[{"data":1,"prerenderedAt":3228},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-5201":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":187,"related":195},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":103,"artifactResolvedComponentCount":102,"exactManifestPinCount":32,"packageCount":102,"ecosystems":104,"aiPackageCount":106,"licenseExpressionCount":75,"unknownLicensePackageCount":32,"advisoryIds":107,"advisoryCount":185,"providers":186},"opencode:5201","opencode-5201",5201,"photovoltaic_systems","uba-ki-lab\u002Fphotovoltaic_systems",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems","d0ec9137f2985f323b9aad141d83c47d14c64cce","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fcommit\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce","2026-06-23T00:00:13.675Z","2025-07-28T14:41:03.000Z",{"complete":91,"entryCount":92,"truncated":46},true,63,[94],{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"componentCount":102},"sbom.json","sbom-json","90b7d669fbf37c00e7bd5bf4e73a60e7eb78927e","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fblob\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce\u002Fsbom.json","96f1a2a325045c8cc77018c4e6ddb5eee3755657b446c27c42dc724c0bcc6365",306666,"parsed",98,99,[105],"pypi",3,[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184],"GHSA-248v-346w-9cwc","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-38jv-5279-wg99","GHSA-3j69-69wj-xqx2","GHSA-48p4-8xcf-vxj5","GHSA-4xh5-x5gv-qwph","GHSA-53q9-r3pm-6pq6","GHSA-58qw-9mgm-455v","GHSA-5rjg-fvgr-3xxf","GHSA-5xmw-vc9v-4wf2","GHSA-6497-prx7-gpmq","GHSA-65pc-fj4g-8rjx","GHSA-6vgw-5pg2-w6jp","GHSA-768j-98cg-p3fv","GHSA-836r-79rf-4m37","GHSA-887c-mr87-cxwp","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-c38f-wx89-p2xg","GHSA-c678-jfcj-6jmf","GHSA-c8rr-9gxc-jprv","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h75v-3vvj-5mfj","GHSA-jp4c-xjxw-mgf9","GHSA-mf9v-mfxr-j63j","GHSA-mq26-g339-26xf","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-r73j-pqj5-w3x7","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-w853-jp5j-5j7f","GHSA-wf93-45jw-7689","GHSA-wgvc-ghv9-3pmm","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-x3gm-94wq-g975","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-2286","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",77,[],{"files":188,"occurrenceCount":103},[189,194],{"path":190,"kind":191,"sourceUrl":192,"commitSha":86,"blobSha":193,"state":101,"componentCount":32},"requirements.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fphotovoltaic_systems\u002F-\u002Fblob\u002Fd0ec9137f2985f323b9aad141d83c47d14c64cce\u002Frequirements.txt","7a97f17a84ac02fdfcec421e3644be03d98eeb57",{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":86,"contentSha256":99,"byteCount":100,"state":101,"componentCount":102},{"packages":196,"vulnerabilities":1093},[197,208,218,229,241,251,261,270,281,290,299,309,318,328,337,346,355,364,373,382,392,400,409,418,427,437,447,456,465,474,483,492,501,510,519,528,537,546,556,565,574,583,592,601,610,619,628,637,645,653,663,672,681,690,698,707,716,725,734,743,752,761,770,779,787,797,806,816,825,834,843,852,861,870,879,888,897,906,915,924,933,942,951,960,969,978,986,995,1004,1013,1022,1031,1040,1049,1059,1067,1075,1084],{"id":198,"slug":199,"identity":200,"label":201,"aiRelevant":91,"provider":84,"advisoryCount":202,"licenseExpressions":203,"versions":205,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":207},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[204],"BSD-3-Clause",[206],"2.7.0",[95],{"id":209,"slug":210,"identity":211,"label":212,"aiRelevant":91,"provider":84,"advisoryCount":38,"licenseExpressions":213,"versions":215,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":217},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[214],"Apache-2.0",[216],"4.11.0.86",[95],{"id":219,"slug":220,"identity":221,"label":222,"aiRelevant":91,"provider":84,"advisoryCount":38,"licenseExpressions":223,"versions":225,"dossier":91,"occurrenceCount":227,"directOccurrenceCount":32,"evidenceFiles":228},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[204,224],"non-standard",[226],"1.6.1",2,[190,95],{"id":230,"slug":231,"identity":232,"label":233,"aiRelevant":46,"provider":84,"advisoryCount":234,"licenseExpressions":235,"versions":238,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":240},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[236,237],"HPND","MIT-CMU",[239],"11.2.1",[95],{"id":242,"slug":243,"identity":244,"label":245,"aiRelevant":46,"provider":84,"advisoryCount":65,"licenseExpressions":246,"versions":248,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":250},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[247],"MIT",[249],"2.4.0",[95],{"id":252,"slug":253,"identity":254,"label":255,"aiRelevant":46,"provider":84,"advisoryCount":256,"licenseExpressions":257,"versions":258,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":260},"package:pypi:pip","pip-2911c768","pypi:pip","pip",6,[247],[259],"25.1.1",[95],{"id":262,"slug":263,"identity":264,"label":265,"aiRelevant":46,"provider":84,"advisoryCount":34,"licenseExpressions":266,"versions":267,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":269},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[204,224],[268],"3.1.6",[95],{"id":271,"slug":272,"identity":273,"label":274,"aiRelevant":46,"provider":84,"advisoryCount":34,"licenseExpressions":275,"versions":278,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":280},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[204,276,277],"BSD-3-Clause AND TCL","TCL",[279],"5.10.0",[95],{"id":282,"slug":283,"identity":284,"label":285,"aiRelevant":46,"provider":84,"advisoryCount":106,"licenseExpressions":286,"versions":287,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":289},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[214],[288],"2.32.3",[95],{"id":291,"slug":292,"identity":293,"label":294,"aiRelevant":46,"provider":84,"advisoryCount":106,"licenseExpressions":295,"versions":296,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":298},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[247],[297],"80.8.0",[95],{"id":300,"slug":301,"identity":302,"label":303,"aiRelevant":46,"provider":84,"advisoryCount":227,"licenseExpressions":304,"versions":306,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":308},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[247,305],"Unlicense",[307],"3.18.0",[95],{"id":310,"slug":311,"identity":312,"label":313,"aiRelevant":46,"provider":84,"advisoryCount":227,"licenseExpressions":314,"versions":315,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":317},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[247],[316],"2.7",[95],{"id":319,"slug":320,"identity":321,"label":322,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":323,"versions":325,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":327},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[324],"MPL-2.0",[326],"2025.4.26",[95],{"id":329,"slug":330,"identity":331,"label":332,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":333,"versions":334,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":336},"package:pypi:click","click-ef97f731","pypi:click","click",[204,224],[335],"8.2.1",[95],{"id":338,"slug":339,"identity":340,"label":341,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":342,"versions":343,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":345},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[247],[344],"4.58.0",[95],{"id":347,"slug":348,"identity":349,"label":350,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":351,"versions":352,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":354},"package:pypi:geopandas","geopandas-968b51b0","pypi:geopandas","geopandas",[204],[353],"1.0.1",[95],{"id":356,"slug":357,"identity":358,"label":359,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":360,"versions":361,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":363},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[204,224],[362],"3.10",[95],{"id":365,"slug":366,"identity":367,"label":368,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":369,"versions":370,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":372},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[204],[371],"5.4.0",[95],{"id":374,"slug":375,"identity":376,"label":377,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":378,"versions":379,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":381},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[214,224],[380],"20.0.0",[95],{"id":383,"slug":384,"identity":385,"label":386,"aiRelevant":46,"provider":84,"advisoryCount":32,"licenseExpressions":387,"versions":389,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":391},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[388],"MIT AND MPL-2.0",[390],"4.67.1",[95],{"id":393,"slug":394,"identity":395,"label":396,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":397,"versions":398,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":399},"package:pypi:affine","affine-44cc504f","pypi:affine","affine",[224],[249],[95],{"id":401,"slug":402,"identity":403,"label":404,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":405,"versions":406,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":408},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[224],[407],"1.3.0",[95],{"id":410,"slug":411,"identity":412,"label":413,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":414,"versions":415,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":417},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[247],[416],"25.3.0",[95],{"id":419,"slug":420,"identity":421,"label":422,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":423,"versions":424,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":426},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[247],[425],"4.13.4",[95],{"id":428,"slug":429,"identity":430,"label":431,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":432,"versions":434,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":436},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[433],"BSD-2-Clause",[435],"5.0",[95],{"id":438,"slug":439,"identity":440,"label":441,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":442,"versions":444,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":446},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[443,224],"0BSD",[445],"5.2.0",[95],{"id":448,"slug":449,"identity":450,"label":451,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":452,"versions":453,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":455},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[247],[454],"3.4.2",[95],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":461,"versions":462,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":464},"package:pypi:click-plugins","click-plugins-b43a6bb3","pypi:click-plugins","click-plugins",[224],[463],"1.1.1",[95],{"id":466,"slug":467,"identity":468,"label":469,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":470,"versions":471,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":473},"package:pypi:cligj","cligj-f69f4bb0","pypi:cligj","cligj",[224],[472],"0.7.2",[95],{"id":475,"slug":476,"identity":477,"label":478,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":479,"versions":480,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":482},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[224],[481],"1.3.2",[95],{"id":484,"slug":485,"identity":486,"label":487,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":488,"versions":489,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":491},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[224],[490],"0.12.1",[95],{"id":493,"slug":494,"identity":495,"label":496,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":497,"versions":498,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":500},"package:pypi:cyclonedx-bom","cyclonedx-bom-120c32c1","pypi:cyclonedx-bom","cyclonedx-bom",[214],[499],"6.1.1",[95],{"id":502,"slug":503,"identity":504,"label":505,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":506,"versions":507,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":509},"package:pypi:cyclonedx-python-lib","cyclonedx-python-lib-af6d232b","pypi:cyclonedx-python-lib","cyclonedx-python-lib",[214],[508],"10.0.1",[95],{"id":511,"slug":512,"identity":513,"label":514,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":515,"versions":516,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":518},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[224],[517],"0.7.1",[95],{"id":520,"slug":521,"identity":522,"label":523,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":524,"versions":525,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":527},"package:pypi:fqdn","fqdn-2616214a","pypi:fqdn","fqdn",[224],[526],"1.5.1",[95],{"id":529,"slug":530,"identity":531,"label":532,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":533,"versions":534,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":536},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[204,224],[535],"2025.5.0",[95],{"id":538,"slug":539,"identity":540,"label":541,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":542,"versions":543,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":545},"package:pypi:geojson","geojson-df535d26","pypi:geojson","geojson",[224],[544],"3.2.0",[95],{"id":547,"slug":548,"identity":549,"label":550,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":551,"versions":553,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":555},"package:pypi:isoduration","isoduration-e8f86ac8","pypi:isoduration","isoduration",[552],"ISC",[554],"20.11.0",[95],{"id":557,"slug":558,"identity":559,"label":560,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":561,"versions":562,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":564},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[204],[563],"1.5.0",[95],{"id":566,"slug":567,"identity":568,"label":569,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":570,"versions":571,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":573},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[224],[572],"3.0.0",[95],{"id":575,"slug":576,"identity":577,"label":578,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":579,"versions":580,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":582},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[247],[581],"4.23.0",[95],{"id":584,"slug":585,"identity":586,"label":587,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":588,"versions":589,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":591},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[247],[590],"2025.4.1",[95],{"id":593,"slug":594,"identity":595,"label":596,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":597,"versions":598,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":600},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[224],[599],"1.4.8",[95],{"id":602,"slug":603,"identity":604,"label":605,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":606,"versions":607,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":609},"package:pypi:kneed","kneed-74447081","pypi:kneed","kneed",[],[608],"0.8.5",[95],{"id":611,"slug":612,"identity":613,"label":614,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":615,"versions":616,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":618},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[214],[617],"30.4.1",[95],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":624,"versions":625,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":627},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[204,224],[626],"3.0.2",[95],{"id":629,"slug":630,"identity":631,"label":632,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":633,"versions":634,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":636},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[224],[635],"3.10.3",[95],{"id":638,"slug":639,"identity":640,"label":641,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":642,"versions":643,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":644},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[224],[407],[95],{"id":646,"slug":647,"identity":648,"label":649,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":650,"versions":651,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":652},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[204,224],[454],[95],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":658,"versions":660,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":662},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[659,224],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[661],"2.2.6",[95],{"id":664,"slug":665,"identity":666,"label":667,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":668,"versions":669,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":671},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[224],[670],"12.6.4.1",[95],{"id":673,"slug":674,"identity":675,"label":676,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":677,"versions":678,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":680},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[224],[679],"12.6.80",[95],{"id":682,"slug":683,"identity":684,"label":685,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":686,"versions":687,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":689},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[224],[688],"12.6.77",[95],{"id":691,"slug":692,"identity":693,"label":694,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":695,"versions":696,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":697},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[224],[688],[95],{"id":699,"slug":700,"identity":701,"label":702,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":703,"versions":704,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":706},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[224],[705],"9.5.1.17",[95],{"id":708,"slug":709,"identity":710,"label":711,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":712,"versions":713,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":715},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[224],[714],"11.3.0.4",[95],{"id":717,"slug":718,"identity":719,"label":720,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":721,"versions":722,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":724},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[224],[723],"1.11.1.6",[95],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":730,"versions":731,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":733},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[224],[732],"10.3.7.77",[95],{"id":735,"slug":736,"identity":737,"label":738,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":739,"versions":740,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":742},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[224],[741],"11.7.1.2",[95],{"id":744,"slug":745,"identity":746,"label":747,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":748,"versions":749,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":751},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[224],[750],"12.5.4.2",[95],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":757,"versions":758,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":760},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[224],[759],"0.6.3",[95],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":766,"versions":767,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":769},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[204,224],[768],"2.26.2",[95],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":775,"versions":776,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":778},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[224],[777],"12.6.85",[95],{"id":780,"slug":781,"identity":782,"label":783,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":784,"versions":785,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":786},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[214,224],[688],[95],{"id":788,"slug":789,"identity":790,"label":791,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":792,"versions":794,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":796},"package:pypi:osmpythontools","osmpythontools-10ae8221","pypi:osmpythontools","osmpythontools",[793],"GPL-3.0",[795],"0.3.5",[95],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":802,"versions":803,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":805},"package:pypi:packageurl-python","packageurl-python-dc3afccd","pypi:packageurl-python","packageurl-python",[247],[804],"0.16.0",[95],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":811,"versions":813,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":815},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[812,224],"Apache-2.0 OR BSD-2-Clause",[814],"25.0",[95],{"id":817,"slug":818,"identity":819,"label":820,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":821,"versions":822,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":824},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[224],[823],"2.2.3",[95],{"id":826,"slug":827,"identity":828,"label":829,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":830,"versions":831,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":833},"package:pypi:pip-requirements-parser","pip-requirements-parser-3a4c3c44","pypi:pip-requirements-parser","pip-requirements-parser",[247],[832],"32.0.1",[95],{"id":835,"slug":836,"identity":837,"label":838,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":839,"versions":840,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":842},"package:pypi:py-serializable","py-serializable-cebfca90","pypi:py-serializable","py-serializable",[214],[841],"2.0.0",[95],{"id":844,"slug":845,"identity":846,"label":847,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":848,"versions":849,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":851},"package:pypi:pyogrio","pyogrio-ff34272a","pypi:pyogrio","pyogrio",[224],[850],"0.11.0",[95],{"id":853,"slug":854,"identity":855,"label":856,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":857,"versions":858,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":860},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[247],[859],"3.2.3",[95],{"id":862,"slug":863,"identity":864,"label":865,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":866,"versions":867,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":869},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[247],[868],"3.7.1",[95],{"id":871,"slug":872,"identity":873,"label":874,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":875,"versions":876,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":878},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[224],[877],"2.9.0.post0",[95],{"id":880,"slug":881,"identity":882,"label":883,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":884,"versions":885,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":887},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[247],[886],"2025.2",[95],{"id":889,"slug":890,"identity":891,"label":892,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":893,"versions":894,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":896},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[247],[895],"6.0.2",[95],{"id":898,"slug":899,"identity":900,"label":901,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":902,"versions":903,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":905},"package:pypi:rasterio","rasterio-8127369d","pypi:rasterio","rasterio",[204,224],[904],"1.4.3",[95],{"id":907,"slug":908,"identity":909,"label":910,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":911,"versions":912,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":914},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[247],[913],"0.36.2",[95],{"id":916,"slug":917,"identity":918,"label":919,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":920,"versions":921,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":923},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[247],[922],"0.1.4",[95],{"id":925,"slug":926,"identity":927,"label":928,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":929,"versions":930,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":932},"package:pypi:rfc3987","rfc3987-a4373505","pypi:rfc3987","rfc3987",[224],[931],"1.3.8",[95],{"id":934,"slug":935,"identity":936,"label":937,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":938,"versions":939,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":941},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[247],[940],"0.25.0",[95],{"id":943,"slug":944,"identity":945,"label":946,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":947,"versions":948,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":950},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[224],[949],"1.15.3",[95],{"id":952,"slug":953,"identity":954,"label":955,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":956,"versions":957,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":959},"package:pypi:segment-anything","segment-anything-e8a30cc3","pypi:segment-anything","segment-anything",[214],[958],"1.0",[95],{"id":961,"slug":962,"identity":963,"label":964,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":965,"versions":966,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":968},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[204],[967],"2.1.1",[95],{"id":970,"slug":971,"identity":972,"label":973,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":974,"versions":975,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":977},"package:pypi:six","six-3c3888bd","pypi:six","six",[247],[976],"1.17.0",[95],{"id":979,"slug":980,"identity":981,"label":982,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":983,"versions":984,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":985},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[214],[249],[95],{"id":987,"slug":988,"identity":989,"label":990,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":991,"versions":992,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":994},"package:pypi:supervision","supervision-c48208b7","pypi:supervision","supervision",[247],[993],"0.25.1",[95],{"id":996,"slug":997,"identity":998,"label":999,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1000,"versions":1001,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1003},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[224],[1002],"1.14.0",[95],{"id":1005,"slug":1006,"identity":1007,"label":1008,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1009,"versions":1010,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1012},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[204],[1011],"3.6.0",[95],{"id":1014,"slug":1015,"identity":1016,"label":1017,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1018,"versions":1019,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1021},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[247],[1020],"2.2.1",[95],{"id":1023,"slug":1024,"identity":1025,"label":1026,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1027,"versions":1028,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1030},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[224],[1029],"0.22.0",[95],{"id":1032,"slug":1033,"identity":1034,"label":1035,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1036,"versions":1037,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1039},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[247],[1038],"3.3.0",[95],{"id":1041,"slug":1042,"identity":1043,"label":1044,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1045,"versions":1046,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1048},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[214],[1047],"2.9.0.20250516",[95],{"id":1050,"slug":1051,"identity":1052,"label":1053,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1054,"versions":1056,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1058},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[1055,224],"PSF-2.0",[1057],"4.13.2",[95],{"id":1060,"slug":1061,"identity":1062,"label":1063,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1064,"versions":1065,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1066},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[214],[886],[95],{"id":1068,"slug":1069,"identity":1070,"label":1071,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1072,"versions":1073,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1074},"package:pypi:uri-template","uri-template-04c43560","pypi:uri-template","uri-template",[247],[407],[95],{"id":1076,"slug":1077,"identity":1078,"label":1079,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1080,"versions":1081,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1083},"package:pypi:webcolors","webcolors-380e4f6b","pypi:webcolors","webcolors",[204],[1082],"24.11.1",[95],{"id":1085,"slug":1086,"identity":1087,"label":1088,"aiRelevant":46,"provider":84,"advisoryCount":38,"licenseExpressions":1089,"versions":1090,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1092},"package:pypi:xarray","xarray-1bb3cdce","pypi:xarray","xarray",[214],[1091],"2025.4.0",[95],[1094,1133,1160,1193,1236,1262,1291,1317,1351,1377,1403,1439,1469,1506,1533,1559,1590,1611,1650,1684,1714,1738,1770,1798,1857,1889,1921,1955,1988,2015,2038,2066,2100,2126,2148,2191,2215,2242,2269,2290,2327,2359,2388,2418,2450,2479,2508,2538,2590,2618,2670,2693,2725,2753,2773,2790,2809,2826,2847,2863,2878,2895,2910,2927,2944,2961,2983,3016,3035,3052,3069,3087,3110,3140,3167,3188,3208],{"id":108,"slug":1095,"dossier":46,"summary":1096,"aliases":1097,"sourceIds":1100,"published":1101,"modified":1102,"checkedAt":7,"severity":1103,"references":1107,"versionKeys":1131,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1098,1099],"CVE-2024-39689","PYSEC-2024-230",[108,1099],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[1104],{"type":1105,"score":1106},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1108,1111,1113,1116,1119,1122,1125,1127,1129],{"type":1109,"url":1110},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1109,"url":1112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1114,"url":1115},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1117,"url":1118},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1120,"url":1121},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1123,"url":1124},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1120,"url":1126},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1109,"url":1128},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1109,"url":1130},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1132],"pypi:certifi@2024.6.2",{"id":109,"slug":1134,"dossier":46,"summary":1135,"aliases":1136,"sourceIds":1139,"published":1140,"modified":1141,"checkedAt":7,"severity":1142,"references":1145,"versionKeys":1156,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[1137,1138],"CVE-2026-49476","PYSEC-2026-3071",[109,1138],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[1143],{"type":1105,"score":1144},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1146,1148,1150,1152,1154],{"type":1120,"url":1147},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1117,"url":1149},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":1117,"url":1151},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":1109,"url":1153},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1109,"url":1155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[1157,1158,1159],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":110,"slug":1161,"dossier":91,"summary":1162,"aliases":1163,"sourceIds":1166,"published":1167,"modified":1168,"checkedAt":7,"severity":1169,"references":1173,"versionKeys":1186,"packageCount":32,"repositoryCount":1192},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1164,1165],"CVE-2025-66471","PYSEC-2026-1994",[110,1165],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[1170],{"type":1171,"score":1172},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1174,1176,1178,1180,1182,1184],{"type":1120,"url":1175},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1109,"url":1177},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1114,"url":1179},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1117,"url":1181},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1117,"url":1183},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1109,"url":1185},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1187,1188,1189,1190,1191],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":111,"slug":1194,"dossier":46,"summary":1195,"aliases":1196,"sourceIds":1200,"published":1201,"modified":1202,"checkedAt":7,"severity":1203,"references":1210,"versionKeys":1232,"packageCount":32,"repositoryCount":106},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1197,1198,1199],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[111,1199],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[1204,1206,1208],{"type":1105,"score":1205},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1171,"score":1207},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1105,"score":1209},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1211,1213,1216,1218,1220,1222,1224,1226,1228,1230],{"type":1109,"url":1212},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1214,"url":1215},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1214,"url":1217},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1120,"url":1219},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1117,"url":1221},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1120,"url":1223},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1214,"url":1225},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1109,"url":1227},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1109,"url":1229},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1109,"url":1231},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1233,1234,1235],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":112,"slug":1237,"dossier":91,"summary":1238,"aliases":1239,"sourceIds":1242,"published":1243,"modified":1244,"checkedAt":7,"severity":1245,"references":1248,"versionKeys":1261,"packageCount":32,"repositoryCount":1192},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1240,1241],"CVE-2026-21441","PYSEC-2026-1996",[112,1241],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1246,1247],{"type":1105,"score":1144},{"type":1171,"score":1172},[1249,1251,1253,1255,1256,1258,1259],{"type":1120,"url":1250},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1109,"url":1252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1114,"url":1254},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1117,"url":1181},{"type":1120,"url":1257},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1117,"url":1183},{"type":1109,"url":1260},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1187,1188,1189,1190,1191],{"id":113,"slug":1263,"dossier":46,"summary":1264,"aliases":1265,"sourceIds":1268,"published":1269,"modified":1270,"checkedAt":7,"severity":1271,"references":1274,"versionKeys":1287,"packageCount":32,"repositoryCount":1290},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[1266,1267],"CVE-2026-54911","PYSEC-2026-2294",[113,1267],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[1272],{"type":1105,"score":1273},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1275,1277,1279,1281,1283,1285],{"type":1114,"url":1276},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":1109,"url":1278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":1114,"url":1280},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":1120,"url":1282},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":1117,"url":1284},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":1109,"url":1286},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[1288,1289],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",5,{"id":114,"slug":1292,"dossier":46,"summary":1293,"aliases":1294,"sourceIds":1297,"published":1298,"modified":1299,"checkedAt":7,"severity":1300,"references":1303,"versionKeys":1316,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1295,1296],"CVE-2025-50182","PYSEC-2026-1997",[114,1296],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1301],{"type":1105,"score":1302},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1304,1306,1308,1310,1311,1313,1314],{"type":1120,"url":1305},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1109,"url":1307},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1114,"url":1309},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1117,"url":1181},{"type":1120,"url":1312},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1117,"url":1183},{"type":1109,"url":1315},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1187,1188,1189,1190],{"id":115,"slug":1318,"dossier":46,"summary":1319,"aliases":1320,"sourceIds":1323,"published":1324,"modified":1325,"checkedAt":7,"severity":1326,"references":1329,"versionKeys":1348,"packageCount":32,"repositoryCount":106},"ghsa-4xh5-x5gv-qwph-bdb101cb","pip's fallback tar extraction doesn't check symbolic links point to extraction directory",[1321,1322],"CVE-2025-8869","PYSEC-2026-1795",[115,1322],"2025-09-24T15:31:14Z","2026-07-07T17:57:29.434622137Z",[1327],{"type":1171,"score":1328},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1330,1332,1334,1336,1338,1340,1342,1344,1346],{"type":1109,"url":1331},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8869",{"type":1120,"url":1333},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13550",{"type":1114,"url":1335},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Ff2b92314da012b9fffa36b3f3e67748a37ef464a",{"type":1117,"url":1337},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip",{"type":1120,"url":1339},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00028.html",{"type":1120,"url":1341},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FIF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN",{"type":1120,"url":1343},"https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Fnews\u002F#v25-2",{"type":1117,"url":1345},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpip",{"type":1109,"url":1347},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xh5-x5gv-qwph",[1349,1350],"pypi:pip@22.0.2","pypi:pip@25.1.1",{"id":116,"slug":1352,"dossier":46,"summary":1353,"aliases":1354,"sourceIds":1358,"published":1359,"modified":1360,"checkedAt":7,"severity":1361,"references":1366,"versionKeys":1376,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1355,1356,1357],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[116,1357],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[1362,1364],{"type":1171,"score":1363},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1105,"score":1365},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1367,1369,1371,1373,1375],{"type":1109,"url":1368},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1109,"url":1370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1120,"url":1372},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1120,"url":1374},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1117,"url":1221},[1233],{"id":117,"slug":1378,"dossier":46,"summary":1379,"aliases":1380,"sourceIds":1383,"published":1384,"modified":1385,"checkedAt":7,"severity":1386,"references":1389,"versionKeys":1402,"packageCount":32,"repositoryCount":106},"ghsa-58qw-9mgm-455v-d690efaf","pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files",[1381,1382],"CVE-2026-3219","PYSEC-2026-2875",[117,1382],"2026-04-20T18:31:48Z","2026-07-13T16:43:17.083270258Z",[1387],{"type":1171,"score":1388},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1390,1392,1394,1396,1397,1399,1400],{"type":1109,"url":1391},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3219",{"type":1120,"url":1393},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F13867",{"type":1120,"url":1395},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13870",{"type":1117,"url":1337},{"type":1120,"url":1398},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FQAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ",{"type":1117,"url":1345},{"type":1109,"url":1401},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58qw-9mgm-455v",[1349,1350],{"id":118,"slug":1404,"dossier":46,"summary":1405,"aliases":1406,"sourceIds":1410,"published":1411,"modified":1412,"checkedAt":7,"severity":1413,"references":1418,"versionKeys":1436,"packageCount":32,"repositoryCount":227},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1407,1408,1409],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[118,1409],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[1414,1416],{"type":1171,"score":1415},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1105,"score":1417},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1419,1422,1424,1426,1428,1430,1432,1434],{"type":1420,"url":1421},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1109,"url":1423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1214,"url":1425},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1114,"url":1427},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1120,"url":1429},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1117,"url":1431},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1120,"url":1433},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1123,"url":1435},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1437,1438],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":119,"slug":1440,"dossier":46,"summary":1441,"aliases":1442,"sourceIds":1446,"published":1447,"modified":1448,"checkedAt":7,"severity":1449,"references":1453,"versionKeys":1462,"packageCount":32,"repositoryCount":1468},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1443,1444,1445],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[119,1445],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[1450,1451],{"type":1105,"score":1209},{"type":1171,"score":1452},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1454,1456,1458,1460],{"type":1109,"url":1455},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1109,"url":1457},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1117,"url":1459},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1109,"url":1461},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1463,1464,1465,1466,1467],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":120,"slug":1470,"dossier":46,"summary":1471,"aliases":1472,"sourceIds":1475,"published":1476,"modified":1477,"checkedAt":7,"severity":1478,"references":1481,"versionKeys":1504,"packageCount":32,"repositoryCount":32},"ghsa-6497-prx7-gpmq-2b8ee85d","geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure",[1473,1474],"CVE-2025-69662","PYSEC-2026-62",[120,1474],"2026-01-30T19:16:11.967Z","2026-06-10T17:01:18.172032507Z",[1479],{"type":1105,"score":1480},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1482,1484,1486,1488,1490,1492,1494,1496,1498,1500,1502],{"type":1109,"url":1483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69662",{"type":1120,"url":1485},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fissues\u002F3679",{"type":1114,"url":1487},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fpull\u002F3681",{"type":1120,"url":1489},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fcommit\u002F6aa8ef14ffdee4ba1044349ab948e1a1fbfaf419",{"type":1120,"url":1491},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas",{"type":1117,"url":1493},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas",{"type":1120,"url":1495},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Freleases\u002Ftag\u002Fv1.1.2",{"type":1120,"url":1497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgeopandas\u002FPYSEC-2026-62.yaml",{"type":1120,"url":1499},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00025.html",{"type":1420,"url":1501},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas\u002F",{"type":1109,"url":1503},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6497-prx7-gpmq",[1505],"pypi:geopandas@1.0.1",{"id":121,"slug":1507,"dossier":91,"summary":1508,"aliases":1509,"sourceIds":1512,"published":1513,"modified":1514,"checkedAt":7,"severity":1515,"references":1520,"versionKeys":1529,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1510,1511],"CVE-2026-45409","PYSEC-2026-215",[121,1511],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1516,1518],{"type":1105,"score":1517},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1171,"score":1519},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1521,1523,1525,1527],{"type":1109,"url":1522},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1109,"url":1524},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1117,"url":1526},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1120,"url":1528},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1530,1531,1532],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":122,"slug":1534,"dossier":46,"summary":1535,"aliases":1536,"sourceIds":1539,"published":1540,"modified":1541,"checkedAt":7,"severity":1542,"references":1545,"versionKeys":1558,"packageCount":32,"repositoryCount":106},"ghsa-6vgw-5pg2-w6jp-57c7d3f5","pip Path Traversal vulnerability",[1537,1538],"CVE-2026-1703","PYSEC-2026-1796",[122,1538],"2026-02-02T15:30:34Z","2026-07-07T17:56:16.480954738Z",[1543],{"type":1171,"score":1544},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1546,1548,1550,1552,1553,1555,1556],{"type":1109,"url":1547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1703",{"type":1120,"url":1549},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13777",{"type":1120,"url":1551},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F8e227a9be4faa9594e05d02ca05a413a2a4e7735",{"type":1117,"url":1337},{"type":1120,"url":1554},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FWIEA34D4TABF2UNQJAOMXKCICSPBE2DJ",{"type":1117,"url":1345},{"type":1109,"url":1557},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6vgw-5pg2-w6jp",[1349,1350],{"id":123,"slug":1560,"dossier":46,"summary":1561,"aliases":1562,"sourceIds":1565,"published":1566,"modified":1567,"checkedAt":7,"severity":1568,"references":1571,"versionKeys":1584,"packageCount":32,"repositoryCount":256},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[1563,1564],"CVE-2025-66034","PYSEC-2026-1389",[123,1564],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[1569],{"type":1105,"score":1570},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[1572,1574,1576,1578,1580,1582],{"type":1120,"url":1573},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":1109,"url":1575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":1120,"url":1577},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":1117,"url":1579},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":1117,"url":1581},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":1109,"url":1583},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[1585,1586,1587,1588,1589],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":124,"slug":1591,"dossier":46,"summary":1592,"aliases":1593,"sourceIds":1596,"published":1597,"modified":1598,"checkedAt":7,"severity":1599,"references":1601,"versionKeys":1610,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[1594,1595],"CVE-2026-49477","PYSEC-2026-3072",[124,1595],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[1600],{"type":1105,"score":1144},[1602,1604,1605,1606,1608],{"type":1120,"url":1603},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1117,"url":1149},{"type":1117,"url":1151},{"type":1109,"url":1607},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1109,"url":1609},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[1157,1158,1159],{"id":125,"slug":1612,"dossier":46,"summary":1613,"aliases":1614,"sourceIds":1618,"published":1619,"modified":1620,"checkedAt":7,"severity":1621,"references":1625,"versionKeys":1647,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[1615,1616,1617],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[125,1617],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[1622,1623],{"type":1105,"score":1205},{"type":1171,"score":1624},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1626,1628,1630,1632,1634,1636,1637,1639,1641,1643,1645],{"type":1109,"url":1627},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1120,"url":1629},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1120,"url":1631},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1120,"url":1633},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1120,"url":1635},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1117,"url":1221},{"type":1120,"url":1638},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1120,"url":1640},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1120,"url":1642},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1117,"url":1644},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1109,"url":1646},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1233,1234,1235,1648,1649],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":126,"slug":1651,"dossier":46,"summary":1652,"aliases":1653,"sourceIds":1656,"published":1657,"modified":1658,"checkedAt":7,"severity":1659,"references":1662,"versionKeys":1681,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1654,1655],"CVE-2024-47081","PYSEC-2026-1872",[126,1655],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1660],{"type":1105,"score":1661},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1663,1665,1667,1669,1671,1673,1675,1677,1679],{"type":1120,"url":1664},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1109,"url":1666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1120,"url":1668},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1114,"url":1670},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1117,"url":1672},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1120,"url":1674},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1120,"url":1676},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1117,"url":1678},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1109,"url":1680},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1682,1683],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":127,"slug":1685,"dossier":46,"summary":1686,"aliases":1687,"sourceIds":1690,"published":1691,"modified":1692,"checkedAt":7,"severity":1693,"references":1696,"versionKeys":1713,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1688,1689],"CVE-2024-35195","PYSEC-2026-1873",[127,1689],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1694],{"type":1105,"score":1695},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1697,1699,1701,1703,1705,1706,1708,1710,1711],{"type":1120,"url":1698},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1109,"url":1700},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1120,"url":1702},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1114,"url":1704},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1117,"url":1672},{"type":1120,"url":1707},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1120,"url":1709},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1117,"url":1678},{"type":1109,"url":1712},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1682],{"id":128,"slug":1715,"dossier":46,"summary":1716,"aliases":1717,"sourceIds":1720,"published":1721,"modified":1722,"checkedAt":7,"severity":1723,"references":1727,"versionKeys":1737,"packageCount":32,"repositoryCount":1290},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[1718,1719],"CVE-2026-44660","PYSEC-2026-2293",[128,1719],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[1724,1725],{"type":1105,"score":1144},{"type":1171,"score":1726},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1728,1730,1732,1734,1735],{"type":1114,"url":1729},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":1109,"url":1731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":1114,"url":1733},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":1117,"url":1284},{"type":1109,"url":1736},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[1288,1289],{"id":129,"slug":1739,"dossier":46,"summary":1740,"aliases":1741,"sourceIds":1745,"published":1746,"modified":1747,"checkedAt":7,"severity":1748,"references":1753,"versionKeys":1769,"packageCount":32,"repositoryCount":227},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[1742,1743,1744],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[129],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[1749,1751],{"type":1105,"score":1750},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1171,"score":1752},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1754,1756,1758,1760,1761,1763,1765,1767],{"type":1109,"url":1755},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1120,"url":1757},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1120,"url":1759},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1117,"url":1221},{"type":1120,"url":1762},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1120,"url":1764},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1120,"url":1766},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1120,"url":1768},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1233,1234],{"id":130,"slug":1771,"dossier":46,"summary":1772,"aliases":1773,"sourceIds":1776,"published":1777,"modified":1778,"checkedAt":7,"severity":1779,"references":1781,"versionKeys":1797,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[1774,1775],"CVE-2026-32875","PYSEC-2026-2292",[130,1775],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[1780],{"type":1105,"score":1144},[1782,1784,1786,1788,1790,1791,1793,1795],{"type":1420,"url":1783},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":1109,"url":1785},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":1214,"url":1787},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":1114,"url":1789},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":1117,"url":1284},{"type":1120,"url":1792},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":1120,"url":1794},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":1214,"url":1796},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[1288],{"id":131,"slug":1799,"dossier":46,"summary":1800,"aliases":1801,"sourceIds":1805,"published":1806,"modified":1807,"checkedAt":7,"severity":1808,"references":1812,"versionKeys":1852,"packageCount":32,"repositoryCount":1856},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[1802,1803,1804],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[131,1804],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[1809,1811],{"type":1171,"score":1810},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1105,"score":1144},[1813,1815,1817,1819,1821,1823,1824,1826,1828,1830,1832,1834,1836,1838,1840,1842,1844,1846,1848,1850],{"type":1120,"url":1814},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1109,"url":1816},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1120,"url":1818},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1120,"url":1820},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1120,"url":1822},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1117,"url":1459},{"type":1120,"url":1825},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1120,"url":1827},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1120,"url":1829},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1109,"url":1831},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1109,"url":1833},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1109,"url":1835},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1109,"url":1837},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1109,"url":1839},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1109,"url":1841},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1109,"url":1843},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1109,"url":1845},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1109,"url":1847},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1109,"url":1849},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1109,"url":1851},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1853,1854,1855,1463,1464,1465,1466],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":132,"slug":1858,"dossier":46,"summary":1859,"aliases":1860,"sourceIds":1863,"published":1864,"modified":1865,"checkedAt":7,"severity":1866,"references":1869,"versionKeys":1886,"packageCount":32,"repositoryCount":227},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[1861,1862],"CVE-2025-27516","PYSEC-2026-1471",[132,1862],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[1867],{"type":1171,"score":1868},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1870,1872,1874,1876,1878,1880,1882,1884],{"type":1120,"url":1871},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1109,"url":1873},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1114,"url":1875},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1117,"url":1877},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1120,"url":1879},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1120,"url":1881},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1117,"url":1883},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1109,"url":1885},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[1887,1888],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":133,"slug":1890,"dossier":46,"summary":1891,"aliases":1892,"sourceIds":1896,"published":1897,"modified":1898,"checkedAt":7,"severity":1899,"references":1904,"versionKeys":1920,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[1893,1894,1895],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[133,1895],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[1900,1902],{"type":1105,"score":1901},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1171,"score":1903},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1905,1907,1909,1911,1912,1914,1916,1918],{"type":1109,"url":1906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1120,"url":1908},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1120,"url":1910},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1117,"url":1431},{"type":1120,"url":1913},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1120,"url":1915},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1117,"url":1917},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1109,"url":1919},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1437],{"id":134,"slug":1922,"dossier":46,"summary":1923,"aliases":1924,"sourceIds":1928,"published":1929,"modified":1930,"checkedAt":7,"severity":1931,"references":1936,"versionKeys":1954,"packageCount":32,"repositoryCount":227},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[1925,1926,1927],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[134],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[1932,1934],{"type":1105,"score":1933},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1171,"score":1935},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1937,1939,1941,1943,1945,1947,1948,1950,1952],{"type":1109,"url":1938},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1120,"url":1940},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1120,"url":1942},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1120,"url":1944},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1120,"url":1946},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1117,"url":1221},{"type":1120,"url":1949},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1120,"url":1951},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1120,"url":1953},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1233,1234],{"id":135,"slug":1956,"dossier":46,"summary":1957,"aliases":1958,"sourceIds":1961,"published":1962,"modified":1963,"checkedAt":7,"severity":1964,"references":1967,"versionKeys":1986,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1959,1960],"CVE-2024-34062","PYSEC-2026-1976",[135,1960],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1965],{"type":1105,"score":1966},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1968,1970,1972,1974,1976,1978,1980,1982,1984],{"type":1120,"url":1969},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1109,"url":1971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1120,"url":1973},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1117,"url":1975},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1120,"url":1977},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1120,"url":1979},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1120,"url":1981},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1117,"url":1983},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1109,"url":1985},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1987],"pypi:tqdm@4.66.2",{"id":136,"slug":1989,"dossier":91,"summary":1990,"aliases":1991,"sourceIds":1994,"published":1995,"modified":1996,"checkedAt":7,"severity":1997,"references":2002,"versionKeys":2012,"packageCount":32,"repositoryCount":234},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[1992,1993],"CVE-2026-25645","PYSEC-2026-2275",[136,1993],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[1998,2000],{"type":1105,"score":1999},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1105,"score":2001},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2003,2005,2007,2009,2010],{"type":1109,"url":2004},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1109,"url":2006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1114,"url":2008},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1117,"url":1672},{"type":1109,"url":2011},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1682,1683,2013,2014],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":137,"slug":2016,"dossier":91,"summary":2017,"aliases":2018,"sourceIds":2021,"published":2022,"modified":2023,"checkedAt":7,"severity":2024,"references":2026,"versionKeys":2037,"packageCount":32,"repositoryCount":1192},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[2019,2020],"CVE-2025-66418","PYSEC-2026-1998",[137,2020],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[2025],{"type":1171,"score":1172},[2027,2029,2031,2033,2034,2035],{"type":1120,"url":2028},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1109,"url":2030},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1114,"url":2032},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1117,"url":1181},{"type":1117,"url":1183},{"type":1109,"url":2036},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1187,1188,1189,1190,1191],{"id":138,"slug":2039,"dossier":46,"summary":2040,"aliases":2041,"sourceIds":2044,"published":2045,"modified":2046,"checkedAt":7,"severity":2047,"references":2050,"versionKeys":2065,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[2042,2043],"CVE-2024-56201","PYSEC-2026-1472",[138,2043],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[2048,2049],{"type":1105,"score":1417},{"type":1171,"score":1868},[2051,2053,2055,2057,2059,2060,2062,2063],{"type":1120,"url":2052},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1109,"url":2054},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1120,"url":2056},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1114,"url":2058},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1117,"url":1877},{"type":1120,"url":2061},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1117,"url":1883},{"type":1109,"url":2064},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[1887],{"id":139,"slug":2067,"dossier":46,"summary":2068,"aliases":2069,"sourceIds":2072,"published":2073,"modified":2074,"checkedAt":7,"severity":2075,"references":2078,"versionKeys":2099,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[2070,2071],"CVE-2024-34064","PYSEC-2026-1474",[139,2071],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[2076],{"type":1105,"score":2077},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2079,2081,2083,2085,2086,2088,2090,2092,2094,2096,2097],{"type":1120,"url":2080},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1109,"url":2082},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1114,"url":2084},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1117,"url":1877},{"type":1120,"url":2087},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1120,"url":2089},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1120,"url":2091},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1120,"url":2093},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1120,"url":2095},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1117,"url":1883},{"type":1109,"url":2098},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[1887],{"id":140,"slug":2101,"dossier":46,"summary":2102,"aliases":2103,"sourceIds":2106,"published":2107,"modified":2108,"checkedAt":7,"severity":2109,"references":2112,"versionKeys":2125,"packageCount":32,"repositoryCount":106},"ghsa-jp4c-xjxw-mgf9-e780c8d6","pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere",[2104,2105],"CVE-2026-6357","PYSEC-2026-2876",[140,2105],"2026-04-27T15:30:52Z","2026-07-13T16:43:01.316339792Z",[2110],{"type":1171,"score":2111},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2113,2115,2117,2119,2120,2122,2123],{"type":1109,"url":2114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6357",{"type":1120,"url":2116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13923",{"type":1120,"url":2118},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Fb369bfc96cc524e00c267e1693290e6599c36bad",{"type":1117,"url":1337},{"type":1120,"url":2121},"https:\u002F\u002Fichard26.github.io\u002Fblog\u002F2026\u002F04\u002Fwhats-new-in-pip-26.1\u002F#security-fixes",{"type":1117,"url":1345},{"type":1109,"url":2124},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp4c-xjxw-mgf9",[1349,1350],{"id":141,"slug":2127,"dossier":46,"summary":2128,"aliases":2129,"sourceIds":2132,"published":2133,"modified":2134,"checkedAt":7,"severity":2135,"references":2138,"versionKeys":2146,"packageCount":32,"repositoryCount":106},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2130,2131],"CVE-2026-44432","PYSEC-2026-142",[141,2131],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[2136,2137],{"type":1105,"score":1144},{"type":1171,"score":1172},[2139,2141,2143,2145],{"type":1109,"url":2140},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1109,"url":2142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1120,"url":2144},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1117,"url":1181},[2147],"pypi:urllib3@2.6.3",{"id":142,"slug":2149,"dossier":46,"summary":2150,"aliases":2151,"sourceIds":2154,"published":2155,"modified":2156,"checkedAt":7,"severity":2157,"references":2163,"versionKeys":2190,"packageCount":32,"repositoryCount":32},"ghsa-mq26-g339-26xf-ed024c7e","Command Injection in pip when used with Mercurial",[2152,2153],"CVE-2023-5752","PYSEC-2023-228",[142,2153],"2023-10-25T18:17:00Z","2026-06-10T17:01:27.606909654Z",[2158,2159,2161],{"type":1105,"score":2001},{"type":1171,"score":2160},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1105,"score":2162},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2164,2166,2168,2170,2172,2173,2174,2176,2178,2180,2182,2184,2186,2188],{"type":1109,"url":2165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-5752",{"type":1114,"url":2167},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F12306",{"type":1120,"url":2169},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F389cb799d0da9a840749fcd14878928467ed49b4",{"type":1120,"url":2171},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2023-228.yaml",{"type":1117,"url":1337},{"type":1120,"url":1339},{"type":1120,"url":2175},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F622OZXWG72ISQPLM5Y57YCVIMWHD4C3U",{"type":1120,"url":2177},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH",{"type":1120,"url":2179},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFXUVMJM25PUAZRQZBF54OFVKTY3MINPW",{"type":1120,"url":2181},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E",{"type":1120,"url":2183},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ",{"type":1120,"url":2185},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL",{"type":1109,"url":2187},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL\u002F",{"type":1109,"url":2189},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq26-g339-26xf",[1349],{"id":143,"slug":2192,"dossier":46,"summary":2193,"aliases":2194,"sourceIds":2197,"published":2198,"modified":2199,"checkedAt":7,"severity":2200,"references":2202,"versionKeys":2214,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[2195,2196],"CVE-2025-50181","PYSEC-2026-1999",[143,2196],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[2201],{"type":1105,"score":1302},[2203,2205,2207,2209,2210,2211,2212],{"type":1120,"url":2204},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1109,"url":2206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1114,"url":2208},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1117,"url":1181},{"type":1120,"url":1312},{"type":1117,"url":1183},{"type":1109,"url":2213},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1187,1188,1189,1190],{"id":144,"slug":2216,"dossier":91,"summary":2217,"aliases":2218,"sourceIds":2222,"published":2223,"modified":2224,"checkedAt":7,"severity":2225,"references":2229,"versionKeys":2241,"packageCount":32,"repositoryCount":1192},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[2219,2220,2221],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[144,2221],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[2226,2227],{"type":1171,"score":1810},{"type":1105,"score":2228},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2230,2231,2233,2235,2237,2239,2240],{"type":1120,"url":1814},{"type":1114,"url":2232},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1109,"url":2234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1114,"url":2236},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1114,"url":2238},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1117,"url":1459},{"type":1109,"url":1461},[1853,1854,1855,1463,1464,1465,1466,1467],{"id":145,"slug":2243,"dossier":46,"summary":2244,"aliases":2245,"sourceIds":2248,"published":2249,"modified":2250,"checkedAt":7,"severity":2251,"references":2255,"versionKeys":2268,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[2246,2247],"CVE-2024-56326","PYSEC-2026-1475",[145,2247],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[2252,2254],{"type":1105,"score":2253},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1171,"score":1868},[2256,2258,2260,2262,2263,2264,2265,2266],{"type":1120,"url":2257},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1109,"url":2259},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1114,"url":2261},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1117,"url":1877},{"type":1120,"url":2061},{"type":1120,"url":1879},{"type":1117,"url":1883},{"type":1109,"url":2267},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[1887],{"id":146,"slug":2270,"dossier":91,"summary":2271,"aliases":2272,"sourceIds":2275,"published":2276,"modified":2277,"checkedAt":7,"severity":2278,"references":2283,"versionKeys":2289,"packageCount":32,"repositoryCount":234},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[2273,2274],"CVE-2026-44431","PYSEC-2026-141",[146,2274],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[2279,2281],{"type":1105,"score":2280},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1171,"score":2282},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2284,2286,2288],{"type":1109,"url":2285},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1109,"url":2287},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1117,"url":1181},[1187,1188,1189,1190,1191,2147],{"id":147,"slug":2291,"dossier":46,"summary":2292,"aliases":2293,"sourceIds":2297,"published":2298,"modified":2299,"checkedAt":7,"severity":2300,"references":2304,"versionKeys":2322,"packageCount":32,"repositoryCount":2326},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[2294,2295,2296],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[147],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[2301,2302],{"type":1105,"score":1933},{"type":1171,"score":2303},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2305,2307,2309,2311,2313,2315,2316,2318,2320],{"type":1109,"url":2306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1120,"url":2308},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1120,"url":2310},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1120,"url":2312},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1120,"url":2314},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1117,"url":1221},{"type":1120,"url":2317},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1120,"url":2319},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1120,"url":2321},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1233,1234,1235,1648,1649,2323,2324,2325],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",9,{"id":148,"slug":2328,"dossier":46,"summary":2329,"aliases":2330,"sourceIds":2333,"published":2334,"modified":2335,"checkedAt":7,"severity":2336,"references":2339,"versionKeys":2354,"packageCount":32,"repositoryCount":1468},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[2331,2332],"CVE-2026-22701","PYSEC-2026-1374",[148,2332],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[2337],{"type":1105,"score":2338},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[2340,2342,2344,2346,2348,2350,2352],{"type":1120,"url":2341},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1109,"url":2343},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1120,"url":2345},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1120,"url":2347},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1117,"url":2349},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1117,"url":2351},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1109,"url":2353},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[2355,2356,2357,2358],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":149,"slug":2360,"dossier":91,"summary":2361,"aliases":2362,"sourceIds":2366,"published":2367,"modified":2368,"checkedAt":7,"severity":2369,"references":2372,"versionKeys":2387,"packageCount":32,"repositoryCount":1192},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[2363,2364,2365],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[149,2365],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[2370,2371],{"type":1105,"score":1209},{"type":1171,"score":1452},[2373,2375,2377,2379,2381,2382,2383,2385],{"type":1120,"url":2374},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1109,"url":2376},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1120,"url":2378},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1120,"url":2380},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1117,"url":1459},{"type":1120,"url":1461},{"type":1117,"url":2384},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1109,"url":2386},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":150,"slug":2389,"dossier":46,"summary":2390,"aliases":2391,"sourceIds":2394,"published":2395,"modified":2396,"checkedAt":7,"severity":2397,"references":2400,"versionKeys":2413,"packageCount":32,"repositoryCount":1468},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[2392,2393],"CVE-2026-25087","PYSEC-2026-113",[150,2393],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[2398],{"type":1105,"score":2399},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[2401,2403,2405,2407,2409,2411],{"type":1109,"url":2402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1114,"url":2404},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1117,"url":2406},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1120,"url":2408},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1109,"url":2410},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1109,"url":2412},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[2414,2415,2416,2417],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":151,"slug":2419,"dossier":46,"summary":2420,"aliases":2421,"sourceIds":2425,"published":1929,"modified":2426,"checkedAt":7,"severity":2427,"references":2430,"versionKeys":2448,"packageCount":32,"repositoryCount":1468},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[2422,2423,2424],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[151],"2026-07-17T17:15:51.452848951Z",[2428,2429],{"type":1105,"score":1933},{"type":1171,"score":2303},[2431,2433,2435,2437,2439,2441,2442,2444,2446],{"type":1109,"url":2432},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1120,"url":2434},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1120,"url":2436},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1120,"url":2438},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1120,"url":2440},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1117,"url":1221},{"type":1120,"url":2443},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1120,"url":2445},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1120,"url":2447},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[2449,1233,1234,1235,1648,1649,2323,2324,2325],"pypi:torch@2.10.0",{"id":152,"slug":2451,"dossier":46,"summary":2452,"aliases":2453,"sourceIds":2456,"published":2457,"modified":2458,"checkedAt":7,"severity":2459,"references":2462,"versionKeys":2475,"packageCount":32,"repositoryCount":1290},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[2454,2455],"CVE-2026-41066","PYSEC-2026-87",[152,2455],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[2460],{"type":1105,"score":2461},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2463,2465,2467,2469,2471,2473],{"type":1109,"url":2464},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":1109,"url":2466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":1214,"url":2468},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":1117,"url":2470},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":1120,"url":2472},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":1120,"url":2474},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[2476,2477,2478],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":153,"slug":2480,"dossier":46,"summary":2481,"aliases":2482,"sourceIds":2486,"published":1929,"modified":2487,"checkedAt":7,"severity":2488,"references":2491,"versionKeys":2506,"packageCount":32,"repositoryCount":2507},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[2483,2484,2485],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[153],"2026-06-10T17:41:15.774477397Z",[2489,2490],{"type":1105,"score":1933},{"type":1171,"score":1935},[2492,2494,2495,2496,2497,2499,2500,2502,2504],{"type":1109,"url":2493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1120,"url":1940},{"type":1120,"url":1942},{"type":1120,"url":1944},{"type":1120,"url":2498},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1117,"url":1221},{"type":1120,"url":2501},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1120,"url":2503},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1120,"url":2505},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1233,1234,1235,1648,1649,2323],8,{"id":154,"slug":2509,"dossier":46,"summary":2510,"aliases":2511,"sourceIds":2514,"published":2515,"modified":2516,"checkedAt":7,"severity":2517,"references":2520,"versionKeys":2537,"packageCount":32,"repositoryCount":1468},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[2512,2513],"CVE-2025-68146","PYSEC-2026-1375",[154,2513],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[2518],{"type":1105,"score":2519},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2521,2523,2525,2526,2528,2530,2532,2533,2535],{"type":1120,"url":2522},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1120,"url":2524},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1117,"url":2349},{"type":1120,"url":2527},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1120,"url":2529},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1120,"url":2531},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1117,"url":2351},{"type":1109,"url":2534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1109,"url":2536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[2355,2356,2357,2358],{"id":155,"slug":2539,"dossier":46,"summary":2540,"aliases":2541,"sourceIds":2544,"published":2545,"modified":2546,"checkedAt":7,"severity":2547,"references":2553,"versionKeys":2589,"packageCount":32,"repositoryCount":106},"ghsa-wf93-45jw-7689-98dc514d","pip: Path traversal in console_scripts\u002Fgui_scripts entry point names allows installing scripts outside of target directory",[2542,2543],"CVE-2026-8643","PYSEC-2026-196",[155,2543],"2026-06-01T17:17:35.770Z","2026-07-14T02:29:29.982772188Z",[2548,2550,2552],{"type":1105,"score":2549},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1171,"score":2551},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1105,"score":2001},[2554,2556,2558,2560,2562,2564,2566,2568,2570,2572,2574,2576,2578,2580,2582,2584,2585,2587],{"type":1109,"url":2555},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8643",{"type":1114,"url":2557},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14000",{"type":1120,"url":2559},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:33313",{"type":1120,"url":2561},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34776",{"type":1120,"url":2563},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34777",{"type":1120,"url":2565},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34778",{"type":1120,"url":2567},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34780",{"type":1120,"url":2569},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34891",{"type":1120,"url":2571},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36193",{"type":1120,"url":2573},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36315",{"type":1120,"url":2575},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1120,"url":2577},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37283",{"type":1120,"url":2579},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8643",{"type":1120,"url":2581},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2460927",{"type":1120,"url":2583},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-196.yaml",{"type":1117,"url":1337},{"type":1109,"url":2586},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FYV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ\u002F",{"type":1109,"url":2588},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf93-45jw-7689",[1349,1350],{"id":156,"slug":2591,"dossier":46,"summary":2592,"aliases":2593,"sourceIds":2596,"published":2597,"modified":2598,"checkedAt":7,"severity":2599,"references":2601,"versionKeys":2617,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[2594,2595],"CVE-2026-32874","PYSEC-2026-2291",[156,2595],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[2600],{"type":1105,"score":1144},[2602,2604,2606,2608,2609,2611,2613,2615],{"type":1109,"url":2603},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":1109,"url":2605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":1114,"url":2607},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":1117,"url":1284},{"type":1109,"url":2610},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":1120,"url":2612},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":1120,"url":2614},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":1214,"url":2616},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[1288],{"id":157,"slug":2619,"dossier":91,"summary":2620,"aliases":2621,"sourceIds":2625,"published":2626,"modified":2627,"checkedAt":7,"severity":2628,"references":2631,"versionKeys":2669,"packageCount":32,"repositoryCount":1192},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[2622,2623,2624],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[157,2624],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[2629,2630],{"type":1105,"score":1144},{"type":1171,"score":1726},[2632,2634,2636,2638,2640,2641,2643,2645,2647,2649,2651,2653,2654,2656,2658,2660,2661,2663,2665,2667],{"type":1120,"url":2633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1109,"url":2635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1120,"url":2637},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1120,"url":2639},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1117,"url":1459},{"type":1120,"url":2642},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1120,"url":2644},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1120,"url":2646},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1109,"url":2648},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1109,"url":2650},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1109,"url":2652},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1109,"url":1837},{"type":1109,"url":2655},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1109,"url":2657},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1109,"url":2659},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1109,"url":1839},{"type":1109,"url":2662},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1109,"url":2664},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1109,"url":2666},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1109,"url":2668},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":158,"slug":2671,"dossier":91,"summary":2672,"aliases":2673,"sourceIds":2677,"published":2678,"modified":2679,"checkedAt":7,"severity":2680,"references":2683,"versionKeys":2692,"packageCount":32,"repositoryCount":1192},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[2674,2675,2676],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[158,2676],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[2681,2682],{"type":1105,"score":1209},{"type":1171,"score":1452},[2684,2686,2688,2690,2691],{"type":1109,"url":2685},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1109,"url":2687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1120,"url":2689},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1117,"url":1459},{"type":1109,"url":1461},[1853,1854,1855,1463,1464,1465,1466,1467],{"id":159,"slug":2694,"dossier":46,"summary":2695,"aliases":2696,"sourceIds":2700,"published":2701,"modified":2702,"checkedAt":7,"severity":2703,"references":2708,"versionKeys":2724,"packageCount":32,"repositoryCount":227},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[2697,2698,2699],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[159],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[2704,2706],{"type":1105,"score":2705},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1171,"score":2707},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2709,2711,2713,2715,2717,2718,2720,2722],{"type":1109,"url":2710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1120,"url":2712},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1120,"url":2714},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1120,"url":2716},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1117,"url":1221},{"type":1120,"url":2719},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1120,"url":2721},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1120,"url":2723},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1233,1234],{"id":160,"slug":2726,"dossier":46,"summary":2727,"aliases":2728,"sourceIds":2732,"published":2733,"modified":2734,"checkedAt":7,"severity":2735,"references":2738,"versionKeys":2752,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[2729,2730,2731],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[160,2731],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[2736],{"type":1105,"score":2737},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2739,2741,2743,2745,2747,2749,2750],{"type":1109,"url":2740},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1109,"url":2742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1120,"url":2744},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1114,"url":2746},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1120,"url":2748},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1117,"url":1459},{"type":1120,"url":2751},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1463],{"id":161,"slug":2754,"dossier":46,"summary":84,"aliases":2755,"sourceIds":2758,"published":2759,"modified":2760,"checkedAt":7,"severity":2761,"references":2763,"versionKeys":2772,"packageCount":32,"repositoryCount":227},"pysec-2025-198-62b25ed4",[2756,2757],"BIT-pytorch-2025-46148","CVE-2025-46148",[161],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[2762],{"type":1105,"score":2280},[2764,2766,2768,2770],{"type":1109,"url":2765},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1109,"url":2767},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1214,"url":2769},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1114,"url":2771},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1233,1234],{"id":162,"slug":2774,"dossier":46,"summary":84,"aliases":2775,"sourceIds":2778,"published":2779,"modified":2780,"checkedAt":7,"severity":2781,"references":2783,"versionKeys":2789,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[2776,2777],"BIT-pytorch-2025-46149","CVE-2025-46149",[162],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[2782],{"type":1105,"score":2280},[2784,2785,2787],{"type":1109,"url":2765},{"type":1214,"url":2786},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1114,"url":2788},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1234],{"id":163,"slug":2791,"dossier":46,"summary":84,"aliases":2792,"sourceIds":2795,"published":2796,"modified":2797,"checkedAt":7,"severity":2798,"references":2800,"versionKeys":2808,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[2793,2794],"BIT-pytorch-2025-46150","CVE-2025-46150",[163],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[2799],{"type":1105,"score":2280},[2801,2802,2804,2806],{"type":1109,"url":2765},{"type":1214,"url":2803},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1214,"url":2805},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1114,"url":2807},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1234],{"id":164,"slug":2810,"dossier":46,"summary":84,"aliases":2811,"sourceIds":2814,"published":2815,"modified":2816,"checkedAt":7,"severity":2817,"references":2819,"versionKeys":2825,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[2812,2813],"BIT-pytorch-2025-46152","CVE-2025-46152",[164],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[2818],{"type":1105,"score":1517},[2820,2821,2823],{"type":1109,"url":2765},{"type":1214,"url":2822},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1114,"url":2824},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1234],{"id":165,"slug":2827,"dossier":46,"summary":84,"aliases":2828,"sourceIds":2831,"published":2832,"modified":2833,"checkedAt":7,"severity":2834,"references":2836,"versionKeys":2846,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[2829,2830],"BIT-pytorch-2025-46153","CVE-2025-46153",[165],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[2835],{"type":1105,"score":2280},[2837,2839,2840,2842,2844],{"type":1120,"url":2838},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1109,"url":2765},{"type":1109,"url":2841},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1214,"url":2843},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1114,"url":2845},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1234],{"id":166,"slug":2848,"dossier":46,"summary":84,"aliases":2849,"sourceIds":2852,"published":2853,"modified":2854,"checkedAt":7,"severity":2855,"references":2857,"versionKeys":2862,"packageCount":32,"repositoryCount":2507},"pysec-2025-203-2febb201",[2850,2851],"BIT-pytorch-2025-55551","CVE-2025-55551",[166],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[2856],{"type":1105,"score":1144},[2858,2860],{"type":1109,"url":2859},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1214,"url":2861},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1233,1234,1235,1648,1649,2323],{"id":167,"slug":2864,"dossier":46,"summary":84,"aliases":2865,"sourceIds":2868,"published":2869,"modified":2870,"checkedAt":7,"severity":2871,"references":2873,"versionKeys":2877,"packageCount":32,"repositoryCount":2507},"pysec-2025-204-cdae47da",[2866,2867],"BIT-pytorch-2025-55552","CVE-2025-55552",[167],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[2872],{"type":1105,"score":1144},[2874,2875],{"type":1109,"url":2859},{"type":1214,"url":2876},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1233,1234,1235,1648,1649,2323],{"id":168,"slug":2879,"dossier":46,"summary":84,"aliases":2880,"sourceIds":2883,"published":2884,"modified":2885,"checkedAt":7,"severity":2886,"references":2888,"versionKeys":2894,"packageCount":32,"repositoryCount":106},"pysec-2025-205-fd5e58fd",[2881,2882],"BIT-pytorch-2025-55553","CVE-2025-55553",[168],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[2887],{"type":1105,"score":1144},[2889,2890,2892],{"type":1109,"url":2859},{"type":1214,"url":2891},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1114,"url":2893},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1233,1234,1235],{"id":169,"slug":2896,"dossier":46,"summary":84,"aliases":2897,"sourceIds":2900,"published":2901,"modified":2902,"checkedAt":7,"severity":2903,"references":2905,"versionKeys":2909,"packageCount":32,"repositoryCount":2507},"pysec-2025-206-58322476",[2898,2899],"BIT-pytorch-2025-55554","CVE-2025-55554",[169],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[2904],{"type":1105,"score":1517},[2906,2907],{"type":1109,"url":2859},{"type":1214,"url":2908},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1233,1234,1235,1648,1649,2323],{"id":170,"slug":2911,"dossier":46,"summary":84,"aliases":2912,"sourceIds":2915,"published":2916,"modified":2917,"checkedAt":7,"severity":2918,"references":2920,"versionKeys":2926,"packageCount":32,"repositoryCount":106},"pysec-2025-207-2abef3fc",[2913,2914],"BIT-pytorch-2025-55557","CVE-2025-55557",[170],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[2919],{"type":1105,"score":1144},[2921,2922,2924],{"type":1109,"url":2859},{"type":1214,"url":2923},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1114,"url":2925},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1233,1234,1235],{"id":171,"slug":2928,"dossier":46,"summary":84,"aliases":2929,"sourceIds":2932,"published":2933,"modified":2934,"checkedAt":7,"severity":2935,"references":2937,"versionKeys":2943,"packageCount":32,"repositoryCount":106},"pysec-2025-208-6e93fe9d",[2930,2931],"BIT-pytorch-2025-55558","CVE-2025-55558",[171],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[2936],{"type":1105,"score":1144},[2938,2939,2941],{"type":1109,"url":2859},{"type":1214,"url":2940},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1114,"url":2942},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1233,1234,1235],{"id":172,"slug":2945,"dossier":46,"summary":84,"aliases":2946,"sourceIds":2949,"published":2950,"modified":2951,"checkedAt":7,"severity":2952,"references":2954,"versionKeys":2960,"packageCount":32,"repositoryCount":106},"pysec-2025-209-e6f352b0",[2947,2948],"BIT-pytorch-2025-55560","CVE-2025-55560",[172],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[2953],{"type":1105,"score":1144},[2955,2956,2958],{"type":1109,"url":2859},{"type":1214,"url":2957},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1114,"url":2959},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1233,1234,1235],{"id":173,"slug":2962,"dossier":46,"summary":84,"aliases":2963,"sourceIds":2966,"published":2967,"modified":2968,"checkedAt":7,"severity":2969,"references":2971,"versionKeys":2982,"packageCount":32,"repositoryCount":1468},"pysec-2026-139-96951ff6",[2964,2965],"BIT-pytorch-2026-4538","CVE-2026-4538",[173],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[2970],{"type":1105,"score":2253},[2972,2974,2976,2978,2980],{"type":1120,"url":2973},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1109,"url":2975},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1109,"url":2977},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1214,"url":2979},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1114,"url":2981},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[2449,1233,1234,1235,1648,1649,2323,2324,2325],{"id":174,"slug":2984,"dossier":91,"summary":84,"aliases":2985,"sourceIds":2988,"published":2989,"modified":2990,"checkedAt":7,"severity":2991,"references":2994,"versionKeys":3009,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[2986,2987],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[174],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[2992],{"type":1105,"score":2993},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2995,2997,2999,3001,3003,3005,3007],{"type":1120,"url":2996},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1120,"url":2998},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1109,"url":3000},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1109,"url":3002},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1214,"url":3004},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1114,"url":3006},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1420,"url":3008},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[3010,3011,3012,3013,3014,3015],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":175,"slug":3017,"dossier":91,"summary":84,"aliases":3018,"sourceIds":3022,"published":3023,"modified":3024,"checkedAt":7,"severity":3025,"references":3027,"versionKeys":3034,"packageCount":32,"repositoryCount":1192},"pysec-2026-2253-e1ccf3df",[3019,3020,3021],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[175],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[3026],{"type":1105,"score":1144},[3028,3030,3032],{"type":1109,"url":3029},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":1114,"url":3031},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1420,"url":3033},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":176,"slug":3036,"dossier":91,"summary":84,"aliases":3037,"sourceIds":3041,"published":3042,"modified":3043,"checkedAt":7,"severity":3044,"references":3046,"versionKeys":3051,"packageCount":32,"repositoryCount":1192},"pysec-2026-2254-a1ed1fd2",[3038,3039,3040],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[176],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[3045],{"type":1105,"score":1144},[3047,3048,3049],{"type":1109,"url":3029},{"type":1114,"url":3031},{"type":1420,"url":3050},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":177,"slug":3053,"dossier":91,"summary":84,"aliases":3054,"sourceIds":3058,"published":3059,"modified":3060,"checkedAt":7,"severity":3061,"references":3063,"versionKeys":3068,"packageCount":32,"repositoryCount":1192},"pysec-2026-2255-d0951b98",[3055,3056,3057],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[177],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[3062],{"type":1105,"score":1144},[3064,3065,3066],{"type":1109,"url":3029},{"type":1114,"url":3031},{"type":1420,"url":3067},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":178,"slug":3070,"dossier":91,"summary":84,"aliases":3071,"sourceIds":3075,"published":3076,"modified":3077,"checkedAt":7,"severity":3078,"references":3080,"versionKeys":3086,"packageCount":32,"repositoryCount":1192},"pysec-2026-2256-0f333f0b",[3072,3073,3074],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[178],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[3079],{"type":1105,"score":1144},[3081,3082,3084],{"type":1109,"url":3029},{"type":1114,"url":3083},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1420,"url":3085},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":179,"slug":3088,"dossier":91,"summary":84,"aliases":3089,"sourceIds":3093,"published":3094,"modified":3095,"checkedAt":7,"severity":3096,"references":3099,"versionKeys":3109,"packageCount":32,"repositoryCount":1192},"pysec-2026-2257-bcbe5d79",[3090,3091,3092],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[179],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[3097],{"type":1105,"score":3098},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3100,3101,3103,3105,3107],{"type":1109,"url":3029},{"type":1114,"url":3102},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1114,"url":3104},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1114,"url":3106},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1420,"url":3108},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":180,"slug":3111,"dossier":46,"summary":84,"aliases":3112,"sourceIds":3117,"published":3118,"modified":3119,"checkedAt":7,"severity":3120,"references":3122,"versionKeys":3139,"packageCount":32,"repositoryCount":2326},"pysec-2026-2286-8795b007",[3113,3114,3115,3116],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[180],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[3121],{"type":1105,"score":1901},[3123,3125,3127,3129,3131,3133,3135,3137],{"type":1120,"url":3124},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1120,"url":3126},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1109,"url":3128},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1109,"url":3130},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1109,"url":3132},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1214,"url":3134},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1214,"url":3136},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1114,"url":3138},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1233,1234,1235,1648,1649,2323,2324,2325],{"id":181,"slug":3141,"dossier":91,"summary":84,"aliases":3142,"sourceIds":3146,"published":3147,"modified":3148,"checkedAt":7,"severity":3149,"references":3152,"versionKeys":3159,"packageCount":32,"repositoryCount":1192},"pysec-2026-3447-df031425",[3143,3144,3145],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[181],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[3150],{"type":1105,"score":3151},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3153,3155,3157],{"type":1109,"url":3154},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":1114,"url":3156},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1420,"url":3158},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[1437,1438,3160,3161,3162,3163,3164,3165,3166],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":182,"slug":3168,"dossier":91,"summary":84,"aliases":3169,"sourceIds":3173,"published":3174,"modified":3175,"checkedAt":7,"severity":3176,"references":3178,"versionKeys":3187,"packageCount":32,"repositoryCount":1192},"pysec-2026-3451-3e5eac34",[3170,3171,3172],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[182],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[3177],{"type":1105,"score":1144},[3179,3181,3183,3185],{"type":1109,"url":3180},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1114,"url":3182},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1114,"url":3184},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1420,"url":3186},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[1853,1854,1855,1463,1464,1465,1466,1467],{"id":183,"slug":3189,"dossier":46,"summary":84,"aliases":3190,"sourceIds":3194,"published":3195,"modified":3196,"checkedAt":7,"severity":3197,"references":3199,"versionKeys":3207,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[3191,3192,3193],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[183],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[3198],{"type":1105,"score":1144},[3200,3201,3203,3205],{"type":1109,"url":3180},{"type":1114,"url":3202},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1114,"url":3204},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1420,"url":3206},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[1465,1466,1467],{"id":184,"slug":3209,"dossier":91,"summary":84,"aliases":3210,"sourceIds":3214,"published":3215,"modified":3216,"checkedAt":7,"severity":3217,"references":3219,"versionKeys":3227,"packageCount":32,"repositoryCount":1192},"pysec-2026-3453-83974725",[3211,3212,3213],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[184],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[3218],{"type":1105,"score":1144},[3220,3221,3223,3225],{"type":1109,"url":3180},{"type":1114,"url":3222},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1114,"url":3224},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1420,"url":3226},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[1853,1854,1855,1463,1464,1465,1466,1467],1784558561429]