[{"data":1,"prerenderedAt":7867},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-5012":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":321,"related":324},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":38,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":70,"unknownLicensePackageCount":38,"advisoryIds":104,"advisoryCount":319,"providers":320},"opencode:5012","opencode-5012",5012,"LLM Testframework","uba-ki-lab\u002Fllm-testframework","Evaluation of large language models; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, Energiemessung","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework","e8d6e99a1fa63b264e727acb553ed9b1499789b1","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fcommit\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1","2026-05-13T07:48:58.631Z","2026-05-13T07:48:57.000Z",{"complete":91,"entryCount":68,"truncated":46},true,[93],{"path":55,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":86,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","12d0fc9d738085b94454bfb018cbb5fb882c9a1a7e6fd4d1922ea65970708327",462358,"parsed",207,[102],"pypi",13,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2h4p-vjrc-8xpq","GHSA-2pc9-4j83-qjmr","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-38vq-g6vr-w8wf","GHSA-3f6c-7fw2-ppm4","GHSA-3j69-69wj-xqx2","GHSA-3mwp-wvh9-7528","GHSA-3wq7-rqq7-wx6j","GHSA-3ww4-5jv9-j5gm","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-4w7r-h757-3r74","GHSA-4xpc-pv4p-pm3w","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-53mr-6c8q-9789","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cmr-4px5-23pc","GHSA-5jv2-g5wq-cmr4","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69j4-grxj-j64p","GHSA-69w3-r845-3855","GHSA-69x8-hrgq-fjj8","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6wgj-66m2-xxp2","GHSA-7972-pg2x-xr59","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7h4p-rffg-7823","GHSA-7rgv-gqhr-fxg3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-8qvm-5x2c-j2w7","GHSA-9356-575x-2w9m","GHSA-94f4-hr76-p5j6","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-98f3-hwg4-4rf7","GHSA-9hcf-v7m4-6m2j","GHSA-9hjg-9r4m-mvj7","GHSA-9pcc-gvx5-r5wm","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c38f-wx89-p2xg","GHSA-c427-h43c-vf67","GHSA-c65p-x677-fgj6","GHSA-c678-jfcj-6jmf","GHSA-c8rr-9gxc-jprv","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh2c-86xm-pm2x","GHSA-fh55-r93g-j68g","GHSA-fjcf-3j3r-78rp","GHSA-fjrm-76x2-c4q4","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-grg2-63fw-f2qr","GHSA-gx77-xgc2-4888","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgg8-fqqc-vfmw","GHSA-hpj7-wq8m-9hgp","GHSA-hpv8-x276-m59f","GHSA-hxxf-235m-72v3","GHSA-j828-28rj-hfhp","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjhc-v7c2-5hh6","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-jr27-m4p2-rc6r","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mcmc-2m55-j8jj","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mj87-hwqh-73pj","GHSA-mqqc-3gqh-h2x8","GHSA-mrw7-hf4f-83pf","GHSA-mw35-8rx3-xf9r","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p998-jp59-783m","GHSA-phhr-52qp-3mj4","GHSA-pmqf-x6x8-p7qw","GHSA-pp6c-gr5w-3c5g","GHSA-pq5c-rjhq-qp7p","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q279-jhrf-cc6v","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q5fh-2hc8-f6rq","GHSA-q8gq-377p-jq3r","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qh4c-xf7m-gxfc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qrc4-49gv-mv9m","GHSA-qxrp-vhvm-j765","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vqfr-h8mv-ghfj","GHSA-vrq3-r879-7m65","GHSA-vvw2-h478-xwr3","GHSA-w2fm-2cpv-w7v5","GHSA-w6q7-j642-7c25","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wgvc-ghv9-3pmm","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wpfp-gwwc-vwq6","GHSA-wqp7-x3pw-xc5r","GHSA-wr9h-g72x-mwhm","GHSA-wrfc-pvp9-mr9g","GHSA-x368-4g9h-fvv4","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xf7x-x43h-rpqh","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-227","PYSEC-2026-2273","PYSEC-2026-2286","PYSEC-2026-2302","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",214,[],{"files":322,"occurrenceCount":100},[323],{"path":55,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":86,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":325,"vulnerabilities":2197},[326,338,350,361,372,381,391,400,410,419,429,438,447,456,466,478,487,496,505,516,525,534,545,555,564,575,584,593,603,612,622,631,640,649,658,667,676,685,694,703,711,720,730,739,749,758,767,776,785,794,803,812,821,829,838,847,856,866,875,884,893,902,911,920,929,938,947,956,965,974,983,992,1002,1010,1019,1028,1037,1046,1055,1064,1073,1082,1091,1100,1109,1120,1129,1137,1146,1155,1164,1173,1181,1190,1199,1207,1216,1225,1234,1243,1252,1261,1270,1279,1287,1296,1305,1314,1322,1331,1340,1349,1357,1365,1374,1383,1393,1402,1411,1419,1427,1436,1445,1454,1463,1472,1481,1490,1499,1507,1515,1524,1533,1542,1551,1560,1568,1576,1584,1592,1600,1608,1617,1625,1634,1643,1652,1662,1671,1680,1689,1698,1707,1716,1725,1734,1743,1752,1761,1770,1780,1789,1798,1807,1816,1825,1834,1843,1852,1861,1870,1879,1888,1898,1907,1916,1925,1934,1943,1951,1959,1968,1976,1986,1995,2004,2013,2021,2030,2038,2047,2056,2065,2074,2083,2091,2099,2108,2116,2125,2134,2143,2152,2161,2170,2179,2188],{"id":327,"slug":328,"identity":329,"label":330,"aiRelevant":91,"provider":331,"advisoryCount":332,"licenseExpressions":333,"versions":335,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":337},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","vLLM",null,39,[334],"Apache-2.0",[336],"0.8.5.post1",[55],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":91,"provider":343,"advisoryCount":70,"licenseExpressions":346,"versions":347,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":349},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":344,"label":345},"hugging-face","Hugging Face",[334],[348],"4.51.3",[55],{"id":351,"slug":352,"identity":353,"label":354,"aiRelevant":91,"provider":331,"advisoryCount":355,"licenseExpressions":356,"versions":358,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":360},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[357],"BSD-3-Clause",[359],"2.6.0",[55],{"id":362,"slug":363,"identity":364,"label":365,"aiRelevant":91,"provider":331,"advisoryCount":366,"licenseExpressions":367,"versions":369,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":371},"package:pypi:litellm","litellm-e00b5c8b","pypi:litellm","LiteLLM",8,[368],"MIT",[370],"1.68.0",[55],{"id":373,"slug":374,"identity":375,"label":376,"aiRelevant":91,"provider":331,"advisoryCount":32,"licenseExpressions":377,"versions":378,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":380},"package:pypi:dspy","dspy-70e56922","pypi:dspy","DSPy",[368],[379],"2.6.23",[55],{"id":382,"slug":383,"identity":384,"label":385,"aiRelevant":91,"provider":386,"advisoryCount":38,"licenseExpressions":387,"versions":388,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":390},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":344,"label":345},[334],[389],"3.5.1",[55],{"id":72,"slug":73,"identity":392,"label":74,"aiRelevant":91,"provider":393,"advisoryCount":38,"licenseExpressions":396,"versions":397,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":399},"pypi:openai",{"id":394,"label":395},"openai","OpenAI",[334],[398],"1.75.0",[55],{"id":401,"slug":402,"identity":403,"label":404,"aiRelevant":91,"provider":405,"advisoryCount":38,"licenseExpressions":406,"versions":407,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":409},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":344,"label":345},[334],[408],"4.1.0",[55],{"id":411,"slug":412,"identity":413,"label":414,"aiRelevant":91,"provider":331,"advisoryCount":38,"licenseExpressions":415,"versions":416,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":418},"package:pypi:codecarbon","codecarbon-ee26b31e","pypi:codecarbon","CodeCarbon",[368],[417],"3.0.1",[55],{"id":420,"slug":421,"identity":422,"label":423,"aiRelevant":91,"provider":331,"advisoryCount":38,"licenseExpressions":424,"versions":426,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":428},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[425],"non-standard",[427],"0.21.1",[55],{"id":430,"slug":431,"identity":432,"label":433,"aiRelevant":91,"provider":331,"advisoryCount":38,"licenseExpressions":434,"versions":435,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":437},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[357,425],[436],"1.6.1",[55],{"id":439,"slug":440,"identity":441,"label":442,"aiRelevant":91,"provider":331,"advisoryCount":38,"licenseExpressions":443,"versions":444,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":446},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[425],[445],"0.9.0",[55],{"id":448,"slug":449,"identity":450,"label":451,"aiRelevant":91,"provider":331,"advisoryCount":38,"licenseExpressions":452,"versions":453,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":455},"package:pypi:xgboost","xgboost-5a870b45","pypi:xgboost","XGBoost",[334],[454],"3.0.0",[55],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":46,"provider":331,"advisoryCount":30,"licenseExpressions":461,"versions":463,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":465},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[334,462],"Apache-2.0 AND MIT",[464],"3.11.18",[55],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":46,"provider":331,"advisoryCount":471,"licenseExpressions":472,"versions":475,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":477},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[473,474],"HPND","MIT-CMU",[476],"11.2.1",[55],{"id":479,"slug":480,"identity":481,"label":482,"aiRelevant":46,"provider":331,"advisoryCount":366,"licenseExpressions":483,"versions":484,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":486},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",[334],[485],"0.0.20",[55],{"id":488,"slug":489,"identity":490,"label":491,"aiRelevant":46,"provider":331,"advisoryCount":366,"licenseExpressions":492,"versions":493,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":495},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[357],[494],"0.46.2",[55],{"id":497,"slug":498,"identity":499,"label":500,"aiRelevant":46,"provider":331,"advisoryCount":65,"licenseExpressions":501,"versions":502,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":504},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[368],[503],"2.4.0",[55],{"id":506,"slug":507,"identity":508,"label":509,"aiRelevant":46,"provider":331,"advisoryCount":510,"licenseExpressions":511,"versions":513,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":515},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",6,[512],"Apache-2.0 OR BSD-3-Clause",[514],"44.0.3",[55],{"id":517,"slug":518,"identity":519,"label":520,"aiRelevant":46,"provider":331,"advisoryCount":510,"licenseExpressions":521,"versions":522,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":524},"package:pypi:ray","ray-f8b4a0d3","pypi:ray","ray",[334],[523],"2.45.0",[55],{"id":526,"slug":527,"identity":528,"label":529,"aiRelevant":46,"provider":331,"advisoryCount":34,"licenseExpressions":530,"versions":531,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":533},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[357,425],[532],"3.1.6",[55],{"id":535,"slug":536,"identity":537,"label":538,"aiRelevant":46,"provider":331,"advisoryCount":34,"licenseExpressions":539,"versions":542,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":544},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[357,540,541],"BSD-3-Clause AND TCL","TCL",[543],"5.10.0",[55],{"id":546,"slug":547,"identity":548,"label":549,"aiRelevant":46,"provider":331,"advisoryCount":550,"licenseExpressions":551,"versions":552,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":554},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[334],[553],"2.32.3",[55],{"id":556,"slug":557,"identity":558,"label":559,"aiRelevant":46,"provider":331,"advisoryCount":550,"licenseExpressions":560,"versions":561,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":563},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[368],[562],"80.3.1",[55],{"id":565,"slug":566,"identity":567,"label":568,"aiRelevant":46,"provider":331,"advisoryCount":569,"licenseExpressions":570,"versions":572,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":574},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[368,571],"Unlicense",[573],"3.18.0",[55],{"id":576,"slug":577,"identity":578,"label":579,"aiRelevant":46,"provider":331,"advisoryCount":569,"licenseExpressions":580,"versions":581,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":583},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[368],[582],"1.3.10",[55],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":46,"provider":331,"advisoryCount":569,"licenseExpressions":589,"versions":590,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":592},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[357],[591],"4.25.7",[55],{"id":594,"slug":595,"identity":596,"label":597,"aiRelevant":46,"provider":331,"advisoryCount":569,"licenseExpressions":598,"versions":600,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":602},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",[599],"BSD-2-Clause",[601],"0.6.1",[55],{"id":604,"slug":605,"identity":606,"label":607,"aiRelevant":46,"provider":331,"advisoryCount":569,"licenseExpressions":608,"versions":609,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":611},"package:pypi:xgrammar","xgrammar-5ebaef86","pypi:xgrammar","xgrammar",[334],[610],"0.1.18",[55],{"id":613,"slug":614,"identity":615,"label":616,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":617,"versions":619,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":621},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[618],"MPL-2.0",[620],"2025.4.26",[55],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":627,"versions":628,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":630},"package:pypi:click","click-ef97f731","pypi:click","click",[357,425],[629],"8.1.8",[55],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":636,"versions":637,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":639},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[334],[638],"5.6.3",[55],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":645,"versions":646,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":648},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[368],[647],"0.16.0",[55],{"id":650,"slug":651,"identity":652,"label":653,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":654,"versions":655,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":657},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[357,425],[656],"3.10",[55],{"id":659,"slug":660,"identity":661,"label":662,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":663,"versions":664,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":666},"package:pypi:json-repair","json-repair-3bbcd372","pypi:json-repair","json-repair",[425],[665],"0.44.1",[55],{"id":668,"slug":669,"identity":670,"label":671,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":672,"versions":673,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":675},"package:pypi:jwcrypto","jwcrypto-5c3130dd","pypi:jwcrypto","jwcrypto",[425],[674],"1.5.6",[55],{"id":677,"slug":678,"identity":679,"label":680,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":681,"versions":682,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":684},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[334],[683],"1.1.0",[55],{"id":686,"slug":687,"identity":688,"label":689,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":690,"versions":691,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":693},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[334,425],[692],"20.0.0",[55],{"id":695,"slug":696,"identity":697,"label":698,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":699,"versions":700,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":702},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[599],[701],"2.19.1",[55],{"id":704,"slug":705,"identity":706,"label":707,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":708,"versions":709,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":710},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[357],[683],[55],{"id":712,"slug":713,"identity":714,"label":715,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":716,"versions":717,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":719},"package:pypi:sentencepiece","sentencepiece-dda4c7df","pypi:sentencepiece","sentencepiece",[425],[718],"0.2.0",[55],{"id":721,"slug":722,"identity":723,"label":724,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":725,"versions":727,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":729},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[726],"MIT AND MPL-2.0",[728],"4.67.1",[55],{"id":731,"slug":732,"identity":733,"label":734,"aiRelevant":46,"provider":331,"advisoryCount":32,"licenseExpressions":735,"versions":736,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":738},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[368],[737],"20.31.1",[55],{"id":740,"slug":741,"identity":742,"label":743,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":744,"versions":746,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":748},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[745],"PSF-2.0",[747],"2.6.1",[55],{"id":750,"slug":751,"identity":752,"label":753,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":754,"versions":755,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":757},"package:pypi:aiohttp-cors","aiohttp-cors-2026df90","pypi:aiohttp-cors","aiohttp-cors",[334],[756],"0.8.1",[55],{"id":759,"slug":760,"identity":761,"label":762,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":763,"versions":764,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":766},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[334],[765],"1.3.2",[55],{"id":768,"slug":769,"identity":770,"label":771,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":772,"versions":773,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":775},"package:pypi:airportsdata","airportsdata-afa6be1d","pypi:airportsdata","airportsdata",[425],[774],"20250224",[55],{"id":777,"slug":778,"identity":779,"label":780,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":781,"versions":782,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":784},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[368],[783],"1.15.2",[55],{"id":786,"slug":787,"identity":788,"label":789,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":790,"versions":791,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":793},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[368],[792],"0.7.0",[55],{"id":795,"slug":796,"identity":797,"label":798,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":799,"versions":800,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":802},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[425],[801],"4.9.3",[55],{"id":804,"slug":805,"identity":806,"label":807,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":808,"versions":809,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":811},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[368],[810],"4.9.0",[55],{"id":813,"slug":814,"identity":815,"label":816,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":817,"versions":818,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":820},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[425],[819],"1.3.0",[55],{"id":822,"slug":823,"identity":824,"label":825,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":826,"versions":827,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":828},"package:pypi:astor","astor-5ea47d9f","pypi:astor","astor",[357],[756],[55],{"id":830,"slug":831,"identity":832,"label":833,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":834,"versions":835,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":837},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[368],[836],"0.0.8",[55],{"id":839,"slug":840,"identity":841,"label":842,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":843,"versions":844,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":846},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[368],[845],"25.3.0",[55],{"id":848,"slug":849,"identity":850,"label":851,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":852,"versions":853,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":855},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[368],[854],"2.2.1",[55],{"id":857,"slug":858,"identity":859,"label":860,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":861,"versions":863,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":865},"package:pypi:blake3","blake3-71cab3aa","pypi:blake3","blake3",[862],"Apache-2.0 OR CC0-1.0",[864],"1.0.4",[55],{"id":867,"slug":868,"identity":869,"label":870,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":871,"versions":872,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":874},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[368],[873],"5.5.2",[55],{"id":876,"slug":877,"identity":878,"label":879,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":880,"versions":881,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":883},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[368],[882],"1.17.1",[55],{"id":885,"slug":886,"identity":887,"label":888,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":889,"versions":890,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":892},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[368],[891],"3.4.2",[55],{"id":894,"slug":895,"identity":896,"label":897,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":898,"versions":899,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":901},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[357],[900],"3.1.1",[55],{"id":903,"slug":904,"identity":905,"label":906,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":907,"versions":908,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":910},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[425],[909],"0.4.6",[55],{"id":912,"slug":913,"identity":914,"label":915,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":916,"versions":917,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":919},"package:pypi:colorful","colorful-3d452f6a","pypi:colorful","colorful",[368],[918],"0.5.6",[55],{"id":921,"slug":922,"identity":923,"label":924,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":925,"versions":926,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":928},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[368],[927],"6.9.0",[55],{"id":930,"slug":931,"identity":932,"label":933,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":934,"versions":935,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":937},"package:pypi:compressed-tensors","compressed-tensors-e8905144","pypi:compressed-tensors","compressed-tensors",[334],[936],"0.9.3",[55],{"id":939,"slug":940,"identity":941,"label":942,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":943,"versions":944,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":946},"package:pypi:cupy-cuda12x","cupy-cuda12x-8ab55f02","pypi:cupy-cuda12x","cupy-cuda12x",[368],[945],"13.4.1",[55],{"id":948,"slug":949,"identity":950,"label":951,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":952,"versions":953,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":955},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[368],[954],"1.2.18",[55],{"id":957,"slug":958,"identity":959,"label":960,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":961,"versions":962,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":964},"package:pypi:depyf","depyf-44ccc3bb","pypi:depyf","depyf",[368],[963],"0.18.0",[55],{"id":966,"slug":967,"identity":968,"label":969,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":970,"versions":971,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":973},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[357],[972],"0.3.8",[55],{"id":975,"slug":976,"identity":977,"label":978,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":979,"versions":980,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":982},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[745],[981],"0.3.9",[55],{"id":984,"slug":985,"identity":986,"label":987,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":988,"versions":989,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":991},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[334],[990],"1.9.0",[55],{"id":993,"slug":994,"identity":995,"label":996,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":997,"versions":999,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1001},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[998],"ISC",[1000],"2.7.0",[55],{"id":1003,"slug":1004,"identity":1005,"label":1006,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1007,"versions":1008,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1009},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[368],[756],[55],{"id":1011,"slug":1012,"identity":1013,"label":1014,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1015,"versions":1016,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1018},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[571],[1017],"2.2.0",[55],{"id":1020,"slug":1021,"identity":1022,"label":1023,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1024,"versions":1025,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1027},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[368],[1026],"0.115.12",[55],{"id":1029,"slug":1030,"identity":1031,"label":1032,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1033,"versions":1034,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1036},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[368],[1035],"0.0.7",[55],{"id":1038,"slug":1039,"identity":1040,"label":1041,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1042,"versions":1043,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1045},"package:pypi:fastrlock","fastrlock-0757e61e","pypi:fastrlock","fastrlock",[425],[1044],"0.8.3",[55],{"id":1047,"slug":1048,"identity":1049,"label":1050,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1051,"versions":1052,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1054},"package:pypi:fief-client","fief-client-da5c3c7d","pypi:fief-client","fief-client",[368],[1053],"0.20.0",[55],{"id":1056,"slug":1057,"identity":1058,"label":1059,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1060,"versions":1061,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1063},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[334],[1062],"1.6.0",[55],{"id":1065,"slug":1066,"identity":1067,"label":1068,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1069,"versions":1070,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1072},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[357,425],[1071],"2025.3.0",[55],{"id":1074,"slug":1075,"identity":1076,"label":1077,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1078,"versions":1079,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1081},"package:pypi:gguf","gguf-828fa24b","pypi:gguf","gguf",[368],[1080],"0.16.3",[55],{"id":1083,"slug":1084,"identity":1085,"label":1086,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1087,"versions":1088,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1090},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[334],[1089],"2.24.2",[55],{"id":1092,"slug":1093,"identity":1094,"label":1095,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1096,"versions":1097,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1099},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[334],[1098],"2.40.0",[55],{"id":1101,"slug":1102,"identity":1103,"label":1104,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1105,"versions":1106,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1108},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[334],[1107],"1.70.0",[55],{"id":1110,"slug":1111,"identity":1112,"label":1113,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1114,"versions":1117,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1119},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[368,1115,1116],"MIT AND PSF-2.0","MIT AND Python-2.0",[1118],"3.2.1",[55],{"id":1121,"slug":1122,"identity":1123,"label":1124,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1125,"versions":1126,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1128},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[334],[1127],"1.71.0",[55],{"id":1130,"slug":1131,"identity":1132,"label":1133,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1134,"versions":1135,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1136},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[334],[683],[55],{"id":1138,"slug":1139,"identity":1140,"label":1141,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1142,"versions":1143,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1145},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[357],[1144],"1.0.9",[55],{"id":1147,"slug":1148,"identity":1149,"label":1150,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1151,"versions":1152,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1154},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[368],[1153],"0.6.4",[55],{"id":1156,"slug":1157,"identity":1158,"label":1159,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1160,"versions":1161,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1163},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[357],[1162],"0.27.2",[55],{"id":1165,"slug":1166,"identity":1167,"label":1168,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1169,"versions":1170,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1172},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[334,425],[1171],"0.30.2",[55],{"id":1174,"slug":1175,"identity":1176,"label":1177,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1178,"versions":1179,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1180},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[368],[765],[55],{"id":1182,"slug":1183,"identity":1184,"label":1185,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1186,"versions":1187,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1189},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[334,425],[1188],"8.0.0",[55],{"id":1191,"slug":1192,"identity":1193,"label":1194,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1195,"versions":1196,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1198},"package:pypi:interegular","interegular-393a5327","pypi:interegular","interegular",[368],[1197],"0.3.3",[55],{"id":1200,"slug":1201,"identity":1202,"label":1203,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1204,"versions":1205,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1206},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[368],[445],[55],{"id":1208,"slug":1209,"identity":1210,"label":1211,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1212,"versions":1213,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1215},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[357],[1214],"1.5.0",[55],{"id":1217,"slug":1218,"identity":1219,"label":1220,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1221,"versions":1222,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1224},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[368],[1223],"4.23.0",[55],{"id":1226,"slug":1227,"identity":1228,"label":1229,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1230,"versions":1231,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1233},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[368],[1232],"2025.4.1",[55],{"id":1235,"slug":1236,"identity":1237,"label":1238,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1239,"versions":1240,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1242},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[368],[1241],"1.2.2",[55],{"id":1244,"slug":1245,"identity":1246,"label":1247,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1248,"versions":1249,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1251},"package:pypi:llguidance","llguidance-a18efde0","pypi:llguidance","llguidance",[368],[1250],"0.7.19",[55],{"id":1253,"slug":1254,"identity":1255,"label":1256,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1257,"versions":1258,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1260},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[425],[1259],"0.44.0",[55],{"id":1262,"slug":1263,"identity":1264,"label":1265,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1266,"versions":1267,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1269},"package:pypi:lm-format-enforcer","lm-format-enforcer-9e319c1b","pypi:lm-format-enforcer","lm-format-enforcer",[368],[1268],"0.10.11",[55],{"id":1271,"slug":1272,"identity":1273,"label":1274,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1275,"versions":1276,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1278},"package:pypi:magicattr","magicattr-40bff089","pypi:magicattr","magicattr",[368],[1277],"0.1.6",[55],{"id":1280,"slug":1281,"identity":1282,"label":1283,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1284,"versions":1285,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1286},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[368],[454],[55],{"id":1288,"slug":1289,"identity":1290,"label":1291,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1292,"versions":1293,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1295},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[357,425],[1294],"3.0.2",[55],{"id":1297,"slug":1298,"identity":1299,"label":1300,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1301,"versions":1302,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1304},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[368],[1303],"0.1.2",[55],{"id":1306,"slug":1307,"identity":1308,"label":1309,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1310,"versions":1311,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1313},"package:pypi:mistral-common","mistral-common-038e1158","pypi:mistral-common","mistral-common",[334],[1312],"1.5.4",[55],{"id":1315,"slug":1316,"identity":1317,"label":1318,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1319,"versions":1320,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1321},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[425],[819],[55],{"id":1323,"slug":1324,"identity":1325,"label":1326,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1327,"versions":1328,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1330},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[357,425],[1329],"0.19.0",[55],{"id":1332,"slug":1333,"identity":1334,"label":1335,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1336,"versions":1337,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1339},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[334],[1338],"6.4.3",[55],{"id":1341,"slug":1342,"identity":1343,"label":1344,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1345,"versions":1346,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1348},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[357],[1347],"0.70.16",[55],{"id":1350,"slug":1351,"identity":1352,"label":1353,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1354,"versions":1355,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1356},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[425],[1062],[55],{"id":1358,"slug":1359,"identity":1360,"label":1361,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1362,"versions":1363,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1364},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[357,425],[891],[55],{"id":1366,"slug":1367,"identity":1368,"label":1369,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1370,"versions":1371,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1373},"package:pypi:ninja","ninja-d45560ae","pypi:ninja","ninja",[425],[1372],"1.11.1.4",[55],{"id":1375,"slug":1376,"identity":1377,"label":1378,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1379,"versions":1380,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1382},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[425],[1381],"0.61.2",[55],{"id":1384,"slug":1385,"identity":1386,"label":1387,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1388,"versions":1390,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1392},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1389,425],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1391],"2.2.5",[55],{"id":1394,"slug":1395,"identity":1396,"label":1397,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1398,"versions":1399,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1401},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[425],[1400],"12.4.5.8",[55],{"id":1403,"slug":1404,"identity":1405,"label":1406,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1407,"versions":1408,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1410},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[425],[1409],"12.4.127",[55],{"id":1412,"slug":1413,"identity":1414,"label":1415,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1416,"versions":1417,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1418},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[425],[1409],[55],{"id":1420,"slug":1421,"identity":1422,"label":1423,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1424,"versions":1425,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1426},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[425],[1409],[55],{"id":1428,"slug":1429,"identity":1430,"label":1431,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1432,"versions":1433,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1435},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[425],[1434],"9.1.0.70",[55],{"id":1437,"slug":1438,"identity":1439,"label":1440,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1441,"versions":1442,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1444},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[425],[1443],"11.2.1.3",[55],{"id":1446,"slug":1447,"identity":1448,"label":1449,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1450,"versions":1451,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1453},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[425],[1452],"10.3.5.147",[55],{"id":1455,"slug":1456,"identity":1457,"label":1458,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1459,"versions":1460,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1462},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[425],[1461],"11.6.1.9",[55],{"id":1464,"slug":1465,"identity":1466,"label":1467,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1468,"versions":1469,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1471},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[425],[1470],"12.3.1.170",[55],{"id":1473,"slug":1474,"identity":1475,"label":1476,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1477,"versions":1478,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1480},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[425],[1479],"0.6.2",[55],{"id":1482,"slug":1483,"identity":1484,"label":1485,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1486,"versions":1487,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1489},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[425],[1488],"12.570.86",[55],{"id":1491,"slug":1492,"identity":1493,"label":1494,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1495,"versions":1496,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1498},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[357,425],[1497],"2.21.5",[55],{"id":1500,"slug":1501,"identity":1502,"label":1503,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1504,"versions":1505,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1506},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[425],[1409],[55],{"id":1508,"slug":1509,"identity":1510,"label":1511,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1512,"versions":1513,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1514},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[334,425],[1409],[55],{"id":1516,"slug":1517,"identity":1518,"label":1519,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1520,"versions":1521,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1523},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[357],[1522],"2.3.0",[55],{"id":1525,"slug":1526,"identity":1527,"label":1528,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1529,"versions":1530,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1532},"package:pypi:opencensus","opencensus-a78c415d","pypi:opencensus","opencensus",[334],[1531],"0.11.4",[55],{"id":1534,"slug":1535,"identity":1536,"label":1537,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1538,"versions":1539,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1541},"package:pypi:opencensus-context","opencensus-context-22acaa15","pypi:opencensus-context","opencensus-context",[334],[1540],"0.1.3",[55],{"id":1543,"slug":1544,"identity":1545,"label":1546,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1547,"versions":1548,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1550},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[334],[1549],"4.11.0.86",[55],{"id":1552,"slug":1553,"identity":1554,"label":1555,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1556,"versions":1557,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1559},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[334],[1558],"1.26.0",[55],{"id":1561,"slug":1562,"identity":1563,"label":1564,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1565,"versions":1566,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1567},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[334],[1558],[55],{"id":1569,"slug":1570,"identity":1571,"label":1572,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1573,"versions":1574,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1575},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[334],[1558],[55],{"id":1577,"slug":1578,"identity":1579,"label":1580,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1581,"versions":1582,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1583},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[334],[1558],[55],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1589,"versions":1590,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1591},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[334],[1558],[55],{"id":1593,"slug":1594,"identity":1595,"label":1596,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1597,"versions":1598,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1599},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[334],[1558],[55],{"id":1601,"slug":1602,"identity":1603,"label":1604,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1605,"versions":1606,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1607},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[334],[1558],[55],{"id":1609,"slug":1610,"identity":1611,"label":1612,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1613,"versions":1614,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1616},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[334],[1615],"0.47b0",[55],{"id":1618,"slug":1619,"identity":1620,"label":1621,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1622,"versions":1623,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1624},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[334],[909],[55],{"id":1626,"slug":1627,"identity":1628,"label":1629,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1630,"versions":1631,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1633},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[357,368],[1632],"4.3.0",[55],{"id":1635,"slug":1636,"identity":1637,"label":1638,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1639,"versions":1640,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1642},"package:pypi:outlines","outlines-7072ea7b","pypi:outlines","outlines",[334],[1641],"0.1.11",[55],{"id":1644,"slug":1645,"identity":1646,"label":1647,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1648,"versions":1649,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1651},"package:pypi:outlines-core","outlines-core-16063b2f","pypi:outlines-core","outlines-core",[334],[1650],"0.1.26",[55],{"id":1653,"slug":1654,"identity":1655,"label":1656,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1657,"versions":1659,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1661},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1658,425],"Apache-2.0 OR BSD-2-Clause",[1660],"25.0",[55],{"id":1663,"slug":1664,"identity":1665,"label":1666,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1667,"versions":1668,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1670},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[425],[1669],"2.2.3",[55],{"id":1672,"slug":1673,"identity":1674,"label":1675,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1676,"versions":1677,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1679},"package:pypi:partial-json-parser","partial-json-parser-185436fc","pypi:partial-json-parser","partial-json-parser",[368],[1678],"0.2.1.1.post5",[55],{"id":1681,"slug":1682,"identity":1683,"label":1684,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1685,"versions":1686,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1688},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[368],[1687],"4.3.7",[55],{"id":1690,"slug":1691,"identity":1692,"label":1693,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1694,"versions":1696,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1697},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[334,1695],"Apache-2.0 AND BSD-2-Clause",[427],[55],{"id":1699,"slug":1700,"identity":1701,"label":1702,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1703,"versions":1704,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1706},"package:pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator-6b62ecc9","pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator",[998],[1705],"7.1.0",[55],{"id":1708,"slug":1709,"identity":1710,"label":1711,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1712,"versions":1713,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1715},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[357,425],[1714],"3.0.51",[55],{"id":1717,"slug":1718,"identity":1719,"label":1720,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1721,"versions":1722,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1724},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[334],[1723],"0.3.1",[55],{"id":1726,"slug":1727,"identity":1728,"label":1729,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1730,"versions":1731,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1733},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[334],[1732],"1.26.1",[55],{"id":1735,"slug":1736,"identity":1737,"label":1738,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1739,"versions":1740,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1742},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[357],[1741],"7.0.0",[55],{"id":1744,"slug":1745,"identity":1746,"label":1747,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1748,"versions":1749,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1751},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[368],[1750],"9.0.0",[55],{"id":1753,"slug":1754,"identity":1755,"label":1756,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1757,"versions":1758,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1760},"package:pypi:py-spy","py-spy-5be0886a","pypi:py-spy","py-spy",[368],[1759],"0.4.0",[55],{"id":1762,"slug":1763,"identity":1764,"label":1765,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1766,"versions":1767,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1769},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[425],[1768],"0.4.2",[55],{"id":1771,"slug":1772,"identity":1773,"label":1774,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1775,"versions":1777,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1779},"package:pypi:pycountry","pycountry-938c3061","pypi:pycountry","pycountry",[1776],"LGPL-2.1-only",[1778],"24.6.1",[55],{"id":1781,"slug":1782,"identity":1783,"label":1784,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1785,"versions":1786,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1788},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[357],[1787],"2.22",[55],{"id":1790,"slug":1791,"identity":1792,"label":1793,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1794,"versions":1795,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1797},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[368],[1796],"2.11.4",[55],{"id":1799,"slug":1800,"identity":1801,"label":1802,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1803,"versions":1804,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1806},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[368],[1805],"2.33.2",[55],{"id":1808,"slug":1809,"identity":1810,"label":1811,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1812,"versions":1813,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1815},"package:pypi:pynvml","pynvml-46c48fc0","pypi:pynvml","pynvml",[357],[1814],"12.0.0",[55],{"id":1817,"slug":1818,"identity":1819,"label":1820,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1821,"versions":1822,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1824},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[425],[1823],"2.9.0.post0",[55],{"id":1826,"slug":1827,"identity":1828,"label":1829,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1830,"versions":1831,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1833},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[425],[1832],"3.3.0",[55],{"id":1835,"slug":1836,"identity":1837,"label":1838,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1839,"versions":1840,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1842},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[368],[1841],"2025.2",[55],{"id":1844,"slug":1845,"identity":1846,"label":1847,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1848,"versions":1849,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1851},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[368],[1850],"6.0.2",[55],{"id":1853,"slug":1854,"identity":1855,"label":1856,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1857,"versions":1858,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1860},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[425],[1859],"26.4.0",[55],{"id":1862,"slug":1863,"identity":1864,"label":1865,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1866,"versions":1867,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1869},"package:pypi:questionary","questionary-3aceb11d","pypi:questionary","questionary",[368],[1868],"2.1.0",[55],{"id":1871,"slug":1872,"identity":1873,"label":1874,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1875,"versions":1876,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1878},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[368],[1877],"3.13.0",[55],{"id":1880,"slug":1881,"identity":1882,"label":1883,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1884,"versions":1885,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1887},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[368],[1886],"0.36.2",[55],{"id":1889,"slug":1890,"identity":1891,"label":1892,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1893,"versions":1895,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1897},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1894,425],"Apache-2.0 AND CNRI-Python",[1896],"2024.11.6",[55],{"id":1899,"slug":1900,"identity":1901,"label":1902,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1903,"versions":1904,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1906},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[368],[1905],"14.0.0",[55],{"id":1908,"slug":1909,"identity":1910,"label":1911,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1912,"versions":1913,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1915},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[368],[1914],"0.14.5",[55],{"id":1917,"slug":1918,"identity":1919,"label":1920,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1921,"versions":1922,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1924},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[368],[1923],"0.24.0",[55],{"id":1926,"slug":1927,"identity":1928,"label":1929,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1930,"versions":1931,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1933},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[334],[1932],"4.9.1",[55],{"id":1935,"slug":1936,"identity":1937,"label":1938,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1939,"versions":1940,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1942},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[425],[1941],"0.5.3",[55],{"id":1944,"slug":1945,"identity":1946,"label":1947,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1948,"versions":1949,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1950},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[425],[783],[55],{"id":1952,"slug":1953,"identity":1954,"label":1955,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1956,"versions":1957,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1958},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[425],[1312],[55],{"id":1960,"slug":1961,"identity":1962,"label":1963,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1964,"versions":1965,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1967},"package:pypi:six","six-3c3888bd","pypi:six","six",[368],[1966],"1.17.0",[55],{"id":1969,"slug":1970,"identity":1971,"label":1972,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1973,"versions":1974,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1975},"package:pypi:smart-open","smart-open-6f8d7c36","pypi:smart-open","smart-open",[368],[1705],[55],{"id":1977,"slug":1978,"identity":1979,"label":1980,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1981,"versions":1983,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1985},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[1982],"Apache-2.0 OR MIT",[1984],"1.3.1",[55],{"id":1987,"slug":1988,"identity":1989,"label":1990,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":1991,"versions":1992,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1994},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[368],[1993],"2.0.40",[55],{"id":1996,"slug":1997,"identity":1998,"label":1999,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2000,"versions":2001,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2003},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[425],[2002],"1.13.1",[55],{"id":2005,"slug":2006,"identity":2007,"label":2008,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2009,"versions":2010,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2012},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[334],[2011],"9.1.2",[55],{"id":2014,"slug":2015,"identity":2016,"label":2017,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2018,"versions":2019,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2020},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[368],[1522],[55],{"id":2022,"slug":2023,"identity":2024,"label":2025,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2026,"versions":2027,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2029},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[357],[2028],"3.6.0",[55],{"id":2031,"slug":2032,"identity":2033,"label":2034,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2035,"versions":2036,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2037},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[599,425],[359],[55],{"id":2039,"slug":2040,"identity":2041,"label":2042,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2043,"versions":2044,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2046},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[425],[2045],"0.21.0",[55],{"id":2048,"slug":2049,"identity":2050,"label":2051,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2052,"versions":2053,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2055},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[368],[2054],"3.2.0",[55],{"id":2057,"slug":2058,"identity":2059,"label":2060,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2061,"versions":2062,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2064},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[368],[2063],"0.15.3",[55],{"id":2066,"slug":2067,"identity":2068,"label":2069,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2070,"versions":2071,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2073},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[334],[2072],"2.9.0.20241206",[55],{"id":2075,"slug":2076,"identity":2077,"label":2078,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2079,"versions":2080,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2082},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[745,425],[2081],"4.13.2",[55],{"id":2084,"slug":2085,"identity":2086,"label":2087,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2088,"versions":2089,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2090},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[368],[1759],[55],{"id":2092,"slug":2093,"identity":2094,"label":2095,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2096,"versions":2097,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2098},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[334],[1841],[55],{"id":2100,"slug":2101,"identity":2102,"label":2103,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2104,"versions":2105,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2107},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[357],[2106],"0.34.2",[55],{"id":2109,"slug":2110,"identity":2111,"label":2112,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2113,"versions":2114,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2115},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[368],[2045],[55],{"id":2117,"slug":2118,"identity":2119,"label":2120,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2121,"versions":2122,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2124},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[368],[2123],"1.0.5",[55],{"id":2126,"slug":2127,"identity":2128,"label":2129,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2130,"versions":2131,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2133},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[368],[2132],"0.2.13",[55],{"id":2135,"slug":2136,"identity":2137,"label":2138,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2139,"versions":2140,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2142},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[357],[2141],"15.0.1",[55],{"id":2144,"slug":2145,"identity":2146,"label":2147,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2148,"versions":2149,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2151},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[425],[2150],"1.17.2",[55],{"id":2153,"slug":2154,"identity":2155,"label":2156,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2157,"versions":2158,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2160},"package:pypi:xformers","xformers-0f6528e3","pypi:xformers","xformers",[357],[2159],"0.0.29.post2",[55],{"id":2162,"slug":2163,"identity":2164,"label":2165,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2166,"versions":2167,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2169},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[425],[2168],"3.5.0",[55],{"id":2171,"slug":2172,"identity":2173,"label":2174,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2175,"versions":2176,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2178},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[334],[2177],"1.20.0",[55],{"id":2180,"slug":2181,"identity":2182,"label":2183,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2184,"versions":2185,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2187},"package:pypi:yaspin","yaspin-3abe0201","pypi:yaspin","yaspin",[368],[2186],"3.1.0",[55],{"id":2189,"slug":2190,"identity":2191,"label":2192,"aiRelevant":46,"provider":331,"advisoryCount":38,"licenseExpressions":2193,"versions":2194,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2196},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[368],[2195],"3.21.0",[55],[2198,2237,2269,2302,2334,2367,2415,2440,2471,2514,2540,2566,2593,2622,2650,2685,2708,2735,2761,2781,2799,2824,2865,2891,2930,2968,2991,3013,3038,3063,3096,3124,3147,3177,3207,3242,3265,3295,3322,3341,3375,3401,3424,3455,3482,3497,3526,3551,3574,3596,3619,3648,3674,3697,3720,3767,3817,3845,3876,3915,3944,3980,3998,4047,4086,4114,4146,4178,4203,4240,4264,4287,4320,4344,4378,4406,4436,4456,4479,4504,4529,4561,4589,4645,4677,4708,4742,4767,4801,4827,4851,4875,4901,4924,4943,4976,5001,5028,5051,5079,5104,5138,5153,5187,5209,5231,5258,5279,5304,5334,5354,5386,5409,5431,5456,5477,5504,5528,5547,5569,5590,5612,5643,5666,5689,5716,5745,5767,5788,5810,5835,5864,5885,5917,5941,5967,6001,6023,6050,6077,6110,6130,6166,6205,6237,6264,6301,6328,6381,6410,6437,6467,6499,6524,6551,6577,6599,6622,6650,6677,6701,6728,6751,6775,6805,6830,6858,6910,6933,6959,6992,7024,7053,7078,7114,7146,7165,7184,7204,7232,7252,7269,7288,7305,7326,7342,7357,7374,7389,7406,7423,7440,7453,7466,7479,7492,7505,7518,7531,7544,7566,7599,7618,7635,7652,7670,7693,7707,7730,7759,7779,7806,7827,7847],{"id":105,"slug":2199,"dossier":46,"summary":2200,"aliases":2201,"sourceIds":2204,"published":2205,"modified":2206,"checkedAt":7,"severity":2207,"references":2211,"versionKeys":2235,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2202,2203],"CVE-2024-39689","PYSEC-2024-230",[105,2203],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2208],{"type":2209,"score":2210},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2212,2215,2217,2220,2223,2226,2229,2231,2233],{"type":2213,"url":2214},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2213,"url":2216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2218,"url":2219},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2221,"url":2222},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2224,"url":2225},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2227,"url":2228},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2224,"url":2230},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2213,"url":2232},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2213,"url":2234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2236],"pypi:certifi@2024.6.2",{"id":106,"slug":2238,"dossier":46,"summary":2239,"aliases":2240,"sourceIds":2243,"published":2244,"modified":2245,"checkedAt":7,"severity":2246,"references":2249,"versionKeys":2261,"packageCount":32,"repositoryCount":366},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2241,2242],"CVE-2026-4372","PYSEC-2026-2289",[106,2242],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2247],{"type":2209,"score":2248},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2250,2252,2254,2256,2259],{"type":2213,"url":2251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2218,"url":2253},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2221,"url":2255},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2257,"url":2258},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2213,"url":2260},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2262,2263,2264,2265,2266,2267,2268],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":107,"slug":2270,"dossier":46,"summary":2271,"aliases":2272,"sourceIds":2275,"published":2276,"modified":2277,"checkedAt":7,"severity":2278,"references":2281,"versionKeys":2298,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2273,2274],"CVE-2025-54121","PYSEC-2026-1941",[107,2274],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2279],{"type":2209,"score":2280},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2282,2284,2286,2288,2290,2292,2294,2296],{"type":2224,"url":2283},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2213,"url":2285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2218,"url":2287},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2221,"url":2289},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2224,"url":2291},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2224,"url":2293},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2221,"url":2295},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2213,"url":2297},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2299,2300,2301],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":108,"slug":2303,"dossier":46,"summary":2304,"aliases":2305,"sourceIds":2308,"published":2309,"modified":2310,"checkedAt":7,"severity":2311,"references":2317,"versionKeys":2324,"packageCount":32,"repositoryCount":2333},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2306,2307],"CVE-2026-54279","PYSEC-2026-2112",[108,2307],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2312,2315],{"type":2313,"score":2314},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2209,"score":2316},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2318,2320,2322],{"type":2213,"url":2319},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2221,"url":2321},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2218,"url":2323},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2325,2326,2327,2328,2329,2330,2331,2332],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":109,"slug":2335,"dossier":46,"summary":2336,"aliases":2337,"sourceIds":2340,"published":2341,"modified":2342,"checkedAt":7,"severity":2343,"references":2346,"versionKeys":2363,"packageCount":32,"repositoryCount":2366},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2338,2339],"CVE-2026-44307","PYSEC-2026-2617",[109,2339],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2344],{"type":2313,"score":2345},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2347,2349,2351,2353,2355,2357,2359,2361],{"type":2224,"url":2348},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2213,"url":2350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2224,"url":2352},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2224,"url":2354},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2221,"url":2356},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2224,"url":2358},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2221,"url":2360},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2213,"url":2362},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2364,2365],"pypi:mako@1.3.10","pypi:mako@1.3.8",5,{"id":110,"slug":2368,"dossier":46,"summary":2369,"aliases":2370,"sourceIds":2373,"published":2374,"modified":2375,"checkedAt":7,"severity":2376,"references":2379,"versionKeys":2412,"packageCount":32,"repositoryCount":569},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[2371,2372],"CVE-2026-22807","PYSEC-2026-2010",[110,2372],"2026-01-21T16:12:54Z","2026-07-17T16:30:29.025047931Z",[2377],{"type":2209,"score":2378},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2380,2382,2384,2386,2388,2390,2392,2394,2396,2398,2400,2402,2404,2406,2408,2410],{"type":2224,"url":2381},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2213,"url":2383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":2224,"url":2385},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":2224,"url":2387},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":2224,"url":2389},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":2221,"url":2391},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":2224,"url":2393},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":2221,"url":2395},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"type":2224,"url":2397},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":2213,"url":2399},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2224,"url":2401},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":2224,"url":2403},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":2224,"url":2405},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":2224,"url":2407},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":2224,"url":2409},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",{"type":2224,"url":2411},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",[2413,2414],"pypi:vllm@0.10.1.1","pypi:vllm@0.11.0",{"id":111,"slug":2416,"dossier":46,"summary":2417,"aliases":2418,"sourceIds":2421,"published":2422,"modified":2423,"checkedAt":7,"severity":2424,"references":2429,"versionKeys":2439,"packageCount":32,"repositoryCount":2333},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2419,2420],"CVE-2026-34514","PYSEC-2026-2096",[111,2420],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2425,2427],{"type":2313,"score":2426},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2209,"score":2428},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2430,2432,2434,2436,2437],{"type":2218,"url":2431},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2213,"url":2433},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2218,"url":2435},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2221,"url":2321},{"type":2213,"url":2438},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2325,2326,2327,2328,2329,2330,2331,2332],{"id":112,"slug":2441,"dossier":91,"summary":2442,"aliases":2443,"sourceIds":2446,"published":2447,"modified":2448,"checkedAt":7,"severity":2449,"references":2452,"versionKeys":2465,"packageCount":32,"repositoryCount":103},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2444,2445],"CVE-2025-66471","PYSEC-2026-1994",[112,2445],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2450],{"type":2313,"score":2451},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2453,2455,2457,2459,2461,2463],{"type":2224,"url":2454},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2213,"url":2456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2218,"url":2458},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2221,"url":2460},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2221,"url":2462},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2213,"url":2464},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2466,2467,2468,2469,2470],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":113,"slug":2472,"dossier":46,"summary":2473,"aliases":2474,"sourceIds":2478,"published":2479,"modified":2480,"checkedAt":7,"severity":2481,"references":2488,"versionKeys":2510,"packageCount":32,"repositoryCount":550},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2475,2476,2477],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[113,2477],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2482,2484,2486],{"type":2209,"score":2483},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2313,"score":2485},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2209,"score":2487},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2489,2491,2494,2496,2498,2500,2502,2504,2506,2508],{"type":2213,"url":2490},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2492,"url":2493},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2492,"url":2495},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2224,"url":2497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2221,"url":2499},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2224,"url":2501},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2492,"url":2503},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2213,"url":2505},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2213,"url":2507},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2213,"url":2509},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2511,2512,2513],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":114,"slug":2515,"dossier":46,"summary":2516,"aliases":2517,"sourceIds":2520,"published":2521,"modified":2522,"checkedAt":7,"severity":2523,"references":2525,"versionKeys":2539,"packageCount":32,"repositoryCount":569},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2518,2519],"CVE-2025-3933","PYSEC-2026-1977",[114,2519],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2524],{"type":2209,"score":2280},[2526,2528,2530,2532,2533,2535,2537],{"type":2213,"url":2527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2224,"url":2529},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2224,"url":2531},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2221,"url":2255},{"type":2224,"url":2534},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2221,"url":2536},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2213,"url":2538},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2262,2263],{"id":115,"slug":2541,"dossier":91,"summary":2542,"aliases":2543,"sourceIds":2546,"published":2547,"modified":2548,"checkedAt":7,"severity":2549,"references":2552,"versionKeys":2565,"packageCount":32,"repositoryCount":103},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2544,2545],"CVE-2026-21441","PYSEC-2026-1996",[115,2545],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2550,2551],{"type":2209,"score":2316},{"type":2313,"score":2451},[2553,2555,2557,2559,2560,2562,2563],{"type":2224,"url":2554},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2213,"url":2556},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2218,"url":2558},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2221,"url":2460},{"type":2224,"url":2561},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2221,"url":2462},{"type":2213,"url":2564},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2466,2467,2468,2469,2470],{"id":116,"slug":2567,"dossier":46,"summary":2568,"aliases":2569,"sourceIds":2572,"published":2573,"modified":2574,"checkedAt":7,"severity":2575,"references":2578,"versionKeys":2591,"packageCount":32,"repositoryCount":32},"ghsa-38vq-g6vr-w8wf-91b7e775","Sentencepiece has a a heap overflow issue",[2570,2571],"CVE-2026-1260","PYSEC-2026-1909",[116,2571],"2026-01-22T18:30:39Z","2026-07-07T17:56:14.124737800Z",[2576],{"type":2313,"score":2577},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2579,2581,2583,2585,2587,2589],{"type":2213,"url":2580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1260",{"type":2224,"url":2582},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Fcommit\u002Fd856b67fdb3492e035489abf9b3aaf486144b2c0",{"type":2221,"url":2584},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece",{"type":2224,"url":2586},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Freleases\u002Ftag\u002Fv0.2.1",{"type":2221,"url":2588},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsentencepiece",{"type":2213,"url":2590},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38vq-g6vr-w8wf",[2592],"pypi:sentencepiece@0.2.0",{"id":117,"slug":2594,"dossier":46,"summary":2595,"aliases":2596,"sourceIds":2599,"published":2600,"modified":2601,"checkedAt":7,"severity":2602,"references":2605,"versionKeys":2620,"packageCount":32,"repositoryCount":569},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[2597,2598],"CVE-2025-6242","PYSEC-2026-2011",[117,2598],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[2603],{"type":2209,"score":2604},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[2606,2608,2610,2612,2614,2616,2617,2618],{"type":2224,"url":2607},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":2213,"url":2609},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":2224,"url":2611},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":2224,"url":2613},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":2224,"url":2615},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":2221,"url":2395},{"type":2221,"url":2391},{"type":2213,"url":2619},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[2413,2621],"pypi:vllm@0.8.5.post1",{"id":118,"slug":2623,"dossier":46,"summary":2624,"aliases":2625,"sourceIds":2628,"published":2629,"modified":2630,"checkedAt":7,"severity":2631,"references":2634,"versionKeys":2647,"packageCount":32,"repositoryCount":2366},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[2626,2627],"CVE-2026-54911","PYSEC-2026-2294",[118,2627],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[2632],{"type":2209,"score":2633},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2635,2637,2639,2641,2643,2645],{"type":2218,"url":2636},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":2213,"url":2638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":2218,"url":2640},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":2224,"url":2642},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":2221,"url":2644},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":2213,"url":2646},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[2648,2649],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",{"id":119,"slug":2651,"dossier":46,"summary":2652,"aliases":2653,"sourceIds":2656,"published":2657,"modified":2658,"checkedAt":7,"severity":2659,"references":2662,"versionKeys":2684,"packageCount":32,"repositoryCount":550},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[2654,2655],"CVE-2026-34756","PYSEC-2026-2298",[119,2655],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[2660],{"type":2209,"score":2661},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2663,2665,2667,2669,2671,2673,2675,2677,2679,2681,2682],{"type":2218,"url":2664},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":2213,"url":2666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":2218,"url":2668},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":2218,"url":2670},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":2213,"url":2672},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":2213,"url":2674},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":2224,"url":2676},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":2492,"url":2678},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":2224,"url":2680},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":2221,"url":2395},{"type":2224,"url":2683},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[2413,2414,2621],{"id":120,"slug":2686,"dossier":46,"summary":2687,"aliases":2688,"sourceIds":2691,"published":2692,"modified":2693,"checkedAt":7,"severity":2694,"references":2698,"versionKeys":2707,"packageCount":32,"repositoryCount":2333},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2689,2690],"CVE-2026-34517","PYSEC-2026-2099",[120,2690],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[2695,2697],{"type":2313,"score":2696},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2209,"score":2280},[2699,2701,2703,2705,2706],{"type":2218,"url":2700},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2213,"url":2702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2218,"url":2704},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":121,"slug":2709,"dossier":46,"summary":2710,"aliases":2711,"sourceIds":2714,"published":2715,"modified":2716,"checkedAt":7,"severity":2717,"references":2720,"versionKeys":2734,"packageCount":32,"repositoryCount":550},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[2712,2713],"CVE-2026-47155","PYSEC-2026-2301",[121,2713],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[2718],{"type":2209,"score":2719},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[2721,2723,2725,2727,2729,2731,2732],{"type":2213,"url":2722},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":2213,"url":2724},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":2492,"url":2726},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":2218,"url":2728},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":2224,"url":2730},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":2221,"url":2395},{"type":2213,"url":2733},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[2413,2414,2621],{"id":122,"slug":2736,"dossier":46,"summary":2737,"aliases":2738,"sourceIds":2741,"published":2742,"modified":2743,"checkedAt":7,"severity":2744,"references":2747,"versionKeys":2760,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2739,2740],"CVE-2025-50182","PYSEC-2026-1997",[122,2740],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2745],{"type":2209,"score":2746},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2748,2750,2752,2754,2755,2757,2758],{"type":2224,"url":2749},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2213,"url":2751},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2218,"url":2753},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2221,"url":2460},{"type":2224,"url":2756},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2221,"url":2462},{"type":2213,"url":2759},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2466,2467,2468,2469],{"id":123,"slug":2762,"dossier":46,"summary":2763,"aliases":2764,"sourceIds":2767,"published":2768,"modified":2769,"checkedAt":7,"severity":2770,"references":2774,"versionKeys":2780,"packageCount":32,"repositoryCount":2333},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2765,2766],"CVE-2026-54273","PYSEC-2026-2107",[123,2766],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2771,2773],{"type":2313,"score":2772},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2209,"score":2316},[2775,2777,2779],{"type":2213,"url":2776},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2218,"url":2778},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2221,"url":2321},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":124,"slug":2782,"dossier":46,"summary":2783,"aliases":2784,"sourceIds":2787,"published":2788,"modified":2789,"checkedAt":7,"severity":2790,"references":2794,"versionKeys":2798,"packageCount":32,"repositoryCount":2333},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2785,2786],"CVE-2026-54275","PYSEC-2026-237",[124,2786],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2791,2793],{"type":2313,"score":2792},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2209,"score":2316},[2795,2797],{"type":2213,"url":2796},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2221,"url":2321},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":125,"slug":2800,"dossier":46,"summary":2801,"aliases":2802,"sourceIds":2805,"published":2806,"modified":2807,"checkedAt":7,"severity":2808,"references":2811,"versionKeys":2823,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[2803,2804],"CVE-2025-46570","PYSEC-2025-53",[125,2804],"2025-05-28T18:02:24Z","2026-02-04T03:48:23.274649Z",[2809],{"type":2209,"score":2810},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2812,2814,2816,2818,2820,2822],{"type":2213,"url":2813},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":2213,"url":2815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":2492,"url":2817},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":2218,"url":2819},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":2224,"url":2821},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":2221,"url":2395},[2621],{"id":126,"slug":2825,"dossier":46,"summary":2826,"aliases":2827,"sourceIds":2830,"published":2831,"modified":2832,"checkedAt":7,"severity":2833,"references":2836,"versionKeys":2864,"packageCount":32,"repositoryCount":550},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[2828,2829],"CVE-2026-22778","PYSEC-2026-565",[126,2829],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[2834],{"type":2209,"score":2835},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2837,2839,2841,2843,2845,2847,2848,2850,2851,2853,2855,2857,2859,2860,2861,2862],{"type":2224,"url":2838},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2213,"url":2840},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":2224,"url":2842},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":2224,"url":2844},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":2224,"url":2846},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":2221,"url":2391},{"type":2224,"url":2849},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":2221,"url":2395},{"type":2224,"url":2852},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":2213,"url":2854},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2224,"url":2856},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":2224,"url":2858},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":2224,"url":2407},{"type":2224,"url":2409},{"type":2224,"url":2411},{"type":2224,"url":2863},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[2413,2414,2621],{"id":127,"slug":2866,"dossier":46,"summary":2867,"aliases":2868,"sourceIds":2871,"published":2872,"modified":2873,"checkedAt":7,"severity":2874,"references":2877,"versionKeys":2890,"packageCount":32,"repositoryCount":569},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2869,2870],"CVE-2025-6921","PYSEC-2026-1980",[127,2870],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2875],{"type":2209,"score":2876},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2878,2880,2882,2884,2885,2887,2888],{"type":2213,"url":2879},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2224,"url":2881},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2224,"url":2883},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2221,"url":2255},{"type":2224,"url":2886},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2221,"url":2536},{"type":2213,"url":2889},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2262,2263],{"id":128,"slug":2892,"dossier":46,"summary":2893,"aliases":2894,"sourceIds":2897,"published":2898,"modified":2899,"checkedAt":7,"severity":2900,"references":2904,"versionKeys":2925,"packageCount":32,"repositoryCount":34},"ghsa-4xpc-pv4p-pm3w-c72dbf83","LiteLLM: Authentication Bypass via Host Header Injection",[2895,2896],"CVE-2026-49468","PYSEC-2026-388",[128,2896],"2026-06-16T23:38:26Z","2026-07-18T17:30:30.617013067Z",[2901,2902],{"type":2209,"score":2835},{"type":2313,"score":2903},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[2905,2907,2909,2911,2913,2915,2917,2919,2921,2923],{"type":2224,"url":2906},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2213,"url":2908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49468",{"type":2224,"url":2910},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49468",{"type":2224,"url":2912},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491520",{"type":2221,"url":2914},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm",{"type":2224,"url":2916},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.84.0",{"type":2213,"url":2918},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2224,"url":2920},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flitellm\u002FPYSEC-2026-388.yaml",{"type":2221,"url":2922},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flitellm",{"type":2224,"url":2924},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49468.json",[2926,2927,2928,2929],"pypi:litellm@1.53.7","pypi:litellm@1.67.4.dev1","pypi:litellm@1.68.0","pypi:litellm@1.73.6.post1",{"id":129,"slug":2931,"dossier":91,"summary":2932,"aliases":2933,"sourceIds":2936,"published":2937,"modified":2938,"checkedAt":7,"severity":2939,"references":2942,"versionKeys":2965,"packageCount":32,"repositoryCount":103},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2934,2935],"CVE-2026-4539","PYSEC-2026-2987",[129,2935],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2940,2941],{"type":2209,"score":2483},{"type":2313,"score":2485},[2943,2945,2947,2949,2951,2953,2955,2957,2959,2961,2963],{"type":2213,"url":2944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2224,"url":2946},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2224,"url":2948},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2224,"url":2950},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2221,"url":2952},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2224,"url":2954},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2224,"url":2956},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2224,"url":2958},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2224,"url":2960},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2221,"url":2962},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2213,"url":2964},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2966,2967],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":130,"slug":2969,"dossier":46,"summary":2970,"aliases":2971,"sourceIds":2972,"published":2973,"modified":2974,"checkedAt":7,"severity":2975,"references":2977,"versionKeys":2984,"packageCount":32,"repositoryCount":65},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[130],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[2976],{"type":2209,"score":2316},[2978,2980,2982],{"type":2224,"url":2979},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2221,"url":2981},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2224,"url":2983},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[2985,2986,2987,2988,2989,2990],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":131,"slug":2992,"dossier":46,"summary":2993,"aliases":2994,"sourceIds":2997,"published":2998,"modified":2999,"checkedAt":7,"severity":3000,"references":3003,"versionKeys":3012,"packageCount":32,"repositoryCount":34},"ghsa-53mr-6c8q-9789-034179e7","LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint",[2995,2996],"CVE-2026-35029","PYSEC-2026-2597",[131,2996],"2026-04-03T21:59:31Z","2026-07-13T16:43:01.087747831Z",[3001],{"type":2313,"score":3002},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:L\u002FSI:L\u002FSA:N",[3004,3006,3008,3009,3010],{"type":2224,"url":3005},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",{"type":2213,"url":3007},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35029",{"type":2221,"url":2914},{"type":2221,"url":2922},{"type":2213,"url":3011},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",[2926,2927,2928,2929],{"id":132,"slug":3014,"dossier":46,"summary":3015,"aliases":3016,"sourceIds":3020,"published":3021,"modified":3022,"checkedAt":7,"severity":3023,"references":3027,"versionKeys":3037,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3017,3018,3019],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[132,3019],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[3024,3026],{"type":2313,"score":3025},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2209,"score":2835},[3028,3030,3032,3034,3036],{"type":2213,"url":3029},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2213,"url":3031},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2224,"url":3033},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2224,"url":3035},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2221,"url":2499},[2511],{"id":133,"slug":3039,"dossier":46,"summary":3040,"aliases":3041,"sourceIds":3044,"published":3045,"modified":3046,"checkedAt":7,"severity":3047,"references":3050,"versionKeys":3062,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3042,3043],"CVE-2025-69226","PYSEC-2026-1097",[133,3043],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[3048],{"type":2313,"score":3049},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3051,3053,3055,3057,3058,3060],{"type":2224,"url":3052},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2213,"url":3054},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2218,"url":3056},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2221,"url":2321},{"type":2221,"url":3059},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2213,"url":3061},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2325,2326,2327,2328,2329,2330,2331],{"id":134,"slug":3064,"dossier":46,"summary":3065,"aliases":3066,"sourceIds":3070,"published":3071,"modified":3072,"checkedAt":7,"severity":3073,"references":3076,"versionKeys":3091,"packageCount":32,"repositoryCount":510},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[3067,3068,3069],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[134,3069],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[3074],{"type":2209,"score":3075},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3077,3079,3081,3083,3085,3087,3089],{"type":2224,"url":3078},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":2213,"url":3080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":2224,"url":3082},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":2218,"url":3084},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":2221,"url":3086},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":2221,"url":3088},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":2213,"url":3090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[3092,3093,3094,3095],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":135,"slug":3097,"dossier":46,"summary":3098,"aliases":3099,"sourceIds":3102,"published":3103,"modified":3104,"checkedAt":7,"severity":3105,"references":3109,"versionKeys":3122,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3100,3101],"CVE-2024-53981","PYSEC-2026-1851",[135,3101],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[3106,3107],{"type":2209,"score":2316},{"type":2313,"score":3108},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3110,3112,3114,3116,3118,3120],{"type":2224,"url":3111},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2213,"url":3113},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2224,"url":3115},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2221,"url":3117},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2221,"url":3119},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2213,"url":3121},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3123],"pypi:python-multipart@0.0.9",{"id":136,"slug":3125,"dossier":46,"summary":3126,"aliases":3127,"sourceIds":3130,"published":3131,"modified":3132,"checkedAt":7,"severity":3133,"references":3135,"versionKeys":3146,"packageCount":32,"repositoryCount":569},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3128,3129],"CVE-2025-6638","PYSEC-2026-1981",[136,3129],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3134],{"type":2209,"score":2876},[3136,3138,3139,3140,3141,3143,3144],{"type":2213,"url":3137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2224,"url":2881},{"type":2224,"url":2883},{"type":2221,"url":2255},{"type":2224,"url":3142},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2221,"url":2536},{"type":2213,"url":3145},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2262,2263],{"id":137,"slug":3148,"dossier":46,"summary":3149,"aliases":3150,"sourceIds":3153,"published":3154,"modified":3155,"checkedAt":7,"severity":3156,"references":3160,"versionKeys":3175,"packageCount":32,"repositoryCount":32},"ghsa-5cmr-4px5-23pc-6775b484","XGrammar affected by Denial of Service by infinite recursion grammars",[3151,3152],"CVE-2025-57809","PYSEC-2026-2054",[137,3152],"2025-08-25T20:43:45Z","2026-07-07T17:56:43.683032784Z",[3157,3158],{"type":2209,"score":2316},{"type":2313,"score":3159},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3161,3163,3165,3167,3169,3171,3173],{"type":2224,"url":3162},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",{"type":2213,"url":3164},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57809",{"type":2224,"url":3166},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fissues\u002F250",{"type":2224,"url":3168},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fcommit\u002Fb943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",{"type":2221,"url":3170},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar",{"type":2221,"url":3172},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fxgrammar",{"type":2213,"url":3174},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",[3176],"pypi:xgrammar@0.1.18",{"id":138,"slug":3178,"dossier":46,"summary":3179,"aliases":3180,"sourceIds":3183,"published":3184,"modified":3185,"checkedAt":7,"severity":3186,"references":3191,"versionKeys":3206,"packageCount":32,"repositoryCount":550},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[3181,3182],"CVE-2026-53923","PYSEC-2026-3403",[138,3182],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[3187,3189],{"type":2209,"score":3188},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2313,"score":3190},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3192,3194,3196,3198,3200,3202,3204,3205],{"type":2224,"url":3193},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2213,"url":3195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":2224,"url":3197},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":2224,"url":3199},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":2213,"url":3201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2224,"url":3203},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2413,2414,2621],{"id":139,"slug":3208,"dossier":46,"summary":3209,"aliases":3210,"sourceIds":3214,"published":3215,"modified":3216,"checkedAt":7,"severity":3217,"references":3222,"versionKeys":3239,"packageCount":32,"repositoryCount":569},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3211,3212,3213],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[139,3213],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3218,3220],{"type":2313,"score":3219},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2209,"score":3221},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3223,3225,3227,3229,3231,3233,3235,3237],{"type":2257,"url":3224},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2213,"url":3226},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2492,"url":3228},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2218,"url":3230},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2224,"url":3232},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2221,"url":3234},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2224,"url":3236},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2227,"url":3238},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3240,3241],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":140,"slug":3243,"dossier":46,"summary":3244,"aliases":3245,"sourceIds":3248,"published":3249,"modified":3250,"checkedAt":7,"severity":3251,"references":3253,"versionKeys":3262,"packageCount":32,"repositoryCount":2366},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[3246,3247],"CVE-2026-53539","PYSEC-2026-3036",[140,3247],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[3252],{"type":2209,"score":2316},[3254,3256,3257,3258,3260],{"type":2224,"url":3255},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2221,"url":3117},{"type":2221,"url":3119},{"type":2213,"url":3259},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2213,"url":3261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[3263,3264,3123],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":141,"slug":3266,"dossier":46,"summary":3267,"aliases":3268,"sourceIds":3272,"published":3273,"modified":3274,"checkedAt":7,"severity":3275,"references":3279,"versionKeys":3288,"packageCount":32,"repositoryCount":3294},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3269,3270,3271],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[141,3271],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3276,3277],{"type":2209,"score":2487},{"type":2313,"score":3278},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3280,3282,3284,3286],{"type":2213,"url":3281},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2213,"url":3283},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2221,"url":3285},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2213,"url":3287},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3289,3290,3291,3292,3293],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":142,"slug":3296,"dossier":46,"summary":3297,"aliases":3298,"sourceIds":3301,"published":3302,"modified":3303,"checkedAt":7,"severity":3304,"references":3310,"versionKeys":3321,"packageCount":32,"repositoryCount":2333},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[3299,3300],"CVE-2026-34520","PYSEC-2026-2102",[142,3300],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[3305,3307,3308],{"type":2209,"score":3306},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2313,"score":2426},{"type":2313,"score":3309},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3311,3313,3315,3317,3318,3319],{"type":2218,"url":3312},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2213,"url":3314},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2218,"url":3316},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2221,"url":2321},{"type":2213,"url":2438},{"type":2224,"url":3320},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2325,2326,2327,2328,2329,2330,2331,2332],{"id":143,"slug":3323,"dossier":46,"summary":3324,"aliases":3325,"sourceIds":3328,"published":3329,"modified":3330,"checkedAt":7,"severity":3331,"references":3334,"versionKeys":3340,"packageCount":32,"repositoryCount":2333},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[3326,3327],"CVE-2026-54277","PYSEC-2026-2110",[143,3327],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[3332,3333],{"type":2313,"score":2772},{"type":2209,"score":2316},[3335,3337,3339],{"type":2213,"url":3336},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2218,"url":3338},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2221,"url":2321},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":144,"slug":3342,"dossier":46,"summary":3343,"aliases":3344,"sourceIds":3347,"published":3348,"modified":3349,"checkedAt":7,"severity":3350,"references":3352,"versionKeys":3373,"packageCount":32,"repositoryCount":65},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[3345,3346],"CVE-2026-23490","PYSEC-2026-1810",[144,3346],"2026-01-16T19:19:25Z","2026-07-07T17:56:27.705413895Z",[3351],{"type":2209,"score":2316},[3353,3355,3357,3359,3361,3363,3365,3367,3369,3371],{"type":2224,"url":3354},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2213,"url":3356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2224,"url":3358},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2224,"url":3360},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2221,"url":3362},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2224,"url":3364},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2224,"url":3366},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2224,"url":3368},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",{"type":2221,"url":3370},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyasn1",{"type":2213,"url":3372},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",[3374],"pypi:pyasn1@0.6.1",{"id":145,"slug":3376,"dossier":91,"summary":3377,"aliases":3378,"sourceIds":3381,"published":3382,"modified":3383,"checkedAt":7,"severity":3384,"references":3388,"versionKeys":3397,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3379,3380],"CVE-2026-45409","PYSEC-2026-215",[145,3380],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3385,3386],{"type":2209,"score":2280},{"type":2313,"score":3387},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3389,3391,3393,3395],{"type":2213,"url":3390},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2213,"url":3392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2221,"url":3394},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2224,"url":3396},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3398,3399,3400],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":146,"slug":3402,"dossier":46,"summary":3403,"aliases":3404,"sourceIds":3407,"published":3408,"modified":3409,"checkedAt":7,"severity":3410,"references":3412,"versionKeys":3423,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[3405,3406],"CVE-2025-69224","PYSEC-2026-1099",[146,3406],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[3411],{"type":2313,"score":2426},[3413,3415,3417,3419,3420,3421],{"type":2224,"url":3414},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2213,"url":3416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2218,"url":3418},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":3422},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2325,2326,2327,2328,2329,2330,2331],{"id":147,"slug":3425,"dossier":46,"summary":3426,"aliases":3427,"sourceIds":3430,"published":3431,"modified":3432,"checkedAt":7,"severity":3433,"references":3435,"versionKeys":3454,"packageCount":32,"repositoryCount":550},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[3428,3429],"CVE-2025-62426","PYSEC-2026-2012",[147,3429],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[3434],{"type":2209,"score":2661},[3436,3438,3440,3442,3444,3446,3448,3449,3451,3453],{"type":2224,"url":3437},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2213,"url":3439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":2224,"url":3441},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":2224,"url":3443},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":2213,"url":3445},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2224,"url":3447},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":2221,"url":2395},{"type":2224,"url":3450},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":2224,"url":3452},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":2221,"url":2391},[2413,2414,2621],{"id":148,"slug":3456,"dossier":46,"summary":3457,"aliases":3458,"sourceIds":3461,"published":3462,"modified":3463,"checkedAt":7,"severity":3464,"references":3469,"versionKeys":3481,"packageCount":32,"repositoryCount":366},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3459,3460],"CVE-2026-1839","PYSEC-2026-2288",[148,3460],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[3465,3467],{"type":2209,"score":3466},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2209,"score":3468},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3470,3472,3474,3475,3477,3479],{"type":2213,"url":3471},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2218,"url":3473},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2221,"url":2255},{"type":2224,"url":3476},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2257,"url":3478},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2213,"url":3480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2262,2263,2264,2265,2266,2267,2268],{"id":149,"slug":3483,"dossier":46,"summary":3484,"aliases":3485,"sourceIds":3486,"published":3487,"modified":3488,"checkedAt":7,"severity":3489,"references":3492,"versionKeys":3496,"packageCount":32,"repositoryCount":34},"ghsa-69x8-hrgq-fjj8-13befa28","LiteLLM: Password hash exposure and pass-the-hash authentication bypass",[],[149],"2026-04-08T00:04:12Z","2026-04-17T01:29:14.845270912Z",[3490],{"type":2313,"score":3491},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3493,3495],{"type":2224,"url":3494},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-69x8-hrgq-fjj8",{"type":2221,"url":2914},[2926,2927,2928,2929],{"id":150,"slug":3498,"dossier":46,"summary":3499,"aliases":3500,"sourceIds":3503,"published":3504,"modified":3505,"checkedAt":7,"severity":3506,"references":3511,"versionKeys":3525,"packageCount":32,"repositoryCount":550},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[3501,3502],"CVE-2026-34760","PYSEC-2026-2299",[150,3502],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[3507,3509],{"type":2209,"score":3508},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":2209,"score":3510},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[3512,3514,3516,3518,3520,3522,3523],{"type":2213,"url":3513},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":2213,"url":3515},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":2492,"url":3517},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":2218,"url":3519},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":2224,"url":3521},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":2221,"url":2395},{"type":2213,"url":3524},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[2413,2414,2621],{"id":151,"slug":3527,"dossier":46,"summary":3528,"aliases":3529,"sourceIds":3532,"published":3533,"modified":3534,"checkedAt":7,"severity":3535,"references":3537,"versionKeys":3550,"packageCount":32,"repositoryCount":569},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[3530,3531],"CVE-2025-61620","PYSEC-2026-2013",[151,3531],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[3536],{"type":2209,"score":2661},[3538,3540,3542,3544,3545,3546,3548],{"type":2224,"url":3539},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2224,"url":3541},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":2224,"url":3543},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":2221,"url":2395},{"type":2221,"url":2391},{"type":2213,"url":3547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2213,"url":3549},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[2413,2621],{"id":152,"slug":3552,"dossier":46,"summary":3553,"aliases":3554,"sourceIds":3557,"published":3558,"modified":3559,"checkedAt":7,"severity":3560,"references":3562,"versionKeys":3573,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3555,3556],"CVE-2025-69228","PYSEC-2026-1100",[152,3556],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[3561],{"type":2313,"score":2772},[3563,3565,3567,3569,3570,3571],{"type":2224,"url":3564},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2213,"url":3566},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2218,"url":3568},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":3572},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2325,2326,2327,2328,2329,2330,2331],{"id":153,"slug":3575,"dossier":46,"summary":3576,"aliases":3577,"sourceIds":3580,"published":3581,"modified":3582,"checkedAt":7,"severity":3583,"references":3586,"versionKeys":3595,"packageCount":32,"repositoryCount":2366},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[3578,3579],"CVE-2026-53538","PYSEC-2026-3037",[153,3579],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[3584],{"type":2209,"score":3585},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3587,3589,3590,3591,3593],{"type":2224,"url":3588},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2221,"url":3117},{"type":2221,"url":3119},{"type":2213,"url":3592},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2213,"url":3594},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[3263,3264,3123],{"id":154,"slug":3597,"dossier":46,"summary":3598,"aliases":3599,"sourceIds":3602,"published":3603,"modified":3604,"checkedAt":7,"severity":3605,"references":3607,"versionKeys":3618,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[3600,3601],"CVE-2025-69223","PYSEC-2026-1101",[154,3601],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[3606],{"type":2209,"score":2316},[3608,3610,3612,3614,3615,3616],{"type":2224,"url":3609},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2213,"url":3611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2218,"url":3613},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":3617},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2325,2326,2327,2328,2329,2330,2331],{"id":155,"slug":3620,"dossier":46,"summary":3621,"aliases":3622,"sourceIds":3625,"published":3626,"modified":3627,"checkedAt":7,"severity":3628,"references":3630,"versionKeys":3647,"packageCount":32,"repositoryCount":550},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[3623,3624],"CVE-2026-54233","PYSEC-2026-3404",[155,3624],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[3629],{"type":2209,"score":2661},[3631,3633,3635,3637,3639,3641,3643,3644,3646],{"type":2224,"url":3632},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2213,"url":3634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":2224,"url":3636},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":2224,"url":3638},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":2213,"url":3640},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2224,"url":3642},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":2221,"url":2395},{"type":2224,"url":3645},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":2221,"url":2391},[2413,2414,2621],{"id":156,"slug":3649,"dossier":46,"summary":3650,"aliases":3651,"sourceIds":3654,"published":3655,"modified":3656,"checkedAt":7,"severity":3657,"references":3659,"versionKeys":3673,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[3652,3653],"CVE-2025-48942","PYSEC-2025-54",[156,3653],"2025-05-28T19:41:53Z","2026-02-04T02:16:15.150519Z",[3658],{"type":2209,"score":2661},[3660,3662,3664,3666,3668,3670,3672],{"type":2257,"url":3661},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":2213,"url":3663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":2492,"url":3665},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":2492,"url":3667},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":2218,"url":3669},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":2224,"url":3671},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":2221,"url":2395},[2621],{"id":157,"slug":3675,"dossier":46,"summary":3676,"aliases":3677,"sourceIds":3680,"published":3681,"modified":3682,"checkedAt":7,"severity":3683,"references":3685,"versionKeys":3696,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3678,3679],"CVE-2024-12720","PYSEC-2026-1982",[157,3679],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3684],{"type":2209,"score":2876},[3686,3688,3690,3691,3693,3694],{"type":2213,"url":3687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2224,"url":3689},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2221,"url":2255},{"type":2224,"url":3692},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2221,"url":2536},{"type":2213,"url":3695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2262],{"id":158,"slug":3698,"dossier":46,"summary":3699,"aliases":3700,"sourceIds":3702,"published":3703,"modified":3704,"checkedAt":7,"severity":3705,"references":3707,"versionKeys":3716,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[3701],"CVE-2026-57585",[158],"2026-06-19T21:42:55Z","2026-07-08T08:26:50.587609817Z",[3706],{"type":2209,"score":2316},[3708,3710,3712,3714],{"type":2224,"url":3709},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":2224,"url":3711},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":2221,"url":3713},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":2224,"url":3715},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[3717,3718,3719],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":159,"slug":3721,"dossier":46,"summary":3722,"aliases":3723,"sourceIds":3726,"published":3727,"modified":3728,"checkedAt":7,"severity":3729,"references":3731,"versionKeys":3764,"packageCount":32,"repositoryCount":569},"ghsa-6wgj-66m2-xxp2-37eb592b","Ray has arbitrary code execution via jobs submission API",[3724,3725],"CVE-2023-48022","PYSEC-2026-517",[159,3725],"2023-11-28T09:30:26Z","2026-07-01T20:23:03.600233Z",[3730],{"type":2209,"score":2835},[3732,3734,3736,3738,3740,3742,3744,3746,3748,3750,3752,3754,3756,3758,3760,3762],{"type":2213,"url":3733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-48022",{"type":2224,"url":3735},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F978947083b1e192dba61ef653c863b11d56b0936",{"type":2224,"url":3737},"https:\u002F\u002Fatlas.mitre.org\u002Fstudies\u002FAML.CS0023",{"type":2224,"url":3739},"https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fray-versions-2-6-3-2-8-0",{"type":2224,"url":3741},"https:\u002F\u002Fconsole.vulncheck.com\u002Fcve\u002FCVE-2023-48022",{"type":2224,"url":3743},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Findex.html",{"type":2224,"url":3745},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Ftoken-auth.html",{"type":2213,"url":3747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xg2h-7cxj-3gvh",{"type":2224,"url":3749},"https:\u002F\u002Fgithub.com\u002Fhonysyang\u002FRay",{"type":2221,"url":3751},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray",{"type":2224,"url":3753},"https:\u002F\u002Fwww.anyscale.com\u002Fblog\u002Fupdate-on-ray-cve-2023-48022-new-verification-tooling-available",{"type":2224,"url":3755},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-attack-ai-workloads-actively-exploited-in-the-wild",{"type":2224,"url":3757},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fshadowray-cve-2023-48022-exploit",{"type":2224,"url":3759},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fthe-story-of-shadowray-cve-2023-48022",{"type":2224,"url":3761},"https:\u002F\u002Fwww.vulncheck.com\u002Fblog\u002Finitial-access-intelligence-august-2024",{"type":2221,"url":3763},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fray",[3765,3766],"pypi:ray@2.45.0","pypi:ray@2.49.1",{"id":160,"slug":3768,"dossier":46,"summary":3769,"aliases":3770,"sourceIds":3773,"published":3774,"modified":3775,"checkedAt":7,"severity":3776,"references":3778,"versionKeys":3816,"packageCount":32,"repositoryCount":569},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[3771,3772],"CVE-2026-27893","PYSEC-2026-2297",[160,3772],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[3777],{"type":2209,"score":2378},[3779,3781,3783,3785,3787,3789,3790,3792,3794,3796,3798,3800,3802,3804,3806,3808,3810,3812,3814],{"type":2213,"url":3780},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":2213,"url":3782},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":2492,"url":3784},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":2218,"url":3786},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":2224,"url":3788},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":2221,"url":2395},{"type":2224,"url":3791},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":2492,"url":3793},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":2224,"url":3795},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":2213,"url":3797},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":2213,"url":3799},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":2213,"url":3801},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":2213,"url":3803},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2213,"url":3805},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2213,"url":3807},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":2213,"url":3809},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":2213,"url":3811},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":2213,"url":3813},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":2213,"url":3815},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[2413,2414],{"id":161,"slug":3818,"dossier":46,"summary":2970,"aliases":3819,"sourceIds":3822,"published":3823,"modified":3824,"checkedAt":7,"severity":3825,"references":3826,"versionKeys":3844,"packageCount":32,"repositoryCount":550},"ghsa-79v4-65xg-pq4g-b911b371",[3820,3821],"CVE-2024-12797","PYSEC-2026-1284",[161,3821],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[3827,3829,3831,3833,3835,3837,3838,3840,3842],{"type":2224,"url":3828},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2213,"url":3830},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2224,"url":3832},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2224,"url":3834},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2224,"url":3836},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2221,"url":2981},{"type":2224,"url":3839},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2221,"url":3841},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2213,"url":3843},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[2985,2986,2987],{"id":162,"slug":3846,"dossier":46,"summary":3847,"aliases":3848,"sourceIds":3851,"published":3852,"modified":3853,"checkedAt":7,"severity":3854,"references":3856,"versionKeys":3873,"packageCount":32,"repositoryCount":2366},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3849,3850],"CVE-2025-62727","PYSEC-2026-1942",[162,3850],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3855],{"type":2209,"score":2316},[3857,3859,3861,3863,3866,3868,3870,3871],{"type":2224,"url":3858},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2213,"url":3860},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2218,"url":3862},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3864,"url":3865},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2221,"url":3867},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2224,"url":3869},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2221,"url":2295},{"type":2213,"url":3872},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2300,2301,3874,3875],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":163,"slug":3877,"dossier":46,"summary":3878,"aliases":3879,"sourceIds":3882,"published":3883,"modified":3884,"checkedAt":7,"severity":3885,"references":3888,"versionKeys":3905,"packageCount":32,"repositoryCount":3294},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3880,3881],"CVE-2026-0994","PYSEC-2026-1805",[163,3881],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3886],{"type":2313,"score":3887},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3889,3891,3893,3895,3897,3899,3901,3903],{"type":2213,"url":3890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2224,"url":3892},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2224,"url":3894},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2224,"url":3896},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2224,"url":3898},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2221,"url":3900},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2221,"url":3902},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2213,"url":3904},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3906,3907,3908,3909,3910,3911,3912,3913,3914],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":164,"slug":3916,"dossier":46,"summary":3917,"aliases":3918,"sourceIds":3921,"published":3922,"modified":3923,"checkedAt":7,"severity":3924,"references":3928,"versionKeys":3943,"packageCount":32,"repositoryCount":550},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[3919,3920],"CVE-2026-54235","PYSEC-2026-3405",[164,3920],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[3925,3927],{"type":2209,"score":3926},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2313,"score":3387},[3929,3931,3933,3935,3937,3939,3941,3942],{"type":2224,"url":3930},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2213,"url":3932},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":2224,"url":3934},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":2224,"url":3936},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":2213,"url":3938},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2224,"url":3940},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2413,2414,2621],{"id":165,"slug":3945,"dossier":46,"summary":3946,"aliases":3947,"sourceIds":3950,"published":3951,"modified":3952,"checkedAt":7,"severity":3953,"references":3956,"versionKeys":3977,"packageCount":32,"repositoryCount":550},"ghsa-7rgv-gqhr-fxg3-3d33cce2","xgrammar vulnerable to DoS via multi-layer nesting",[3948,3949],"CVE-2026-25048","PYSEC-2026-2322",[165,3949],"2026-03-05T16:16:15.853Z","2026-07-13T07:26:24.793294058Z",[3954,3955],{"type":2313,"score":3108},{"type":2209,"score":2316},[3957,3959,3961,3962,3964,3966,3968,3969,3971,3973,3975],{"type":2257,"url":3958},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-7rgv-gqhr-fxg3",{"type":2213,"url":3960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25048",{"type":2221,"url":3170},{"type":2213,"url":3963},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Freleases\u002Ftag\u002Fv0.1.32",{"type":2224,"url":3965},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25048",{"type":2224,"url":3967},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25048.json",{"type":2213,"url":3805},{"type":2213,"url":3970},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5809",{"type":2213,"url":3972},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6761",{"type":2213,"url":3974},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6762",{"type":2492,"url":3976},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444840",[3176,3978,3979],"pypi:xgrammar@0.1.21","pypi:xgrammar@0.1.25",{"id":166,"slug":3981,"dossier":46,"summary":3982,"aliases":3983,"sourceIds":3986,"published":3987,"modified":3988,"checkedAt":7,"severity":3989,"references":3991,"versionKeys":3995,"packageCount":32,"repositoryCount":366},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[3984,3985],"CVE-2026-54283","PYSEC-2026-249",[166,3985],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[3990],{"type":2209,"score":2316},[3992,3994],{"type":2213,"url":3993},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2221,"url":3867},[2299,2300,2301,3874,3875,3996,3997],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":167,"slug":3999,"dossier":46,"summary":4000,"aliases":4001,"sourceIds":4005,"published":4006,"modified":4007,"checkedAt":7,"severity":4008,"references":4010,"versionKeys":4046,"packageCount":32,"repositoryCount":366},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[4002,4003,4004],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[167,4003],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[4009],{"type":2209,"score":2633},[4011,4013,4015,4017,4019,4021,4023,4025,4027,4029,4030,4032,4035,4037,4038,4040,4042,4044],{"type":2213,"url":4012},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2213,"url":4014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2218,"url":4016},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2224,"url":4018},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2227,"url":4020},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2224,"url":4022},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2224,"url":4024},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2224,"url":4026},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2224,"url":4028},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2221,"url":3867},{"type":2224,"url":4031},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":4033,"url":4034},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2224,"url":4036},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2224,"url":3803},{"type":2224,"url":4039},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":2224,"url":4041},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":2227,"url":4043},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2213,"url":4045},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2299,2300,2301,3874,3875,3996,3997],{"id":168,"slug":4048,"dossier":46,"summary":4049,"aliases":4050,"sourceIds":4054,"published":4055,"modified":4056,"checkedAt":7,"severity":4057,"references":4061,"versionKeys":4083,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[4051,4052,4053],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[168,4053],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[4058,4059],{"type":2209,"score":2483},{"type":2313,"score":4060},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4062,4064,4066,4068,4070,4072,4073,4075,4077,4079,4081],{"type":2213,"url":4063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2224,"url":4065},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2224,"url":4067},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2224,"url":4069},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2224,"url":4071},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2221,"url":2499},{"type":2224,"url":4074},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2224,"url":4076},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2224,"url":4078},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2221,"url":4080},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2213,"url":4082},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2511,2512,2513,4084,4085],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":169,"slug":4087,"dossier":46,"summary":4088,"aliases":4089,"sourceIds":4092,"published":4093,"modified":4094,"checkedAt":7,"severity":4095,"references":4098,"versionKeys":4113,"packageCount":32,"repositoryCount":550},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[4090,4091],"CVE-2025-66448","PYSEC-2026-2015",[169,4091],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[4096],{"type":2209,"score":4097},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4099,4101,4103,4105,4107,4109,4111,4112],{"type":2224,"url":4100},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2213,"url":4102},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":2224,"url":4104},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":2224,"url":4106},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":2213,"url":4108},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2224,"url":4110},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2413,2414,2621],{"id":170,"slug":4115,"dossier":46,"summary":4116,"aliases":4117,"sourceIds":4120,"published":4121,"modified":4122,"checkedAt":7,"severity":4123,"references":4126,"versionKeys":4145,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[4118,4119],"CVE-2026-12491","PYSEC-2026-3406",[170,4119],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[4124],{"type":2209,"score":4125},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[4127,4129,4131,4133,4135,4137,4139,4141,4143,4144],{"type":2224,"url":4128},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2213,"url":4130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":2224,"url":4132},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":2224,"url":4134},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":2224,"url":4136},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":2224,"url":4138},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":2213,"url":4140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2224,"url":4142},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2414],{"id":171,"slug":4147,"dossier":46,"summary":4148,"aliases":4149,"sourceIds":4152,"published":4153,"modified":4154,"checkedAt":7,"severity":4155,"references":4158,"versionKeys":4177,"packageCount":32,"repositoryCount":550},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[4150,4151],"CVE-2025-4565","PYSEC-2026-1806",[171,4151],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[4156],{"type":2313,"score":4157},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4159,4161,4163,4165,4167,4168,4170,4172,4174,4175],{"type":2224,"url":4160},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2224,"url":4162},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2213,"url":4164},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2224,"url":4166},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2221,"url":3900},{"type":2224,"url":4169},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2224,"url":4171},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2224,"url":4173},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2221,"url":3902},{"type":2213,"url":4176},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3906,3908,3909],{"id":172,"slug":4179,"dossier":46,"summary":4180,"aliases":4181,"sourceIds":4184,"published":4185,"modified":4186,"checkedAt":7,"severity":4187,"references":4189,"versionKeys":4202,"packageCount":32,"repositoryCount":569},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4182,4183],"CVE-2025-5197","PYSEC-2026-1983",[172,4183],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[4188],{"type":2209,"score":2876},[4190,4192,4194,4196,4197,4199,4200],{"type":2213,"url":4191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2224,"url":4193},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2224,"url":4195},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2221,"url":2255},{"type":2224,"url":4198},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2221,"url":2536},{"type":2213,"url":4201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2262,2263],{"id":173,"slug":4204,"dossier":46,"summary":4205,"aliases":4206,"sourceIds":4209,"published":4210,"modified":4211,"checkedAt":7,"severity":4212,"references":4215,"versionKeys":4239,"packageCount":32,"repositoryCount":550},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[4207,4208],"CVE-2026-48746","PYSEC-2026-226",[173,4208],"2026-06-16T17:36:41Z","2026-07-17T16:30:30.589294814Z",[4213],{"type":2209,"score":4214},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[4216,4218,4220,4222,4224,4226,4227,4228,4230,4232,4234,4235,4237],{"type":2213,"url":4217},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":2213,"url":4219},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":2492,"url":4221},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":2224,"url":4223},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2224,"url":4225},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2224,"url":2672},{"type":2224,"url":2674},{"type":2224,"url":4229},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":2224,"url":4231},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":2224,"url":4233},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":2221,"url":2395},{"type":2224,"url":4236},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":2213,"url":4238},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",[2413,2414,2621],{"id":174,"slug":4241,"dossier":46,"summary":4242,"aliases":4243,"sourceIds":4246,"published":4247,"modified":4248,"checkedAt":7,"severity":4249,"references":4252,"versionKeys":4263,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[4244,4245],"CVE-2025-53643","PYSEC-2026-1104",[174,4245],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[4250],{"type":2313,"score":4251},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4253,4255,4257,4259,4260,4261],{"type":2224,"url":4254},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2213,"url":4256},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2218,"url":4258},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":4262},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2325,2326,2327,2328],{"id":175,"slug":4265,"dossier":46,"summary":4266,"aliases":4267,"sourceIds":4270,"published":4271,"modified":4272,"checkedAt":7,"severity":4273,"references":4277,"versionKeys":4286,"packageCount":32,"repositoryCount":2333},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[4268,4269],"CVE-2026-34518","PYSEC-2026-2100",[175,4269],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[4274,4276],{"type":2209,"score":4275},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2313,"score":3049},[4278,4280,4282,4284,4285],{"type":2218,"url":4279},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2213,"url":4281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2218,"url":4283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":176,"slug":4288,"dossier":46,"summary":4289,"aliases":4290,"sourceIds":4293,"published":4294,"modified":4295,"checkedAt":7,"severity":4296,"references":4300,"versionKeys":4319,"packageCount":32,"repositoryCount":550},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[4291,4292],"CVE-2026-9540","PYSEC-2026-3407",[176,4292],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[4297,4298],{"type":2209,"score":2280},{"type":2313,"score":4299},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4301,4303,4305,4307,4308,4310,4312,4314,4316,4317],{"type":2213,"url":4302},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":2224,"url":4304},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":2224,"url":4306},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":2221,"url":2395},{"type":2224,"url":4309},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":2224,"url":4311},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":2224,"url":4313},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":2224,"url":4315},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":2221,"url":2391},{"type":2213,"url":4318},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[2413,2414,2621],{"id":177,"slug":4321,"dossier":46,"summary":4322,"aliases":4323,"sourceIds":4326,"published":4327,"modified":4328,"checkedAt":7,"severity":4329,"references":4331,"versionKeys":4343,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[4324,4325],"CVE-2025-48943","PYSEC-2025-55",[177,4325],"2025-05-28T19:42:12Z","2026-02-04T02:59:05.360205Z",[4330],{"type":2209,"score":2661},[4332,4334,4336,4338,4339,4340,4342],{"type":2213,"url":4333},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":2213,"url":4335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":2492,"url":4337},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":2492,"url":3667},{"type":2218,"url":3669},{"type":2224,"url":4341},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":2221,"url":2395},[2621],{"id":178,"slug":4345,"dossier":46,"summary":4346,"aliases":4347,"sourceIds":4350,"published":4351,"modified":4352,"checkedAt":7,"severity":4353,"references":4356,"versionKeys":4375,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4348,4349],"CVE-2024-47081","PYSEC-2026-1872",[178,4349],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[4354],{"type":2209,"score":4355},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4357,4359,4361,4363,4365,4367,4369,4371,4373],{"type":2224,"url":4358},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2213,"url":4360},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2224,"url":4362},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2218,"url":4364},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2221,"url":4366},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2224,"url":4368},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2224,"url":4370},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2221,"url":4372},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2213,"url":4374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[4376,4377],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":179,"slug":4379,"dossier":46,"summary":4380,"aliases":4381,"sourceIds":4384,"published":4385,"modified":4386,"checkedAt":7,"severity":4387,"references":4390,"versionKeys":4405,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[4382,4383],"CVE-2025-30165","PYSEC-2026-2017",[179,4383],"2025-05-06T16:38:35Z","2026-07-17T16:30:32.007556436Z",[4388],{"type":2209,"score":4389},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4391,4393,4395,4397,4399,4400,4402,4404],{"type":2224,"url":4392},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2213,"url":4394},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":2213,"url":4396},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2224,"url":4398},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":2221,"url":2395},{"type":2224,"url":4401},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":2224,"url":4403},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":2221,"url":2391},[2621],{"id":180,"slug":4407,"dossier":46,"summary":4408,"aliases":4409,"sourceIds":4412,"published":4413,"modified":4414,"checkedAt":7,"severity":4415,"references":4418,"versionKeys":4435,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4410,4411],"CVE-2024-35195","PYSEC-2026-1873",[180,4411],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[4416],{"type":2209,"score":4417},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4419,4421,4423,4425,4427,4428,4430,4432,4433],{"type":2224,"url":4420},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2213,"url":4422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2224,"url":4424},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2218,"url":4426},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2221,"url":4366},{"type":2224,"url":4429},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2224,"url":4431},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2221,"url":4372},{"type":2213,"url":4434},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4376],{"id":181,"slug":4437,"dossier":46,"summary":4438,"aliases":4439,"sourceIds":4442,"published":4443,"modified":4444,"checkedAt":7,"severity":4445,"references":4449,"versionKeys":4455,"packageCount":32,"repositoryCount":2333},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[4440,4441],"CVE-2026-54280","PYSEC-2026-2113",[181,4441],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[4446,4448],{"type":2313,"score":4447},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2209,"score":2316},[4450,4452,4454],{"type":2213,"url":4451},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2218,"url":4453},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2221,"url":2321},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":182,"slug":4457,"dossier":46,"summary":4458,"aliases":4459,"sourceIds":4462,"published":4463,"modified":4464,"checkedAt":7,"severity":4465,"references":4468,"versionKeys":4478,"packageCount":32,"repositoryCount":2366},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[4460,4461],"CVE-2026-44660","PYSEC-2026-2293",[182,4461],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[4466,4467],{"type":2209,"score":2316},{"type":2313,"score":3108},[4469,4471,4473,4475,4476],{"type":2218,"url":4470},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":2213,"url":4472},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":2218,"url":4474},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":2221,"url":2644},{"type":2213,"url":4477},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[2648,2649],{"id":183,"slug":4480,"dossier":46,"summary":4481,"aliases":4482,"sourceIds":4485,"published":4486,"modified":4487,"checkedAt":7,"severity":4488,"references":4492,"versionKeys":4503,"packageCount":32,"repositoryCount":2333},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[4483,4484],"CVE-2026-34525","PYSEC-2026-2103",[183,4484],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[4489,4491],{"type":2313,"score":4490},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2209,"score":2428},[4493,4495,4497,4499,4501,4502],{"type":2218,"url":4494},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2213,"url":4496},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2218,"url":4498},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2218,"url":4500},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":184,"slug":4505,"dossier":46,"summary":4506,"aliases":4507,"sourceIds":4510,"published":4511,"modified":4512,"checkedAt":7,"severity":4513,"references":4516,"versionKeys":4528,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[4508,4509],"CVE-2025-46722","PYSEC-2025-43",[184,4509],"2025-05-28T18:03:41Z","2026-02-04T03:00:21.842092Z",[4514],{"type":2209,"score":4515},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[4517,4519,4521,4523,4525,4527],{"type":2213,"url":4518},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":2213,"url":4520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":2224,"url":4522},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":2218,"url":4524},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":2224,"url":4526},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":2221,"url":2395},[2621],{"id":185,"slug":4530,"dossier":46,"summary":4531,"aliases":4532,"sourceIds":4536,"published":4537,"modified":4538,"checkedAt":7,"severity":4539,"references":4544,"versionKeys":4560,"packageCount":32,"repositoryCount":569},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4533,4534,4535],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[185],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4540,4542],{"type":2209,"score":4541},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2313,"score":4543},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4545,4547,4549,4551,4552,4554,4556,4558],{"type":2213,"url":4546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2224,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2224,"url":4550},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2221,"url":2499},{"type":2224,"url":4553},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2224,"url":4555},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2224,"url":4557},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2224,"url":4559},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2511,2512],{"id":186,"slug":4562,"dossier":46,"summary":4563,"aliases":4564,"sourceIds":4567,"published":4568,"modified":4569,"checkedAt":7,"severity":4570,"references":4572,"versionKeys":4588,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[4565,4566],"CVE-2026-32875","PYSEC-2026-2292",[186,4566],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[4571],{"type":2209,"score":2316},[4573,4575,4577,4579,4581,4582,4584,4586],{"type":2257,"url":4574},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":2213,"url":4576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":2492,"url":4578},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":2218,"url":4580},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":2221,"url":2644},{"type":2224,"url":4583},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":2224,"url":4585},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":2492,"url":4587},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[2648],{"id":187,"slug":4590,"dossier":46,"summary":4591,"aliases":4592,"sourceIds":4596,"published":4597,"modified":4598,"checkedAt":7,"severity":4599,"references":4603,"versionKeys":4640,"packageCount":32,"repositoryCount":4644},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4593,4594,4595],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[187,4595],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4600,4602],{"type":2313,"score":4601},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2209,"score":2316},[4604,4606,4608,4610,4612,4614,4615,4617,4619,4621,4623,4625,4627,4629,4630,4632,4633,4634,4636,4638],{"type":2224,"url":4605},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2213,"url":4607},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2224,"url":4609},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2224,"url":4611},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2224,"url":4613},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2221,"url":3285},{"type":2224,"url":4616},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2224,"url":4618},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2224,"url":4620},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2213,"url":4622},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2213,"url":4624},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2213,"url":4626},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2213,"url":4628},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2213,"url":3815},{"type":2213,"url":4631},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2213,"url":2863},{"type":2213,"url":2411},{"type":2213,"url":4635},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2213,"url":4637},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2213,"url":4639},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4641,4642,4643,3289,3290,3291,3292],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":188,"slug":4646,"dossier":46,"summary":4647,"aliases":4648,"sourceIds":4651,"published":4652,"modified":4653,"checkedAt":7,"severity":4654,"references":4657,"versionKeys":4674,"packageCount":32,"repositoryCount":569},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4649,4650],"CVE-2025-27516","PYSEC-2026-1471",[188,4650],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4655],{"type":2313,"score":4656},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4658,4660,4662,4664,4666,4668,4670,4672],{"type":2224,"url":4659},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2213,"url":4661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2218,"url":4663},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2221,"url":4665},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2224,"url":4667},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2224,"url":4669},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2221,"url":4671},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2213,"url":4673},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4675,4676],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":189,"slug":4678,"dossier":46,"summary":4679,"aliases":4680,"sourceIds":4684,"published":4685,"modified":4686,"checkedAt":7,"severity":4687,"references":4691,"versionKeys":4707,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4681,4682,4683],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[189,4683],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4688,4689],{"type":2209,"score":2378},{"type":2313,"score":4690},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4692,4694,4696,4698,4699,4701,4703,4705],{"type":2213,"url":4693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2224,"url":4695},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2224,"url":4697},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2221,"url":3234},{"type":2224,"url":4700},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2224,"url":4702},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2221,"url":4704},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2213,"url":4706},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3240],{"id":190,"slug":4709,"dossier":46,"summary":4710,"aliases":4711,"sourceIds":4715,"published":4716,"modified":4717,"checkedAt":7,"severity":4718,"references":4723,"versionKeys":4741,"packageCount":32,"repositoryCount":569},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[4712,4713,4714],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[190],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[4719,4721],{"type":2209,"score":4720},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2313,"score":4722},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4724,4726,4728,4730,4732,4734,4735,4737,4739],{"type":2213,"url":4725},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2224,"url":4727},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2224,"url":4729},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2224,"url":4731},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2224,"url":4733},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2221,"url":2499},{"type":2224,"url":4736},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2224,"url":4738},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2224,"url":4740},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2511,2512],{"id":191,"slug":4743,"dossier":46,"summary":4744,"aliases":4745,"sourceIds":4748,"published":4749,"modified":4750,"checkedAt":7,"severity":4751,"references":4755,"versionKeys":4766,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[4746,4747],"CVE-2024-47874","PYSEC-2026-1943",[191,4747],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[4752,4754],{"type":2209,"score":4753},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2313,"score":3108},[4756,4758,4760,4762,4763,4764],{"type":2224,"url":4757},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2213,"url":4759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2218,"url":4761},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2221,"url":2289},{"type":2221,"url":2295},{"type":2213,"url":4765},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2299],{"id":192,"slug":4768,"dossier":46,"summary":4769,"aliases":4770,"sourceIds":4773,"published":4774,"modified":4775,"checkedAt":7,"severity":4776,"references":4781,"versionKeys":4800,"packageCount":32,"repositoryCount":366},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[4771,4772],"CVE-2026-5241","PYSEC-2026-2290",[192,4772],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[4777,4779],{"type":2209,"score":4778},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2209,"score":4780},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4782,4784,4786,4788,4789,4791,4793,4794,4796,4798],{"type":2213,"url":4783},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2218,"url":4785},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2213,"url":4787},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2213,"url":3803},{"type":2224,"url":4790},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2492,"url":4792},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2221,"url":2255},{"type":2224,"url":4795},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2257,"url":4797},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2224,"url":4799},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[2262,2263,2264,2265,2266,2267,2268],{"id":193,"slug":4802,"dossier":46,"summary":4803,"aliases":4804,"sourceIds":4807,"published":4808,"modified":4809,"checkedAt":7,"severity":4810,"references":4813,"versionKeys":4826,"packageCount":32,"repositoryCount":32},"ghsa-fh2c-86xm-pm2x-ff1ac9ef","LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request",[4805,4806],"CVE-2024-8984","PYSEC-2026-1545",[193,4806],"2025-03-20T12:32:49Z","2026-07-07T17:56:56.562714379Z",[4811],{"type":2209,"score":4812},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4814,4816,4818,4819,4821,4823,4824],{"type":2213,"url":4815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8984",{"type":2224,"url":4817},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61",{"type":2221,"url":2914},{"type":2224,"url":4820},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fblob\u002F8c5ff150f6142608ffe968e4e68429f978fda187\u002Flitellm\u002Ftests\u002Ftest_spend_logs.py#L242",{"type":2224,"url":4822},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F554fc76b-3097-4223-b4cf-110b853e9355",{"type":2221,"url":2922},{"type":2213,"url":4825},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh2c-86xm-pm2x",[2926],{"id":194,"slug":4828,"dossier":46,"summary":4829,"aliases":4830,"sourceIds":4833,"published":4834,"modified":4835,"checkedAt":7,"severity":4836,"references":4839,"versionKeys":4850,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[4831,4832],"CVE-2025-69230","PYSEC-2026-1105",[194,4832],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[4837],{"type":2313,"score":4838},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4840,4842,4844,4846,4847,4848],{"type":2224,"url":4841},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2213,"url":4843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2218,"url":4845},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":4849},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2325,2326,2327,2328,2329,2330,2331],{"id":195,"slug":4852,"dossier":46,"summary":4853,"aliases":4854,"sourceIds":4857,"published":4858,"modified":4859,"checkedAt":7,"severity":4860,"references":4863,"versionKeys":4874,"packageCount":32,"repositoryCount":32},"ghsa-fjcf-3j3r-78rp-3506a50a","LiteLLM Has an Improper Authorization Vulnerability",[4855,4856],"CVE-2025-0628","PYSEC-2026-1546",[195,4856],"2025-03-20T12:32:52Z","2026-07-07T17:56:36.033233141Z",[4861],{"type":2209,"score":4862},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4864,4866,4868,4869,4871,4872],{"type":2213,"url":4865},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-0628",{"type":2224,"url":4867},"https:\u002F\u002Fgithub.com\u002Fberriai\u002Flitellm\u002Fcommit\u002F566d9354aab4215091b2e51ad0333e948125fa1b",{"type":2221,"url":2914},{"type":2224,"url":4870},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6c0e2f75-2d03-42f9-9530-e16a973317fc",{"type":2221,"url":2922},{"type":2213,"url":4873},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjcf-3j3r-78rp",[2926],{"id":196,"slug":4876,"dossier":46,"summary":4877,"aliases":4878,"sourceIds":4881,"published":4882,"modified":4883,"checkedAt":7,"severity":4884,"references":4886,"versionKeys":4899,"packageCount":32,"repositoryCount":550},"ghsa-fjrm-76x2-c4q4-c21dcb99","JWCrypto: JWE ZIP decompression bomb",[4879,4880],"CVE-2026-39373","PYSEC-2026-70",[196,4880],"2026-04-07T20:16:32.133Z","2026-06-06T00:30:08.711138560Z",[4885],{"type":2209,"score":2280},[4887,4889,4891,4893,4895,4897],{"type":2257,"url":4888},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fsecurity\u002Fadvisories\u002FGHSA-fjrm-76x2-c4q4",{"type":2213,"url":4890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39373",{"type":2224,"url":4892},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fcommit\u002F25db861d8b29434838669a94a843af03d29ea6ed",{"type":2221,"url":4894},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto",{"type":2224,"url":4896},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Freleases\u002Ftag\u002Fv1.5.7",{"type":2224,"url":4898},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjwcrypto\u002FPYSEC-2026-70.yaml",[4900],"pypi:jwcrypto@1.5.6",{"id":197,"slug":4902,"dossier":46,"summary":3676,"aliases":4903,"sourceIds":4906,"published":4907,"modified":4908,"checkedAt":7,"severity":4909,"references":4912,"versionKeys":4923,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[4904,4905],"CVE-2025-1194","PYSEC-2026-1984",[197,4905],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[4910],{"type":2209,"score":4911},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4913,4915,4917,4918,4920,4921],{"type":2213,"url":4914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2224,"url":4916},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2221,"url":2255},{"type":2224,"url":4919},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2221,"url":2536},{"type":2213,"url":4922},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2262],{"id":198,"slug":4925,"dossier":46,"summary":4926,"aliases":4927,"sourceIds":4930,"published":4931,"modified":4932,"checkedAt":7,"severity":4933,"references":4936,"versionKeys":4942,"packageCount":32,"repositoryCount":2333},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[4928,4929],"CVE-2026-54278","PYSEC-2026-2111",[198,4929],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[4934,4935],{"type":2313,"score":2772},{"type":2209,"score":2316},[4937,4939,4940],{"type":2213,"url":4938},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2221,"url":2321},{"type":2218,"url":4941},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2325,2326,2327,2328,2329,2330,2331,2332],{"id":199,"slug":4944,"dossier":46,"summary":4945,"aliases":4946,"sourceIds":4949,"published":4950,"modified":4951,"checkedAt":7,"severity":4952,"references":4955,"versionKeys":4974,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[4947,4948],"CVE-2024-34062","PYSEC-2026-1976",[199,4948],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[4953],{"type":2209,"score":4954},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4956,4958,4960,4962,4964,4966,4968,4970,4972],{"type":2224,"url":4957},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2213,"url":4959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2224,"url":4961},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2221,"url":4963},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2224,"url":4965},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2224,"url":4967},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2224,"url":4969},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2221,"url":4971},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2213,"url":4973},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[4975],"pypi:tqdm@4.66.2",{"id":200,"slug":4977,"dossier":46,"summary":4978,"aliases":4979,"sourceIds":4982,"published":4983,"modified":4984,"checkedAt":7,"severity":4985,"references":4987,"versionKeys":5000,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[4980,4981],"CVE-2025-69229","PYSEC-2026-1106",[200,4981],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[4986],{"type":2313,"score":2772},[4988,4990,4992,4994,4996,4997,4998],{"type":2224,"url":4989},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2213,"url":4991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2224,"url":4993},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2224,"url":4995},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":4999},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2325,2326,2327,2328,2329,2330,2331],{"id":201,"slug":5002,"dossier":91,"summary":5003,"aliases":5004,"sourceIds":5007,"published":5008,"modified":5009,"checkedAt":7,"severity":5010,"references":5015,"versionKeys":5025,"packageCount":32,"repositoryCount":471},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[5005,5006],"CVE-2026-25645","PYSEC-2026-2275",[201,5006],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[5011,5013],{"type":2209,"score":5012},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2209,"score":5014},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5016,5018,5020,5022,5023],{"type":2213,"url":5017},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2213,"url":5019},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2218,"url":5021},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2221,"url":4366},{"type":2213,"url":5024},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4376,4377,5026,5027],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":202,"slug":5029,"dossier":91,"summary":5030,"aliases":5031,"sourceIds":5034,"published":5035,"modified":5036,"checkedAt":7,"severity":5037,"references":5039,"versionKeys":5050,"packageCount":32,"repositoryCount":103},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[5032,5033],"CVE-2025-66418","PYSEC-2026-1998",[202,5033],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[5038],{"type":2313,"score":2451},[5040,5042,5044,5046,5047,5048],{"type":2224,"url":5041},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2213,"url":5043},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2218,"url":5045},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2221,"url":2460},{"type":2221,"url":2462},{"type":2213,"url":5049},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2466,2467,2468,2469,2470],{"id":203,"slug":5052,"dossier":46,"summary":5053,"aliases":5054,"sourceIds":5057,"published":5058,"modified":5059,"checkedAt":7,"severity":5060,"references":5063,"versionKeys":5078,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[5055,5056],"CVE-2024-56201","PYSEC-2026-1472",[203,5056],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[5061,5062],{"type":2209,"score":3221},{"type":2313,"score":4656},[5064,5066,5068,5070,5072,5073,5075,5076],{"type":2224,"url":5065},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2213,"url":5067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2224,"url":5069},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2218,"url":5071},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2221,"url":4665},{"type":2224,"url":5074},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2221,"url":4671},{"type":2213,"url":5077},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4675],{"id":204,"slug":5080,"dossier":46,"summary":5081,"aliases":5082,"sourceIds":5085,"published":5086,"modified":5087,"checkedAt":7,"severity":5088,"references":5091,"versionKeys":5103,"packageCount":32,"repositoryCount":550},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[5083,5084],"CVE-2026-22773","PYSEC-2026-143",[204,5084],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[5089,5090],{"type":2209,"score":2661},{"type":2209,"score":2316},[5092,5094,5096,5098,5100,5102],{"type":2257,"url":5093},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":2213,"url":5095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":2224,"url":5097},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":2224,"url":5099},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":2224,"url":5101},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":2221,"url":2395},[2413,2414,2621],{"id":205,"slug":5105,"dossier":46,"summary":5106,"aliases":5107,"sourceIds":5110,"published":5111,"modified":5112,"checkedAt":7,"severity":5113,"references":5115,"versionKeys":5136,"packageCount":32,"repositoryCount":550},"ghsa-gx77-xgc2-4888-18e94d17","Ray's New Token Authentication is Disabled By Default",[5108,5109],"CVE-2025-34351","PYSEC-2026-518",[205,5109],"2025-11-27T03:30:26Z","2026-07-01T20:23:03.614509Z",[5114],{"type":2313,"score":3025},[5116,5118,5120,5121,5122,5124,5126,5128,5130,5131,5133,5134],{"type":2224,"url":5117},"https:\u002F\u002Fgithub.com\u002FJLLeitschuh\u002Fsecurity-research\u002Fsecurity\u002Fadvisories\u002FGHSA-w8vc-465m-jjw6",{"type":2213,"url":5119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-34351",{"type":2224,"url":3745},{"type":2221,"url":3751},{"type":2224,"url":5123},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.52.0",{"type":2224,"url":5125},"https:\u002F\u002Fwww.cve.org\u002Fresourcessupport\u002Fallresources\u002Fcnarules#section_4-1_Vulnerability_Determination",{"type":2224,"url":5127},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fjonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE",{"type":2224,"url":5129},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet",{"type":2224,"url":3755},{"type":2224,"url":5132},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fanyscale-ray-token-authentication-disabled-by-default-insecure-configuration",{"type":2221,"url":3763},{"type":2213,"url":5135},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gx77-xgc2-4888",[3765,3766,5137],"pypi:ray@2.50.1",{"id":206,"slug":5139,"dossier":46,"summary":5140,"aliases":5141,"sourceIds":5142,"published":5143,"modified":5144,"checkedAt":7,"severity":5145,"references":5146,"versionKeys":5152,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[206],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[5147,5149,5150],{"type":2224,"url":5148},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2221,"url":2981},{"type":2224,"url":5151},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[2985],{"id":207,"slug":5154,"dossier":46,"summary":5155,"aliases":5156,"sourceIds":5159,"published":5160,"modified":5161,"checkedAt":7,"severity":5162,"references":5165,"versionKeys":5186,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[5157,5158],"CVE-2024-34064","PYSEC-2026-1474",[207,5158],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[5163],{"type":2209,"score":5164},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5166,5168,5170,5172,5173,5175,5177,5179,5181,5183,5184],{"type":2224,"url":5167},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2213,"url":5169},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2218,"url":5171},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2221,"url":4665},{"type":2224,"url":5174},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2224,"url":5176},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2224,"url":5178},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2224,"url":5180},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2224,"url":5182},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2221,"url":4671},{"type":2213,"url":5185},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4675],{"id":208,"slug":5188,"dossier":46,"summary":5189,"aliases":5190,"sourceIds":5193,"published":5194,"modified":5195,"checkedAt":7,"severity":5196,"references":5199,"versionKeys":5208,"packageCount":32,"repositoryCount":2333},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[5191,5192],"CVE-2026-34513","PYSEC-2026-2095",[208,5192],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[5197,5198],{"type":2313,"score":2696},{"type":2209,"score":2316},[5200,5202,5204,5206,5207],{"type":2218,"url":5201},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2213,"url":5203},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2218,"url":5205},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":209,"slug":5210,"dossier":46,"summary":5211,"aliases":5212,"sourceIds":5215,"published":5216,"modified":5217,"checkedAt":7,"severity":5218,"references":5222,"versionKeys":5230,"packageCount":32,"repositoryCount":2333},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[5213,5214],"CVE-2026-47265","PYSEC-2026-2105",[209,5214],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[5219,5221],{"type":2313,"score":5220},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2209,"score":3188},[5223,5225,5227,5229],{"type":2218,"url":5224},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2213,"url":5226},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2218,"url":5228},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2221,"url":2321},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":210,"slug":5232,"dossier":46,"summary":5233,"aliases":5234,"sourceIds":5237,"published":5238,"modified":5239,"checkedAt":7,"severity":5240,"references":5242,"versionKeys":5257,"packageCount":32,"repositoryCount":550},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[5235,5236],"CVE-2026-54236","PYSEC-2026-3408",[210,5236],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[5241],{"type":2209,"score":4275},[5243,5245,5247,5249,5251,5253,5255,5256],{"type":2224,"url":5244},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2213,"url":5246},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":2224,"url":5248},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":2224,"url":5250},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":2213,"url":5252},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2224,"url":5254},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2413,2414,2621],{"id":211,"slug":5259,"dossier":46,"summary":5260,"aliases":5261,"sourceIds":5264,"published":5265,"modified":5266,"checkedAt":7,"severity":5267,"references":5272,"versionKeys":5278,"packageCount":32,"repositoryCount":2333},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[5262,5263],"CVE-2026-54276","PYSEC-2026-2109",[211,5263],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[5268,5270],{"type":2313,"score":5269},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2209,"score":5271},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[5273,5275,5277],{"type":2213,"url":5274},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2218,"url":5276},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2221,"url":2321},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":212,"slug":5280,"dossier":46,"summary":5281,"aliases":5282,"sourceIds":5285,"published":5286,"modified":5287,"checkedAt":7,"severity":5288,"references":5290,"versionKeys":5303,"packageCount":32,"repositoryCount":550},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[5283,5284],"CVE-2026-44222","PYSEC-2026-3409",[212,5284],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[5289],{"type":2209,"score":2661},[5291,5293,5295,5297,5299,5301,5302],{"type":2224,"url":5292},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2213,"url":5294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":2224,"url":5296},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":2213,"url":5298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2224,"url":5300},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2413,2414,2621],{"id":213,"slug":5305,"dossier":46,"summary":5306,"aliases":5307,"sourceIds":5310,"published":5311,"modified":5312,"checkedAt":7,"severity":5313,"references":5317,"versionKeys":5333,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[5308,5309],"CVE-2024-11394","PYSEC-2024-229",[213,5309],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[5314,5316],{"type":2209,"score":5315},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2209,"score":2378},[5318,5320,5322,5324,5325,5327,5329,5331],{"type":2213,"url":5319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2224,"url":5321},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2224,"url":5323},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2221,"url":2255},{"type":2224,"url":5326},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2224,"url":5328},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2213,"url":5330},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2213,"url":5332},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2262],{"id":214,"slug":5335,"dossier":46,"summary":5336,"aliases":5337,"sourceIds":5339,"published":5340,"modified":5341,"checkedAt":7,"severity":5342,"references":5345,"versionKeys":5353,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[5338],"CVE-2025-71379",[214],"2025-05-28T17:50:06Z","2026-07-08T07:35:38.046987158Z",[5343],{"type":2209,"score":5344},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5346,5348,5350,5352],{"type":2224,"url":5347},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":2224,"url":5349},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":2224,"url":5351},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":2221,"url":2395},[2621],{"id":215,"slug":5355,"dossier":46,"summary":5356,"aliases":5357,"sourceIds":5360,"published":5361,"modified":5362,"checkedAt":7,"severity":5363,"references":5368,"versionKeys":5385,"packageCount":32,"repositoryCount":2333},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[5358,5359],"CVE-2026-34993","PYSEC-2026-2104",[215,5359],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[5364,5366],{"type":2209,"score":5365},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2209,"score":5367},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5369,5371,5373,5375,5376,5378,5380,5381,5382,5383],{"type":2218,"url":5370},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2213,"url":5372},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2218,"url":5374},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2221,"url":2321},{"type":2224,"url":5377},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2224,"url":5379},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2213,"url":3805},{"type":2213,"url":4787},{"type":2213,"url":3803},{"type":2492,"url":5384},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2325,2326,2327,2328,2329,2330,2331,2332],{"id":216,"slug":5387,"dossier":46,"summary":5388,"aliases":5389,"sourceIds":5392,"published":5393,"modified":5394,"checkedAt":7,"severity":5395,"references":5397,"versionKeys":5408,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[5390,5391],"CVE-2025-69227","PYSEC-2026-1107",[216,5391],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[5396],{"type":2313,"score":2772},[5398,5400,5402,5404,5405,5406],{"type":2224,"url":5399},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2213,"url":5401},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2224,"url":5403},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":5407},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2325,2326,2327,2328,2329,2330,2331],{"id":217,"slug":5410,"dossier":46,"summary":5411,"aliases":5412,"sourceIds":5415,"published":5416,"modified":5417,"checkedAt":7,"severity":5418,"references":5421,"versionKeys":5430,"packageCount":32,"repositoryCount":34},"ghsa-jjhc-v7c2-5hh6-5d2c89e6","LiteLLM: Authentication bypass via OIDC userinfo cache key collision",[5413,5414],"CVE-2026-35030","PYSEC-2026-390",[217,5414],"2026-04-03T21:59:50Z","2026-07-01T20:22:56.400828Z",[5419],{"type":2313,"score":5420},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[5422,5424,5426,5427,5428],{"type":2224,"url":5423},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",{"type":2213,"url":5425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35030",{"type":2221,"url":2914},{"type":2221,"url":2922},{"type":2213,"url":5429},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",[2926,2927,2928,2929],{"id":218,"slug":5432,"dossier":46,"summary":5433,"aliases":5434,"sourceIds":5437,"published":5438,"modified":5439,"checkedAt":7,"severity":5440,"references":5442,"versionKeys":5455,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[5435,5436],"CVE-2025-3264","PYSEC-2026-1985",[218,5436],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[5441],{"type":2209,"score":2876},[5443,5445,5447,5449,5450,5452,5453],{"type":2213,"url":5444},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2224,"url":5446},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2224,"url":5448},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2221,"url":2255},{"type":2224,"url":5451},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2221,"url":2536},{"type":2213,"url":5454},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2262],{"id":219,"slug":5457,"dossier":46,"summary":5458,"aliases":5459,"sourceIds":5462,"published":5463,"modified":5464,"checkedAt":7,"severity":5465,"references":5468,"versionKeys":5476,"packageCount":32,"repositoryCount":366},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[5460,5461],"CVE-2026-54282","PYSEC-2026-248",[219,5461],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[5466,5467],{"type":2209,"score":3585},{"type":2209,"score":2428},[5469,5471,5473,5474],{"type":2213,"url":5470},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2213,"url":5472},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2221,"url":3867},{"type":2224,"url":5475},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2299,2300,2301,3874,3875,3996,3997],{"id":220,"slug":5478,"dossier":46,"summary":5479,"aliases":5480,"sourceIds":5483,"published":5484,"modified":5485,"checkedAt":7,"severity":5486,"references":5489,"versionKeys":5503,"packageCount":32,"repositoryCount":65},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[5481,5482],"CVE-2026-30922","PYSEC-2026-2263",[220,5482],"2026-03-17T16:17:33Z","2026-07-13T07:26:46.403932690Z",[5487,5488],{"type":2209,"score":4812},{"type":2209,"score":2316},[5490,5492,5494,5496,5498,5499,5501],{"type":2257,"url":5491},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2213,"url":5493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2218,"url":5495},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2224,"url":5497},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2221,"url":3362},{"type":2224,"url":5500},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.3",{"type":2224,"url":5502},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[3374],{"id":221,"slug":5505,"dossier":46,"summary":5506,"aliases":5507,"sourceIds":5510,"published":5511,"modified":5512,"checkedAt":7,"severity":5513,"references":5518,"versionKeys":5527,"packageCount":32,"repositoryCount":2333},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[5508,5509],"CVE-2026-34516","PYSEC-2026-2098",[221,5509],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[5514,5515,5516],{"type":2209,"score":2316},{"type":2313,"score":2772},{"type":2313,"score":5517},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5519,5521,5523,5525,5526],{"type":2218,"url":5520},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2213,"url":5522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2218,"url":5524},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":222,"slug":5529,"dossier":46,"summary":5530,"aliases":5531,"sourceIds":5534,"published":5535,"modified":5536,"checkedAt":7,"severity":5537,"references":5540,"versionKeys":5546,"packageCount":32,"repositoryCount":2333},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[5532,5533],"CVE-2026-50269","PYSEC-2026-2106",[222,5533],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[5538,5539],{"type":2313,"score":2426},{"type":2209,"score":2316},[5541,5543,5545],{"type":2213,"url":5542},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2218,"url":5544},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2221,"url":2321},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":223,"slug":5548,"dossier":46,"summary":5549,"aliases":5550,"sourceIds":5553,"published":5554,"modified":5555,"checkedAt":7,"severity":5556,"references":5560,"versionKeys":5568,"packageCount":32,"repositoryCount":65},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[5551,5552],"CVE-2026-34073","PYSEC-2026-35",[223,5552],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[5557,5558],{"type":2209,"score":2428},{"type":2313,"score":5559},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5561,5563,5565,5566],{"type":2213,"url":5562},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2213,"url":5564},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2221,"url":2981},{"type":2224,"url":5567},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[2985,2986,2987,2988,2989,2990],{"id":224,"slug":5570,"dossier":46,"summary":5571,"aliases":5572,"sourceIds":5575,"published":5576,"modified":5577,"checkedAt":7,"severity":5578,"references":5581,"versionKeys":5589,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[5573,5574],"CVE-2026-56340","PYSEC-2026-250",[224,5574],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[5579,5580],{"type":2209,"score":3221},{"type":2209,"score":2316},[5582,5584,5586,5587],{"type":2213,"url":5583},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":2224,"url":5585},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":2221,"url":2395},{"type":2213,"url":5588},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[2414],{"id":225,"slug":5591,"dossier":46,"summary":5592,"aliases":5593,"sourceIds":5596,"published":5597,"modified":5598,"checkedAt":7,"severity":5599,"references":5602,"versionKeys":5610,"packageCount":32,"repositoryCount":550},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[5594,5595],"CVE-2026-44432","PYSEC-2026-142",[225,5595],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[5600,5601],{"type":2209,"score":2316},{"type":2313,"score":2451},[5603,5605,5607,5609],{"type":2213,"url":5604},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2213,"url":5606},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2224,"url":5608},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2221,"url":2460},[5611],"pypi:urllib3@2.6.3",{"id":226,"slug":5613,"dossier":46,"summary":5614,"aliases":5615,"sourceIds":5618,"published":5619,"modified":5620,"checkedAt":7,"severity":5621,"references":5624,"versionKeys":5637,"packageCount":32,"repositoryCount":5642},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[5616,5617],"CVE-2026-28684","PYSEC-2026-2270",[226,5617],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[5622],{"type":2209,"score":5623},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5625,5627,5629,5631,5633,5635],{"type":2218,"url":5626},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2213,"url":5628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2218,"url":5630},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2224,"url":5632},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2221,"url":5634},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2213,"url":5636},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[5638,5639,5640,5641],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":227,"slug":5644,"dossier":46,"summary":5645,"aliases":5646,"sourceIds":5649,"published":5650,"modified":5651,"checkedAt":7,"severity":5652,"references":5654,"versionKeys":5665,"packageCount":32,"repositoryCount":2366},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[5647,5648],"CVE-2026-40347","PYSEC-2026-3038",[227,5648],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[5653],{"type":2209,"score":2280},[5655,5657,5659,5660,5662,5663],{"type":2224,"url":5656},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2213,"url":5658},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2221,"url":3117},{"type":2224,"url":5661},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2221,"url":3119},{"type":2213,"url":5664},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[3263,3264,3123],{"id":228,"slug":5667,"dossier":46,"summary":5668,"aliases":5669,"sourceIds":5672,"published":5673,"modified":5674,"checkedAt":7,"severity":5675,"references":5677,"versionKeys":5688,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[5670,5671],"CVE-2025-69225","PYSEC-2026-1109",[228,5671],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[5676],{"type":2313,"score":2426},[5678,5680,5682,5684,5685,5686],{"type":2224,"url":5679},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2213,"url":5681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2218,"url":5683},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2221,"url":2321},{"type":2221,"url":3059},{"type":2213,"url":5687},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2325,2326,2327,2328,2329,2330,2331],{"id":229,"slug":5690,"dossier":46,"summary":5691,"aliases":5692,"sourceIds":5695,"published":5696,"modified":5697,"checkedAt":7,"severity":5698,"references":5700,"versionKeys":5715,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[5693,5694],"CVE-2025-62164","PYSEC-2026-2018",[229,5694],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[5699],{"type":2209,"score":3221},[5701,5703,5705,5707,5709,5711,5713,5714],{"type":2224,"url":5702},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2213,"url":5704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":2224,"url":5706},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":2224,"url":5708},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":2213,"url":5710},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2224,"url":5712},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2414],{"id":230,"slug":5717,"dossier":46,"summary":5718,"aliases":5719,"sourceIds":5723,"published":5724,"modified":5725,"checkedAt":7,"severity":5726,"references":5730,"versionKeys":5744,"packageCount":32,"repositoryCount":550},"ghsa-mw35-8rx3-xf9r-5497861f","Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization",[5720,5721,5722],"CVE-2026-41486","PYSEC-2026-2272","PYSEC-2026-2296",[230,5721],"2026-04-24T16:15:00Z","2026-07-13T07:26:16.094513511Z",[5727,5729],{"type":2313,"score":5728},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":2209,"score":2378},[5731,5733,5735,5737,5739,5741,5742],{"type":2213,"url":5732},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-mw35-8rx3-xf9r",{"type":2213,"url":5734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41486",{"type":2224,"url":5736},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F54831",{"type":2218,"url":5738},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F62056",{"type":2218,"url":5740},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002Fc02bd31ae31996805868baa446a131a8d304525f",{"type":2221,"url":3751},{"type":2213,"url":5743},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.55.0",[3765,3766,5137],{"id":231,"slug":5746,"dossier":46,"summary":5747,"aliases":5748,"sourceIds":5751,"published":5752,"modified":5753,"checkedAt":7,"severity":5754,"references":5757,"versionKeys":5766,"packageCount":32,"repositoryCount":2333},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[5749,5750],"CVE-2026-34519","PYSEC-2026-2101",[231,5750],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[5755,5756],{"type":2313,"score":2426},{"type":2209,"score":2428},[5758,5760,5762,5764,5765],{"type":2218,"url":5759},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2213,"url":5761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2218,"url":5763},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":232,"slug":5768,"dossier":46,"summary":5769,"aliases":5770,"sourceIds":5773,"published":5774,"modified":5775,"checkedAt":7,"severity":5776,"references":5779,"versionKeys":5787,"packageCount":32,"repositoryCount":550},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[5771,5772],"CVE-2026-39892","PYSEC-2026-36",[232,5772],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[5777,5778],{"type":2313,"score":3387},{"type":2209,"score":2835},[5780,5782,5784,5785],{"type":2213,"url":5781},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2213,"url":5783},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2221,"url":2981},{"type":2224,"url":5786},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[2989,2990],{"id":233,"slug":5789,"dossier":46,"summary":5790,"aliases":5791,"sourceIds":5794,"published":5795,"modified":5796,"checkedAt":7,"severity":5797,"references":5800,"versionKeys":5809,"packageCount":32,"repositoryCount":2333},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[5792,5793],"CVE-2026-34515","PYSEC-2026-2097",[233,5793],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[5798,5799],{"type":2313,"score":5220},{"type":2209,"score":3188},[5801,5803,5805,5807,5808],{"type":2218,"url":5802},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2213,"url":5804},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2218,"url":5806},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":234,"slug":5811,"dossier":46,"summary":5812,"aliases":5813,"sourceIds":5816,"published":5438,"modified":5817,"checkedAt":7,"severity":5818,"references":5821,"versionKeys":5834,"packageCount":32,"repositoryCount":569},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[5814,5815],"CVE-2025-3777","PYSEC-2026-1986",[234,5815],"2026-07-07T17:56:47.225461188Z",[5819],{"type":2209,"score":5820},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5822,5824,5826,5827,5829,5831,5832],{"type":2213,"url":5823},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2224,"url":5825},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2221,"url":2255},{"type":2224,"url":5828},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2224,"url":5830},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2221,"url":2536},{"type":2213,"url":5833},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2262,2263],{"id":235,"slug":5836,"dossier":46,"summary":5837,"aliases":5838,"sourceIds":5841,"published":5842,"modified":5843,"checkedAt":7,"severity":5844,"references":5848,"versionKeys":5863,"packageCount":32,"repositoryCount":550},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[5839,5840],"CVE-2025-62372","PYSEC-2026-2019",[235,5840],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[5845,5846],{"type":2209,"score":2661},{"type":2313,"score":5847},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[5849,5851,5853,5854,5856,5857,5859,5861,5862],{"type":2224,"url":5850},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2213,"url":5852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":2224,"url":5706},{"type":2224,"url":5855},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":2224,"url":5708},{"type":2213,"url":5858},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2224,"url":5860},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2413,2414,2621],{"id":236,"slug":5865,"dossier":46,"summary":5866,"aliases":5867,"sourceIds":5870,"published":5871,"modified":5872,"checkedAt":7,"severity":5873,"references":5875,"versionKeys":5884,"packageCount":32,"repositoryCount":2366},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[5868,5869],"CVE-2026-42561","PYSEC-2026-3039",[236,5869],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[5874],{"type":2209,"score":2316},[5876,5878,5880,5881,5882],{"type":2224,"url":5877},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2213,"url":5879},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2221,"url":3117},{"type":2221,"url":3119},{"type":2213,"url":5883},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[3263,3264,3123],{"id":237,"slug":5886,"dossier":46,"summary":5887,"aliases":5888,"sourceIds":5891,"published":5892,"modified":5893,"checkedAt":7,"severity":5894,"references":5896,"versionKeys":5916,"packageCount":32,"repositoryCount":550},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[5889,5890],"CVE-2026-34755","PYSEC-2026-144",[237,5890],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[5895],{"type":2209,"score":2661},[5897,5899,5901,5903,5905,5906,5907,5909,5911,5913,5914],{"type":2218,"url":5898},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":2213,"url":5900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":2224,"url":5902},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":2224,"url":5904},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":2224,"url":2672},{"type":2224,"url":2674},{"type":2224,"url":5908},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":2224,"url":5910},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":2224,"url":5912},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":2221,"url":2395},{"type":2224,"url":5915},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[2413,2414,2621],{"id":238,"slug":5918,"dossier":46,"summary":5919,"aliases":5920,"sourceIds":5923,"published":5924,"modified":5925,"checkedAt":7,"severity":5926,"references":5928,"versionKeys":5940,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[5921,5922],"CVE-2025-50181","PYSEC-2026-1999",[238,5922],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[5927],{"type":2209,"score":2746},[5929,5931,5933,5935,5936,5937,5938],{"type":2224,"url":5930},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2213,"url":5932},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2218,"url":5934},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2221,"url":2460},{"type":2224,"url":2756},{"type":2221,"url":2462},{"type":2213,"url":5939},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2466,2467,2468,2469],{"id":239,"slug":5942,"dossier":91,"summary":5943,"aliases":5944,"sourceIds":5948,"published":5949,"modified":5950,"checkedAt":7,"severity":5951,"references":5954,"versionKeys":5966,"packageCount":32,"repositoryCount":103},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[5945,5946,5947],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[239,5947],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[5952,5953],{"type":2313,"score":4601},{"type":2209,"score":3468},[5955,5956,5958,5960,5962,5964,5965],{"type":2224,"url":4605},{"type":2218,"url":5957},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2213,"url":5959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2218,"url":5961},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2218,"url":5963},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2221,"url":3285},{"type":2213,"url":3287},[4641,4642,4643,3289,3290,3291,3292,3293],{"id":240,"slug":5968,"dossier":46,"summary":5969,"aliases":5970,"sourceIds":5973,"published":5974,"modified":5975,"checkedAt":7,"severity":5976,"references":5979,"versionKeys":6000,"packageCount":32,"repositoryCount":550},"ghsa-q279-jhrf-cc6v-6a45143b","Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack",[5971,5972],"CVE-2025-62593","PYSEC-2026-520",[240,5972],"2025-11-26T19:35:23Z","2026-07-01T20:23:03.643178Z",[5977],{"type":2313,"score":5978},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[5980,5982,5984,5986,5988,5990,5992,5993,5995,5997,5998],{"type":2224,"url":5981},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",{"type":2213,"url":5983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62593",{"type":2224,"url":5985},"https:\u002F\u002Fgithub.com\u002Fnccgroup\u002Fsingularity\u002Fpull\u002F68",{"type":2224,"url":5987},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F70e7c72780bdec075dba6cad1afe0832772bfe09",{"type":2224,"url":5989},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Freleases-2.51.1\u002Fray-security\u002Findex.html",{"type":2224,"url":5991},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMalvertising",{"type":2221,"url":3751},{"type":2224,"url":5994},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Fe7889ae542bf0188610bc8b06d274cbf53790cbd\u002Fpython\u002Fray\u002Fdashboard\u002Fhttp_server_head.py#L184-L196",{"type":2224,"url":5996},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Ff39a860436dca3ed5b9dfae84bd867ac10c84dc6\u002Fpython\u002Fray\u002Fdashboard\u002Foptional_utils.py#L129-L155",{"type":2221,"url":3763},{"type":2213,"url":5999},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",[3765,3766,5137],{"id":241,"slug":6002,"dossier":46,"summary":6003,"aliases":6004,"sourceIds":6007,"published":5438,"modified":6008,"checkedAt":7,"severity":6009,"references":6011,"versionKeys":6022,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[6005,6006],"CVE-2025-3263","PYSEC-2026-1987",[241,6006],"2026-07-07T17:56:57.889099913Z",[6010],{"type":2209,"score":2876},[6012,6014,6015,6016,6017,6019,6020],{"type":2213,"url":6013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2224,"url":5446},{"type":2224,"url":5448},{"type":2221,"url":2255},{"type":2224,"url":6018},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2221,"url":2536},{"type":2213,"url":6021},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2262],{"id":242,"slug":6024,"dossier":46,"summary":6025,"aliases":6026,"sourceIds":6029,"published":6030,"modified":6031,"checkedAt":7,"severity":6032,"references":6036,"versionKeys":6049,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[6027,6028],"CVE-2024-56326","PYSEC-2026-1475",[242,6028],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[6033,6035],{"type":2209,"score":6034},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2313,"score":4656},[6037,6039,6041,6043,6044,6045,6046,6047],{"type":2224,"url":6038},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2213,"url":6040},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2218,"url":6042},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2221,"url":4665},{"type":2224,"url":5074},{"type":2224,"url":4667},{"type":2221,"url":4671},{"type":2213,"url":6048},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4675],{"id":243,"slug":6051,"dossier":46,"summary":6052,"aliases":6053,"sourceIds":6056,"published":6057,"modified":6058,"checkedAt":7,"severity":6059,"references":6064,"versionKeys":6076,"packageCount":32,"repositoryCount":550},"ghsa-q5fh-2hc8-f6rq-8b758e91","Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown \u002F job deletion)",[6054,6055],"CVE-2026-27482","PYSEC-2026-2271",[243,6055],"2026-02-20T21:15:25Z","2026-07-13T07:26:45.034743516Z",[6060,6062],{"type":2209,"score":6061},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"type":2209,"score":6063},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[6065,6067,6069,6071,6073,6074],{"type":2257,"url":6066},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q5fh-2hc8-f6rq",{"type":2213,"url":6068},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27482",{"type":2218,"url":6070},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F60526",{"type":2218,"url":6072},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",{"type":2221,"url":3751},{"type":2213,"url":6075},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.54.0",[3765,3766,5137],{"id":244,"slug":6078,"dossier":46,"summary":6079,"aliases":6080,"sourceIds":6083,"published":6084,"modified":6085,"checkedAt":7,"severity":6086,"references":6089,"versionKeys":6109,"packageCount":32,"repositoryCount":550},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[6081,6082],"CVE-2026-41523","PYSEC-2026-2300",[244,6082],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[6087],{"type":2209,"score":6088},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6090,6092,6094,6096,6097,6098,6100,6102,6104,6105,6107],{"type":2257,"url":6091},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":2213,"url":6093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":2218,"url":6095},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":2213,"url":2672},{"type":2213,"url":2674},{"type":2224,"url":6099},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":2492,"url":6101},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":2224,"url":6103},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":2221,"url":2395},{"type":2213,"url":6106},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":2224,"url":6108},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[2413,2414,2621],{"id":245,"slug":6111,"dossier":91,"summary":6112,"aliases":6113,"sourceIds":6116,"published":6117,"modified":6118,"checkedAt":7,"severity":6119,"references":6123,"versionKeys":6129,"packageCount":32,"repositoryCount":471},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[6114,6115],"CVE-2026-44431","PYSEC-2026-141",[245,6115],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[6120,6121],{"type":2209,"score":4275},{"type":2313,"score":6122},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6124,6126,6128],{"type":2213,"url":6125},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2213,"url":6127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2221,"url":2460},[2466,2467,2468,2469,2470,5611],{"id":246,"slug":6131,"dossier":46,"summary":6132,"aliases":6133,"sourceIds":6137,"published":6138,"modified":6139,"checkedAt":7,"severity":6140,"references":6144,"versionKeys":6162,"packageCount":32,"repositoryCount":2333},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[6134,6135,6136],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[246],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[6141,6142],{"type":2209,"score":4720},{"type":2313,"score":6143},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6145,6147,6149,6151,6153,6155,6156,6158,6160],{"type":2213,"url":6146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2224,"url":6148},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2224,"url":6150},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2224,"url":6152},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2224,"url":6154},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2221,"url":2499},{"type":2224,"url":6157},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2224,"url":6159},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2224,"url":6161},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2511,2512,2513,4084,4085,6163,6164,6165],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":247,"slug":6167,"dossier":46,"summary":6168,"aliases":6169,"sourceIds":6172,"published":6173,"modified":6174,"checkedAt":7,"severity":6175,"references":6178,"versionKeys":6204,"packageCount":32,"repositoryCount":550},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[6170,6171],"CVE-2026-24779","PYSEC-2026-2020",[247,6171],"2026-01-28T16:14:28Z","2026-07-17T16:30:32.009053490Z",[6176],{"type":2209,"score":6177},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[6179,6181,6183,6185,6187,6189,6190,6191,6193,6195,6197,6199,6200,6201,6202,6203],{"type":2224,"url":6180},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2213,"url":6182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":2224,"url":6184},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":2224,"url":6186},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":2224,"url":6188},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":2221,"url":2391},{"type":2221,"url":2395},{"type":2224,"url":6192},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":2213,"url":6194},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2224,"url":6196},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":2224,"url":6198},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":2224,"url":2407},{"type":2224,"url":2411},{"type":2224,"url":2863},{"type":2224,"url":4225},{"type":2224,"url":4223},[2413,2414,2621],{"id":248,"slug":6206,"dossier":46,"summary":6207,"aliases":6208,"sourceIds":6211,"published":6212,"modified":6213,"checkedAt":7,"severity":6214,"references":6217,"versionKeys":6232,"packageCount":32,"repositoryCount":3294},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[6209,6210],"CVE-2026-22701","PYSEC-2026-1374",[248,6210],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[6215],{"type":2209,"score":6216},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[6218,6220,6222,6224,6226,6228,6230],{"type":2224,"url":6219},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2213,"url":6221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2224,"url":6223},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2224,"url":6225},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2221,"url":6227},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2221,"url":6229},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2213,"url":6231},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[6233,6234,6235,6236],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":249,"slug":6238,"dossier":46,"summary":6239,"aliases":6240,"sourceIds":6243,"published":6244,"modified":6245,"checkedAt":7,"severity":6246,"references":6249,"versionKeys":6263,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[6241,6242],"CVE-2025-2099","PYSEC-2025-40",[249,6242],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[6247,6248],{"type":2209,"score":2876},{"type":2209,"score":2316},[6250,6252,6254,6256,6257,6259,6261],{"type":2213,"url":6251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2224,"url":6253},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2218,"url":6255},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2221,"url":2255},{"type":2224,"url":6258},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2224,"url":6260},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2213,"url":6262},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2262],{"id":250,"slug":6265,"dossier":46,"summary":6266,"aliases":6267,"sourceIds":6270,"published":6271,"modified":6272,"checkedAt":7,"severity":6273,"references":6277,"versionKeys":6300,"packageCount":32,"repositoryCount":34},"ghsa-qrc4-49gv-mv9m-c7358be2","LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit",[6268,6269],"CVE-2026-47101","PYSEC-2026-2598",[250,6269],"2026-05-21T21:30:36Z","2026-07-13T16:42:56.741599701Z",[6274,6275],{"type":2209,"score":3221},{"type":2313,"score":6276},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6278,6280,6282,6284,6286,6288,6289,6291,6293,6295,6297,6298],{"type":2213,"url":6279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47101",{"type":2224,"url":6281},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F2220f3076ac89bd2a2e3439acf57dcfbec2434c9",{"type":2224,"url":6283},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F5190bd07eb23a037745d86328096f54378f1614a",{"type":2224,"url":6285},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fd910a95661fce3cdd36f3b06c03ecf9c46c6457c",{"type":2224,"url":6287},"https:\u002F\u002Fgist.github.com\u002F13ph03nix\u002F9ec616e1fdc77b3673509c60206e827f",{"type":2221,"url":2914},{"type":2224,"url":6290},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.14-stable",{"type":2224,"url":6292},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8e75edfb-ff05-4e63-bfca-2d93d03fb3b9",{"type":2224,"url":6294},"https:\u002F\u002Fwww.obsidiansecurity.com\u002Fblog\u002Flitellm-privilege-escalation-rce",{"type":2224,"url":6296},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-api-key-generation",{"type":2221,"url":2922},{"type":2213,"url":6299},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qrc4-49gv-mv9m",[2926,2927,2928,2929],{"id":251,"slug":6302,"dossier":46,"summary":5306,"aliases":6303,"sourceIds":6306,"published":6307,"modified":6308,"checkedAt":7,"severity":6309,"references":6313,"versionKeys":6327,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[6304,6305],"CVE-2024-11392","PYSEC-2024-227",[251,6305],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[6310,6312],{"type":2209,"score":6311},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2209,"score":2378},[6314,6316,6317,6318,6319,6321,6323,6325],{"type":2213,"url":6315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2224,"url":5321},{"type":2224,"url":5323},{"type":2221,"url":2255},{"type":2224,"url":6320},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2224,"url":6322},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2213,"url":6324},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2213,"url":6326},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2262],{"id":252,"slug":6329,"dossier":46,"summary":6330,"aliases":6331,"sourceIds":6334,"published":6335,"modified":6336,"checkedAt":7,"severity":6337,"references":6342,"versionKeys":6380,"packageCount":32,"repositoryCount":65},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[6332,6333],"CVE-2026-26007","PYSEC-2026-2141",[252,6333],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[6338,6340],{"type":2313,"score":6339},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2209,"score":6341},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6343,6345,6347,6349,6350,6352,6354,6356,6357,6359,6361,6363,6365,6367,6369,6371,6373,6375,6377,6379],{"type":2224,"url":6344},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2213,"url":6346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2224,"url":6348},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2221,"url":2981},{"type":2224,"url":6351},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2224,"url":6353},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2224,"url":6355},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2213,"url":4622},{"type":2213,"url":6358},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2213,"url":6360},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2213,"url":6362},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2213,"url":6364},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2213,"url":6366},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2213,"url":6368},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2213,"url":6370},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2213,"url":6372},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2213,"url":6374},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2213,"url":6376},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2213,"url":6378},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2213,"url":4639},[2985,2986,2987,2988,2989,2990],{"id":253,"slug":6382,"dossier":91,"summary":6383,"aliases":6384,"sourceIds":6388,"published":6389,"modified":6390,"checkedAt":7,"severity":6391,"references":6394,"versionKeys":6409,"packageCount":32,"repositoryCount":103},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[6385,6386,6387],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[253,6387],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[6392,6393],{"type":2209,"score":2487},{"type":2313,"score":3278},[6395,6397,6399,6401,6403,6404,6405,6407],{"type":2224,"url":6396},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2213,"url":6398},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2224,"url":6400},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2224,"url":6402},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2221,"url":3285},{"type":2224,"url":3287},{"type":2221,"url":6406},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2213,"url":6408},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":254,"slug":6411,"dossier":46,"summary":6412,"aliases":6413,"sourceIds":6416,"published":6417,"modified":6418,"checkedAt":7,"severity":6419,"references":6421,"versionKeys":6436,"packageCount":32,"repositoryCount":569},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[6414,6415],"CVE-2025-6051","PYSEC-2026-1988",[254,6415],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[6420],{"type":2209,"score":2876},[6422,6424,6426,6428,6430,6431,6433,6434],{"type":2213,"url":6423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2224,"url":6425},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2224,"url":6427},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2224,"url":6429},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2221,"url":2255},{"type":2224,"url":6432},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2221,"url":2536},{"type":2213,"url":6435},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2262,2263],{"id":255,"slug":6438,"dossier":46,"summary":6439,"aliases":6440,"sourceIds":6443,"published":6444,"modified":6445,"checkedAt":7,"severity":6446,"references":6449,"versionKeys":6462,"packageCount":32,"repositoryCount":3294},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[6441,6442],"CVE-2026-25087","PYSEC-2026-113",[255,6442],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[6447],{"type":2209,"score":6448},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[6450,6452,6454,6456,6458,6460],{"type":2213,"url":6451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2218,"url":6453},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2221,"url":6455},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2224,"url":6457},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2213,"url":6459},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2213,"url":6461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[6463,6464,6465,6466],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":256,"slug":6468,"dossier":46,"summary":6469,"aliases":6470,"sourceIds":6474,"published":4716,"modified":6475,"checkedAt":7,"severity":6476,"references":6479,"versionKeys":6497,"packageCount":32,"repositoryCount":3294},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[6471,6472,6473],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[256],"2026-07-17T17:15:51.452848951Z",[6477,6478],{"type":2209,"score":4720},{"type":2313,"score":6143},[6480,6482,6484,6486,6488,6490,6491,6493,6495],{"type":2213,"url":6481},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2224,"url":6483},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2224,"url":6485},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2224,"url":6487},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2224,"url":6489},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2221,"url":2499},{"type":2224,"url":6492},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2224,"url":6494},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2224,"url":6496},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[6498,2511,2512,2513,4084,4085,6163,6164,6165],"pypi:torch@2.10.0",{"id":257,"slug":6500,"dossier":46,"summary":6501,"aliases":6502,"sourceIds":6505,"published":6506,"modified":6507,"checkedAt":7,"severity":6508,"references":6511,"versionKeys":6523,"packageCount":32,"repositoryCount":550},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[6503,6504],"CVE-2026-55574","PYSEC-2026-2304",[257,6504],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[6509,6510],{"type":2209,"score":2316},{"type":2313,"score":3108},[6512,6514,6516,6518,6520,6522],{"type":2213,"url":6513},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":2213,"url":6515},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":2218,"url":6517},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":2218,"url":6519},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":2224,"url":6521},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":2221,"url":2395},[2413,2414,2621],{"id":258,"slug":6525,"dossier":46,"summary":6526,"aliases":6527,"sourceIds":6530,"published":6531,"modified":6532,"checkedAt":7,"severity":6533,"references":6535,"versionKeys":6550,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[6528,6529],"CVE-2025-48956","PYSEC-2026-2021",[258,6529],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[6534],{"type":2209,"score":2316},[6536,6538,6540,6542,6544,6546,6548,6549],{"type":2224,"url":6537},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2213,"url":6539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":2224,"url":6541},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":2224,"url":6543},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":2213,"url":6545},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2224,"url":6547},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2621],{"id":259,"slug":6552,"dossier":46,"summary":6553,"aliases":6554,"sourceIds":6557,"published":6558,"modified":6559,"checkedAt":7,"severity":6560,"references":6564,"versionKeys":6576,"packageCount":32,"repositoryCount":2366},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[6555,6556],"CVE-2026-41205","PYSEC-2026-88",[259,6556],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[6561,6562],{"type":2209,"score":3188},{"type":2313,"score":6563},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6565,6567,6569,6571,6573,6574],{"type":2213,"url":6566},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2213,"url":6568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2224,"url":6570},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2224,"url":6572},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2221,"url":2356},{"type":2224,"url":6575},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2364,2365],{"id":260,"slug":6578,"dossier":46,"summary":6579,"aliases":6580,"sourceIds":6583,"published":6584,"modified":6585,"checkedAt":7,"severity":6586,"references":6589,"versionKeys":6598,"packageCount":32,"repositoryCount":2366},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[6581,6582],"CVE-2026-53540","PYSEC-2026-3040",[260,6582],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[6587],{"type":2209,"score":6588},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[6590,6592,6593,6594,6596],{"type":2224,"url":6591},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2221,"url":3117},{"type":2221,"url":3119},{"type":2213,"url":6595},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2213,"url":6597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[3263,3264,3123],{"id":261,"slug":6600,"dossier":46,"summary":6601,"aliases":6602,"sourceIds":6605,"published":6606,"modified":6607,"checkedAt":7,"severity":6608,"references":6610,"versionKeys":6621,"packageCount":32,"repositoryCount":2366},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[6603,6604],"CVE-2026-53537","PYSEC-2026-3041",[261,6604],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[6609],{"type":2209,"score":3585},[6611,6613,6615,6616,6618,6620],{"type":2224,"url":6612},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2213,"url":6614},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2221,"url":3117},{"type":2213,"url":6617},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2224,"url":6619},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2221,"url":3119},[3263,3264,3123],{"id":262,"slug":6623,"dossier":46,"summary":6624,"aliases":6625,"sourceIds":6629,"published":4716,"modified":6630,"checkedAt":7,"severity":6631,"references":6634,"versionKeys":6649,"packageCount":32,"repositoryCount":366},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[6626,6627,6628],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[262],"2026-06-10T17:41:15.774477397Z",[6632,6633],{"type":2209,"score":4720},{"type":2313,"score":4722},[6635,6637,6638,6639,6640,6642,6643,6645,6647],{"type":2213,"url":6636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2224,"url":4727},{"type":2224,"url":4729},{"type":2224,"url":4731},{"type":2224,"url":6641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2221,"url":2499},{"type":2224,"url":6644},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2224,"url":6646},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2224,"url":6648},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2511,2512,2513,4084,4085,6163],{"id":263,"slug":6651,"dossier":46,"summary":6652,"aliases":6653,"sourceIds":6656,"published":6657,"modified":6658,"checkedAt":7,"severity":6659,"references":6662,"versionKeys":6675,"packageCount":32,"repositoryCount":550},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[6654,6655],"CVE-2025-43859","PYSEC-2026-348",[263,6655],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[6660],{"type":2209,"score":6661},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6663,6665,6667,6669,6671,6673],{"type":2224,"url":6664},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2213,"url":6666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2224,"url":6668},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2221,"url":6670},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2221,"url":6672},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2213,"url":6674},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[6676],"pypi:h11@0.14.0",{"id":264,"slug":6678,"dossier":46,"summary":6679,"aliases":6680,"sourceIds":6683,"published":6684,"modified":6685,"checkedAt":7,"severity":6686,"references":6688,"versionKeys":6700,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[6681,6682],"CVE-2025-48944","PYSEC-2026-2023",[264,6682],"2025-05-28T19:42:32Z","2026-07-17T16:30:29.005158547Z",[6687],{"type":2209,"score":2661},[6689,6691,6693,6694,6696,6698,6699],{"type":2224,"url":6690},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2213,"url":6692},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":2224,"url":3667},{"type":2213,"url":6695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2224,"url":6697},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":2221,"url":2395},{"type":2221,"url":2391},[2621],{"id":265,"slug":6702,"dossier":46,"summary":6703,"aliases":6704,"sourceIds":6707,"published":6708,"modified":6709,"checkedAt":7,"severity":6710,"references":6713,"versionKeys":6724,"packageCount":32,"repositoryCount":550},"ghsa-vvw2-h478-xwr3-e8568ce6","DSPy does not properly restrict file reads",[6705,6706],"CVE-2025-12695","PYSEC-2026-1318",[265,6706],"2025-11-04T15:31:35Z","2026-07-07T17:57:24.503135806Z",[6711],{"type":2209,"score":6712},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6714,6716,6718,6720,6722],{"type":2213,"url":6715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12695",{"type":2221,"url":6717},"https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdspy",{"type":2224,"url":6719},"https:\u002F\u002Fresearch.jfrog.com\u002Fvulnerabilities\u002Fdspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652",{"type":2221,"url":6721},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdspy",{"type":2213,"url":6723},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvw2-h478-xwr3",[6725,6726,6727],"pypi:dspy@2.5.43","pypi:dspy@2.6.23","pypi:dspy@2.6.27",{"id":266,"slug":6729,"dossier":46,"summary":6730,"aliases":6731,"sourceIds":6734,"published":6735,"modified":6736,"checkedAt":7,"severity":6737,"references":6741,"versionKeys":6750,"packageCount":32,"repositoryCount":2333},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[6732,6733],"CVE-2026-22815","PYSEC-2026-2094",[266,6733],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[6738,6739],{"type":2313,"score":3387},{"type":2313,"score":6740},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6742,6744,6746,6748,6749],{"type":2218,"url":6743},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2213,"url":6745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2218,"url":6747},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2221,"url":2321},{"type":2213,"url":2438},[2325,2326,2327,2328,2329,2330,2331,2332],{"id":267,"slug":6752,"dossier":46,"summary":6753,"aliases":6754,"sourceIds":6757,"published":6758,"modified":6759,"checkedAt":7,"severity":6760,"references":6762,"versionKeys":6774,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[6755,6756],"CVE-2025-48887","PYSEC-2025-50",[267,6756],"2025-05-28T17:49:33Z","2026-06-10T17:14:19.371824623Z",[6761],{"type":2209,"score":2661},[6763,6765,6767,6768,6769,6771,6772],{"type":2257,"url":6764},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":2213,"url":6766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":2492,"url":5349},{"type":2218,"url":5351},{"type":2224,"url":6770},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":2221,"url":2395},{"type":2213,"url":6773},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[2621],{"id":268,"slug":6776,"dossier":46,"summary":6777,"aliases":6778,"sourceIds":6781,"published":6782,"modified":6783,"checkedAt":7,"severity":6784,"references":6787,"versionKeys":6804,"packageCount":32,"repositoryCount":3294},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[6779,6780],"CVE-2025-68146","PYSEC-2026-1375",[268,6780],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[6785],{"type":2209,"score":6786},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6788,6790,6792,6793,6795,6797,6799,6800,6802],{"type":2224,"url":6789},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2224,"url":6791},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2221,"url":6227},{"type":2224,"url":6794},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2224,"url":6796},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2224,"url":6798},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2221,"url":6229},{"type":2213,"url":6801},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2213,"url":6803},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[6233,6234,6235,6236],{"id":269,"slug":6806,"dossier":46,"summary":6807,"aliases":6808,"sourceIds":6811,"published":6812,"modified":6813,"checkedAt":7,"severity":6814,"references":6817,"versionKeys":6828,"packageCount":32,"repositoryCount":510},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[6809,6810],"CVE-2025-69872","PYSEC-2026-2447",[269,6810],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[6815],{"type":2313,"score":6816},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6818,6820,6822,6824,6826],{"type":2213,"url":6819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2224,"url":6821},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2221,"url":6823},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2221,"url":6825},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2213,"url":6827},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[6829],"pypi:diskcache@5.6.3",{"id":270,"slug":6831,"dossier":46,"summary":6832,"aliases":6833,"sourceIds":6836,"published":6837,"modified":6838,"checkedAt":7,"severity":6839,"references":6841,"versionKeys":6857,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[6834,6835],"CVE-2026-32874","PYSEC-2026-2291",[270,6835],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[6840],{"type":2209,"score":2316},[6842,6844,6846,6848,6849,6851,6853,6855],{"type":2213,"url":6843},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":2213,"url":6845},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":2218,"url":6847},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":2221,"url":2644},{"type":2213,"url":6850},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":2224,"url":6852},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":2224,"url":6854},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":2492,"url":6856},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[2648],{"id":271,"slug":6859,"dossier":91,"summary":6860,"aliases":6861,"sourceIds":6865,"published":6866,"modified":6867,"checkedAt":7,"severity":6868,"references":6871,"versionKeys":6909,"packageCount":32,"repositoryCount":103},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[6862,6863,6864],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[271,6864],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[6869,6870],{"type":2209,"score":2316},{"type":2313,"score":3108},[6872,6874,6876,6878,6880,6881,6883,6885,6887,6889,6891,6893,6894,6896,6898,6900,6901,6903,6905,6907],{"type":2224,"url":6873},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2213,"url":6875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2224,"url":6877},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2224,"url":6879},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2221,"url":3285},{"type":2224,"url":6882},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2224,"url":6884},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2224,"url":6886},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2213,"url":6888},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2213,"url":6890},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2213,"url":6892},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2213,"url":4628},{"type":2213,"url":6895},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2213,"url":6897},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2213,"url":6899},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2213,"url":3815},{"type":2213,"url":6902},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2213,"url":6904},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2213,"url":6906},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2213,"url":6908},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":272,"slug":6911,"dossier":91,"summary":6912,"aliases":6913,"sourceIds":6917,"published":6918,"modified":6919,"checkedAt":7,"severity":6920,"references":6923,"versionKeys":6932,"packageCount":32,"repositoryCount":103},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[6914,6915,6916],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[272,6916],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[6921,6922],{"type":2209,"score":2487},{"type":2313,"score":3278},[6924,6926,6928,6930,6931],{"type":2213,"url":6925},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2213,"url":6927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2224,"url":6929},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2221,"url":3285},{"type":2213,"url":3287},[4641,4642,4643,3289,3290,3291,3292,3293],{"id":273,"slug":6934,"dossier":46,"summary":6935,"aliases":6936,"sourceIds":6939,"published":6940,"modified":6941,"checkedAt":7,"severity":6942,"references":6945,"versionKeys":6958,"packageCount":32,"repositoryCount":2366},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[6937,6938],"CVE-2026-24486","PYSEC-2026-1852",[273,6938],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[6943],{"type":2209,"score":6944},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[6946,6948,6950,6952,6953,6955,6956],{"type":2224,"url":6947},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2213,"url":6949},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2224,"url":6951},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2221,"url":3117},{"type":2224,"url":6954},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2221,"url":3119},{"type":2213,"url":6957},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[3263,3264,3123],{"id":274,"slug":6960,"dossier":46,"summary":6961,"aliases":6962,"sourceIds":6965,"published":6966,"modified":6967,"checkedAt":7,"severity":6968,"references":6971,"versionKeys":6991,"packageCount":32,"repositoryCount":34},"ghsa-wpfp-gwwc-vwq6-53d5ec36","LiteLLM allows a user to modify their own user_role via the \u002Fuser\u002Fupdate endpoint",[6963,6964],"CVE-2026-47102","PYSEC-2026-2600",[274,6964],"2026-05-21T21:30:37Z","2026-07-13T16:43:25.135559552Z",[6969,6970],{"type":2209,"score":3221},{"type":2313,"score":6276},[6972,6974,6976,6978,6980,6981,6982,6984,6985,6986,6988,6989],{"type":2213,"url":6973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47102",{"type":2224,"url":6975},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25541",{"type":2224,"url":6977},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F128d32d2494b759c5d15da3452452af4c6a34c01",{"type":2224,"url":6979},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe6f18ce75b111c9b93dc15c72894cbdeb53177ce",{"type":2224,"url":6287},{"type":2221,"url":2914},{"type":2224,"url":6983},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.10-stable",{"type":2224,"url":6292},{"type":2224,"url":6294},{"type":2224,"url":6987},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-user-update",{"type":2221,"url":2922},{"type":2213,"url":6990},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wpfp-gwwc-vwq6",[2926,2927,2928,2929],{"id":275,"slug":6993,"dossier":46,"summary":6994,"aliases":6995,"sourceIds":6998,"published":6999,"modified":7000,"checkedAt":7,"severity":7001,"references":7003,"versionKeys":7023,"packageCount":32,"repositoryCount":366},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[6996,6997],"CVE-2026-48818","PYSEC-2026-2281",[275,6997],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[7002],{"type":2209,"score":3188},[7004,7006,7007,7009,7011,7013,7014,7015,7017,7019,7021],{"type":2213,"url":7005},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2221,"url":3867},{"type":2224,"url":7008},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2224,"url":7010},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2213,"url":7012},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2213,"url":4223},{"type":2213,"url":4225},{"type":2213,"url":7016},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2492,"url":7018},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2218,"url":7020},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2218,"url":7022},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2299,2300,2301,3874,3875,3996,3997],{"id":276,"slug":7025,"dossier":46,"summary":7026,"aliases":7027,"sourceIds":7030,"published":7031,"modified":7032,"checkedAt":7,"severity":7033,"references":7035,"versionKeys":7052,"packageCount":32,"repositoryCount":569},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[7028,7029],"CVE-2025-59425","PYSEC-2026-2026",[276,7029],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[7034],{"type":2209,"score":3188},[7036,7038,7040,7042,7044,7046,7047,7049,7051],{"type":2224,"url":7037},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2213,"url":7039},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":2224,"url":7041},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":2213,"url":7043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2224,"url":7045},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":2221,"url":2395},{"type":2224,"url":7048},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":2224,"url":7050},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":2221,"url":2391},[2413,2621],{"id":277,"slug":7054,"dossier":46,"summary":5306,"aliases":7055,"sourceIds":7058,"published":5311,"modified":7059,"checkedAt":7,"severity":7060,"references":7063,"versionKeys":7077,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[7056,7057],"CVE-2024-11393","PYSEC-2024-228",[277,7057],"2026-06-10T17:00:13.252500033Z",[7061,7062],{"type":2209,"score":5315},{"type":2209,"score":2378},[7064,7066,7067,7068,7069,7071,7073,7075],{"type":2213,"url":7065},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2224,"url":5321},{"type":2224,"url":5323},{"type":2221,"url":2255},{"type":2224,"url":7070},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2224,"url":7072},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2213,"url":7074},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2213,"url":7076},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2262],{"id":278,"slug":7079,"dossier":46,"summary":7080,"aliases":7081,"sourceIds":7084,"published":7085,"modified":7086,"checkedAt":7,"severity":7087,"references":7094,"versionKeys":7113,"packageCount":32,"repositoryCount":550},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[7082,7083],"CVE-2026-7141","PYSEC-2026-2306",[278,7083],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[7088,7090,7092],{"type":2209,"score":7089},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2313,"score":7091},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2313,"score":7093},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7095,7097,7099,7101,7103,7105,7107,7109,7111],{"type":2213,"url":7096},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":2492,"url":7098},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":2492,"url":7100},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":2218,"url":7102},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":2218,"url":7104},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":2213,"url":7106},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":2213,"url":7108},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":2492,"url":7110},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":2213,"url":7112},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[2413,2414,2621],{"id":279,"slug":7115,"dossier":46,"summary":7116,"aliases":7117,"sourceIds":7121,"published":7122,"modified":7123,"checkedAt":7,"severity":7124,"references":7129,"versionKeys":7145,"packageCount":32,"repositoryCount":569},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[7118,7119,7120],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[279],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[7125,7127],{"type":2209,"score":7126},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2313,"score":7128},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7130,7132,7134,7136,7138,7139,7141,7143],{"type":2213,"url":7131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2224,"url":7133},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2224,"url":7135},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2224,"url":7137},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2221,"url":2499},{"type":2224,"url":7140},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2224,"url":7142},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2224,"url":7144},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2511,2512],{"id":280,"slug":7147,"dossier":46,"summary":7148,"aliases":7149,"sourceIds":7152,"published":7153,"modified":7154,"checkedAt":7,"severity":7155,"references":7157,"versionKeys":7164,"packageCount":32,"repositoryCount":366},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[7150,7151],"CVE-2026-48817","PYSEC-2026-2280",[280,7151],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[7156],{"type":2209,"score":2428},[7158,7160,7162,7163],{"type":2213,"url":7159},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2213,"url":7161},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2221,"url":3867},{"type":2213,"url":7016},[2299,2300,2301,3874,3875,3996,3997],{"id":281,"slug":7166,"dossier":46,"summary":7167,"aliases":7168,"sourceIds":7171,"published":7172,"modified":7173,"checkedAt":7,"severity":7174,"references":7177,"versionKeys":7183,"packageCount":32,"repositoryCount":2333},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[7169,7170],"CVE-2026-54274","PYSEC-2026-2108",[281,7170],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[7175,7176],{"type":2313,"score":2772},{"type":2209,"score":2316},[7178,7180,7181],{"type":2213,"url":7179},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2221,"url":2321},{"type":2218,"url":7182},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2325,2326,2327,2328,2329,2330,2331,2332],{"id":282,"slug":7185,"dossier":46,"summary":7186,"aliases":7187,"sourceIds":7188,"published":7189,"modified":7190,"checkedAt":7,"severity":7191,"references":7193,"versionKeys":7200,"packageCount":32,"repositoryCount":550},"ghsa-xf7x-x43h-rpqh-c5648b04","json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS",[],[282],"2026-07-13T23:41:39Z","2026-07-13T23:45:11.773964507Z",[7192],{"type":2209,"score":2316},[7194,7196,7198],{"type":2224,"url":7195},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Fsecurity\u002Fadvisories\u002FGHSA-xf7x-x43h-rpqh",{"type":2221,"url":7197},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair",{"type":2224,"url":7199},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Freleases\u002Ftag\u002Fv0.60.1",[7201,7202,7203],"pypi:json-repair@0.35.0","pypi:json-repair@0.44.1","pypi:json-repair@0.47.6",{"id":283,"slug":7205,"dossier":46,"summary":7206,"aliases":7207,"sourceIds":7211,"published":7212,"modified":7213,"checkedAt":7,"severity":7214,"references":7217,"versionKeys":7231,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[7208,7209,7210],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[283,7210],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[7215],{"type":2209,"score":7216},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7218,7220,7222,7224,7226,7228,7229],{"type":2213,"url":7219},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2213,"url":7221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2224,"url":7223},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2218,"url":7225},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2224,"url":7227},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2221,"url":3285},{"type":2224,"url":7230},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3289],{"id":284,"slug":7233,"dossier":46,"summary":331,"aliases":7234,"sourceIds":7237,"published":7238,"modified":7239,"checkedAt":7,"severity":7240,"references":7242,"versionKeys":7251,"packageCount":32,"repositoryCount":569},"pysec-2025-198-62b25ed4",[7235,7236],"BIT-pytorch-2025-46148","CVE-2025-46148",[284],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[7241],{"type":2209,"score":4275},[7243,7245,7247,7249],{"type":2213,"url":7244},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2213,"url":7246},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2492,"url":7248},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2218,"url":7250},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2511,2512],{"id":285,"slug":7253,"dossier":46,"summary":331,"aliases":7254,"sourceIds":7257,"published":7258,"modified":7259,"checkedAt":7,"severity":7260,"references":7262,"versionKeys":7268,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[7255,7256],"BIT-pytorch-2025-46149","CVE-2025-46149",[285],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[7261],{"type":2209,"score":4275},[7263,7264,7266],{"type":2213,"url":7244},{"type":2492,"url":7265},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2218,"url":7267},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2512],{"id":286,"slug":7270,"dossier":46,"summary":331,"aliases":7271,"sourceIds":7274,"published":7275,"modified":7276,"checkedAt":7,"severity":7277,"references":7279,"versionKeys":7287,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[7272,7273],"BIT-pytorch-2025-46150","CVE-2025-46150",[286],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[7278],{"type":2209,"score":4275},[7280,7281,7283,7285],{"type":2213,"url":7244},{"type":2492,"url":7282},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2492,"url":7284},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2218,"url":7286},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2512],{"id":287,"slug":7289,"dossier":46,"summary":331,"aliases":7290,"sourceIds":7293,"published":7294,"modified":7295,"checkedAt":7,"severity":7296,"references":7298,"versionKeys":7304,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[7291,7292],"BIT-pytorch-2025-46152","CVE-2025-46152",[287],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[7297],{"type":2209,"score":2280},[7299,7300,7302],{"type":2213,"url":7244},{"type":2492,"url":7301},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2218,"url":7303},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2512],{"id":288,"slug":7306,"dossier":46,"summary":331,"aliases":7307,"sourceIds":7310,"published":7311,"modified":7312,"checkedAt":7,"severity":7313,"references":7315,"versionKeys":7325,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[7308,7309],"BIT-pytorch-2025-46153","CVE-2025-46153",[288],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[7314],{"type":2209,"score":4275},[7316,7318,7319,7321,7323],{"type":2224,"url":7317},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2213,"url":7244},{"type":2213,"url":7320},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2492,"url":7322},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2218,"url":7324},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2512],{"id":289,"slug":7327,"dossier":46,"summary":331,"aliases":7328,"sourceIds":7331,"published":7332,"modified":7333,"checkedAt":7,"severity":7334,"references":7336,"versionKeys":7341,"packageCount":32,"repositoryCount":366},"pysec-2025-203-2febb201",[7329,7330],"BIT-pytorch-2025-55551","CVE-2025-55551",[289],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[7335],{"type":2209,"score":2316},[7337,7339],{"type":2213,"url":7338},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2492,"url":7340},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2511,2512,2513,4084,4085,6163],{"id":290,"slug":7343,"dossier":46,"summary":331,"aliases":7344,"sourceIds":7347,"published":7348,"modified":7349,"checkedAt":7,"severity":7350,"references":7352,"versionKeys":7356,"packageCount":32,"repositoryCount":366},"pysec-2025-204-cdae47da",[7345,7346],"BIT-pytorch-2025-55552","CVE-2025-55552",[290],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[7351],{"type":2209,"score":2316},[7353,7354],{"type":2213,"url":7338},{"type":2492,"url":7355},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2511,2512,2513,4084,4085,6163],{"id":291,"slug":7358,"dossier":46,"summary":331,"aliases":7359,"sourceIds":7362,"published":7363,"modified":7364,"checkedAt":7,"severity":7365,"references":7367,"versionKeys":7373,"packageCount":32,"repositoryCount":550},"pysec-2025-205-fd5e58fd",[7360,7361],"BIT-pytorch-2025-55553","CVE-2025-55553",[291],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[7366],{"type":2209,"score":2316},[7368,7369,7371],{"type":2213,"url":7338},{"type":2492,"url":7370},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2218,"url":7372},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2511,2512,2513],{"id":292,"slug":7375,"dossier":46,"summary":331,"aliases":7376,"sourceIds":7379,"published":7380,"modified":7381,"checkedAt":7,"severity":7382,"references":7384,"versionKeys":7388,"packageCount":32,"repositoryCount":366},"pysec-2025-206-58322476",[7377,7378],"BIT-pytorch-2025-55554","CVE-2025-55554",[292],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[7383],{"type":2209,"score":2280},[7385,7386],{"type":2213,"url":7338},{"type":2492,"url":7387},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2511,2512,2513,4084,4085,6163],{"id":293,"slug":7390,"dossier":46,"summary":331,"aliases":7391,"sourceIds":7394,"published":7395,"modified":7396,"checkedAt":7,"severity":7397,"references":7399,"versionKeys":7405,"packageCount":32,"repositoryCount":550},"pysec-2025-207-2abef3fc",[7392,7393],"BIT-pytorch-2025-55557","CVE-2025-55557",[293],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[7398],{"type":2209,"score":2316},[7400,7401,7403],{"type":2213,"url":7338},{"type":2492,"url":7402},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2218,"url":7404},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2511,2512,2513],{"id":294,"slug":7407,"dossier":46,"summary":331,"aliases":7408,"sourceIds":7411,"published":7412,"modified":7413,"checkedAt":7,"severity":7414,"references":7416,"versionKeys":7422,"packageCount":32,"repositoryCount":550},"pysec-2025-208-6e93fe9d",[7409,7410],"BIT-pytorch-2025-55558","CVE-2025-55558",[294],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[7415],{"type":2209,"score":2316},[7417,7418,7420],{"type":2213,"url":7338},{"type":2492,"url":7419},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2218,"url":7421},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2511,2512,2513],{"id":295,"slug":7424,"dossier":46,"summary":331,"aliases":7425,"sourceIds":7428,"published":7429,"modified":7430,"checkedAt":7,"severity":7431,"references":7433,"versionKeys":7439,"packageCount":32,"repositoryCount":550},"pysec-2025-209-e6f352b0",[7426,7427],"BIT-pytorch-2025-55560","CVE-2025-55560",[295],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[7432],{"type":2209,"score":2316},[7434,7435,7437],{"type":2213,"url":7338},{"type":2492,"url":7436},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2218,"url":7438},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2511,2512,2513],{"id":296,"slug":7441,"dossier":46,"summary":331,"aliases":7442,"sourceIds":7444,"published":7445,"modified":7446,"checkedAt":7,"severity":7447,"references":7449,"versionKeys":7452,"packageCount":32,"repositoryCount":550},"pysec-2025-211-d8bd15de",[7443],"CVE-2025-14920",[296],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[7448],{"type":2209,"score":2248},[7450],{"type":2213,"url":7451},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2262,2263,2264],{"id":297,"slug":7454,"dossier":46,"summary":331,"aliases":7455,"sourceIds":7457,"published":7458,"modified":7459,"checkedAt":7,"severity":7460,"references":7462,"versionKeys":7465,"packageCount":32,"repositoryCount":550},"pysec-2025-212-a011b97d",[7456],"CVE-2025-14921",[297],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[7461],{"type":2209,"score":2248},[7463],{"type":2213,"url":7464},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2262,2263,2264],{"id":298,"slug":7467,"dossier":46,"summary":331,"aliases":7468,"sourceIds":7470,"published":7471,"modified":7472,"checkedAt":7,"severity":7473,"references":7475,"versionKeys":7478,"packageCount":32,"repositoryCount":550},"pysec-2025-213-9043dc9b",[7469],"CVE-2025-14924",[298],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[7474],{"type":2209,"score":2248},[7476],{"type":2213,"url":7477},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2262,2263,2264],{"id":299,"slug":7480,"dossier":46,"summary":331,"aliases":7481,"sourceIds":7483,"published":7484,"modified":7485,"checkedAt":7,"severity":7486,"references":7488,"versionKeys":7491,"packageCount":32,"repositoryCount":550},"pysec-2025-214-eb241255",[7482],"CVE-2025-14926",[299],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[7487],{"type":2209,"score":2248},[7489],{"type":2213,"url":7490},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2262,2263,2264],{"id":300,"slug":7493,"dossier":46,"summary":331,"aliases":7494,"sourceIds":7496,"published":7497,"modified":7498,"checkedAt":7,"severity":7499,"references":7501,"versionKeys":7504,"packageCount":32,"repositoryCount":550},"pysec-2025-215-6064f491",[7495],"CVE-2025-14927",[300],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[7500],{"type":2209,"score":2248},[7502],{"type":2213,"url":7503},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2262,2263,2264],{"id":301,"slug":7506,"dossier":46,"summary":331,"aliases":7507,"sourceIds":7509,"published":7510,"modified":7511,"checkedAt":7,"severity":7512,"references":7514,"versionKeys":7517,"packageCount":32,"repositoryCount":550},"pysec-2025-216-5708ed01",[7508],"CVE-2025-14928",[301],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[7513],{"type":2209,"score":2248},[7515],{"type":2213,"url":7516},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2262,2263,2264],{"id":302,"slug":7519,"dossier":46,"summary":331,"aliases":7520,"sourceIds":7522,"published":7523,"modified":7524,"checkedAt":7,"severity":7525,"references":7527,"versionKeys":7530,"packageCount":32,"repositoryCount":366},"pysec-2025-217-2c1ad388",[7521],"CVE-2025-14929",[302],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[7526],{"type":2209,"score":2248},[7528],{"type":2213,"url":7529},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2262,2263,2264,2265,2266,2267,2268],{"id":303,"slug":7532,"dossier":46,"summary":331,"aliases":7533,"sourceIds":7535,"published":7536,"modified":7537,"checkedAt":7,"severity":7538,"references":7540,"versionKeys":7543,"packageCount":32,"repositoryCount":2366},"pysec-2025-218-39811fc3",[7534],"CVE-2025-14930",[303],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[7539],{"type":2209,"score":2248},[7541],{"type":2213,"url":7542},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2262,2263,2264,2265],{"id":304,"slug":7545,"dossier":46,"summary":331,"aliases":7546,"sourceIds":7549,"published":7550,"modified":7551,"checkedAt":7,"severity":7552,"references":7554,"versionKeys":7565,"packageCount":32,"repositoryCount":3294},"pysec-2026-139-96951ff6",[7547,7548],"BIT-pytorch-2026-4538","CVE-2026-4538",[304],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[7553],{"type":2209,"score":6034},[7555,7557,7559,7561,7563],{"type":2224,"url":7556},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2213,"url":7558},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2213,"url":7560},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2492,"url":7562},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2218,"url":7564},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[6498,2511,2512,2513,4084,4085,6163,6164,6165],{"id":305,"slug":7567,"dossier":91,"summary":331,"aliases":7568,"sourceIds":7571,"published":7572,"modified":7573,"checkedAt":7,"severity":7574,"references":7577,"versionKeys":7592,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[7569,7570],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[305],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[7575],{"type":2209,"score":7576},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7578,7580,7582,7584,7586,7588,7590],{"type":2224,"url":7579},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2224,"url":7581},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2213,"url":7583},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2213,"url":7585},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2492,"url":7587},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2218,"url":7589},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2257,"url":7591},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[7593,7594,7595,7596,7597,7598],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":306,"slug":7600,"dossier":91,"summary":331,"aliases":7601,"sourceIds":7605,"published":7606,"modified":7607,"checkedAt":7,"severity":7608,"references":7610,"versionKeys":7617,"packageCount":32,"repositoryCount":103},"pysec-2026-2253-e1ccf3df",[7602,7603,7604],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[306],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[7609],{"type":2209,"score":2316},[7611,7613,7615],{"type":2213,"url":7612},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":2218,"url":7614},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2257,"url":7616},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":307,"slug":7619,"dossier":91,"summary":331,"aliases":7620,"sourceIds":7624,"published":7625,"modified":7626,"checkedAt":7,"severity":7627,"references":7629,"versionKeys":7634,"packageCount":32,"repositoryCount":103},"pysec-2026-2254-a1ed1fd2",[7621,7622,7623],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[307],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[7628],{"type":2209,"score":2316},[7630,7631,7632],{"type":2213,"url":7612},{"type":2218,"url":7614},{"type":2257,"url":7633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":308,"slug":7636,"dossier":91,"summary":331,"aliases":7637,"sourceIds":7641,"published":7642,"modified":7643,"checkedAt":7,"severity":7644,"references":7646,"versionKeys":7651,"packageCount":32,"repositoryCount":103},"pysec-2026-2255-d0951b98",[7638,7639,7640],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[308],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[7645],{"type":2209,"score":2316},[7647,7648,7649],{"type":2213,"url":7612},{"type":2218,"url":7614},{"type":2257,"url":7650},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":309,"slug":7653,"dossier":91,"summary":331,"aliases":7654,"sourceIds":7658,"published":7659,"modified":7660,"checkedAt":7,"severity":7661,"references":7663,"versionKeys":7669,"packageCount":32,"repositoryCount":103},"pysec-2026-2256-0f333f0b",[7655,7656,7657],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[309],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[7662],{"type":2209,"score":2316},[7664,7665,7667],{"type":2213,"url":7612},{"type":2218,"url":7666},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2257,"url":7668},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":310,"slug":7671,"dossier":91,"summary":331,"aliases":7672,"sourceIds":7676,"published":7677,"modified":7678,"checkedAt":7,"severity":7679,"references":7682,"versionKeys":7692,"packageCount":32,"repositoryCount":103},"pysec-2026-2257-bcbe5d79",[7673,7674,7675],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[310],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[7680],{"type":2209,"score":7681},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[7683,7684,7686,7688,7690],{"type":2213,"url":7612},{"type":2218,"url":7685},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2218,"url":7687},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2218,"url":7689},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2257,"url":7691},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":311,"slug":7694,"dossier":46,"summary":331,"aliases":7695,"sourceIds":7698,"published":7699,"modified":7700,"checkedAt":7,"severity":7701,"references":7703,"versionKeys":7706,"packageCount":32,"repositoryCount":550},"pysec-2026-227-5f5a1d28",[7696,7697],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[311],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[7702],{"type":2209,"score":2378},[7704],{"type":2257,"url":7705},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[2413,2414,2621],{"id":312,"slug":7708,"dossier":46,"summary":331,"aliases":7709,"sourceIds":7712,"published":7713,"modified":7714,"checkedAt":7,"severity":7715,"references":7718,"versionKeys":7729,"packageCount":32,"repositoryCount":550},"pysec-2026-2273-c0c1a62e",[7710,7711],"CVE-2026-57516","GHSA-hhrp-gw25-jr43",[312],"2026-07-01T17:16:37.390Z","2026-07-13T07:15:44.097966037Z",[7716],{"type":2313,"score":7717},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7719,7721,7723,7725,7727],{"type":2213,"url":7720},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.56.0",{"type":2213,"url":7722},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fray-unsafe-deserialization-rce-via-webdataset-reader",{"type":2218,"url":7724},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63469",{"type":2218,"url":7726},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63470",{"type":2218,"url":7728},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-hhrp-gw25-jr43",[3765,3766,5137],{"id":313,"slug":7731,"dossier":46,"summary":331,"aliases":7732,"sourceIds":7737,"published":7738,"modified":7739,"checkedAt":7,"severity":7740,"references":7742,"versionKeys":7758,"packageCount":32,"repositoryCount":2333},"pysec-2026-2286-8795b007",[7733,7734,7735,7736],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[313],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[7741],{"type":2209,"score":2378},[7743,7745,7747,7748,7750,7752,7754,7756],{"type":2224,"url":7744},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2224,"url":7746},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2213,"url":3805},{"type":2213,"url":7749},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2213,"url":7751},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2492,"url":7753},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2492,"url":7755},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2218,"url":7757},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2511,2512,2513,4084,4085,6163,6164,6165],{"id":314,"slug":7760,"dossier":46,"summary":331,"aliases":7761,"sourceIds":7763,"published":7764,"modified":7765,"checkedAt":7,"severity":7766,"references":7768,"versionKeys":7778,"packageCount":32,"repositoryCount":550},"pysec-2026-2302-60c0b148",[7762],"CVE-2026-5497",[314],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[7767],{"type":2209,"score":2316},[7769,7771,7773,7775,7776],{"type":2224,"url":7770},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":2224,"url":7772},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":2492,"url":7774},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":2218,"url":5904},{"type":2257,"url":7777},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[2413,2414,2621],{"id":315,"slug":7780,"dossier":91,"summary":331,"aliases":7781,"sourceIds":7785,"published":7786,"modified":7787,"checkedAt":7,"severity":7788,"references":7791,"versionKeys":7798,"packageCount":32,"repositoryCount":103},"pysec-2026-3447-df031425",[7782,7783,7784],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[315],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[7789],{"type":2209,"score":7790},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[7792,7794,7796],{"type":2213,"url":7793},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":2218,"url":7795},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2257,"url":7797},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[3240,3241,7799,7800,7801,7802,7803,7804,7805],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":316,"slug":7807,"dossier":91,"summary":331,"aliases":7808,"sourceIds":7812,"published":7813,"modified":7814,"checkedAt":7,"severity":7815,"references":7817,"versionKeys":7826,"packageCount":32,"repositoryCount":103},"pysec-2026-3451-3e5eac34",[7809,7810,7811],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[316],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[7816],{"type":2209,"score":2316},[7818,7820,7822,7824],{"type":2213,"url":7819},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2218,"url":7821},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2218,"url":7823},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2257,"url":7825},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[4641,4642,4643,3289,3290,3291,3292,3293],{"id":317,"slug":7828,"dossier":46,"summary":331,"aliases":7829,"sourceIds":7833,"published":7834,"modified":7835,"checkedAt":7,"severity":7836,"references":7838,"versionKeys":7846,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[7830,7831,7832],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[317],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[7837],{"type":2209,"score":2316},[7839,7840,7842,7844],{"type":2213,"url":7819},{"type":2218,"url":7841},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2218,"url":7843},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2257,"url":7845},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[3291,3292,3293],{"id":318,"slug":7848,"dossier":91,"summary":331,"aliases":7849,"sourceIds":7853,"published":7854,"modified":7855,"checkedAt":7,"severity":7856,"references":7858,"versionKeys":7866,"packageCount":32,"repositoryCount":103},"pysec-2026-3453-83974725",[7850,7851,7852],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[318],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[7857],{"type":2209,"score":2316},[7859,7860,7862,7864],{"type":2213,"url":7819},{"type":2218,"url":7861},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2218,"url":7863},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2257,"url":7865},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[4641,4642,4643,3289,3290,3291,3292,3293],1784558560878]