[{"data":1,"prerenderedAt":2064},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-3608":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":164,"related":172},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":102,"artifactResolvedComponentCount":63,"exactManifestPinCount":103,"packageCount":63,"ecosystems":104,"aiPackageCount":103,"licenseExpressionCount":41,"unknownLicensePackageCount":38,"advisoryIds":106,"advisoryCount":159,"providers":160},"opencode:3608","opencode-3608",3608,"AI","iqsh\u002Fcollaboration-online-board\u002Fai",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fiqsh\u002Fcollaboration-online-board\u002Fai","7cc4cbe5064bc5ede2426caf6981c5e9d0509327","https:\u002F\u002Fgitlab.opencode.de\u002Fiqsh\u002Fcollaboration-online-board\u002Fai\u002F-\u002Fcommit\u002F7cc4cbe5064bc5ede2426caf6981c5e9d0509327","2026-04-27T07:50:08.292Z","2026-04-27T07:14:29.000Z",{"complete":91,"entryCount":92,"truncated":46},true,38,[94],{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"componentCount":63},"SPDX_v2.0.0.yml","spdx-yaml","e9e46566a2217346214d08f9dede99d8821b3c68","https:\u002F\u002Fgitlab.opencode.de\u002Fiqsh\u002Fcollaboration-online-board\u002Fai\u002F-\u002Fblob\u002F7cc4cbe5064bc5ede2426caf6981c5e9d0509327\u002FSPDX_v2.0.0.yml","e053bc3719cac7ca6a6b278c6593b5be1eef3090462cdd7398ae6d6ac3f21457",649189,"parsed",43,2,[105],"pypi",[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158],"GHSA-248v-346w-9cwc","GHSA-29vq-49wr-vm6x","GHSA-2g68-c3qc-8985","GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-43qf-4rqw-9q2g","GHSA-48p4-8xcf-vxj5","GHSA-5rjg-fvgr-3xxf","GHSA-5xmw-vc9v-4wf2","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-6w46-j5rx-g56g","GHSA-7rxf-gvfg-47g4","GHSA-84pr-m4jr-85g5","GHSA-87hc-h4r5-73f7","GHSA-8rrh-rw8j-w5fx","GHSA-8vgw-p6qm-5gr7","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f9vj-2wh5-fj8j","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h75v-3vvj-5mfj","GHSA-hgf8-39gv-g3f2","GHSA-hxwh-jpp2-84pm","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-qccp-gfcp-xxvc","GHSA-r73j-pqj5-w3x7","GHSA-vqfr-h8mv-ghfj","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-xg8h-j46f-w952","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",52,[161],{"id":162,"label":163},"openai","OpenAI",{"files":165,"occurrenceCount":102},[166,171],{"path":167,"kind":168,"sourceUrl":169,"commitSha":86,"blobSha":170,"state":101,"componentCount":103},"requirements.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fiqsh\u002Fcollaboration-online-board\u002Fai\u002F-\u002Fblob\u002F7cc4cbe5064bc5ede2426caf6981c5e9d0509327\u002Frequirements.txt","84647a72af29d3827325b94a37d0aff74c461ac3",{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"componentCount":63},{"packages":173,"vulnerabilities":559},[174,183,193,205,215,226,236,245,255,264,274,283,292,301,310,319,328,338,347,356,365,374,383,392,400,409,418,429,438,447,456,465,474,484,493,502,511,520,530,540,549],{"id":72,"slug":73,"identity":175,"label":74,"aiRelevant":91,"provider":176,"advisoryCount":38,"licenseExpressions":177,"versions":179,"dossier":91,"occurrenceCount":103,"directOccurrenceCount":32,"evidenceFiles":182},"pypi:openai",{"id":162,"label":163},[178],"Apache-2.0",[180,181],"1.14.2","1.91.0",[95,167],{"id":184,"slug":185,"identity":186,"label":187,"aiRelevant":91,"provider":84,"advisoryCount":38,"licenseExpressions":188,"versions":190,"dossier":91,"occurrenceCount":103,"directOccurrenceCount":32,"evidenceFiles":192},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[189],"non-standard",[191],"0.7.0",[95,167],{"id":194,"slug":195,"identity":196,"label":197,"aiRelevant":46,"provider":84,"advisoryCount":198,"licenseExpressions":199,"versions":202,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":204},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[200,201],"HPND","MIT-CMU",[203],"10.3.0",[95],{"id":206,"slug":207,"identity":208,"label":209,"aiRelevant":46,"provider":84,"advisoryCount":65,"licenseExpressions":210,"versions":212,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":214},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[211],"MIT",[213],"2.2.2",[95],{"id":216,"slug":217,"identity":218,"label":219,"aiRelevant":46,"provider":84,"advisoryCount":220,"licenseExpressions":221,"versions":223,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":225},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",6,[222,189],"BSD-3-Clause",[224],"3.0.1",[95],{"id":227,"slug":228,"identity":229,"label":230,"aiRelevant":46,"provider":84,"advisoryCount":231,"licenseExpressions":232,"versions":233,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":235},"package:pypi:flask-cors","flask-cors-348fb6bb","pypi:flask-cors","flask-cors",5,[211],[234],"4.0.0",[95],{"id":237,"slug":238,"identity":239,"label":240,"aiRelevant":46,"provider":84,"advisoryCount":34,"licenseExpressions":241,"versions":242,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":244},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[222,189],[243],"3.1.3",[95],{"id":246,"slug":247,"identity":248,"label":249,"aiRelevant":46,"provider":84,"advisoryCount":250,"licenseExpressions":251,"versions":252,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":254},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[178],[253],"2.32.3",[95],{"id":256,"slug":257,"identity":258,"label":259,"aiRelevant":46,"provider":84,"advisoryCount":250,"licenseExpressions":260,"versions":261,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":263},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[211],[262],"69.2.0",[95],{"id":265,"slug":266,"identity":267,"label":268,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":269,"versions":271,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":273},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[270],"MPL-2.0",[272],"2024.6.2",[95],{"id":275,"slug":276,"identity":277,"label":278,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":279,"versions":280,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":282},"package:pypi:click","click-ef97f731","pypi:click","click",[222,189],[281],"8.1.7",[95],{"id":284,"slug":285,"identity":286,"label":287,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":288,"versions":289,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":291},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[222,189],[290],"3.0.2",[95],{"id":293,"slug":294,"identity":295,"label":296,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":297,"versions":298,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":300},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[211],[299],"0.14.0",[95],{"id":302,"slug":303,"identity":304,"label":305,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":306,"versions":307,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":309},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[222,189],[308],"3.7",[95],{"id":311,"slug":312,"identity":313,"label":314,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":315,"versions":316,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":318},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[211],[317],"7.2.2",[95],{"id":320,"slug":321,"identity":322,"label":323,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":324,"versions":325,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":327},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[222],[326],"1.0.1",[95],{"id":329,"slug":330,"identity":331,"label":332,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":333,"versions":335,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":337},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[334],"MIT AND MPL-2.0",[336],"4.66.2",[95],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":343,"versions":344,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":346},"package:pypi:wheel","wheel-17857b9a","pypi:wheel","wheel",[211],[345],"0.43.0",[95],{"id":348,"slug":349,"identity":350,"label":351,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":352,"versions":353,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":355},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[211],[354],"0.6.0",[95],{"id":357,"slug":358,"identity":359,"label":360,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":361,"versions":362,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":364},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[211],[363],"4.3.0",[95],{"id":366,"slug":367,"identity":368,"label":369,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":370,"versions":371,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":373},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[211],[372],"23.2.0",[95],{"id":375,"slug":376,"identity":377,"label":378,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":379,"versions":380,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":382},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[211],[381],"1.7.0",[95],{"id":384,"slug":385,"identity":386,"label":387,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":388,"versions":389,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":391},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[211],[390],"3.3.2",[95],{"id":393,"slug":394,"identity":395,"label":396,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":397,"versions":398,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":399},"package:pypi:coverage","coverage-7ba89558","pypi:coverage","coverage",[178],[317],[95],{"id":401,"slug":402,"identity":403,"label":404,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":405,"versions":406,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":408},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[178],[407],"1.9.0",[95],{"id":410,"slug":411,"identity":412,"label":413,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":414,"versions":415,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":417},"package:pypi:flask-sqlalchemy","flask-sqlalchemy-8ce83d8c","pypi:flask-sqlalchemy","flask-sqlalchemy",[189],[416],"3.1.1",[95],{"id":419,"slug":420,"identity":421,"label":422,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":423,"versions":426,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":428},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[211,424,425],"MIT AND PSF-2.0","MIT AND Python-2.0",[427],"3.0.3",[95],{"id":430,"slug":431,"identity":432,"label":433,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":434,"versions":435,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":437},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[222],[436],"1.0.4",[95],{"id":439,"slug":440,"identity":441,"label":442,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":443,"versions":444,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":446},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[222],[445],"0.27.0",[95],{"id":448,"slug":449,"identity":450,"label":451,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":452,"versions":453,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":455},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[211],[454],"2.0.0",[95],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":461,"versions":462,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":464},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[222,189],[463],"2.1.2",[95],{"id":466,"slug":467,"identity":468,"label":469,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":470,"versions":471,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":473},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[222,189],[472],"2.1.5",[95],{"id":475,"slug":476,"identity":477,"label":478,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":479,"versions":481,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":483},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[480,189],"Apache-2.0 OR BSD-2-Clause",[482],"24.1",[95],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":489,"versions":490,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":492},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[211],[491],"1.5.0",[95],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":498,"versions":499,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":501},"package:pypi:psycopg2-binary","psycopg2-binary-128ab534","pypi:psycopg2-binary","psycopg2-binary",[189],[500],"2.9.9",[95],{"id":503,"slug":504,"identity":505,"label":506,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":507,"versions":508,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":510},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[211],[509],"2.6.4",[95],{"id":512,"slug":513,"identity":514,"label":515,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":516,"versions":517,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":519},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[211],[518],"2.16.3",[95],{"id":521,"slug":522,"identity":523,"label":524,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":525,"versions":527,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":529},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[526,189],"Apache-2.0 AND CNRI-Python",[528],"2024.5.15",[95],{"id":531,"slug":532,"identity":533,"label":534,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":535,"versions":537,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":539},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[536],"Apache-2.0 OR MIT",[538],"1.3.1",[95],{"id":541,"slug":542,"identity":543,"label":544,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":545,"versions":546,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":548},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[211],[547],"2.0.29",[95],{"id":550,"slug":551,"identity":552,"label":553,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":554,"versions":556,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":558},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[555,189],"PSF-2.0",[557],"4.10.0",[95],[560,599,631,664,696,723,755,781,818,849,875,905,941,967,995,1019,1052,1078,1112,1142,1201,1233,1265,1293,1326,1353,1376,1404,1438,1462,1503,1525,1556,1580,1607,1634,1668,1689,1718,1745,1798,1821,1849,1882,1901,1918,1935,1953,1976,2003,2024,2044],{"id":107,"slug":561,"dossier":46,"summary":562,"aliases":563,"sourceIds":566,"published":567,"modified":568,"checkedAt":7,"severity":569,"references":573,"versionKeys":597,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[564,565],"CVE-2024-39689","PYSEC-2024-230",[107,565],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[570],{"type":571,"score":572},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[574,577,579,582,585,588,591,593,595],{"type":575,"url":576},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":575,"url":578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":580,"url":581},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":583,"url":584},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":586,"url":587},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":589,"url":590},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":586,"url":592},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":575,"url":594},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":575,"url":596},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[598],"pypi:certifi@2024.6.2",{"id":108,"slug":600,"dossier":46,"summary":601,"aliases":602,"sourceIds":605,"published":606,"modified":607,"checkedAt":7,"severity":608,"references":614,"versionKeys":625,"packageCount":32,"repositoryCount":220},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[603,604],"CVE-2026-27199","PYSEC-2026-2320",[108,604],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[609,612],{"type":610,"score":611},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":571,"score":613},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[615,617,619,621,623],{"type":575,"url":616},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":575,"url":618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":580,"url":620},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":583,"url":622},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":575,"url":624},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[626,627,628,629,630],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":109,"slug":632,"dossier":46,"summary":633,"aliases":634,"sourceIds":637,"published":638,"modified":639,"checkedAt":7,"severity":640,"references":643,"versionKeys":663,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[635,636],"CVE-2024-34069","PYSEC-2026-2043",[109,636],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[641],{"type":571,"score":642},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[644,646,648,650,651,653,655,657,659,661],{"type":586,"url":645},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":575,"url":647},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":586,"url":649},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":583,"url":622},{"type":586,"url":652},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":586,"url":654},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":586,"url":656},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":586,"url":658},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":583,"url":660},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":575,"url":662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[626],{"id":110,"slug":665,"dossier":91,"summary":666,"aliases":667,"sourceIds":670,"published":671,"modified":672,"checkedAt":7,"severity":673,"references":676,"versionKeys":689,"packageCount":32,"repositoryCount":695},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[668,669],"CVE-2025-66471","PYSEC-2026-1994",[110,669],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[674],{"type":610,"score":675},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[677,679,681,683,685,687],{"type":586,"url":678},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":575,"url":680},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":580,"url":682},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":583,"url":684},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":583,"url":686},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":575,"url":688},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[690,691,692,693,694],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":111,"slug":697,"dossier":91,"summary":698,"aliases":699,"sourceIds":702,"published":703,"modified":704,"checkedAt":7,"severity":705,"references":709,"versionKeys":722,"packageCount":32,"repositoryCount":695},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[700,701],"CVE-2026-21441","PYSEC-2026-1996",[111,701],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[706,708],{"type":571,"score":707},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":610,"score":675},[710,712,714,716,717,719,720],{"type":586,"url":711},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":575,"url":713},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":580,"url":715},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":583,"url":684},{"type":586,"url":718},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":583,"url":686},{"type":575,"url":721},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[690,691,692,693,694],{"id":112,"slug":724,"dossier":46,"summary":725,"aliases":726,"sourceIds":729,"published":730,"modified":731,"checkedAt":7,"severity":732,"references":735,"versionKeys":752,"packageCount":32,"repositoryCount":103},"ghsa-43qf-4rqw-9q2g-2b94f083","Flask-CORS vulnerable to Improper Handling of Case Sensitivity",[727,728],"CVE-2024-6866","PYSEC-2026-1383",[112,728],"2025-03-20T12:32:45Z","2026-07-07T17:57:18.348501785Z",[733],{"type":571,"score":734},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[736,738,740,742,744,746,748,750],{"type":575,"url":737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6866",{"type":586,"url":739},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Feb39516a3c96b90d0ae5f51293972395ec3ef358",{"type":583,"url":741},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors",{"type":586,"url":743},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fextension.py#L195",{"type":586,"url":745},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F808c11af-faee-43a8-824b-b5ab4f62b9e6",{"type":586,"url":747},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00049.html",{"type":583,"url":749},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fflask-cors",{"type":575,"url":751},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-43qf-4rqw-9q2g",[753,754],"pypi:flask-cors@4.0.0","pypi:flask-cors@5.0.1",{"id":113,"slug":756,"dossier":46,"summary":757,"aliases":758,"sourceIds":761,"published":762,"modified":763,"checkedAt":7,"severity":764,"references":767,"versionKeys":780,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[759,760],"CVE-2025-50182","PYSEC-2026-1997",[113,760],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[765],{"type":571,"score":766},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[768,770,772,774,775,777,778],{"type":586,"url":769},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":575,"url":771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":580,"url":773},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":583,"url":684},{"type":586,"url":776},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":583,"url":686},{"type":575,"url":779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[690,691,692,693],{"id":114,"slug":782,"dossier":46,"summary":783,"aliases":784,"sourceIds":788,"published":789,"modified":790,"checkedAt":7,"severity":791,"references":796,"versionKeys":815,"packageCount":32,"repositoryCount":103},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[785,786,787],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[114,787],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[792,794],{"type":610,"score":793},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":571,"score":795},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[797,800,802,805,807,809,811,813],{"type":798,"url":799},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":575,"url":801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":803,"url":804},"REPORT","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":580,"url":806},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":586,"url":808},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":583,"url":810},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":586,"url":812},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":589,"url":814},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[816,817],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":115,"slug":819,"dossier":46,"summary":820,"aliases":821,"sourceIds":825,"published":826,"modified":827,"checkedAt":7,"severity":828,"references":833,"versionKeys":842,"packageCount":32,"repositoryCount":848},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[822,823,824],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[115,824],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[829,831],{"type":571,"score":830},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":610,"score":832},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[834,836,838,840],{"type":575,"url":835},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":575,"url":837},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":583,"url":839},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":575,"url":841},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[843,844,845,846,847],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":116,"slug":850,"dossier":91,"summary":851,"aliases":852,"sourceIds":855,"published":856,"modified":857,"checkedAt":7,"severity":858,"references":862,"versionKeys":871,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[853,854],"CVE-2026-45409","PYSEC-2026-215",[116,854],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[859,860],{"type":571,"score":613},{"type":610,"score":861},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[863,865,867,869],{"type":575,"url":864},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":575,"url":866},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":583,"url":868},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":586,"url":870},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[872,873,874],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":117,"slug":876,"dossier":46,"summary":877,"aliases":878,"sourceIds":881,"published":882,"modified":883,"checkedAt":7,"severity":884,"references":889,"versionKeys":900,"packageCount":32,"repositoryCount":220},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[879,880],"CVE-2026-27205","PYSEC-2026-2151",[117,880],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[885,887],{"type":610,"score":886},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":571,"score":888},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[890,892,894,896,898],{"type":575,"url":891},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":575,"url":893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":580,"url":895},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":583,"url":897},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":575,"url":899},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[901,902,903,904],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":118,"slug":906,"dossier":46,"summary":907,"aliases":908,"sourceIds":911,"published":912,"modified":913,"checkedAt":7,"severity":914,"references":917,"versionKeys":936,"packageCount":32,"repositoryCount":220},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[909,910],"CVE-2025-71176","PYSEC-2026-1845",[118,910],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[915],{"type":571,"score":916},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[918,920,922,924,926,928,930,932,934],{"type":575,"url":919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":586,"url":921},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":586,"url":923},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":586,"url":925},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":583,"url":927},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":586,"url":929},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":586,"url":931},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":583,"url":933},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":575,"url":935},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[937,938,939,940],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":119,"slug":942,"dossier":46,"summary":943,"aliases":944,"sourceIds":947,"published":730,"modified":948,"checkedAt":7,"severity":949,"references":952,"versionKeys":966,"packageCount":32,"repositoryCount":103},"ghsa-7rxf-gvfg-47g4-171801e8","Flask-CORS improper regex path matching vulnerability",[945,946],"CVE-2024-6839","PYSEC-2026-1384",[119,946],"2026-07-07T17:57:28.129199523Z",[950],{"type":571,"score":951},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[953,955,957,958,960,962,963,964],{"type":575,"url":954},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6839",{"type":586,"url":956},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fe970988bea563e05e8b8f53fa7bcc134b5bf5c5f",{"type":583,"url":741},{"type":586,"url":959},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fcore.py#L73",{"type":586,"url":961},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F403eb1fc-86f4-4820-8eba-0f3dfae9f2b4",{"type":586,"url":747},{"type":583,"url":749},{"type":575,"url":965},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7rxf-gvfg-47g4",[753,754],{"id":120,"slug":968,"dossier":46,"summary":969,"aliases":970,"sourceIds":973,"published":974,"modified":975,"checkedAt":7,"severity":976,"references":981,"versionKeys":994,"packageCount":32,"repositoryCount":32},"ghsa-84pr-m4jr-85g5-4a9795ee","flask-cors vulnerable to log injection when the log level is set to debug",[971,972],"CVE-2024-1681","PYSEC-2024-271",[120,972],"2024-04-19T20:15:09.273Z","2026-06-10T17:01:16.365143709Z",[977,979],{"type":571,"score":978},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":571,"score":980},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[982,984,985,987,989,991,992],{"type":575,"url":983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-1681",{"type":583,"url":741},{"type":586,"url":986},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F40acc8092332dfed4bb54d7a4f89a6d479466de7\u002Fflask_cors\u002Fextension.py#L194",{"type":586,"url":988},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-271.yaml",{"type":798,"url":990},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25a7a0ba-9fa2-4777-acb6-03e5539bb644",{"type":586,"url":747},{"type":575,"url":993},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-84pr-m4jr-85g5",[753],{"id":121,"slug":996,"dossier":46,"summary":997,"aliases":998,"sourceIds":1001,"published":1002,"modified":1003,"checkedAt":7,"severity":1004,"references":1007,"versionKeys":1018,"packageCount":32,"repositoryCount":231},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[999,1000],"CVE-2026-21860","PYSEC-2026-2044",[121,1000],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[1005,1006],{"type":571,"score":613},{"type":610,"score":611},[1008,1010,1012,1014,1015,1016],{"type":586,"url":1009},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":575,"url":1011},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":586,"url":1013},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":583,"url":622},{"type":583,"url":660},{"type":575,"url":1017},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[626,627,628,629],{"id":122,"slug":1020,"dossier":46,"summary":1021,"aliases":1022,"sourceIds":1025,"published":1026,"modified":1027,"checkedAt":7,"severity":1028,"references":1031,"versionKeys":1049,"packageCount":32,"repositoryCount":103},"ghsa-8rrh-rw8j-w5fx-eadd80fb","Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack",[1023,1024],"CVE-2026-24049","PYSEC-2026-2047",[122,1024],"2026-01-22T18:02:56Z","2026-07-07T17:56:06.063831091Z",[1029],{"type":571,"score":1030},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[1032,1034,1036,1038,1041,1043,1045,1047],{"type":586,"url":1033},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fsecurity\u002Fadvisories\u002FGHSA-8rrh-rw8j-w5fx",{"type":575,"url":1035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24049",{"type":580,"url":1037},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fcommit\u002F7a7d2de96b22a9adf9208afcc9547e1001569fef",{"type":1039,"url":1040},"INTRODUCED","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fcommit\u002F934fe177ff912c8e03d5ae951d3805e1fd90ba5e",{"type":583,"url":1042},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel",{"type":586,"url":1044},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Freleases\u002Ftag\u002F0.46.2",{"type":583,"url":1046},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwheel",{"type":575,"url":1048},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8rrh-rw8j-w5fx",[1050,1051],"pypi:wheel@0.43.0","pypi:wheel@0.45.1",{"id":123,"slug":1053,"dossier":46,"summary":1054,"aliases":1055,"sourceIds":1058,"published":730,"modified":1059,"checkedAt":7,"severity":1060,"references":1063,"versionKeys":1077,"packageCount":32,"repositoryCount":103},"ghsa-8vgw-p6qm-5gr7-be25d449","Flask-CORS allows for inconsistent CORS matching",[1056,1057],"CVE-2024-6844","PYSEC-2026-1385",[123,1057],"2026-07-07T17:57:07.966932476Z",[1061],{"type":571,"score":1062},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1064,1066,1068,1069,1071,1073,1074,1075],{"type":575,"url":1065},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6844",{"type":586,"url":1067},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F35d875319621bd129a38b2b823abf4a2f6cda536",{"type":583,"url":741},{"type":586,"url":1070},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002Fmain\u002Fflask_cors\u002Fextension.py#L193",{"type":586,"url":1072},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F731a6cd4-d05f-4fe6-8f5b-fe088d7b34e0",{"type":586,"url":747},{"type":583,"url":749},{"type":575,"url":1076},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8vgw-p6qm-5gr7",[753,754],{"id":124,"slug":1079,"dossier":46,"summary":1080,"aliases":1081,"sourceIds":1084,"published":1085,"modified":1086,"checkedAt":7,"severity":1087,"references":1090,"versionKeys":1109,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1082,1083],"CVE-2024-47081","PYSEC-2026-1872",[124,1083],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1088],{"type":571,"score":1089},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1091,1093,1095,1097,1099,1101,1103,1105,1107],{"type":586,"url":1092},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":575,"url":1094},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":586,"url":1096},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":580,"url":1098},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":583,"url":1100},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":586,"url":1102},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":586,"url":1104},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":583,"url":1106},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":575,"url":1108},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1110,1111],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":125,"slug":1113,"dossier":46,"summary":1114,"aliases":1115,"sourceIds":1118,"published":1119,"modified":1120,"checkedAt":7,"severity":1121,"references":1124,"versionKeys":1141,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1116,1117],"CVE-2024-35195","PYSEC-2026-1873",[125,1117],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1122],{"type":571,"score":1123},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1125,1127,1129,1131,1133,1134,1136,1138,1139],{"type":586,"url":1126},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":575,"url":1128},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":586,"url":1130},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":580,"url":1132},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":583,"url":1100},{"type":586,"url":1135},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":586,"url":1137},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":583,"url":1106},{"type":575,"url":1140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1110],{"id":126,"slug":1143,"dossier":46,"summary":1144,"aliases":1145,"sourceIds":1149,"published":1150,"modified":1151,"checkedAt":7,"severity":1152,"references":1156,"versionKeys":1196,"packageCount":32,"repositoryCount":1200},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[1146,1147,1148],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[126,1148],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[1153,1155],{"type":610,"score":1154},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":571,"score":707},[1157,1159,1161,1163,1165,1167,1168,1170,1172,1174,1176,1178,1180,1182,1184,1186,1188,1190,1192,1194],{"type":586,"url":1158},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":575,"url":1160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":586,"url":1162},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":586,"url":1164},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":586,"url":1166},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":583,"url":839},{"type":586,"url":1169},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":586,"url":1171},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":586,"url":1173},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":575,"url":1175},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":575,"url":1177},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":575,"url":1179},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":575,"url":1181},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":575,"url":1183},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":575,"url":1185},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":575,"url":1187},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":575,"url":1189},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":575,"url":1191},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":575,"url":1193},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":575,"url":1195},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1197,1198,1199,843,844,845,846],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":127,"slug":1202,"dossier":46,"summary":1203,"aliases":1204,"sourceIds":1207,"published":1208,"modified":1209,"checkedAt":7,"severity":1210,"references":1213,"versionKeys":1230,"packageCount":32,"repositoryCount":103},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[1205,1206],"CVE-2025-27516","PYSEC-2026-1471",[127,1206],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[1211],{"type":610,"score":1212},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1214,1216,1218,1220,1222,1224,1226,1228],{"type":586,"url":1215},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":575,"url":1217},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":580,"url":1219},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":583,"url":1221},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":586,"url":1223},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":586,"url":1225},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":583,"url":1227},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":575,"url":1229},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[1231,1232],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":128,"slug":1234,"dossier":46,"summary":1235,"aliases":1236,"sourceIds":1240,"published":1241,"modified":1242,"checkedAt":7,"severity":1243,"references":1248,"versionKeys":1264,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[1237,1238,1239],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[128,1239],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[1244,1246],{"type":571,"score":1245},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":610,"score":1247},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1249,1251,1253,1255,1256,1258,1260,1262],{"type":575,"url":1250},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":586,"url":1252},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":586,"url":1254},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":583,"url":810},{"type":586,"url":1257},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":586,"url":1259},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":583,"url":1261},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":575,"url":1263},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[816],{"id":129,"slug":1266,"dossier":46,"summary":1267,"aliases":1268,"sourceIds":1271,"published":1272,"modified":1273,"checkedAt":7,"severity":1274,"references":1277,"versionKeys":1292,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[1269,1270],"CVE-2024-49766","PYSEC-2026-2045",[129,1270],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[1275],{"type":610,"score":1276},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1278,1280,1282,1284,1285,1287,1289,1290],{"type":586,"url":1279},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":575,"url":1281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":580,"url":1283},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":583,"url":622},{"type":586,"url":1286},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":586,"url":1288},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":583,"url":660},{"type":575,"url":1291},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[626],{"id":130,"slug":1294,"dossier":46,"summary":1295,"aliases":1296,"sourceIds":1299,"published":1300,"modified":1301,"checkedAt":7,"severity":1302,"references":1305,"versionKeys":1324,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1297,1298],"CVE-2024-34062","PYSEC-2026-1976",[130,1298],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1303],{"type":571,"score":1304},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1306,1308,1310,1312,1314,1316,1318,1320,1322],{"type":586,"url":1307},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":575,"url":1309},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":586,"url":1311},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":583,"url":1313},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":586,"url":1315},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":586,"url":1317},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":586,"url":1319},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":583,"url":1321},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":575,"url":1323},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1325],"pypi:tqdm@4.66.2",{"id":131,"slug":1327,"dossier":91,"summary":1328,"aliases":1329,"sourceIds":1332,"published":1333,"modified":1334,"checkedAt":7,"severity":1335,"references":1340,"versionKeys":1350,"packageCount":32,"repositoryCount":198},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[1330,1331],"CVE-2026-25645","PYSEC-2026-2275",[131,1331],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[1336,1338],{"type":571,"score":1337},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":571,"score":1339},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1341,1343,1345,1347,1348],{"type":575,"url":1342},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":575,"url":1344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":580,"url":1346},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":583,"url":1100},{"type":575,"url":1349},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1110,1111,1351,1352],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":132,"slug":1354,"dossier":91,"summary":1355,"aliases":1356,"sourceIds":1359,"published":1360,"modified":1361,"checkedAt":7,"severity":1362,"references":1364,"versionKeys":1375,"packageCount":32,"repositoryCount":695},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[1357,1358],"CVE-2025-66418","PYSEC-2026-1998",[132,1358],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[1363],{"type":610,"score":675},[1365,1367,1369,1371,1372,1373],{"type":586,"url":1366},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":575,"url":1368},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":580,"url":1370},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":583,"url":684},{"type":583,"url":686},{"type":575,"url":1374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[690,691,692,693,694],{"id":133,"slug":1377,"dossier":46,"summary":1378,"aliases":1379,"sourceIds":1382,"published":1383,"modified":1384,"checkedAt":7,"severity":1385,"references":1388,"versionKeys":1403,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[1380,1381],"CVE-2024-56201","PYSEC-2026-1472",[133,1381],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[1386,1387],{"type":571,"score":795},{"type":610,"score":1212},[1389,1391,1393,1395,1397,1398,1400,1401],{"type":586,"url":1390},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":575,"url":1392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":586,"url":1394},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":580,"url":1396},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":583,"url":1221},{"type":586,"url":1399},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":583,"url":1227},{"type":575,"url":1402},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[1231],{"id":134,"slug":1405,"dossier":46,"summary":1406,"aliases":1407,"sourceIds":1410,"published":1411,"modified":1412,"checkedAt":7,"severity":1413,"references":1416,"versionKeys":1437,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[1408,1409],"CVE-2024-34064","PYSEC-2026-1474",[134,1409],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[1414],{"type":571,"score":1415},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1417,1419,1421,1423,1424,1426,1428,1430,1432,1434,1435],{"type":586,"url":1418},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":575,"url":1420},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":580,"url":1422},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":583,"url":1221},{"type":586,"url":1425},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":586,"url":1427},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":586,"url":1429},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":586,"url":1431},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":586,"url":1433},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":583,"url":1227},{"type":575,"url":1436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[1231],{"id":135,"slug":1439,"dossier":46,"summary":601,"aliases":1440,"sourceIds":1443,"published":1444,"modified":1445,"checkedAt":7,"severity":1446,"references":1448,"versionKeys":1461,"packageCount":32,"repositoryCount":231},"ghsa-hgf8-39gv-g3f2-0469b394",[1441,1442],"CVE-2025-66221","PYSEC-2026-2046",[135,1442],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[1447],{"type":610,"score":611},[1449,1451,1453,1455,1456,1458,1459],{"type":586,"url":1450},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":575,"url":1452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":586,"url":1454},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":583,"url":622},{"type":586,"url":1457},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":583,"url":660},{"type":575,"url":1460},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[626,627,628,629],{"id":136,"slug":1463,"dossier":46,"summary":1464,"aliases":1465,"sourceIds":1468,"published":1469,"modified":1470,"checkedAt":7,"severity":1471,"references":1476,"versionKeys":1502,"packageCount":32,"repositoryCount":32},"ghsa-hxwh-jpp2-84pm-85ca3470","Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default",[1466,1467],"CVE-2024-6221","PYSEC-2024-71",[136,1467],"2024-08-18T19:15:00Z","2026-07-09T16:56:25.795378335Z",[1472,1474],{"type":571,"score":1473},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":610,"score":1475},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1477,1479,1481,1483,1485,1487,1489,1491,1492,1494,1496,1498,1500],{"type":575,"url":1478},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6221",{"type":586,"url":1480},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fissues\u002F362",{"type":586,"url":1482},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F363",{"type":586,"url":1484},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F368",{"type":586,"url":1486},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F03aa3f8e2256437f7bad96422a747b98ab5e31bf",{"type":586,"url":1488},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F7ae310c56ac30e0b94fb42129aa377bf633256ec",{"type":586,"url":1490},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fc8514760cf03fcce16d77f6db7007aad429c4548",{"type":583,"url":741},{"type":586,"url":1493},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Freleases",{"type":586,"url":1495},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-260.yaml",{"type":586,"url":1497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-71.yaml",{"type":586,"url":1499},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa42935fc-6f57-4818-bca4-3d528235df4d",{"type":575,"url":1501},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxwh-jpp2-84pm",[753],{"id":137,"slug":1504,"dossier":46,"summary":1505,"aliases":1506,"sourceIds":1509,"published":1510,"modified":1511,"checkedAt":7,"severity":1512,"references":1515,"versionKeys":1523,"packageCount":32,"repositoryCount":250},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[1507,1508],"CVE-2026-44432","PYSEC-2026-142",[137,1508],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[1513,1514],{"type":571,"score":707},{"type":610,"score":675},[1516,1518,1520,1522],{"type":575,"url":1517},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":575,"url":1519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":586,"url":1521},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":583,"url":684},[1524],"pypi:urllib3@2.6.3",{"id":138,"slug":1526,"dossier":46,"summary":1527,"aliases":1528,"sourceIds":1531,"published":1532,"modified":1533,"checkedAt":7,"severity":1534,"references":1537,"versionKeys":1550,"packageCount":32,"repositoryCount":1555},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[1529,1530],"CVE-2026-28684","PYSEC-2026-2270",[138,1530],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[1535],{"type":571,"score":1536},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[1538,1540,1542,1544,1546,1548],{"type":580,"url":1539},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":575,"url":1541},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":580,"url":1543},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":586,"url":1545},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":583,"url":1547},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":575,"url":1549},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[1551,1552,1553,1554],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":139,"slug":1557,"dossier":46,"summary":1558,"aliases":1559,"sourceIds":1562,"published":1563,"modified":1564,"checkedAt":7,"severity":1565,"references":1567,"versionKeys":1579,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[1560,1561],"CVE-2025-50181","PYSEC-2026-1999",[139,1561],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[1566],{"type":571,"score":766},[1568,1570,1572,1574,1575,1576,1577],{"type":586,"url":1569},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":575,"url":1571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":580,"url":1573},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":583,"url":684},{"type":586,"url":776},{"type":583,"url":686},{"type":575,"url":1578},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[690,691,692,693],{"id":140,"slug":1581,"dossier":91,"summary":1582,"aliases":1583,"sourceIds":1587,"published":1588,"modified":1589,"checkedAt":7,"severity":1590,"references":1594,"versionKeys":1606,"packageCount":32,"repositoryCount":695},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[1584,1585,1586],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[140,1586],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[1591,1592],{"type":610,"score":1154},{"type":571,"score":1593},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1595,1596,1598,1600,1602,1604,1605],{"type":586,"url":1158},{"type":580,"url":1597},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":575,"url":1599},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":580,"url":1601},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":580,"url":1603},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":583,"url":839},{"type":575,"url":841},[1197,1198,1199,843,844,845,846,847],{"id":141,"slug":1608,"dossier":46,"summary":1609,"aliases":1610,"sourceIds":1613,"published":1614,"modified":1615,"checkedAt":7,"severity":1616,"references":1620,"versionKeys":1633,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[1611,1612],"CVE-2024-56326","PYSEC-2026-1475",[141,1612],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[1617,1619],{"type":571,"score":1618},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":610,"score":1212},[1621,1623,1625,1627,1628,1629,1630,1631],{"type":586,"url":1622},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":575,"url":1624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":580,"url":1626},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":583,"url":1221},{"type":586,"url":1399},{"type":586,"url":1223},{"type":583,"url":1227},{"type":575,"url":1632},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[1231],{"id":142,"slug":1635,"dossier":46,"summary":1636,"aliases":1637,"sourceIds":1641,"published":1642,"modified":1643,"checkedAt":7,"severity":1644,"references":1647,"versionKeys":1667,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[1638,1639,1640],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[142,1640],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[1645,1646],{"type":571,"score":707},{"type":610,"score":861},[1648,1650,1652,1654,1656,1658,1660,1661,1662,1664,1665],{"type":586,"url":1649},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":575,"url":1651},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":586,"url":1653},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":586,"url":1655},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":586,"url":1657},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":586,"url":1659},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":583,"url":622},{"type":586,"url":1286},{"type":586,"url":1663},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":583,"url":660},{"type":575,"url":1666},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[626],{"id":143,"slug":1669,"dossier":91,"summary":1670,"aliases":1671,"sourceIds":1674,"published":1675,"modified":1676,"checkedAt":7,"severity":1677,"references":1682,"versionKeys":1688,"packageCount":32,"repositoryCount":198},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[1672,1673],"CVE-2026-44431","PYSEC-2026-141",[143,1673],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[1678,1680],{"type":571,"score":1679},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":610,"score":1681},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1683,1685,1687],{"type":575,"url":1684},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":575,"url":1686},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":583,"url":684},[690,691,692,693,694,1524],{"id":144,"slug":1690,"dossier":91,"summary":1691,"aliases":1692,"sourceIds":1696,"published":1697,"modified":1698,"checkedAt":7,"severity":1699,"references":1702,"versionKeys":1717,"packageCount":32,"repositoryCount":695},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[1693,1694,1695],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[144,1695],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[1700,1701],{"type":571,"score":830},{"type":610,"score":832},[1703,1705,1707,1709,1711,1712,1713,1715],{"type":586,"url":1704},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":575,"url":1706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":586,"url":1708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":586,"url":1710},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":583,"url":839},{"type":586,"url":841},{"type":583,"url":1714},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":575,"url":1716},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1197,1198,1199,843,844,845,846,847],{"id":145,"slug":1719,"dossier":46,"summary":1720,"aliases":1721,"sourceIds":1724,"published":1725,"modified":1726,"checkedAt":7,"severity":1727,"references":1730,"versionKeys":1743,"packageCount":32,"repositoryCount":250},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[1722,1723],"CVE-2025-43859","PYSEC-2026-348",[145,1723],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[1728],{"type":571,"score":1729},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1731,1733,1735,1737,1739,1741],{"type":586,"url":1732},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":575,"url":1734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":586,"url":1736},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":583,"url":1738},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":583,"url":1740},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":575,"url":1742},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[1744],"pypi:h11@0.14.0",{"id":146,"slug":1746,"dossier":91,"summary":1747,"aliases":1748,"sourceIds":1752,"published":1753,"modified":1754,"checkedAt":7,"severity":1755,"references":1759,"versionKeys":1797,"packageCount":32,"repositoryCount":695},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[1749,1750,1751],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[146,1751],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[1756,1757],{"type":571,"score":707},{"type":610,"score":1758},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1760,1762,1764,1766,1768,1769,1771,1773,1775,1777,1779,1781,1782,1784,1786,1788,1789,1791,1793,1795],{"type":586,"url":1761},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":575,"url":1763},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":586,"url":1765},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":586,"url":1767},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":583,"url":839},{"type":586,"url":1770},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":586,"url":1772},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":586,"url":1774},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":575,"url":1776},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":575,"url":1778},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":575,"url":1780},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":575,"url":1181},{"type":575,"url":1783},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":575,"url":1785},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":575,"url":1787},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":575,"url":1183},{"type":575,"url":1790},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":575,"url":1792},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":575,"url":1794},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":575,"url":1796},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1197,1198,1199,843,844,845,846,847],{"id":147,"slug":1799,"dossier":91,"summary":1800,"aliases":1801,"sourceIds":1805,"published":1806,"modified":1807,"checkedAt":7,"severity":1808,"references":1811,"versionKeys":1820,"packageCount":32,"repositoryCount":695},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[1802,1803,1804],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[147,1804],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[1809,1810],{"type":571,"score":830},{"type":610,"score":832},[1812,1814,1816,1818,1819],{"type":575,"url":1813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":575,"url":1815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":586,"url":1817},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":583,"url":839},{"type":575,"url":841},[1197,1198,1199,843,844,845,846,847],{"id":148,"slug":1822,"dossier":46,"summary":1823,"aliases":1824,"sourceIds":1828,"published":1829,"modified":1830,"checkedAt":7,"severity":1831,"references":1834,"versionKeys":1848,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[1825,1826,1827],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[148,1827],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[1832],{"type":571,"score":1833},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[1835,1837,1839,1841,1843,1845,1846],{"type":575,"url":1836},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":575,"url":1838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":586,"url":1840},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":580,"url":1842},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":586,"url":1844},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":583,"url":839},{"type":586,"url":1847},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[843],{"id":149,"slug":1850,"dossier":91,"summary":84,"aliases":1851,"sourceIds":1854,"published":1855,"modified":1856,"checkedAt":7,"severity":1857,"references":1860,"versionKeys":1875,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[1852,1853],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[149],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[1858],{"type":571,"score":1859},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[1861,1863,1865,1867,1869,1871,1873],{"type":586,"url":1862},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":586,"url":1864},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":575,"url":1866},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":575,"url":1868},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":803,"url":1870},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":580,"url":1872},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":798,"url":1874},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[1876,1877,1878,1879,1880,1881],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":150,"slug":1883,"dossier":91,"summary":84,"aliases":1884,"sourceIds":1888,"published":1889,"modified":1890,"checkedAt":7,"severity":1891,"references":1893,"versionKeys":1900,"packageCount":32,"repositoryCount":695},"pysec-2026-2253-e1ccf3df",[1885,1886,1887],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[150],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[1892],{"type":571,"score":707},[1894,1896,1898],{"type":575,"url":1895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":580,"url":1897},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":798,"url":1899},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[1197,1198,1199,843,844,845,846,847],{"id":151,"slug":1902,"dossier":91,"summary":84,"aliases":1903,"sourceIds":1907,"published":1908,"modified":1909,"checkedAt":7,"severity":1910,"references":1912,"versionKeys":1917,"packageCount":32,"repositoryCount":695},"pysec-2026-2254-a1ed1fd2",[1904,1905,1906],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[151],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[1911],{"type":571,"score":707},[1913,1914,1915],{"type":575,"url":1895},{"type":580,"url":1897},{"type":798,"url":1916},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[1197,1198,1199,843,844,845,846,847],{"id":152,"slug":1919,"dossier":91,"summary":84,"aliases":1920,"sourceIds":1924,"published":1925,"modified":1926,"checkedAt":7,"severity":1927,"references":1929,"versionKeys":1934,"packageCount":32,"repositoryCount":695},"pysec-2026-2255-d0951b98",[1921,1922,1923],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[152],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[1928],{"type":571,"score":707},[1930,1931,1932],{"type":575,"url":1895},{"type":580,"url":1897},{"type":798,"url":1933},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[1197,1198,1199,843,844,845,846,847],{"id":153,"slug":1936,"dossier":91,"summary":84,"aliases":1937,"sourceIds":1941,"published":1942,"modified":1943,"checkedAt":7,"severity":1944,"references":1946,"versionKeys":1952,"packageCount":32,"repositoryCount":695},"pysec-2026-2256-0f333f0b",[1938,1939,1940],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[153],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[1945],{"type":571,"score":707},[1947,1948,1950],{"type":575,"url":1895},{"type":580,"url":1949},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":798,"url":1951},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[1197,1198,1199,843,844,845,846,847],{"id":154,"slug":1954,"dossier":91,"summary":84,"aliases":1955,"sourceIds":1959,"published":1960,"modified":1961,"checkedAt":7,"severity":1962,"references":1965,"versionKeys":1975,"packageCount":32,"repositoryCount":695},"pysec-2026-2257-bcbe5d79",[1956,1957,1958],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[154],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[1963],{"type":571,"score":1964},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1966,1967,1969,1971,1973],{"type":575,"url":1895},{"type":580,"url":1968},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":580,"url":1970},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":580,"url":1972},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":798,"url":1974},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[1197,1198,1199,843,844,845,846,847],{"id":155,"slug":1977,"dossier":91,"summary":84,"aliases":1978,"sourceIds":1982,"published":1983,"modified":1984,"checkedAt":7,"severity":1985,"references":1988,"versionKeys":1995,"packageCount":32,"repositoryCount":695},"pysec-2026-3447-df031425",[1979,1980,1981],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[155],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[1986],{"type":571,"score":1987},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[1989,1991,1993],{"type":575,"url":1990},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":580,"url":1992},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":798,"url":1994},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[816,817,1996,1997,1998,1999,2000,2001,2002],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":156,"slug":2004,"dossier":91,"summary":84,"aliases":2005,"sourceIds":2009,"published":2010,"modified":2011,"checkedAt":7,"severity":2012,"references":2014,"versionKeys":2023,"packageCount":32,"repositoryCount":695},"pysec-2026-3451-3e5eac34",[2006,2007,2008],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[156],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[2013],{"type":571,"score":707},[2015,2017,2019,2021],{"type":575,"url":2016},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":580,"url":2018},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":580,"url":2020},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":798,"url":2022},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[1197,1198,1199,843,844,845,846,847],{"id":157,"slug":2025,"dossier":46,"summary":84,"aliases":2026,"sourceIds":2030,"published":2031,"modified":2032,"checkedAt":7,"severity":2033,"references":2035,"versionKeys":2043,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[2027,2028,2029],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[157],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[2034],{"type":571,"score":707},[2036,2037,2039,2041],{"type":575,"url":2016},{"type":580,"url":2038},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":580,"url":2040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":798,"url":2042},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[845,846,847],{"id":158,"slug":2045,"dossier":91,"summary":84,"aliases":2046,"sourceIds":2050,"published":2051,"modified":2052,"checkedAt":7,"severity":2053,"references":2055,"versionKeys":2063,"packageCount":32,"repositoryCount":695},"pysec-2026-3453-83974725",[2047,2048,2049],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[158],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[2054],{"type":571,"score":707},[2056,2057,2059,2061],{"type":575,"url":2016},{"type":580,"url":2058},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":580,"url":2060},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":798,"url":2062},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[1197,1198,1199,843,844,845,846,847],1784558561982]