[{"data":1,"prerenderedAt":8438},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-13669":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":355,"related":363},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-11-12T08:58:58.139Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-11-12T08:57:16.613Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},49,48,1,29,6,33,45,47,46,0,5071,5059,12,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":42,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2865,51,9911,63,2827,38,1097,43,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:typing-extensions","typing-extensions-87d153eb","typing-extensions",0.5918367346938775,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":101,"artifactResolvedComponentCount":100,"exactManifestPinCount":102,"packageCount":103,"ecosystems":104,"aiPackageCount":34,"licenseExpressionCount":106,"unknownLicensePackageCount":107,"advisoryIds":108,"advisoryCount":350,"providers":351},"opencode:13669","opencode-13669",13669,"sprache2text+meer - Transkription für Jugendamt Verwaltung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain","aTrain transkribiert Sprachaufnahmen KI-gestützt und vollständig lokal, ohne Daten ins Internet zu übertragen. Im Projekt sprache2text+mehr wird die Software für die Anforderungen der Jugendhilfe optimiert und in die IT-Systeme der Stadt Kiel eingebunden, um Arbeitsabläufe zu vereinfachen und Dokumentationszeiten zu verkürzen.\n\n**Dies hier ist nur ein Mirror.**\n\nDie Entwicklung\u002FCommunity Betreuung findet im [Upstream-Repo](https:\u002F\u002Fgithub.com\u002FaTrainTranscription\u002FaTrain) statt. Bitte wenden Sie sich bei Fragen zur Software an die Entwickelnden dort.\n\nDie Weiterentwicklung dieser Software wurde im Rahmen des Landesprogramm Offene Innovation 2025 finanziert.","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain","b7e00d45e2847bc5089719cb636f5d2215ba9734","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain\u002F-\u002Fcommit\u002Fb7e00d45e2847bc5089719cb636f5d2215ba9734","2026-11-11T01:07:23.599Z","2026-11-10T15:06:04.000Z",{"complete":90,"entryCount":91,"truncated":47},true,249,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","947a2c691d6f8be1e34d18f292b8c5f0fbc5ac95","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain\u002F-\u002Fblob\u002Fb7e00d45e2847bc5089719cb636f5d2215ba9734\u002Fuv.lock","1da651709584b4d2b50ab044e77786ba026536343299e6572990ead0829c6375",949077,"parsed",203,206,3,202,[105],"pypi",26,9,[109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349],"GHSA-22hg-r758-rrw9","GHSA-248v-346w-9cwc","GHSA-24rc-8hj2-v98c","GHSA-254f-3936-288h","GHSA-27h8-gf7j-v5hc","GHSA-27vj-qcqg-25rc","GHSA-29pf-2h5f-8g72","GHSA-29vq-49wr-vm6x","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g68-c3qc-8985","GHSA-2g87-pp6c-29x5","GHSA-2h4p-vjrc-8xpq","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-332p-7hrc-92wf","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3j72-p6qg-6xp7","GHSA-3wq7-rqq7-wx6j","GHSA-4558-3h8r-v8xp","GHSA-45hq-cxwh-f6vc","GHSA-462x-pgg6-55fp","GHSA-48p4-8xcf-vxj5","GHSA-494j-54xm-rwp3","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4m7w-qmgq-4wj5","GHSA-4rm8-3hmm-39fg","GHSA-4rr5-89j8-mwwm","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xh5-x5gv-qwph","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-54p9-h82j-f925","GHSA-5639-2j2p-m4mx","GHSA-567q-5qvw-pf92","GHSA-58qw-9mgm-455v","GHSA-58r4-6rv3-gfh8","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5p39-cfhj-2xmp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5w7q-77mv-v69f","GHSA-5wr8-gcqf-gqf3","GHSA-5x8w-8jj5-q52h","GHSA-5x94-69rx-g8h2","GHSA-5xm2-6676-qcp9","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63cw-57p8-fm3p","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-654x-cwwv-5j9c","GHSA-65pc-fj4g-8rjx","GHSA-65qm-jvmh-6pqg","GHSA-69f9-5gxw-wvc2","GHSA-69hj-f68j-2879","GHSA-69w3-r845-3855","GHSA-6cjc-53gc-5rqm","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6q48-6c7w-9gw2","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6vgw-5pg2-w6jp","GHSA-74r2-7ff9-mjj2","GHSA-768j-98cg-p3fv","GHSA-78g4-xqwv-q3g8","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7mwm-ghpf-9vrm","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-87hc-h4r5-73f7","GHSA-887c-mr87-cxwp","GHSA-8988-9cw3-xx77","GHSA-8g5g-8vmr-9782","GHSA-8mx5-7m5m-r77g","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9v9v-9qvf-h2hj","GHSA-9vhv-jxww-xfm5","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-9xw5-w5jj-pvcg","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c6hw-5grf-ff96","GHSA-cfh3-3jmp-rvhc","GHSA-cgwc-pv48-fhj5","GHSA-cp9v-662q-vvx9","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cwqr-hh33-gh44","GHSA-cx63-2mw6-8hw5","GHSA-f2g6-542v-9j58","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-f9vj-2wh5-fj8j","GHSA-f9xw-jh8m-3mwq","GHSA-fc9g-5qg7-mf45","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fpwr-67px-3qhx","GHSA-fq56-3cx3-fjxp","GHSA-g3cq-j2xw-wf74","GHSA-g4qv-2jxx-769h","GHSA-g6x2-hccm-hh4m","GHSA-g7cr-3p24-7wf7","GHSA-g7vv-2v7x-gj9p","GHSA-g842-9rc4-69pw","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gg2r-wvfm-q9rx","GHSA-gh4c-6fx4-qh6g","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gx76-c99x-2c96","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgf8-39gv-g3f2","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-j4m9-6w36-pw47","GHSA-j586-36cw-2gc2","GHSA-j8f7-rjxc-mr56","GHSA-jg22-mg44-37j8","GHSA-jg86-v3jv-hrpm","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jp4c-xjxw-mgf9","GHSA-jp82-jpqv-5vv3","GHSA-jw8x-6495-233v","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m9gh-vj53-gvh9","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq26-g339-26xf","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfp-p49p-3hf2","GHSA-mwh4-6h8g-pg8w","GHSA-p4wg-p73j-c528","GHSA-p8hx-v2p6-rp84","GHSA-p998-jp59-783m","GHSA-pchr-8j38-3x4p","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pqxq-w44r-73xw","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-q45j-58j2-45rg","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qqmf-gpg7-g8gw","GHSA-qwm4-qh6w-59xr","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rfgq-q3w2-pmv2","GHSA-rfpc-qcw5-3pc4","GHSA-rrmf-rvhw-rf47","GHSA-v4x8-3wr5-3wq8","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-v9pv-5gc8-w2m6","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vx6w-vv9f-6gvg","GHSA-vxq7-64xx-v4gw","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-w889-685w-c8fh","GHSA-wf93-45jw-7689","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-x9r9-c232-4q39","GHSA-xcgm-r5h9-7989","GHSA-xcq7-p3pf-p88h","GHSA-xg8h-j46f-w952","GHSA-xgh8-jp6q-p5x8","GHSA-xj96-63gp-2gmr","GHSA-xmj3-9gf7-h52w","GHSA-xrqw-3rrv-vx5w","GHSA-xvh5-g6gv-559v","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139",241,[352],{"id":353,"label":354},"hugging-face","Hugging Face",{"files":356,"occurrenceCount":101},[357,362],{"path":358,"kind":359,"sourceUrl":360,"commitSha":85,"blobSha":361,"state":99,"componentCount":102},"pyproject.toml","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain\u002F-\u002Fblob\u002Fb7e00d45e2847bc5089719cb636f5d2215ba9734\u002Fpyproject.toml","afd5f5d9bcc3035294b3138dec63ca6290c89802",{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":364,"vulnerabilities":2192},[365,378,391,401,410,420,429,441,452,463,473,483,492,502,511,521,530,539,548,557,567,575,584,593,602,611,620,629,638,647,656,667,677,686,695,703,713,722,732,741,750,759,768,777,786,795,804,813,822,831,840,850,859,868,877,886,895,904,913,922,931,940,949,958,967,976,985,994,1003,1012,1021,1032,1041,1050,1059,1068,1077,1086,1095,1104,1113,1122,1131,1140,1149,1158,1167,1176,1185,1194,1203,1212,1221,1230,1239,1248,1257,1266,1276,1285,1294,1303,1311,1320,1329,1338,1347,1356,1365,1373,1382,1390,1399,1407,1416,1424,1432,1440,1448,1456,1464,1473,1482,1491,1501,1510,1519,1528,1537,1546,1555,1564,1573,1582,1591,1600,1609,1618,1627,1636,1644,1652,1662,1671,1680,1689,1699,1709,1718,1726,1734,1742,1750,1758,1767,1776,1784,1793,1802,1811,1821,1830,1839,1848,1858,1867,1876,1884,1894,1904,1913,1922,1931,1940,1949,1958,1967,1976,1985,1994,2003,2012,2021,2029,2038,2047,2055,2063,2071,2080,2089,2095,2104,2113,2122,2131,2139,2147,2156,2165,2174,2183],{"id":366,"slug":367,"identity":368,"label":369,"aiRelevant":90,"provider":370,"advisoryCount":371,"licenseExpressions":372,"versions":374,"dossier":90,"occurrenceCount":376,"directOccurrenceCount":32,"evidenceFiles":377},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":353,"label":354},27,[373],"Apache-2.0",[375],"5.22.0",2,[358,56],{"id":379,"slug":380,"identity":381,"label":382,"aiRelevant":90,"provider":383,"advisoryCount":384,"licenseExpressions":385,"versions":387,"dossier":90,"occurrenceCount":376,"directOccurrenceCount":32,"evidenceFiles":390},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[386],"BSD-3-Clause",[388,389],"2.9.1","2.9.1+cu128",[358,56],{"id":392,"slug":393,"identity":394,"label":395,"aiRelevant":90,"provider":383,"advisoryCount":32,"licenseExpressions":396,"versions":398,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":400},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[373,397],"non-standard",[399],"1.15.0",[56],{"id":402,"slug":403,"identity":404,"label":405,"aiRelevant":90,"provider":383,"advisoryCount":32,"licenseExpressions":406,"versions":407,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":409},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[386,397],[408],"1.9.0",[56],{"id":411,"slug":412,"identity":413,"label":414,"aiRelevant":90,"provider":383,"advisoryCount":39,"licenseExpressions":415,"versions":417,"dossier":90,"occurrenceCount":376,"directOccurrenceCount":32,"evidenceFiles":419},"package:pypi:faster-whisper","faster-whisper-edb11692","pypi:faster-whisper","faster-whisper",[416],"MIT",[418],"1.2.1",[358,56],{"id":421,"slug":422,"identity":423,"label":424,"aiRelevant":90,"provider":383,"advisoryCount":39,"licenseExpressions":425,"versions":426,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":428},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[397],[427],"0.23.3",[56],{"id":430,"slug":431,"identity":432,"label":433,"aiRelevant":47,"provider":383,"advisoryCount":434,"licenseExpressions":435,"versions":438,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":440},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",61,[436,437],"HPND","MIT-CMU",[439],"13.0.0",[56],{"id":442,"slug":443,"identity":444,"label":445,"aiRelevant":47,"provider":383,"advisoryCount":446,"licenseExpressions":447,"versions":449,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":451},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",41,[373,448],"Apache-2.0 AND MIT",[450],"3.14.3",[56],{"id":453,"slug":454,"identity":455,"label":456,"aiRelevant":47,"provider":383,"advisoryCount":457,"licenseExpressions":458,"versions":460,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":462},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",11,[416,459],"Unlicense",[461],"3.29.4",[56],{"id":464,"slug":465,"identity":466,"label":467,"aiRelevant":47,"provider":383,"advisoryCount":468,"licenseExpressions":469,"versions":470,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":472},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[416],[471],"2.7.0",[56],{"id":474,"slug":475,"identity":476,"label":477,"aiRelevant":47,"provider":383,"advisoryCount":478,"licenseExpressions":479,"versions":480,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":482},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[373],[481],"0.0.32",[56],{"id":484,"slug":485,"identity":486,"label":487,"aiRelevant":47,"provider":383,"advisoryCount":478,"licenseExpressions":488,"versions":489,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":491},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[386],[490],"1.3.1",[56],{"id":493,"slug":494,"identity":495,"label":496,"aiRelevant":47,"provider":383,"advisoryCount":497,"licenseExpressions":498,"versions":499,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":501},"package:pypi:pip","pip-2911c768","pypi:pip","pip",7,[416],[500],"26.1.2",[56],{"id":503,"slug":504,"identity":505,"label":506,"aiRelevant":47,"provider":383,"advisoryCount":497,"licenseExpressions":507,"versions":508,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":510},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[386,397],[509],"3.1.9",[56],{"id":512,"slug":513,"identity":514,"label":515,"aiRelevant":47,"provider":383,"advisoryCount":516,"licenseExpressions":517,"versions":518,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":520},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",4,[386,397],[519],"3.1.6",[56],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":47,"provider":383,"advisoryCount":516,"licenseExpressions":526,"versions":527,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":529},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[416],[528],"82.0.1",[56],{"id":531,"slug":532,"identity":533,"label":534,"aiRelevant":47,"provider":383,"advisoryCount":102,"licenseExpressions":535,"versions":536,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":538},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[416],[537],"1.3.12",[56],{"id":540,"slug":541,"identity":542,"label":543,"aiRelevant":47,"provider":383,"advisoryCount":102,"licenseExpressions":544,"versions":545,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":547},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[373],[546],"2.34.2",[56],{"id":549,"slug":550,"identity":551,"label":552,"aiRelevant":47,"provider":383,"advisoryCount":376,"licenseExpressions":553,"versions":554,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":556},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[416],[555],"4.14.2",[56],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":47,"provider":383,"advisoryCount":376,"licenseExpressions":562,"versions":564,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":566},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[563],"MPL-2.0",[565],"2026.10.19",[56],{"id":568,"slug":569,"identity":570,"label":571,"aiRelevant":47,"provider":383,"advisoryCount":376,"licenseExpressions":572,"versions":573,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":574},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[373],[418],[56],{"id":576,"slug":577,"identity":578,"label":579,"aiRelevant":47,"provider":383,"advisoryCount":376,"licenseExpressions":580,"versions":581,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":583},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[386],[582],"7.35.1",[56],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":47,"provider":383,"advisoryCount":376,"licenseExpressions":589,"versions":590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":592},"package:pypi:python-engineio","python-engineio-a8408602","pypi:python-engineio","python-engineio",[416],[591],"4.13.3",[56],{"id":594,"slug":595,"identity":596,"label":597,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":598,"versions":599,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":601},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[416],[600],"4.63.0",[56],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":607,"versions":608,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":610},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[386],[609],"2026.6.0",[56],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":616,"versions":617,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":619},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[416],[618],"0.16.0",[56],{"id":621,"slug":622,"identity":623,"label":624,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":625,"versions":626,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":628},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[386,397],[627],"3.18",[56],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":634,"versions":635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":637},"package:pypi:lightning","lightning-28a5cccb","pypi:lightning","lightning",[373],[636],"2.6.5",[56],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":643,"versions":644,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":646},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[373],[645],"6.9.1",[56],{"id":648,"slug":649,"identity":650,"label":651,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":652,"versions":653,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":655},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[373],[654],"1.43.0",[56],{"id":657,"slug":658,"identity":659,"label":660,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":661,"versions":664,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":666},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[662,663],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[665],"3.11.9",[56],{"id":668,"slug":669,"identity":670,"label":671,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":672,"versions":674,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":676},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[673],"BSD-2-Clause",[675],"2.20.0",[56],{"id":678,"slug":679,"identity":680,"label":681,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":682,"versions":683,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":685},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[386],[684],"1.2.2",[56],{"id":687,"slug":688,"identity":689,"label":690,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":691,"versions":692,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":694},"package:pypi:python-socketio","python-socketio-6960be7a","pypi:python-socketio","python-socketio",[416],[693],"5.16.3",[56],{"id":696,"slug":697,"identity":698,"label":699,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":700,"versions":701,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":702},"package:pypi:pytorch-lightning","pytorch-lightning-1550c03a","pypi:pytorch-lightning","pytorch-lightning",[373],[636],[56],{"id":704,"slug":705,"identity":706,"label":707,"aiRelevant":47,"provider":383,"advisoryCount":32,"licenseExpressions":708,"versions":710,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":712},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[709],"MIT AND MPL-2.0",[711],"4.68.3",[56],{"id":714,"slug":715,"identity":716,"label":717,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":718,"versions":719,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":721},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[373],[720],"25.1.0",[56],{"id":723,"slug":724,"identity":725,"label":726,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":727,"versions":729,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":731},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[728],"PSF-2.0",[730],"2.6.2",[56],{"id":733,"slug":734,"identity":735,"label":736,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":737,"versions":738,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":740},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[373],[739],"1.4.0",[56],{"id":742,"slug":743,"identity":744,"label":745,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":746,"versions":747,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":749},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[416],[748],"1.18.5",[56],{"id":751,"slug":752,"identity":753,"label":754,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":755,"versions":756,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":758},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[416],[757],"0.0.4",[56],{"id":760,"slug":761,"identity":762,"label":763,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":764,"versions":765,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":767},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[416],[766],"0.7.0",[56],{"id":769,"slug":770,"identity":771,"label":772,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":773,"versions":774,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":776},"package:pypi:asteroid-filterbanks","asteroid-filterbanks-012ae487","pypi:asteroid-filterbanks","asteroid-filterbanks",[416],[775],"0.4.0",[56],{"id":778,"slug":779,"identity":780,"label":781,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":782,"versions":783,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":785},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[416],[784],"26.1.0",[56],{"id":787,"slug":788,"identity":789,"label":790,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":791,"versions":792,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":794},"package:pypi:av","av-62c498c6","pypi:av","av",[386],[793],"18.1.0",[56],{"id":796,"slug":797,"identity":798,"label":799,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":800,"versions":801,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":803},"package:pypi:bandit","bandit-b6566895","pypi:bandit","bandit",[373],[802],"1.9.4",[56],{"id":805,"slug":806,"identity":807,"label":808,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":809,"versions":810,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":812},"package:pypi:bidict","bidict-d2d69f19","pypi:bidict","bidict",[563],[811],"0.23.1",[56],{"id":814,"slug":815,"identity":816,"label":817,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":818,"versions":819,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":821},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[673],[820],"5.0",[56],{"id":823,"slug":824,"identity":825,"label":826,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":827,"versions":828,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":830},"package:pypi:bottle","bottle-d11915f9","pypi:bottle","bottle",[416],[829],"0.13.4",[56],{"id":832,"slug":833,"identity":834,"label":835,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":836,"versions":837,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":839},"package:pypi:cachecontrol","cachecontrol-f48df14f","pypi:cachecontrol","cachecontrol",[373,397],[838],"0.14.4",[56],{"id":841,"slug":842,"identity":843,"label":844,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":845,"versions":847,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":849},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[416,846],"MIT-0",[848],"2.0.0",[56],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":855,"versions":856,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":858},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[416],[857],"3.4.7",[56],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":864,"versions":865,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":867},"package:pypi:click","click-ef97f731","pypi:click","click",[386,397],[866],"8.4.2",[56],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":873,"versions":874,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":876},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[386],[875],"3.1.2",[56],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":882,"versions":883,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":885},"package:pypi:clr-loader","clr-loader-839f2a74","pypi:clr-loader","clr-loader",[],[884],"0.3.1",[56],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":891,"versions":892,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":894},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[397],[893],"0.4.6",[56],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":900,"versions":901,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":903},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[416],[902],"6.10.1",[56],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":909,"versions":910,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":912},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[386],[911],"1.3.3",[56],{"id":914,"slug":915,"identity":916,"label":917,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":918,"versions":919,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":921},"package:pypi:crisperwhisper","crisperwhisper-d3b6821a","pypi:crisperwhisper","crisperwhisper",[416],[920],"2.0.3",[56],{"id":923,"slug":924,"identity":925,"label":926,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":927,"versions":928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":930},"package:pypi:ctranslate2","ctranslate2-bb8ef47b","pypi:ctranslate2","ctranslate2",[416],[929],"4.8.0",[56],{"id":932,"slug":933,"identity":934,"label":935,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":936,"versions":937,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":939},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[386],[938],"0.12.1",[56],{"id":941,"slug":942,"identity":943,"label":944,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":945,"versions":946,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":948},"package:pypi:cyclonedx-python-lib","cyclonedx-python-lib-af6d232b","pypi:cyclonedx-python-lib","cyclonedx-python-lib",[373],[947],"11.11.0",[56],{"id":950,"slug":951,"identity":952,"label":953,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":954,"versions":955,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":957},"package:pypi:dask","dask-c6d8c0b4","pypi:dask","dask",[386],[956],"2026.8.0",[56],{"id":959,"slug":960,"identity":961,"label":962,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":963,"versions":964,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":966},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[397],[965],"0.7.1",[56],{"id":968,"slug":969,"identity":970,"label":971,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":972,"versions":973,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":975},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[397],[974],"0.23",[56],{"id":977,"slug":978,"identity":979,"label":980,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":981,"versions":982,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":984},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[416],[983],"0.8.2",[56],{"id":986,"slug":987,"identity":988,"label":989,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":990,"versions":991,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":993},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[416],[992],"0.138.2",[56],{"id":995,"slug":996,"identity":997,"label":998,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":999,"versions":1000,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1002},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[373],[1001],"25.12.19",[56],{"id":1004,"slug":1005,"identity":1006,"label":1007,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1008,"versions":1009,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1011},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[373],[1010],"1.8.0",[56],{"id":1013,"slug":1014,"identity":1015,"label":1016,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1017,"versions":1018,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1020},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[373],[1019],"1.75.0",[56],{"id":1022,"slug":1023,"identity":1024,"label":1025,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1026,"versions":1029,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1031},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[416,1027,1028],"MIT AND PSF-2.0","MIT AND Python-2.0",[1030],"3.5.3",[56],{"id":1033,"slug":1034,"identity":1035,"label":1036,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1037,"versions":1038,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1040},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[373],[1039],"1.81.1",[56],{"id":1042,"slug":1043,"identity":1044,"label":1045,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1046,"versions":1047,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1049},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[373],[1048],"1.6.0",[56],{"id":1051,"slug":1052,"identity":1053,"label":1054,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1055,"versions":1056,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1058},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[386],[1057],"1.0.9",[56],{"id":1060,"slug":1061,"identity":1062,"label":1063,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1064,"versions":1065,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1067},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[416],[1066],"0.8.0",[56],{"id":1069,"slug":1070,"identity":1071,"label":1072,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1073,"versions":1074,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1076},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[386],[1075],"0.28.1",[56],{"id":1078,"slug":1079,"identity":1080,"label":1081,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1082,"versions":1083,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1085},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[373],[1084],"1.33.0",[56],{"id":1087,"slug":1088,"identity":1089,"label":1090,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1091,"versions":1092,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1094},"package:pypi:ifaddr","ifaddr-814125b6","pypi:ifaddr","ifaddr",[416],[1093],"0.2.0",[56],{"id":1096,"slug":1097,"identity":1098,"label":1099,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1100,"versions":1101,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1103},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[373,397],[1102],"9.0.0",[56],{"id":1105,"slug":1106,"identity":1107,"label":1108,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1109,"versions":1110,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1112},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[386,397],[1111],"2.2.0",[56],{"id":1114,"slug":1115,"identity":1116,"label":1117,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1118,"versions":1119,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1121},"package:pypi:jeepney","jeepney-898410ff","pypi:jeepney","jeepney",[416],[1120],"0.9.0",[56],{"id":1123,"slug":1124,"identity":1125,"label":1126,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1127,"versions":1128,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1130},"package:pypi:jiwer","jiwer-722f6674","pypi:jiwer","jiwer",[373],[1129],"4.0.0",[56],{"id":1132,"slug":1133,"identity":1134,"label":1135,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1136,"versions":1137,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1139},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[386],[1138],"1.5.3",[56],{"id":1141,"slug":1142,"identity":1143,"label":1144,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1145,"versions":1146,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1148},"package:pypi:julius","julius-2c17d8d2","pypi:julius","julius",[416],[1147],"0.2.8",[56],{"id":1150,"slug":1151,"identity":1152,"label":1153,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1154,"versions":1155,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1157},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[397],[1156],"1.5.0",[56],{"id":1159,"slug":1160,"identity":1161,"label":1162,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1163,"versions":1164,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1166},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[373],[1165],"30.4.4",[56],{"id":1168,"slug":1169,"identity":1170,"label":1171,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1172,"versions":1173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1175},"package:pypi:lightning-utilities","lightning-utilities-46646cd2","pypi:lightning-utilities","lightning-utilities",[373],[1174],"0.15.3",[56],{"id":1177,"slug":1178,"identity":1179,"label":1180,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1181,"versions":1182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1184},"package:pypi:locket","locket-f0905b94","pypi:locket","locket",[673],[1183],"1.0.0",[56],{"id":1186,"slug":1187,"identity":1188,"label":1189,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1190,"versions":1191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1193},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[416],[1192],"4.2.0",[56],{"id":1195,"slug":1196,"identity":1197,"label":1198,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1199,"versions":1200,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1202},"package:pypi:markdown2","markdown2-6999cefd","pypi:markdown2","markdown2",[416],[1201],"2.5.5",[56],{"id":1204,"slug":1205,"identity":1206,"label":1207,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1208,"versions":1209,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1211},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[386],[1210],"3.0.3",[56],{"id":1213,"slug":1214,"identity":1215,"label":1216,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1217,"versions":1218,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1220},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[397],[1219],"3.11.0",[56],{"id":1222,"slug":1223,"identity":1224,"label":1225,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1226,"versions":1227,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1229},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[416],[1228],"0.1.2",[56],{"id":1231,"slug":1232,"identity":1233,"label":1234,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1235,"versions":1236,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1238},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[386],[1237],"1.3.0",[56],{"id":1240,"slug":1241,"identity":1242,"label":1243,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1244,"versions":1245,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1247},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[416],[1246],"2.22.1",[56],{"id":1249,"slug":1250,"identity":1251,"label":1252,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1253,"versions":1254,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1256},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[386,397],[1255],"3.6.1",[56],{"id":1258,"slug":1259,"identity":1260,"label":1261,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1262,"versions":1263,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1265},"package:pypi:nicegui","nicegui-0dcd6652","pypi:nicegui","nicegui",[416],[1264],"3.18.0",[56],{"id":1267,"slug":1268,"identity":1269,"label":1270,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1271,"versions":1273,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1275},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1272,397],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1274],"2.4.6",[56],{"id":1277,"slug":1278,"identity":1279,"label":1280,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1281,"versions":1282,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1284},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[397],[1283],"12.8.4.1",[56],{"id":1286,"slug":1287,"identity":1288,"label":1289,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1290,"versions":1291,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1293},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[397],[1292],"12.8.90",[56],{"id":1295,"slug":1296,"identity":1297,"label":1298,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1299,"versions":1300,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1302},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[397],[1301],"12.8.93",[56],{"id":1304,"slug":1305,"identity":1306,"label":1307,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1308,"versions":1309,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1310},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[397],[1292],[56],{"id":1312,"slug":1313,"identity":1314,"label":1315,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1316,"versions":1317,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1319},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[397],[1318],"9.10.2.21",[56],{"id":1321,"slug":1322,"identity":1323,"label":1324,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1325,"versions":1326,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1328},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[397],[1327],"11.3.3.83",[56],{"id":1330,"slug":1331,"identity":1332,"label":1333,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1334,"versions":1335,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1337},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[397],[1336],"1.13.1.3",[56],{"id":1339,"slug":1340,"identity":1341,"label":1342,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1343,"versions":1344,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1346},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[397],[1345],"10.3.9.90",[56],{"id":1348,"slug":1349,"identity":1350,"label":1351,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1352,"versions":1353,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1355},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[397],[1354],"11.7.3.90",[56],{"id":1357,"slug":1358,"identity":1359,"label":1360,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1361,"versions":1362,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1364},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[397],[1363],"12.5.8.93",[56],{"id":1366,"slug":1367,"identity":1368,"label":1369,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1370,"versions":1371,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1372},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[397],[965],[56],{"id":1374,"slug":1375,"identity":1376,"label":1377,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1378,"versions":1379,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1381},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[386],[1380],"2.27.5",[56],{"id":1383,"slug":1384,"identity":1385,"label":1386,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1387,"versions":1388,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1389},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[397],[1301],[56],{"id":1391,"slug":1392,"identity":1393,"label":1394,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1395,"versions":1396,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1398},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[386,397],[1397],"3.3.20",[56],{"id":1400,"slug":1401,"identity":1402,"label":1403,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1404,"versions":1405,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1406},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[373,397],[1292],[56],{"id":1408,"slug":1409,"identity":1410,"label":1411,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1412,"versions":1413,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1415},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[416],[1414],"1.27.0",[56],{"id":1417,"slug":1418,"identity":1419,"label":1420,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1421,"versions":1422,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1423},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[373],[654],[56],{"id":1425,"slug":1426,"identity":1427,"label":1428,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1429,"versions":1430,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1431},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[373],[654],[56],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1437,"versions":1438,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1439},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[373],[654],[56],{"id":1441,"slug":1442,"identity":1443,"label":1444,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1445,"versions":1446,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1447},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[373],[654],[56],{"id":1449,"slug":1450,"identity":1451,"label":1452,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1453,"versions":1454,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1455},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[373],[654],[56],{"id":1457,"slug":1458,"identity":1459,"label":1460,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1461,"versions":1462,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1463},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[373],[654],[56],{"id":1465,"slug":1466,"identity":1467,"label":1468,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1469,"versions":1470,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1472},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[373],[1471],"0.64b0",[56],{"id":1474,"slug":1475,"identity":1476,"label":1477,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1478,"versions":1479,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1481},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[416],[1480],"4.9.0",[56],{"id":1483,"slug":1484,"identity":1485,"label":1486,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1487,"versions":1488,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1490},"package:pypi:packageurl-python","packageurl-python-dc3afccd","pypi:packageurl-python","packageurl-python",[416],[1489],"0.17.6",[56],{"id":1492,"slug":1493,"identity":1494,"label":1495,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1496,"versions":1498,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1500},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1497,397],"Apache-2.0 OR BSD-2-Clause",[1499],"26.2",[56],{"id":1502,"slug":1503,"identity":1504,"label":1505,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1506,"versions":1507,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1509},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[386,397],[1508],"3.1.0",[56],{"id":1511,"slug":1512,"identity":1513,"label":1514,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1515,"versions":1516,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1518},"package:pypi:partd","partd-64327513","pypi:partd","partd",[386],[1517],"1.4.2",[56],{"id":1520,"slug":1521,"identity":1522,"label":1523,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1524,"versions":1525,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1527},"package:pypi:pip-api","pip-api-5919fa1d","pypi:pip-api","pip-api",[373],[1526],"0.0.34",[56],{"id":1529,"slug":1530,"identity":1531,"label":1532,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1533,"versions":1534,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1536},"package:pypi:pip-audit","pip-audit-8a38ba34","pypi:pip-audit","pip-audit",[397],[1535],"2.10.1",[56],{"id":1538,"slug":1539,"identity":1540,"label":1541,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1542,"versions":1543,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1545},"package:pypi:pip-requirements-parser","pip-requirements-parser-3a4c3c44","pypi:pip-requirements-parser","pip-requirements-parser",[416],[1544],"32.0.1",[56],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1551,"versions":1552,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1554},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[416],[1553],"4.14.0",[56],{"id":1556,"slug":1557,"identity":1558,"label":1559,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1560,"versions":1561,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1563},"package:pypi:primepy","primepy-a6cda261","pypi:primepy","primepy",[416],[1562],"1.3",[56],{"id":1565,"slug":1566,"identity":1567,"label":1568,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1569,"versions":1570,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1572},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[373],[1571],"0.5.2",[56],{"id":1574,"slug":1575,"identity":1576,"label":1577,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1578,"versions":1579,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1581},"package:pypi:proxy-tools","proxy-tools-e07ef332","pypi:proxy-tools","proxy-tools",[416],[1580],"0.1.0",[56],{"id":1583,"slug":1584,"identity":1585,"label":1586,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1587,"versions":1588,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1590},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[386],[1589],"7.2.2",[56],{"id":1592,"slug":1593,"identity":1594,"label":1595,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1596,"versions":1597,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1599},"package:pypi:py-serializable","py-serializable-cebfca90","pypi:py-serializable","py-serializable",[373],[1598],"2.1.0",[56],{"id":1601,"slug":1602,"identity":1603,"label":1604,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1605,"versions":1606,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1608},"package:pypi:pyannote-audio","pyannote-audio-3ee3db31","pypi:pyannote-audio","pyannote-audio",[],[1607],"4.0.7",[56],{"id":1610,"slug":1611,"identity":1612,"label":1613,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1614,"versions":1615,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1617},"package:pypi:pyannote-core","pyannote-core-38057ad5","pypi:pyannote-core","pyannote-core",[],[1616],"6.0.1",[56],{"id":1619,"slug":1620,"identity":1621,"label":1622,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1623,"versions":1624,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1626},"package:pypi:pyannote-database","pyannote-database-ba711eec","pypi:pyannote-database","pyannote-database",[],[1625],"6.1.1",[56],{"id":1628,"slug":1629,"identity":1630,"label":1631,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1632,"versions":1633,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1635},"package:pypi:pyannote-metrics","pyannote-metrics-089b5533","pypi:pyannote-metrics","pyannote-metrics",[],[1634],"4.1",[56],{"id":1637,"slug":1638,"identity":1639,"label":1640,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1641,"versions":1642,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1643},"package:pypi:pyannote-pipeline","pyannote-pipeline-502241b6","pypi:pyannote-pipeline","pyannote-pipeline",[],[1129],[56],{"id":1645,"slug":1646,"identity":1647,"label":1648,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1649,"versions":1650,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1651},"package:pypi:pyannoteai-sdk","pyannoteai-sdk-93f4a941","pypi:pyannoteai-sdk","pyannoteai-sdk",[],[775],[56],{"id":1653,"slug":1654,"identity":1655,"label":1656,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1657,"versions":1659,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1661},"package:pypi:pycairo","pycairo-dec4e123","pypi:pycairo","pycairo",[1658],"LGPL-2.1-only OR MPL-1.1",[1660],"1.29.0",[56],{"id":1663,"slug":1664,"identity":1665,"label":1666,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1667,"versions":1668,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1670},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[386],[1669],"3.0",[56],{"id":1672,"slug":1673,"identity":1674,"label":1675,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1676,"versions":1677,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1679},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[416],[1678],"2.13.4",[56],{"id":1681,"slug":1682,"identity":1683,"label":1684,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1685,"versions":1686,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1688},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[416],[1687],"2.46.4",[56],{"id":1690,"slug":1691,"identity":1692,"label":1693,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1694,"versions":1696,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1698},"package:pypi:pygobject","pygobject-b7331567","pypi:pygobject","pygobject",[1695],"LGPL-2.0-or-later",[1697],"3.50.0",[56],{"id":1700,"slug":1701,"identity":1702,"label":1703,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1704,"versions":1706,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1708},"package:pypi:pygobject-stubs","pygobject-stubs-770d6f2f","pypi:pygobject-stubs","pygobject-stubs",[1705],"LGPL-2.1",[1707],"2.16.0",[56],{"id":1710,"slug":1711,"identity":1712,"label":1713,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1714,"versions":1715,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1717},"package:pypi:pyobjc-core","pyobjc-core-adc05bb4","pypi:pyobjc-core","pyobjc-core",[416],[1716],"12.2.1",[56],{"id":1719,"slug":1720,"identity":1721,"label":1722,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1723,"versions":1724,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1725},"package:pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa-8e347170","pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa",[416],[1716],[56],{"id":1727,"slug":1728,"identity":1729,"label":1730,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1731,"versions":1732,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1733},"package:pypi:pyobjc-framework-quartz","pyobjc-framework-quartz-6a98fc9b","pypi:pyobjc-framework-quartz","pyobjc-framework-quartz",[416],[1716],[56],{"id":1735,"slug":1736,"identity":1737,"label":1738,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1739,"versions":1740,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1741},"package:pypi:pyobjc-framework-security","pyobjc-framework-security-fe9a4ff0","pypi:pyobjc-framework-security","pyobjc-framework-security",[416],[1716],[56],{"id":1743,"slug":1744,"identity":1745,"label":1746,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1747,"versions":1748,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1749},"package:pypi:pyobjc-framework-uniformtypeidentifiers","pyobjc-framework-uniformtypeidentifiers-cf1b4c2f","pypi:pyobjc-framework-uniformtypeidentifiers","pyobjc-framework-uniformtypeidentifiers",[416],[1716],[56],{"id":1751,"slug":1752,"identity":1753,"label":1754,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1755,"versions":1756,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1757},"package:pypi:pyobjc-framework-webkit","pyobjc-framework-webkit-112152ab","pypi:pyobjc-framework-webkit","pyobjc-framework-webkit",[416],[1716],[56],{"id":1759,"slug":1760,"identity":1761,"label":1762,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1763,"versions":1764,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1766},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[416],[1765],"3.3.2",[56],{"id":1768,"slug":1769,"identity":1770,"label":1771,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1772,"versions":1773,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1775},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[397],[1774],"2.9.0.post0",[56],{"id":1777,"slug":1778,"identity":1779,"label":1780,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1781,"versions":1782,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1783},"package:pypi:pythonnet","pythonnet-7ea68ab2","pypi:pythonnet","pythonnet",[416],[1508],[56],{"id":1785,"slug":1786,"identity":1787,"label":1788,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1789,"versions":1790,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1792},"package:pypi:pytorch-metric-learning","pytorch-metric-learning-389f0864","pypi:pytorch-metric-learning","pytorch-metric-learning",[416],[1791],"2.9.0",[56],{"id":1794,"slug":1795,"identity":1796,"label":1797,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1798,"versions":1799,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1801},"package:pypi:pywebview","pywebview-e9c71fb3","pypi:pywebview","pywebview",[386],[1800],"6.2.1",[56],{"id":1803,"slug":1804,"identity":1805,"label":1806,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1807,"versions":1808,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1810},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[1809],"312",[56],{"id":1812,"slug":1813,"identity":1814,"label":1815,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1816,"versions":1818,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1820},"package:pypi:pyxdg","pyxdg-cb4a8913","pypi:pyxdg","pyxdg",[1817,1695],"LGPL-2.0",[1819],"0.28",[56],{"id":1822,"slug":1823,"identity":1824,"label":1825,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1826,"versions":1827,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1829},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[416],[1828],"6.0.3",[56],{"id":1831,"slug":1832,"identity":1833,"label":1834,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1835,"versions":1836,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1838},"package:pypi:qtpy","qtpy-44054c99","pypi:qtpy","qtpy",[416],[1837],"2.4.3",[56],{"id":1840,"slug":1841,"identity":1842,"label":1843,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1844,"versions":1845,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1847},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[416],[1846],"3.14.5",[56],{"id":1849,"slug":1850,"identity":1851,"label":1852,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1853,"versions":1855,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1857},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[373,1854],"Apache-2.0 AND CNRI-Python",[1856],"2026.9.10",[56],{"id":1859,"slug":1860,"identity":1861,"label":1862,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1863,"versions":1864,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1866},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[416],[1865],"15.0.0",[56],{"id":1868,"slug":1869,"identity":1870,"label":1871,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1872,"versions":1873,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1875},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[416],[1874],"0.17.3",[56],{"id":1877,"slug":1878,"identity":1879,"label":1880,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1881,"versions":1882,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1883},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[397],[1066],[56],{"id":1885,"slug":1886,"identity":1887,"label":1888,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1889,"versions":1890,"dossier":47,"occurrenceCount":376,"directOccurrenceCount":39,"evidenceFiles":1893},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[397],[1891,1892],"1.17.1","1.18.0",[56],{"id":1895,"slug":1896,"identity":1897,"label":1898,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1899,"versions":1901,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1903},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[1900],"ISC",[1902],"1.5.4",[56],{"id":1905,"slug":1906,"identity":1907,"label":1908,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1909,"versions":1910,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1912},"package:pypi:show-in-file-manager","show-in-file-manager-cc1246db","pypi:show-in-file-manager","show-in-file-manager",[416],[1911],"1.1.6",[56],{"id":1914,"slug":1915,"identity":1916,"label":1917,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1918,"versions":1919,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1921},"package:pypi:simple-websocket","simple-websocket-2bc2e925","pypi:simple-websocket","simple-websocket",[416],[1920],"1.1.0",[56],{"id":1923,"slug":1924,"identity":1925,"label":1926,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1927,"versions":1928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1930},"package:pypi:six","six-3c3888bd","pypi:six","six",[416],[1929],"1.17.0",[56],{"id":1932,"slug":1933,"identity":1934,"label":1935,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1936,"versions":1937,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1939},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[373],[1938],"2.4.0",[56],{"id":1941,"slug":1942,"identity":1943,"label":1944,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1945,"versions":1946,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1948},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[386],[1947],"0.14.0",[56],{"id":1950,"slug":1951,"identity":1952,"label":1953,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1954,"versions":1956,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1957},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[1695,1955],"LGPL-2.1-or-later",[1920],[56],{"id":1959,"slug":1960,"identity":1961,"label":1962,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1963,"versions":1964,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1966},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[416],[1965],"2.0.51",[56],{"id":1968,"slug":1969,"identity":1970,"label":1971,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1972,"versions":1973,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1975},"package:pypi:stevedore","stevedore-32e10f96","pypi:stevedore","stevedore",[373],[1974],"5.8.0",[56],{"id":1977,"slug":1978,"identity":1979,"label":1980,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1981,"versions":1982,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1984},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[386,416,397],[1983],"1.14.0",[56],{"id":1986,"slug":1987,"identity":1988,"label":1989,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1990,"versions":1991,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1993},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[386],[1992],"3.6.0",[56],{"id":1995,"slug":1996,"identity":1997,"label":1998,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":1999,"versions":2000,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2002},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[397],[2001],"1.5.1",[56],{"id":2004,"slug":2005,"identity":2006,"label":2007,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2008,"versions":2009,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2011},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[416],[2010],"2.4.1",[56],{"id":2013,"slug":2014,"identity":2015,"label":2016,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2017,"versions":2018,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2020},"package:pypi:tomli-w","tomli-w-661031c8","pypi:tomli-w","tomli-w",[416],[2019],"1.2.0",[56],{"id":2022,"slug":2023,"identity":2024,"label":2025,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2026,"versions":2027,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2028},"package:pypi:toolz","toolz-fb894e20","pypi:toolz","toolz",[386],[1920],[56],{"id":2030,"slug":2031,"identity":2032,"label":2033,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2034,"versions":2035,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2037},"package:pypi:torch-audiomentations","torch-audiomentations-2d2db22f","pypi:torch-audiomentations","torch-audiomentations",[416],[2036],"0.12.0",[56],{"id":2039,"slug":2040,"identity":2041,"label":2042,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2043,"versions":2044,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2046},"package:pypi:torch-pitch-shift","torch-pitch-shift-44bcef4d","pypi:torch-pitch-shift","torch-pitch-shift",[416],[2045],"1.2.5",[56],{"id":2048,"slug":2049,"identity":2050,"label":2051,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2052,"versions":2053,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2054},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[673,397],[388],[56],{"id":2056,"slug":2057,"identity":2058,"label":2059,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2060,"versions":2061,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2062},"package:pypi:torchcodec","torchcodec-8b0b8074","pypi:torchcodec","torchcodec",[],[1947],[56],{"id":2064,"slug":2065,"identity":2066,"label":2067,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2068,"versions":2069,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2070},"package:pypi:torchmetrics","torchmetrics-87072a51","pypi:torchmetrics","torchmetrics",[373],[408],[56],{"id":2072,"slug":2073,"identity":2074,"label":2075,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2076,"versions":2077,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2079},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[416],[2078],"3.5.1",[56],{"id":2081,"slug":2082,"identity":2083,"label":2084,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2085,"versions":2086,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2088},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[416],[2087],"0.27.3",[56],{"id":72,"slug":73,"identity":2090,"label":74,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2091,"versions":2092,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2094},"pypi:typing-extensions",[728,397],[2093],"4.15.0",[56],{"id":2096,"slug":2097,"identity":2098,"label":2099,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2100,"versions":2101,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2103},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[416],[2102],"0.4.2",[56],{"id":2105,"slug":2106,"identity":2107,"label":2108,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2109,"versions":2110,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2112},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[373],[2111],"2026.2",[56],{"id":2114,"slug":2115,"identity":2116,"label":2117,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2118,"versions":2119,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2121},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[386],[2120],"0.49.0",[56],{"id":2123,"slug":2124,"identity":2125,"label":2126,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2127,"versions":2128,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2130},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[416],[2129],"0.22.1",[56],{"id":2132,"slug":2133,"identity":2134,"label":2135,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2136,"versions":2137,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2138},"package:pypi:wakepy","wakepy-586883b0","pypi:wakepy","wakepy",[416],[1183],[56],{"id":2140,"slug":2141,"identity":2142,"label":2143,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2144,"versions":2145,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2146},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[416],[2019],[56],{"id":2148,"slug":2149,"identity":2150,"label":2151,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2152,"versions":2153,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2155},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[397],[2154],"0.5.1",[56],{"id":2157,"slug":2158,"identity":2159,"label":2160,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2161,"versions":2162,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2164},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[386],[2163],"16.0",[56],{"id":2166,"slug":2167,"identity":2168,"label":2169,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2170,"versions":2171,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2173},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[416],[2172],"1.3.2",[56],{"id":2175,"slug":2176,"identity":2177,"label":2178,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2179,"versions":2180,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2182},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[373],[2181],"1.24.2",[56],{"id":2184,"slug":2185,"identity":2186,"label":2187,"aiRelevant":47,"provider":383,"advisoryCount":39,"licenseExpressions":2188,"versions":2189,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2191},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[416],[2190],"4.1.0",[56],[2193,2232,2268,2292,2314,2338,2382,2416,2446,2478,2512,2545,2588,2621,2646,2682,2704,2747,2773,2799,2825,2848,2875,2901,2923,2949,2970,2990,3026,3044,3068,3092,3118,3147,3181,3220,3246,3271,3300,3329,3356,3382,3405,3432,3455,3493,3530,3554,3578,3596,3620,3643,3664,3693,3723,3773,3800,3819,3845,3873,3894,3917,3943,3970,3990,4013,4035,4058,4094,4120,4143,4167,4193,4214,4246,4270,4302,4342,4365,4392,4411,4462,4486,4523,4555,4577,4596,4627,4650,4675,4699,4721,4759,4785,4812,4832,4862,4882,4902,4927,4959,4981,5036,5060,5083,5115,5142,5162,5193,5214,5247,5272,5300,5321,5341,5380,5404,5432,5455,5478,5497,5522,5548,5572,5605,5630,5655,5682,5703,5727,5750,5778,5799,5833,5867,5889,5912,5936,5956,5991,6021,6042,6064,6086,6118,6139,6162,6189,6214,6240,6261,6290,6314,6333,6354,6375,6405,6433,6456,6499,6524,6547,6570,6592,6613,6636,6658,6682,6709,6734,6758,6779,6803,6824,6850,6872,6899,6933,6953,6973,7006,7033,7060,7102,7134,7161,7189,7216,7238,7260,7294,7315,7341,7363,7387,7410,7438,7465,7494,7512,7536,7559,7589,7611,7662,7714,7737,7763,7797,7822,7854,7873,7901,7920,7952,7979,8002,8027,8048,8074,8104,8124,8141,8160,8177,8198,8214,8229,8246,8261,8278,8295,8312,8325,8338,8351,8364,8377,8390,8403,8416],{"id":109,"slug":2194,"dossier":90,"summary":2195,"aliases":2196,"sourceIds":2199,"published":2200,"modified":2201,"checkedAt":7,"severity":2202,"references":2206,"versionKeys":2220,"packageCount":32,"repositoryCount":2231},"ghsa-22hg-r758-rrw9-14adf850","Pillow: Infinite loop in MIC n_frames when the embedded TIFF",[2197,2198],"BIT-pillow-2026-112390","CVE-2026-112390",[109],"2026-10-21T20:39:49Z","2026-10-26T08:56:03.565713059Z",[2203],{"type":2204,"score":2205},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2207,2210,2213,2215,2218],{"type":2208,"url":2209},"WEB","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-22hg-r758-rrw9",{"type":2211,"url":2212},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112390",{"type":2208,"url":2214},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F26cb3ed061173b817b9ee4b6f507cb0e1e293218",{"type":2216,"url":2217},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2208,"url":2219},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F13.0.0",[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0","pypi:pillow@12.3.0",19,{"id":110,"slug":2233,"dossier":47,"summary":2234,"aliases":2235,"sourceIds":2238,"published":2239,"modified":2240,"checkedAt":7,"severity":2241,"references":2245,"versionKeys":2266,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2236,2237],"CVE-2024-39689","PYSEC-2024-230",[110,2237],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[2242],{"type":2243,"score":2244},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2246,2248,2250,2253,2255,2257,2260,2262,2264],{"type":2211,"url":2247},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2211,"url":2249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2251,"url":2252},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2216,"url":2254},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2208,"url":2256},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2258,"url":2259},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2208,"url":2261},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2211,"url":2263},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2211,"url":2265},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2267],"pypi:certifi@2024.6.2",{"id":111,"slug":2269,"dossier":90,"summary":2270,"aliases":2271,"sourceIds":2274,"published":2275,"modified":2276,"checkedAt":7,"severity":2277,"references":2280,"versionKeys":2291,"packageCount":32,"repositoryCount":2231},"ghsa-24rc-8hj2-v98c-379a2f18","Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape \u002F absolute mode",[2272,2273],"BIT-pillow-2026-96638","CVE-2026-96638",[111],"2026-10-22T15:59:35Z","2026-10-29T10:55:36.262902070Z",[2278],{"type":2243,"score":2279},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2281,2283,2285,2287,2289,2290],{"type":2208,"url":2282},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-24rc-8hj2-v98c",{"type":2211,"url":2284},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96638",{"type":2208,"url":2286},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10015",{"type":2208,"url":2288},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe7794835e323ff2691d9b3a974cade1a44301b9a",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":112,"slug":2293,"dossier":90,"summary":2294,"aliases":2295,"sourceIds":2298,"published":2299,"modified":2300,"checkedAt":7,"severity":2301,"references":2304,"versionKeys":2313,"packageCount":32,"repositoryCount":2231},"ghsa-254f-3936-288h-1cc364b4","Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()",[2296,2297],"BIT-pillow-2026-112391","CVE-2026-112391",[112],"2026-10-21T21:11:07Z","2026-10-26T08:56:17.690706279Z",[2302],{"type":2204,"score":2303},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2305,2307,2309,2311,2312],{"type":2208,"url":2306},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-254f-3936-288h",{"type":2211,"url":2308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112391",{"type":2208,"url":2310},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F94cb11c44ff7345414da17ebfea1598a529ad9cd",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":113,"slug":2315,"dossier":90,"summary":2316,"aliases":2317,"sourceIds":2321,"published":2322,"modified":2323,"checkedAt":7,"severity":2324,"references":2328,"versionKeys":2337,"packageCount":32,"repositoryCount":2231},"ghsa-27h8-gf7j-v5hc-bd4ebeac","Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images",[2318,2319,2320],"BIT-pillow-2026-112392","CVE-2026-112392","PYSEC-2026-4326",[113,2320],"2026-10-19T22:17:06.587Z","2026-10-27T11:10:35.409737764Z",[2325,2326],{"type":2204,"score":2205},{"type":2243,"score":2327},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2329,2331,2333,2335,2336],{"type":2251,"url":2330},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-27h8-gf7j-v5hc",{"type":2211,"url":2332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112392",{"type":2251,"url":2334},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F443e3130a8c11594fd0e296afad497e11e678961",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":114,"slug":2339,"dossier":47,"summary":2340,"aliases":2341,"sourceIds":2344,"published":2345,"modified":2346,"checkedAt":7,"severity":2347,"references":2350,"versionKeys":2371,"packageCount":32,"repositoryCount":2381},"ghsa-27vj-qcqg-25rc-06b922e9","fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution",[2342,2343],"CVE-2026-104851","PYSEC-2026-4217",[114,2343],"2026-10-05T22:53:22Z","2026-10-15T14:56:18.658408345Z",[2348],{"type":2243,"score":2349},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2351,2353,2355,2357,2359,2361,2363,2365,2367,2369],{"type":2208,"url":2352},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fsecurity\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",{"type":2211,"url":2354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104851",{"type":2208,"url":2356},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2029",{"type":2208,"url":2358},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2039",{"type":2208,"url":2360},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002F86438783f93b1398ef245b92f0e6063b445b611c",{"type":2208,"url":2362},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002Fa1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8",{"type":2216,"url":2364},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec",{"type":2208,"url":2366},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Freleases\u002Ftag\u002F2026.6.0",{"type":2216,"url":2368},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffsspec",{"type":2211,"url":2370},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",[2372,2373,2374,2375,2376,2377,2378,2379,2380],"pypi:fsspec@2024.9.0","pypi:fsspec@2025.10.0","pypi:fsspec@2025.3.0","pypi:fsspec@2025.3.2","pypi:fsspec@2025.5.0","pypi:fsspec@2025.9.0","pypi:fsspec@2026.1.0","pypi:fsspec@2026.2.0","pypi:fsspec@2026.3.0",15,{"id":115,"slug":2383,"dossier":47,"summary":2384,"aliases":2385,"sourceIds":2388,"published":2389,"modified":2390,"checkedAt":7,"severity":2391,"references":2394,"versionKeys":2406,"packageCount":32,"repositoryCount":457},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2386,2387],"CVE-2026-4372","PYSEC-2026-2289",[115,2387],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[2392],{"type":2243,"score":2393},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2395,2397,2399,2401,2404],{"type":2211,"url":2396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2251,"url":2398},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2216,"url":2400},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2402,"url":2403},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2211,"url":2405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2407,2408,2409,2410,2411,2412,2413,2414,2415],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":116,"slug":2417,"dossier":47,"summary":2418,"aliases":2419,"sourceIds":2422,"published":2423,"modified":2424,"checkedAt":7,"severity":2425,"references":2429,"versionKeys":2440,"packageCount":32,"repositoryCount":34},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2420,2421],"CVE-2026-27199","PYSEC-2026-2320",[116,2421],"2026-02-19T20:32:45Z","2026-09-10T03:50:33.709103081Z",[2426,2427],{"type":2204,"score":2303},{"type":2243,"score":2428},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2430,2432,2434,2436,2438],{"type":2211,"url":2431},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2211,"url":2433},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2251,"url":2435},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2216,"url":2437},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2211,"url":2439},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2441,2442,2443,2444,2445],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":117,"slug":2447,"dossier":47,"summary":2448,"aliases":2449,"sourceIds":2452,"published":2453,"modified":2454,"checkedAt":7,"severity":2455,"references":2457,"versionKeys":2474,"packageCount":32,"repositoryCount":516},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2450,2451],"CVE-2025-54121","PYSEC-2026-1941",[117,2451],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[2456],{"type":2243,"score":2428},[2458,2460,2462,2464,2466,2468,2470,2472],{"type":2208,"url":2459},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2211,"url":2461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2251,"url":2463},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2216,"url":2465},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2208,"url":2467},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2208,"url":2469},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2216,"url":2471},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2211,"url":2473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2475,2476,2477],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":118,"slug":2479,"dossier":47,"summary":2480,"aliases":2481,"sourceIds":2484,"published":2485,"modified":2486,"checkedAt":7,"severity":2487,"references":2491,"versionKeys":2502,"packageCount":32,"repositoryCount":457},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2482,2483],"CVE-2026-54279","PYSEC-2026-2112",[118,2483],"2026-06-15T20:08:51Z","2026-11-03T16:45:04.163545105Z",[2488,2489],{"type":2243,"score":2327},{"type":2204,"score":2490},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",[2492,2494,2496,2498,2500],{"type":2211,"url":2493},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2211,"url":2495},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54279",{"type":2251,"url":2497},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",{"type":2216,"url":2499},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2208,"url":2501},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2112.yaml",[2503,2504,2505,2506,2507,2508,2509,2510,2511],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":119,"slug":2513,"dossier":47,"summary":2514,"aliases":2515,"sourceIds":2518,"published":2519,"modified":2520,"checkedAt":7,"severity":2521,"references":2524,"versionKeys":2544,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2516,2517],"CVE-2024-34069","PYSEC-2026-2043",[119,2517],"2024-05-06T14:21:27Z","2026-09-10T03:50:13.189126850Z",[2522],{"type":2243,"score":2523},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2525,2527,2529,2531,2532,2534,2536,2538,2540,2542],{"type":2208,"url":2526},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2211,"url":2528},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2208,"url":2530},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2216,"url":2437},{"type":2208,"url":2533},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2208,"url":2535},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2208,"url":2537},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2208,"url":2539},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2216,"url":2541},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2211,"url":2543},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2441],{"id":120,"slug":2546,"dossier":47,"summary":2547,"aliases":2548,"sourceIds":2550,"published":2551,"modified":2552,"checkedAt":7,"severity":2553,"references":2556,"versionKeys":2584,"packageCount":32,"repositoryCount":2587},"ghsa-2g87-pp6c-29x5-5aaa26fd","aiohttp: Multiple instances of excessive or unbounded memory\u002FCPU use",[2549],"CVE-2026-123817",[120],"2026-10-19T17:07:23Z","2026-11-09T21:30:07.738926065Z",[2554],{"type":2204,"score":2555},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2557,2559,2561,2563,2565,2567,2569,2571,2573,2575,2577,2579,2581,2582],{"type":2208,"url":2558},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2g87-pp6c-29x5",{"type":2208,"url":2560},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F09bcaa73ff084a0c539bbf16a0a78743acb7141f",{"type":2208,"url":2562},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae507423f681161efa77d20052b4054397c7fb6",{"type":2208,"url":2564},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F3d850ee9b92573c7e913821cbcb96005beb3f4df",{"type":2208,"url":2566},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47babd8c23ca79e2bae6cc8dcb5752b61e369fc7",{"type":2208,"url":2568},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F615fec3d4f088f30d2ee72cad760152e92aa1c53",{"type":2208,"url":2570},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6963ee0befec1502b6bb7b4db6c72d044c08f4fa",{"type":2208,"url":2572},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a4f6682817839313b04b8e5cea2b39c1a88ab4f",{"type":2208,"url":2574},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8cfbe9abe5e11b84006a10f9bdf82bf607671dab",{"type":2208,"url":2576},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa555ab698e08e9baea7386d5b4c0761cb8956fdd",{"type":2208,"url":2578},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc6ac0e44c3c573ff9616f4a6a532992538b31e43",{"type":2208,"url":2580},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fd925a80539ffd227da1d93ab4a5bff123cc777db",{"type":2216,"url":2499},{"type":2208,"url":2583},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.4",[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],"pypi:aiohttp@3.14.1","pypi:aiohttp@3.14.3",13,{"id":121,"slug":2589,"dossier":47,"summary":2590,"aliases":2591,"sourceIds":2594,"published":2595,"modified":2596,"checkedAt":7,"severity":2597,"references":2600,"versionKeys":2617,"packageCount":32,"repositoryCount":2620},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2592,2593],"CVE-2026-44307","PYSEC-2026-2617",[121,2593],"2026-05-06T21:45:16Z","2026-09-10T03:50:45.452547864Z",[2598],{"type":2204,"score":2599},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2601,2603,2605,2607,2609,2611,2613,2615],{"type":2208,"url":2602},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2211,"url":2604},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2208,"url":2606},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2208,"url":2608},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2216,"url":2610},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2208,"url":2612},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2216,"url":2614},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2211,"url":2616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2618,2619],"pypi:mako@1.3.10","pypi:mako@1.3.8",5,{"id":122,"slug":2622,"dossier":47,"summary":2623,"aliases":2624,"sourceIds":2627,"published":2628,"modified":2629,"checkedAt":7,"severity":2630,"references":2635,"versionKeys":2645,"packageCount":32,"repositoryCount":468},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2625,2626],"CVE-2026-34514","PYSEC-2026-2096",[122,2626],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[2631,2633],{"type":2204,"score":2632},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2243,"score":2634},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2636,2638,2640,2642,2643],{"type":2251,"url":2637},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2211,"url":2639},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2251,"url":2641},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2216,"url":2499},{"type":2211,"url":2644},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2503,2504,2505,2506,2507,2508,2509,2510],{"id":123,"slug":2647,"dossier":47,"summary":2648,"aliases":2649,"sourceIds":2652,"published":2653,"modified":2654,"checkedAt":7,"severity":2655,"references":2658,"versionKeys":2675,"packageCount":32,"repositoryCount":2681},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2650,2651],"CVE-2025-66471","PYSEC-2026-1994",[123,2651],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[2656],{"type":2204,"score":2657},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2659,2661,2663,2665,2667,2669,2671,2673],{"type":2208,"url":2660},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2211,"url":2662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2251,"url":2664},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2208,"url":2666},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":2211,"url":2668},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2208,"url":2670},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":2216,"url":2672},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2216,"url":2674},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[2676,2677,2678,2679,2680],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",17,{"id":124,"slug":2683,"dossier":90,"summary":2684,"aliases":2685,"sourceIds":2688,"published":2689,"modified":2690,"checkedAt":7,"severity":2691,"references":2694,"versionKeys":2703,"packageCount":32,"repositoryCount":2231},"ghsa-332p-7hrc-92wf-af7b2989","Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",[2686,2687],"BIT-pillow-2026-112393","CVE-2026-112393",[124],"2026-10-21T21:28:09Z","2026-10-26T08:56:07.886625845Z",[2692],{"type":2204,"score":2693},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2695,2697,2699,2701,2702],{"type":2208,"url":2696},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-332p-7hrc-92wf",{"type":2211,"url":2698},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112393",{"type":2208,"url":2700},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F11582e5ffbdceb973d5ee593f3105af5a9852b40",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":125,"slug":2705,"dossier":47,"summary":2706,"aliases":2707,"sourceIds":2711,"published":2712,"modified":2713,"checkedAt":7,"severity":2714,"references":2721,"versionKeys":2743,"packageCount":32,"repositoryCount":102},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2708,2709,2710],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[125,2710],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[2715,2717,2719],{"type":2243,"score":2716},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2204,"score":2718},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2243,"score":2720},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2722,2724,2727,2729,2731,2733,2735,2737,2739,2741],{"type":2211,"url":2723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2725,"url":2726},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2725,"url":2728},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2208,"url":2730},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2216,"url":2732},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2208,"url":2734},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2725,"url":2736},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2211,"url":2738},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2211,"url":2740},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2211,"url":2742},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2744,2745,2746],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":126,"slug":2748,"dossier":47,"summary":2749,"aliases":2750,"sourceIds":2753,"published":2754,"modified":2755,"checkedAt":7,"severity":2756,"references":2758,"versionKeys":2772,"packageCount":32,"repositoryCount":102},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2751,2752],"CVE-2025-3933","PYSEC-2026-1977",[126,2752],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[2757],{"type":2243,"score":2428},[2759,2761,2763,2765,2766,2768,2770],{"type":2211,"url":2760},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2208,"url":2762},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2208,"url":2764},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2216,"url":2400},{"type":2208,"url":2767},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2216,"url":2769},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2211,"url":2771},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2407,2408,2409],{"id":127,"slug":2774,"dossier":47,"summary":2775,"aliases":2776,"sourceIds":2779,"published":2780,"modified":2781,"checkedAt":7,"severity":2782,"references":2785,"versionKeys":2798,"packageCount":32,"repositoryCount":2681},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2777,2778],"CVE-2026-21441","PYSEC-2026-1996",[127,2778],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[2783,2784],{"type":2243,"score":2327},{"type":2204,"score":2657},[2786,2788,2790,2792,2793,2795,2796],{"type":2208,"url":2787},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2211,"url":2789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2251,"url":2791},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2216,"url":2672},{"type":2208,"url":2794},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2216,"url":2674},{"type":2211,"url":2797},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2676,2677,2678,2679,2680],{"id":128,"slug":2800,"dossier":90,"summary":2801,"aliases":2802,"sourceIds":2806,"published":2807,"modified":2808,"checkedAt":7,"severity":2809,"references":2813,"versionKeys":2824,"packageCount":32,"repositoryCount":2231},"ghsa-3j72-p6qg-6xp7-6d019684","Pillow: TarIO negative size field causes infinite CPU-spin loop",[2803,2804,2805],"BIT-pillow-2026-96642","CVE-2026-96642","PYSEC-2026-4341",[128,2805],"2026-10-21T21:20:32.650Z","2026-10-29T10:55:45.826300321Z",[2810,2812],{"type":2204,"score":2811},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":2279},[2814,2816,2818,2820,2822,2823],{"type":2211,"url":2815},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-3j72-p6qg-6xp7",{"type":2211,"url":2817},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96642",{"type":2725,"url":2819},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10012",{"type":2251,"url":2821},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19b695fdcc5eddc37374e2b1645fc4185edaf71d",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":129,"slug":2826,"dossier":47,"summary":2827,"aliases":2828,"sourceIds":2831,"published":2832,"modified":2833,"checkedAt":7,"severity":2834,"references":2838,"versionKeys":2847,"packageCount":32,"repositoryCount":468},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2829,2830],"CVE-2026-34517","PYSEC-2026-2099",[129,2830],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[2835,2837],{"type":2204,"score":2836},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2243,"score":2428},[2839,2841,2843,2845,2846],{"type":2251,"url":2840},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2211,"url":2842},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2251,"url":2844},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":130,"slug":2849,"dossier":90,"summary":2850,"aliases":2851,"sourceIds":2855,"published":2856,"modified":2857,"checkedAt":7,"severity":2858,"references":2863,"versionKeys":2874,"packageCount":32,"repositoryCount":2231},"ghsa-4558-3h8r-v8xp-9e09a0b2","Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size",[2852,2853,2854],"BIT-pillow-2026-112394","CVE-2026-112394","PYSEC-2026-4327",[130,2854],"2026-10-19T21:17:07.747Z","2026-10-27T11:10:34.006455299Z",[2859,2861],{"type":2204,"score":2860},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":2862},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:H",[2864,2866,2868,2870,2872,2873],{"type":2402,"url":2865},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4558-3h8r-v8xp",{"type":2211,"url":2867},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112394",{"type":2208,"url":2869},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9723",{"type":2251,"url":2871},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F392ee6f0d19a4adb766a63e9a99f3c28193b8d31",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":131,"slug":2876,"dossier":47,"summary":2877,"aliases":2878,"sourceIds":2882,"published":2883,"modified":2884,"checkedAt":7,"severity":2885,"references":2887,"versionKeys":2899,"packageCount":32,"repositoryCount":2900},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[2879,2880,2881],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[131,2881],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[2886],{"type":2243,"score":2327},[2888,2890,2892,2894,2896,2897],{"type":2402,"url":2889},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2211,"url":2891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2251,"url":2893},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2208,"url":2895},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2216,"url":2217},{"type":2211,"url":2898},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2221,2222,2223,2224,2225,2226,2227,2228,2229],18,{"id":132,"slug":2902,"dossier":90,"summary":2903,"aliases":2904,"sourceIds":2907,"published":2908,"modified":2909,"checkedAt":7,"severity":2910,"references":2913,"versionKeys":2922,"packageCount":32,"repositoryCount":2231},"ghsa-462x-pgg6-55fp-29049dd8","Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)",[2905,2906],"BIT-pillow-2026-112395","CVE-2026-112395",[132],"2026-10-20T20:49:26Z","2026-10-26T08:56:01.770928143Z",[2911],{"type":2243,"score":2912},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[2914,2916,2918,2920,2921],{"type":2208,"url":2915},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-462x-pgg6-55fp",{"type":2211,"url":2917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112395",{"type":2208,"url":2919},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F76869efdbbf2ad7dccd7536520fb61b7a00ab61e",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":133,"slug":2924,"dossier":47,"summary":2925,"aliases":2926,"sourceIds":2929,"published":2930,"modified":2931,"checkedAt":7,"severity":2932,"references":2935,"versionKeys":2948,"packageCount":32,"repositoryCount":478},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2927,2928],"CVE-2025-50182","PYSEC-2026-1997",[133,2928],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[2933],{"type":2243,"score":2934},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2936,2938,2940,2942,2943,2945,2946],{"type":2208,"url":2937},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2211,"url":2939},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2251,"url":2941},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2216,"url":2672},{"type":2208,"url":2944},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2216,"url":2674},{"type":2211,"url":2947},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2676,2677,2678,2679],{"id":134,"slug":2950,"dossier":47,"summary":2951,"aliases":2952,"sourceIds":2954,"published":2955,"modified":2956,"checkedAt":7,"severity":2957,"references":2960,"versionKeys":2969,"packageCount":32,"repositoryCount":2587},"ghsa-494j-54xm-rwp3-eab1773e","AIOHTTP: Secure attribute not enforced for shared cookie",[2953],"CVE-2026-111063",[134],"2026-10-19T17:07:47Z","2026-10-26T15:00:05.287728271Z",[2958],{"type":2204,"score":2959},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2961,2963,2965,2967,2968],{"type":2208,"url":2962},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-494j-54xm-rwp3",{"type":2211,"url":2964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111063",{"type":2208,"url":2966},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F999c356d61e966faffa97b06ab0d0455226d36c5",{"type":2216,"url":2499},{"type":2208,"url":2583},[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],{"id":135,"slug":2971,"dossier":47,"summary":2972,"aliases":2973,"sourceIds":2976,"published":2977,"modified":2978,"checkedAt":7,"severity":2979,"references":2983,"versionKeys":2989,"packageCount":32,"repositoryCount":457},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2974,2975],"CVE-2026-54273","PYSEC-2026-2107",[135,2975],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[2980,2982],{"type":2204,"score":2981},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2243,"score":2327},[2984,2986,2988],{"type":2211,"url":2985},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2251,"url":2987},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2216,"url":2499},[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":136,"slug":2991,"dossier":47,"summary":2992,"aliases":2993,"sourceIds":2996,"published":2997,"modified":2998,"checkedAt":7,"severity":2999,"references":3004,"versionKeys":3021,"packageCount":32,"repositoryCount":516},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[2994,2995],"CVE-2026-69112","PYSEC-2026-3804",[136,2995],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[3000,3002],{"type":2243,"score":3001},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":2204,"score":3003},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3005,3007,3009,3011,3013,3015,3017,3019],{"type":2211,"url":3006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":2208,"url":3008},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":2208,"url":3010},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":2208,"url":3012},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":2216,"url":3014},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":2208,"url":3016},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":2216,"url":3018},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":2211,"url":3020},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[3022,3023,3024,3025],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":137,"slug":3027,"dossier":47,"summary":3028,"aliases":3029,"sourceIds":3032,"published":3033,"modified":3034,"checkedAt":7,"severity":3035,"references":3039,"versionKeys":3043,"packageCount":32,"repositoryCount":457},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3030,3031],"CVE-2026-54275","PYSEC-2026-237",[137,3031],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[3036,3038],{"type":2204,"score":3037},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2243,"score":2327},[3040,3042],{"type":2211,"url":3041},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2216,"url":2499},[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":138,"slug":3045,"dossier":90,"summary":3046,"aliases":3047,"sourceIds":3051,"published":3052,"modified":3053,"checkedAt":7,"severity":3054,"references":3056,"versionKeys":3067,"packageCount":32,"repositoryCount":2231},"ghsa-4rm8-3hmm-39fg-6e9ca404","Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise",[3048,3049,3050],"BIT-pillow-2026-96641","CVE-2026-96641","PYSEC-2026-4340",[138,3050],"2026-10-21T21:20:32.500Z","2026-10-29T10:56:07.449486409Z",[3055],{"type":2243,"score":2279},[3057,3059,3061,3063,3065,3066],{"type":2211,"url":3058},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rm8-3hmm-39fg",{"type":2211,"url":3060},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96641",{"type":2725,"url":3062},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10010",{"type":2251,"url":3064},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F80de4be9e38d3a6148dd4d8491eb80cd12b760a4",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":139,"slug":3069,"dossier":47,"summary":3070,"aliases":3071,"sourceIds":3075,"published":3076,"modified":3077,"checkedAt":7,"severity":3078,"references":3082,"versionKeys":3091,"packageCount":32,"repositoryCount":457},"ghsa-4rr5-89j8-mwwm-f8e3c770","Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer",[3072,3073,3074],"BIT-pillow-2026-112396","CVE-2026-112396","PYSEC-2026-4328",[139,3074],"2026-10-19T22:17:06.837Z","2026-10-27T11:10:49.694224501Z",[3079,3081],{"type":2243,"score":3080},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2243,"score":2327},[3083,3085,3087,3089,3090],{"type":2402,"url":3084},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rr5-89j8-mwwm",{"type":2211,"url":3086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112396",{"type":2251,"url":3088},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fdc95da20207827a062cfbf551ee9f6031465a8bb",{"type":2216,"url":2217},{"type":2211,"url":2219},[2225,2226,2227,2228,2229,2230],{"id":140,"slug":3093,"dossier":47,"summary":3094,"aliases":3095,"sourceIds":3098,"published":3099,"modified":3100,"checkedAt":7,"severity":3101,"references":3104,"versionKeys":3117,"packageCount":32,"repositoryCount":516},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[3096,3097],"CVE-2025-6921","PYSEC-2026-1980",[140,3097],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[3102],{"type":2243,"score":3103},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3105,3107,3109,3111,3112,3114,3115],{"type":2211,"url":3106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2208,"url":3108},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2208,"url":3110},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2216,"url":2400},{"type":2208,"url":3113},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2216,"url":2769},{"type":2211,"url":3116},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2407,2408,2409,2410],{"id":141,"slug":3119,"dossier":47,"summary":3120,"aliases":3121,"sourceIds":3125,"published":3126,"modified":3127,"checkedAt":7,"severity":3128,"references":3131,"versionKeys":3146,"packageCount":32,"repositoryCount":2900},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3122,3123,3124],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[141,3124],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[3129],{"type":2243,"score":3130},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3132,3134,3136,3138,3140,3142,3144,3145],{"type":2402,"url":3133},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2211,"url":3135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2251,"url":3137},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2251,"url":3139},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2251,"url":3141},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2208,"url":3143},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2216,"url":2217},{"type":2211,"url":2898},[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":142,"slug":3148,"dossier":47,"summary":3149,"aliases":3150,"sourceIds":3153,"published":3154,"modified":3155,"checkedAt":7,"severity":3156,"references":3159,"versionKeys":3178,"packageCount":32,"repositoryCount":102},"ghsa-4xh5-x5gv-qwph-bdb101cb","pip's fallback tar extraction doesn't check symbolic links point to extraction directory",[3151,3152],"CVE-2025-8869","PYSEC-2026-1795",[142,3152],"2025-09-24T15:31:14Z","2026-09-10T03:50:27.949321787Z",[3157],{"type":2204,"score":3158},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3160,3162,3164,3166,3168,3170,3172,3174,3176],{"type":2211,"url":3161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8869",{"type":2208,"url":3163},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13550",{"type":2251,"url":3165},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Ff2b92314da012b9fffa36b3f3e67748a37ef464a",{"type":2216,"url":3167},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip",{"type":2208,"url":3169},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00028.html",{"type":2208,"url":3171},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FIF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN",{"type":2208,"url":3173},"https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Fnews\u002F#v25-2",{"type":2216,"url":3175},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpip",{"type":2211,"url":3177},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xh5-x5gv-qwph",[3179,3180],"pypi:pip@22.0.2","pypi:pip@25.1.1",{"id":143,"slug":3182,"dossier":47,"summary":3183,"aliases":3184,"sourceIds":3187,"published":3188,"modified":3189,"checkedAt":7,"severity":3190,"references":3193,"versionKeys":3216,"packageCount":32,"repositoryCount":3219},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3185,3186],"CVE-2026-4539","PYSEC-2026-2987",[143,3186],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[3191,3192],{"type":2243,"score":2716},{"type":2204,"score":2718},[3194,3196,3198,3200,3202,3204,3206,3208,3210,3212,3214],{"type":2211,"url":3195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2208,"url":3197},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2208,"url":3199},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2208,"url":3201},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2216,"url":3203},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2208,"url":3205},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2208,"url":3207},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2208,"url":3209},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2208,"url":3211},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2216,"url":3213},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2211,"url":3215},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3217,3218],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",16,{"id":144,"slug":3221,"dossier":47,"summary":3222,"aliases":3223,"sourceIds":3227,"published":3228,"modified":3229,"checkedAt":7,"severity":3230,"references":3235,"versionKeys":3245,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3224,3225,3226],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[144,3226],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[3231,3233],{"type":2204,"score":3232},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":3234},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3236,3238,3240,3242,3244],{"type":2211,"url":3237},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2211,"url":3239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2208,"url":3241},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2208,"url":3243},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2216,"url":2732},[2744],{"id":145,"slug":3247,"dossier":47,"summary":3248,"aliases":3249,"sourceIds":3252,"published":3253,"modified":3254,"checkedAt":7,"severity":3255,"references":3258,"versionKeys":3270,"packageCount":32,"repositoryCount":478},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3250,3251],"CVE-2025-69226","PYSEC-2026-1097",[145,3251],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[3256],{"type":2204,"score":3257},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3259,3261,3263,3265,3266,3268],{"type":2208,"url":3260},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2211,"url":3262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2251,"url":3264},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2216,"url":2499},{"type":2216,"url":3267},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2211,"url":3269},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2503,2504,2505,2506,2507,2508,2509],{"id":146,"slug":3272,"dossier":47,"summary":3273,"aliases":3274,"sourceIds":3277,"published":3278,"modified":3279,"checkedAt":7,"severity":3280,"references":3282,"versionKeys":3297,"packageCount":32,"repositoryCount":478},"ghsa-54p9-h82j-f925-623d2ef6","Multidict: Reference leak in CIMultiDict\u002FMultiDict items-view union and subtraction",[3275,3276],"CVE-2026-104874","PYSEC-2026-4244",[146,3276],"2026-10-05T23:40:58Z","2026-10-15T14:56:05.601333622Z",[3281],{"type":2243,"score":2428},[3283,3285,3287,3289,3291,3293,3295],{"type":2208,"url":3284},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fsecurity\u002Fadvisories\u002FGHSA-54p9-h82j-f925",{"type":2211,"url":3286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104874",{"type":2208,"url":3288},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fcommit\u002F350b4a07bf8ff851b6d7544e81b1c748bdc74c40",{"type":2216,"url":3290},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict",{"type":2208,"url":3292},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Freleases\u002Ftag\u002Fv6.9.1",{"type":2216,"url":3294},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmultidict",{"type":2211,"url":3296},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54p9-h82j-f925",[3298,3299],"pypi:multidict@6.7.0","pypi:multidict@6.7.1",{"id":147,"slug":3301,"dossier":47,"summary":3302,"aliases":3303,"sourceIds":3306,"published":3307,"modified":3308,"checkedAt":7,"severity":3309,"references":3312,"versionKeys":3327,"packageCount":32,"repositoryCount":34},"ghsa-5639-2j2p-m4mx-3aefc2b3","Mako: Path traversal via drive-letter URI on Windows in TemplateLookup",[3304,3305],"CVE-2026-102991","PYSEC-2026-4243",[147,3305],"2026-10-05T23:42:02Z","2026-10-15T14:55:45.473045835Z",[3310],{"type":2243,"score":3311},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3313,3315,3317,3319,3321,3322,3324,3325],{"type":2208,"url":3314},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",{"type":2211,"url":3316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102991",{"type":2208,"url":3318},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F441",{"type":2208,"url":3320},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F000ed85e4e48771eff460bf4fc721fb43de80e08",{"type":2216,"url":2610},{"type":2208,"url":3323},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_4_2",{"type":2216,"url":2614},{"type":2211,"url":3326},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",[2618,3328,2619],"pypi:mako@1.3.12",{"id":148,"slug":3330,"dossier":47,"summary":3331,"aliases":3332,"sourceIds":3334,"published":3335,"modified":3336,"checkedAt":7,"severity":3337,"references":3340,"versionKeys":3351,"packageCount":32,"repositoryCount":2620},"ghsa-567q-5qvw-pf92-60527ab6","filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break",[3333],"CVE-2026-112907",[148],"2026-10-23T22:27:32Z","2026-10-23T22:45:03.452878321Z",[3338],{"type":2243,"score":3339},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3341,3343,3345,3347,3349],{"type":2208,"url":3342},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-567q-5qvw-pf92",{"type":2208,"url":3344},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F835",{"type":2208,"url":3346},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Fe1e825b1992f69fb6b346dc395d5ae4893536c0a",{"type":2216,"url":3348},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2208,"url":3350},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.2.1",[3352,3353,3354,3355],"pypi:filelock@3.25.2","pypi:filelock@3.29.0","pypi:filelock@3.29.4","pypi:filelock@3.29.7",{"id":149,"slug":3357,"dossier":47,"summary":3358,"aliases":3359,"sourceIds":3362,"published":3363,"modified":3364,"checkedAt":7,"severity":3365,"references":3368,"versionKeys":3381,"packageCount":32,"repositoryCount":102},"ghsa-58qw-9mgm-455v-d690efaf","pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files",[3360,3361],"CVE-2026-3219","PYSEC-2026-2875",[149,3361],"2026-04-20T18:31:48Z","2026-09-10T03:50:42.838011658Z",[3366],{"type":2204,"score":3367},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3369,3371,3373,3375,3376,3378,3379],{"type":2211,"url":3370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3219",{"type":2208,"url":3372},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F13867",{"type":2208,"url":3374},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13870",{"type":2216,"url":3167},{"type":2208,"url":3377},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FQAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ",{"type":2216,"url":3175},{"type":2211,"url":3380},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58qw-9mgm-455v",[3179,3180],{"id":150,"slug":3383,"dossier":90,"summary":3384,"aliases":3385,"sourceIds":3389,"published":3390,"modified":3391,"checkedAt":7,"severity":3392,"references":3395,"versionKeys":3404,"packageCount":32,"repositoryCount":2231},"ghsa-58r4-6rv3-gfh8-17253bd5","Pillow: Out-of-bounds access in _imagingmorph on a zero-width image",[3386,3387,3388],"BIT-pillow-2026-112397","CVE-2026-112397","PYSEC-2026-4329",[150,3388],"2026-10-19T22:17:06.970Z","2026-10-28T11:10:53.627071818Z",[3393,3394],{"type":2204,"score":2555},{"type":2243,"score":2327},[3396,3398,3400,3402,3403],{"type":2402,"url":3397},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-58r4-6rv3-gfh8",{"type":2211,"url":3399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112397",{"type":2251,"url":3401},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F18f7c0dfee93063c51db6ed0ca8c4da2999dcb64",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":151,"slug":3406,"dossier":47,"summary":3407,"aliases":3408,"sourceIds":3411,"published":3412,"modified":3413,"checkedAt":7,"severity":3414,"references":3417,"versionKeys":3430,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3409,3410],"CVE-2024-53981","PYSEC-2026-1851",[151,3410],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[3415,3416],{"type":2243,"score":2327},{"type":2204,"score":2555},[3418,3420,3422,3424,3426,3428],{"type":2208,"url":3419},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2211,"url":3421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2208,"url":3423},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2216,"url":3425},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2216,"url":3427},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2211,"url":3429},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3431],"pypi:python-multipart@0.0.9",{"id":152,"slug":3433,"dossier":47,"summary":3434,"aliases":3435,"sourceIds":3438,"published":3439,"modified":3440,"checkedAt":7,"severity":3441,"references":3443,"versionKeys":3454,"packageCount":32,"repositoryCount":516},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3436,3437],"CVE-2025-6638","PYSEC-2026-1981",[152,3437],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[3442],{"type":2243,"score":3103},[3444,3446,3447,3448,3449,3451,3452],{"type":2211,"url":3445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2208,"url":3108},{"type":2208,"url":3110},{"type":2216,"url":2400},{"type":2208,"url":3450},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2216,"url":2769},{"type":2211,"url":3453},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2407,2408,2409,2410],{"id":153,"slug":3456,"dossier":47,"summary":3457,"aliases":3458,"sourceIds":3461,"published":3462,"modified":3463,"checkedAt":7,"severity":3464,"references":3467,"versionKeys":3484,"packageCount":32,"repositoryCount":3219},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[3459,3460],"CVE-2026-64847","PYSEC-2026-4024",[153,3460],"2026-09-18T17:17:10Z","2026-10-01T17:55:57.336188727Z",[3465],{"type":2204,"score":3466},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3468,3470,3472,3474,3476,3478,3480,3482],{"type":2208,"url":3469},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":2208,"url":3471},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":2208,"url":3473},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":2216,"url":3475},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":2208,"url":3477},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",{"type":2216,"url":3479},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fanyio",{"type":2211,"url":3481},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":2211,"url":3483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-64847",[3485,3486,3487,3488,3489,3490,3491,3492],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":154,"slug":3494,"dossier":47,"summary":3495,"aliases":3496,"sourceIds":3500,"published":3501,"modified":3502,"checkedAt":7,"severity":3503,"references":3508,"versionKeys":3525,"packageCount":32,"repositoryCount":516},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3497,3498,3499],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[154,3499],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[3504,3506],{"type":2204,"score":3505},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2243,"score":3507},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3509,3511,3513,3515,3517,3519,3521,3523],{"type":2402,"url":3510},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2211,"url":3512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2725,"url":3514},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2251,"url":3516},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2208,"url":3518},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2216,"url":3520},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2208,"url":3522},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2258,"url":3524},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3526,3527,3528,3529],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":155,"slug":3531,"dossier":47,"summary":3532,"aliases":3533,"sourceIds":3536,"published":3537,"modified":3538,"checkedAt":7,"severity":3539,"references":3541,"versionKeys":3550,"packageCount":32,"repositoryCount":497},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[3534,3535],"CVE-2026-53539","PYSEC-2026-3036",[155,3535],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[3540],{"type":2243,"score":2327},[3542,3544,3545,3546,3548],{"type":2208,"url":3543},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2216,"url":3425},{"type":2216,"url":3427},{"type":2211,"url":3547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2211,"url":3549},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[3551,3552,3553,3431],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":156,"slug":3555,"dossier":47,"summary":3556,"aliases":3557,"sourceIds":3560,"published":3561,"modified":3562,"checkedAt":7,"severity":3563,"references":3565,"versionKeys":3576,"packageCount":32,"repositoryCount":32},"ghsa-5w7q-77mv-v69f-f2198303","python-socketio: Binary attachment accumulation can cause denial of service",[3558,3559],"CVE-2026-48804","PYSEC-2026-3042",[156,3559],"2026-06-26T20:51:58Z","2026-07-13T16:43:50.745760053Z",[3564],{"type":2243,"score":2327},[3566,3568,3570,3572,3574],{"type":2208,"url":3567},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio\u002Fsecurity\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":2216,"url":3569},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio",{"type":2216,"url":3571},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-socketio",{"type":2211,"url":3573},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":2211,"url":3575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48804",[3577],"pypi:python-socketio@5.14.3",{"id":157,"slug":3579,"dossier":47,"summary":3580,"aliases":3581,"sourceIds":3583,"published":3584,"modified":3585,"checkedAt":7,"severity":3586,"references":3588,"versionKeys":3595,"packageCount":32,"repositoryCount":2587},"ghsa-5wr8-gcqf-gqf3-8b4786ad","aiohttp server lacks an initial request\u002Fheader timeout",[3582],"CVE-2026-111064",[157],"2026-10-19T17:08:04Z","2026-10-19T17:15:04.139404381Z",[3587],{"type":2204,"score":2205},[3589,3591,3593,3594],{"type":2208,"url":3590},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-5wr8-gcqf-gqf3",{"type":2208,"url":3592},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbe846822b4b3a5a54b6163e794b42dc06fba54a3",{"type":2216,"url":2499},{"type":2208,"url":2583},[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],{"id":158,"slug":3597,"dossier":90,"summary":3598,"aliases":3599,"sourceIds":3603,"published":3604,"modified":3605,"checkedAt":7,"severity":3606,"references":3610,"versionKeys":3619,"packageCount":32,"repositoryCount":2231},"ghsa-5x8w-8jj5-q52h-96fe86d3","Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution",[3600,3601,3602],"BIT-pillow-2026-112398","CVE-2026-112398","PYSEC-2026-4330",[158,3602],"2026-10-19T22:17:07.107Z","2026-10-28T11:10:48.833199086Z",[3607,3609],{"type":2204,"score":3608},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":3234},[3611,3613,3615,3617,3618],{"type":2402,"url":3612},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x8w-8jj5-q52h",{"type":2211,"url":3614},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112398",{"type":2251,"url":3616},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F242a059aedc1935097d9aa1dc3f099750467ba75",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":159,"slug":3621,"dossier":47,"summary":3622,"aliases":3623,"sourceIds":3627,"published":3628,"modified":3629,"checkedAt":7,"severity":3630,"references":3632,"versionKeys":3642,"packageCount":32,"repositoryCount":2900},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[3624,3625,3626],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[159,3626],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[3631],{"type":2243,"score":2327},[3633,3635,3637,3638,3640,3641],{"type":2402,"url":3634},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2211,"url":3636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2251,"url":2893},{"type":2208,"url":3639},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2216,"url":2217},{"type":2211,"url":2898},[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":160,"slug":3644,"dossier":90,"summary":3645,"aliases":3646,"sourceIds":3649,"published":3650,"modified":3651,"checkedAt":7,"severity":3652,"references":3654,"versionKeys":3663,"packageCount":32,"repositoryCount":2231},"ghsa-5xm2-6676-qcp9-1e22ee95","Pillow: APNG background disposal allocates full canvas before decompression bomb check",[3647,3648],"BIT-pillow-2026-112399","CVE-2026-112399",[160],"2026-10-21T21:17:56Z","2026-10-26T08:56:16.789537980Z",[3653],{"type":2204,"score":2555},[3655,3657,3659,3661,3662],{"type":2208,"url":3656},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xm2-6676-qcp9",{"type":2211,"url":3658},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112399",{"type":2208,"url":3660},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff1acfc54c53502948d0d14121872061df931db48",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":161,"slug":3665,"dossier":47,"summary":3666,"aliases":3667,"sourceIds":3671,"published":3672,"modified":3673,"checkedAt":7,"severity":3674,"references":3678,"versionKeys":3692,"packageCount":32,"repositoryCount":2587},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3668,3669,3670],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[161,3670],"2026-05-04T20:18:27Z","2026-10-19T20:00:04.709097863Z",[3675,3676],{"type":2243,"score":2720},{"type":2204,"score":3677},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3679,3681,3683,3685,3687,3689,3690],{"type":2211,"url":3680},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2211,"url":3682},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2208,"url":3684},"https:\u002F\u002Fgithub.com\u002Fdesigncomputer\u002Fmysql_mcp_server\u002Fcommit\u002Fa96549f4a4d65443fd6e9c7f2324fba9a5c80a82",{"type":2208,"url":3686},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcf6de8ca9b23e714aa5310e1c791eda66fc0b670",{"type":2208,"url":3688},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2251.yaml",{"type":2216,"url":2217},{"type":2211,"url":3691},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2224,2225,2226,2227,2228],{"id":162,"slug":3694,"dossier":47,"summary":3695,"aliases":3696,"sourceIds":3700,"published":3701,"modified":3702,"checkedAt":7,"severity":3703,"references":3706,"versionKeys":3722,"packageCount":32,"repositoryCount":2900},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[3697,3698,3699],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[162,3699],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[3704],{"type":2204,"score":3705},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3707,3709,3711,3713,3715,3716,3718,3720],{"type":2208,"url":3708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2211,"url":3710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2208,"url":3712},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2208,"url":3714},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2216,"url":2217},{"type":2208,"url":3717},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2216,"url":3719},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2211,"url":3721},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":163,"slug":3724,"dossier":47,"summary":3725,"aliases":3726,"sourceIds":3731,"published":3732,"modified":3733,"checkedAt":7,"severity":3734,"references":3736,"versionKeys":3764,"packageCount":32,"repositoryCount":3772},"ghsa-63cw-57p8-fm3p-01ac35c7","PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files",[3727,3728,3729,3730],"BIT-pytorch-2026-24747","CVE-2026-24747","PYSEC-2026-1856","PYSEC-2026-2286",[163,3730],"2026-01-27T20:10:54Z","2026-11-04T03:15:10.870748916Z",[3735],{"type":2243,"score":2349},[3737,3739,3741,3743,3745,3747,3749,3751,3753,3755,3756,3758,3760,3762],{"type":2211,"url":3738},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2211,"url":3740},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24747",{"type":2725,"url":3742},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2211,"url":3744},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2208,"url":3746},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2725,"url":3748},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2211,"url":3750},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2208,"url":3752},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpytorch\u002FPYSEC-2026-1856.yaml",{"type":2208,"url":3754},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2026-2286.yaml",{"type":2216,"url":2732},{"type":2251,"url":3757},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",{"type":2211,"url":3759},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2208,"url":3761},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytorch",{"type":2208,"url":3763},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",[2744,2745,2746,3765,3766,3767,3768,3769,3770,3771],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu","pypi:torch@2.9.1+cu128",14,{"id":164,"slug":3774,"dossier":47,"summary":3775,"aliases":3776,"sourceIds":3779,"published":3780,"modified":3781,"checkedAt":7,"severity":3782,"references":3788,"versionKeys":3799,"packageCount":32,"repositoryCount":468},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[3777,3778],"CVE-2026-34520","PYSEC-2026-2102",[164,3778],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[3783,3785,3786],{"type":2243,"score":3784},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2204,"score":2632},{"type":2204,"score":3787},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3789,3791,3793,3795,3796,3797],{"type":2251,"url":3790},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2211,"url":3792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2251,"url":3794},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2216,"url":2499},{"type":2211,"url":2644},{"type":2208,"url":3798},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2503,2504,2505,2506,2507,2508,2509,2510],{"id":165,"slug":3801,"dossier":47,"summary":3802,"aliases":3803,"sourceIds":3806,"published":3807,"modified":3808,"checkedAt":7,"severity":3809,"references":3812,"versionKeys":3818,"packageCount":32,"repositoryCount":457},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[3804,3805],"CVE-2026-54277","PYSEC-2026-2110",[165,3805],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[3810,3811],{"type":2204,"score":2981},{"type":2243,"score":2327},[3813,3815,3817],{"type":2211,"url":3814},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2251,"url":3816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2216,"url":2499},[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":166,"slug":3820,"dossier":47,"summary":3821,"aliases":3822,"sourceIds":3826,"published":3827,"modified":3828,"checkedAt":7,"severity":3829,"references":3833,"versionKeys":3844,"packageCount":32,"repositoryCount":2381},"ghsa-654x-cwwv-5j9c-54c66942","Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1",[3823,3824,3825],"BIT-pillow-2026-114501","CVE-2026-114501","PYSEC-2026-4336",[166,3825],"2026-10-21T22:16:49.410Z","2026-10-29T10:56:00.934076155Z",[3830,3831],{"type":2204,"score":2959},{"type":2243,"score":3832},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3834,3836,3838,3840,3842,3843],{"type":2211,"url":3835},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-654x-cwwv-5j9c",{"type":2211,"url":3837},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114501",{"type":2725,"url":3839},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10172",{"type":2251,"url":3841},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19f64946eb247b973dd4560be7dea3bf979d2e6a",{"type":2216,"url":2217},{"type":2211,"url":2219},[2224,2225,2226,2227,2228,2229,2230],{"id":167,"slug":3846,"dossier":90,"summary":3847,"aliases":3848,"sourceIds":3851,"published":3852,"modified":3853,"checkedAt":7,"severity":3854,"references":3858,"versionKeys":3867,"packageCount":32,"repositoryCount":3872},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3849,3850],"CVE-2026-45409","PYSEC-2026-215",[167,3850],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[3855,3856],{"type":2243,"score":2428},{"type":2204,"score":3857},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3859,3861,3863,3865],{"type":2211,"url":3860},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2211,"url":3862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2216,"url":3864},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2208,"url":3866},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3868,3869,3870,3871],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",22,{"id":168,"slug":3874,"dossier":90,"summary":3875,"aliases":3876,"sourceIds":3879,"published":3880,"modified":3881,"checkedAt":7,"severity":3882,"references":3884,"versionKeys":3893,"packageCount":32,"repositoryCount":2231},"ghsa-65qm-jvmh-6pqg-7925f039","Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS",[3877,3878],"BIT-pillow-2026-112400","CVE-2026-112400",[168],"2026-10-20T20:53:36Z","2026-10-26T08:55:49.781288748Z",[3883],{"type":2204,"score":2555},[3885,3887,3889,3891,3892],{"type":2208,"url":3886},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-65qm-jvmh-6pqg",{"type":2211,"url":3888},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112400",{"type":2208,"url":3890},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6faed707cfb760a4cbd726ddc8406f576cf35bf7",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":169,"slug":3895,"dossier":47,"summary":3896,"aliases":3897,"sourceIds":3900,"published":3901,"modified":3902,"checkedAt":7,"severity":3903,"references":3905,"versionKeys":3916,"packageCount":32,"repositoryCount":478},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[3898,3899],"CVE-2025-69224","PYSEC-2026-1099",[169,3899],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[3904],{"type":2204,"score":2632},[3906,3908,3910,3912,3913,3914],{"type":2208,"url":3907},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2211,"url":3909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2251,"url":3911},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":3915},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2503,2504,2505,2506,2507,2508,2509],{"id":170,"slug":3918,"dossier":90,"summary":3919,"aliases":3920,"sourceIds":3922,"published":3923,"modified":3924,"checkedAt":7,"severity":3925,"references":3928,"versionKeys":3937,"packageCount":32,"repositoryCount":2231},"ghsa-69hj-f68j-2879-d34e420d","filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path",[3921],"CVE-2026-112909",[170],"2026-10-28T21:08:35Z","2026-10-28T21:15:04.974667790Z",[3926],{"type":2243,"score":3927},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[3929,3931,3933,3934,3935,3936],{"type":2208,"url":3930},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-69hj-f68j-2879",{"type":2211,"url":3932},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112909",{"type":2208,"url":3344},{"type":2208,"url":3346},{"type":2216,"url":3348},{"type":2208,"url":3350},[3938,3939,3940,3941,3942,3352,3353,3354,3355],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0","pypi:filelock@3.20.3",{"id":171,"slug":3944,"dossier":47,"summary":3945,"aliases":3946,"sourceIds":3949,"published":3950,"modified":3951,"checkedAt":7,"severity":3952,"references":3957,"versionKeys":3969,"packageCount":32,"repositoryCount":457},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3947,3948],"CVE-2026-1839","PYSEC-2026-2288",[171,3948],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[3953,3955],{"type":2243,"score":3954},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2243,"score":3956},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3958,3960,3962,3963,3965,3967],{"type":2211,"url":3959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2251,"url":3961},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2216,"url":2400},{"type":2208,"url":3964},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2402,"url":3966},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2211,"url":3968},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2407,2408,2409,2410,2411,2412,2413,2414,2415],{"id":172,"slug":3971,"dossier":47,"summary":3972,"aliases":3973,"sourceIds":3975,"published":3976,"modified":3977,"checkedAt":7,"severity":3978,"references":3980,"versionKeys":3989,"packageCount":32,"repositoryCount":2587},"ghsa-6cjc-53gc-5rqm-f1beb40a","AIOHTTP: Connector pool exhaustion via Max-Age overflow",[3974],"CVE-2026-111065",[172],"2026-10-20T19:57:24Z","2026-10-20T20:15:05.286053785Z",[3979],{"type":2204,"score":3857},[3981,3983,3985,3987,3988],{"type":2208,"url":3982},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6cjc-53gc-5rqm",{"type":2211,"url":3984},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111065",{"type":2208,"url":3986},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9dd8eaf4e31f1237ef2c1574a8c82a739fca5805",{"type":2216,"url":2499},{"type":2208,"url":2583},[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],{"id":173,"slug":3991,"dossier":47,"summary":3992,"aliases":3993,"sourceIds":3996,"published":3997,"modified":3998,"checkedAt":7,"severity":3999,"references":4001,"versionKeys":4012,"packageCount":32,"repositoryCount":478},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3994,3995],"CVE-2025-69228","PYSEC-2026-1100",[173,3995],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[4000],{"type":2204,"score":2981},[4002,4004,4006,4008,4009,4010],{"type":2208,"url":4003},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2211,"url":4005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2251,"url":4007},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":4011},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2503,2504,2505,2506,2507,2508,2509],{"id":174,"slug":4014,"dossier":47,"summary":4015,"aliases":4016,"sourceIds":4019,"published":4020,"modified":4021,"checkedAt":7,"severity":4022,"references":4025,"versionKeys":4034,"packageCount":32,"repositoryCount":497},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4017,4018],"CVE-2026-53538","PYSEC-2026-3037",[174,4018],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[4023],{"type":2243,"score":4024},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4026,4028,4029,4030,4032],{"type":2208,"url":4027},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2216,"url":3425},{"type":2216,"url":3427},{"type":2211,"url":4031},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2211,"url":4033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[3551,3552,3553,3431],{"id":175,"slug":4036,"dossier":47,"summary":4037,"aliases":4038,"sourceIds":4041,"published":4042,"modified":4043,"checkedAt":7,"severity":4044,"references":4046,"versionKeys":4057,"packageCount":32,"repositoryCount":478},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4039,4040],"CVE-2025-69223","PYSEC-2026-1101",[175,4040],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[4045],{"type":2243,"score":2327},[4047,4049,4051,4053,4054,4055],{"type":2208,"url":4048},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2211,"url":4050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2251,"url":4052},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":4056},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2503,2504,2505,2506,2507,2508,2509],{"id":176,"slug":4059,"dossier":90,"summary":4060,"aliases":4061,"sourceIds":4063,"published":4064,"modified":4065,"checkedAt":7,"severity":4066,"references":4069,"versionKeys":4081,"packageCount":32,"repositoryCount":4093},"ghsa-6q48-6c7w-9gw2-05036ff0","certifi bundles emSign root CAs with compromised intermediate CA keys",[4062],"PYSEC-2026-4320",[176,4062],"2026-10-20T19:35:05Z","2026-10-30T14:00:02.590922333Z",[4067],{"type":2204,"score":4068},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4070,4072,4074,4076,4077,4079],{"type":2208,"url":4071},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",{"type":2208,"url":4073},"https:\u002F\u002Fdiscuss.python.org\u002Ft\u002Finformation-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident\u002F109576",{"type":2208,"url":4075},"https:\u002F\u002Femudhra.we-have-a-problem.com\u002F",{"type":2216,"url":2254},{"type":2216,"url":4078},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcertifi",{"type":2211,"url":4080},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",[4082,2267,4083,4084,4085,4086,4087,4088,4089,4090,4091,4092],"pypi:certifi@2024.12.14","pypi:certifi@2025.1.31","pypi:certifi@2025.10.5","pypi:certifi@2025.11.12","pypi:certifi@2025.4.26","pypi:certifi@2025.6.15","pypi:certifi@2025.8.3","pypi:certifi@2026.1.4","pypi:certifi@2026.2.25","pypi:certifi@2026.4.22","pypi:certifi@2026.6.17",21,{"id":177,"slug":4095,"dossier":47,"summary":4096,"aliases":4097,"sourceIds":4101,"published":4102,"modified":4103,"checkedAt":7,"severity":4104,"references":4106,"versionKeys":4119,"packageCount":32,"repositoryCount":2900},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[4098,4099,4100],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[177,4100],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[4105],{"type":2243,"score":2327},[4107,4109,4111,4113,4115,4117,4118],{"type":2402,"url":4108},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2211,"url":4110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2251,"url":4112},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2251,"url":4114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2208,"url":4116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2216,"url":2217},{"type":2211,"url":3717},[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":178,"slug":4121,"dossier":47,"summary":4122,"aliases":4123,"sourceIds":4126,"published":4127,"modified":4128,"checkedAt":7,"severity":4129,"references":4131,"versionKeys":4142,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4124,4125],"CVE-2024-12720","PYSEC-2026-1982",[178,4125],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[4130],{"type":2243,"score":3103},[4132,4134,4136,4137,4139,4140],{"type":2211,"url":4133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2208,"url":4135},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2216,"url":2400},{"type":2208,"url":4138},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2216,"url":2769},{"type":2211,"url":4141},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2407],{"id":179,"slug":4144,"dossier":47,"summary":4145,"aliases":4146,"sourceIds":4149,"published":4150,"modified":4151,"checkedAt":7,"severity":4152,"references":4154,"versionKeys":4163,"packageCount":32,"repositoryCount":516},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[4147,4148],"CVE-2026-57585","PYSEC-2026-3625",[179,4148],"2026-06-19T21:42:55Z","2026-09-10T03:51:07.975753919Z",[4153],{"type":2243,"score":2327},[4155,4157,4159,4161],{"type":2211,"url":4156},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":2251,"url":4158},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":2216,"url":4160},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":2208,"url":4162},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[4164,4165,4166],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":180,"slug":4168,"dossier":47,"summary":4169,"aliases":4170,"sourceIds":4173,"published":4174,"modified":4175,"checkedAt":7,"severity":4176,"references":4179,"versionKeys":4192,"packageCount":32,"repositoryCount":102},"ghsa-6vgw-5pg2-w6jp-57c7d3f5","pip Path Traversal vulnerability",[4171,4172],"CVE-2026-1703","PYSEC-2026-1796",[180,4172],"2026-02-02T15:30:34Z","2026-09-10T03:50:34.266257578Z",[4177],{"type":2204,"score":4178},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4180,4182,4184,4186,4187,4189,4190],{"type":2211,"url":4181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1703",{"type":2208,"url":4183},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13777",{"type":2208,"url":4185},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F8e227a9be4faa9594e05d02ca05a413a2a4e7735",{"type":2216,"url":3167},{"type":2208,"url":4188},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FWIEA34D4TABF2UNQJAOMXKCICSPBE2DJ",{"type":2216,"url":3175},{"type":2211,"url":4191},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6vgw-5pg2-w6jp",[3179,3180],{"id":181,"slug":4194,"dossier":90,"summary":4195,"aliases":4196,"sourceIds":4199,"published":4200,"modified":4201,"checkedAt":7,"severity":4202,"references":4204,"versionKeys":4213,"packageCount":32,"repositoryCount":2231},"ghsa-74r2-7ff9-mjj2-9127f170","Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()",[4197,4198],"BIT-pillow-2026-112401","CVE-2026-112401",[181],"2026-10-21T20:42:11Z","2026-10-26T08:56:13.792431880Z",[4203],{"type":2204,"score":3857},[4205,4207,4209,4211,4212],{"type":2208,"url":4206},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-74r2-7ff9-mjj2",{"type":2211,"url":4208},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112401",{"type":2208,"url":4210},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F68a3fe957d8a4d552e8c69d96066d749f0614c7e",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":182,"slug":4215,"dossier":47,"summary":4216,"aliases":4217,"sourceIds":4220,"published":4221,"modified":4222,"checkedAt":7,"severity":4223,"references":4226,"versionKeys":4239,"packageCount":32,"repositoryCount":478},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[4218,4219],"CVE-2025-66034","PYSEC-2026-1389",[182,4219],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[4224],{"type":2243,"score":4225},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[4227,4229,4231,4233,4235,4237],{"type":2208,"url":4228},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2211,"url":4230},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2208,"url":4232},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2216,"url":4234},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2216,"url":4236},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2211,"url":4238},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[4240,4241,4242,4243,4244,4245],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":183,"slug":4247,"dossier":47,"summary":4248,"aliases":4249,"sourceIds":4250,"published":4251,"modified":4252,"checkedAt":7,"severity":4253,"references":4256,"versionKeys":4269,"packageCount":32,"repositoryCount":2681},"ghsa-78g4-xqwv-q3g8-95d38591","Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()",[],[183],"2026-10-22T17:01:08Z","2026-10-22T17:15:04.326552524Z",[4254],{"type":2243,"score":4255},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4257,4259,4261,4263,4265,4266,4267],{"type":2208,"url":4258},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-78g4-xqwv-q3g8",{"type":2208,"url":4260},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5f8114c8096b181fae493543cd3837d9f9a971cc",{"type":2208,"url":4262},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd3470c327840f4c216a1610f30e7091dfd0b97c0",{"type":2208,"url":4264},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fcommit\u002F91d08b11a72764f6d199f32fa0c1b1abd4edc2ad",{"type":2216,"url":2217},{"type":2208,"url":2219},{"type":2208,"url":4268},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FOSV-2025-219",[2223,2224,2225,2226,2227,2228,2229,2230],{"id":184,"slug":4271,"dossier":47,"summary":4272,"aliases":4273,"sourceIds":4276,"published":4277,"modified":4278,"checkedAt":7,"severity":4279,"references":4281,"versionKeys":4298,"packageCount":32,"repositoryCount":34},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4274,4275],"CVE-2025-62727","PYSEC-2026-1942",[184,4275],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[4280],{"type":2243,"score":2327},[4282,4284,4286,4288,4291,4293,4295,4296],{"type":2208,"url":4283},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2211,"url":4285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2251,"url":4287},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4289,"url":4290},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2216,"url":4292},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2208,"url":4294},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2216,"url":2471},{"type":2211,"url":4297},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2476,2477,4299,4300,4301],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":185,"slug":4303,"dossier":47,"summary":4304,"aliases":4305,"sourceIds":4308,"published":4309,"modified":4310,"checkedAt":7,"severity":4311,"references":4314,"versionKeys":4331,"packageCount":32,"repositoryCount":2587},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4306,4307],"CVE-2026-0994","PYSEC-2026-1805",[185,4307],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[4312],{"type":2204,"score":4313},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4315,4317,4319,4321,4323,4325,4327,4329],{"type":2211,"url":4316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2208,"url":4318},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2208,"url":4320},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2208,"url":4322},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2208,"url":4324},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2216,"url":4326},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2216,"url":4328},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2211,"url":4330},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4332,4333,4334,4335,4336,4337,4338,4339,4340,4341],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":186,"slug":4343,"dossier":90,"summary":4344,"aliases":4345,"sourceIds":4349,"published":4350,"modified":4351,"checkedAt":7,"severity":4352,"references":4355,"versionKeys":4364,"packageCount":32,"repositoryCount":2231},"ghsa-7mwm-ghpf-9vrm-446e4269","Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform",[4346,4347,4348],"BIT-pillow-2026-112402","CVE-2026-112402","PYSEC-2026-4331",[186,4348],"2026-10-19T22:17:07.633Z","2026-10-28T11:10:35.587185673Z",[4353,4354],{"type":2204,"score":2555},{"type":2243,"score":2327},[4356,4358,4360,4362,4363],{"type":2251,"url":4357},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-7mwm-ghpf-9vrm",{"type":2211,"url":4359},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112402",{"type":2251,"url":4361},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faafa6c75f7cdabb9f409a8aac7c780bea31d08d9",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":187,"slug":4366,"dossier":47,"summary":4367,"aliases":4368,"sourceIds":4371,"published":4372,"modified":4373,"checkedAt":7,"severity":4374,"references":4377,"versionKeys":4391,"packageCount":32,"repositoryCount":3219},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[4369,4370],"CVE-2026-63374","PYSEC-2026-4025",[187,4370],"2026-09-18T17:17:18Z","2026-10-01T17:56:11.058322399Z",[4375],{"type":2204,"score":4376},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4378,4380,4382,4384,4385,4386,4387,4389],{"type":2208,"url":4379},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":2208,"url":4381},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":2208,"url":4383},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":2216,"url":3475},{"type":2208,"url":3477},{"type":2216,"url":3479},{"type":2211,"url":4388},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":2211,"url":4390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63374",[3485,3486,3487,3488,3489,3490,3491,3492],{"id":188,"slug":4393,"dossier":47,"summary":4394,"aliases":4395,"sourceIds":4398,"published":4399,"modified":4400,"checkedAt":7,"severity":4401,"references":4403,"versionKeys":4407,"packageCount":32,"repositoryCount":468},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[4396,4397],"CVE-2026-54283","PYSEC-2026-249",[188,4397],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[4402],{"type":2243,"score":2327},[4404,4406],{"type":2211,"url":4405},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2216,"url":4292},[2475,2476,2477,4299,4300,4301,4408,4409,4410],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":189,"slug":4412,"dossier":47,"summary":4413,"aliases":4414,"sourceIds":4418,"published":4419,"modified":4420,"checkedAt":7,"severity":4421,"references":4424,"versionKeys":4461,"packageCount":32,"repositoryCount":468},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[4415,4416,4417],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[189,4416],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[4422],{"type":2243,"score":4423},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4425,4427,4429,4431,4433,4435,4437,4439,4441,4443,4444,4446,4449,4451,4453,4455,4457,4459],{"type":2211,"url":4426},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2211,"url":4428},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2251,"url":4430},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2208,"url":4432},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2258,"url":4434},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2208,"url":4436},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2208,"url":4438},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2208,"url":4440},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2208,"url":4442},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2216,"url":4292},{"type":2208,"url":4445},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":4447,"url":4448},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2208,"url":4450},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2208,"url":4452},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":2208,"url":4454},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":2208,"url":4456},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":2258,"url":4458},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2211,"url":4460},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2475,2476,2477,4299,4300,4301,4408,4409,4410],{"id":190,"slug":4463,"dossier":47,"summary":4464,"aliases":4465,"sourceIds":4468,"published":4469,"modified":4470,"checkedAt":7,"severity":4471,"references":4474,"versionKeys":4485,"packageCount":32,"repositoryCount":2620},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[4466,4467],"CVE-2026-21860","PYSEC-2026-2044",[190,4467],"2026-01-08T19:51:21Z","2026-09-10T03:50:32.862525778Z",[4472,4473],{"type":2243,"score":2428},{"type":2204,"score":2303},[4475,4477,4479,4481,4482,4483],{"type":2208,"url":4476},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2211,"url":4478},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2208,"url":4480},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2216,"url":2437},{"type":2216,"url":2541},{"type":2211,"url":4484},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2441,2442,2443,2444],{"id":191,"slug":4487,"dossier":47,"summary":4488,"aliases":4489,"sourceIds":4493,"published":4494,"modified":4495,"checkedAt":7,"severity":4496,"references":4500,"versionKeys":4522,"packageCount":32,"repositoryCount":478},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[4490,4491,4492],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[191,4492],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[4497,4498],{"type":2243,"score":2716},{"type":2204,"score":4499},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4501,4503,4505,4507,4509,4511,4512,4514,4516,4518,4520],{"type":2211,"url":4502},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2208,"url":4504},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2208,"url":4506},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2208,"url":4508},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2208,"url":4510},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2216,"url":2732},{"type":2208,"url":4513},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2208,"url":4515},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2208,"url":4517},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2216,"url":4519},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2211,"url":4521},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2744,2745,2746,3765,3766],{"id":192,"slug":4524,"dossier":90,"summary":4525,"aliases":4526,"sourceIds":4529,"published":4530,"modified":4531,"checkedAt":7,"severity":4532,"references":4535,"versionKeys":4552,"packageCount":32,"repositoryCount":3872},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[4527,4528],"CVE-2026-97687","PYSEC-2026-4175",[192,4528],"2026-09-30T14:46:04Z","2026-10-01T17:55:53.793608550Z",[4533],{"type":2204,"score":4534},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4536,4538,4540,4542,4544,4546,4547,4549,4550],{"type":2208,"url":4537},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":2211,"url":4539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":2208,"url":4541},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":2208,"url":4543},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":2208,"url":4545},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":2216,"url":2672},{"type":2208,"url":4548},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",{"type":2216,"url":2674},{"type":2211,"url":4551},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",[2676,2677,2678,2679,2680,4553,4554],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":193,"slug":4556,"dossier":47,"summary":4557,"aliases":4558,"sourceIds":4562,"published":4563,"modified":4564,"checkedAt":7,"severity":4565,"references":4568,"versionKeys":4576,"packageCount":32,"repositoryCount":2231},"ghsa-8g5g-8vmr-9782-3b73f6ca","Pillow: Heap buffer overflow in ImagingJpegDecode",[4559,4560,4561],"BIT-pillow-2026-112403","CVE-2026-112403","PYSEC-2026-4332",[193,4561],"2026-10-19T22:17:07.770Z","2026-10-28T11:10:51.788355157Z",[4566,4567],{"type":2204,"score":3608},{"type":2243,"score":3234},[4569,4571,4573,4574,4575],{"type":2402,"url":4570},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8g5g-8vmr-9782",{"type":2211,"url":4572},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112403",{"type":2251,"url":3616},{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":194,"slug":4578,"dossier":47,"summary":4579,"aliases":4580,"sourceIds":4582,"published":4583,"modified":4584,"checkedAt":7,"severity":4585,"references":4588,"versionKeys":4595,"packageCount":32,"repositoryCount":2231},"ghsa-8mx5-7m5m-r77g-03e425ff","filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL",[4581],"CVE-2026-112910",[194],"2026-10-28T21:08:55Z","2026-10-28T21:15:05.688436299Z",[4586],{"type":2243,"score":4587},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4589,4591,4592,4593,4594],{"type":2208,"url":4590},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-8mx5-7m5m-r77g",{"type":2208,"url":3344},{"type":2208,"url":3346},{"type":2216,"url":3348},{"type":2208,"url":3350},[3938,3939,3940,3941,3942,3352,3353,3354,3355],{"id":195,"slug":4597,"dossier":47,"summary":4598,"aliases":4599,"sourceIds":4602,"published":4603,"modified":4604,"checkedAt":7,"severity":4605,"references":4607,"versionKeys":4626,"packageCount":32,"repositoryCount":102},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[4600,4601],"CVE-2025-4565","PYSEC-2026-1806",[195,4601],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[4606],{"type":2204,"score":2205},[4608,4610,4612,4614,4616,4617,4619,4621,4623,4624],{"type":2208,"url":4609},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2208,"url":4611},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2211,"url":4613},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2208,"url":4615},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2216,"url":4326},{"type":2208,"url":4618},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2208,"url":4620},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2208,"url":4622},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2216,"url":4328},{"type":2211,"url":4625},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4332,4334,4335],{"id":196,"slug":4628,"dossier":47,"summary":4629,"aliases":4630,"sourceIds":4634,"published":4635,"modified":4636,"checkedAt":7,"severity":4637,"references":4639,"versionKeys":4649,"packageCount":32,"repositoryCount":2900},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[4631,4632,4633],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[196,4633],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[4638],{"type":2243,"score":2327},[4640,4642,4644,4645,4647,4648],{"type":2402,"url":4641},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2211,"url":4643},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2251,"url":2893},{"type":2208,"url":4646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2216,"url":2217},{"type":2211,"url":2898},[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":197,"slug":4651,"dossier":47,"summary":4652,"aliases":4653,"sourceIds":4656,"published":4657,"modified":4658,"checkedAt":7,"severity":4659,"references":4661,"versionKeys":4674,"packageCount":32,"repositoryCount":516},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4654,4655],"CVE-2025-5197","PYSEC-2026-1983",[197,4655],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[4660],{"type":2243,"score":3103},[4662,4664,4666,4668,4669,4671,4672],{"type":2211,"url":4663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2208,"url":4665},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2208,"url":4667},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2216,"url":2400},{"type":2208,"url":4670},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2216,"url":2769},{"type":2211,"url":4673},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2407,2408,2409,2410],{"id":198,"slug":4676,"dossier":47,"summary":4677,"aliases":4678,"sourceIds":4681,"published":4682,"modified":4683,"checkedAt":7,"severity":4684,"references":4687,"versionKeys":4698,"packageCount":32,"repositoryCount":516},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[4679,4680],"CVE-2025-53643","PYSEC-2026-1104",[198,4680],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[4685],{"type":2204,"score":4686},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4688,4690,4692,4694,4695,4696],{"type":2208,"url":4689},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2211,"url":4691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2251,"url":4693},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":4697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2503,2504,2505,2506],{"id":199,"slug":4700,"dossier":47,"summary":4701,"aliases":4702,"sourceIds":4705,"published":4706,"modified":4707,"checkedAt":7,"severity":4708,"references":4711,"versionKeys":4720,"packageCount":32,"repositoryCount":468},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[4703,4704],"CVE-2026-34518","PYSEC-2026-2100",[199,4704],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[4709,4710],{"type":2243,"score":3832},{"type":2204,"score":3257},[4712,4714,4716,4718,4719],{"type":2251,"url":4713},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2211,"url":4715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2251,"url":4717},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":200,"slug":4722,"dossier":47,"summary":4723,"aliases":4724,"sourceIds":4727,"published":4728,"modified":4729,"checkedAt":7,"severity":4730,"references":4733,"versionKeys":4756,"packageCount":32,"repositoryCount":478},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4725,4726],"CVE-2024-47081","PYSEC-2026-1872",[200,4726],"2025-06-09T19:06:08Z","2026-10-19T20:00:04.716114530Z",[4731],{"type":2243,"score":4732},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4734,4736,4738,4740,4742,4744,4746,4748,4750,4752,4754],{"type":2208,"url":4735},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2211,"url":4737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2208,"url":4739},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2251,"url":4741},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2211,"url":4743},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2216,"url":4745},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2208,"url":4747},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.32.4",{"type":2208,"url":4749},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Frequests\u002FPYSEC-2026-1872.yaml",{"type":2216,"url":4751},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2208,"url":4753},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2208,"url":4755},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",[4757,4758],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":201,"slug":4760,"dossier":47,"summary":4761,"aliases":4762,"sourceIds":4766,"published":4767,"modified":4768,"checkedAt":7,"severity":4769,"references":4771,"versionKeys":4784,"packageCount":32,"repositoryCount":2900},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[4763,4764,4765],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[201,4765],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[4770],{"type":2243,"score":2327},[4772,4774,4776,4778,4780,4782,4783],{"type":2402,"url":4773},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2211,"url":4775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2251,"url":4777},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2251,"url":4779},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2208,"url":4781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2216,"url":2217},{"type":2211,"url":3717},[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":202,"slug":4786,"dossier":47,"summary":4787,"aliases":4788,"sourceIds":4792,"published":4793,"modified":4794,"checkedAt":7,"severity":4795,"references":4800,"versionKeys":4811,"packageCount":32,"repositoryCount":2231},"ghsa-9v9v-9qvf-h2hj-0344c250","Pillow: Heap over-read in WMF\u002FEMF rendering via 16-bit dimension truncation (Windows builds)",[4789,4790,4791],"BIT-pillow-2026-96644","CVE-2026-96644","PYSEC-2026-4343",[202,4791],"2026-10-21T21:20:32.943Z","2026-10-29T10:55:35.129178084Z",[4796,4798],{"type":2204,"score":4797},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":4799},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[4801,4803,4805,4807,4809,4810],{"type":2211,"url":4802},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9v9v-9qvf-h2hj",{"type":2211,"url":4804},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96644",{"type":2725,"url":4806},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10120",{"type":2251,"url":4808},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4cf46bee338304c5c8968fd7f132ba0d40c428b7",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":203,"slug":4813,"dossier":47,"summary":4814,"aliases":4815,"sourceIds":4817,"published":4818,"modified":4819,"checkedAt":7,"severity":4820,"references":4822,"versionKeys":4831,"packageCount":32,"repositoryCount":2620},"ghsa-9vhv-jxww-xfm5-e19a009a","filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",[4816],"CVE-2026-112913",[203],"2026-10-23T22:28:19Z","2026-10-23T22:45:03.439584635Z",[4821],{"type":2243,"score":2716},[4823,4825,4827,4829,4830],{"type":2208,"url":4824},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-9vhv-jxww-xfm5",{"type":2208,"url":4826},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F834",{"type":2208,"url":4828},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d",{"type":2216,"url":3348},{"type":2208,"url":3350},[3352,3353,3354,3355],{"id":204,"slug":4833,"dossier":47,"summary":4834,"aliases":4835,"sourceIds":4838,"published":4839,"modified":4840,"checkedAt":7,"severity":4841,"references":4844,"versionKeys":4861,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4836,4837],"CVE-2024-35195","PYSEC-2026-1873",[204,4837],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[4842],{"type":2243,"score":4843},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4845,4847,4849,4851,4853,4854,4856,4858,4859],{"type":2208,"url":4846},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2211,"url":4848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2208,"url":4850},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2251,"url":4852},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2216,"url":4745},{"type":2208,"url":4855},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2208,"url":4857},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2216,"url":4751},{"type":2211,"url":4860},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4757],{"id":205,"slug":4863,"dossier":47,"summary":4864,"aliases":4865,"sourceIds":4868,"published":4869,"modified":4870,"checkedAt":7,"severity":4871,"references":4875,"versionKeys":4881,"packageCount":32,"repositoryCount":457},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[4866,4867],"CVE-2026-54280","PYSEC-2026-2113",[205,4867],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[4872,4874],{"type":2204,"score":4873},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2243,"score":2327},[4876,4878,4880],{"type":2211,"url":4877},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2251,"url":4879},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2216,"url":2499},[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":206,"slug":4883,"dossier":47,"summary":4884,"aliases":4885,"sourceIds":4887,"published":4888,"modified":4889,"checkedAt":7,"severity":4890,"references":4892,"versionKeys":4901,"packageCount":32,"repositoryCount":2587},"ghsa-9xw5-w5jj-pvcg-5b93a500","AIOHTTP: File descriptor exhaustion in multipart requests",[4886],"CVE-2026-111066",[206],"2026-10-20T19:52:09Z","2026-10-20T20:00:04.692319554Z",[4891],{"type":2204,"score":2205},[4893,4895,4897,4899,4900],{"type":2208,"url":4894},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9xw5-w5jj-pvcg",{"type":2211,"url":4896},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111066",{"type":2208,"url":4898},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2d94633b7f1b4c1ba07d647b629a8440652b2d09",{"type":2216,"url":2499},{"type":2208,"url":2583},[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],{"id":207,"slug":4903,"dossier":47,"summary":4904,"aliases":4905,"sourceIds":4908,"published":4909,"modified":4910,"checkedAt":7,"severity":4911,"references":4915,"versionKeys":4926,"packageCount":32,"repositoryCount":468},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[4906,4907],"CVE-2026-34525","PYSEC-2026-2103",[207,4907],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[4912,4914],{"type":2204,"score":4913},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2243,"score":2634},[4916,4918,4920,4922,4924,4925],{"type":2251,"url":4917},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2211,"url":4919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2251,"url":4921},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2251,"url":4923},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":208,"slug":4928,"dossier":47,"summary":4929,"aliases":4930,"sourceIds":4934,"published":4935,"modified":4936,"checkedAt":7,"severity":4937,"references":4942,"versionKeys":4958,"packageCount":32,"repositoryCount":376},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4931,4932,4933],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[208],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4938,4940],{"type":2243,"score":4939},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2204,"score":4941},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4943,4945,4947,4949,4950,4952,4954,4956],{"type":2211,"url":4944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2208,"url":4946},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2208,"url":4948},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2216,"url":2732},{"type":2208,"url":4951},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2208,"url":4953},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2208,"url":4955},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2208,"url":4957},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2744,2745],{"id":209,"slug":4960,"dossier":47,"summary":4961,"aliases":4962,"sourceIds":4965,"published":4966,"modified":4967,"checkedAt":7,"severity":4968,"references":4971,"versionKeys":4980,"packageCount":32,"repositoryCount":2231},"ghsa-c6hw-5grf-ff96-1e7aec72","Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels",[4963,4964],"BIT-pillow-2026-112404","CVE-2026-112404",[209],"2026-10-20T20:42:00Z","2026-10-26T08:55:55.669563065Z",[4969],{"type":2204,"score":4970},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4972,4974,4976,4978,4979],{"type":2208,"url":4973},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-c6hw-5grf-ff96",{"type":2211,"url":4975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112404",{"type":2208,"url":4977},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":210,"slug":4982,"dossier":47,"summary":4983,"aliases":4984,"sourceIds":4988,"published":4989,"modified":4990,"checkedAt":7,"severity":4991,"references":4995,"versionKeys":5035,"packageCount":32,"repositoryCount":3219},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4985,4986,4987],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[210,4987],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[4992,4994],{"type":2204,"score":4993},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":2327},[4996,4998,5000,5002,5004,5006,5007,5009,5011,5013,5015,5017,5019,5021,5023,5025,5027,5029,5031,5033],{"type":2208,"url":4997},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2211,"url":4999},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2208,"url":5001},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2208,"url":5003},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2208,"url":5005},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2216,"url":2217},{"type":2208,"url":5008},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2208,"url":5010},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2208,"url":5012},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2211,"url":5014},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2211,"url":5016},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2211,"url":5018},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2211,"url":5020},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2211,"url":5022},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2211,"url":5024},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2211,"url":5026},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2211,"url":5028},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2211,"url":5030},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2211,"url":5032},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2211,"url":5034},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2221,2222,2223,2224,2225,2226,2227],{"id":211,"slug":5037,"dossier":47,"summary":5038,"aliases":5039,"sourceIds":5042,"published":5043,"modified":5044,"checkedAt":7,"severity":5045,"references":5047,"versionKeys":5058,"packageCount":32,"repositoryCount":32},"ghsa-cgwc-pv48-fhj5-6739bcab","python-engineio has unbound thread allocation that can cause denial of service",[5040,5041],"CVE-2026-48802","PYSEC-2026-3032",[211,5041],"2026-06-26T20:51:37Z","2026-07-13T16:42:35.099677221Z",[5046],{"type":2243,"score":2327},[5048,5050,5052,5054,5056],{"type":2208,"url":5049},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":2216,"url":5051},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio",{"type":2216,"url":5053},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-engineio",{"type":2211,"url":5055},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":2211,"url":5057},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48802",[5059],"pypi:python-engineio@4.12.3",{"id":212,"slug":5061,"dossier":47,"summary":5062,"aliases":5063,"sourceIds":5067,"published":5068,"modified":5069,"checkedAt":7,"severity":5070,"references":5073,"versionKeys":5082,"packageCount":32,"repositoryCount":497},"ghsa-cp9v-662q-vvx9-b0a60d48","Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0",[5064,5065,5066],"BIT-pillow-2026-112405","CVE-2026-112405","PYSEC-2026-4333",[212,5066],"2026-10-19T22:17:08.027Z","2026-10-28T11:10:36.014536437Z",[5071,5072],{"type":2204,"score":2555},{"type":2243,"score":2327},[5074,5076,5078,5080,5081],{"type":2402,"url":5075},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cp9v-662q-vvx9",{"type":2211,"url":5077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112405",{"type":2251,"url":5079},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb6ee66e8b2c2c0932bdf65f963268d9f2927ef86",{"type":2216,"url":2217},{"type":2211,"url":2219},[2226,2227,2228,2229,2230],{"id":213,"slug":5084,"dossier":47,"summary":5085,"aliases":5086,"sourceIds":5089,"published":5090,"modified":5091,"checkedAt":7,"severity":5092,"references":5095,"versionKeys":5112,"packageCount":32,"repositoryCount":376},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5087,5088],"CVE-2025-27516","PYSEC-2026-1471",[213,5088],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[5093],{"type":2204,"score":5094},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5096,5098,5100,5102,5104,5106,5108,5110],{"type":2208,"url":5097},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2211,"url":5099},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2251,"url":5101},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2216,"url":5103},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2208,"url":5105},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2208,"url":5107},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2216,"url":5109},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2211,"url":5111},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[5113,5114],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":214,"slug":5116,"dossier":47,"summary":5117,"aliases":5118,"sourceIds":5121,"published":5122,"modified":5123,"checkedAt":7,"severity":5124,"references":5126,"versionKeys":5141,"packageCount":32,"repositoryCount":42},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[5119,5120],"CVE-2026-69244","PYSEC-2026-3545",[214,5120],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[5125],{"type":2204,"score":2811},[5127,5129,5131,5133,5134,5136,5137,5139],{"type":2208,"url":5128},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2208,"url":5130},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":2208,"url":5132},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":2216,"url":2499},{"type":2208,"url":5135},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":2216,"url":3267},{"type":2211,"url":5138},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2211,"url":5140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585],{"id":215,"slug":5143,"dossier":47,"summary":5144,"aliases":5145,"sourceIds":5147,"published":5148,"modified":5149,"checkedAt":7,"severity":5150,"references":5152,"versionKeys":5161,"packageCount":32,"repositoryCount":2620},"ghsa-cwqr-hh33-gh44-4ee53d3a","filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout",[5146],"CVE-2026-112915",[215],"2026-10-28T21:08:49Z","2026-10-28T21:15:04.923553251Z",[5151],{"type":2243,"score":2720},[5153,5155,5157,5158,5159,5160],{"type":2208,"url":5154},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-cwqr-hh33-gh44",{"type":2211,"url":5156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112915",{"type":2208,"url":4826},{"type":2208,"url":4828},{"type":2216,"url":3348},{"type":2208,"url":3350},[3352,3353,3354,3355],{"id":216,"slug":5163,"dossier":47,"summary":5164,"aliases":5165,"sourceIds":5169,"published":5170,"modified":5171,"checkedAt":7,"severity":5172,"references":5176,"versionKeys":5192,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[5166,5167,5168],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[216,5168],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[5173,5174],{"type":2243,"score":2349},{"type":2204,"score":5175},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5177,5179,5181,5183,5184,5186,5188,5190],{"type":2211,"url":5178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2208,"url":5180},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2208,"url":5182},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2216,"url":3520},{"type":2208,"url":5185},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2208,"url":5187},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2216,"url":5189},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2211,"url":5191},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3526],{"id":217,"slug":5194,"dossier":47,"summary":5195,"aliases":5196,"sourceIds":5199,"published":5200,"modified":5201,"checkedAt":7,"severity":5202,"references":5204,"versionKeys":5213,"packageCount":32,"repositoryCount":2231},"ghsa-f2g6-542v-9j58-1b810101","Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle",[5197,5198],"BIT-pillow-2026-112406","CVE-2026-112406",[217],"2026-10-21T21:21:07Z","2026-10-26T08:56:13.538142549Z",[5203],{"type":2204,"score":2555},[5205,5207,5209,5211,5212],{"type":2208,"url":5206},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-f2g6-542v-9j58",{"type":2211,"url":5208},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112406",{"type":2208,"url":5210},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb3ebf20c694f2f12537a629c30229a1d5a53f777",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":218,"slug":5215,"dossier":47,"summary":5216,"aliases":5217,"sourceIds":5221,"published":5222,"modified":5223,"checkedAt":7,"severity":5224,"references":5228,"versionKeys":5246,"packageCount":32,"repositoryCount":376},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[5218,5219,5220],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[218],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[5225,5226],{"type":2243,"score":4587},{"type":2204,"score":5227},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5229,5231,5233,5235,5237,5239,5240,5242,5244],{"type":2211,"url":5230},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2208,"url":5232},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2208,"url":5234},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2208,"url":5236},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2208,"url":5238},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2216,"url":2732},{"type":2208,"url":5241},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2208,"url":5243},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2208,"url":5245},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2744,2745],{"id":219,"slug":5248,"dossier":47,"summary":5249,"aliases":5250,"sourceIds":5253,"published":5254,"modified":5255,"checkedAt":7,"severity":5256,"references":5260,"versionKeys":5271,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[5251,5252],"CVE-2024-47874","PYSEC-2026-1943",[219,5252],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[5257,5259],{"type":2243,"score":5258},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2204,"score":2555},[5261,5263,5265,5267,5268,5269],{"type":2208,"url":5262},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2211,"url":5264},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2251,"url":5266},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2216,"url":2465},{"type":2216,"url":2471},{"type":2211,"url":5270},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2475],{"id":220,"slug":5273,"dossier":47,"summary":5274,"aliases":5275,"sourceIds":5278,"published":5279,"modified":5280,"checkedAt":7,"severity":5281,"references":5284,"versionKeys":5299,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[5276,5277],"CVE-2024-49766","PYSEC-2026-2045",[220,5277],"2024-10-25T19:43:41Z","2026-09-10T03:50:19.894904779Z",[5282],{"type":2204,"score":5283},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5285,5287,5289,5291,5292,5294,5296,5297],{"type":2208,"url":5286},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2211,"url":5288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2251,"url":5290},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2216,"url":2437},{"type":2208,"url":5293},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2208,"url":5295},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2216,"url":2541},{"type":2211,"url":5298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2441],{"id":221,"slug":5301,"dossier":47,"summary":5302,"aliases":5303,"sourceIds":5305,"published":5306,"modified":5307,"checkedAt":7,"severity":5308,"references":5311,"versionKeys":5320,"packageCount":32,"repositoryCount":2587},"ghsa-f9xw-jh8m-3mwq-43205cf6","AIOHTTP: Absolute-form request targets can spoof Request.scheme",[5304],"CVE-2026-111748",[221],"2026-10-20T20:01:40Z","2026-10-20T20:15:05.218624757Z",[5309],{"type":2204,"score":5310},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5312,5314,5316,5318,5319],{"type":2208,"url":5313},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-f9xw-jh8m-3mwq",{"type":2211,"url":5315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111748",{"type":2208,"url":5317},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6d4e7b01f9b951aa084a75d7356e907d4ee80411",{"type":2216,"url":2499},{"type":2208,"url":2583},[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],{"id":222,"slug":5322,"dossier":47,"summary":5323,"aliases":5324,"sourceIds":5327,"published":5328,"modified":5329,"checkedAt":7,"severity":5330,"references":5332,"versionKeys":5340,"packageCount":32,"repositoryCount":2231},"ghsa-fc9g-5qg7-mf45-6ce92387","Pillow: Quadratic GIF comment copying during save",[5325,5326],"BIT-pillow-2026-112891","CVE-2026-112891",[222],"2026-10-21T20:38:43Z","2026-10-26T08:56:06.483214483Z",[5331],{"type":2204,"score":3857},[5333,5335,5337,5338,5339],{"type":2208,"url":5334},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fc9g-5qg7-mf45",{"type":2211,"url":5336},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112891",{"type":2208,"url":4210},{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":223,"slug":5342,"dossier":47,"summary":5343,"aliases":5344,"sourceIds":5347,"published":5348,"modified":5349,"checkedAt":7,"severity":5350,"references":5355,"versionKeys":5379,"packageCount":32,"repositoryCount":457},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[5345,5346],"CVE-2026-5241","PYSEC-2026-2290",[223,5346],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[5351,5353],{"type":2243,"score":5352},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2243,"score":5354},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5356,5358,5360,5362,5364,5366,5368,5370,5371,5373,5375,5377],{"type":2211,"url":5357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2251,"url":5359},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2211,"url":5361},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2211,"url":5363},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2208,"url":5365},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":2208,"url":5367},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2725,"url":5369},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2216,"url":2400},{"type":2208,"url":5372},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2402,"url":5374},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2208,"url":5376},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":2211,"url":5378},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[2407,2408,2409,2410,2411,2412,2413,2414,2415],{"id":224,"slug":5381,"dossier":47,"summary":5382,"aliases":5383,"sourceIds":5386,"published":5387,"modified":5388,"checkedAt":7,"severity":5389,"references":5392,"versionKeys":5403,"packageCount":32,"repositoryCount":478},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[5384,5385],"CVE-2025-69230","PYSEC-2026-1105",[224,5385],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[5390],{"type":2204,"score":5391},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5393,5395,5397,5399,5400,5401],{"type":2208,"url":5394},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2211,"url":5396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2251,"url":5398},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":5402},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2503,2504,2505,2506,2507,2508,2509],{"id":225,"slug":5405,"dossier":47,"summary":5406,"aliases":5407,"sourceIds":5411,"published":5412,"modified":5413,"checkedAt":7,"severity":5414,"references":5417,"versionKeys":5431,"packageCount":32,"repositoryCount":2900},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[5408,5409,5410],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[225,5410],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[5415],{"type":2243,"score":5416},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[5418,5420,5422,5424,5426,5427,5428,5429],{"type":2208,"url":5419},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2211,"url":5421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2208,"url":5423},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2208,"url":5425},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2216,"url":2217},{"type":2208,"url":3717},{"type":2216,"url":3719},{"type":2211,"url":5430},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":226,"slug":5433,"dossier":47,"summary":4122,"aliases":5434,"sourceIds":5437,"published":5438,"modified":5439,"checkedAt":7,"severity":5440,"references":5443,"versionKeys":5454,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[5435,5436],"CVE-2025-1194","PYSEC-2026-1984",[226,5436],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[5441],{"type":2243,"score":5442},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5444,5446,5448,5449,5451,5452],{"type":2211,"url":5445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2208,"url":5447},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2216,"url":2400},{"type":2208,"url":5450},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2216,"url":2769},{"type":2211,"url":5453},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2407],{"id":227,"slug":5456,"dossier":47,"summary":5457,"aliases":5458,"sourceIds":5460,"published":5461,"modified":5462,"checkedAt":7,"severity":5463,"references":5466,"versionKeys":5477,"packageCount":32,"repositoryCount":2620},"ghsa-fq56-3cx3-fjxp-d2885806","filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders",[5459],"CVE-2026-112935",[227],"2026-10-28T21:08:08Z","2026-10-28T21:15:04.933315565Z",[5464],{"type":2243,"score":5465},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5467,5469,5471,5473,5475,5476],{"type":2208,"url":5468},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-fq56-3cx3-fjxp",{"type":2211,"url":5470},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112935",{"type":2208,"url":5472},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F843",{"type":2208,"url":5474},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F740ff666b62a88496c8d7394e4e6230605e4d62b",{"type":2216,"url":3348},{"type":2208,"url":3350},[3352,3353,3354,3355],{"id":228,"slug":5479,"dossier":47,"summary":5480,"aliases":5481,"sourceIds":5484,"published":5485,"modified":5486,"checkedAt":7,"severity":5487,"references":5490,"versionKeys":5496,"packageCount":32,"repositoryCount":457},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[5482,5483],"CVE-2026-54278","PYSEC-2026-2111",[228,5483],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[5488,5489],{"type":2204,"score":2981},{"type":2243,"score":2327},[5491,5493,5494],{"type":2211,"url":5492},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2216,"url":2499},{"type":2251,"url":5495},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":229,"slug":5498,"dossier":47,"summary":5499,"aliases":5500,"sourceIds":5504,"published":5505,"modified":5506,"checkedAt":7,"severity":5507,"references":5510,"versionKeys":5521,"packageCount":32,"repositoryCount":2681},"ghsa-g4qv-2jxx-769h-01f137f2","Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time",[5501,5502,5503],"BIT-pillow-2026-96643","CVE-2026-96643","PYSEC-2026-4342",[229,5503],"2026-10-21T21:20:32.797Z","2026-10-29T10:55:44.091799759Z",[5508,5509],{"type":2204,"score":2811},{"type":2243,"score":2279},[5511,5513,5515,5517,5519,5520],{"type":2211,"url":5512},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g4qv-2jxx-769h",{"type":2211,"url":5514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96643",{"type":2725,"url":5516},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10073",{"type":2251,"url":5518},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F806e38381c781f32bbd22f4cd026678acd40fd6c",{"type":2216,"url":2217},{"type":2211,"url":2219},[2223,2224,2225,2226,2227,2228,2229,2230],{"id":230,"slug":5523,"dossier":47,"summary":2418,"aliases":5524,"sourceIds":5527,"published":5528,"modified":5529,"checkedAt":7,"severity":5530,"references":5532,"versionKeys":5547,"packageCount":32,"repositoryCount":34},"ghsa-g6x2-hccm-hh4m-e6759829",[5525,5526],"CVE-2026-102598","PYSEC-2026-4312",[230,5526],"2026-10-05T23:48:39Z","2026-10-15T14:56:11.020811348Z",[5531],{"type":2204,"score":2303},[5533,5535,5537,5539,5541,5542,5544,5545],{"type":2208,"url":5534},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-g6x2-hccm-hh4m",{"type":2211,"url":5536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102598",{"type":2208,"url":5538},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fpull\u002F3309",{"type":2208,"url":5540},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F8d77320bcdf3a34941ec06dcf16b03c065cd21b6",{"type":2216,"url":2437},{"type":2208,"url":5543},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.9",{"type":2216,"url":2541},{"type":2211,"url":5546},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6x2-hccm-hh4m",[2441,2442,2443,2444,2445],{"id":231,"slug":5549,"dossier":47,"summary":5550,"aliases":5551,"sourceIds":5554,"published":5555,"modified":5556,"checkedAt":7,"severity":5557,"references":5560,"versionKeys":5571,"packageCount":32,"repositoryCount":2231},"ghsa-g7cr-3p24-7wf7-568f0c0a","Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer",[5552,5553],"BIT-pillow-2026-96778","CVE-2026-96778",[231],"2026-10-22T16:05:39Z","2026-10-29T10:56:05.933422167Z",[5558],{"type":2204,"score":5559},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5561,5563,5565,5567,5569,5570],{"type":2208,"url":5562},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g7cr-3p24-7wf7",{"type":2211,"url":5564},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96778",{"type":2208,"url":5566},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10124",{"type":2208,"url":5568},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F02561b8dc6117d5670d4b469fecdd02c70854f9b",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":232,"slug":5573,"dossier":47,"summary":5574,"aliases":5575,"sourceIds":5578,"published":5579,"modified":5580,"checkedAt":7,"severity":5581,"references":5584,"versionKeys":5603,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[5576,5577],"CVE-2024-34062","PYSEC-2026-1976",[232,5577],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[5582],{"type":2243,"score":5583},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5585,5587,5589,5591,5593,5595,5597,5599,5601],{"type":2208,"url":5586},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2211,"url":5588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2208,"url":5590},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2216,"url":5592},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2208,"url":5594},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2208,"url":5596},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2208,"url":5598},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2216,"url":5600},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2211,"url":5602},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[5604],"pypi:tqdm@4.66.2",{"id":233,"slug":5606,"dossier":47,"summary":5607,"aliases":5608,"sourceIds":5612,"published":5613,"modified":5614,"checkedAt":7,"severity":5615,"references":5618,"versionKeys":5629,"packageCount":32,"repositoryCount":2231},"ghsa-g842-9rc4-69pw-38a3cbdb","Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS",[5609,5610,5611],"BIT-pillow-2026-96637","CVE-2026-96637","PYSEC-2026-4338",[233,5611],"2026-10-21T21:20:31.927Z","2026-10-29T10:55:56.102454725Z",[5616,5617],{"type":2204,"score":2811},{"type":2243,"score":2279},[5619,5621,5623,5625,5627,5628],{"type":2211,"url":5620},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g842-9rc4-69pw",{"type":2211,"url":5622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96637",{"type":2725,"url":5624},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10076",{"type":2251,"url":5626},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F7cb0e02389d8aac2a60896a490f572db0b07b841",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":234,"slug":5631,"dossier":47,"summary":5632,"aliases":5633,"sourceIds":5636,"published":5637,"modified":5638,"checkedAt":7,"severity":5639,"references":5641,"versionKeys":5654,"packageCount":32,"repositoryCount":478},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[5634,5635],"CVE-2025-69229","PYSEC-2026-1106",[234,5635],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[5640],{"type":2204,"score":2981},[5642,5644,5646,5648,5650,5651,5652],{"type":2208,"url":5643},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2211,"url":5645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2208,"url":5647},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2208,"url":5649},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":5653},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2503,2504,2505,2506,2507,2508,2509],{"id":235,"slug":5656,"dossier":47,"summary":5657,"aliases":5658,"sourceIds":5661,"published":5662,"modified":5663,"checkedAt":7,"severity":5664,"references":5669,"versionKeys":5679,"packageCount":32,"repositoryCount":2231},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[5659,5660],"CVE-2026-25645","PYSEC-2026-2275",[235,5660],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[5665,5667],{"type":2243,"score":5666},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2243,"score":5668},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5670,5672,5674,5676,5677],{"type":2211,"url":5671},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2211,"url":5673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2251,"url":5675},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2216,"url":4745},{"type":2211,"url":5678},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4757,4758,5680,5681],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":236,"slug":5683,"dossier":47,"summary":5684,"aliases":5685,"sourceIds":5688,"published":5689,"modified":5690,"checkedAt":7,"severity":5691,"references":5693,"versionKeys":5702,"packageCount":32,"repositoryCount":2231},"ghsa-gg2r-wvfm-q9rx-9e34ef8d","Pillow: MSP RLE decoder expands a tiny file into unbounded memory",[5686,5687],"BIT-pillow-2026-112892","CVE-2026-112892",[236],"2026-10-21T21:12:56Z","2026-10-26T08:55:54.537605973Z",[5692],{"type":2204,"score":2555},[5694,5696,5698,5700,5701],{"type":2208,"url":5695},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-gg2r-wvfm-q9rx",{"type":2211,"url":5697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112892",{"type":2208,"url":5699},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5dcb630b9798efd91929cb873d677aeee6ed0bb3",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":237,"slug":5704,"dossier":47,"summary":5705,"aliases":5706,"sourceIds":5709,"published":5710,"modified":5711,"checkedAt":7,"severity":5712,"references":5714,"versionKeys":5726,"packageCount":32,"repositoryCount":34},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[5707,5708],"CVE-2026-97688","PYSEC-2026-4176",[237,5708],"2026-09-30T15:00:38Z","2026-10-01T17:55:40.608255720Z",[5713],{"type":2204,"score":3857},[5715,5717,5719,5721,5722,5723,5724],{"type":2208,"url":5716},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":2211,"url":5718},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":2208,"url":5720},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":2216,"url":2672},{"type":2208,"url":4548},{"type":2216,"url":2674},{"type":2211,"url":5725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",[4553,4554],{"id":238,"slug":5728,"dossier":47,"summary":5729,"aliases":5730,"sourceIds":5733,"published":5734,"modified":5735,"checkedAt":7,"severity":5736,"references":5738,"versionKeys":5749,"packageCount":32,"repositoryCount":2681},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[5731,5732],"CVE-2025-66418","PYSEC-2026-1998",[238,5732],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[5737],{"type":2204,"score":2657},[5739,5741,5743,5745,5746,5747],{"type":2208,"url":5740},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2211,"url":5742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2251,"url":5744},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2216,"url":2672},{"type":2216,"url":2674},{"type":2211,"url":5748},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2676,2677,2678,2679,2680],{"id":239,"slug":5751,"dossier":47,"summary":5752,"aliases":5753,"sourceIds":5756,"published":5757,"modified":5758,"checkedAt":7,"severity":5759,"references":5762,"versionKeys":5777,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[5754,5755],"CVE-2024-56201","PYSEC-2026-1472",[239,5755],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[5760,5761],{"type":2243,"score":3507},{"type":2204,"score":5094},[5763,5765,5767,5769,5771,5772,5774,5775],{"type":2208,"url":5764},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2211,"url":5766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2208,"url":5768},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2251,"url":5770},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2216,"url":5103},{"type":2208,"url":5773},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2216,"url":5109},{"type":2211,"url":5776},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[5113],{"id":240,"slug":5779,"dossier":47,"summary":5780,"aliases":5781,"sourceIds":5783,"published":5784,"modified":5785,"checkedAt":7,"severity":5786,"references":5789,"versionKeys":5798,"packageCount":32,"repositoryCount":2587},"ghsa-gx76-c99x-2c96-30159937","AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies",[5782],"CVE-2026-111749",[240],"2026-10-20T19:58:14Z","2026-10-20T20:15:05.188135798Z",[5787],{"type":2204,"score":5788},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5790,5792,5794,5796,5797],{"type":2208,"url":5791},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-gx76-c99x-2c96",{"type":2211,"url":5793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111749",{"type":2208,"url":5795},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a07c171ef9f3be583e2907dcd1931372efca8d6",{"type":2216,"url":2499},{"type":2208,"url":2583},[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],{"id":241,"slug":5800,"dossier":47,"summary":5801,"aliases":5802,"sourceIds":5806,"published":5807,"modified":5808,"checkedAt":7,"severity":5809,"references":5812,"versionKeys":5824,"packageCount":32,"repositoryCount":2231},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[5803,5804,5805],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[241,5805],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[5810],{"type":2243,"score":5811},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[5813,5815,5817,5819,5821,5822],{"type":2402,"url":5814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2211,"url":5816},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2251,"url":5818},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2208,"url":5820},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2216,"url":3520},{"type":2211,"url":5823},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[3526,3527,3528,3529,5825,5826,5827,5828,5829,5830,5831,5832],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":242,"slug":5834,"dossier":47,"summary":5835,"aliases":5836,"sourceIds":5839,"published":5840,"modified":5841,"checkedAt":7,"severity":5842,"references":5845,"versionKeys":5866,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[5837,5838],"CVE-2024-34064","PYSEC-2026-1474",[242,5838],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[5843],{"type":2243,"score":5844},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5846,5848,5850,5852,5853,5855,5857,5859,5861,5863,5864],{"type":2208,"url":5847},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2211,"url":5849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2251,"url":5851},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2216,"url":5103},{"type":2208,"url":5854},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2208,"url":5856},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2208,"url":5858},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2208,"url":5860},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2208,"url":5862},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2216,"url":5109},{"type":2211,"url":5865},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[5113],{"id":243,"slug":5868,"dossier":47,"summary":5869,"aliases":5870,"sourceIds":5873,"published":5874,"modified":5875,"checkedAt":7,"severity":5876,"references":5879,"versionKeys":5888,"packageCount":32,"repositoryCount":468},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[5871,5872],"CVE-2026-34513","PYSEC-2026-2095",[243,5872],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[5877,5878],{"type":2204,"score":2836},{"type":2243,"score":2327},[5880,5882,5884,5886,5887],{"type":2251,"url":5881},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2211,"url":5883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2251,"url":5885},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":244,"slug":5890,"dossier":47,"summary":5891,"aliases":5892,"sourceIds":5895,"published":5896,"modified":5897,"checkedAt":7,"severity":5898,"references":5903,"versionKeys":5911,"packageCount":32,"repositoryCount":457},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[5893,5894],"CVE-2026-47265","PYSEC-2026-2105",[244,5894],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[5899,5901],{"type":2204,"score":5900},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2243,"score":5902},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5904,5906,5908,5910],{"type":2251,"url":5905},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2211,"url":5907},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2251,"url":5909},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2216,"url":2499},[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":245,"slug":5913,"dossier":47,"summary":2418,"aliases":5914,"sourceIds":5917,"published":5918,"modified":5919,"checkedAt":7,"severity":5920,"references":5922,"versionKeys":5935,"packageCount":32,"repositoryCount":2620},"ghsa-hgf8-39gv-g3f2-0469b394",[5915,5916],"CVE-2025-66221","PYSEC-2026-2046",[245,5916],"2025-12-02T00:27:38Z","2026-09-10T03:50:31.900494607Z",[5921],{"type":2204,"score":2303},[5923,5925,5927,5929,5930,5932,5933],{"type":2208,"url":5924},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2211,"url":5926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2208,"url":5928},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2216,"url":2437},{"type":2208,"url":5931},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2216,"url":2541},{"type":2211,"url":5934},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2441,2442,2443,2444],{"id":246,"slug":5937,"dossier":47,"summary":5938,"aliases":5939,"sourceIds":5942,"published":5943,"modified":5944,"checkedAt":7,"severity":5945,"references":5949,"versionKeys":5955,"packageCount":32,"repositoryCount":457},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[5940,5941],"CVE-2026-54276","PYSEC-2026-2109",[246,5941],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[5946,5947],{"type":2204,"score":2959},{"type":2243,"score":5948},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[5950,5952,5954],{"type":2211,"url":5951},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2251,"url":5953},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2216,"url":2499},[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":247,"slug":5957,"dossier":47,"summary":5958,"aliases":5959,"sourceIds":5962,"published":5963,"modified":5964,"checkedAt":7,"severity":5965,"references":5969,"versionKeys":5986,"packageCount":32,"repositoryCount":516},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[5960,5961],"CVE-2025-67221","PYSEC-2026-107",[247,5961],"2026-01-22T17:16:01.433Z","2026-09-10T03:50:33.258377926Z",[5966,5968],{"type":2204,"score":5967},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2243,"score":2327},[5970,5972,5974,5976,5978,5980,5982,5984],{"type":2211,"url":5971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":2208,"url":5973},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":2208,"url":5975},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":2208,"url":5977},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":2216,"url":5979},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":2402,"url":5981},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":2208,"url":5983},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":2211,"url":5985},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[5987,5988,5989,5990],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":248,"slug":5992,"dossier":47,"summary":5993,"aliases":5994,"sourceIds":5997,"published":5998,"modified":5999,"checkedAt":7,"severity":6000,"references":6004,"versionKeys":6020,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[5995,5996],"CVE-2024-11394","PYSEC-2024-229",[248,5996],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[6001,6003],{"type":2243,"score":6002},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2243,"score":2349},[6005,6007,6009,6011,6012,6014,6016,6018],{"type":2211,"url":6006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2208,"url":6008},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2208,"url":6010},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2216,"url":2400},{"type":2208,"url":6013},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2208,"url":6015},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2211,"url":6017},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2211,"url":6019},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2407],{"id":249,"slug":6022,"dossier":47,"summary":6023,"aliases":6024,"sourceIds":6027,"published":6028,"modified":6029,"checkedAt":7,"severity":6030,"references":6032,"versionKeys":6041,"packageCount":32,"repositoryCount":2231},"ghsa-j4m9-6w36-pw47-8a42e0dd","Pillow: Invalid free in FreeType glyph rendering when a stroker is active",[6025,6026],"BIT-pillow-2026-112893","CVE-2026-112893",[249],"2026-10-21T20:06:34Z","2026-10-26T08:55:43.891551666Z",[6031],{"type":2204,"score":2205},[6033,6035,6037,6039,6040],{"type":2208,"url":6034},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-j4m9-6w36-pw47",{"type":2211,"url":6036},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112893",{"type":2208,"url":6038},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa7416de7f3a43128179d2cf68df3240ea8dafe13",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":250,"slug":6043,"dossier":47,"summary":6044,"aliases":6045,"sourceIds":6047,"published":6048,"modified":6049,"checkedAt":7,"severity":6050,"references":6052,"versionKeys":6062,"packageCount":32,"repositoryCount":2620},"ghsa-j586-36cw-2gc2-1c16441e","MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure",[6046],"CVE-2026-114613",[250],"2026-10-27T15:04:07Z","2026-10-27T15:15:08.389118415Z",[6051],{"type":2243,"score":2327},[6053,6055,6057,6059,6060],{"type":2208,"url":6054},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-j586-36cw-2gc2",{"type":2211,"url":6056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114613",{"type":2208,"url":6058},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F620b0eb4c89cd72d4098564537624d9dbb2ce141",{"type":2216,"url":4160},{"type":2208,"url":6061},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.3",[4164,4165,4166,6063],"pypi:msgpack@1.2.1",{"id":251,"slug":6065,"dossier":47,"summary":6066,"aliases":6067,"sourceIds":6069,"published":6070,"modified":6071,"checkedAt":7,"severity":6072,"references":6075,"versionKeys":6085,"packageCount":32,"repositoryCount":2620},"ghsa-j8f7-rjxc-mr56-f1c144ea","filelock: ReadWriteLock follows a symlink at the lock path into SQLite",[6068],"CVE-2026-112936",[251],"2026-10-28T21:08:30Z","2026-10-28T21:15:04.169983430Z",[6073],{"type":2243,"score":6074},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[6076,6078,6080,6082,6083],{"type":2208,"url":6077},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-j8f7-rjxc-mr56",{"type":2211,"url":6079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112936",{"type":2208,"url":6081},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4d45e83caf7e31f9a12fb44526bdc07f70114f04",{"type":2216,"url":3348},{"type":2208,"url":6084},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.0.9",[3352,3353,3354,3355],{"id":252,"slug":6087,"dossier":47,"summary":6088,"aliases":6089,"sourceIds":6092,"published":6093,"modified":6094,"checkedAt":7,"severity":6095,"references":6100,"versionKeys":6117,"packageCount":32,"repositoryCount":457},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[6090,6091],"CVE-2026-34993","PYSEC-2026-2104",[252,6091],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[6096,6098],{"type":2243,"score":6097},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2243,"score":6099},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6101,6103,6105,6107,6108,6110,6112,6113,6114,6115],{"type":2251,"url":6102},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2211,"url":6104},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2251,"url":6106},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2216,"url":2499},{"type":2208,"url":6109},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2208,"url":6111},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2211,"url":3744},{"type":2211,"url":5361},{"type":2211,"url":5363},{"type":2725,"url":6116},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":253,"slug":6119,"dossier":47,"summary":6120,"aliases":6121,"sourceIds":6124,"published":6125,"modified":6126,"checkedAt":7,"severity":6127,"references":6129,"versionKeys":6138,"packageCount":32,"repositoryCount":2231},"ghsa-jg86-v3jv-hrpm-1380c45f","Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)",[6122,6123],"BIT-pillow-2026-112894","CVE-2026-112894",[253],"2026-10-21T21:11:44Z","2026-10-26T08:56:08.669907131Z",[6128],{"type":2204,"score":2555},[6130,6132,6134,6136,6137],{"type":2208,"url":6131},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jg86-v3jv-hrpm",{"type":2211,"url":6133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112894",{"type":2208,"url":6135},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":254,"slug":6140,"dossier":47,"summary":6141,"aliases":6142,"sourceIds":6145,"published":6146,"modified":6147,"checkedAt":7,"severity":6148,"references":6150,"versionKeys":6161,"packageCount":32,"repositoryCount":478},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[6143,6144],"CVE-2025-69227","PYSEC-2026-1107",[254,6144],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[6149],{"type":2204,"score":2981},[6151,6153,6155,6157,6158,6159],{"type":2208,"url":6152},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2211,"url":6154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2208,"url":6156},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":6160},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2503,2504,2505,2506,2507,2508,2509],{"id":255,"slug":6163,"dossier":47,"summary":6164,"aliases":6165,"sourceIds":6169,"published":6170,"modified":6171,"checkedAt":7,"severity":6172,"references":6174,"versionKeys":6188,"packageCount":32,"repositoryCount":2900},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[6166,6167,6168],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[255,6168],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[6173],{"type":2243,"score":2327},[6175,6177,6179,6181,6183,6184,6185,6186],{"type":2208,"url":6176},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2211,"url":6178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2208,"url":6180},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2208,"url":6182},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2216,"url":2217},{"type":2208,"url":3717},{"type":2216,"url":3719},{"type":2211,"url":6187},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":256,"slug":6190,"dossier":47,"summary":6191,"aliases":6192,"sourceIds":6195,"published":6196,"modified":6197,"checkedAt":7,"severity":6198,"references":6200,"versionKeys":6213,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[6193,6194],"CVE-2025-3264","PYSEC-2026-1985",[256,6194],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[6199],{"type":2243,"score":3103},[6201,6203,6205,6207,6208,6210,6211],{"type":2211,"url":6202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2208,"url":6204},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2208,"url":6206},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2216,"url":2400},{"type":2208,"url":6209},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2216,"url":2769},{"type":2211,"url":6212},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2407],{"id":257,"slug":6215,"dossier":47,"summary":6216,"aliases":6217,"sourceIds":6220,"published":6221,"modified":6222,"checkedAt":7,"severity":6223,"references":6226,"versionKeys":6239,"packageCount":32,"repositoryCount":102},"ghsa-jp4c-xjxw-mgf9-e780c8d6","pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere",[6218,6219],"CVE-2026-6357","PYSEC-2026-2876",[257,6219],"2026-04-27T15:30:52Z","2026-09-10T03:50:44.656580653Z",[6224],{"type":2204,"score":6225},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6227,6229,6231,6233,6234,6236,6237],{"type":2211,"url":6228},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6357",{"type":2208,"url":6230},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13923",{"type":2208,"url":6232},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Fb369bfc96cc524e00c267e1693290e6599c36bad",{"type":2216,"url":3167},{"type":2208,"url":6235},"https:\u002F\u002Fichard26.github.io\u002Fblog\u002F2026\u002F04\u002Fwhats-new-in-pip-26.1\u002F#security-fixes",{"type":2216,"url":3175},{"type":2211,"url":6238},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp4c-xjxw-mgf9",[3179,3180],{"id":258,"slug":6241,"dossier":47,"summary":6242,"aliases":6243,"sourceIds":6246,"published":6247,"modified":6248,"checkedAt":7,"severity":6249,"references":6252,"versionKeys":6260,"packageCount":32,"repositoryCount":468},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[6244,6245],"CVE-2026-54282","PYSEC-2026-248",[258,6245],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[6250,6251],{"type":2243,"score":4024},{"type":2243,"score":2634},[6253,6255,6257,6258],{"type":2211,"url":6254},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2211,"url":6256},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2216,"url":4292},{"type":2208,"url":6259},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2475,2476,2477,4299,4300,4301,4408,4409,4410],{"id":259,"slug":6262,"dossier":47,"summary":6263,"aliases":6264,"sourceIds":6267,"published":6268,"modified":6269,"checkedAt":7,"severity":6270,"references":6275,"versionKeys":6288,"packageCount":32,"repositoryCount":32},"ghsa-jw8x-6495-233v-cb32b711","scikit-learn sensitive data leakage vulnerability",[6265,6266],"CVE-2024-5206","PYSEC-2024-110",[259,6266],"2024-06-06T19:16:00Z","2026-09-10T03:50:15.628224747Z",[6271,6273],{"type":2243,"score":6272},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2243,"score":6274},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6276,6278,6280,6282,6284,6286],{"type":2211,"url":6277},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5206",{"type":2251,"url":6279},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn\u002Fcommit\u002F70ca21f106b603b611da73012c9ade7cd8e438b8",{"type":2208,"url":6281},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fscikit-learn\u002FPYSEC-2024-110.yaml",{"type":2216,"url":6283},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn",{"type":2208,"url":6285},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F14bc0917-a85b-4106-a170-d09d5191517c",{"type":2211,"url":6287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw8x-6495-233v",[6289],"pypi:scikit-learn@1.3.2",{"id":260,"slug":6291,"dossier":47,"summary":6292,"aliases":6293,"sourceIds":6296,"published":6297,"modified":6298,"checkedAt":7,"severity":6299,"references":6304,"versionKeys":6313,"packageCount":32,"repositoryCount":468},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[6294,6295],"CVE-2026-34516","PYSEC-2026-2098",[260,6295],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[6300,6301,6302],{"type":2243,"score":2327},{"type":2204,"score":2981},{"type":2204,"score":6303},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6305,6307,6309,6311,6312],{"type":2251,"url":6306},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2211,"url":6308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2251,"url":6310},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":261,"slug":6315,"dossier":47,"summary":6316,"aliases":6317,"sourceIds":6320,"published":6321,"modified":6322,"checkedAt":7,"severity":6323,"references":6326,"versionKeys":6332,"packageCount":32,"repositoryCount":457},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[6318,6319],"CVE-2026-50269","PYSEC-2026-2106",[261,6319],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[6324,6325],{"type":2204,"score":2632},{"type":2243,"score":2327},[6327,6329,6331],{"type":2211,"url":6328},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2251,"url":6330},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2216,"url":2499},[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":262,"slug":6334,"dossier":47,"summary":6335,"aliases":6336,"sourceIds":6339,"published":6340,"modified":6341,"checkedAt":7,"severity":6342,"references":6344,"versionKeys":6353,"packageCount":32,"repositoryCount":32},"ghsa-m9gh-vj53-gvh9-764ccc6a","python-engineio has possible denial of service due to maximum payload size sometimes not being enforced",[6337,6338],"CVE-2026-48809","PYSEC-2026-3033",[262,6338],"2026-06-26T20:48:18Z","2026-07-13T16:43:30.815486921Z",[6343],{"type":2243,"score":2327},[6345,6347,6348,6349,6351],{"type":2208,"url":6346},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":2216,"url":5051},{"type":2216,"url":5053},{"type":2211,"url":6350},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":2211,"url":6352},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48809",[5059],{"id":263,"slug":6355,"dossier":47,"summary":6356,"aliases":6357,"sourceIds":6360,"published":6361,"modified":6362,"checkedAt":7,"severity":6363,"references":6366,"versionKeys":6374,"packageCount":32,"repositoryCount":102},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[6358,6359],"CVE-2026-44432","PYSEC-2026-142",[263,6359],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[6364,6365],{"type":2243,"score":2327},{"type":2204,"score":2657},[6367,6369,6371,6373],{"type":2211,"url":6368},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2211,"url":6370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2208,"url":6372},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2216,"url":2672},[4553],{"id":264,"slug":6376,"dossier":47,"summary":6377,"aliases":6378,"sourceIds":6381,"published":6382,"modified":6383,"checkedAt":7,"severity":6384,"references":6387,"versionKeys":6400,"packageCount":32,"repositoryCount":2587},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[6379,6380],"CVE-2026-28684","PYSEC-2026-2270",[264,6380],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[6385],{"type":2243,"score":6386},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6388,6390,6392,6394,6396,6398],{"type":2251,"url":6389},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2211,"url":6391},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2251,"url":6393},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2208,"url":6395},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2216,"url":6397},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2211,"url":6399},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[6401,6402,6403,6404],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":265,"slug":6406,"dossier":47,"summary":6407,"aliases":6408,"sourceIds":6411,"published":6412,"modified":6413,"checkedAt":7,"severity":6414,"references":6417,"versionKeys":6432,"packageCount":32,"repositoryCount":42},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[6409,6410],"CVE-2026-69243","PYSEC-2026-3546",[265,6410],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[6415],{"type":2204,"score":6416},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6418,6420,6422,6424,6425,6427,6428,6430],{"type":2208,"url":6419},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2208,"url":6421},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":2208,"url":6423},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":2216,"url":2499},{"type":2208,"url":6426},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":2216,"url":3267},{"type":2211,"url":6429},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2211,"url":6431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585],{"id":266,"slug":6434,"dossier":47,"summary":6435,"aliases":6436,"sourceIds":6439,"published":6440,"modified":6441,"checkedAt":7,"severity":6442,"references":6444,"versionKeys":6455,"packageCount":32,"repositoryCount":34},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[6437,6438],"CVE-2026-40347","PYSEC-2026-3038",[266,6438],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[6443],{"type":2243,"score":2428},[6445,6447,6449,6450,6452,6453],{"type":2208,"url":6446},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2211,"url":6448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2216,"url":3425},{"type":2208,"url":6451},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2216,"url":3427},{"type":2211,"url":6454},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[3551,3552,3431],{"id":267,"slug":6457,"dossier":47,"summary":6458,"aliases":6459,"sourceIds":6462,"published":6463,"modified":6464,"checkedAt":7,"severity":6465,"references":6471,"versionKeys":6498,"packageCount":32,"repositoryCount":32},"ghsa-mq26-g339-26xf-ed024c7e","Command Injection in pip when used with Mercurial",[6460,6461],"CVE-2023-5752","PYSEC-2023-228",[267,6461],"2023-10-25T18:17:00Z","2026-09-10T03:50:03.949904915Z",[6466,6467,6469],{"type":2243,"score":5668},{"type":2204,"score":6468},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":6470},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[6472,6474,6476,6478,6480,6481,6482,6484,6486,6488,6490,6492,6494,6496],{"type":2211,"url":6473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-5752",{"type":2251,"url":6475},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F12306",{"type":2208,"url":6477},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F389cb799d0da9a840749fcd14878928467ed49b4",{"type":2208,"url":6479},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2023-228.yaml",{"type":2216,"url":3167},{"type":2208,"url":3169},{"type":2208,"url":6483},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F622OZXWG72ISQPLM5Y57YCVIMWHD4C3U",{"type":2208,"url":6485},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH",{"type":2208,"url":6487},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFXUVMJM25PUAZRQZBF54OFVKTY3MINPW",{"type":2208,"url":6489},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E",{"type":2208,"url":6491},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ",{"type":2208,"url":6493},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL",{"type":2211,"url":6495},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL\u002F",{"type":2211,"url":6497},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq26-g339-26xf",[3179],{"id":268,"slug":6500,"dossier":47,"summary":6501,"aliases":6502,"sourceIds":6505,"published":6506,"modified":6507,"checkedAt":7,"severity":6508,"references":6510,"versionKeys":6523,"packageCount":32,"repositoryCount":42},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[6503,6504],"CVE-2026-59881","PYSEC-2026-3547",[268,6504],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[6509],{"type":2204,"score":3857},[6511,6513,6515,6517,6519,6520,6521],{"type":2208,"url":6512},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":2211,"url":6514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":2208,"url":6516},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":2208,"url":6518},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":6522},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585],{"id":269,"slug":6525,"dossier":47,"summary":6526,"aliases":6527,"sourceIds":6530,"published":6531,"modified":6532,"checkedAt":7,"severity":6533,"references":6535,"versionKeys":6546,"packageCount":32,"repositoryCount":478},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[6528,6529],"CVE-2025-69225","PYSEC-2026-1109",[269,6529],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[6534],{"type":2204,"score":2632},[6536,6538,6540,6542,6543,6544],{"type":2208,"url":6537},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2211,"url":6539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2251,"url":6541},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2216,"url":2499},{"type":2216,"url":3267},{"type":2211,"url":6545},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2503,2504,2505,2506,2507,2508,2509],{"id":270,"slug":6548,"dossier":47,"summary":6549,"aliases":6550,"sourceIds":6553,"published":6554,"modified":6555,"checkedAt":7,"severity":6556,"references":6558,"versionKeys":6569,"packageCount":32,"repositoryCount":2231},"ghsa-mrfp-p49p-3hf2-6cfe1cba","Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion",[6551,6552],"BIT-pillow-2026-96640","CVE-2026-96640",[270],"2026-10-22T16:00:47Z","2026-10-29T10:55:39.916451864Z",[6557],{"type":2204,"score":2205},[6559,6561,6563,6565,6567,6568],{"type":2208,"url":6560},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-mrfp-p49p-3hf2",{"type":2211,"url":6562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96640",{"type":2208,"url":6564},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10093",{"type":2208,"url":6566},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":271,"slug":6571,"dossier":47,"summary":6572,"aliases":6573,"sourceIds":6576,"published":6577,"modified":6578,"checkedAt":7,"severity":6579,"references":6582,"versionKeys":6591,"packageCount":32,"repositoryCount":468},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[6574,6575],"CVE-2026-34519","PYSEC-2026-2101",[271,6575],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[6580,6581],{"type":2204,"score":2632},{"type":2243,"score":2634},[6583,6585,6587,6589,6590],{"type":2251,"url":6584},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2211,"url":6586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2251,"url":6588},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":272,"slug":6593,"dossier":47,"summary":6594,"aliases":6595,"sourceIds":6598,"published":6599,"modified":6600,"checkedAt":7,"severity":6601,"references":6603,"versionKeys":6612,"packageCount":32,"repositoryCount":2231},"ghsa-p4wg-p73j-c528-fd1a8a19","Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)",[6596,6597],"BIT-pillow-2026-112895","CVE-2026-112895",[272],"2026-10-20T20:50:49Z","2026-10-26T08:55:38.434240536Z",[6602],{"type":2204,"score":2555},[6604,6606,6608,6610,6611],{"type":2208,"url":6605},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p4wg-p73j-c528",{"type":2211,"url":6607},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112895",{"type":2208,"url":6609},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe2ae7eacad6de68c37eb28b633a97bebacf2c5bf",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":273,"slug":6614,"dossier":47,"summary":6615,"aliases":6616,"sourceIds":6620,"published":6621,"modified":6622,"checkedAt":7,"severity":6623,"references":6625,"versionKeys":6635,"packageCount":32,"repositoryCount":2231},"ghsa-p8hx-v2p6-rp84-525428cb","Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek \u002F DcxImageFile.seek)",[6617,6618,6619],"BIT-pillow-2026-96636","CVE-2026-96636","PYSEC-2026-4337",[273,6619],"2026-10-21T21:20:31.760Z","2026-10-29T10:55:49.521326948Z",[6624],{"type":2243,"score":2279},[6626,6628,6630,6632,6633,6634],{"type":2211,"url":6627},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p8hx-v2p6-rp84",{"type":2211,"url":6629},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96636",{"type":2725,"url":6631},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10011",{"type":2251,"url":3660},{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":274,"slug":6637,"dossier":47,"summary":6638,"aliases":6639,"sourceIds":6642,"published":6643,"modified":6644,"checkedAt":7,"severity":6645,"references":6648,"versionKeys":6657,"packageCount":32,"repositoryCount":468},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[6640,6641],"CVE-2026-34515","PYSEC-2026-2097",[274,6641],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[6646,6647],{"type":2204,"score":5900},{"type":2243,"score":5902},[6649,6651,6653,6655,6656],{"type":2251,"url":6650},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2211,"url":6652},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2251,"url":6654},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":275,"slug":6659,"dossier":47,"summary":6660,"aliases":6661,"sourceIds":6665,"published":6666,"modified":6667,"checkedAt":7,"severity":6668,"references":6672,"versionKeys":6681,"packageCount":32,"repositoryCount":2231},"ghsa-pchr-8j38-3x4p-42f3b4df","Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read",[6662,6663,6664],"BIT-pillow-2026-112896","CVE-2026-112896","PYSEC-2026-4334",[275,6664],"2026-10-19T22:17:09.760Z","2026-10-28T11:10:41.233140457Z",[6669,6670],{"type":2204,"score":4970},{"type":2243,"score":6671},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[6673,6675,6677,6679,6680],{"type":2402,"url":6674},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pchr-8j38-3x4p",{"type":2211,"url":6676},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112896",{"type":2251,"url":6678},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd03dc3c587a9b0bdc9e4304d70d59a635a87b742",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":276,"slug":6683,"dossier":47,"summary":6684,"aliases":6685,"sourceIds":6689,"published":6690,"modified":6691,"checkedAt":7,"severity":6692,"references":6695,"versionKeys":6708,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[6686,6687,6688],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[276,6688],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[6693,6694],{"type":2243,"score":2428},{"type":2243,"score":2327},[6696,6698,6700,6702,6704,6706,6707],{"type":2402,"url":6697},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2211,"url":6699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2251,"url":6701},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2251,"url":6703},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2208,"url":6705},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2216,"url":2217},{"type":2211,"url":3717},[2226,2227,2228,2229],{"id":277,"slug":6710,"dossier":47,"summary":6711,"aliases":6712,"sourceIds":6715,"published":6196,"modified":6716,"checkedAt":7,"severity":6717,"references":6720,"versionKeys":6733,"packageCount":32,"repositoryCount":102},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[6713,6714],"CVE-2025-3777","PYSEC-2026-1986",[277,6714],"2026-09-10T03:50:26.198077196Z",[6718],{"type":2243,"score":6719},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6721,6723,6725,6726,6728,6730,6731],{"type":2211,"url":6722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2208,"url":6724},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2216,"url":2400},{"type":2208,"url":6727},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2208,"url":6729},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2216,"url":2769},{"type":2211,"url":6732},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2407,2408,2409],{"id":278,"slug":6735,"dossier":47,"summary":6736,"aliases":6737,"sourceIds":6741,"published":6742,"modified":6743,"checkedAt":7,"severity":6744,"references":6746,"versionKeys":6757,"packageCount":32,"repositoryCount":2900},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[6738,6739,6740],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[278,6740],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[6745],{"type":2243,"score":2327},[6747,6749,6751,6753,6755,6756],{"type":2402,"url":6748},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2211,"url":6750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2251,"url":6752},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2208,"url":6754},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2216,"url":2217},{"type":2211,"url":2898},[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":279,"slug":6759,"dossier":47,"summary":6760,"aliases":6761,"sourceIds":6764,"published":6765,"modified":6766,"checkedAt":7,"severity":6767,"references":6769,"versionKeys":6778,"packageCount":32,"repositoryCount":34},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[6762,6763],"CVE-2026-42561","PYSEC-2026-3039",[279,6763],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[6768],{"type":2243,"score":2327},[6770,6772,6774,6775,6776],{"type":2208,"url":6771},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2211,"url":6773},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2216,"url":3425},{"type":2216,"url":3427},{"type":2211,"url":6777},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[3551,3552,3431],{"id":280,"slug":6780,"dossier":47,"summary":6781,"aliases":6782,"sourceIds":6785,"published":6786,"modified":6787,"checkedAt":7,"severity":6788,"references":6790,"versionKeys":6802,"packageCount":32,"repositoryCount":478},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[6783,6784],"CVE-2025-50181","PYSEC-2026-1999",[280,6784],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[6789],{"type":2243,"score":2934},[6791,6793,6795,6797,6798,6799,6800],{"type":2208,"url":6792},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2211,"url":6794},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2251,"url":6796},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2216,"url":2672},{"type":2208,"url":2944},{"type":2216,"url":2674},{"type":2211,"url":6801},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2676,2677,2678,2679],{"id":281,"slug":6804,"dossier":47,"summary":6805,"aliases":6806,"sourceIds":6808,"published":6809,"modified":6810,"checkedAt":7,"severity":6811,"references":6814,"versionKeys":6823,"packageCount":32,"repositoryCount":2587},"ghsa-pqxq-w44r-73xw-f260bc82","AIOHTTP: Pure-Python parser request smuggling",[6807],"CVE-2026-111750",[281],"2026-10-20T19:52:21Z","2026-10-20T20:00:04.694820004Z",[6812],{"type":2204,"score":6813},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:L\u002FSA:L",[6815,6817,6819,6821,6822],{"type":2208,"url":6816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-pqxq-w44r-73xw",{"type":2211,"url":6818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111750",{"type":2208,"url":6820},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9b27347e61454d9f8ca2055f4c67a37dee336e83",{"type":2216,"url":2499},{"type":2208,"url":2583},[2503,2504,2505,2506,2507,2508,2509,2510,2511,2585,2586],{"id":282,"slug":6825,"dossier":47,"summary":6826,"aliases":6827,"sourceIds":6831,"published":6832,"modified":6833,"checkedAt":7,"severity":6834,"references":6837,"versionKeys":6849,"packageCount":32,"repositoryCount":2681},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[6828,6829,6830],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[282,6830],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[6835,6836],{"type":2204,"score":4993},{"type":2243,"score":3956},[6838,6839,6841,6843,6845,6847,6848],{"type":2208,"url":4997},{"type":2251,"url":6840},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2211,"url":6842},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2251,"url":6844},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2251,"url":6846},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2216,"url":2217},{"type":2211,"url":3691},[2221,2222,2223,2224,2225,2226,2227,2228],{"id":283,"slug":6851,"dossier":47,"summary":6852,"aliases":6853,"sourceIds":6856,"published":6196,"modified":6857,"checkedAt":7,"severity":6858,"references":6860,"versionKeys":6871,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[6854,6855],"CVE-2025-3263","PYSEC-2026-1987",[283,6855],"2026-07-07T17:56:57.889099913Z",[6859],{"type":2243,"score":3103},[6861,6863,6864,6865,6866,6868,6869],{"type":2211,"url":6862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2208,"url":6204},{"type":2208,"url":6206},{"type":2216,"url":2400},{"type":2208,"url":6867},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2216,"url":2769},{"type":2211,"url":6870},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2407],{"id":284,"slug":6873,"dossier":47,"summary":6874,"aliases":6875,"sourceIds":6878,"published":6879,"modified":6880,"checkedAt":7,"severity":6881,"references":6885,"versionKeys":6898,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[6876,6877],"CVE-2024-56326","PYSEC-2026-1475",[284,6877],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[6882,6884],{"type":2243,"score":6883},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2204,"score":5094},[6886,6888,6890,6892,6893,6894,6895,6896],{"type":2208,"url":6887},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2211,"url":6889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2251,"url":6891},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2216,"url":5103},{"type":2208,"url":5773},{"type":2208,"url":5105},{"type":2216,"url":5109},{"type":2211,"url":6897},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[5113],{"id":285,"slug":6900,"dossier":47,"summary":6901,"aliases":6902,"sourceIds":6906,"published":6907,"modified":6908,"checkedAt":7,"severity":6909,"references":6912,"versionKeys":6932,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[6903,6904,6905],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[285,6905],"2024-10-25T19:44:43Z","2026-09-10T03:50:19.984825326Z",[6910,6911],{"type":2243,"score":2327},{"type":2204,"score":3857},[6913,6915,6917,6919,6921,6923,6925,6926,6927,6929,6930],{"type":2208,"url":6914},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2211,"url":6916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2208,"url":6918},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2208,"url":6920},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2208,"url":6922},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2208,"url":6924},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2216,"url":2437},{"type":2208,"url":5293},{"type":2208,"url":6928},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2216,"url":2541},{"type":2211,"url":6931},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2441],{"id":286,"slug":6934,"dossier":47,"summary":6935,"aliases":6936,"sourceIds":6939,"published":6940,"modified":6941,"checkedAt":7,"severity":6942,"references":6944,"versionKeys":6952,"packageCount":32,"repositoryCount":2231},"ghsa-q45j-58j2-45rg-cd238628","Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips",[6937,6938],"BIT-pillow-2026-112897","CVE-2026-112897",[286],"2026-10-20T20:52:43Z","2026-10-26T08:56:08.265781051Z",[6943],{"type":2204,"score":2599},[6945,6947,6949,6950,6951],{"type":2208,"url":6946},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-q45j-58j2-45rg",{"type":2211,"url":6948},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112897",{"type":2208,"url":4977},{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":287,"slug":6954,"dossier":47,"summary":6955,"aliases":6956,"sourceIds":6959,"published":6960,"modified":6961,"checkedAt":7,"severity":6962,"references":6966,"versionKeys":6972,"packageCount":32,"repositoryCount":2231},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[6957,6958],"CVE-2026-44431","PYSEC-2026-141",[287,6958],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[6963,6964],{"type":2243,"score":3832},{"type":2204,"score":6965},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6967,6969,6971],{"type":2211,"url":6968},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2211,"url":6970},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2216,"url":2672},[2676,2677,2678,2679,2680,4553],{"id":288,"slug":6974,"dossier":47,"summary":6975,"aliases":6976,"sourceIds":6980,"published":6981,"modified":6982,"checkedAt":7,"severity":6983,"references":6987,"versionKeys":7005,"packageCount":32,"repositoryCount":3772},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[6977,6978,6979],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[288],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[6984,6985],{"type":2243,"score":4587},{"type":2204,"score":6986},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6988,6990,6992,6994,6996,6998,6999,7001,7003],{"type":2211,"url":6989},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2208,"url":6991},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2208,"url":6993},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2208,"url":6995},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2208,"url":6997},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2216,"url":2732},{"type":2208,"url":7000},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2208,"url":7002},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2208,"url":7004},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2744,2745,2746,3765,3766,3767,3768,3769,3770,3771],{"id":289,"slug":7007,"dossier":47,"summary":7008,"aliases":7009,"sourceIds":7012,"published":7013,"modified":7014,"checkedAt":7,"severity":7015,"references":7018,"versionKeys":7032,"packageCount":32,"repositoryCount":3772},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[7010,7011],"CVE-2026-22701","PYSEC-2026-1374",[289,7011],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[7016],{"type":2243,"score":7017},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[7019,7021,7023,7025,7027,7028,7030],{"type":2208,"url":7020},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2211,"url":7022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2208,"url":7024},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2208,"url":7026},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2216,"url":3348},{"type":2216,"url":7029},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2211,"url":7031},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[3938,3939,3940,3941],{"id":290,"slug":7034,"dossier":47,"summary":7035,"aliases":7036,"sourceIds":7039,"published":7040,"modified":7041,"checkedAt":7,"severity":7042,"references":7045,"versionKeys":7059,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[7037,7038],"CVE-2025-2099","PYSEC-2025-40",[290,7038],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[7043,7044],{"type":2243,"score":3103},{"type":2243,"score":2327},[7046,7048,7050,7052,7053,7055,7057],{"type":2211,"url":7047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2208,"url":7049},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2251,"url":7051},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2216,"url":2400},{"type":2208,"url":7054},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2208,"url":7056},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2211,"url":7058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2407],{"id":291,"slug":7061,"dossier":47,"summary":7062,"aliases":7063,"sourceIds":7067,"published":7068,"modified":7069,"checkedAt":7,"severity":7070,"references":7076,"versionKeys":7097,"packageCount":376,"repositoryCount":376},"ghsa-qqmf-gpg7-g8gw-3e372614","PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters",[7064,7065,7066],"CVE-2026-58659","PYSEC-2026-3624","PYSEC-2026-3967",[291,7065,7066],"2026-07-15T18:16:48.743Z","2026-09-24T15:45:09.719284514Z",[7071,7072,7074],{"type":2243,"score":3956},{"type":2204,"score":7073},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2204,"score":7075},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7077,7079,7081,7083,7085,7087,7089,7091,7093,7095],{"type":2211,"url":7078},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-58659",{"type":2725,"url":7080},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fissues\u002F21822",{"type":2251,"url":7082},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fpull\u002F21832",{"type":2251,"url":7084},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fcommit\u002Fd710d689510d50e800f53b3cd773cbca20b1f86f",{"type":2216,"url":7086},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning",{"type":2208,"url":7088},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Freleases\u002Ftag\u002F2.6.6",{"type":2211,"url":7090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qqmf-gpg7-g8gw",{"type":2208,"url":7092},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flightning\u002FPYSEC-2026-3624.yaml",{"type":2208,"url":7094},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpytorch-lightning\u002FPYSEC-2026-3967.yaml",{"type":2251,"url":7096},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fpytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter",[7098,7099,7100,7101],"pypi:lightning@2.6.1","pypi:lightning@2.6.5","pypi:pytorch-lightning@2.6.1","pypi:pytorch-lightning@2.6.5",{"id":292,"slug":7103,"dossier":47,"summary":7104,"aliases":7105,"sourceIds":7108,"published":7109,"modified":7110,"checkedAt":7,"severity":7111,"references":7116,"versionKeys":7132,"packageCount":32,"repositoryCount":516},"ghsa-qwm4-qh6w-59xr-db792663","pip would incorrectly handle doubly-encoded package URLs from indexes",[7106,7107],"CVE-2026-13346","PYSEC-2026-3721",[292,7107],"2026-07-29T19:16:44.267Z","2026-09-10T11:15:08.939447160Z",[7112,7114],{"type":2204,"score":7113},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":7115},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[7117,7119,7121,7123,7125,7126,7128,7130],{"type":2211,"url":7118},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-13346",{"type":2251,"url":7120},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14110",{"type":2208,"url":7122},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F10dfb6b9005484578b386f64b9f36982e3dc6679",{"type":2208,"url":7124},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-3721.yaml",{"type":2216,"url":3167},{"type":2208,"url":7127},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FL2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX",{"type":2211,"url":7129},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FL2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX\u002F",{"type":2211,"url":7131},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qwm4-qh6w-59xr",[3179,3180,7133],"pypi:pip@26.1.2",{"id":293,"slug":7135,"dossier":47,"summary":5993,"aliases":7136,"sourceIds":7139,"published":7140,"modified":7141,"checkedAt":7,"severity":7142,"references":7146,"versionKeys":7160,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[7137,7138],"CVE-2024-11392","PYSEC-2024-227",[293,7138],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[7143,7145],{"type":2243,"score":7144},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2243,"score":2349},[7147,7149,7150,7151,7152,7154,7156,7158],{"type":2211,"url":7148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2208,"url":6008},{"type":2208,"url":6010},{"type":2216,"url":2400},{"type":2208,"url":7153},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2208,"url":7155},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2211,"url":7157},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2211,"url":7159},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2407],{"id":294,"slug":7162,"dossier":47,"summary":7163,"aliases":7164,"sourceIds":7168,"published":7169,"modified":7170,"checkedAt":7,"severity":7171,"references":7174,"versionKeys":7188,"packageCount":32,"repositoryCount":2681},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[7165,7166,7167],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[294,7167],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[7172,7173],{"type":2243,"score":2720},{"type":2204,"score":3677},[7175,7177,7179,7181,7183,7184,7185,7186],{"type":2208,"url":7176},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2211,"url":7178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2208,"url":7180},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2208,"url":7182},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2216,"url":2217},{"type":2208,"url":3691},{"type":2216,"url":3719},{"type":2211,"url":7187},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2221,2222,2223,2224,2225,2226,2227,2228],{"id":295,"slug":7190,"dossier":47,"summary":7191,"aliases":7192,"sourceIds":7195,"published":7196,"modified":7197,"checkedAt":7,"severity":7198,"references":7200,"versionKeys":7215,"packageCount":32,"repositoryCount":516},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[7193,7194],"CVE-2025-6051","PYSEC-2026-1988",[295,7194],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[7199],{"type":2243,"score":3103},[7201,7203,7205,7207,7209,7210,7212,7213],{"type":2211,"url":7202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2208,"url":7204},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2208,"url":7206},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2208,"url":7208},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2216,"url":2400},{"type":2208,"url":7211},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2216,"url":2769},{"type":2211,"url":7214},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2407,2408,2409,2410],{"id":296,"slug":7217,"dossier":47,"summary":7218,"aliases":7219,"sourceIds":7222,"published":7223,"modified":7224,"checkedAt":7,"severity":7225,"references":7228,"versionKeys":7237,"packageCount":32,"repositoryCount":2231},"ghsa-rfgq-q3w2-pmv2-908c42cd","Pillow: Image.quantize() with empty palette leaks uninitialized stack memory",[7220,7221],"BIT-pillow-2026-112898","CVE-2026-112898",[296],"2026-10-21T20:44:07Z","2026-10-26T08:55:50.383984569Z",[7226],{"type":2204,"score":7227},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7229,7231,7233,7235,7236],{"type":2208,"url":7230},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgq-q3w2-pmv2",{"type":2211,"url":7232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112898",{"type":2208,"url":7234},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13943c8f857b22f073d30f0ef9b725a0d255f1a4",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":297,"slug":7239,"dossier":47,"summary":7240,"aliases":7241,"sourceIds":7243,"published":7244,"modified":7245,"checkedAt":7,"severity":7246,"references":7248,"versionKeys":7259,"packageCount":32,"repositoryCount":2620},"ghsa-rfpc-qcw5-3pc4-0d3cdd9c","filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker",[7242],"CVE-2026-112939",[297],"2026-10-28T21:08:45Z","2026-10-28T21:15:05.584943666Z",[7247],{"type":2243,"score":5465},[7249,7251,7253,7255,7257,7258],{"type":2208,"url":7250},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-rfpc-qcw5-3pc4",{"type":2211,"url":7252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112939",{"type":2208,"url":7254},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F836",{"type":2208,"url":7256},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Feeceaa846cbe4df72718d94c8371ca1ab8f5b3cc",{"type":2216,"url":3348},{"type":2208,"url":3350},[3352,3353,3354,3355],{"id":298,"slug":7261,"dossier":47,"summary":7262,"aliases":7263,"sourceIds":7267,"published":5222,"modified":7268,"checkedAt":7,"severity":7269,"references":7272,"versionKeys":7290,"packageCount":32,"repositoryCount":2681},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[7264,7265,7266],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[298],"2026-09-10T03:49:48.419046410Z",[7270,7271],{"type":2243,"score":4587},{"type":2204,"score":6986},[7273,7275,7277,7279,7281,7283,7284,7286,7288],{"type":2211,"url":7274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2208,"url":7276},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2208,"url":7278},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2208,"url":7280},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2208,"url":7282},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2216,"url":2732},{"type":2208,"url":7285},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2208,"url":7287},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2208,"url":7289},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[7291,7292,7293,2744,2745,2746,3765,3766,3767,3768,3769,3770,3771],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":299,"slug":7295,"dossier":47,"summary":7296,"aliases":7297,"sourceIds":7299,"published":7300,"modified":7301,"checkedAt":7,"severity":7302,"references":7305,"versionKeys":7314,"packageCount":32,"repositoryCount":2620},"ghsa-v4x8-3wr5-3wq8-fa48bf99","filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files",[7298],"CVE-2026-112940",[299],"2026-10-23T21:59:08Z","2026-10-23T22:15:04.432475030Z",[7303],{"type":2243,"score":7304},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7306,7308,7310,7311,7312,7313],{"type":2208,"url":7307},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-v4x8-3wr5-3wq8",{"type":2211,"url":7309},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112940",{"type":2208,"url":4826},{"type":2208,"url":4828},{"type":2216,"url":3348},{"type":2208,"url":3350},[3352,3353,3354,3355],{"id":300,"slug":7316,"dossier":47,"summary":7317,"aliases":7318,"sourceIds":7321,"published":7322,"modified":7323,"checkedAt":7,"severity":7324,"references":7328,"versionKeys":7340,"packageCount":32,"repositoryCount":2620},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[7319,7320],"CVE-2026-41205","PYSEC-2026-88",[300,7320],"2026-04-16T21:16:40Z","2026-09-10T03:51:03.377000392Z",[7325,7326],{"type":2243,"score":5902},{"type":2204,"score":7327},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7329,7331,7333,7335,7337,7338],{"type":2211,"url":7330},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2211,"url":7332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2208,"url":7334},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2208,"url":7336},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2216,"url":2610},{"type":2208,"url":7339},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2618,2619],{"id":301,"slug":7342,"dossier":47,"summary":7343,"aliases":7344,"sourceIds":7347,"published":7348,"modified":7349,"checkedAt":7,"severity":7350,"references":7353,"versionKeys":7362,"packageCount":32,"repositoryCount":497},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[7345,7346],"CVE-2026-53540","PYSEC-2026-3040",[301,7346],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[7351],{"type":2243,"score":7352},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7354,7356,7357,7358,7360],{"type":2208,"url":7355},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2216,"url":3425},{"type":2216,"url":3427},{"type":2211,"url":7359},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2211,"url":7361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[3551,3552,3553,3431],{"id":302,"slug":7364,"dossier":47,"summary":7365,"aliases":7366,"sourceIds":7370,"published":7371,"modified":7372,"checkedAt":7,"severity":7373,"references":7375,"versionKeys":7386,"packageCount":32,"repositoryCount":2681},"ghsa-v9pv-5gc8-w2m6-ece1573e","Pillow multi-frame loaders can reuse stale native image storage after mode transitions",[7367,7368,7369],"BIT-pillow-2026-96639","CVE-2026-96639","PYSEC-2026-4339",[302,7369],"2026-10-21T21:20:32.217Z","2026-10-29T10:55:37.663049285Z",[7374],{"type":2243,"score":3234},[7376,7378,7380,7382,7384,7385],{"type":2211,"url":7377},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pv-5gc8-w2m6",{"type":2211,"url":7379},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96639",{"type":2725,"url":7381},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10105",{"type":2251,"url":7383},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F78d97d994579aef81aafe123773d525f40f2522a",{"type":2216,"url":2217},{"type":2211,"url":2219},[2223,2224,2225,2226,2227,2228,2229,2230],{"id":303,"slug":7388,"dossier":47,"summary":7389,"aliases":7390,"sourceIds":7393,"published":7394,"modified":7395,"checkedAt":7,"severity":7396,"references":7398,"versionKeys":7409,"packageCount":32,"repositoryCount":497},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[7391,7392],"CVE-2026-53537","PYSEC-2026-3041",[303,7392],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[7397],{"type":2243,"score":4024},[7399,7401,7403,7404,7406,7408],{"type":2208,"url":7400},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2211,"url":7402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2216,"url":3425},{"type":2211,"url":7405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2208,"url":7407},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2216,"url":3427},[3551,3552,3553,3431],{"id":304,"slug":7411,"dossier":47,"summary":7412,"aliases":7413,"sourceIds":7417,"published":5222,"modified":7418,"checkedAt":7,"severity":7419,"references":7422,"versionKeys":7437,"packageCount":32,"repositoryCount":457},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[7414,7415,7416],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[304],"2026-06-10T17:41:15.774477397Z",[7420,7421],{"type":2243,"score":4587},{"type":2204,"score":5227},[7423,7425,7426,7427,7428,7430,7431,7433,7435],{"type":2211,"url":7424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2208,"url":5232},{"type":2208,"url":5234},{"type":2208,"url":5236},{"type":2208,"url":7429},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2216,"url":2732},{"type":2208,"url":7432},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2208,"url":7434},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2208,"url":7436},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2744,2745,2746,3765,3766,3767,3768],{"id":305,"slug":7439,"dossier":47,"summary":7440,"aliases":7441,"sourceIds":7445,"published":7446,"modified":7447,"checkedAt":7,"severity":7448,"references":7450,"versionKeys":7464,"packageCount":32,"repositoryCount":2900},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[7442,7443,7444],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[305,7444],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[7449],{"type":2204,"score":2555},[7451,7453,7455,7457,7459,7460,7461,7462],{"type":2208,"url":7452},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2211,"url":7454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2208,"url":7456},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2208,"url":7458},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2216,"url":2217},{"type":2208,"url":3717},{"type":2216,"url":3719},{"type":2211,"url":7463},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":306,"slug":7466,"dossier":47,"summary":7467,"aliases":7468,"sourceIds":7471,"published":7472,"modified":7473,"checkedAt":7,"severity":7474,"references":7477,"versionKeys":7492,"packageCount":32,"repositoryCount":102},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[7469,7470],"CVE-2025-43859","PYSEC-2026-348",[306,7470],"2025-04-24T16:07:56Z","2026-10-27T16:45:03.535584040Z",[7475],{"type":2243,"score":7476},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[7478,7480,7482,7484,7486,7488,7490],{"type":2208,"url":7479},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2211,"url":7481},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2208,"url":7483},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2208,"url":7485},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fh11\u002FPYSEC-2026-348.yaml",{"type":2216,"url":7487},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2216,"url":7489},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2211,"url":7491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[7493],"pypi:h11@0.14.0",{"id":307,"slug":7495,"dossier":47,"summary":7496,"aliases":7497,"sourceIds":7499,"published":7500,"modified":7501,"checkedAt":7,"severity":7502,"references":7504,"versionKeys":7511,"packageCount":32,"repositoryCount":2231},"ghsa-vx6w-vv9f-6gvg-f0d0a86e","Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit",[7498],"CVE-2026-112899",[307],"2026-10-20T20:53:21Z","2026-10-20T21:00:04.428653055Z",[7503],{"type":2204,"score":3857},[7505,7507,7509,7510],{"type":2208,"url":7506},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vx6w-vv9f-6gvg",{"type":2208,"url":7508},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3e8cc105588d1dfe062fcada0b6058c1b5f14b65",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":308,"slug":7513,"dossier":90,"summary":7514,"aliases":7515,"sourceIds":7518,"published":7519,"modified":7520,"checkedAt":7,"severity":7521,"references":7523,"versionKeys":7535,"packageCount":32,"repositoryCount":3872},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[7516,7517],"CVE-2026-97689","PYSEC-2026-4177",[308,7517],"2026-09-30T14:46:18Z","2026-10-01T17:55:57.514829071Z",[7522],{"type":2204,"score":2657},[7524,7526,7528,7530,7531,7532,7533],{"type":2208,"url":7525},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":2211,"url":7527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":2208,"url":7529},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":2216,"url":2672},{"type":2208,"url":4548},{"type":2216,"url":2674},{"type":2211,"url":7534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",[2676,2677,2678,2679,2680,4553,4554],{"id":309,"slug":7537,"dossier":47,"summary":7538,"aliases":7539,"sourceIds":7542,"published":7543,"modified":7544,"checkedAt":7,"severity":7545,"references":7549,"versionKeys":7558,"packageCount":32,"repositoryCount":468},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[7540,7541],"CVE-2026-22815","PYSEC-2026-2094",[309,7541],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[7546,7547],{"type":2204,"score":3857},{"type":2204,"score":7548},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7550,7552,7554,7556,7557],{"type":2251,"url":7551},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2211,"url":7553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2251,"url":7555},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2216,"url":2499},{"type":2211,"url":2644},[2503,2504,2505,2506,2507,2508,2509,2510],{"id":310,"slug":7560,"dossier":47,"summary":7561,"aliases":7562,"sourceIds":7565,"published":7566,"modified":7567,"checkedAt":7,"severity":7568,"references":7571,"versionKeys":7588,"packageCount":32,"repositoryCount":3772},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[7563,7564],"CVE-2025-68146","PYSEC-2026-1375",[310,7564],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[7569],{"type":2243,"score":7570},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7572,7574,7576,7577,7579,7581,7583,7584,7586],{"type":2208,"url":7573},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2208,"url":7575},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2216,"url":3348},{"type":2208,"url":7578},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2208,"url":7580},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2208,"url":7582},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2216,"url":7029},{"type":2211,"url":7585},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2211,"url":7587},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[3938,3939,3940,3941],{"id":311,"slug":7590,"dossier":47,"summary":7591,"aliases":7592,"sourceIds":7595,"published":7596,"modified":7597,"checkedAt":7,"severity":7598,"references":7601,"versionKeys":7610,"packageCount":32,"repositoryCount":2231},"ghsa-w889-685w-c8fh-9dd63a47","Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",[7593,7594],"BIT-pillow-2026-112900","CVE-2026-112900",[311],"2026-10-21T19:58:44Z","2026-10-26T08:55:37.091976147Z",[7599],{"type":2204,"score":7600},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7602,7604,7606,7608,7609],{"type":2208,"url":7603},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-w889-685w-c8fh",{"type":2211,"url":7605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112900",{"type":2208,"url":7607},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa2c363141da31a265dd536c945677db4b64f3ec9",{"type":2216,"url":2217},{"type":2208,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":312,"slug":7612,"dossier":47,"summary":7613,"aliases":7614,"sourceIds":7617,"published":7618,"modified":7619,"checkedAt":7,"severity":7620,"references":7626,"versionKeys":7661,"packageCount":32,"repositoryCount":102},"ghsa-wf93-45jw-7689-98dc514d","pip: Path traversal in console_scripts\u002Fgui_scripts entry point names allows installing scripts outside of target directory",[7615,7616],"CVE-2026-8643","PYSEC-2026-196",[312,7616],"2026-06-01T17:17:35.770Z","2026-09-10T03:51:09.636289073Z",[7621,7623,7625],{"type":2243,"score":7622},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2204,"score":7624},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":5668},[7627,7629,7631,7633,7635,7637,7639,7641,7643,7645,7647,7648,7650,7652,7654,7656,7657,7659],{"type":2211,"url":7628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8643",{"type":2251,"url":7630},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14000",{"type":2208,"url":7632},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:33313",{"type":2208,"url":7634},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34776",{"type":2208,"url":7636},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34777",{"type":2208,"url":7638},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34778",{"type":2208,"url":7640},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34780",{"type":2208,"url":7642},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34891",{"type":2208,"url":7644},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36193",{"type":2208,"url":7646},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36315",{"type":2208,"url":5363},{"type":2208,"url":7649},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37283",{"type":2208,"url":7651},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8643",{"type":2208,"url":7653},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2460927",{"type":2208,"url":7655},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-196.yaml",{"type":2216,"url":3167},{"type":2211,"url":7658},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FYV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ\u002F",{"type":2211,"url":7660},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf93-45jw-7689",[3179,3180],{"id":313,"slug":7663,"dossier":47,"summary":7664,"aliases":7665,"sourceIds":7669,"published":7670,"modified":7671,"checkedAt":7,"severity":7672,"references":7675,"versionKeys":7713,"packageCount":32,"repositoryCount":2681},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[7666,7667,7668],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[313,7668],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[7673,7674],{"type":2243,"score":2327},{"type":2204,"score":2555},[7676,7678,7680,7682,7684,7685,7687,7689,7691,7693,7695,7697,7698,7700,7702,7704,7705,7707,7709,7711],{"type":2208,"url":7677},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2211,"url":7679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2208,"url":7681},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2208,"url":7683},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2216,"url":2217},{"type":2208,"url":7686},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2208,"url":7688},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2208,"url":7690},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2211,"url":7692},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2211,"url":7694},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2211,"url":7696},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2211,"url":5020},{"type":2211,"url":7699},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2211,"url":7701},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2211,"url":7703},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2211,"url":5022},{"type":2211,"url":7706},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2211,"url":7708},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2211,"url":7710},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2211,"url":7712},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2221,2222,2223,2224,2225,2226,2227,2228],{"id":314,"slug":7715,"dossier":47,"summary":7716,"aliases":7717,"sourceIds":7721,"published":7722,"modified":7723,"checkedAt":7,"severity":7724,"references":7727,"versionKeys":7736,"packageCount":32,"repositoryCount":2681},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[7718,7719,7720],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[314,7720],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[7725,7726],{"type":2243,"score":2720},{"type":2204,"score":3677},[7728,7730,7732,7734,7735],{"type":2211,"url":7729},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2211,"url":7731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2208,"url":7733},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2216,"url":2217},{"type":2211,"url":3691},[2221,2222,2223,2224,2225,2226,2227,2228],{"id":315,"slug":7738,"dossier":47,"summary":7739,"aliases":7740,"sourceIds":7743,"published":7744,"modified":7745,"checkedAt":7,"severity":7746,"references":7749,"versionKeys":7762,"packageCount":32,"repositoryCount":34},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[7741,7742],"CVE-2026-24486","PYSEC-2026-1852",[315,7742],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[7747],{"type":2243,"score":7748},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[7750,7752,7754,7756,7757,7759,7760],{"type":2208,"url":7751},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2211,"url":7753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2208,"url":7755},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2216,"url":3425},{"type":2208,"url":7758},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2216,"url":3427},{"type":2211,"url":7761},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[3551,3552,3431],{"id":316,"slug":7764,"dossier":47,"summary":7765,"aliases":7766,"sourceIds":7769,"published":7770,"modified":7771,"checkedAt":7,"severity":7772,"references":7774,"versionKeys":7796,"packageCount":32,"repositoryCount":468},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[7767,7768],"CVE-2026-48818","PYSEC-2026-2281",[316,7768],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[7773],{"type":2243,"score":5902},[7775,7777,7778,7780,7782,7784,7786,7788,7790,7792,7794],{"type":2211,"url":7776},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2216,"url":4292},{"type":2208,"url":7779},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2208,"url":7781},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2211,"url":7783},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2211,"url":7785},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2211,"url":7787},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2211,"url":7789},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2725,"url":7791},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2251,"url":7793},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2251,"url":7795},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2475,2476,2477,4299,4300,4301,4408,4409,4410],{"id":317,"slug":7798,"dossier":47,"summary":5993,"aliases":7799,"sourceIds":7802,"published":5998,"modified":7803,"checkedAt":7,"severity":7804,"references":7807,"versionKeys":7821,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[7800,7801],"CVE-2024-11393","PYSEC-2024-228",[317,7801],"2026-09-10T03:50:55.987633957Z",[7805,7806],{"type":2243,"score":6002},{"type":2243,"score":2349},[7808,7810,7811,7812,7813,7815,7817,7819],{"type":2211,"url":7809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2208,"url":6008},{"type":2208,"url":6010},{"type":2216,"url":2400},{"type":2208,"url":7814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2208,"url":7816},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2211,"url":7818},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2211,"url":7820},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2407],{"id":318,"slug":7823,"dossier":47,"summary":7824,"aliases":7825,"sourceIds":7829,"published":7830,"modified":7831,"checkedAt":7,"severity":7832,"references":7837,"versionKeys":7853,"packageCount":32,"repositoryCount":376},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[7826,7827,7828],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[318],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[7833,7835],{"type":2243,"score":7834},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2204,"score":7836},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7838,7840,7842,7844,7846,7847,7849,7851],{"type":2211,"url":7839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2208,"url":7841},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2208,"url":7843},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2208,"url":7845},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2216,"url":2732},{"type":2208,"url":7848},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2208,"url":7850},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2208,"url":7852},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2744,2745],{"id":319,"slug":7855,"dossier":47,"summary":7856,"aliases":7857,"sourceIds":7860,"published":7861,"modified":7862,"checkedAt":7,"severity":7863,"references":7865,"versionKeys":7872,"packageCount":32,"repositoryCount":468},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[7858,7859],"CVE-2026-48817","PYSEC-2026-2280",[319,7859],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[7864],{"type":2243,"score":2634},[7866,7868,7870,7871],{"type":2211,"url":7867},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2211,"url":7869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2216,"url":4292},{"type":2211,"url":7789},[2475,2476,2477,4299,4300,4301,4408,4409,4410],{"id":320,"slug":7874,"dossier":47,"summary":7875,"aliases":7876,"sourceIds":7879,"published":7880,"modified":7881,"checkedAt":7,"severity":7882,"references":7884,"versionKeys":7899,"packageCount":32,"repositoryCount":457},"ghsa-x9r9-c232-4q39-1586e326","Hugging Face Transformers downloads custom generation code before trust consent",[7877,7878],"CVE-2026-80047","PYSEC-2026-4174",[320,7878],"2026-09-01T15:31:13Z","2026-10-01T17:55:55.397425521Z",[7883],{"type":2243,"score":6883},[7885,7887,7889,7891,7892,7894,7896,7897],{"type":2211,"url":7886},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80047",{"type":2208,"url":7888},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F48620",{"type":2208,"url":7890},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fcbc1651a032b923da7f4b44b3d0e6f68e6ba6b55",{"type":2216,"url":2400},{"type":2208,"url":7893},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":2208,"url":7895},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":2216,"url":2769},{"type":2211,"url":7898},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x9r9-c232-4q39",[2408,2409,2410,2411,2412,2413,2414,2415,7900],"pypi:transformers@5.8.0",{"id":321,"slug":7902,"dossier":47,"summary":7903,"aliases":7904,"sourceIds":7907,"published":7908,"modified":7909,"checkedAt":7,"severity":7910,"references":7913,"versionKeys":7919,"packageCount":32,"repositoryCount":457},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[7905,7906],"CVE-2026-54274","PYSEC-2026-2108",[321,7906],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[7911,7912],{"type":2204,"score":2981},{"type":2243,"score":2327},[7914,7916,7917],{"type":2211,"url":7915},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2216,"url":2499},{"type":2251,"url":7918},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2503,2504,2505,2506,2507,2508,2509,2510,2511],{"id":322,"slug":7921,"dossier":47,"summary":7922,"aliases":7923,"sourceIds":7925,"published":7926,"modified":7927,"checkedAt":7,"severity":7928,"references":7930,"versionKeys":7943,"packageCount":32,"repositoryCount":478},"ghsa-xcq7-p3pf-p88h-7e00dc8e","OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api",[7924],"CVE-2026-114603",[322],"2026-10-22T16:22:07Z","2026-10-22T16:30:40.999595074Z",[7929],{"type":2243,"score":2428},[7931,7933,7935,7937,7939,7941],{"type":2208,"url":7932},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-xcq7-p3pf-p88h",{"type":2208,"url":7934},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5749",{"type":2208,"url":7936},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Fd5224bf4ffdf2aee1b592ad238dcc32ca957f26b",{"type":2216,"url":7938},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python",{"type":2208,"url":7940},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fblob\u002Fmain\u002FCHANGELOG.md#version-1451066b1-2026-10-06",{"type":2208,"url":7942},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.1",[7944,7945,7946,7947,7948,7949,7950,7951],"pypi:opentelemetry-api@1.25.0","pypi:opentelemetry-api@1.26.0","pypi:opentelemetry-api@1.28.2","pypi:opentelemetry-api@1.34.1","pypi:opentelemetry-api@1.36.0","pypi:opentelemetry-api@1.38.0","pypi:opentelemetry-api@1.39.1","pypi:opentelemetry-api@1.43.0",{"id":323,"slug":7953,"dossier":47,"summary":7954,"aliases":7955,"sourceIds":7959,"published":7960,"modified":7961,"checkedAt":7,"severity":7962,"references":7964,"versionKeys":7978,"packageCount":32,"repositoryCount":516},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[7956,7957,7958],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[323,7958],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[7963],{"type":2243,"score":7304},[7965,7967,7969,7971,7973,7975,7976],{"type":2211,"url":7966},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2211,"url":7968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2208,"url":7970},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2251,"url":7972},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2208,"url":7974},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2216,"url":2217},{"type":2208,"url":7977},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2224],{"id":324,"slug":7980,"dossier":47,"summary":7981,"aliases":7982,"sourceIds":7986,"published":7987,"modified":7988,"checkedAt":7,"severity":7989,"references":7992,"versionKeys":8001,"packageCount":32,"repositoryCount":2231},"ghsa-xgh8-jp6q-p5x8-0a8d4f1f","Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes",[7983,7984,7985],"BIT-pillow-2026-112901","CVE-2026-112901","PYSEC-2026-4335",[324,7985],"2026-10-19T22:17:10.293Z","2026-10-28T11:10:55.647541842Z",[7990,7991],{"type":2204,"score":3857},{"type":2243,"score":2327},[7993,7995,7997,7999,8000],{"type":2251,"url":7994},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xgh8-jp6q-p5x8",{"type":2211,"url":7996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112901",{"type":2251,"url":7998},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F2852a3e3d568997ddec745fc800991f138878f4b",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":325,"slug":8003,"dossier":47,"summary":8004,"aliases":8005,"sourceIds":8009,"published":8010,"modified":8011,"checkedAt":7,"severity":8012,"references":8015,"versionKeys":8026,"packageCount":32,"repositoryCount":2900},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[8006,8007,8008],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[325,8008],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[8013],{"type":2243,"score":8014},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8016,8018,8020,8022,8024,8025],{"type":2402,"url":8017},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2211,"url":8019},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2251,"url":8021},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2251,"url":8023},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2216,"url":2217},{"type":2211,"url":3717},[2221,2222,2223,2224,2225,2226,2227,2228,2229],{"id":326,"slug":8028,"dossier":47,"summary":8029,"aliases":8030,"sourceIds":8031,"published":8032,"modified":8033,"checkedAt":7,"severity":8034,"references":8037,"versionKeys":8047,"packageCount":32,"repositoryCount":2231},"ghsa-xmj3-9gf7-h52w-d99c0028","setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation  Description",[],[326],"2026-10-23T21:44:11Z","2026-10-23T22:00:03.739009766Z",[8035],{"type":2204,"score":8036},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[8038,8040,8042,8044,8045],{"type":2208,"url":8039},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-xmj3-9gf7-h52w",{"type":2208,"url":8041},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F5329",{"type":2208,"url":8043},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F6d07b8d17890dda58d944ac51e58f54af92d52af",{"type":2216,"url":3520},{"type":2208,"url":8046},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv84.1.0",[3526,3527,3528,3529,5825,5826,5827,5828,5829,5830,5831,5832],{"id":327,"slug":8049,"dossier":47,"summary":8050,"aliases":8051,"sourceIds":8054,"published":8055,"modified":8056,"checkedAt":7,"severity":8057,"references":8060,"versionKeys":8073,"packageCount":32,"repositoryCount":42},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[8052,8053],"CVE-2026-9856","PYSEC-2026-3929",[327,8053],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[8058],{"type":2243,"score":8059},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[8061,8063,8065,8067,8068,8070,8071],{"type":2211,"url":8062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":2208,"url":8064},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":2208,"url":8066},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":2216,"url":2400},{"type":2208,"url":8069},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":2216,"url":2769},{"type":2211,"url":8072},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[2407,2408,2409,2410,2411,2412,2413,2414,2415,7900],{"id":328,"slug":8075,"dossier":47,"summary":8076,"aliases":8077,"sourceIds":8080,"published":8081,"modified":8082,"checkedAt":7,"severity":8083,"references":8088,"versionKeys":8103,"packageCount":32,"repositoryCount":2231},"ghsa-xvh5-g6gv-559v-e12340aa","Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags",[8078,8079],"CVE-2026-112902","PYSEC-2026-4363",[328,8079],"2026-10-21T21:29:16Z","2026-11-11T10:20:03.066593346Z",[8084,8086],{"type":2204,"score":8085},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2243,"score":8087},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[8089,8091,8093,8095,8097,8099,8101,8102],{"type":2251,"url":8090},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xvh5-g6gv-559v",{"type":2211,"url":8092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112902",{"type":2208,"url":8094},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F10903",{"type":2251,"url":8096},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10227",{"type":2251,"url":8098},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F570df030c0d30c2bf5336b2ab59f3902d8ab0b6d",{"type":2208,"url":8100},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faf56ace297b0991d02988fcc2ea933e4824b4fb3",{"type":2216,"url":2217},{"type":2211,"url":2219},[2221,2222,2223,2224,2225,2226,2227,2228,2229,2230],{"id":329,"slug":8105,"dossier":47,"summary":383,"aliases":8106,"sourceIds":8109,"published":8110,"modified":8111,"checkedAt":7,"severity":8112,"references":8114,"versionKeys":8123,"packageCount":32,"repositoryCount":376},"pysec-2025-198-62b25ed4",[8107,8108],"BIT-pytorch-2025-46148","CVE-2025-46148",[329],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[8113],{"type":2243,"score":3832},[8115,8117,8119,8121],{"type":2211,"url":8116},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2211,"url":8118},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2725,"url":8120},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2251,"url":8122},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2744,2745],{"id":330,"slug":8125,"dossier":47,"summary":383,"aliases":8126,"sourceIds":8129,"published":8130,"modified":8131,"checkedAt":7,"severity":8132,"references":8134,"versionKeys":8140,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[8127,8128],"BIT-pytorch-2025-46149","CVE-2025-46149",[330],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[8133],{"type":2243,"score":3832},[8135,8136,8138],{"type":2211,"url":8116},{"type":2725,"url":8137},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2251,"url":8139},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2745],{"id":331,"slug":8142,"dossier":47,"summary":383,"aliases":8143,"sourceIds":8146,"published":8147,"modified":8148,"checkedAt":7,"severity":8149,"references":8151,"versionKeys":8159,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[8144,8145],"BIT-pytorch-2025-46150","CVE-2025-46150",[331],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[8150],{"type":2243,"score":3832},[8152,8153,8155,8157],{"type":2211,"url":8116},{"type":2725,"url":8154},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2725,"url":8156},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2251,"url":8158},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2745],{"id":332,"slug":8161,"dossier":47,"summary":383,"aliases":8162,"sourceIds":8165,"published":8166,"modified":8167,"checkedAt":7,"severity":8168,"references":8170,"versionKeys":8176,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[8163,8164],"BIT-pytorch-2025-46152","CVE-2025-46152",[332],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[8169],{"type":2243,"score":2428},[8171,8172,8174],{"type":2211,"url":8116},{"type":2725,"url":8173},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2251,"url":8175},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2745],{"id":333,"slug":8178,"dossier":47,"summary":383,"aliases":8179,"sourceIds":8182,"published":8183,"modified":8184,"checkedAt":7,"severity":8185,"references":8187,"versionKeys":8197,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[8180,8181],"BIT-pytorch-2025-46153","CVE-2025-46153",[333],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[8186],{"type":2243,"score":3832},[8188,8190,8191,8193,8195],{"type":2208,"url":8189},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2211,"url":8116},{"type":2211,"url":8192},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2725,"url":8194},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2251,"url":8196},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2745],{"id":334,"slug":8199,"dossier":47,"summary":383,"aliases":8200,"sourceIds":8203,"published":8204,"modified":8205,"checkedAt":7,"severity":8206,"references":8208,"versionKeys":8213,"packageCount":32,"repositoryCount":107},"pysec-2025-203-2febb201",[8201,8202],"BIT-pytorch-2025-55551","CVE-2025-55551",[334],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[8207],{"type":2243,"score":2327},[8209,8211],{"type":2211,"url":8210},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2725,"url":8212},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2744,2745,2746,3765,3766,3767],{"id":335,"slug":8215,"dossier":47,"summary":383,"aliases":8216,"sourceIds":8219,"published":8220,"modified":8221,"checkedAt":7,"severity":8222,"references":8224,"versionKeys":8228,"packageCount":32,"repositoryCount":107},"pysec-2025-204-cdae47da",[8217,8218],"BIT-pytorch-2025-55552","CVE-2025-55552",[335],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[8223],{"type":2243,"score":2327},[8225,8226],{"type":2211,"url":8210},{"type":2725,"url":8227},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2744,2745,2746,3765,3766,3767],{"id":336,"slug":8230,"dossier":47,"summary":383,"aliases":8231,"sourceIds":8234,"published":8235,"modified":8236,"checkedAt":7,"severity":8237,"references":8239,"versionKeys":8245,"packageCount":32,"repositoryCount":102},"pysec-2025-205-fd5e58fd",[8232,8233],"BIT-pytorch-2025-55553","CVE-2025-55553",[336],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[8238],{"type":2243,"score":2327},[8240,8241,8243],{"type":2211,"url":8210},{"type":2725,"url":8242},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2251,"url":8244},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2744,2745,2746],{"id":337,"slug":8247,"dossier":47,"summary":383,"aliases":8248,"sourceIds":8251,"published":8252,"modified":8253,"checkedAt":7,"severity":8254,"references":8256,"versionKeys":8260,"packageCount":32,"repositoryCount":107},"pysec-2025-206-58322476",[8249,8250],"BIT-pytorch-2025-55554","CVE-2025-55554",[337],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[8255],{"type":2243,"score":2428},[8257,8258],{"type":2211,"url":8210},{"type":2725,"url":8259},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2744,2745,2746,3765,3766,3767],{"id":338,"slug":8262,"dossier":47,"summary":383,"aliases":8263,"sourceIds":8266,"published":8267,"modified":8268,"checkedAt":7,"severity":8269,"references":8271,"versionKeys":8277,"packageCount":32,"repositoryCount":102},"pysec-2025-207-2abef3fc",[8264,8265],"BIT-pytorch-2025-55557","CVE-2025-55557",[338],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[8270],{"type":2243,"score":2327},[8272,8273,8275],{"type":2211,"url":8210},{"type":2725,"url":8274},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2251,"url":8276},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2744,2745,2746],{"id":339,"slug":8279,"dossier":47,"summary":383,"aliases":8280,"sourceIds":8283,"published":8284,"modified":8285,"checkedAt":7,"severity":8286,"references":8288,"versionKeys":8294,"packageCount":32,"repositoryCount":102},"pysec-2025-208-6e93fe9d",[8281,8282],"BIT-pytorch-2025-55558","CVE-2025-55558",[339],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[8287],{"type":2243,"score":2327},[8289,8290,8292],{"type":2211,"url":8210},{"type":2725,"url":8291},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2251,"url":8293},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2744,2745,2746],{"id":340,"slug":8296,"dossier":47,"summary":383,"aliases":8297,"sourceIds":8300,"published":8301,"modified":8302,"checkedAt":7,"severity":8303,"references":8305,"versionKeys":8311,"packageCount":32,"repositoryCount":102},"pysec-2025-209-e6f352b0",[8298,8299],"BIT-pytorch-2025-55560","CVE-2025-55560",[340],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[8304],{"type":2243,"score":2327},[8306,8307,8309],{"type":2211,"url":8210},{"type":2725,"url":8308},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2251,"url":8310},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2744,2745,2746],{"id":341,"slug":8313,"dossier":47,"summary":383,"aliases":8314,"sourceIds":8316,"published":8317,"modified":8318,"checkedAt":7,"severity":8319,"references":8321,"versionKeys":8324,"packageCount":32,"repositoryCount":2620},"pysec-2025-211-d8bd15de",[8315],"CVE-2025-14920",[341],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[8320],{"type":2243,"score":2393},[8322],{"type":2211,"url":8323},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2407,2408,2409,2410,2411],{"id":342,"slug":8326,"dossier":47,"summary":383,"aliases":8327,"sourceIds":8329,"published":8330,"modified":8331,"checkedAt":7,"severity":8332,"references":8334,"versionKeys":8337,"packageCount":32,"repositoryCount":2620},"pysec-2025-212-a011b97d",[8328],"CVE-2025-14921",[342],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[8333],{"type":2243,"score":2393},[8335],{"type":2211,"url":8336},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2407,2408,2409,2410,2411],{"id":343,"slug":8339,"dossier":47,"summary":383,"aliases":8340,"sourceIds":8342,"published":8343,"modified":8344,"checkedAt":7,"severity":8345,"references":8347,"versionKeys":8350,"packageCount":32,"repositoryCount":2620},"pysec-2025-213-9043dc9b",[8341],"CVE-2025-14924",[343],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[8346],{"type":2243,"score":2393},[8348],{"type":2211,"url":8349},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2407,2408,2409,2410,2411],{"id":344,"slug":8352,"dossier":47,"summary":383,"aliases":8353,"sourceIds":8355,"published":8356,"modified":8357,"checkedAt":7,"severity":8358,"references":8360,"versionKeys":8363,"packageCount":32,"repositoryCount":2620},"pysec-2025-214-eb241255",[8354],"CVE-2025-14926",[344],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[8359],{"type":2243,"score":2393},[8361],{"type":2211,"url":8362},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2407,2408,2409,2410,2411],{"id":345,"slug":8365,"dossier":47,"summary":383,"aliases":8366,"sourceIds":8368,"published":8369,"modified":8370,"checkedAt":7,"severity":8371,"references":8373,"versionKeys":8376,"packageCount":32,"repositoryCount":2620},"pysec-2025-215-6064f491",[8367],"CVE-2025-14927",[345],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[8372],{"type":2243,"score":2393},[8374],{"type":2211,"url":8375},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2407,2408,2409,2410,2411],{"id":346,"slug":8378,"dossier":47,"summary":383,"aliases":8379,"sourceIds":8381,"published":8382,"modified":8383,"checkedAt":7,"severity":8384,"references":8386,"versionKeys":8389,"packageCount":32,"repositoryCount":2620},"pysec-2025-216-5708ed01",[8380],"CVE-2025-14928",[346],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[8385],{"type":2243,"score":2393},[8387],{"type":2211,"url":8388},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2407,2408,2409,2410,2411],{"id":347,"slug":8391,"dossier":47,"summary":383,"aliases":8392,"sourceIds":8394,"published":8395,"modified":8396,"checkedAt":7,"severity":8397,"references":8399,"versionKeys":8402,"packageCount":32,"repositoryCount":457},"pysec-2025-217-2c1ad388",[8393],"CVE-2025-14929",[347],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[8398],{"type":2243,"score":2393},[8400],{"type":2211,"url":8401},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2407,2408,2409,2410,2411,2412,2413,2414,2415],{"id":348,"slug":8404,"dossier":47,"summary":383,"aliases":8405,"sourceIds":8407,"published":8408,"modified":8409,"checkedAt":7,"severity":8410,"references":8412,"versionKeys":8415,"packageCount":32,"repositoryCount":478},"pysec-2025-218-39811fc3",[8406],"CVE-2025-14930",[348],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[8411],{"type":2243,"score":2393},[8413],{"type":2211,"url":8414},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2407,2408,2409,2410,2411,2412],{"id":349,"slug":8417,"dossier":47,"summary":383,"aliases":8418,"sourceIds":8421,"published":8422,"modified":8423,"checkedAt":7,"severity":8424,"references":8426,"versionKeys":8437,"packageCount":32,"repositoryCount":2381},"pysec-2026-139-96951ff6",[8419,8420],"BIT-pytorch-2026-4538","CVE-2026-4538",[349],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[8425],{"type":2243,"score":6883},[8427,8429,8431,8433,8435],{"type":2208,"url":8428},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2211,"url":8430},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2211,"url":8432},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2725,"url":8434},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2251,"url":8436},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[7291,2744,2745,2746,3765,3766,3767,3768,3769,3770,3771],1794474421056]