:20.882510824Z",[5532],{"type":3072,"score":5533},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5535,5537,5539,5540],{"type":3277,"url":5536},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":3082,"url":5538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":3089,"url":4845},{"type":3079,"url":5541},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[4851,4852],{"id":197,"slug":5544,"dossier":45,"summary":5545,"aliases":5546,"sourceIds":5549,"published":5550,"modified":5551,"checkedAt":7,"severity":5552,"references":5554,"versionKeys":5569,"packageCount":32,"repositoryCount":32},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[5547,5548],"CVE-2026-27024","PYSEC-2026-3013",[197,5548],"2026-02-18T22:40:49Z","2026-07-13T16:43:40.532306824Z",[5553],{"type":3075,"score":4039},[5555,5557,5559,5561,5563,5564,5566,5567],{"type":3079,"url":5556},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":3082,"url":5558},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":3079,"url":5560},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":3079,"url":5562},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":3089,"url":3090},{"type":3079,"url":5565},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":3089,"url":3094},{"type":3082,"url":5568},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[3098],{"id":198,"slug":5571,"dossier":45,"summary":5572,"aliases":5573,"sourceIds":5576,"published":5577,"modified":5578,"checkedAt":7,"severity":5579,"references":5582,"versionKeys":5597,"packageCount":32,"repositoryCount":401},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[5574,5575],"CVE-2025-66416","PYSEC-2026-1617",[198,5575],"2025-12-02T16:52:08Z","2026-07-16T18:45:48.199773308Z",[5580],{"type":3075,"score":5581},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5583,5585,5587,5589,5591,5593,5595],{"type":3079,"url":5584},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3082,"url":5586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":3079,"url":5588},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":3082,"url":5590},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3089,"url":5592},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":3079,"url":5594},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":3089,"url":5596},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[5598,5599],"pypi:mcp@1.10.0","pypi:mcp@1.14.1",{"id":199,"slug":5601,"dossier":45,"summary":5602,"aliases":5603,"sourceIds":5606,"published":5607,"modified":5608,"checkedAt":7,"severity":5609,"references":5612,"versionKeys":5631,"packageCount":32,"repositoryCount":372},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[5604,5605],"CVE-2024-47081","PYSEC-2026-1872",[199,5605],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[5610],{"type":3072,"score":5611},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5613,5615,5617,5619,5621,5623,5625,5627,5629],{"type":3079,"url":5614},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3082,"url":5616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":3079,"url":5618},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":3117,"url":5620},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":3089,"url":5622},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":3079,"url":5624},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":3079,"url":5626},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":3089,"url":5628},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":3082,"url":5630},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[5632,5633],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":200,"slug":5635,"dossier":89,"summary":5636,"aliases":5637,"sourceIds":5641,"published":5642,"modified":5643,"checkedAt":7,"severity":5644,"references":5646,"versionKeys":5659,"packageCount":32,"repositoryCount":3426},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[5638,5639,5640],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[200,5640],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[5645],{"type":3072,"score":3216},[5647,5649,5651,5653,5655,5657,5658],{"type":3277,"url":5648},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":3082,"url":5650},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":3117,"url":5652},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":3117,"url":5654},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":3079,"url":5656},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":3089,"url":3674},{"type":3082,"url":4451},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":201,"slug":5661,"dossier":45,"summary":5662,"aliases":5663,"sourceIds":5666,"published":5667,"modified":5668,"checkedAt":7,"severity":5669,"references":5671,"versionKeys":5686,"packageCount":32,"repositoryCount":32},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[5664,5665],"CVE-2026-28804","PYSEC-2026-3014",[201,5665],"2026-03-02T22:03:45Z","2026-07-13T16:42:53.625666226Z",[5670],{"type":3075,"score":3556},[5672,5674,5676,5678,5680,5681,5683,5684],{"type":3079,"url":5673},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":3082,"url":5675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":3079,"url":5677},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":3079,"url":5679},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":3089,"url":3090},{"type":3079,"url":5682},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":3089,"url":3094},{"type":3082,"url":5685},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[3098],{"id":202,"slug":5688,"dossier":45,"summary":5689,"aliases":5690,"sourceIds":5693,"published":5694,"modified":5695,"checkedAt":7,"severity":5696,"references":5698,"versionKeys":5712,"packageCount":32,"repositoryCount":32},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[5691,5692],"CVE-2026-27026","PYSEC-2026-3015",[202,5692],"2026-02-18T22:41:24Z","2026-07-13T16:42:59.576223829Z",[5697],{"type":3075,"score":4039},[5699,5701,5703,5705,5707,5708,5709,5710],{"type":3079,"url":5700},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":3082,"url":5702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":3079,"url":5704},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":3079,"url":5706},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":3089,"url":3090},{"type":3079,"url":5565},{"type":3089,"url":3094},{"type":3082,"url":5711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[3098],{"id":203,"slug":5714,"dossier":45,"summary":5715,"aliases":5716,"sourceIds":5723,"published":5724,"modified":5725,"checkedAt":7,"severity":5726,"references":5731,"versionKeys":5745,"packageCount":32,"repositoryCount":32},"ghsa-9q39-rmj3-p4r2-67d5744e","HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering",[5717,5718,5719,5720,5721,5722],"BIT-jupyter-base-notebook-2024-43805","BIT-jupyter-notebook-2024-43805","BIT-jupyterlab-2024-43805","CVE-2024-43805","PYSEC-2026-1481","PYSEC-2026-2536",[203,5721],"2024-08-29T17:55:53Z","2026-07-13T16:43:05.974128183Z",[5727,5729],{"type":3072,"score":5728},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3075,"score":5730},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5732,5734,5736,5738,5740,5741,5743],{"type":3079,"url":5733},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-9q39-rmj3-p4r2",{"type":3082,"url":5735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-43805",{"type":3079,"url":5737},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F06ad9de836f155add7d3d651ef936cc4c5ea8093",{"type":3079,"url":5739},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F88e24baac551196f9cb3de16bd060a7ab1597674",{"type":3089,"url":3507},{"type":3089,"url":5742},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyterlab",{"type":3082,"url":5744},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9q39-rmj3-p4r2",[5746],"pypi:notebook@7.0.7",{"id":204,"slug":5748,"dossier":45,"summary":5749,"aliases":5750,"sourceIds":5753,"published":5754,"modified":5755,"checkedAt":7,"severity":5756,"references":5759,"versionKeys":5776,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[5751,5752],"CVE-2024-35195","PYSEC-2026-1873",[204,5752],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[5757],{"type":3072,"score":5758},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5760,5762,5764,5766,5768,5769,5771,5773,5774],{"type":3079,"url":5761},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":3082,"url":5763},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":3079,"url":5765},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":3117,"url":5767},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":3089,"url":5622},{"type":3079,"url":5770},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":3079,"url":5772},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":3089,"url":5628},{"type":3082,"url":5775},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[5632],{"id":205,"slug":5778,"dossier":45,"summary":5779,"aliases":5780,"sourceIds":5783,"published":5784,"modified":5785,"checkedAt":7,"severity":5786,"references":5790,"versionKeys":5796,"packageCount":32,"repositoryCount":605},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[5781,5782],"CVE-2026-54280","PYSEC-2026-2113",[205,5782],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[5787,5789],{"type":3075,"score":5788},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3072,"score":3216},[5791,5793,5795],{"type":3082,"url":5792},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":3117,"url":5794},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":3089,"url":3221},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":206,"slug":5798,"dossier":45,"summary":5799,"aliases":5800,"sourceIds":5803,"published":5804,"modified":5805,"checkedAt":7,"severity":5806,"references":5810,"versionKeys":5821,"packageCount":32,"repositoryCount":605},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[5801,5802],"CVE-2026-34525","PYSEC-2026-2103",[206,5802],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[5807,5809],{"type":3075,"score":5808},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3072,"score":3357},[5811,5813,5815,5817,5819,5820],{"type":3117,"url":5812},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":3082,"url":5814},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":3117,"url":5816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":3117,"url":5818},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":207,"slug":5823,"dossier":45,"summary":5824,"aliases":5825,"sourceIds":5828,"published":5829,"modified":5830,"checkedAt":7,"severity":5831,"references":5834,"versionKeys":5855,"packageCount":32,"repositoryCount":32},"ghsa-c67j-w6g6-q2cm-a4c5c0cf","LangChain serialization injection vulnerability enables secret extraction in dumps\u002Floads APIs",[5826,5827],"CVE-2025-68664","PYSEC-2026-373",[207,5827],"2025-12-23T18:46:13Z","2026-07-02T13:00:05.018724776Z",[5832],{"type":3072,"score":5833},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[5835,5837,5839,5841,5843,5845,5847,5848,5850,5852,5853],{"type":3079,"url":5836},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",{"type":3082,"url":5838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68664",{"type":3079,"url":5840},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34455",{"type":3079,"url":5842},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34458",{"type":3079,"url":5844},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8",{"type":3079,"url":5846},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fd9ec4c5cc78960abd37da79b0250f5642e6f0ce6",{"type":3089,"url":3253},{"type":3079,"url":5849},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.81",{"type":3079,"url":5851},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.5",{"type":3089,"url":3257},{"type":3082,"url":5854},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",[3261],{"id":208,"slug":5857,"dossier":45,"summary":5858,"aliases":5859,"sourceIds":5862,"published":5863,"modified":5864,"checkedAt":7,"severity":5865,"references":5867,"versionKeys":5878,"packageCount":32,"repositoryCount":32},"ghsa-c8j7-8cv4-2xmq-1ef013c3","Mistune plugins\u002Fformatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough \u002F mark \u002F insert)",[5860,5861],"CVE-2026-59922","PYSEC-2026-2210",[208,5861],"2026-07-08T17:17:27.770Z","2026-07-20T21:46:39.999565306Z",[5866],{"type":3072,"score":3216},[5868,5870,5872,5874,5875,5876],{"type":3277,"url":5869},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-c8j7-8cv4-2xmq",{"type":3082,"url":5871},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59922",{"type":3117,"url":5873},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F96d0f57f8fe9eeb06bb4cff521962a27d7c402e7",{"type":3089,"url":3284},{"type":3082,"url":3286},{"type":3079,"url":5877},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2210.yaml",[3290],{"id":209,"slug":5880,"dossier":45,"summary":5881,"aliases":5882,"sourceIds":5885,"published":5886,"modified":5887,"checkedAt":7,"severity":5888,"references":5890,"versionKeys":5902,"packageCount":32,"repositoryCount":671},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[5883,5884],"CVE-2025-67725","PYSEC-2025-266",[209,5884],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[5889],{"type":3072,"score":3216},[5891,5893,5895,5897,5899,5900],{"type":3082,"url":5892},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":3082,"url":5894},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":3117,"url":5896},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":3079,"url":5898},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":3089,"url":3612},{"type":3082,"url":5901},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[3620,3621,3622],{"id":210,"slug":5904,"dossier":45,"summary":5905,"aliases":5906,"sourceIds":5910,"published":5911,"modified":5912,"checkedAt":7,"severity":5913,"references":5917,"versionKeys":5955,"packageCount":32,"repositoryCount":5956},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[5907,5908,5909],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[210,5909],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[5914,5916],{"type":3075,"score":5915},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3072,"score":3216},[5918,5920,5922,5924,5926,5928,5929,5931,5933,5935,5936,5938,5940,5942,5943,5945,5947,5949,5951,5953],{"type":3079,"url":5919},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":3082,"url":5921},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":3079,"url":5923},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":3079,"url":5925},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":3079,"url":5927},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":3089,"url":3674},{"type":3079,"url":5930},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":3079,"url":5932},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":3079,"url":5934},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":3082,"url":3740},{"type":3082,"url":5937},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":3082,"url":5939},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":3082,"url":5941},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":3082,"url":3742},{"type":3082,"url":5944},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":3082,"url":5946},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":3082,"url":5948},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":3082,"url":5950},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":3082,"url":5952},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":3082,"url":5954},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[3678,3679,3680,3681,3682,3683,3684],12,{"id":211,"slug":5958,"dossier":45,"summary":5959,"aliases":5960,"sourceIds":5963,"published":5964,"modified":5965,"checkedAt":7,"severity":5966,"references":5969,"versionKeys":5981,"packageCount":32,"repositoryCount":32},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[5961,5962],"CVE-2026-48155","PYSEC-2026-3016",[211,5962],"2026-06-12T18:29:15Z","2026-07-13T16:43:35.317206583Z",[5967],{"type":3075,"score":5968},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5970,5972,5974,5976,5977,5978,5979],{"type":3079,"url":5971},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":3082,"url":5973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":3079,"url":5975},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":3089,"url":3090},{"type":3079,"url":3092},{"type":3089,"url":3094},{"type":3082,"url":5980},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[3098],{"id":212,"slug":5983,"dossier":45,"summary":5984,"aliases":5985,"sourceIds":5988,"published":5989,"modified":5990,"checkedAt":7,"severity":5991,"references":5994,"versionKeys":6011,"packageCount":32,"repositoryCount":401},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5986,5987],"CVE-2025-27516","PYSEC-2026-1471",[212,5987],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[5992],{"type":3075,"score":5993},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5995,5997,5999,6001,6003,6005,6007,6009],{"type":3079,"url":5996},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":3082,"url":5998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":3117,"url":6000},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":3089,"url":6002},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":3079,"url":6004},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":3079,"url":6006},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":3089,"url":6008},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":3082,"url":6010},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[6012,6013],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":213,"slug":6015,"dossier":45,"summary":6016,"aliases":6017,"sourceIds":6020,"published":6021,"modified":6022,"checkedAt":7,"severity":6023,"references":6026,"versionKeys":6037,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[6018,6019],"CVE-2026-49854","PYSEC-2026-3388",[213,6019],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[6024],{"type":3072,"score":6025},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6027,6029,6030,6032,6033,6035],{"type":3079,"url":6028},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3089,"url":3612},{"type":3079,"url":6031},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":3089,"url":3614},{"type":3082,"url":6034},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3082,"url":6036},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[3620,3621,3622,3623,3624],{"id":214,"slug":6039,"dossier":45,"summary":6040,"aliases":6041,"sourceIds":6045,"published":6046,"modified":6047,"checkedAt":7,"severity":6048,"references":6053,"versionKeys":6069,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[6042,6043,6044],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[214,6044],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[6049,6051],{"type":3072,"score":6050},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3075,"score":6052},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6054,6056,6058,6060,6061,6063,6065,6067],{"type":3082,"url":6055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":3079,"url":6057},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":3079,"url":6059},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":3089,"url":4326},{"type":3079,"url":6062},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":3079,"url":6064},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":3089,"url":6066},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":3082,"url":6068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[4332],{"id":215,"slug":6071,"dossier":45,"summary":6072,"aliases":6073,"sourceIds":6076,"published":6077,"modified":6078,"checkedAt":7,"severity":6079,"references":6081,"versionKeys":6096,"packageCount":32,"repositoryCount":32},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[6074,6075],"CVE-2026-28351","PYSEC-2026-3017",[215,6075],"2026-02-28T02:46:10Z","2026-07-13T16:43:26.452272481Z",[6080],{"type":3075,"score":3556},[6082,6084,6086,6088,6090,6091,6093,6094],{"type":3079,"url":6083},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":3082,"url":6085},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":3079,"url":6087},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":3079,"url":6089},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":3089,"url":3090},{"type":3079,"url":6092},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":3089,"url":3094},{"type":3082,"url":6095},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[3098],{"id":216,"slug":6098,"dossier":45,"summary":6099,"aliases":6100,"sourceIds":6102,"published":6103,"modified":6104,"checkedAt":7,"severity":6105,"references":6107,"versionKeys":6111,"packageCount":32,"repositoryCount":32},"ghsa-f4xh-w4cj-qxq8-981d76df","LangSmith SDK TracingMiddleware: Arbitrary server-side file read",[6101],"CVE-2026-59152",[216],"2026-06-19T22:10:34Z","2026-07-08T08:26:43.324048749Z",[6106],{"type":3072,"score":3607},[6108,6110],{"type":3079,"url":6109},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-f4xh-w4cj-qxq8",{"type":3089,"url":3474},[3487],{"id":217,"slug":6113,"dossier":45,"summary":6114,"aliases":6115,"sourceIds":6118,"published":6119,"modified":6120,"checkedAt":7,"severity":6121,"references":6124,"versionKeys":6137,"packageCount":32,"repositoryCount":32},"ghsa-f83h-ghpp-7wcc-fde96eee","Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc",[6116,6117],"CVE-2025-70559","PYSEC-2026-1761",[217,6117],"2025-11-07T23:17:05Z","2026-07-08T07:38:27.593871221Z",[6122],{"type":3072,"score":6123},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6125,6127,6129,6131,6133,6135],{"type":3079,"url":6126},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",{"type":3082,"url":6128},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-70559",{"type":3079,"url":6130},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fcommit\u002Fb808ee05dd7f0c8ea8ec34bdf394d40e63501086",{"type":3089,"url":6132},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six",{"type":3089,"url":6134},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpdfminer-six",{"type":3082,"url":6136},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",[6138],"pypi:pdfminer-six@20240706",{"id":218,"slug":6140,"dossier":45,"summary":6141,"aliases":6142,"sourceIds":6145,"published":6146,"modified":6147,"checkedAt":7,"severity":6148,"references":6152,"versionKeys":6163,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[6143,6144],"CVE-2024-47874","PYSEC-2026-1943",[218,6144],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[6149,6151],{"type":3072,"score":6150},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":3075,"score":4186},[6153,6155,6157,6159,6160,6161],{"type":3079,"url":6154},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":3082,"url":6156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":3117,"url":6158},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":3089,"url":3190},{"type":3089,"url":3196},{"type":3082,"url":6162},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[3200],{"id":219,"slug":6165,"dossier":45,"summary":6166,"aliases":6167,"sourceIds":6170,"published":6171,"modified":6172,"checkedAt":7,"severity":6173,"references":6178,"versionKeys":6199,"packageCount":32,"repositoryCount":32},"ghsa-fcw5-x6j4-ccmp-6b9a05f5","Jupyter Server: Stored XSS in `NbconvertFileHandler` \u002F `NbconvertPostHandler` via missing `sandbox` CSP",[6168,6169],"CVE-2026-44727","PYSEC-2026-366",[219,6169],"2026-06-18T15:04:07Z","2026-07-22T12:46:58.982015256Z",[6174,6176],{"type":3072,"score":6175},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3075,"score":6177},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[6179,6181,6183,6185,6186,6188,6190,6192,6193,6195,6197],{"type":3079,"url":6180},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-fcw5-x6j4-ccmp",{"type":3082,"url":6182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44727",{"type":3079,"url":6184},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fcommit\u002F6cbee8d65e71abac851c4492fea987ad080580bd",{"type":3079,"url":5192},{"type":3079,"url":6187},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44727",{"type":3079,"url":6189},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491516",{"type":3082,"url":6191},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fcw5-x6j4-ccmp",{"type":3089,"url":3161},{"type":3079,"url":6194},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-366.yaml",{"type":3089,"url":6196},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-server",{"type":3079,"url":6198},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44727.json",[3169],{"id":220,"slug":6201,"dossier":45,"summary":6202,"aliases":6203,"sourceIds":6206,"published":6207,"modified":6208,"checkedAt":7,"severity":6209,"references":6211,"versionKeys":6222,"packageCount":32,"repositoryCount":32},"ghsa-ffq3-xpv3-j92q-22580948","Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions",[6204,6205],"CVE-2026-59928","PYSEC-2026-2216",[220,6205],"2026-07-08T17:17:28.600Z","2026-07-20T21:30:38.320453360Z",[6210],{"type":3072,"score":3216},[6212,6214,6216,6218,6219,6220],{"type":3277,"url":6213},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ffq3-xpv3-j92q",{"type":3082,"url":6215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59928",{"type":3117,"url":6217},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F2b04d7ba341c16ac78fe82d3076bdd5c3de87c69",{"type":3089,"url":3284},{"type":3082,"url":3286},{"type":3079,"url":6221},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2216.yaml",[3290],{"id":221,"slug":6224,"dossier":45,"summary":6225,"aliases":6226,"sourceIds":6229,"published":6230,"modified":6231,"checkedAt":7,"severity":6232,"references":6235,"versionKeys":6249,"packageCount":32,"repositoryCount":32},"ghsa-fg6f-75jq-6523-c927e5c8","Authlib has 1-click Account Takeover vulnerability",[6227,6228],"CVE-2025-68158","PYSEC-2026-1201",[221,6228],"2026-01-08T22:40:56Z","2026-07-07T17:56:30.898731290Z",[6233],{"type":3072,"score":6234},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6236,6238,6240,6242,6244,6245,6247],{"type":3079,"url":6237},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",{"type":3082,"url":6239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68158",{"type":3079,"url":6241},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F2808378611dd6fb2532b189a9087877d8f0c0489",{"type":3079,"url":6243},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F7974f45e4d7492ab5f527577677f2770ce423228",{"type":3089,"url":4823},{"type":3089,"url":6246},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fauthlib",{"type":3082,"url":6248},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg6f-75jq-6523",[4827],{"id":222,"slug":6251,"dossier":45,"summary":6252,"aliases":6253,"sourceIds":6255,"published":6256,"modified":6257,"checkedAt":7,"severity":6258,"references":6260,"versionKeys":6264,"packageCount":32,"repositoryCount":103},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[6254],"CVE-2026-12061",[222],"2026-07-31T16:51:09Z","2026-07-31T17:00:20.623483859Z",[6259],{"type":3072,"score":3216},[6261,6263],{"type":3079,"url":6262},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3089,"url":3734},[3748,3749],{"id":223,"slug":6266,"dossier":45,"summary":6267,"aliases":6268,"sourceIds":6271,"published":6272,"modified":6273,"checkedAt":7,"severity":6274,"references":6277,"versionKeys":6288,"packageCount":32,"repositoryCount":372},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[6269,6270],"CVE-2025-69230","PYSEC-2026-1105",[223,6270],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[6275],{"type":3075,"score":6276},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6278,6280,6282,6284,6285,6286],{"type":3079,"url":6279},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":3082,"url":6281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":3117,"url":6283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":6287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[3225,3226,3227,3228,3229,3230,3231],{"id":224,"slug":6290,"dossier":45,"summary":6291,"aliases":6292,"sourceIds":6295,"published":6296,"modified":6297,"checkedAt":7,"severity":6298,"references":6300,"versionKeys":6308,"packageCount":32,"repositoryCount":401},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[6293,6294],"CVE-2026-48524","PYSEC-2026-177",[224,6294],"2026-05-28T16:16:29.403Z","2026-06-16T15:44:20.804330301Z",[6299],{"type":3072,"score":3244},[6301,6303,6305,6306],{"type":3082,"url":6302},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":3082,"url":6304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":3089,"url":4845},{"type":3079,"url":6307},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[4851,4852],{"id":225,"slug":6310,"dossier":89,"summary":6311,"aliases":6312,"sourceIds":6316,"published":6317,"modified":6318,"checkedAt":7,"severity":6319,"references":6322,"versionKeys":6336,"packageCount":32,"repositoryCount":3426},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[6313,6314,6315],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[225,6315],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[6320],{"type":3072,"score":6321},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[6323,6325,6327,6329,6331,6332,6333,6334],{"type":3079,"url":6324},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":3082,"url":6326},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":3079,"url":6328},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":3079,"url":6330},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":3089,"url":3674},{"type":3079,"url":4451},{"type":3089,"url":4453},{"type":3082,"url":6335},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[3678,3679,3680,3681,3682,3683,3684,3685],{"id":226,"slug":6338,"dossier":45,"summary":6339,"aliases":6340,"sourceIds":6343,"published":6344,"modified":6345,"checkedAt":7,"severity":6346,"references":6349,"versionKeys":6360,"packageCount":32,"repositoryCount":32},"ghsa-fjqc-hq36-qh5p-fbc7458c","LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading",[6341,6342],"CVE-2026-48775","PYSEC-2026-2573",[226,6342],"2026-06-25T18:25:42Z","2026-07-13T16:42:57.455268050Z",[6347],{"type":3072,"score":6348},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6350,6352,6354,6356,6358],{"type":3079,"url":6351},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",{"type":3082,"url":6353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48775",{"type":3089,"url":6355},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph",{"type":3089,"url":6357},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-checkpoint",{"type":3082,"url":6359},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjqc-hq36-qh5p",[6361],"pypi:langgraph-checkpoint@4.0.0",{"id":227,"slug":6363,"dossier":45,"summary":6364,"aliases":6365,"sourceIds":6368,"published":6369,"modified":6370,"checkedAt":7,"severity":6371,"references":6373,"versionKeys":6381,"packageCount":32,"repositoryCount":32},"ghsa-fv5p-p927-qmxr-2692dd04","LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass",[6366,6367],"CVE-2026-41481","PYSEC-2026-77",[227,6367],"2026-04-16T22:53:32Z","2026-06-06T01:15:07.890699366Z",[6372],{"type":3072,"score":5072},[6374,6376,6378,6379],{"type":3082,"url":6375},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-fv5p-p927-qmxr",{"type":3082,"url":6377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41481",{"type":3089,"url":3253},{"type":3079,"url":6380},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-text-splitters\u002FPYSEC-2026-77.yaml",[6382],"pypi:langchain-text-splitters@1.1.0",{"id":228,"slug":6384,"dossier":45,"summary":6385,"aliases":6386,"sourceIds":6389,"published":6390,"modified":6391,"checkedAt":7,"severity":6392,"references":6395,"versionKeys":6401,"packageCount":32,"repositoryCount":605},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[6387,6388],"CVE-2026-54278","PYSEC-2026-2111",[228,6388],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[6393,6394],{"type":3075,"score":3837},{"type":3072,"score":3216},[6396,6398,6399],{"type":3082,"url":6397},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":3089,"url":3221},{"type":3117,"url":6400},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[3225,3226,3227,3228,3229,3230,3231,3232],{"id":229,"slug":6403,"dossier":45,"summary":6404,"aliases":6405,"sourceIds":6408,"published":6409,"modified":6410,"checkedAt":7,"severity":6411,"references":6415,"versionKeys":6423,"packageCount":32,"repositoryCount":103},"ghsa-g48c-2wqr-h844-48f35247","LangGraph checkpoint loading has unsafe msgpack deserialization",[6406,6407],"CVE-2026-28277","PYSEC-2026-83",[229,6407],"2026-03-05T20:16:15.677Z","2026-06-06T01:00:08.116125988Z",[6412,6413],{"type":3072,"score":6348},{"type":3072,"score":6414},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6416,6418,6420,6421],{"type":3082,"url":6417},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-g48c-2wqr-h844",{"type":3082,"url":6419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28277",{"type":3089,"url":6355},{"type":3079,"url":6422},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-83.yaml",[6424,6425,6426],"pypi:langgraph@0.1.1","pypi:langgraph@0.3.21","pypi:langgraph@1.0.6",{"id":230,"slug":6428,"dossier":45,"summary":6429,"aliases":6430,"sourceIds":6433,"published":6434,"modified":6435,"checkedAt":7,"severity":6436,"references":6439,"versionKeys":6452,"packageCount":32,"repositoryCount":32},"ghsa-g7f3-828f-7h7m-12134915","Authlib : JWE zip=DEF decompression bomb enables DoS",[6431,6432],"CVE-2025-62706","PYSEC-2026-1202",[230,6432],"2025-10-10T22:54:03Z","2026-07-07T17:57:19.270494442Z",[6437],{"type":3072,"score":6438},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[6440,6442,6444,6446,6447,6449,6450],{"type":3079,"url":6441},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",{"type":3082,"url":6443},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62706",{"type":3079,"url":6445},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fe0863d5129316b1790eee5f14cece32a03b8184d",{"type":3089,"url":4823},{"type":3079,"url":6448},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00032.html",{"type":3089,"url":6246},{"type":3082,"url":6451},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7f3-828f-7h7m",[4827],{"id":231,"slug":6454,"dossier":45,"summary":6455,"aliases":6456,"sourceIds":6459,"published":6460,"modified":6461,"checkedAt":7,"severity":6462,"references":6465,"versionKeys":6484,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[6457,6458],"CVE-2024-34062","PYSEC-2026-1976",[231,6458],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[6463],{"type":3072,"score":6464},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6466,6468,6470,6472,6474,6476,6478,6480,6482],{"type":3079,"url":6467},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":3082,"url":6469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":3079,"url":6471},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":3089,"url":6473},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":3079,"url":6475},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":3079,"url":6477},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":3079,"url":6479},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":3089,"url":6481},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":3082,"url":6483},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[6485],"pypi:tqdm@4.66.2",{"id":232,"slug":6487,"dossier":45,"summary":6488,"aliases":6489,"sourceIds":6492,"published":6493,"modified":6494,"checkedAt":7,"severity":6495,"references":6497,"versionKeys":6510,"packageCount":32,"repositoryCount":372},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[6490,6491],"CVE-2025-69229","PYSEC-2026-1106",[232,6491],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[6496],{"type":3075,"score":3837},[6498,6500,6502,6504,6506,6507,6508],{"type":3079,"url":6499},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":3082,"url":6501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":3079,"url":6503},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":3079,"url":6505},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":6509},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[3225,3226,3227,3228,3229,3230,3231],{"id":233,"slug":6512,"dossier":45,"summary":6513,"aliases":6514,"sourceIds":6516,"published":6517,"modified":6518,"checkedAt":7,"severity":6519,"references":6521,"versionKeys":6533,"packageCount":32,"repositoryCount":32},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[6515],"CVE-2026-59935",[233],"2026-07-23T16:37:07Z","2026-07-29T21:14:53.453173973Z",[6520],{"type":3075,"score":4186},[6522,6524,6526,6528,6530,6531],{"type":3079,"url":6523},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":3082,"url":6525},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":3079,"url":6527},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":3079,"url":6529},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":3089,"url":3090},{"type":3079,"url":6532},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",[3098],{"id":234,"slug":6535,"dossier":45,"summary":6536,"aliases":6537,"sourceIds":6540,"published":6541,"modified":6542,"checkedAt":7,"severity":6543,"references":6547,"versionKeys":6557,"packageCount":32,"repositoryCount":32},"ghsa-g97x-gvcm-x72h-ff087202","Mistune: XSS via unescaped class option in Admonition directive",[6538,6539],"CVE-2026-59926","PYSEC-2026-2214",[234,6539],"2026-07-08T17:17:28.323Z","2026-07-20T21:46:40.083797845Z",[6544,6546],{"type":3075,"score":6545},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3072,"score":4160},[6548,6550,6552,6553,6554,6555],{"type":3082,"url":6549},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-g97x-gvcm-x72h",{"type":3082,"url":6551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59926",{"type":3117,"url":4169},{"type":3089,"url":3284},{"type":3082,"url":5296},{"type":3079,"url":6556},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2214.yaml",[3290],{"id":235,"slug":6559,"dossier":45,"summary":6560,"aliases":6561,"sourceIds":6564,"published":6565,"modified":6566,"checkedAt":7,"severity":6567,"references":6569,"versionKeys":6582,"packageCount":32,"repositoryCount":32},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[6562,6563],"CVE-2026-54651","PYSEC-2026-3018",[235,6563],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[6568],{"type":3075,"score":4039},[6570,6572,6574,6576,6577,6579,6580],{"type":3079,"url":6571},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":3082,"url":6573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":3079,"url":6575},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":3089,"url":3090},{"type":3079,"url":6578},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":3089,"url":3094},{"type":3082,"url":6581},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[3098],{"id":236,"slug":6584,"dossier":89,"summary":6585,"aliases":6586,"sourceIds":6589,"published":6590,"modified":6591,"checkedAt":7,"severity":6592,"references":6597,"versionKeys":6607,"packageCount":32,"repositoryCount":577},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[6587,6588],"CVE-2026-25645","PYSEC-2026-2275",[236,6588],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[6593,6595],{"type":3072,"score":6594},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3072,"score":6596},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[6598,6600,6602,6604,6605],{"type":3082,"url":6599},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":3082,"url":6601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":3117,"url":6603},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":3089,"url":5622},{"type":3082,"url":6606},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[5632,5633,6608,6609],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":237,"slug":6611,"dossier":45,"summary":6612,"aliases":6613,"sourceIds":6616,"published":6617,"modified":6618,"checkedAt":7,"severity":6619,"references":6622,"versionKeys":6631,"packageCount":32,"repositoryCount":32},"ghsa-gf7q-q4j7-hp7c-0edc7a7a","Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()",[6614,6615],"CVE-2026-5422","PYSEC-2026-2532",[237,6615],"2026-06-02T12:31:26Z","2026-07-13T16:43:48.932414937Z",[6620],{"type":3072,"score":6621},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6623,6625,6626,6628,6629],{"type":3082,"url":6624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5422",{"type":3089,"url":3161},{"type":3079,"url":6627},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F24a36953-6490-466f-8cb2-a90d1ca56e0f",{"type":3089,"url":6196},{"type":3082,"url":6630},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gf7q-q4j7-hp7c",[3169],{"id":238,"slug":6633,"dossier":45,"summary":6634,"aliases":6635,"sourceIds":6638,"published":6639,"modified":6640,"checkedAt":7,"severity":6641,"references":6643,"versionKeys":6653,"packageCount":32,"repositoryCount":103},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[6636,6637],"CVE-2026-33230","PYSEC-2026-2235",[238,6637],"2026-03-18T20:23:33Z","2026-07-13T07:26:40.492720011Z",[6642],{"type":3072,"score":4160},[6644,6646,6648,6650,6652],{"type":3277,"url":6645},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":3082,"url":6647},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":3117,"url":6649},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":3117,"url":6651},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":3089,"url":3734},[3748,3749],{"id":239,"slug":6655,"dossier":45,"summary":6656,"aliases":6657,"sourceIds":6658,"published":6659,"modified":6660,"checkedAt":7,"severity":6661,"references":6663,"versionKeys":6669,"packageCount":32,"repositoryCount":32},"ghsa-gj48-438w-jh9v-02216692","Bleach clean() \u002F Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes",[],[239],"2026-06-16T14:07:49Z","2026-06-18T18:29:26.517334064Z",[6662],{"type":3072,"score":4160},[6664,6666,6667],{"type":3079,"url":6665},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-gj48-438w-jh9v",{"type":3089,"url":5416},{"type":3079,"url":6668},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Freleases\u002Ftag\u002Fv6.4.0",[5418],{"id":240,"slug":6671,"dossier":89,"summary":6672,"aliases":6673,"sourceIds":6676,"published":6677,"modified":6678,"checkedAt":7,"severity":6679,"references":6681,"versionKeys":6692,"packageCount":32,"repositoryCount":3426},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[6674,6675],"CVE-2025-66418","PYSEC-2026-1998",[240,6675],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[6680],{"type":3075,"score":3406},[6682,6684,6686,6688,6689,6690],{"type":3079,"url":6683},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":3082,"url":6685},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":3117,"url":6687},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":3089,"url":3415},{"type":3089,"url":3417},{"type":3082,"url":6691},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[3421,3422,3423,3424,3425],{"id":241,"slug":6694,"dossier":45,"summary":6695,"aliases":6696,"sourceIds":6699,"published":6700,"modified":6701,"checkedAt":7,"severity":6702,"references":6705,"versionKeys":6718,"packageCount":32,"repositoryCount":401},"ghsa-gm8q-m8mv-jj5m-f488c667","Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write",[6697,6698],"CVE-2025-64712","PYSEC-2026-558",[241,6698],"2026-02-03T17:43:56Z","2026-07-13T16:15:34.752594062Z",[6703],{"type":3072,"score":6704},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6706,6708,6710,6712,6714,6716],{"type":3079,"url":6707},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fsecurity\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",{"type":3082,"url":6709},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64712",{"type":3079,"url":6711},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fcommit\u002Fb01d35b2373fd087d2e15162b9c021663c97155d",{"type":3089,"url":6713},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured",{"type":3089,"url":6715},"https:\u002F\u002Fpypi.org\u002Fproject\u002Funstructured",{"type":3082,"url":6717},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",[6719,6720],"pypi:unstructured@0.16.12","pypi:unstructured@0.17.2",{"id":242,"slug":6722,"dossier":45,"summary":6723,"aliases":6724,"sourceIds":6727,"published":6728,"modified":6729,"checkedAt":7,"severity":6730,"references":6733,"versionKeys":6748,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[6725,6726],"CVE-2024-56201","PYSEC-2026-1472",[242,6726],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[6731,6732],{"type":3072,"score":3500},{"type":3075,"score":5993},[6734,6736,6738,6740,6742,6743,6745,6746],{"type":3079,"url":6735},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":3082,"url":6737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":3079,"url":6739},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":3117,"url":6741},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":3089,"url":6002},{"type":3079,"url":6744},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":3089,"url":6008},{"type":3082,"url":6747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[6012],{"id":243,"slug":6750,"dossier":45,"summary":6751,"aliases":6752,"sourceIds":6756,"published":6757,"modified":6758,"checkedAt":7,"severity":6759,"references":6764,"versionKeys":6772,"packageCount":32,"repositoryCount":34},"ghsa-gr75-jv2w-4656-a5b8c61e","LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders",[6753,6754,6755],"CVE-2026-55443","PYSEC-2026-2192","PYSEC-2026-2556",[243,6754],"2026-06-16T15:03:14Z","2026-07-13T16:43:09.845932020Z",[6760,6762],{"type":3072,"score":6761},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3072,"score":6763},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6765,6767,6769,6771],{"type":3082,"url":6766},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-gr75-jv2w-4656",{"type":3082,"url":6768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55443",{"type":3117,"url":6770},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fdcaf7795a3e6590af55c3ff7bda6add6355e9ea6",{"type":3089,"url":3253},[3485,3486,6773,6774],"pypi:langchain@1.2.6","pypi:langchain@1.3.8",{"id":244,"slug":6776,"dossier":45,"summary":6777,"aliases":6778,"sourceIds":6779,"published":6780,"modified":6781,"checkedAt":7,"severity":6782,"references":6785,"versionKeys":6796,"packageCount":32,"repositoryCount":401},"ghsa-gx64-gj6p-pc4c-8fabc035","JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab",[],[244],"2026-07-22T23:14:44Z","2026-07-22T23:30:29.672918877Z",[6783],{"type":3075,"score":6784},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6786,6788,6789,6790,6791,6792,6793,6794,6795],{"type":3079,"url":6787},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-gx64-gj6p-pc4c",{"type":3079,"url":5239},{"type":3079,"url":5241},{"type":3079,"url":5243},{"type":3079,"url":5245},{"type":3079,"url":5247},{"type":3089,"url":3507},{"type":3079,"url":5250},{"type":3079,"url":5252},[3517,5254],{"id":245,"slug":6798,"dossier":89,"summary":6799,"aliases":6800,"sourceIds":6804,"published":6805,"modified":6806,"checkedAt":7,"severity":6807,"references":6810,"versionKeys":6822,"packageCount":32,"repositoryCount":6830},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[6801,6802,6803],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[245,6803],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[6808],{"type":3072,"score":6809},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[6811,6813,6815,6817,6819,6820],{"type":3277,"url":6812},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":3082,"url":6814},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":3117,"url":6816},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":3079,"url":6818},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":3089,"url":4326},{"type":3082,"url":6821},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[4332,4333,4334,6823,6824,6825,6826,6827,6828,6829],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":246,"slug":6832,"dossier":45,"summary":6833,"aliases":6834,"sourceIds":6835,"published":6836,"modified":6837,"checkedAt":7,"severity":6838,"references":6839,"versionKeys":6845,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[246],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[6840,6842,6843],{"type":3079,"url":6841},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":3089,"url":4067},{"type":3079,"url":6844},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[4071],{"id":247,"slug":6847,"dossier":45,"summary":6848,"aliases":6849,"sourceIds":6850,"published":6851,"modified":6852,"checkedAt":7,"severity":6853,"references":6856,"versionKeys":6867,"packageCount":32,"repositoryCount":401},"ghsa-h5v5-8746-g7mm-7b4783af","JupyterLab PluginManager lock-rule enforcement bypass",[],[247],"2026-07-22T23:13:34Z","2026-07-22T23:15:29.669982172Z",[6854],{"type":3075,"score":6855},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6857,6859,6860,6861,6862,6863,6864,6865,6866],{"type":3079,"url":6858},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-h5v5-8746-g7mm",{"type":3079,"url":5239},{"type":3079,"url":5241},{"type":3079,"url":5243},{"type":3079,"url":5245},{"type":3079,"url":5247},{"type":3089,"url":3507},{"type":3079,"url":5250},{"type":3079,"url":5252},[3517,5254],{"id":248,"slug":6869,"dossier":45,"summary":6870,"aliases":6871,"sourceIds":6874,"published":6875,"modified":6876,"checkedAt":7,"severity":6877,"references":6879,"versionKeys":6900,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[6872,6873],"CVE-2024-34064","PYSEC-2026-1474",[248,6873],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[6878],{"type":3072,"score":4865},[6880,6882,6884,6886,6887,6889,6891,6893,6895,6897,6898],{"type":3079,"url":6881},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":3082,"url":6883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":3117,"url":6885},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":3089,"url":6002},{"type":3079,"url":6888},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":3079,"url":6890},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":3079,"url":6892},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":3079,"url":6894},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":3079,"url":6896},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":3089,"url":6008},{"type":3082,"url":6899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[6012],{"id":249,"slug":6902,"dossier":45,"summary":6903,"aliases":6904,"sourceIds":6907,"published":6908,"modified":6909,"checkedAt":7,"severity":6910,"references":6913,"versionKeys":6927,"packageCount":32,"repositoryCount":103},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[6905,6906],"CVE-2026-0846","PYSEC-2026-97",[249,6906],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[6911,6912],{"type":3072,"score":4593},{"type":3072,"score":4595},[6914,6916,6918,6920,6921,6923,6925],{"type":3082,"url":6915},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":3079,"url":6917},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":3079,"url":6919},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":3089,"url":3734},{"type":3079,"url":6922},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":3277,"url":6924},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":3082,"url":6926},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3748,3749],{"id":250,"slug":6929,"dossier":45,"summary":6930,"aliases":6931,"sourceIds":6934,"published":6935,"modified":6936,"checkedAt":7,"severity":6937,"references":6940,"versionKeys":6949,"packageCount":32,"repositoryCount":605},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[6932,6933],"CVE-2026-34513","PYSEC-2026-2095",[250,6933],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[6938,6939],{"type":3075,"score":3584},{"type":3072,"score":3216},[6941,6943,6945,6947,6948],{"type":3117,"url":6942},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":3082,"url":6944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":3117,"url":6946},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":251,"slug":6951,"dossier":45,"summary":6952,"aliases":6953,"sourceIds":6956,"published":6957,"modified":6958,"checkedAt":7,"severity":6959,"references":6963,"versionKeys":6971,"packageCount":32,"repositoryCount":605},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[6954,6955],"CVE-2026-47265","PYSEC-2026-2105",[251,6955],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[6960,6962],{"type":3075,"score":6961},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3072,"score":4595},[6964,6966,6968,6970],{"type":3117,"url":6965},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":3082,"url":6967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":3117,"url":6969},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":3089,"url":3221},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":252,"slug":6973,"dossier":45,"summary":6974,"aliases":6975,"sourceIds":6978,"published":6979,"modified":6980,"checkedAt":7,"severity":6981,"references":6983,"versionKeys":6992,"packageCount":32,"repositoryCount":615},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[6976,6977],"CVE-2026-59886","PYSEC-2026-3457",[252,6977],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[6982],{"type":3072,"score":3216},[6984,6986,6988,6990,6991],{"type":3082,"url":6985},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":3082,"url":6987},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":3117,"url":6989},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":3089,"url":4548},{"type":3082,"url":5365},[4556,5367],{"id":253,"slug":6994,"dossier":45,"summary":6995,"aliases":6996,"sourceIds":6999,"published":7000,"modified":7001,"checkedAt":7,"severity":7002,"references":7006,"versionKeys":7012,"packageCount":32,"repositoryCount":605},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[6997,6998],"CVE-2026-54276","PYSEC-2026-2109",[253,6998],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[7003,7005],{"type":3075,"score":7004},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3072,"score":4160},[7007,7009,7011],{"type":3082,"url":7008},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":3117,"url":7010},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":3089,"url":3221},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":254,"slug":7014,"dossier":45,"summary":7015,"aliases":7016,"sourceIds":7019,"published":7020,"modified":7021,"checkedAt":7,"severity":7022,"references":7024,"versionKeys":7039,"packageCount":32,"repositoryCount":32},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[7017,7018],"CVE-2026-31826","PYSEC-2026-3019",[254,7018],"2026-03-11T00:14:02Z","2026-07-13T16:43:52.358788786Z",[7023],{"type":3075,"score":3900},[7025,7027,7029,7031,7033,7034,7036,7037],{"type":3079,"url":7026},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":3082,"url":7028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":3079,"url":7030},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":3079,"url":7032},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":3089,"url":3090},{"type":3079,"url":7035},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":3089,"url":3094},{"type":3082,"url":7038},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[3098],{"id":255,"slug":7041,"dossier":45,"summary":7042,"aliases":7043,"sourceIds":7046,"published":7047,"modified":7048,"checkedAt":7,"severity":7049,"references":7053,"versionKeys":7070,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[7044,7045],"CVE-2025-67221","PYSEC-2026-107",[255,7045],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[7050,7052],{"type":3075,"score":7051},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3072,"score":3216},[7054,7056,7058,7060,7062,7064,7066,7068],{"type":3082,"url":7055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":3079,"url":7057},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":3079,"url":7059},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":3079,"url":7061},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":3089,"url":7063},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":3277,"url":7065},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":3079,"url":7067},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":3082,"url":7069},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[7071,7072,7073,7074],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":256,"slug":7076,"dossier":45,"summary":7077,"aliases":7078,"sourceIds":7081,"published":7082,"modified":7083,"checkedAt":7,"severity":7084,"references":7086,"versionKeys":7098,"packageCount":32,"repositoryCount":32},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[7079,7080],"CVE-2026-49461","PYSEC-2026-3020",[256,7080],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[7085],{"type":3075,"score":4039},[7087,7089,7091,7092,7093,7094,7096],{"type":3079,"url":7088},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3079,"url":7090},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":3089,"url":3090},{"type":3079,"url":4248},{"type":3089,"url":3094},{"type":3082,"url":7095},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3082,"url":7097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[3098],{"id":257,"slug":7100,"dossier":45,"summary":7101,"aliases":7102,"sourceIds":7105,"published":7106,"modified":7107,"checkedAt":7,"severity":7108,"references":7110,"versionKeys":7125,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[7103,7104],"CVE-2025-62708","PYSEC-2026-1831",[257,7104],"2025-10-22T19:40:50Z","2026-07-07T17:56:05.697066629Z",[7109],{"type":3075,"score":3837},[7111,7113,7115,7117,7119,7120,7122,7123],{"type":3079,"url":7112},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":3082,"url":7114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":3079,"url":7116},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":3079,"url":7118},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":3089,"url":3090},{"type":3079,"url":7121},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":3089,"url":3094},{"type":3082,"url":7124},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[3098],{"id":258,"slug":7127,"dossier":45,"summary":7128,"aliases":7129,"sourceIds":7132,"published":7133,"modified":7134,"checkedAt":7,"severity":7135,"references":7139,"versionKeys":7158,"packageCount":32,"repositoryCount":605},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[7130,7131],"CVE-2026-34993","PYSEC-2026-2104",[258,7131],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[7136,7138],{"type":3072,"score":7137},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":3072,"score":3438},[7140,7142,7144,7146,7147,7149,7151,7153,7155,7156],{"type":3117,"url":7141},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":3082,"url":7143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":3117,"url":7145},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":3089,"url":3221},{"type":3079,"url":7148},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":3079,"url":7150},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":3082,"url":7152},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3082,"url":7154},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":3082,"url":3744},{"type":3154,"url":7157},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[3225,3226,3227,3228,3229,3230,3231,3232],{"id":259,"slug":7160,"dossier":45,"summary":7161,"aliases":7162,"sourceIds":7165,"published":7166,"modified":7167,"checkedAt":7,"severity":7168,"references":7170,"versionKeys":7180,"packageCount":32,"repositoryCount":671},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[7163,7164],"CVE-2025-67726","PYSEC-2025-267",[259,7164],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[7169],{"type":3072,"score":3216},[7171,7173,7175,7176,7178,7179],{"type":3082,"url":7172},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":3082,"url":7174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":3117,"url":5896},{"type":3079,"url":7177},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":3089,"url":3612},{"type":3082,"url":5901},[3620,3621,3622],{"id":260,"slug":7182,"dossier":45,"summary":7183,"aliases":7184,"sourceIds":7187,"published":7188,"modified":7189,"checkedAt":7,"severity":7190,"references":7192,"versionKeys":7203,"packageCount":32,"repositoryCount":372},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[7185,7186],"CVE-2025-69227","PYSEC-2026-1107",[260,7186],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[7191],{"type":3075,"score":3837},[7193,7195,7197,7199,7200,7201],{"type":3079,"url":7194},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":3082,"url":7196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":3079,"url":7198},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":7202},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[3225,3226,3227,3228,3229,3230,3231],{"id":261,"slug":7205,"dossier":45,"summary":7206,"aliases":7207,"sourceIds":7210,"published":7211,"modified":7212,"checkedAt":7,"severity":7213,"references":7216,"versionKeys":7231,"packageCount":32,"repositoryCount":32},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[7208,7209],"CVE-2026-41168","PYSEC-2026-3021",[261,7209],"2026-04-15T19:43:09Z","2026-07-13T16:43:07.020121646Z",[7214,7215],{"type":3072,"score":3181},{"type":3075,"score":5968},[7217,7219,7221,7223,7225,7226,7228,7229],{"type":3079,"url":7218},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":3082,"url":7220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":3079,"url":7222},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":3079,"url":7224},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":3089,"url":3090},{"type":3079,"url":7227},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":3089,"url":3094},{"type":3082,"url":7230},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[3098],{"id":262,"slug":7233,"dossier":45,"summary":7234,"aliases":7235,"sourceIds":7238,"published":7239,"modified":7240,"checkedAt":7,"severity":7241,"references":7243,"versionKeys":7251,"packageCount":32,"repositoryCount":32},"ghsa-jj8c-mmj3-mmgv-216e3367","Authlib: Cross-site request forging when using cache",[7236,7237],"CVE-2026-41425","PYSEC-2026-25",[262,7237],"2026-04-16T22:38:03Z","2026-06-05T14:45:30.092809707Z",[7242],{"type":3072,"score":4865},[7244,7246,7248,7249],{"type":3277,"url":7245},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-jj8c-mmj3-mmgv",{"type":3082,"url":7247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41425",{"type":3089,"url":4823},{"type":3079,"url":7250},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-25.yaml",[4827],{"id":263,"slug":7253,"dossier":89,"summary":7254,"aliases":7255,"sourceIds":7259,"published":7260,"modified":7261,"checkedAt":7,"severity":7262,"references":7264,"versionKeys":7278,"packageCount":32,"repositoryCount":3426},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[7256,7257,7258],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[263,7258],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[7263],{"type":3072,"score":3216},[7265,7267,7269,7271,7273,7274,7275,7276],{"type":3079,"url":7266},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":3082,"url":7268},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":3079,"url":7270},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":3079,"url":7272},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":3089,"url":3674},{"type":3079,"url":4451},{"type":3089,"url":4453},{"type":3082,"url":7277},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[3678,3679,3680,3681,3682,3683,3684,3685],{"id":264,"slug":7280,"dossier":45,"summary":7281,"aliases":7282,"sourceIds":7285,"published":7286,"modified":7287,"checkedAt":7,"severity":7288,"references":7290,"versionKeys":7307,"packageCount":32,"repositoryCount":103},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[7283,7284],"CVE-2026-33231","PYSEC-2026-2236",[264,7284],"2026-03-19T12:42:20Z","2026-07-13T07:26:55.331693381Z",[7289],{"type":3072,"score":3216},[7291,7293,7295,7297,7298,7300,7302,7303,7304,7305],{"type":3277,"url":7292},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":3082,"url":7294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":3117,"url":7296},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":3089,"url":3734},{"type":3079,"url":7299},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":3079,"url":7301},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":3082,"url":3742},{"type":3082,"url":7152},{"type":3082,"url":3744},{"type":3154,"url":7306},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3748,3749],{"id":265,"slug":7309,"dossier":45,"summary":7310,"aliases":7311,"sourceIds":7313,"published":7314,"modified":7315,"checkedAt":7,"severity":7316,"references":7318,"versionKeys":7326,"packageCount":32,"repositoryCount":32},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[7312],"CVE-2026-57204",[265],"2026-06-18T14:28:49Z","2026-07-08T08:27:12.200342088Z",[7317],{"type":3075,"score":4039},[7319,7321,7323,7324],{"type":3079,"url":7320},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":3079,"url":7322},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":3089,"url":3090},{"type":3079,"url":7325},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[3098],{"id":266,"slug":7328,"dossier":45,"summary":7329,"aliases":7330,"sourceIds":7333,"published":7334,"modified":7335,"checkedAt":7,"severity":7336,"references":7339,"versionKeys":7347,"packageCount":32,"repositoryCount":615},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[7331,7332],"CVE-2026-54282","PYSEC-2026-248",[266,7332],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[7337,7338],{"type":3072,"score":4679},{"type":3072,"score":3357},[7340,7342,7344,7345],{"type":3082,"url":7341},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":3082,"url":7343},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":3089,"url":4957},{"type":3079,"url":7346},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[3200,3201,3202,4964,4965,5126,5127],{"id":267,"slug":7349,"dossier":45,"summary":7350,"aliases":7351,"sourceIds":7354,"published":7355,"modified":7356,"checkedAt":7,"severity":7357,"references":7359,"versionKeys":7378,"packageCount":32,"repositoryCount":401},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[7352,7353],"CVE-2026-52869","PYSEC-2026-3482",[267,7353],"2026-07-16T19:58:53Z","2026-07-23T15:11:29.023312800Z",[7358],{"type":3072,"score":4136},[7360,7362,7364,7366,7368,7370,7372,7373,7375,7376],{"type":3079,"url":7361},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":3082,"url":7363},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":3079,"url":7365},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":3079,"url":7367},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":3079,"url":7369},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":3079,"url":7371},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":3089,"url":5592},{"type":3079,"url":7374},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":3089,"url":5596},{"type":3082,"url":7377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[5598,5599],{"id":268,"slug":7380,"dossier":45,"summary":7381,"aliases":7382,"sourceIds":7385,"published":7386,"modified":7387,"checkedAt":7,"severity":7388,"references":7391,"versionKeys":7399,"packageCount":32,"repositoryCount":401},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[7383,7384],"CVE-2026-48523","PYSEC-2026-176",[268,7384],"2026-05-28T16:16:29.280Z","2026-06-16T15:44:20.868973576Z",[7389],{"type":3072,"score":7390},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7392,7394,7396,7397],{"type":3277,"url":7393},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":3082,"url":7395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":3089,"url":4845},{"type":3079,"url":7398},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[4851,4852],{"id":269,"slug":7401,"dossier":45,"summary":7402,"aliases":7403,"sourceIds":7406,"published":7407,"modified":7408,"checkedAt":7,"severity":7409,"references":7413,"versionKeys":7446,"packageCount":32,"repositoryCount":372},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[7404,7405],"CVE-2026-30922","PYSEC-2026-2263",[269,7405],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[7410,7412],{"type":3072,"score":7411},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3072,"score":3216},[7414,7416,7418,7420,7422,7423,7425,7427,7429,7431,7432,7434,7436,7438,7440,7442,7444],{"type":3277,"url":7415},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":3082,"url":7417},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":3079,"url":7419},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":3117,"url":7421},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":3079,"url":3740},{"type":3079,"url":7424},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":3079,"url":7426},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":3079,"url":7428},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":3079,"url":7430},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3079,"url":3744},{"type":3079,"url":7433},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":3079,"url":7435},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":3079,"url":7437},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":3079,"url":7439},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":3079,"url":7441},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":3079,"url":7443},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":3079,"url":7445},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[4556],{"id":270,"slug":7448,"dossier":45,"summary":7449,"aliases":7450,"sourceIds":7453,"published":7454,"modified":7455,"checkedAt":7,"severity":7456,"references":7458,"versionKeys":7469,"packageCount":32,"repositoryCount":32},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[7451,7452],"CVE-2026-54531","PYSEC-2026-3022",[270,7452],"2026-06-16T14:05:57Z","2026-07-13T16:43:49.403109632Z",[7457],{"type":3075,"score":4039},[7459,7461,7462,7463,7464,7465,7467],{"type":3079,"url":7460},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3079,"url":4044},{"type":3089,"url":3090},{"type":3079,"url":4047},{"type":3089,"url":3094},{"type":3082,"url":7466},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3082,"url":7468},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[3098],{"id":271,"slug":7471,"dossier":45,"summary":7472,"aliases":7473,"sourceIds":7476,"published":7477,"modified":7478,"checkedAt":7,"severity":7479,"references":7483,"versionKeys":7506,"packageCount":32,"repositoryCount":32},"ghsa-m344-f55w-2m6j-43fc4846","Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding",[7474,7475],"CVE-2026-28498","PYSEC-2026-2117",[271,7475],"2026-03-16T16:15:06Z","2026-07-13T07:26:18.508336668Z",[7480,7482],{"type":3075,"score":7481},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3072,"score":3110},[7484,7486,7488,7490,7491,7492,7494,7496,7497,7499,7501,7502,7503,7504],{"type":3277,"url":7485},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-m344-f55w-2m6j",{"type":3082,"url":7487},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28498",{"type":3117,"url":7489},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fb9bb2b25bf8b7e01512d847a95c1749646eaa72b",{"type":3089,"url":4823},{"type":3082,"url":4825},{"type":3079,"url":7493},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-28498",{"type":3079,"url":7495},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-28498.json",{"type":3082,"url":7435},{"type":3082,"url":7498},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6497",{"type":3082,"url":7500},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6567",{"type":3082,"url":7437},{"type":3082,"url":7439},{"type":3082,"url":7441},{"type":3154,"url":7505},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2448182",[4827],{"id":272,"slug":7508,"dossier":45,"summary":7509,"aliases":7510,"sourceIds":7513,"published":7514,"modified":7515,"checkedAt":7,"severity":7516,"references":7518,"versionKeys":7534,"packageCount":32,"repositoryCount":32},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[7511,7512],"CVE-2025-66019","PYSEC-2026-1832",[272,7512],"2025-11-24T22:42:07Z","2026-07-07T17:56:14.246224195Z",[7517],{"type":3075,"score":3837},[7519,7520,7522,7524,7526,7528,7529,7531,7532],{"type":3079,"url":7112},{"type":3079,"url":7521},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":3082,"url":7523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":3079,"url":7525},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":3079,"url":7527},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":3089,"url":3090},{"type":3079,"url":7530},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":3089,"url":3094},{"type":3082,"url":7533},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[3098],{"id":273,"slug":7536,"dossier":45,"summary":7537,"aliases":7538,"sourceIds":7541,"published":7542,"modified":7543,"checkedAt":7,"severity":7544,"references":7549,"versionKeys":7558,"packageCount":32,"repositoryCount":605},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[7539,7540],"CVE-2026-34516","PYSEC-2026-2098",[273,7540],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[7545,7546,7547],{"type":3072,"score":3216},{"type":3075,"score":3837},{"type":3075,"score":7548},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7550,7552,7554,7556,7557],{"type":3117,"url":7551},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":3082,"url":7553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":3117,"url":7555},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":274,"slug":7560,"dossier":45,"summary":7561,"aliases":7562,"sourceIds":7565,"published":7566,"modified":7567,"checkedAt":7,"severity":7568,"references":7571,"versionKeys":7577,"packageCount":32,"repositoryCount":605},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[7563,7564],"CVE-2026-50269","PYSEC-2026-2106",[274,7564],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[7569,7570],{"type":3075,"score":3355},{"type":3072,"score":3216},[7572,7574,7576],{"type":3082,"url":7573},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":3117,"url":7575},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":3089,"url":3221},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":275,"slug":7579,"dossier":45,"summary":7580,"aliases":7581,"sourceIds":7584,"published":7585,"modified":7586,"checkedAt":7,"severity":7587,"references":7591,"versionKeys":7599,"packageCount":32,"repositoryCount":372},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[7582,7583],"CVE-2026-34073","PYSEC-2026-35",[275,7583],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[7588,7589],{"type":3072,"score":3357},{"type":3075,"score":7590},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7592,7594,7596,7597],{"type":3082,"url":7593},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":3082,"url":7595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":3089,"url":4067},{"type":3079,"url":7598},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[4071,4072,4073,4074,4075,4076],{"id":276,"slug":7601,"dossier":45,"summary":7602,"aliases":7603,"sourceIds":7606,"published":7607,"modified":7608,"checkedAt":7,"severity":7609,"references":7612,"versionKeys":7620,"packageCount":32,"repositoryCount":103},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[7604,7605],"CVE-2026-44432","PYSEC-2026-142",[276,7605],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[7610,7611],{"type":3072,"score":3216},{"type":3075,"score":3406},[7613,7615,7617,7619],{"type":3082,"url":7614},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":3082,"url":7616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":3079,"url":7618},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":3089,"url":3415},[7621],"pypi:urllib3@2.6.3",{"id":277,"slug":7623,"dossier":45,"summary":7624,"aliases":7625,"sourceIds":7628,"published":7629,"modified":7630,"checkedAt":7,"severity":7631,"references":7634,"versionKeys":7647,"packageCount":32,"repositoryCount":7652},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[7626,7627],"CVE-2026-28684","PYSEC-2026-2270",[277,7627],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[7632],{"type":3072,"score":7633},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7635,7637,7639,7641,7643,7645],{"type":3117,"url":7636},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":3082,"url":7638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":3117,"url":7640},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":3079,"url":7642},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":3089,"url":7644},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":3082,"url":7646},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[7648,7649,7650,7651],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":278,"slug":7654,"dossier":45,"summary":7655,"aliases":7656,"sourceIds":7659,"published":7660,"modified":7661,"checkedAt":7,"severity":7662,"references":7664,"versionKeys":7673,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[7657,7658],"CVE-2026-49855","PYSEC-2026-3389",[278,7658],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[7663],{"type":3072,"score":3216},[7665,7667,7668,7669,7671],{"type":3079,"url":7666},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3089,"url":3612},{"type":3089,"url":3614},{"type":3082,"url":7670},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3082,"url":7672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[3620,3621,3622,3623,3624],{"id":279,"slug":7675,"dossier":45,"summary":7676,"aliases":7677,"sourceIds":7680,"published":7681,"modified":7682,"checkedAt":7,"severity":7683,"references":7685,"versionKeys":7696,"packageCount":32,"repositoryCount":671},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[7678,7679],"CVE-2026-40347","PYSEC-2026-3038",[279,7679],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[7684],{"type":3072,"score":3181},[7686,7688,7690,7691,7693,7694],{"type":3079,"url":7687},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":3082,"url":7689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":3089,"url":4195},{"type":3079,"url":7692},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":3089,"url":4197},{"type":3082,"url":7695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[4356,4357,4201],{"id":280,"slug":7698,"dossier":45,"summary":7699,"aliases":7700,"sourceIds":7707,"published":7708,"modified":7709,"checkedAt":7,"severity":7710,"references":7715,"versionKeys":7728,"packageCount":401,"repositoryCount":32},"ghsa-mqcg-5x36-vfcg-bd7ad531","JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content",[7701,7702,7703,7704,7705,7706],"BIT-jupyter-base-notebook-2026-42557","BIT-jupyter-notebook-2026-42557","BIT-jupyterlab-2026-42557","CVE-2026-42557","PYSEC-2026-2537","PYSEC-2026-2681",[280,7705,7706],"2026-05-06T21:43:44Z","2026-07-13T16:43:04.081738235Z",[7711,7713],{"type":3072,"score":7712},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":3075,"score":7714},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7716,7718,7720,7721,7723,7724,7726],{"type":3079,"url":7717},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-mqcg-5x36-vfcg",{"type":3082,"url":7719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42557",{"type":3089,"url":3507},{"type":3079,"url":7722},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fcommands.html#commands-in-markdown-files",{"type":3089,"url":5742},{"type":3082,"url":7725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqcg-5x36-vfcg",{"type":3089,"url":7727},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnotebook",[3517,5746],{"id":281,"slug":7730,"dossier":45,"summary":7731,"aliases":7732,"sourceIds":7735,"published":7736,"modified":7737,"checkedAt":7,"severity":7738,"references":7740,"versionKeys":7751,"packageCount":32,"repositoryCount":372},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[7733,7734],"CVE-2025-69225","PYSEC-2026-1109",[281,7734],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[7739],{"type":3075,"score":3355},[7741,7743,7745,7747,7748,7749],{"type":3079,"url":7742},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":3082,"url":7744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":3117,"url":7746},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":3089,"url":3221},{"type":3089,"url":4098},{"type":3082,"url":7750},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[3225,3226,3227,3228,3229,3230,3231],{"id":282,"slug":7753,"dossier":45,"summary":7754,"aliases":7755,"sourceIds":7758,"published":7759,"modified":7760,"checkedAt":7,"severity":7761,"references":7764,"versionKeys":7773,"packageCount":32,"repositoryCount":605},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[7756,7757],"CVE-2026-34519","PYSEC-2026-2101",[282,7757],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[7762,7763],{"type":3075,"score":3355},{"type":3072,"score":3357},[7765,7767,7769,7771,7772],{"type":3117,"url":7766},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":3082,"url":7768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":3117,"url":7770},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":283,"slug":7775,"dossier":45,"summary":7776,"aliases":7777,"sourceIds":7780,"published":7781,"modified":7782,"checkedAt":7,"severity":7783,"references":7786,"versionKeys":7794,"packageCount":32,"repositoryCount":103},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[7778,7779],"CVE-2026-39892","PYSEC-2026-36",[283,7779],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[7784,7785],{"type":3075,"score":3556},{"type":3072,"score":6704},[7787,7789,7791,7792],{"type":3082,"url":7788},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":3082,"url":7790},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":3089,"url":4067},{"type":3079,"url":7793},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[4075,4076],{"id":284,"slug":7796,"dossier":45,"summary":7797,"aliases":7798,"sourceIds":7801,"published":7802,"modified":7803,"checkedAt":7,"severity":7804,"references":7806,"versionKeys":7824,"packageCount":32,"repositoryCount":103},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[7799,7800],"CVE-2026-54293","PYSEC-2026-2078",[284,7800],"2026-06-16T14:34:15Z","2026-07-21T12:46:29.659855804Z",[7805],{"type":3072,"score":4595},[7807,7809,7811,7813,7815,7817,7819,7820,7822],{"type":3277,"url":7808},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":3082,"url":7810},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":3117,"url":7812},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":3079,"url":7814},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":3079,"url":7816},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3154,"url":7818},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":3089,"url":3734},{"type":3079,"url":7821},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":3079,"url":7823},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3748,3749],{"id":285,"slug":7826,"dossier":45,"summary":7827,"aliases":7828,"sourceIds":7831,"published":7832,"modified":7833,"checkedAt":7,"severity":7834,"references":7837,"versionKeys":7846,"packageCount":32,"repositoryCount":605},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[7829,7830],"CVE-2026-34515","PYSEC-2026-2097",[285,7830],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[7835,7836],{"type":3075,"score":6961},{"type":3072,"score":4595},[7838,7840,7842,7844,7845],{"type":3117,"url":7839},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":3082,"url":7841},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":3117,"url":7843},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":286,"slug":7848,"dossier":45,"summary":7849,"aliases":7850,"sourceIds":7853,"published":7854,"modified":7855,"checkedAt":7,"severity":7856,"references":7859,"versionKeys":7874,"packageCount":32,"repositoryCount":401},"ghsa-pc6w-59fv-rh23-cab9cb2f","Langchain Community Vulnerable to XML External Entity (XXE) Attacks",[7851,7852],"CVE-2025-6984","PYSEC-2026-1515",[286,7852],"2025-09-04T12:30:42Z","2026-07-07T17:56:45.822570559Z",[7857],{"type":3072,"score":7858},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[7860,7862,7864,7866,7868,7870,7872],{"type":3082,"url":7861},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6984",{"type":3079,"url":7863},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community\u002Fcommit\u002Fe842452108089524e22c3a2ced851c021884556f",{"type":3089,"url":7865},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain-community",{"type":3079,"url":7867},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fblob\u002Fd79b5813a0b3b243c612b77013768995e46c4337\u002Flibs\u002Flangchain\u002Flangchain\u002Fdocument_loaders\u002Fevernote.py#L1-L23",{"type":3079,"url":7869},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa6b521cf-258c-41c0-9edb-d8ef976abb2a",{"type":3089,"url":7871},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-community",{"type":3082,"url":7873},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pc6w-59fv-rh23",[3713,7875],"pypi:langchain-community@0.3.7",{"id":287,"slug":7877,"dossier":45,"summary":7878,"aliases":7879,"sourceIds":7883,"published":7884,"modified":7885,"checkedAt":7,"severity":7886,"references":7889,"versionKeys":7902,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[7880,7881,7882],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[287,7882],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[7887,7888],{"type":3072,"score":3181},{"type":3072,"score":3216},[7890,7892,7894,7896,7898,7900,7901],{"type":3277,"url":7891},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":3082,"url":7893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":3117,"url":7895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":3117,"url":7897},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":3079,"url":7899},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":3089,"url":3674},{"type":3082,"url":4451},[3683,3684,3685],{"id":288,"slug":7904,"dossier":89,"summary":7905,"aliases":7906,"sourceIds":7910,"published":7911,"modified":7912,"checkedAt":7,"severity":7913,"references":7915,"versionKeys":7926,"packageCount":32,"repositoryCount":3426},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[7907,7908,7909],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[288,7909],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[7914],{"type":3072,"score":3216},[7916,7918,7920,7922,7924,7925],{"type":3277,"url":7917},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":3082,"url":7919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":3117,"url":7921},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":3079,"url":7923},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":3089,"url":3674},{"type":3082,"url":3676},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":289,"slug":7928,"dossier":45,"summary":7929,"aliases":7930,"sourceIds":7933,"published":7934,"modified":7935,"checkedAt":7,"severity":7936,"references":7939,"versionKeys":7948,"packageCount":32,"repositoryCount":401},"ghsa-pjwx-r37v-7724-2297a72a","LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists",[7931,7932],"CVE-2026-44843","PYSEC-2026-2564",[289,7932],"2026-05-08T23:07:32Z","2026-07-13T16:42:39.210995356Z",[7937],{"type":3072,"score":7938},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[7940,7942,7944,7945,7946],{"type":3079,"url":7941},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",{"type":3082,"url":7943},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44843",{"type":3089,"url":3253},{"type":3089,"url":3257},{"type":3082,"url":7947},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",[3261,3262],{"id":290,"slug":7950,"dossier":45,"summary":7951,"aliases":7952,"sourceIds":7955,"published":7956,"modified":7957,"checkedAt":7,"severity":7958,"references":7960,"versionKeys":7969,"packageCount":32,"repositoryCount":671},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[7953,7954],"CVE-2026-42561","PYSEC-2026-3039",[290,7954],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[7959],{"type":3072,"score":3216},[7961,7963,7965,7966,7967],{"type":3079,"url":7962},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":3082,"url":7964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":3089,"url":4195},{"type":3089,"url":4197},{"type":3082,"url":7968},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[4356,4357,4201],{"id":291,"slug":7971,"dossier":45,"summary":7972,"aliases":7973,"sourceIds":7974,"published":7975,"modified":7976,"checkedAt":7,"severity":7977,"references":7980,"versionKeys":7991,"packageCount":32,"repositoryCount":401},"ghsa-pppj-hq3g-57pj-cec62aea","JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)",[],[291],"2026-07-22T23:16:18Z","2026-07-22T23:30:29.674484297Z",[7978],{"type":3075,"score":7979},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:L",[7981,7983,7984,7985,7986,7987,7988,7989,7990],{"type":3079,"url":7982},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-pppj-hq3g-57pj",{"type":3079,"url":5239},{"type":3079,"url":5241},{"type":3079,"url":5243},{"type":3079,"url":5245},{"type":3079,"url":5247},{"type":3089,"url":3507},{"type":3079,"url":5250},{"type":3079,"url":5252},[3517,5254],{"id":292,"slug":7993,"dossier":45,"summary":7994,"aliases":7995,"sourceIds":7998,"published":7999,"modified":8000,"checkedAt":7,"severity":8001,"references":8003,"versionKeys":8015,"packageCount":32,"repositoryCount":32},"ghsa-pq5p-34cr-23v9-127ea2b8","Authlib is vulnerable to Denial of Service via Oversized JOSE Segments",[7996,7997],"CVE-2025-61920","PYSEC-2026-1203",[292,7997],"2025-10-10T20:26:43Z","2026-07-07T17:56:17.886883361Z",[8002],{"type":3072,"score":3216},[8004,8006,8008,8010,8011,8012,8013],{"type":3079,"url":8005},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",{"type":3082,"url":8007},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61920",{"type":3079,"url":8009},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F867e3f87b072347a1ae9cf6983cc8bbf88447e5e",{"type":3089,"url":4823},{"type":3079,"url":6448},{"type":3089,"url":6246},{"type":3082,"url":8014},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq5p-34cr-23v9",[4827],{"id":293,"slug":8017,"dossier":45,"summary":8018,"aliases":8019,"sourceIds":8022,"published":8023,"modified":8024,"checkedAt":7,"severity":8025,"references":8027,"versionKeys":8039,"packageCount":32,"repositoryCount":372},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[8020,8021],"CVE-2025-50181","PYSEC-2026-1999",[293,8021],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[8026],{"type":3072,"score":3761},[8028,8030,8032,8034,8035,8036,8037],{"type":3079,"url":8029},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":3082,"url":8031},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":3117,"url":8033},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":3089,"url":3415},{"type":3079,"url":3771},{"type":3089,"url":3417},{"type":3082,"url":8038},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[3421,3422,3423,3424],{"id":294,"slug":8041,"dossier":45,"summary":8042,"aliases":8043,"sourceIds":8046,"published":8047,"modified":8048,"checkedAt":7,"severity":8049,"references":8052,"versionKeys":8063,"packageCount":32,"repositoryCount":671},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[8044,8045],"CVE-2025-67724","PYSEC-2025-265",[294,8045],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[8050,8051],{"type":3072,"score":4865},{"type":3072,"score":4160},[8053,8055,8057,8059,8061,8062],{"type":3082,"url":8054},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":3082,"url":8056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":3117,"url":8058},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":3079,"url":8060},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":3089,"url":3612},{"type":3082,"url":5901},[3620,3621,3622],{"id":295,"slug":8065,"dossier":45,"summary":8066,"aliases":8067,"sourceIds":8068,"published":8069,"modified":8070,"checkedAt":7,"severity":8071,"references":8074,"versionKeys":8078,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[295],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[8072],{"type":3072,"score":8073},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8075,8077],{"type":3079,"url":8076},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":3089,"url":3612},[3620,3621,3622,3623,3624],{"id":296,"slug":8080,"dossier":89,"summary":8081,"aliases":8082,"sourceIds":8086,"published":8087,"modified":8088,"checkedAt":7,"severity":8089,"references":8093,"versionKeys":8105,"packageCount":32,"repositoryCount":3426},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[8083,8084,8085],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[296,8085],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[8090,8091],{"type":3075,"score":5915},{"type":3072,"score":8092},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[8094,8095,8097,8099,8101,8103,8104],{"type":3079,"url":5919},{"type":3117,"url":8096},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":3082,"url":8098},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":3117,"url":8100},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":3117,"url":8102},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":3089,"url":3674},{"type":3082,"url":4425},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":297,"slug":8107,"dossier":45,"summary":8108,"aliases":8109,"sourceIds":8112,"published":8113,"modified":8114,"checkedAt":7,"severity":8115,"references":8118,"versionKeys":8133,"packageCount":32,"repositoryCount":32},"ghsa-q25c-c977-4cmh-8e74e348","Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever",[8110,8111],"CVE-2024-3095","PYSEC-2026-1516",[297,8111],"2024-06-06T21:30:36Z","2026-07-07T17:57:27.127785500Z",[8116],{"type":3072,"score":8117},"CVSS:3.0\u002FAV:P\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[8119,8121,8123,8125,8126,8128,8130,8131],{"type":3082,"url":8120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-3095",{"type":3079,"url":8122},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F24451",{"type":3079,"url":8124},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F604dfe2d99246b0c09f047c604f0c63eafba31e7",{"type":3089,"url":3253},{"type":3079,"url":8127},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-community%3D%3D0.2.9",{"type":3079,"url":8129},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe62d4895-2901-405b-9559-38276b6a5273",{"type":3089,"url":7871},{"type":3082,"url":8132},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q25c-c977-4cmh",[3713],{"id":298,"slug":8135,"dossier":45,"summary":8136,"aliases":8137,"sourceIds":8140,"published":8141,"modified":8142,"checkedAt":7,"severity":8143,"references":8146,"versionKeys":8159,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[8138,8139],"CVE-2024-56326","PYSEC-2026-1475",[298,8139],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[8144,8145],{"type":3072,"score":6123},{"type":3075,"score":5993},[8147,8149,8151,8153,8154,8155,8156,8157],{"type":3079,"url":8148},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":3082,"url":8150},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":3117,"url":8152},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":3089,"url":6002},{"type":3079,"url":6744},{"type":3079,"url":6004},{"type":3089,"url":6008},{"type":3082,"url":8158},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[6012],{"id":299,"slug":8161,"dossier":89,"summary":8162,"aliases":8163,"sourceIds":8166,"published":8167,"modified":8168,"checkedAt":7,"severity":8169,"references":8173,"versionKeys":8179,"packageCount":32,"repositoryCount":577},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[8164,8165],"CVE-2026-44431","PYSEC-2026-141",[299,8165],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[8170,8171],{"type":3072,"score":5453},{"type":3075,"score":8172},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8174,8176,8178],{"type":3082,"url":8175},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":3082,"url":8177},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":3089,"url":3415},[3421,3422,3423,3424,3425,7621],{"id":300,"slug":8181,"dossier":45,"summary":8182,"aliases":8183,"sourceIds":8186,"published":8187,"modified":8188,"checkedAt":7,"severity":8189,"references":8192,"versionKeys":8207,"packageCount":32,"repositoryCount":32},"ghsa-qcq2-496w-v96p-f873dd58","Mistune: Potential DoS via quadratic-time parsing in parse_link_text",[8184,8185],"CVE-2026-49851","PYSEC-2026-2652",[300,8185],"2026-07-09T23:52:27Z","2026-07-23T05:15:25.338180329Z",[8190,8191],{"type":3072,"score":3216},{"type":3075,"score":4186},[8193,8195,8197,8199,8201,8202,8204,8205],{"type":3079,"url":8194},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",{"type":3082,"url":8196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49851",{"type":3079,"url":8198},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49851",{"type":3079,"url":8200},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492304",{"type":3089,"url":3284},{"type":3079,"url":8203},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49851.json",{"type":3089,"url":5318},{"type":3082,"url":8206},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",[3290],{"id":301,"slug":8209,"dossier":45,"summary":8210,"aliases":8211,"sourceIds":8214,"published":8215,"modified":8216,"checkedAt":7,"severity":8217,"references":8219,"versionKeys":8229,"packageCount":32,"repositoryCount":32},"ghsa-qfrw-5rxm-mhh2-586619d0","Mistune renderers\u002Fhtml.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution",[8212,8213],"CVE-2026-59929","PYSEC-2026-2217",[301,8213],"2026-07-08T17:17:28.737Z","2026-07-20T21:46:41.246867209Z",[8218],{"type":3072,"score":4160},[8220,8222,8224,8225,8226,8227],{"type":3277,"url":8221},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qfrw-5rxm-mhh2",{"type":3082,"url":8223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59929",{"type":3117,"url":5272},{"type":3089,"url":3284},{"type":3082,"url":3286},{"type":3079,"url":8228},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2217.yaml",[3290],{"id":302,"slug":8231,"dossier":45,"summary":8232,"aliases":8233,"sourceIds":8236,"published":8237,"modified":8238,"checkedAt":7,"severity":8239,"references":8241,"versionKeys":8260,"packageCount":32,"repositoryCount":401},"ghsa-qh6h-p6c9-ff54-caf42ff5","LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions",[8234,8235],"CVE-2026-34070","PYSEC-2026-2193",[302,8235],"2026-03-27T19:45:00Z","2026-07-13T07:26:33.913236655Z",[8240],{"type":3072,"score":4595},[8242,8244,8246,8248,8249,8251,8253,8255,8257,8258],{"type":3277,"url":8243},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-qh6h-p6c9-ff54",{"type":3082,"url":8245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34070",{"type":3117,"url":8247},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F27add913474e01e33bededf4096151130ba0d47c",{"type":3089,"url":3253},{"type":3082,"url":8250},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core==1.2.22",{"type":3079,"url":8252},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34070",{"type":3079,"url":8254},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34070.json",{"type":3082,"url":8256},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24766",{"type":3082,"url":3744},{"type":3154,"url":8259},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453287",[3261,3262],{"id":303,"slug":8262,"dossier":45,"summary":8263,"aliases":8264,"sourceIds":8267,"published":8268,"modified":8269,"checkedAt":7,"severity":8270,"references":8274,"versionKeys":8282,"packageCount":32,"repositoryCount":32},"ghsa-qh7q-6qm3-653w-ce7f1a0b","Jupyter Server has an open redirection vulnerability in `next` query parameter",[8265,8266],"CVE-2025-61669","PYSEC-2026-67",[303,8266],"2026-05-05T16:16:10.133Z","2026-06-05T18:00:15.359519984Z",[8271,8273],{"type":3075,"score":8272},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",{"type":3072,"score":4160},[8275,8277,8279,8280],{"type":3277,"url":8276},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-qh7q-6qm3-653w",{"type":3082,"url":8278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61669",{"type":3089,"url":3161},{"type":3079,"url":8281},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjupyter-server\u002FPYSEC-2026-67.yaml",[3169],{"id":304,"slug":8284,"dossier":45,"summary":8285,"aliases":8286,"sourceIds":8289,"published":8290,"modified":8291,"checkedAt":7,"severity":8292,"references":8295,"versionKeys":8308,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[8287,8288],"CVE-2026-31958","PYSEC-2026-140",[304,8288],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[8293,8294],{"type":3072,"score":3216},{"type":3075,"score":4186},[8296,8298,8300,8302,8304,8305,8306],{"type":3082,"url":8297},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":3082,"url":8299},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":3079,"url":8301},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":3079,"url":8303},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":3089,"url":3612},{"type":3079,"url":4876},{"type":3079,"url":8307},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[3620,3621,3622,3623],{"id":305,"slug":8310,"dossier":45,"summary":8311,"aliases":8312,"sourceIds":8315,"published":8316,"modified":8317,"checkedAt":7,"severity":8318,"references":8321,"versionKeys":8336,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[8313,8314],"CVE-2026-22701","PYSEC-2026-1374",[305,8314],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[8319],{"type":3072,"score":8320},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8322,8324,8326,8328,8330,8332,8334],{"type":3079,"url":8323},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":3082,"url":8325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":3079,"url":8327},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":3079,"url":8329},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":3089,"url":8331},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":3089,"url":8333},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":3082,"url":8335},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[8337,8338,8339,8340],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":306,"slug":8342,"dossier":45,"summary":8343,"aliases":8344,"sourceIds":8347,"published":8348,"modified":8349,"checkedAt":7,"severity":8350,"references":8352,"versionKeys":8365,"packageCount":32,"repositoryCount":32},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[8345,8346],"CVE-2026-33123","PYSEC-2026-3023",[306,8346],"2026-03-18T16:17:31Z","2026-07-13T16:43:25.259140299Z",[8351],{"type":3075,"score":3076},[8353,8355,8357,8359,8360,8362,8363],{"type":3079,"url":8354},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":3082,"url":8356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":3079,"url":8358},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":3089,"url":3090},{"type":3079,"url":8361},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":3089,"url":3094},{"type":3082,"url":8364},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[3098],{"id":307,"slug":8367,"dossier":45,"summary":8368,"aliases":8369,"sourceIds":8371,"published":8372,"modified":8373,"checkedAt":7,"severity":8374,"references":8377,"versionKeys":8381,"packageCount":32,"repositoryCount":103},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[8370],"CVE-2026-12075",[307],"2026-07-31T16:51:29Z","2026-07-31T17:00:21.024112203Z",[8375],{"type":3072,"score":8376},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[8378,8380],{"type":3079,"url":8379},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3089,"url":3734},[3748,3749],{"id":308,"slug":8383,"dossier":45,"summary":8384,"aliases":8385,"sourceIds":8388,"published":8389,"modified":8390,"checkedAt":7,"severity":8391,"references":8393,"versionKeys":8403,"packageCount":32,"repositoryCount":32},"ghsa-r4rv-85jg-w4mf-c97959dd","Mistune: Arbitrary File Read via Include directive path traversal",[8386,8387],"CVE-2026-59924","PYSEC-2026-2212",[308,8387],"2026-07-08T17:17:28.050Z","2026-07-20T21:46:41.298212805Z",[8392],{"type":3072,"score":8073},[8394,8396,8398,8399,8400,8401],{"type":3277,"url":8395},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-r4rv-85jg-w4mf",{"type":3082,"url":8397},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59924",{"type":3117,"url":5339},{"type":3089,"url":3284},{"type":3082,"url":3286},{"type":3079,"url":8402},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2212.yaml",[3290],{"id":309,"slug":8405,"dossier":45,"summary":8406,"aliases":8407,"sourceIds":8410,"published":8411,"modified":8412,"checkedAt":7,"severity":8413,"references":8417,"versionKeys":8455,"packageCount":32,"repositoryCount":372},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[8408,8409],"CVE-2026-26007","PYSEC-2026-2141",[309,8409],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[8414,8416],{"type":3075,"score":8415},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":3072,"score":5072},[8418,8420,8422,8424,8425,8427,8429,8431,8432,8434,8436,8438,8440,8442,8444,8446,8448,8450,8452,8454],{"type":3079,"url":8419},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":3082,"url":8421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":3079,"url":8423},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":3089,"url":4067},{"type":3079,"url":8426},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":3079,"url":8428},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":3079,"url":8430},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":3082,"url":3740},{"type":3082,"url":8433},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":3082,"url":8435},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":3082,"url":8437},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":3082,"url":8439},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":3082,"url":8441},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":3082,"url":8443},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":3082,"url":8445},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":3082,"url":8447},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":3082,"url":8449},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":3082,"url":8451},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":3082,"url":8453},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":3082,"url":5954},[4071,4072,4073,4074,4075,4076],{"id":310,"slug":8457,"dossier":45,"summary":8458,"aliases":8459,"sourceIds":8463,"published":8464,"modified":8465,"checkedAt":7,"severity":8466,"references":8469,"versionKeys":8483,"packageCount":32,"repositoryCount":3426},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[8460,8461,8462],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[310,8462],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[8467,8468],{"type":3072,"score":4416},{"type":3075,"score":3076},[8470,8472,8474,8476,8478,8479,8480,8481],{"type":3079,"url":8471},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":3082,"url":8473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":3079,"url":8475},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":3079,"url":8477},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":3089,"url":3674},{"type":3079,"url":4425},{"type":3089,"url":4453},{"type":3082,"url":8482},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[3678,3679,3680,3681,3682,3683,3684,3685],{"id":311,"slug":8485,"dossier":45,"summary":8486,"aliases":8487,"sourceIds":8490,"published":8491,"modified":8492,"checkedAt":7,"severity":8493,"references":8496,"versionKeys":8504,"packageCount":32,"repositoryCount":103},"ghsa-r7w7-9xr2-qq2r-7a3a0a91","langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding",[8488,8489],"CVE-2026-41488","PYSEC-2026-76",[311,8489],"2026-04-16T23:00:12Z","2026-06-06T01:15:07.912179267Z",[8494],{"type":3072,"score":8495},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[8497,8499,8501,8502],{"type":3082,"url":8498},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-r7w7-9xr2-qq2r",{"type":3082,"url":8500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41488",{"type":3089,"url":3253},{"type":3079,"url":8503},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flangchain-openai\u002FPYSEC-2026-76.yaml",[8505,8506,8507],"pypi:langchain-openai@0.2.8","pypi:langchain-openai@1.1.7","pypi:langchain-openai@1.1.9",{"id":312,"slug":8509,"dossier":45,"summary":8510,"aliases":8511,"sourceIds":8514,"published":8515,"modified":8516,"checkedAt":7,"severity":8517,"references":8519,"versionKeys":8531,"packageCount":32,"repositoryCount":32},"ghsa-r95x-qfjj-fjj2-df4fdb80","Authlib OIDC Implicit\u002FHybrid Authorization Vulnerable to Open Redirect",[8512,8513],"CVE-2026-44681","PYSEC-2026-188",[312,8513],"2026-05-13T01:36:03Z","2026-06-09T00:00:25.468861825Z",[8518],{"type":3072,"score":4160},[8520,8522,8524,8525,8527,8529],{"type":3277,"url":8521},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-r95x-qfjj-fjj2",{"type":3082,"url":8523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44681",{"type":3089,"url":4823},{"type":3079,"url":8526},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.6.12",{"type":3079,"url":8528},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Freleases\u002Ftag\u002Fv1.7.1",{"type":3079,"url":8530},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-188.yaml",[4827],{"id":313,"slug":8533,"dossier":45,"summary":8534,"aliases":8535,"sourceIds":8542,"published":8543,"modified":8544,"checkedAt":7,"severity":8545,"references":8548,"versionKeys":8561,"packageCount":401,"repositoryCount":32},"ghsa-rch3-82jr-f9w9-c220441f","Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS",[8536,8537,8538,8539,8540,8541],"BIT-jupyter-base-notebook-2026-40171","BIT-jupyter-notebook-2026-40171","BIT-jupyterlab-2026-40171","CVE-2026-40171","PYSEC-2026-2538","PYSEC-2026-2682",[313,8540,8541],"2026-04-30T17:25:47Z","2026-07-13T16:42:47.886298772Z",[8546],{"type":3075,"score":8547},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8549,8551,8553,8555,8557,8558,8560],{"type":3079,"url":8550},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnotebook\u002Fsecurity\u002Fadvisories\u002FGHSA-rch3-82jr-f9w9",{"type":3082,"url":8552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40171",{"type":3089,"url":8554},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnotebook",{"type":3079,"url":8556},"https:\u002F\u002Fjupyterlab.readthedocs.io\u002Fen\u002Flatest\u002Fuser\u002Fcommands.html#commands-in-markdown-output-and-files",{"type":3089,"url":5742},{"type":3082,"url":8559},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rch3-82jr-f9w9",{"type":3089,"url":7727},[3517,5746],{"id":314,"slug":8563,"dossier":45,"summary":8564,"aliases":8565,"sourceIds":8566,"published":8567,"modified":8568,"checkedAt":7,"severity":8569,"references":8571,"versionKeys":8575,"packageCount":32,"repositoryCount":103},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[],[314],"2026-03-18T20:17:43Z","2026-03-25T23:29:13.324989Z",[8570],{"type":3075,"score":3076},[8572,8574],{"type":3079,"url":8573},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":3089,"url":3734},[3748,3749],{"id":315,"slug":8577,"dossier":45,"summary":8578,"aliases":8579,"sourceIds":8582,"published":8583,"modified":8584,"checkedAt":7,"severity":8585,"references":8587,"versionKeys":8596,"packageCount":32,"repositoryCount":32},"ghsa-rr7j-v2q5-chgv-a773969e","LangSmith SDK: Streaming token events bypass output redaction",[8580,8581],"CVE-2026-41182","PYSEC-2026-2583",[315,8581],"2026-04-16T01:20:37Z","2026-07-13T16:43:37.566182133Z",[8586],{"type":3072,"score":5453},[8588,8590,8592,8593,8594],{"type":3079,"url":8589},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",{"type":3082,"url":8591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41182",{"type":3089,"url":3474},{"type":3089,"url":3482},{"type":3082,"url":8595},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rr7j-v2q5-chgv",[3487],{"id":316,"slug":8598,"dossier":45,"summary":8599,"aliases":8600,"sourceIds":8603,"published":8604,"modified":8605,"checkedAt":7,"severity":8606,"references":8609,"versionKeys":8618,"packageCount":32,"repositoryCount":32},"ghsa-v42x-x7jp-845h-25baa2bb","jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used",[8601,8602],"CVE-2026-6657","PYSEC-2026-3472",[316,8602],"2026-06-03T18:33:10Z","2026-07-23T15:11:47.231076569Z",[8607],{"type":3072,"score":8608},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[8610,8612,8613,8615,8616],{"type":3082,"url":8611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6657",{"type":3089,"url":3161},{"type":3079,"url":8614},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F18f642db-3569-43b3-b58d-ff97be4b09d7",{"type":3089,"url":6196},{"type":3082,"url":8617},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v42x-x7jp-845h",[3169],{"id":317,"slug":8620,"dossier":45,"summary":8621,"aliases":8622,"sourceIds":8625,"published":8626,"modified":8627,"checkedAt":7,"severity":8628,"references":8630,"versionKeys":8637,"packageCount":32,"repositoryCount":32},"ghsa-v87v-83h2-53w7-36afb5ef","Mistune Heading ID Attribute has Injection XSS",[8623,8624],"CVE-2026-44897","PYSEC-2026-2207",[317,8624],"2026-05-09T00:13:12Z","2026-07-13T07:26:47.040339656Z",[8629],{"type":3072,"score":4160},[8631,8633,8635,8636],{"type":3277,"url":8632},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-v87v-83h2-53w7",{"type":3082,"url":8634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44897",{"type":3089,"url":3284},{"type":3082,"url":5296},[3290],{"id":318,"slug":8639,"dossier":45,"summary":8640,"aliases":8641,"sourceIds":8644,"published":8645,"modified":8646,"checkedAt":7,"severity":8647,"references":8649,"versionKeys":8658,"packageCount":32,"repositoryCount":671},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[8642,8643],"CVE-2026-53540","PYSEC-2026-3040",[318,8643],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[8648],{"type":3072,"score":3244},[8650,8652,8653,8654,8656],{"type":3079,"url":8651},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3089,"url":4195},{"type":3089,"url":4197},{"type":3082,"url":8655},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3082,"url":8657},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[4356,4357,4201],{"id":319,"slug":8660,"dossier":45,"summary":8661,"aliases":8662,"sourceIds":8665,"published":8666,"modified":8667,"checkedAt":7,"severity":8668,"references":8670,"versionKeys":8681,"packageCount":32,"repositoryCount":671},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[8663,8664],"CVE-2026-53537","PYSEC-2026-3041",[319,8664],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[8669],{"type":3072,"score":4679},[8671,8673,8675,8676,8678,8680],{"type":3079,"url":8672},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3082,"url":8674},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":3089,"url":4195},{"type":3082,"url":8677},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3079,"url":8679},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":3089,"url":4197},[4356,4357,4201],{"id":320,"slug":8683,"dossier":45,"summary":8684,"aliases":8685,"sourceIds":8688,"published":8689,"modified":8690,"checkedAt":7,"severity":8691,"references":8693,"versionKeys":8706,"packageCount":32,"repositoryCount":671},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[8686,8687],"CVE-2026-41066","PYSEC-2026-87",[320,8687],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[8692],{"type":3072,"score":4595},[8694,8696,8698,8700,8702,8704],{"type":3082,"url":8695},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":3082,"url":8697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3154,"url":8699},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":3089,"url":8701},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":3079,"url":8703},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":3079,"url":8705},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[8707,8708,8709],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":321,"slug":8711,"dossier":45,"summary":8712,"aliases":8713,"sourceIds":8716,"published":8717,"modified":8718,"checkedAt":7,"severity":8719,"references":8721,"versionKeys":8736,"packageCount":32,"repositoryCount":401},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[8714,8715],"CVE-2026-59950","PYSEC-2026-3483",[321,8715],"2026-07-16T20:14:34Z","2026-07-23T15:11:47.407353087Z",[8720],{"type":3075,"score":5581},[8722,8724,8726,8728,8730,8731,8733,8734],{"type":3079,"url":8723},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":3082,"url":8725},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":3079,"url":8727},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":3079,"url":8729},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":3089,"url":5592},{"type":3079,"url":8732},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":3089,"url":5596},{"type":3082,"url":8735},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[5598,5599],{"id":322,"slug":8738,"dossier":45,"summary":8739,"aliases":8740,"sourceIds":8744,"published":8745,"modified":8746,"checkedAt":7,"severity":8747,"references":8749,"versionKeys":8763,"packageCount":32,"repositoryCount":3426},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[8741,8742,8743],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[322,8743],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[8748],{"type":3075,"score":4186},[8750,8752,8754,8756,8758,8759,8760,8761],{"type":3079,"url":8751},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":3082,"url":8753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":3079,"url":8755},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":3079,"url":8757},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":3089,"url":3674},{"type":3079,"url":4451},{"type":3089,"url":4453},{"type":3082,"url":8762},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[3678,3679,3680,3681,3682,3683,3684,3685],{"id":323,"slug":8765,"dossier":45,"summary":8766,"aliases":8767,"sourceIds":8768,"published":8769,"modified":8770,"checkedAt":7,"severity":8771,"references":8774,"versionKeys":8784,"packageCount":32,"repositoryCount":32},"ghsa-vmhf-c436-hxj4-2356488f","JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol",[],[323],"2026-06-19T15:11:17Z","2026-06-22T18:29:21.418806301Z",[8772],{"type":3075,"score":8773},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[8775,8777,8779,8781,8782],{"type":3079,"url":8776},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-vmhf-c436-hxj4",{"type":3079,"url":8778},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F4e61e07d0a91145b53fbf96ac74b0387f6bc51f6",{"type":3079,"url":8780},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002Fd5d961f6e10a6442dddbf94d9a976b3897055a12",{"type":3089,"url":3507},{"type":3079,"url":8783},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Freleases\u002Ftag\u002Fv4.5.9",[3517],{"id":324,"slug":8786,"dossier":45,"summary":8787,"aliases":8788,"sourceIds":8791,"published":8792,"modified":8793,"checkedAt":7,"severity":8794,"references":8797,"versionKeys":8810,"packageCount":32,"repositoryCount":103},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[8789,8790],"CVE-2025-43859","PYSEC-2026-348",[324,8790],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[8795],{"type":3072,"score":8796},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[8798,8800,8802,8804,8806,8808],{"type":3079,"url":8799},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":3082,"url":8801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":3079,"url":8803},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":3089,"url":8805},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":3089,"url":8807},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":3082,"url":8809},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[8811],"pypi:h11@0.14.0",{"id":325,"slug":8813,"dossier":45,"summary":8814,"aliases":8815,"sourceIds":8818,"published":8819,"modified":8820,"checkedAt":7,"severity":8821,"references":8823,"versionKeys":8837,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[8816,8817],"CVE-2025-62707","PYSEC-2026-1833",[325,8817],"2025-10-22T19:40:47Z","2026-07-07T17:56:08.279731969Z",[8822],{"type":3075,"score":3837},[8824,8826,8828,8830,8832,8833,8834,8835],{"type":3079,"url":8825},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":3082,"url":8827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":3079,"url":8829},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":3079,"url":8831},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":3089,"url":3090},{"type":3079,"url":7121},{"type":3089,"url":3094},{"type":3082,"url":8836},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[3098],{"id":326,"slug":8839,"dossier":45,"summary":8840,"aliases":8841,"sourceIds":8845,"published":8846,"modified":8847,"checkedAt":7,"severity":8848,"references":8851,"versionKeys":8862,"packageCount":32,"repositoryCount":32},"ghsa-vvfj-2jqx-52jm-5fd8a3bd","JupyterLab LaTeX typesetter links did not enforce `noopener` attribute",[8842,8843,8844],"BIT-jupyterlab-2025-59842","CVE-2025-59842","PYSEC-2026-1482",[326,8844],"2025-09-26T14:26:40Z","2026-07-07T17:57:38.072715082Z",[8849],{"type":3075,"score":8850},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8852,8854,8856,8858,8859,8860],{"type":3079,"url":8853},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-vvfj-2jqx-52jm",{"type":3082,"url":8855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59842",{"type":3079,"url":8857},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fcommit\u002F88ef373039a8cc09f27d3814382a512d9033675c",{"type":3089,"url":3507},{"type":3089,"url":5742},{"type":3082,"url":8861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvfj-2jqx-52jm",[3517],{"id":327,"slug":8864,"dossier":45,"summary":8865,"aliases":8866,"sourceIds":8869,"published":8870,"modified":8871,"checkedAt":7,"severity":8872,"references":8876,"versionKeys":8885,"packageCount":32,"repositoryCount":605},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[8867,8868],"CVE-2026-22815","PYSEC-2026-2094",[327,8868],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[8873,8874],{"type":3075,"score":3556},{"type":3075,"score":8875},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8877,8879,8881,8883,8884],{"type":3117,"url":8878},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":3082,"url":8880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":3117,"url":8882},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":3089,"url":3221},{"type":3082,"url":3367},[3225,3226,3227,3228,3229,3230,3231,3232],{"id":328,"slug":8887,"dossier":45,"summary":8888,"aliases":8889,"sourceIds":8893,"published":8894,"modified":8895,"checkedAt":7,"severity":8896,"references":8900,"versionKeys":8916,"packageCount":401,"repositoryCount":401},"ghsa-w39p-vh2g-g8g5-47880dfe","LangGraph SDK has unsafe URL path construction",[8890,8891,8892],"CVE-2026-48776","PYSEC-2026-2194","PYSEC-2026-2575",[328,8891,8892],"2026-06-17T10:55:15.113Z","2026-07-21T15:15:50.659527533Z",[8897,8899],{"type":3072,"score":8898},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3072,"score":8796},[8901,8903,8905,8907,8908,8910,8912,8914],{"type":3079,"url":8902},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":3082,"url":8904},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48776",{"type":3082,"url":8906},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":3089,"url":6355},{"type":3079,"url":8909},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Freleases\u002Ftag\u002Fsdk%3D%3D0.3.15",{"type":3079,"url":8911},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph-sdk\u002FPYSEC-2026-2575.yaml",{"type":3079,"url":8913},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-2194.yaml",{"type":3089,"url":8915},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-sdk",[8917,6424],"pypi:langgraph-sdk@0.3.3",{"id":329,"slug":8919,"dossier":45,"summary":8920,"aliases":8921,"sourceIds":8924,"published":8925,"modified":8926,"checkedAt":7,"severity":8927,"references":8929,"versionKeys":8937,"packageCount":32,"repositoryCount":401},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[8922,8923],"CVE-2026-48525","PYSEC-2026-178",[329,8923],"2026-05-28T16:16:29.533Z","2026-06-16T15:44:21.139278330Z",[8928],{"type":3072,"score":3181},[8930,8932,8934,8935],{"type":3277,"url":8931},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":3082,"url":8933},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":3089,"url":4845},{"type":3079,"url":8936},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[4851,4852],{"id":330,"slug":8939,"dossier":45,"summary":8940,"aliases":8941,"sourceIds":8944,"published":8945,"modified":8946,"checkedAt":7,"severity":8947,"references":8950,"versionKeys":8967,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[8942,8943],"CVE-2025-68146","PYSEC-2026-1375",[330,8943],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[8948],{"type":3072,"score":8949},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8951,8953,8955,8956,8958,8960,8962,8963,8965],{"type":3079,"url":8952},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3079,"url":8954},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":3089,"url":8331},{"type":3079,"url":8957},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":3079,"url":8959},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":3079,"url":8961},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":3089,"url":8333},{"type":3082,"url":8964},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3082,"url":8966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[8337,8338,8339,8340],{"id":331,"slug":8969,"dossier":45,"summary":8970,"aliases":8971,"sourceIds":8974,"published":8975,"modified":8976,"checkedAt":7,"severity":8977,"references":8979,"versionKeys":8989,"packageCount":32,"repositoryCount":32},"ghsa-w8p2-r796-3vmq-0e5f6b4f","Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type",[8972,8973],"CVE-2026-41479","PYSEC-2026-2119",[331,8973],"2026-06-08T17:52:04Z","2026-07-18T17:30:29.215396840Z",[8978],{"type":3072,"score":4865},[8980,8982,8984,8986,8987],{"type":3277,"url":8981},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-w8p2-r796-3vmq",{"type":3082,"url":8983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41479",{"type":3117,"url":8985},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002F3be08468201a7766a93012ce149ea12822cab096",{"type":3089,"url":4823},{"type":3079,"url":8988},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fauthlib\u002FPYSEC-2026-2119.yaml",[4827],{"id":332,"slug":8991,"dossier":45,"summary":8992,"aliases":8993,"sourceIds":8996,"published":8997,"modified":8998,"checkedAt":7,"severity":8999,"references":9002,"versionKeys":9018,"packageCount":32,"repositoryCount":32},"ghsa-wf5f-4jwr-ppcp-6aafc086","Arbitrary Code Execution in pdfminer.six via Crafted PDF Input",[8994,8995],"CVE-2025-64512","PYSEC-2026-1762",[332,8995],"2025-11-07T20:52:24Z","2026-07-07T17:56:32.052583560Z",[9000],{"type":3072,"score":9001},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9003,9005,9007,9008,9009,9011,9013,9015,9016],{"type":3079,"url":9004},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",{"type":3082,"url":9006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64512",{"type":3079,"url":6130},{"type":3089,"url":6132},{"type":3079,"url":9010},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Freleases\u002Ftag\u002F20251107",{"type":3079,"url":9012},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F11\u002Fmsg00017.html",{"type":3079,"url":9014},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00005.html",{"type":3089,"url":6134},{"type":3082,"url":9017},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",[6138],{"id":333,"slug":9020,"dossier":45,"summary":9021,"aliases":9022,"sourceIds":9025,"published":9026,"modified":9027,"checkedAt":7,"severity":9028,"references":9030,"versionKeys":9044,"packageCount":32,"repositoryCount":32},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[9023,9024],"CVE-2026-27025","PYSEC-2026-3024",[333,9024],"2026-02-18T22:41:13Z","2026-07-13T16:43:04.734501329Z",[9029],{"type":3075,"score":4039},[9031,9033,9035,9037,9039,9040,9041,9042],{"type":3079,"url":9032},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":3082,"url":9034},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":3079,"url":9036},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":3079,"url":9038},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":3089,"url":3090},{"type":3079,"url":5565},{"type":3089,"url":3094},{"type":3082,"url":9043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[3098],{"id":334,"slug":9046,"dossier":45,"summary":9047,"aliases":9048,"sourceIds":9052,"published":9053,"modified":9054,"checkedAt":7,"severity":9055,"references":9058,"versionKeys":9096,"packageCount":32,"repositoryCount":3426},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[9049,9050,9051],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[334,9051],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[9056,9057],{"type":3072,"score":3216},{"type":3075,"score":4186},[9059,9061,9063,9065,9067,9068,9070,9072,9074,9076,9078,9080,9081,9083,9085,9087,9088,9090,9092,9094],{"type":3079,"url":9060},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":3082,"url":9062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":3079,"url":9064},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":3079,"url":9066},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":3089,"url":3674},{"type":3079,"url":9069},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":3079,"url":9071},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":3079,"url":9073},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":3082,"url":9075},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":3082,"url":9077},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":3082,"url":9079},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":3082,"url":5941},{"type":3082,"url":9082},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":3082,"url":9084},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":3082,"url":9086},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":3082,"url":3742},{"type":3082,"url":9089},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":3082,"url":9091},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":3082,"url":9093},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":3082,"url":9095},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[3678,3679,3680,3681,3682,3683,3684,3685],{"id":335,"slug":9098,"dossier":45,"summary":9099,"aliases":9100,"sourceIds":9101,"published":9102,"modified":9103,"checkedAt":7,"severity":9104,"references":9107,"versionKeys":9118,"packageCount":32,"repositoryCount":401},"ghsa-whvh-wf3x-g77j-38e6ead5","JupyterLab: Allowlist\u002Fblocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)",[],[335],"2026-07-22T23:12:22Z","2026-07-22T23:15:29.688424393Z",[9105],{"type":3072,"score":9106},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",[9108,9110,9111,9112,9113,9114,9115,9116,9117],{"type":3079,"url":9109},"https:\u002F\u002Fgithub.com\u002Fjupyterlab\u002Fjupyterlab\u002Fsecurity\u002Fadvisories\u002FGHSA-whvh-wf3x-g77j",{"type":3079,"url":5239},{"type":3079,"url":5241},{"type":3079,"url":5243},{"type":3079,"url":5245},{"type":3079,"url":5247},{"type":3089,"url":3507},{"type":3079,"url":5250},{"type":3079,"url":5252},[3517,5254],{"id":336,"slug":9120,"dossier":45,"summary":9121,"aliases":9122,"sourceIds":9125,"published":9126,"modified":9127,"checkedAt":7,"severity":9128,"references":9130,"versionKeys":9143,"packageCount":32,"repositoryCount":32},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[9123,9124],"CVE-2026-48735","PYSEC-2026-3025",[336,9124],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[9129],{"type":3075,"score":4039},[9131,9133,9135,9137,9138,9140,9141],{"type":3079,"url":9132},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":3082,"url":9134},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":3079,"url":9136},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":3089,"url":3090},{"type":3079,"url":9139},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":3089,"url":3094},{"type":3082,"url":9142},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[3098],{"id":337,"slug":9145,"dossier":45,"summary":9146,"aliases":9147,"sourceIds":9151,"published":9152,"modified":9153,"checkedAt":7,"severity":9154,"references":9157,"versionKeys":9166,"packageCount":32,"repositoryCount":3426},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[9148,9149,9150],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[337,9150],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[9155,9156],{"type":3072,"score":4416},{"type":3075,"score":3076},[9158,9160,9162,9164,9165],{"type":3082,"url":9159},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":3082,"url":9161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":3079,"url":9163},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":3089,"url":3674},{"type":3082,"url":4425},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":338,"slug":9168,"dossier":45,"summary":9169,"aliases":9170,"sourceIds":9173,"published":9174,"modified":9175,"checkedAt":7,"severity":9176,"references":9179,"versionKeys":9192,"packageCount":32,"repositoryCount":671},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[9171,9172],"CVE-2026-24486","PYSEC-2026-1852",[338,9172],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[9177],{"type":3072,"score":9178},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[9180,9182,9184,9186,9187,9189,9190],{"type":3079,"url":9181},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":3082,"url":9183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":3079,"url":9185},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":3089,"url":4195},{"type":3079,"url":9188},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":3089,"url":4197},{"type":3082,"url":9191},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[4356,4357,4201],{"id":339,"slug":9194,"dossier":45,"summary":9195,"aliases":9196,"sourceIds":9199,"published":9200,"modified":9201,"checkedAt":7,"severity":9202,"references":9204,"versionKeys":9226,"packageCount":32,"repositoryCount":615},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[9197,9198],"CVE-2026-48818","PYSEC-2026-2281",[339,9198],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[9203],{"type":3072,"score":4595},[9205,9207,9208,9210,9212,9214,9216,9218,9220,9222,9224],{"type":3082,"url":9206},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":3089,"url":4957},{"type":3079,"url":9209},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":3079,"url":9211},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":3082,"url":9213},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":3082,"url":9215},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":3082,"url":9217},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":3082,"url":9219},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3154,"url":9221},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":3117,"url":9223},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":3117,"url":9225},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[3200,3201,3202,4964,4965,5126,5127],{"id":340,"slug":9228,"dossier":45,"summary":9229,"aliases":9230,"sourceIds":9233,"published":9234,"modified":9235,"checkedAt":7,"severity":9236,"references":9238,"versionKeys":9250,"packageCount":32,"repositoryCount":32},"ghsa-wvwj-cvrp-7pv5-e187e76a","Authlib JWS JWK Header Injection: Signature Verification Bypass",[9231,9232],"CVE-2026-27962","PYSEC-2026-287",[340,9232],"2026-03-16T15:17:15Z","2026-07-13T16:15:15.641042659Z",[9237],{"type":3072,"score":8796},[9239,9241,9243,9245,9246,9247,9248],{"type":3079,"url":9240},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fsecurity\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",{"type":3082,"url":9242},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27962",{"type":3079,"url":9244},"https:\u002F\u002Fgithub.com\u002Fauthlib\u002Fauthlib\u002Fcommit\u002Fa5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681",{"type":3089,"url":4823},{"type":3079,"url":4825},{"type":3089,"url":6246},{"type":3082,"url":9249},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvwj-cvrp-7pv5",[4827],{"id":341,"slug":9252,"dossier":45,"summary":9253,"aliases":9254,"sourceIds":9257,"published":9258,"modified":9259,"checkedAt":7,"severity":9260,"references":9263,"versionKeys":9275,"packageCount":32,"repositoryCount":32},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[9255,9256],"CVE-2026-41314","PYSEC-2026-3026",[341,9256],"2026-04-16T21:30:25Z","2026-07-13T16:43:30.190503912Z",[9261,9262],{"type":3072,"score":3898},{"type":3075,"score":3900},[9264,9266,9268,9269,9270,9271,9272,9273],{"type":3079,"url":9265},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":3082,"url":9267},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":3079,"url":5023},{"type":3079,"url":5025},{"type":3089,"url":3090},{"type":3079,"url":3912},{"type":3089,"url":3094},{"type":3082,"url":9274},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[3098],{"id":342,"slug":9277,"dossier":45,"summary":9278,"aliases":9279,"sourceIds":9282,"published":9283,"modified":9284,"checkedAt":7,"severity":9285,"references":9287,"versionKeys":9294,"packageCount":32,"repositoryCount":615},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[9280,9281],"CVE-2026-48817","PYSEC-2026-2280",[342,9281],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[9286],{"type":3072,"score":3357},[9288,9290,9292,9293],{"type":3082,"url":9289},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":3082,"url":9291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":3089,"url":4957},{"type":3082,"url":9219},[3200,3201,3202,4964,4965,5126,5127],{"id":343,"slug":9296,"dossier":45,"summary":9297,"aliases":9298,"sourceIds":9301,"published":9302,"modified":9303,"checkedAt":7,"severity":9304,"references":9306,"versionKeys":9321,"packageCount":32,"repositoryCount":32},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[9299,9300],"CVE-2026-27888","PYSEC-2026-3027",[343,9300],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[9305],{"type":3075,"score":3837},[9307,9309,9311,9313,9315,9316,9318,9319],{"type":3079,"url":9308},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":3082,"url":9310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":3079,"url":9312},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":3079,"url":9314},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":3089,"url":3090},{"type":3079,"url":9317},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":3089,"url":3094},{"type":3082,"url":9320},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[3098],{"id":344,"slug":9323,"dossier":45,"summary":9324,"aliases":9325,"sourceIds":9328,"published":9329,"modified":9330,"checkedAt":7,"severity":9331,"references":9334,"versionKeys":9340,"packageCount":32,"repositoryCount":605},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[9326,9327],"CVE-2026-54274","PYSEC-2026-2108",[344,9327],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[9332,9333],{"type":3075,"score":3837},{"type":3072,"score":3216},[9335,9337,9338],{"type":3082,"url":9336},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":3089,"url":3221},{"type":3117,"url":9339},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[3225,3226,3227,3228,3229,3230,3231,3232],{"id":345,"slug":9342,"dossier":45,"summary":9343,"aliases":9344,"sourceIds":9348,"published":9349,"modified":9350,"checkedAt":7,"severity":9351,"references":9354,"versionKeys":9368,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[9345,9346,9347],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[345,9347],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[9352],{"type":3072,"score":9353},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[9355,9357,9359,9361,9363,9365,9366],{"type":3082,"url":9356},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":3082,"url":9358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":3079,"url":9360},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":3117,"url":9362},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":3079,"url":9364},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":3089,"url":3674},{"type":3079,"url":9367},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3681],{"id":346,"slug":9370,"dossier":45,"summary":9371,"aliases":9372,"sourceIds":9375,"published":9376,"modified":9377,"checkedAt":7,"severity":9378,"references":9381,"versionKeys":9389,"packageCount":32,"repositoryCount":401},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[9373,9374],"CVE-2026-48526","PYSEC-2026-179",[346,9374],"2026-05-28T16:16:29.657Z","2026-06-16T15:44:21.766942950Z",[9379],{"type":3072,"score":9380},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9382,9384,9386,9387],{"type":3277,"url":9383},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":3082,"url":9385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":3089,"url":4845},{"type":3079,"url":9388},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[4851,4852],{"id":347,"slug":9391,"dossier":45,"summary":9392,"aliases":9393,"sourceIds":9395,"published":9396,"modified":9397,"checkedAt":7,"severity":9398,"references":9400,"versionKeys":9404,"packageCount":32,"repositoryCount":103},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[9394],"CVE-2026-12074",[347],"2026-07-31T16:50:41Z","2026-07-31T17:00:21.729863168Z",[9399],{"type":3072,"score":4595},[9401,9403],{"type":3079,"url":9402},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3089,"url":3734},[3748,3749],{"id":348,"slug":9406,"dossier":45,"summary":9407,"aliases":9408,"sourceIds":9412,"published":9413,"modified":9414,"checkedAt":7,"severity":9415,"references":9418,"versionKeys":9429,"packageCount":32,"repositoryCount":3426},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[9409,9410,9411],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[348,9411],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[9416],{"type":3072,"score":9417},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[9419,9421,9423,9425,9427,9428],{"type":3277,"url":9420},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":3082,"url":9422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":3117,"url":9424},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":3117,"url":9426},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":3089,"url":3674},{"type":3082,"url":4451},[3678,3679,3680,3681,3682,3683,3684,3685],{"id":349,"slug":9431,"dossier":45,"summary":9432,"aliases":9433,"sourceIds":9436,"published":9437,"modified":9438,"checkedAt":7,"severity":9439,"references":9442,"versionKeys":9462,"packageCount":32,"repositoryCount":32},"ghsa-xm59-rqc7-hhvf-9413791b","nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows",[9434,9435],"CVE-2025-53000","PYSEC-2026-1691",[349,9435],"2025-12-18T22:03:08Z","2026-07-07T17:56:11.809154672Z",[9440],{"type":3075,"score":9441},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9443,9445,9447,9449,9451,9452,9454,9456,9458,9460],{"type":3079,"url":9444},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",{"type":3082,"url":9446},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53000",{"type":3079,"url":9448},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fissues\u002F2258",{"type":3079,"url":9450},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fcommit\u002Fc9ac1d1040459ed1ff9eb34e9918ce5a87cf9d71",{"type":3089,"url":3794},{"type":3079,"url":9453},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fblob\u002F4f61702f5c7524d8a3c4ac0d5fc33a6ac2fa36a7\u002Fnbconvert\u002Fpreprocessors\u002Fsvg2pdf.py#L104",{"type":3079,"url":9455},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.0",{"type":3079,"url":9457},"https:\u002F\u002Fwww.imperva.com\u002Fblog\u002Fcode-execution-in-jupyter-notebook-exports",{"type":3089,"url":9459},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnbconvert",{"type":3082,"url":9461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",[3798],{"id":351,"slug":9464,"dossier":45,"summary":82,"aliases":9465,"sourceIds":9469,"published":9470,"modified":9471,"checkedAt":7,"severity":9472,"references":9474,"versionKeys":9478,"packageCount":32,"repositoryCount":32},"pysec-2024-323-1dd96856",[9466,9467,9468],"CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514",[351],"2024-09-17T12:15:02.977Z","2026-07-13T07:26:23.643495355Z",[9473],{"type":3072,"score":8092},[9475,9476],{"type":3117,"url":8124},{"type":3277,"url":9477},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffa3a2753-57c3-4e08-a176-d7a3ffda28fe",[3485],{"id":352,"slug":9480,"dossier":45,"summary":82,"aliases":9481,"sourceIds":9483,"published":9484,"modified":9485,"checkedAt":7,"severity":9486,"references":9489,"versionKeys":9495,"packageCount":32,"repositoryCount":401},"pysec-2025-183-08217171",[9482],"CVE-2025-45768",[352],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[9487],{"type":3072,"score":9488},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[9490,9492,9494],{"type":3079,"url":9491},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3154,"url":9493},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":3089,"url":4845},[4851,4852],{"id":353,"slug":9497,"dossier":45,"summary":82,"aliases":9498,"sourceIds":9500,"published":9501,"modified":9502,"checkedAt":7,"severity":9503,"references":9506,"versionKeys":9509,"packageCount":32,"repositoryCount":103},"pysec-2026-2085-e081ac1d",[9499],"CVE-2026-12252",[353],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[9504],{"type":3072,"score":9505},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[9507],{"type":3277,"url":9508},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[3748,3749],{"id":354,"slug":9511,"dossier":89,"summary":82,"aliases":9512,"sourceIds":9515,"published":9516,"modified":9517,"checkedAt":7,"severity":9518,"references":9521,"versionKeys":9534,"packageCount":32,"repositoryCount":6830},"pysec-2026-2132-627bf7c7",[9513,9514],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[354],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[9519],{"type":3072,"score":9520},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9522,9524,9526,9527,9528,9530,9532],{"type":3079,"url":9523},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":3079,"url":9525},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":3082,"url":7428},{"type":3082,"url":7430},{"type":3154,"url":9529},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":3117,"url":9531},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":3277,"url":9533},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[9535,9536,9537,9538,9539,9540],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":355,"slug":9542,"dossier":45,"summary":82,"aliases":9543,"sourceIds":9546,"published":9547,"modified":9548,"checkedAt":7,"severity":9549,"references":9551,"versionKeys":9555,"packageCount":32,"repositoryCount":32},"pysec-2026-2208-4dad303d",[9544,9545],"CVE-2026-44898","GHSA-6269-cqxg-mhhv",[355],"2026-05-26T21:16:39.810Z","2026-07-13T07:15:28.986856174Z",[9550],{"type":3072,"score":4160},[9552,9553],{"type":3082,"url":5296},{"type":3277,"url":9554},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-6269-cqxg-mhhv",[3290],{"id":356,"slug":9557,"dossier":45,"summary":82,"aliases":9558,"sourceIds":9561,"published":9562,"modified":9563,"checkedAt":7,"severity":9564,"references":9566,"versionKeys":9570,"packageCount":32,"repositoryCount":32},"pysec-2026-2209-f89c37e9",[9559,9560],"CVE-2026-44899","GHSA-ccfx-mfmx-2fx9",[356],"2026-05-26T21:16:39.953Z","2026-07-13T07:15:29.089597285Z",[9565],{"type":3072,"score":4160},[9567,9568],{"type":3082,"url":5296},{"type":3277,"url":9569},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ccfx-mfmx-2fx9",[3290],{"id":357,"slug":9572,"dossier":45,"summary":82,"aliases":9573,"sourceIds":9576,"published":9577,"modified":9578,"checkedAt":7,"severity":9579,"references":9581,"versionKeys":9587,"packageCount":32,"repositoryCount":615},"pysec-2026-3455-73e6f483",[9574,9575],"CVE-2026-59884","GHSA-m4p7-r5rc-7g4j",[357],"2026-07-14T17:17:14.750Z","2026-07-22T11:00:08.839373736Z",[9580],{"type":3072,"score":3216},[9582,9583,9585],{"type":3082,"url":5365},{"type":3082,"url":9584},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":3117,"url":9586},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",[4556,5367],{"id":358,"slug":9589,"dossier":45,"summary":82,"aliases":9590,"sourceIds":9592,"published":9593,"modified":9594,"checkedAt":7,"severity":9595,"references":9597,"versionKeys":9600,"packageCount":32,"repositoryCount":103},"pysec-2026-597-f85c09cd",[9591],"CVE-2026-12243",[358],"2026-06-30T01:16:29.063Z","2026-07-01T18:15:06.027046365Z",[9596],{"type":3072,"score":7858},[9598],{"type":3277,"url":9599},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",[3748,3749],{"id":359,"slug":9602,"dossier":45,"summary":82,"aliases":9603,"sourceIds":9605,"published":9606,"modified":9607,"checkedAt":7,"severity":9608,"references":9610,"versionKeys":9613,"packageCount":32,"repositoryCount":103},"pysec-2026-99-2c63e84f",[9604],"CVE-2026-0848",[359],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[9609],{"type":3072,"score":5092},[9611],{"type":3277,"url":9612},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3748,3749],1785524986631]