[{"data":1,"prerenderedAt":6992},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7674":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":304,"related":307},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":105,"unknownLicensePackageCount":106,"advisoryIds":107,"advisoryCount":302,"providers":303},"opencode:7674","opencode-7674",7674,"Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation","Simulation of Coding Agents; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, Energiemessung","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fcommit\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32","2025-10-30T09:26:36.741Z","2025-10-30T09:25:27.000Z",{"complete":91,"entryCount":92,"truncated":46},true,31,[94],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","bd553a0a85987dc2e10ac8a15fdc2c60ccd7405408e5ff41ef47eca9399dda7f",758178,"parsed",173,[103],"pypi",8,23,3,[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2pc9-4j83-qjmr","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-38vq-g6vr-w8wf","GHSA-3c37-wwvx-h642","GHSA-3f6c-7fw2-ppm4","GHSA-3hh9-752g-5g22","GHSA-3mwp-wvh9-7528","GHSA-3wq7-rqq7-wx6j","GHSA-3ww4-5jv9-j5gm","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-4w7r-h757-3r74","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cmr-4px5-23pc","GHSA-5jv2-g5wq-cmr4","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69j4-grxj-j64p","GHSA-69w3-r845-3855","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6wgj-66m2-xxp2","GHSA-7972-pg2x-xr59","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7h4p-rffg-7823","GHSA-7rgv-gqhr-fxg3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-8qvm-5x2c-j2w7","GHSA-9356-575x-2w9m","GHSA-94f4-hr76-p5j6","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-98f3-hwg4-4rf7","GHSA-9hcf-v7m4-6m2j","GHSA-9hjg-9r4m-mvj7","GHSA-9pcc-gvx5-r5wm","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c65p-x677-fgj6","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-grg2-63fw-f2qr","GHSA-gx77-xgc2-4888","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgg8-fqqc-vfmw","GHSA-hpj7-wq8m-9hgp","GHSA-hpv8-x276-m59f","GHSA-hxxf-235m-72v3","GHSA-j828-28rj-hfhp","GHSA-j842-xgm4-wf88","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mcmc-2m55-j8jj","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mj87-hwqh-73pj","GHSA-mqqc-3gqh-h2x8","GHSA-mrw7-hf4f-83pf","GHSA-mw35-8rx3-xf9r","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-phhr-52qp-3mj4","GHSA-pmqf-x6x8-p7qw","GHSA-pp6c-gr5w-3c5g","GHSA-pq5c-rjhq-qp7p","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q279-jhrf-cc6v","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q5fh-2hc8-f6rq","GHSA-q8gq-377p-jq3r","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qh4c-xf7m-gxfc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vqfr-h8mv-ghfj","GHSA-vrq3-r879-7m65","GHSA-w2fm-2cpv-w7v5","GHSA-w6q7-j642-7c25","GHSA-w6vg-jg77-2qg6","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wcj4-jw5j-44wh","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wr9h-g72x-mwhm","GHSA-wrfc-pvp9-mr9g","GHSA-x368-4g9h-fvv4","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-238","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-227","PYSEC-2026-2273","PYSEC-2026-2286","PYSEC-2026-2302","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",194,[],{"files":305,"occurrenceCount":101},[306],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":308,"vulnerabilities":1880},[309,321,333,343,352,362,371,381,390,400,412,421,430,440,450,459,468,477,486,497,506,515,524,534,543,552,561,570,579,588,598,607,616,626,635,644,653,662,671,680,689,698,707,716,725,735,744,753,762,771,780,789,797,806,815,824,833,842,851,859,868,877,886,895,904,914,923,932,941,950,959,968,977,986,995,1004,1013,1022,1031,1040,1049,1058,1067,1076,1085,1094,1103,1112,1121,1129,1138,1146,1155,1164,1173,1182,1190,1199,1209,1218,1227,1236,1244,1253,1262,1271,1280,1289,1298,1306,1315,1324,1332,1340,1349,1357,1366,1375,1384,1394,1403,1412,1421,1431,1440,1449,1458,1467,1476,1486,1495,1504,1513,1522,1531,1539,1548,1557,1566,1575,1584,1594,1603,1612,1620,1629,1638,1647,1656,1665,1674,1683,1692,1702,1711,1720,1731,1740,1748,1757,1765,1774,1783,1792,1801,1810,1818,1827,1835,1844,1853,1862,1871],{"id":310,"slug":311,"identity":312,"label":313,"aiRelevant":91,"provider":314,"advisoryCount":315,"licenseExpressions":316,"versions":318,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":320},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","vLLM",null,39,[317],"Apache-2.0",[319],"0.11.0",[55],{"id":322,"slug":323,"identity":324,"label":325,"aiRelevant":91,"provider":326,"advisoryCount":70,"licenseExpressions":329,"versions":330,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":332},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":327,"label":328},"hugging-face","Hugging Face",[317],[331],"4.57.1",[55],{"id":334,"slug":335,"identity":336,"label":337,"aiRelevant":91,"provider":314,"advisoryCount":105,"licenseExpressions":338,"versions":340,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":342},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[339],"BSD-3-Clause",[341],"2.8.0",[55],{"id":344,"slug":345,"identity":346,"label":347,"aiRelevant":91,"provider":314,"advisoryCount":32,"licenseExpressions":348,"versions":349,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":351},"package:pypi:lmcache","lmcache-924a3cee","pypi:lmcache","LMCache",[],[350],"0.3.8",[55],{"id":353,"slug":354,"identity":355,"label":356,"aiRelevant":91,"provider":357,"advisoryCount":38,"licenseExpressions":358,"versions":359,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":361},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":327,"label":328},[317],[360],"4.3.0",[55],{"id":72,"slug":73,"identity":363,"label":74,"aiRelevant":91,"provider":364,"advisoryCount":38,"licenseExpressions":367,"versions":368,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":370},"pypi:openai",{"id":365,"label":366},"openai","OpenAI",[317],[369],"2.6.1",[55],{"id":372,"slug":373,"identity":374,"label":375,"aiRelevant":91,"provider":314,"advisoryCount":38,"licenseExpressions":376,"versions":378,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":380},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[377],"non-standard",[379],"0.22.1",[55],{"id":382,"slug":383,"identity":384,"label":385,"aiRelevant":91,"provider":314,"advisoryCount":38,"licenseExpressions":386,"versions":387,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":389},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[377],[388],"0.12.0",[55],{"id":391,"slug":392,"identity":393,"label":394,"aiRelevant":46,"provider":314,"advisoryCount":30,"licenseExpressions":395,"versions":397,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":399},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[317,396],"Apache-2.0 AND MIT",[398],"3.13.1",[55],{"id":401,"slug":402,"identity":403,"label":404,"aiRelevant":46,"provider":314,"advisoryCount":405,"licenseExpressions":406,"versions":409,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":411},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[407,408],"HPND","MIT-CMU",[410],"12.0.0",[55],{"id":413,"slug":414,"identity":415,"label":416,"aiRelevant":46,"provider":314,"advisoryCount":104,"licenseExpressions":417,"versions":418,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":420},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",[317],[419],"0.0.20",[55],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":46,"provider":314,"advisoryCount":104,"licenseExpressions":426,"versions":427,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":429},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[339],[428],"0.49.0",[55],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":46,"provider":314,"advisoryCount":65,"licenseExpressions":435,"versions":437,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":439},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[436],"MIT",[438],"2.5.0",[55],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":46,"provider":314,"advisoryCount":445,"licenseExpressions":446,"versions":447,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":449},"package:pypi:ray","ray-f8b4a0d3","pypi:ray","ray",6,[317],[448],"2.50.1",[55],{"id":451,"slug":452,"identity":453,"label":454,"aiRelevant":46,"provider":314,"advisoryCount":34,"licenseExpressions":455,"versions":456,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":458},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[339,377],[457],"3.1.6",[55],{"id":460,"slug":461,"identity":462,"label":463,"aiRelevant":46,"provider":314,"advisoryCount":106,"licenseExpressions":464,"versions":465,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":467},"package:pypi:cbor2","cbor2-9a57866f","pypi:cbor2","cbor2",[436],[466],"5.7.1",[55],{"id":469,"slug":470,"identity":471,"label":472,"aiRelevant":46,"provider":314,"advisoryCount":106,"licenseExpressions":473,"versions":474,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":476},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[317],[475],"2.32.5",[55],{"id":478,"slug":479,"identity":480,"label":481,"aiRelevant":46,"provider":314,"advisoryCount":106,"licenseExpressions":482,"versions":483,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":485},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[436],[484],"79.0.1",[55],{"id":487,"slug":488,"identity":489,"label":490,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":492,"versions":494,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":496},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[436,493],"Unlicense",[495],"3.20.0",[55],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":502,"versions":503,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":505},"package:pypi:mlx","mlx-6c82b549","pypi:mlx","mlx",[436],[504],"0.29.3",[55],{"id":507,"slug":508,"identity":509,"label":510,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":511,"versions":512,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":514},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[339],[513],"6.33.0",[55],{"id":516,"slug":517,"identity":518,"label":519,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":520,"versions":521,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":523},"package:pypi:xgrammar","xgrammar-5ebaef86","pypi:xgrammar","xgrammar",[317],[522],"0.1.25",[55],{"id":525,"slug":526,"identity":527,"label":528,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":529,"versions":531,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":533},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[530],"MPL-2.0",[532],"2025.10.5",[55],{"id":535,"slug":536,"identity":537,"label":538,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":539,"versions":540,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":542},"package:pypi:click","click-ef97f731","pypi:click","click",[339,377],[541],"8.2.1",[55],{"id":544,"slug":545,"identity":546,"label":547,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":548,"versions":549,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":551},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[317],[550],"5.6.3",[55],{"id":553,"slug":554,"identity":555,"label":556,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":557,"versions":558,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":560},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[436],[559],"0.16.0",[55],{"id":562,"slug":563,"identity":564,"label":565,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":566,"versions":567,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":569},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[339,377],[568],"3.11",[55],{"id":571,"slug":572,"identity":573,"label":574,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":575,"versions":576,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":578},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[317],[577],"1.1.2",[55],{"id":580,"slug":581,"identity":582,"label":583,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":584,"versions":585,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":587},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[317,377],[586],"22.0.0",[55],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":593,"versions":595,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":597},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[594],"BSD-2-Clause",[596],"2.19.2",[55],{"id":599,"slug":600,"identity":601,"label":602,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":603,"versions":604,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":606},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[339],[605],"1.2.1",[55],{"id":608,"slug":609,"identity":610,"label":611,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":612,"versions":613,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":615},"package:pypi:sentencepiece","sentencepiece-dda4c7df","pypi:sentencepiece","sentencepiece",[377],[614],"0.2.1",[55],{"id":617,"slug":618,"identity":619,"label":620,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":621,"versions":623,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":625},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[622],"MIT AND MPL-2.0",[624],"4.67.1",[55],{"id":627,"slug":628,"identity":629,"label":630,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":631,"versions":632,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":634},"package:pypi:aiofile","aiofile-c591e038","pypi:aiofile","aiofile",[317],[633],"3.9.0",[55],{"id":636,"slug":637,"identity":638,"label":639,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":640,"versions":641,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":643},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[317],[642],"25.1.0",[55],{"id":645,"slug":646,"identity":647,"label":648,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":649,"versions":651,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":652},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[650],"PSF-2.0",[369],[55],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":658,"versions":659,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":661},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[317],[660],"1.4.0",[55],{"id":663,"slug":664,"identity":665,"label":666,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":667,"versions":668,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":670},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[436],[669],"0.0.3",[55],{"id":672,"slug":673,"identity":674,"label":675,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":676,"versions":677,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":679},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[436],[678],"0.7.0",[55],{"id":681,"slug":682,"identity":683,"label":684,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":685,"versions":686,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":688},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[377],[687],"4.9.3",[55],{"id":690,"slug":691,"identity":692,"label":693,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":694,"versions":695,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":697},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[436],[696],"4.11.0",[55],{"id":699,"slug":700,"identity":701,"label":702,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":703,"versions":704,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":706},"package:pypi:astor","astor-5ea47d9f","pypi:astor","astor",[339],[705],"0.8.1",[55],{"id":708,"slug":709,"identity":710,"label":711,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":712,"versions":713,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":715},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[436],[714],"25.4.0",[55],{"id":717,"slug":718,"identity":719,"label":720,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":721,"versions":722,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":724},"package:pypi:awscrt","awscrt-eab4958f","pypi:awscrt","awscrt",[317],[723],"0.28.2",[55],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":730,"versions":732,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":734},"package:pypi:blake3","blake3-71cab3aa","pypi:blake3","blake3",[731],"Apache-2.0 OR CC0-1.0",[733],"1.0.8",[55],{"id":736,"slug":737,"identity":738,"label":739,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":740,"versions":741,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":743},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[436],[742],"6.2.1",[55],{"id":745,"slug":746,"identity":747,"label":748,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":749,"versions":750,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":752},"package:pypi:caio","caio-c9c4d2d3","pypi:caio","caio",[317],[751],"0.9.24",[55],{"id":754,"slug":755,"identity":756,"label":757,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":758,"versions":759,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":761},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[436],[760],"2.0.0",[55],{"id":763,"slug":764,"identity":765,"label":766,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":767,"versions":768,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":770},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[436],[769],"3.4.4",[55],{"id":772,"slug":773,"identity":774,"label":775,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":776,"versions":777,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":779},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[339],[778],"3.1.1",[55],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":785,"versions":786,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":788},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[377],[787],"0.4.6",[55],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":794,"versions":795,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":796},"package:pypi:compressed-tensors","compressed-tensors-e8905144","pypi:compressed-tensors","compressed-tensors",[317],[319],[55],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":802,"versions":803,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":805},"package:pypi:cufile-python","cufile-python-feb114e2","pypi:cufile-python","cufile-python",[436],[804],"0.2.0",[55],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":811,"versions":812,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":814},"package:pypi:cupy-cuda12x","cupy-cuda12x-8ab55f02","pypi:cupy-cuda12x","cupy-cuda12x",[436],[813],"13.6.0",[55],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":820,"versions":821,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":823},"package:pypi:depyf","depyf-44ccc3bb","pypi:depyf","depyf",[436],[822],"0.19.0",[55],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":829,"versions":830,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":832},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[339],[831],"0.4.0",[55],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":838,"versions":839,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":841},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[317],[840],"1.9.0",[55],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":847,"versions":849,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":850},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[848],"ISC",[341],[55],{"id":852,"slug":853,"identity":854,"label":855,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":856,"versions":857,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":858},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[436],[705],[55],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":864,"versions":865,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":867},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[493],[866],"2.3.0",[55],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":873,"versions":874,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":876},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[436],[875],"0.120.1",[55],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":882,"versions":883,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":885},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[436],[884],"0.0.14",[55],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":891,"versions":892,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":894},"package:pypi:fastapi-cloud-cli","fastapi-cloud-cli-9011df6b","pypi:fastapi-cloud-cli","fastapi-cloud-cli",[436],[893],"0.3.1",[55],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":900,"versions":901,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":903},"package:pypi:fastrlock","fastrlock-0757e61e","pypi:fastrlock","fastrlock",[377],[902],"0.8.3",[55],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":909,"versions":911,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":913},"package:pypi:frozendict","frozendict-423ee416","pypi:frozendict","frozendict",[910],"LGPL-3.0",[912],"2.4.6",[55],{"id":915,"slug":916,"identity":917,"label":918,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":919,"versions":920,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":922},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[317],[921],"1.8.0",[55],{"id":924,"slug":925,"identity":926,"label":927,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":928,"versions":929,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":931},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[339,377],[930],"2025.9.0",[55],{"id":933,"slug":934,"identity":935,"label":936,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":937,"versions":938,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":940},"package:pypi:gguf","gguf-828fa24b","pypi:gguf","gguf",[436],[939],"0.17.1",[55],{"id":942,"slug":943,"identity":944,"label":945,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":946,"versions":947,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":949},"package:pypi:h5py","h5py-b8fe3869","pypi:h5py","h5py",[339],[948],"3.15.1",[55],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":955,"versions":956,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":958},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[317],[957],"1.2.0",[55],{"id":960,"slug":961,"identity":962,"label":963,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":964,"versions":965,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":967},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[339],[966],"1.0.9",[55],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":973,"versions":974,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":976},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[436],[975],"0.7.1",[55],{"id":978,"slug":979,"identity":980,"label":981,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":982,"versions":983,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":985},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[339],[984],"0.28.1",[55],{"id":987,"slug":988,"identity":989,"label":990,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":991,"versions":992,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":994},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[317,377],[993],"0.36.0",[55],{"id":996,"slug":997,"identity":998,"label":999,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1000,"versions":1001,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1003},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[436],[1002],"1.3.2",[55],{"id":1005,"slug":1006,"identity":1007,"label":1008,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1009,"versions":1010,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1012},"package:pypi:interegular","interegular-393a5327","pypi:interegular","interegular",[436],[1011],"0.3.3",[55],{"id":1014,"slug":1015,"identity":1016,"label":1017,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1018,"versions":1019,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1021},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[436],[1020],"0.11.1",[55],{"id":1023,"slug":1024,"identity":1025,"label":1026,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1027,"versions":1028,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1030},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[436],[1029],"4.25.1",[55],{"id":1032,"slug":1033,"identity":1034,"label":1035,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1036,"versions":1037,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1039},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[436],[1038],"2025.9.1",[55],{"id":1041,"slug":1042,"identity":1043,"label":1044,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1045,"versions":1046,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1048},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[436],[1047],"1.2.2",[55],{"id":1050,"slug":1051,"identity":1052,"label":1053,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1054,"versions":1055,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1057},"package:pypi:llguidance","llguidance-a18efde0","pypi:llguidance","llguidance",[436],[1056],"0.7.30",[55],{"id":1059,"slug":1060,"identity":1061,"label":1062,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1063,"versions":1064,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1066},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[377],[1065],"0.44.0",[55],{"id":1068,"slug":1069,"identity":1070,"label":1071,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1072,"versions":1073,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1075},"package:pypi:lm-format-enforcer","lm-format-enforcer-9e319c1b","pypi:lm-format-enforcer","lm-format-enforcer",[436],[1074],"0.11.3",[55],{"id":1077,"slug":1078,"identity":1079,"label":1080,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1081,"versions":1082,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1084},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[436],[1083],"4.0.0",[55],{"id":1086,"slug":1087,"identity":1088,"label":1089,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1090,"versions":1091,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1093},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[339,377],[1092],"3.0.3",[55],{"id":1095,"slug":1096,"identity":1097,"label":1098,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1099,"versions":1100,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1102},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[436],[1101],"0.1.2",[55],{"id":1104,"slug":1105,"identity":1106,"label":1107,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1108,"versions":1109,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1111},"package:pypi:mistral-common","mistral-common-038e1158","pypi:mistral-common","mistral-common",[317],[1110],"1.8.5",[55],{"id":1113,"slug":1114,"identity":1115,"label":1116,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1117,"versions":1118,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1120},"package:pypi:mlx-lm","mlx-lm-c2e88814","pypi:mlx-lm","mlx-lm",[436],[1119],"0.28.3",[55],{"id":1122,"slug":1123,"identity":1124,"label":1125,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1126,"versions":1127,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1128},"package:pypi:mlx-metal","mlx-metal-fdc0094a","pypi:mlx-metal","mlx-metal",[],[504],[55],{"id":1130,"slug":1131,"identity":1132,"label":1133,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1134,"versions":1135,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1137},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[377],[1136],"1.3.0",[55],{"id":1139,"slug":1140,"identity":1141,"label":1142,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1143,"versions":1144,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1145},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[339,377],[822],[55],{"id":1147,"slug":1148,"identity":1149,"label":1150,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1151,"versions":1152,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1154},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[317],[1153],"6.7.0",[55],{"id":1156,"slug":1157,"identity":1158,"label":1159,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1160,"versions":1161,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1163},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[339],[1162],"0.70.16",[55],{"id":1165,"slug":1166,"identity":1167,"label":1168,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1169,"versions":1170,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1172},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[339,377],[1171],"3.5",[55],{"id":1174,"slug":1175,"identity":1176,"label":1177,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1178,"versions":1179,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1181},"package:pypi:ninja","ninja-d45560ae","pypi:ninja","ninja",[377],[1180],"1.13.0",[55],{"id":1183,"slug":1184,"identity":1185,"label":1186,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1187,"versions":1188,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1189},"package:pypi:nixl","nixl-859842d2","pypi:nixl","nixl",[377],[678],[55],{"id":1191,"slug":1192,"identity":1193,"label":1194,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1195,"versions":1196,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1198},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[377],[1197],"0.61.2",[55],{"id":1200,"slug":1201,"identity":1202,"label":1203,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1204,"versions":1206,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1208},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1205,377],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1207],"2.2.0",[55],{"id":1210,"slug":1211,"identity":1212,"label":1213,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1214,"versions":1215,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1217},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[377],[1216],"12.8.4.1",[55],{"id":1219,"slug":1220,"identity":1221,"label":1222,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1223,"versions":1224,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1226},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[377],[1225],"12.8.90",[55],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1232,"versions":1233,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1235},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[377],[1234],"12.8.93",[55],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1241,"versions":1242,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1243},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[377],[1225],[55],{"id":1245,"slug":1246,"identity":1247,"label":1248,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1249,"versions":1250,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1252},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[377],[1251],"9.10.2.21",[55],{"id":1254,"slug":1255,"identity":1256,"label":1257,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1258,"versions":1259,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1261},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[377],[1260],"11.3.3.83",[55],{"id":1263,"slug":1264,"identity":1265,"label":1266,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1267,"versions":1268,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1270},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[377],[1269],"1.13.1.3",[55],{"id":1272,"slug":1273,"identity":1274,"label":1275,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1276,"versions":1277,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1279},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[377],[1278],"10.3.9.90",[55],{"id":1281,"slug":1282,"identity":1283,"label":1284,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1285,"versions":1286,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1288},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[377],[1287],"11.7.3.90",[55],{"id":1290,"slug":1291,"identity":1292,"label":1293,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1294,"versions":1295,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1297},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[377],[1296],"12.5.8.93",[55],{"id":1299,"slug":1300,"identity":1301,"label":1302,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1303,"versions":1304,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1305},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[377],[975],[55],{"id":1307,"slug":1308,"identity":1309,"label":1310,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1311,"versions":1312,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1314},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[377],[1313],"13.580.82",[55],{"id":1316,"slug":1317,"identity":1318,"label":1319,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1320,"versions":1321,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1323},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[339,377],[1322],"2.27.3",[55],{"id":1325,"slug":1326,"identity":1327,"label":1328,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1329,"versions":1330,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1331},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[377],[1234],[55],{"id":1333,"slug":1334,"identity":1335,"label":1336,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1337,"versions":1338,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1339},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[317,377],[1225],[55],{"id":1341,"slug":1342,"identity":1343,"label":1344,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1345,"versions":1346,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1348},"package:pypi:nvtx","nvtx-e0b64d25","pypi:nvtx","nvtx",[317],[1347],"0.2.13",[55],{"id":1350,"slug":1351,"identity":1352,"label":1353,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1354,"versions":1355,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1356},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[339],[866],[55],{"id":1358,"slug":1359,"identity":1360,"label":1361,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1362,"versions":1363,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1365},"package:pypi:openai-harmony","openai-harmony-030f1d71","pypi:openai-harmony","openai-harmony",[],[1364],"0.0.4",[55],{"id":1367,"slug":1368,"identity":1369,"label":1370,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1371,"versions":1372,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1374},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[317],[1373],"4.12.0.88",[55],{"id":1376,"slug":1377,"identity":1378,"label":1379,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1380,"versions":1381,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1383},"package:pypi:outlines-core","outlines-core-16063b2f","pypi:outlines-core","outlines-core",[317],[1382],"0.2.11",[55],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1389,"versions":1391,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1393},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1390,377],"Apache-2.0 OR BSD-2-Clause",[1392],"25.0",[55],{"id":1395,"slug":1396,"identity":1397,"label":1398,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1399,"versions":1400,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1402},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[377],[1401],"2.3.3",[55],{"id":1404,"slug":1405,"identity":1406,"label":1407,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1408,"versions":1409,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1411},"package:pypi:partial-json-parser","partial-json-parser-185436fc","pypi:partial-json-parser","partial-json-parser",[436],[1410],"0.2.1.1.post6",[55],{"id":1413,"slug":1414,"identity":1415,"label":1416,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1417,"versions":1418,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1420},"package:pypi:perun","perun-158f81f8","pypi:perun","perun",[377],[1419],"0.9.0",[55],{"id":1422,"slug":1423,"identity":1424,"label":1425,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1426,"versions":1428,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1430},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[317,1427],"Apache-2.0 AND BSD-2-Clause",[1429],"0.23.1",[55],{"id":1432,"slug":1433,"identity":1434,"label":1435,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1436,"versions":1437,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1439},"package:pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator-6b62ecc9","pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator",[848],[1438],"7.1.0",[55],{"id":1441,"slug":1442,"identity":1443,"label":1444,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1445,"versions":1446,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1448},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[317],[1447],"0.4.1",[55],{"id":1450,"slug":1451,"identity":1452,"label":1453,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1454,"versions":1455,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1457},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[339],[1456],"7.1.2",[55],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1463,"versions":1464,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1466},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[436],[1465],"9.0.0",[55],{"id":1468,"slug":1469,"identity":1470,"label":1471,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1472,"versions":1473,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1475},"package:pypi:pybase64","pybase64-d848d924","pypi:pybase64","pybase64",[594],[1474],"1.4.2",[55],{"id":1477,"slug":1478,"identity":1479,"label":1480,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1481,"versions":1483,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1485},"package:pypi:pycountry","pycountry-938c3061","pypi:pycountry","pycountry",[1482],"LGPL-2.1-only",[1484],"24.6.1",[55],{"id":1487,"slug":1488,"identity":1489,"label":1490,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1491,"versions":1492,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1494},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[339],[1493],"2.23",[55],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1500,"versions":1501,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1503},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[436],[1502],"2.12.3",[55],{"id":1505,"slug":1506,"identity":1507,"label":1508,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1509,"versions":1510,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1512},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[436],[1511],"2.41.4",[55],{"id":1514,"slug":1515,"identity":1516,"label":1517,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1518,"versions":1519,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1521},"package:pypi:pydantic-extra-types","pydantic-extra-types-dddc16ef","pypi:pydantic-extra-types","pydantic-extra-types",[436],[1520],"2.10.6",[55],{"id":1523,"slug":1524,"identity":1525,"label":1526,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1527,"versions":1528,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1530},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[377],[1529],"2.9.0.post0",[55],{"id":1532,"slug":1533,"identity":1534,"label":1535,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1536,"versions":1537,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1538},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[377],[1083],[55],{"id":1540,"slug":1541,"identity":1542,"label":1543,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1544,"versions":1545,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1547},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[436],[1546],"2025.2",[55],{"id":1549,"slug":1550,"identity":1551,"label":1552,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1553,"versions":1554,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1556},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[436],[1555],"6.0.3",[55],{"id":1558,"slug":1559,"identity":1560,"label":1561,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1562,"versions":1563,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1565},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[377],[1564],"27.1.0",[55],{"id":1567,"slug":1568,"identity":1569,"label":1570,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1571,"versions":1572,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1574},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[436],[1573],"7.0.1",[55],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1580,"versions":1581,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1583},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[436],[1582],"0.37.0",[55],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1589,"versions":1591,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1593},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1590,377],"Apache-2.0 AND CNRI-Python",[1592],"2025.10.23",[55],{"id":1595,"slug":1596,"identity":1597,"label":1598,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1599,"versions":1600,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1602},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[436],[1601],"14.2.0",[55],{"id":1604,"slug":1605,"identity":1606,"label":1607,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1608,"versions":1609,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1611},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[436],[1610],"0.15.1",[55],{"id":1613,"slug":1614,"identity":1615,"label":1616,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1617,"versions":1618,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1619},"package:pypi:rignore","rignore-bc5396c6","pypi:rignore","rignore",[436],[975],[55],{"id":1621,"slug":1622,"identity":1623,"label":1624,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1625,"versions":1626,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1628},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[436],[1627],"0.28.0",[55],{"id":1630,"slug":1631,"identity":1632,"label":1633,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1634,"versions":1635,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1637},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[377],[1636],"0.6.2",[55],{"id":1639,"slug":1640,"identity":1641,"label":1642,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1643,"versions":1644,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1646},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[377],[1645],"1.16.2",[55],{"id":1648,"slug":1649,"identity":1650,"label":1651,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1652,"versions":1653,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1655},"package:pypi:sentry-sdk","sentry-sdk-2727cc69","pypi:sentry-sdk","sentry-sdk",[436],[1654],"2.42.1",[55],{"id":1657,"slug":1658,"identity":1659,"label":1660,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1661,"versions":1662,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1664},"package:pypi:setproctitle","setproctitle-5acfd9d9","pypi:setproctitle","setproctitle",[339],[1663],"1.3.7",[55],{"id":1666,"slug":1667,"identity":1668,"label":1669,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1670,"versions":1671,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1673},"package:pypi:setuptools-scm","setuptools-scm-1cdc69e0","pypi:setuptools-scm","setuptools-scm",[377],[1672],"9.2.2",[55],{"id":1675,"slug":1676,"identity":1677,"label":1678,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1679,"versions":1680,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1682},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[377],[1681],"1.5.4",[55],{"id":1684,"slug":1685,"identity":1686,"label":1687,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1688,"versions":1689,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1691},"package:pypi:six","six-3c3888bd","pypi:six","six",[436],[1690],"1.17.0",[55],{"id":1693,"slug":1694,"identity":1695,"label":1696,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1697,"versions":1699,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1701},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[1698],"Apache-2.0 OR MIT",[1700],"1.3.1",[55],{"id":1703,"slug":1704,"identity":1705,"label":1706,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1707,"versions":1708,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1710},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[317],[1709],"2.4.0",[55],{"id":1712,"slug":1713,"identity":1714,"label":1715,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1716,"versions":1717,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1719},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[339],[1718],"0.13.1",[55],{"id":1721,"slug":1722,"identity":1723,"label":1724,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1725,"versions":1728,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1730},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[1726,1727],"LGPL-2.0-or-later","LGPL-2.1-or-later",[1729],"1.0.0",[55],{"id":1732,"slug":1733,"identity":1734,"label":1735,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1736,"versions":1737,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1739},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[377],[1738],"1.14.0",[55],{"id":1741,"slug":1742,"identity":1743,"label":1744,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1745,"versions":1746,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1747},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[436],[1419],[55],{"id":1749,"slug":1750,"identity":1751,"label":1752,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1753,"versions":1754,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1756},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[436],[1755],"0.13.3",[55],{"id":1758,"slug":1759,"identity":1760,"label":1761,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1762,"versions":1763,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1764},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[594,377],[341],[55],{"id":1766,"slug":1767,"identity":1768,"label":1769,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1770,"versions":1771,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1773},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[377],[1772],"0.23.0",[55],{"id":1775,"slug":1776,"identity":1777,"label":1778,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1779,"versions":1780,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1782},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[436],[1781],"3.4.0",[55],{"id":1784,"slug":1785,"identity":1786,"label":1787,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1788,"versions":1789,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1791},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[436],[1790],"0.20.0",[55],{"id":1793,"slug":1794,"identity":1795,"label":1796,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1797,"versions":1798,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1800},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[650,377],[1799],"4.15.0",[55],{"id":1802,"slug":1803,"identity":1804,"label":1805,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1806,"versions":1807,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1809},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[436],[1808],"0.4.2",[55],{"id":1811,"slug":1812,"identity":1813,"label":1814,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1815,"versions":1816,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1817},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[317],[1546],[55],{"id":1819,"slug":1820,"identity":1821,"label":1822,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1823,"versions":1824,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1826},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[339],[1825],"0.38.0",[55],{"id":1828,"slug":1829,"identity":1830,"label":1831,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1832,"versions":1833,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1834},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[436],[379],[55],{"id":1836,"slug":1837,"identity":1838,"label":1839,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1840,"versions":1841,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1843},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[436],[1842],"1.1.1",[55],{"id":1845,"slug":1846,"identity":1847,"label":1848,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1849,"versions":1850,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1852},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[339],[1851],"15.0.1",[55],{"id":1854,"slug":1855,"identity":1856,"label":1857,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1858,"versions":1859,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1861},"package:pypi:xformers","xformers-0f6528e3","pypi:xformers","xformers",[339],[1860],"0.0.32.post1",[55],{"id":1863,"slug":1864,"identity":1865,"label":1866,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1867,"versions":1868,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1870},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[377],[1869],"3.6.0",[55],{"id":1872,"slug":1873,"identity":1874,"label":1875,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1876,"versions":1877,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1879},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[317],[1878],"1.22.0",[55],[1881,1920,1952,1985,2017,2065,2090,2122,2165,2191,2217,2244,2272,2301,2333,2368,2391,2418,2444,2464,2482,2507,2548,2574,2612,2637,2662,2690,2713,2743,2773,2808,2832,2862,2889,2908,2934,2957,2988,3015,3044,3069,3092,3114,3137,3166,3192,3215,3238,3285,3335,3366,3405,3434,3470,3488,3538,3577,3605,3637,3669,3694,3731,3755,3778,3811,3835,3869,3897,3927,3947,3972,3997,4029,4085,4117,4148,4182,4207,4241,4265,4288,4307,4340,4365,4392,4415,4443,4468,4502,4536,4558,4580,4607,4628,4653,4683,4703,4727,4759,4782,4807,4828,4852,4871,4892,4914,4945,4968,4991,5018,5047,5069,5091,5116,5145,5166,5198,5222,5248,5282,5304,5331,5358,5391,5411,5447,5486,5518,5545,5572,5601,5628,5658,5690,5715,5742,5764,5787,5815,5842,5866,5889,5913,5939,5969,5994,6019,6071,6094,6120,6152,6181,6206,6242,6274,6293,6312,6340,6360,6377,6396,6413,6434,6450,6465,6482,6497,6514,6531,6548,6561,6574,6587,6600,6613,6626,6639,6652,6669,6691,6724,6743,6760,6777,6795,6818,6832,6855,6884,6904,6931,6952,6972],{"id":108,"slug":1882,"dossier":46,"summary":1883,"aliases":1884,"sourceIds":1887,"published":1888,"modified":1889,"checkedAt":7,"severity":1890,"references":1894,"versionKeys":1918,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1885,1886],"CVE-2024-39689","PYSEC-2024-230",[108,1886],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[1891],{"type":1892,"score":1893},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1895,1898,1900,1903,1906,1909,1912,1914,1916],{"type":1896,"url":1897},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1896,"url":1899},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1901,"url":1902},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1904,"url":1905},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1907,"url":1908},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1910,"url":1911},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1907,"url":1913},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1896,"url":1915},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1896,"url":1917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1919],"pypi:certifi@2024.6.2",{"id":109,"slug":1921,"dossier":46,"summary":1922,"aliases":1923,"sourceIds":1926,"published":1927,"modified":1928,"checkedAt":7,"severity":1929,"references":1932,"versionKeys":1944,"packageCount":32,"repositoryCount":104},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1924,1925],"CVE-2026-4372","PYSEC-2026-2289",[109,1925],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[1930],{"type":1892,"score":1931},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1933,1935,1937,1939,1942],{"type":1896,"url":1934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1901,"url":1936},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1904,"url":1938},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1940,"url":1941},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1896,"url":1943},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1945,1946,1947,1948,1949,1950,1951],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":110,"slug":1953,"dossier":46,"summary":1954,"aliases":1955,"sourceIds":1958,"published":1959,"modified":1960,"checkedAt":7,"severity":1961,"references":1964,"versionKeys":1981,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[1956,1957],"CVE-2025-54121","PYSEC-2026-1941",[110,1957],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[1962],{"type":1892,"score":1963},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1965,1967,1969,1971,1973,1975,1977,1979],{"type":1907,"url":1966},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":1896,"url":1968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":1901,"url":1970},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":1904,"url":1972},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":1907,"url":1974},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":1907,"url":1976},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":1904,"url":1978},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":1896,"url":1980},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[1982,1983,1984],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":111,"slug":1986,"dossier":46,"summary":1987,"aliases":1988,"sourceIds":1991,"published":1992,"modified":1993,"checkedAt":7,"severity":1994,"references":2000,"versionKeys":2007,"packageCount":32,"repositoryCount":2016},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1989,1990],"CVE-2026-54279","PYSEC-2026-2112",[111,1990],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[1995,1998],{"type":1996,"score":1997},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2001,2003,2005],{"type":1896,"url":2002},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1904,"url":2004},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1901,"url":2006},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2008,2009,2010,2011,2012,2013,2014,2015],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":112,"slug":2018,"dossier":46,"summary":2019,"aliases":2020,"sourceIds":2023,"published":2024,"modified":2025,"checkedAt":7,"severity":2026,"references":2029,"versionKeys":2062,"packageCount":32,"repositoryCount":491},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[2021,2022],"CVE-2026-22807","PYSEC-2026-2010",[112,2022],"2026-01-21T16:12:54Z","2026-07-17T16:30:29.025047931Z",[2027],{"type":1892,"score":2028},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2030,2032,2034,2036,2038,2040,2042,2044,2046,2048,2050,2052,2054,2056,2058,2060],{"type":1907,"url":2031},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":1896,"url":2033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":1907,"url":2035},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":1907,"url":2037},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":1907,"url":2039},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":1904,"url":2041},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":1907,"url":2043},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":1904,"url":2045},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"type":1907,"url":2047},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":1896,"url":2049},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":1907,"url":2051},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":1907,"url":2053},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":1907,"url":2055},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":1907,"url":2057},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":1907,"url":2059},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",{"type":1907,"url":2061},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",[2063,2064],"pypi:vllm@0.10.1.1","pypi:vllm@0.11.0",{"id":113,"slug":2066,"dossier":46,"summary":2067,"aliases":2068,"sourceIds":2071,"published":2072,"modified":2073,"checkedAt":7,"severity":2074,"references":2079,"versionKeys":2089,"packageCount":32,"repositoryCount":2016},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2069,2070],"CVE-2026-34514","PYSEC-2026-2096",[113,2070],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2075,2077],{"type":1996,"score":2076},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":2078},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2080,2082,2084,2086,2087],{"type":1901,"url":2081},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1896,"url":2083},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1901,"url":2085},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1904,"url":2004},{"type":1896,"url":2088},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":114,"slug":2091,"dossier":91,"summary":2092,"aliases":2093,"sourceIds":2096,"published":2097,"modified":2098,"checkedAt":7,"severity":2099,"references":2102,"versionKeys":2115,"packageCount":32,"repositoryCount":2121},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2094,2095],"CVE-2025-66471","PYSEC-2026-1994",[114,2095],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2100],{"type":1996,"score":2101},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2103,2105,2107,2109,2111,2113],{"type":1907,"url":2104},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1896,"url":2106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1901,"url":2108},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1904,"url":2110},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1904,"url":2112},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1896,"url":2114},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2116,2117,2118,2119,2120],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":115,"slug":2123,"dossier":46,"summary":2124,"aliases":2125,"sourceIds":2129,"published":2130,"modified":2131,"checkedAt":7,"severity":2132,"references":2139,"versionKeys":2161,"packageCount":32,"repositoryCount":106},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2126,2127,2128],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[115,2128],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2133,2135,2137],{"type":1892,"score":2134},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1996,"score":2136},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1892,"score":2138},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2140,2142,2145,2147,2149,2151,2153,2155,2157,2159],{"type":1896,"url":2141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2143,"url":2144},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2143,"url":2146},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1907,"url":2148},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1904,"url":2150},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1907,"url":2152},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2143,"url":2154},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1896,"url":2156},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1896,"url":2158},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1896,"url":2160},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2162,2163,2164],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":116,"slug":2166,"dossier":46,"summary":2167,"aliases":2168,"sourceIds":2171,"published":2172,"modified":2173,"checkedAt":7,"severity":2174,"references":2176,"versionKeys":2190,"packageCount":32,"repositoryCount":491},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2169,2170],"CVE-2025-3933","PYSEC-2026-1977",[116,2170],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2175],{"type":1892,"score":1963},[2177,2179,2181,2183,2184,2186,2188],{"type":1896,"url":2178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1907,"url":2180},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1907,"url":2182},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1904,"url":1938},{"type":1907,"url":2185},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1904,"url":2187},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1896,"url":2189},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1945,1946],{"id":117,"slug":2192,"dossier":91,"summary":2193,"aliases":2194,"sourceIds":2197,"published":2198,"modified":2199,"checkedAt":7,"severity":2200,"references":2203,"versionKeys":2216,"packageCount":32,"repositoryCount":2121},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2195,2196],"CVE-2026-21441","PYSEC-2026-1996",[117,2196],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2201,2202],{"type":1892,"score":1999},{"type":1996,"score":2101},[2204,2206,2208,2210,2211,2213,2214],{"type":1907,"url":2205},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1896,"url":2207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1901,"url":2209},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1904,"url":2110},{"type":1907,"url":2212},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1904,"url":2112},{"type":1896,"url":2215},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2116,2117,2118,2119,2120],{"id":118,"slug":2218,"dossier":46,"summary":2219,"aliases":2220,"sourceIds":2223,"published":2224,"modified":2225,"checkedAt":7,"severity":2226,"references":2229,"versionKeys":2242,"packageCount":32,"repositoryCount":32},"ghsa-38vq-g6vr-w8wf-91b7e775","Sentencepiece has a a heap overflow issue",[2221,2222],"CVE-2026-1260","PYSEC-2026-1909",[118,2222],"2026-01-22T18:30:39Z","2026-07-07T17:56:14.124737800Z",[2227],{"type":1996,"score":2228},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2230,2232,2234,2236,2238,2240],{"type":1896,"url":2231},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1260",{"type":1907,"url":2233},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Fcommit\u002Fd856b67fdb3492e035489abf9b3aaf486144b2c0",{"type":1904,"url":2235},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece",{"type":1907,"url":2237},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Freleases\u002Ftag\u002Fv0.2.1",{"type":1904,"url":2239},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsentencepiece",{"type":1896,"url":2241},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38vq-g6vr-w8wf",[2243],"pypi:sentencepiece@0.2.0",{"id":119,"slug":2245,"dossier":46,"summary":2246,"aliases":2247,"sourceIds":2250,"published":2251,"modified":2252,"checkedAt":7,"severity":2253,"references":2256,"versionKeys":2269,"packageCount":32,"repositoryCount":491},"ghsa-3c37-wwvx-h642-8520854e","cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads",[2248,2249],"CVE-2026-26209","PYSEC-2026-2123",[119,2249],"2026-03-23T19:16:39.530Z","2026-07-13T07:26:16.551981788Z",[2254],{"type":1892,"score":2255},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2257,2259,2261,2263,2265,2267],{"type":1940,"url":2258},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-3c37-wwvx-h642",{"type":1896,"url":2260},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26209",{"type":1901,"url":2262},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F275",{"type":1901,"url":2264},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Fe61a5f365ba610d5907a0ae1bc72769bba34294b",{"type":1904,"url":2266},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2",{"type":1896,"url":2268},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Freleases\u002Ftag\u002F5.9.0",[2270,2271],"pypi:cbor2@5.7.0","pypi:cbor2@5.7.1",{"id":120,"slug":2273,"dossier":46,"summary":2274,"aliases":2275,"sourceIds":2278,"published":2279,"modified":2280,"checkedAt":7,"severity":2281,"references":2284,"versionKeys":2299,"packageCount":32,"repositoryCount":491},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[2276,2277],"CVE-2025-6242","PYSEC-2026-2011",[120,2277],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[2282],{"type":1892,"score":2283},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[2285,2287,2289,2291,2293,2295,2296,2297],{"type":1907,"url":2286},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":1896,"url":2288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":1907,"url":2290},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":1907,"url":2292},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":1907,"url":2294},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":1904,"url":2045},{"type":1904,"url":2041},{"type":1896,"url":2298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[2063,2300],"pypi:vllm@0.8.5.post1",{"id":121,"slug":2302,"dossier":46,"summary":2303,"aliases":2304,"sourceIds":2306,"published":2307,"modified":2308,"checkedAt":7,"severity":2309,"references":2314,"versionKeys":2331,"packageCount":32,"repositoryCount":32},"ghsa-3hh9-752g-5g22-02d6de07","LMCache: 16-bit multimodal hash collision can poison KV cache entries",[2305],"CVE-2026-10813",[121],"2026-06-04T18:30:31Z","2026-07-15T22:30:42.987212579Z",[2310,2312],{"type":1892,"score":2311},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":1996,"score":2313},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2315,2317,2319,2321,2323,2325,2327,2329],{"type":1896,"url":2316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10813",{"type":1907,"url":2318},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache\u002Fissues\u002F3301",{"type":1907,"url":2320},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache\u002Fpull\u002F2932",{"type":1904,"url":2322},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache",{"type":1907,"url":2324},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10813",{"type":1907,"url":2326},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831641",{"type":1907,"url":2328},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368261",{"type":1907,"url":2330},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368261\u002Fcti",[2332],"pypi:lmcache@0.3.8",{"id":122,"slug":2334,"dossier":46,"summary":2335,"aliases":2336,"sourceIds":2339,"published":2340,"modified":2341,"checkedAt":7,"severity":2342,"references":2345,"versionKeys":2367,"packageCount":32,"repositoryCount":106},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[2337,2338],"CVE-2026-34756","PYSEC-2026-2298",[122,2338],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[2343],{"type":1892,"score":2344},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2346,2348,2350,2352,2354,2356,2358,2360,2362,2364,2365],{"type":1901,"url":2347},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":1896,"url":2349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":1901,"url":2351},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":1901,"url":2353},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":1896,"url":2355},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":1896,"url":2357},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":1907,"url":2359},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":2143,"url":2361},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":1907,"url":2363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":1904,"url":2045},{"type":1907,"url":2366},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[2063,2064,2300],{"id":123,"slug":2369,"dossier":46,"summary":2370,"aliases":2371,"sourceIds":2374,"published":2375,"modified":2376,"checkedAt":7,"severity":2377,"references":2381,"versionKeys":2390,"packageCount":32,"repositoryCount":2016},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2372,2373],"CVE-2026-34517","PYSEC-2026-2099",[123,2373],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[2378,2380],{"type":1996,"score":2379},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1963},[2382,2384,2386,2388,2389],{"type":1901,"url":2383},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1896,"url":2385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1901,"url":2387},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":124,"slug":2392,"dossier":46,"summary":2393,"aliases":2394,"sourceIds":2397,"published":2398,"modified":2399,"checkedAt":7,"severity":2400,"references":2403,"versionKeys":2417,"packageCount":32,"repositoryCount":106},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[2395,2396],"CVE-2026-47155","PYSEC-2026-2301",[124,2396],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[2401],{"type":1892,"score":2402},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[2404,2406,2408,2410,2412,2414,2415],{"type":1896,"url":2405},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":1896,"url":2407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":2143,"url":2409},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":1901,"url":2411},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":1907,"url":2413},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":1904,"url":2045},{"type":1896,"url":2416},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[2063,2064,2300],{"id":125,"slug":2419,"dossier":46,"summary":2420,"aliases":2421,"sourceIds":2424,"published":2425,"modified":2426,"checkedAt":7,"severity":2427,"references":2430,"versionKeys":2443,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2422,2423],"CVE-2025-50182","PYSEC-2026-1997",[125,2423],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2428],{"type":1892,"score":2429},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2431,2433,2435,2437,2438,2440,2441],{"type":1907,"url":2432},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1896,"url":2434},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1901,"url":2436},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1904,"url":2110},{"type":1907,"url":2439},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1904,"url":2112},{"type":1896,"url":2442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2116,2117,2118,2119],{"id":126,"slug":2445,"dossier":46,"summary":2446,"aliases":2447,"sourceIds":2450,"published":2451,"modified":2452,"checkedAt":7,"severity":2453,"references":2457,"versionKeys":2463,"packageCount":32,"repositoryCount":2016},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2448,2449],"CVE-2026-54273","PYSEC-2026-2107",[126,2449],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2454,2456],{"type":1996,"score":2455},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},[2458,2460,2462],{"type":1896,"url":2459},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1901,"url":2461},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":127,"slug":2465,"dossier":46,"summary":2466,"aliases":2467,"sourceIds":2470,"published":2471,"modified":2472,"checkedAt":7,"severity":2473,"references":2477,"versionKeys":2481,"packageCount":32,"repositoryCount":2016},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2468,2469],"CVE-2026-54275","PYSEC-2026-237",[127,2469],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2474,2476],{"type":1996,"score":2475},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},[2478,2480],{"type":1896,"url":2479},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":128,"slug":2483,"dossier":46,"summary":2484,"aliases":2485,"sourceIds":2488,"published":2489,"modified":2490,"checkedAt":7,"severity":2491,"references":2494,"versionKeys":2506,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[2486,2487],"CVE-2025-46570","PYSEC-2025-53",[128,2487],"2025-05-28T18:02:24Z","2026-02-04T03:48:23.274649Z",[2492],{"type":1892,"score":2493},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2495,2497,2499,2501,2503,2505],{"type":1896,"url":2496},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":1896,"url":2498},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":2143,"url":2500},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":1901,"url":2502},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":1907,"url":2504},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":1904,"url":2045},[2300],{"id":129,"slug":2508,"dossier":46,"summary":2509,"aliases":2510,"sourceIds":2513,"published":2514,"modified":2515,"checkedAt":7,"severity":2516,"references":2519,"versionKeys":2547,"packageCount":32,"repositoryCount":106},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[2511,2512],"CVE-2026-22778","PYSEC-2026-565",[129,2512],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[2517],{"type":1892,"score":2518},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2520,2522,2524,2526,2528,2530,2531,2533,2534,2536,2538,2540,2542,2543,2544,2545],{"type":1907,"url":2521},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":1896,"url":2523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":1907,"url":2525},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":1907,"url":2527},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":1907,"url":2529},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":1904,"url":2041},{"type":1907,"url":2532},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":1904,"url":2045},{"type":1907,"url":2535},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":1896,"url":2537},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":1907,"url":2539},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":1907,"url":2541},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":1907,"url":2057},{"type":1907,"url":2059},{"type":1907,"url":2061},{"type":1907,"url":2546},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[2063,2064,2300],{"id":130,"slug":2549,"dossier":46,"summary":2550,"aliases":2551,"sourceIds":2554,"published":2555,"modified":2556,"checkedAt":7,"severity":2557,"references":2560,"versionKeys":2573,"packageCount":32,"repositoryCount":491},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2552,2553],"CVE-2025-6921","PYSEC-2026-1980",[130,2553],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2558],{"type":1892,"score":2559},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2561,2563,2565,2567,2568,2570,2571],{"type":1896,"url":2562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1907,"url":2564},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1907,"url":2566},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1904,"url":1938},{"type":1907,"url":2569},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1904,"url":2187},{"type":1896,"url":2572},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1945,1946],{"id":131,"slug":2575,"dossier":91,"summary":2576,"aliases":2577,"sourceIds":2580,"published":2581,"modified":2582,"checkedAt":7,"severity":2583,"references":2586,"versionKeys":2609,"packageCount":32,"repositoryCount":2121},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2578,2579],"CVE-2026-4539","PYSEC-2026-2987",[131,2579],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2584,2585],{"type":1892,"score":2134},{"type":1996,"score":2136},[2587,2589,2591,2593,2595,2597,2599,2601,2603,2605,2607],{"type":1896,"url":2588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1907,"url":2590},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1907,"url":2592},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1907,"url":2594},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1904,"url":2596},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1907,"url":2598},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1907,"url":2600},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1907,"url":2602},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1907,"url":2604},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1904,"url":2606},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1896,"url":2608},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2610,2611],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":132,"slug":2613,"dossier":46,"summary":2614,"aliases":2615,"sourceIds":2619,"published":2620,"modified":2621,"checkedAt":7,"severity":2622,"references":2626,"versionKeys":2636,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[2616,2617,2618],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[132,2618],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[2623,2625],{"type":1996,"score":2624},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1892,"score":2518},[2627,2629,2631,2633,2635],{"type":1896,"url":2628},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1896,"url":2630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1907,"url":2632},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1907,"url":2634},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1904,"url":2150},[2162],{"id":133,"slug":2638,"dossier":46,"summary":2639,"aliases":2640,"sourceIds":2643,"published":2644,"modified":2645,"checkedAt":7,"severity":2646,"references":2649,"versionKeys":2661,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[2641,2642],"CVE-2025-69226","PYSEC-2026-1097",[133,2642],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[2647],{"type":1996,"score":2648},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2650,2652,2654,2656,2657,2659],{"type":1907,"url":2651},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1896,"url":2653},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1901,"url":2655},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1904,"url":2004},{"type":1904,"url":2658},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1896,"url":2660},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2008,2009,2010,2011,2012,2013,2014],{"id":134,"slug":2663,"dossier":46,"summary":2664,"aliases":2665,"sourceIds":2668,"published":2669,"modified":2670,"checkedAt":7,"severity":2671,"references":2675,"versionKeys":2688,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[2666,2667],"CVE-2024-53981","PYSEC-2026-1851",[134,2667],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[2672,2673],{"type":1892,"score":1999},{"type":1996,"score":2674},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2676,2678,2680,2682,2684,2686],{"type":1907,"url":2677},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":1896,"url":2679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":1907,"url":2681},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":1904,"url":2683},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":1904,"url":2685},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":1896,"url":2687},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[2689],"pypi:python-multipart@0.0.9",{"id":135,"slug":2691,"dossier":46,"summary":2692,"aliases":2693,"sourceIds":2696,"published":2697,"modified":2698,"checkedAt":7,"severity":2699,"references":2701,"versionKeys":2712,"packageCount":32,"repositoryCount":491},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[2694,2695],"CVE-2025-6638","PYSEC-2026-1981",[135,2695],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[2700],{"type":1892,"score":2559},[2702,2704,2705,2706,2707,2709,2710],{"type":1896,"url":2703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1907,"url":2564},{"type":1907,"url":2566},{"type":1904,"url":1938},{"type":1907,"url":2708},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1904,"url":2187},{"type":1896,"url":2711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1945,1946],{"id":136,"slug":2714,"dossier":46,"summary":2715,"aliases":2716,"sourceIds":2719,"published":2720,"modified":2721,"checkedAt":7,"severity":2722,"references":2726,"versionKeys":2741,"packageCount":32,"repositoryCount":32},"ghsa-5cmr-4px5-23pc-6775b484","XGrammar affected by Denial of Service by infinite recursion grammars",[2717,2718],"CVE-2025-57809","PYSEC-2026-2054",[136,2718],"2025-08-25T20:43:45Z","2026-07-07T17:56:43.683032784Z",[2723,2724],{"type":1892,"score":1999},{"type":1996,"score":2725},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2727,2729,2731,2733,2735,2737,2739],{"type":1907,"url":2728},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",{"type":1896,"url":2730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57809",{"type":1907,"url":2732},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fissues\u002F250",{"type":1907,"url":2734},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fcommit\u002Fb943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",{"type":1904,"url":2736},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar",{"type":1904,"url":2738},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fxgrammar",{"type":1896,"url":2740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",[2742],"pypi:xgrammar@0.1.18",{"id":137,"slug":2744,"dossier":46,"summary":2745,"aliases":2746,"sourceIds":2749,"published":2750,"modified":2751,"checkedAt":7,"severity":2752,"references":2757,"versionKeys":2772,"packageCount":32,"repositoryCount":106},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[2747,2748],"CVE-2026-53923","PYSEC-2026-3403",[137,2748],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[2753,2755],{"type":1892,"score":2754},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1996,"score":2756},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2758,2760,2762,2764,2766,2768,2770,2771],{"type":1907,"url":2759},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":1896,"url":2761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":1907,"url":2763},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":1907,"url":2765},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":1896,"url":2767},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":1907,"url":2769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":138,"slug":2774,"dossier":46,"summary":2775,"aliases":2776,"sourceIds":2780,"published":2781,"modified":2782,"checkedAt":7,"severity":2783,"references":2788,"versionKeys":2805,"packageCount":32,"repositoryCount":491},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[2777,2778,2779],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[138,2779],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[2784,2786],{"type":1996,"score":2785},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1892,"score":2787},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2789,2791,2793,2795,2797,2799,2801,2803],{"type":1940,"url":2790},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1896,"url":2792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2143,"url":2794},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1901,"url":2796},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1907,"url":2798},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1904,"url":2800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1907,"url":2802},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1910,"url":2804},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[2806,2807],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":139,"slug":2809,"dossier":46,"summary":2810,"aliases":2811,"sourceIds":2814,"published":2815,"modified":2816,"checkedAt":7,"severity":2817,"references":2819,"versionKeys":2828,"packageCount":32,"repositoryCount":2831},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[2812,2813],"CVE-2026-53539","PYSEC-2026-3036",[139,2813],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[2818],{"type":1892,"score":1999},[2820,2822,2823,2824,2826],{"type":1907,"url":2821},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":2825},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1896,"url":2827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[2829,2830,2689],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",5,{"id":140,"slug":2833,"dossier":46,"summary":2834,"aliases":2835,"sourceIds":2839,"published":2840,"modified":2841,"checkedAt":7,"severity":2842,"references":2846,"versionKeys":2855,"packageCount":32,"repositoryCount":2861},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[2836,2837,2838],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[140,2838],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[2843,2844],{"type":1892,"score":2138},{"type":1996,"score":2845},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2847,2849,2851,2853],{"type":1896,"url":2848},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1896,"url":2850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1904,"url":2852},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1896,"url":2854},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2856,2857,2858,2859,2860],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":141,"slug":2863,"dossier":46,"summary":2864,"aliases":2865,"sourceIds":2868,"published":2869,"modified":2870,"checkedAt":7,"severity":2871,"references":2877,"versionKeys":2888,"packageCount":32,"repositoryCount":2016},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2866,2867],"CVE-2026-34520","PYSEC-2026-2102",[141,2867],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[2872,2874,2875],{"type":1892,"score":2873},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1996,"score":2076},{"type":1996,"score":2876},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2878,2880,2882,2884,2885,2886],{"type":1901,"url":2879},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1896,"url":2881},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1901,"url":2883},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1904,"url":2004},{"type":1896,"url":2088},{"type":1907,"url":2887},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":142,"slug":2890,"dossier":46,"summary":2891,"aliases":2892,"sourceIds":2895,"published":2896,"modified":2897,"checkedAt":7,"severity":2898,"references":2901,"versionKeys":2907,"packageCount":32,"repositoryCount":2016},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2893,2894],"CVE-2026-54277","PYSEC-2026-2110",[142,2894],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[2899,2900],{"type":1996,"score":2455},{"type":1892,"score":1999},[2902,2904,2906],{"type":1896,"url":2903},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1901,"url":2905},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":143,"slug":2909,"dossier":91,"summary":2910,"aliases":2911,"sourceIds":2914,"published":2915,"modified":2916,"checkedAt":7,"severity":2917,"references":2921,"versionKeys":2930,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2912,2913],"CVE-2026-45409","PYSEC-2026-215",[143,2913],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[2918,2919],{"type":1892,"score":1963},{"type":1996,"score":2920},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2922,2924,2926,2928],{"type":1896,"url":2923},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1896,"url":2925},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1904,"url":2927},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1907,"url":2929},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2931,2932,2933],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":144,"slug":2935,"dossier":46,"summary":2936,"aliases":2937,"sourceIds":2940,"published":2941,"modified":2942,"checkedAt":7,"severity":2943,"references":2945,"versionKeys":2956,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2938,2939],"CVE-2025-69224","PYSEC-2026-1099",[144,2939],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[2944],{"type":1996,"score":2076},[2946,2948,2950,2952,2953,2954],{"type":1907,"url":2947},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1896,"url":2949},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1901,"url":2951},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":2955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2008,2009,2010,2011,2012,2013,2014],{"id":145,"slug":2958,"dossier":46,"summary":2959,"aliases":2960,"sourceIds":2963,"published":2964,"modified":2965,"checkedAt":7,"severity":2966,"references":2968,"versionKeys":2987,"packageCount":32,"repositoryCount":106},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[2961,2962],"CVE-2025-62426","PYSEC-2026-2012",[145,2962],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[2967],{"type":1892,"score":2344},[2969,2971,2973,2975,2977,2979,2981,2982,2984,2986],{"type":1907,"url":2970},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":1896,"url":2972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":1907,"url":2974},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":1907,"url":2976},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":1896,"url":2978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":1907,"url":2980},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":1904,"url":2045},{"type":1907,"url":2983},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":1907,"url":2985},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":1904,"url":2041},[2063,2064,2300],{"id":146,"slug":2989,"dossier":46,"summary":2990,"aliases":2991,"sourceIds":2994,"published":2995,"modified":2996,"checkedAt":7,"severity":2997,"references":3002,"versionKeys":3014,"packageCount":32,"repositoryCount":104},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2992,2993],"CVE-2026-1839","PYSEC-2026-2288",[146,2993],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[2998,3000],{"type":1892,"score":2999},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1892,"score":3001},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3003,3005,3007,3008,3010,3012],{"type":1896,"url":3004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1901,"url":3006},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1904,"url":1938},{"type":1907,"url":3009},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1940,"url":3011},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1896,"url":3013},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1945,1946,1947,1948,1949,1950,1951],{"id":147,"slug":3016,"dossier":46,"summary":3017,"aliases":3018,"sourceIds":3021,"published":3022,"modified":3023,"checkedAt":7,"severity":3024,"references":3029,"versionKeys":3043,"packageCount":32,"repositoryCount":106},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[3019,3020],"CVE-2026-34760","PYSEC-2026-2299",[147,3020],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[3025,3027],{"type":1892,"score":3026},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":1892,"score":3028},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[3030,3032,3034,3036,3038,3040,3041],{"type":1896,"url":3031},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":1896,"url":3033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":2143,"url":3035},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":1901,"url":3037},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":1907,"url":3039},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":1904,"url":2045},{"type":1896,"url":3042},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[2063,2064,2300],{"id":148,"slug":3045,"dossier":46,"summary":3046,"aliases":3047,"sourceIds":3050,"published":3051,"modified":3052,"checkedAt":7,"severity":3053,"references":3055,"versionKeys":3068,"packageCount":32,"repositoryCount":491},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[3048,3049],"CVE-2025-61620","PYSEC-2026-2013",[148,3049],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[3054],{"type":1892,"score":2344},[3056,3058,3060,3062,3063,3064,3066],{"type":1907,"url":3057},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":1907,"url":3059},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":1907,"url":3061},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":1904,"url":2045},{"type":1904,"url":2041},{"type":1896,"url":3065},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":1896,"url":3067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[2063,2300],{"id":149,"slug":3070,"dossier":46,"summary":3071,"aliases":3072,"sourceIds":3075,"published":3076,"modified":3077,"checkedAt":7,"severity":3078,"references":3080,"versionKeys":3091,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3073,3074],"CVE-2025-69228","PYSEC-2026-1100",[149,3074],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[3079],{"type":1996,"score":2455},[3081,3083,3085,3087,3088,3089],{"type":1907,"url":3082},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1896,"url":3084},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1901,"url":3086},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":3090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2008,2009,2010,2011,2012,2013,2014],{"id":150,"slug":3093,"dossier":46,"summary":3094,"aliases":3095,"sourceIds":3098,"published":3099,"modified":3100,"checkedAt":7,"severity":3101,"references":3104,"versionKeys":3113,"packageCount":32,"repositoryCount":2831},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[3096,3097],"CVE-2026-53538","PYSEC-2026-3037",[150,3097],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[3102],{"type":1892,"score":3103},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3105,3107,3108,3109,3111],{"type":1907,"url":3106},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":3110},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1896,"url":3112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[2829,2830,2689],{"id":151,"slug":3115,"dossier":46,"summary":3116,"aliases":3117,"sourceIds":3120,"published":3121,"modified":3122,"checkedAt":7,"severity":3123,"references":3125,"versionKeys":3136,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[3118,3119],"CVE-2025-69223","PYSEC-2026-1101",[151,3119],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[3124],{"type":1892,"score":1999},[3126,3128,3130,3132,3133,3134],{"type":1907,"url":3127},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1896,"url":3129},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1901,"url":3131},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":3135},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2008,2009,2010,2011,2012,2013,2014],{"id":152,"slug":3138,"dossier":46,"summary":3139,"aliases":3140,"sourceIds":3143,"published":3144,"modified":3145,"checkedAt":7,"severity":3146,"references":3148,"versionKeys":3165,"packageCount":32,"repositoryCount":106},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[3141,3142],"CVE-2026-54233","PYSEC-2026-3404",[152,3142],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[3147],{"type":1892,"score":2344},[3149,3151,3153,3155,3157,3159,3161,3162,3164],{"type":1907,"url":3150},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":1896,"url":3152},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":1907,"url":3154},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":1907,"url":3156},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":1896,"url":3158},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":1907,"url":3160},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":1904,"url":2045},{"type":1907,"url":3163},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":1904,"url":2041},[2063,2064,2300],{"id":153,"slug":3167,"dossier":46,"summary":3168,"aliases":3169,"sourceIds":3172,"published":3173,"modified":3174,"checkedAt":7,"severity":3175,"references":3177,"versionKeys":3191,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[3170,3171],"CVE-2025-48942","PYSEC-2025-54",[153,3171],"2025-05-28T19:41:53Z","2026-02-04T02:16:15.150519Z",[3176],{"type":1892,"score":2344},[3178,3180,3182,3184,3186,3188,3190],{"type":1940,"url":3179},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":1896,"url":3181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":2143,"url":3183},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":2143,"url":3185},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":1901,"url":3187},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":1907,"url":3189},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":1904,"url":2045},[2300],{"id":154,"slug":3193,"dossier":46,"summary":3194,"aliases":3195,"sourceIds":3198,"published":3199,"modified":3200,"checkedAt":7,"severity":3201,"references":3203,"versionKeys":3214,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3196,3197],"CVE-2024-12720","PYSEC-2026-1982",[154,3197],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3202],{"type":1892,"score":2559},[3204,3206,3208,3209,3211,3212],{"type":1896,"url":3205},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1907,"url":3207},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1904,"url":1938},{"type":1907,"url":3210},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1904,"url":2187},{"type":1896,"url":3213},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1945],{"id":155,"slug":3216,"dossier":46,"summary":3217,"aliases":3218,"sourceIds":3220,"published":3221,"modified":3222,"checkedAt":7,"severity":3223,"references":3225,"versionKeys":3234,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[3219],"CVE-2026-57585",[155],"2026-06-19T21:42:55Z","2026-07-08T08:26:50.587609817Z",[3224],{"type":1892,"score":1999},[3226,3228,3230,3232],{"type":1907,"url":3227},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":1907,"url":3229},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":1904,"url":3231},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":1907,"url":3233},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[3235,3236,3237],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":156,"slug":3239,"dossier":46,"summary":3240,"aliases":3241,"sourceIds":3244,"published":3245,"modified":3246,"checkedAt":7,"severity":3247,"references":3249,"versionKeys":3282,"packageCount":32,"repositoryCount":491},"ghsa-6wgj-66m2-xxp2-37eb592b","Ray has arbitrary code execution via jobs submission API",[3242,3243],"CVE-2023-48022","PYSEC-2026-517",[156,3243],"2023-11-28T09:30:26Z","2026-07-01T20:23:03.600233Z",[3248],{"type":1892,"score":2518},[3250,3252,3254,3256,3258,3260,3262,3264,3266,3268,3270,3272,3274,3276,3278,3280],{"type":1896,"url":3251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-48022",{"type":1907,"url":3253},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F978947083b1e192dba61ef653c863b11d56b0936",{"type":1907,"url":3255},"https:\u002F\u002Fatlas.mitre.org\u002Fstudies\u002FAML.CS0023",{"type":1907,"url":3257},"https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fray-versions-2-6-3-2-8-0",{"type":1907,"url":3259},"https:\u002F\u002Fconsole.vulncheck.com\u002Fcve\u002FCVE-2023-48022",{"type":1907,"url":3261},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Findex.html",{"type":1907,"url":3263},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Ftoken-auth.html",{"type":1896,"url":3265},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xg2h-7cxj-3gvh",{"type":1907,"url":3267},"https:\u002F\u002Fgithub.com\u002Fhonysyang\u002FRay",{"type":1904,"url":3269},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray",{"type":1907,"url":3271},"https:\u002F\u002Fwww.anyscale.com\u002Fblog\u002Fupdate-on-ray-cve-2023-48022-new-verification-tooling-available",{"type":1907,"url":3273},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-attack-ai-workloads-actively-exploited-in-the-wild",{"type":1907,"url":3275},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fshadowray-cve-2023-48022-exploit",{"type":1907,"url":3277},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fthe-story-of-shadowray-cve-2023-48022",{"type":1907,"url":3279},"https:\u002F\u002Fwww.vulncheck.com\u002Fblog\u002Finitial-access-intelligence-august-2024",{"type":1904,"url":3281},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fray",[3283,3284],"pypi:ray@2.45.0","pypi:ray@2.49.1",{"id":157,"slug":3286,"dossier":46,"summary":3287,"aliases":3288,"sourceIds":3291,"published":3292,"modified":3293,"checkedAt":7,"severity":3294,"references":3296,"versionKeys":3334,"packageCount":32,"repositoryCount":491},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[3289,3290],"CVE-2026-27893","PYSEC-2026-2297",[157,3290],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[3295],{"type":1892,"score":2028},[3297,3299,3301,3303,3305,3307,3308,3310,3312,3314,3316,3318,3320,3322,3324,3326,3328,3330,3332],{"type":1896,"url":3298},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":1896,"url":3300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":2143,"url":3302},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":1901,"url":3304},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":1907,"url":3306},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":1904,"url":2045},{"type":1907,"url":3309},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":2143,"url":3311},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":1907,"url":3313},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":1896,"url":3315},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":1896,"url":3317},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":1896,"url":3319},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":1896,"url":3321},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1896,"url":3323},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1896,"url":3325},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":1896,"url":3327},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":1896,"url":3329},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":1896,"url":3331},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":1896,"url":3333},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[2063,2064],{"id":158,"slug":3336,"dossier":46,"summary":3337,"aliases":3338,"sourceIds":3341,"published":3342,"modified":3343,"checkedAt":7,"severity":3344,"references":3346,"versionKeys":3363,"packageCount":32,"repositoryCount":2831},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3339,3340],"CVE-2025-62727","PYSEC-2026-1942",[158,3340],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3345],{"type":1892,"score":1999},[3347,3349,3351,3353,3356,3358,3360,3361],{"type":1907,"url":3348},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":1896,"url":3350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":1901,"url":3352},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3354,"url":3355},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":1904,"url":3357},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":1907,"url":3359},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":1904,"url":1978},{"type":1896,"url":3362},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[1983,1984,3364,3365],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":159,"slug":3367,"dossier":46,"summary":3368,"aliases":3369,"sourceIds":3372,"published":3373,"modified":3374,"checkedAt":7,"severity":3375,"references":3378,"versionKeys":3395,"packageCount":32,"repositoryCount":2861},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3370,3371],"CVE-2026-0994","PYSEC-2026-1805",[159,3371],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3376],{"type":1996,"score":3377},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3379,3381,3383,3385,3387,3389,3391,3393],{"type":1896,"url":3380},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":1907,"url":3382},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":1907,"url":3384},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":1907,"url":3386},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":1907,"url":3388},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":1904,"url":3390},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":1904,"url":3392},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":1896,"url":3394},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3396,3397,3398,3399,3400,3401,3402,3403,3404],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":160,"slug":3406,"dossier":46,"summary":3407,"aliases":3408,"sourceIds":3411,"published":3412,"modified":3413,"checkedAt":7,"severity":3414,"references":3418,"versionKeys":3433,"packageCount":32,"repositoryCount":106},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[3409,3410],"CVE-2026-54235","PYSEC-2026-3405",[160,3410],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[3415,3417],{"type":1892,"score":3416},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":1996,"score":2920},[3419,3421,3423,3425,3427,3429,3431,3432],{"type":1907,"url":3420},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":1896,"url":3422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":1907,"url":3424},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":1907,"url":3426},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":1896,"url":3428},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":1907,"url":3430},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":161,"slug":3435,"dossier":46,"summary":3436,"aliases":3437,"sourceIds":3440,"published":3441,"modified":3442,"checkedAt":7,"severity":3443,"references":3446,"versionKeys":3467,"packageCount":32,"repositoryCount":106},"ghsa-7rgv-gqhr-fxg3-3d33cce2","xgrammar vulnerable to DoS via multi-layer nesting",[3438,3439],"CVE-2026-25048","PYSEC-2026-2322",[161,3439],"2026-03-05T16:16:15.853Z","2026-07-13T07:26:24.793294058Z",[3444,3445],{"type":1996,"score":2674},{"type":1892,"score":1999},[3447,3449,3451,3452,3454,3456,3458,3459,3461,3463,3465],{"type":1940,"url":3448},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-7rgv-gqhr-fxg3",{"type":1896,"url":3450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25048",{"type":1904,"url":2736},{"type":1896,"url":3453},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Freleases\u002Ftag\u002Fv0.1.32",{"type":1907,"url":3455},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25048",{"type":1907,"url":3457},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25048.json",{"type":1896,"url":3323},{"type":1896,"url":3460},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5809",{"type":1896,"url":3462},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6761",{"type":1896,"url":3464},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6762",{"type":2143,"url":3466},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444840",[2742,3468,3469],"pypi:xgrammar@0.1.21","pypi:xgrammar@0.1.25",{"id":162,"slug":3471,"dossier":46,"summary":3472,"aliases":3473,"sourceIds":3476,"published":3477,"modified":3478,"checkedAt":7,"severity":3479,"references":3481,"versionKeys":3485,"packageCount":32,"repositoryCount":104},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[3474,3475],"CVE-2026-54283","PYSEC-2026-249",[162,3475],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[3480],{"type":1892,"score":1999},[3482,3484],{"type":1896,"url":3483},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":1904,"url":3357},[1982,1983,1984,3364,3365,3486,3487],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":163,"slug":3489,"dossier":46,"summary":3490,"aliases":3491,"sourceIds":3495,"published":3496,"modified":3497,"checkedAt":7,"severity":3498,"references":3501,"versionKeys":3537,"packageCount":32,"repositoryCount":104},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[3492,3493,3494],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[163,3493],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[3499],{"type":1892,"score":3500},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3502,3504,3506,3508,3510,3512,3514,3516,3518,3520,3521,3523,3526,3528,3529,3531,3533,3535],{"type":1896,"url":3503},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":1896,"url":3505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":1901,"url":3507},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":1907,"url":3509},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1910,"url":3511},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":1907,"url":3513},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":1907,"url":3515},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":1907,"url":3517},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":1907,"url":3519},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":1904,"url":3357},{"type":1907,"url":3522},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":3524,"url":3525},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":1907,"url":3527},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":1907,"url":3321},{"type":1907,"url":3530},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":1907,"url":3532},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":1910,"url":3534},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":1896,"url":3536},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[1982,1983,1984,3364,3365,3486,3487],{"id":164,"slug":3539,"dossier":46,"summary":3540,"aliases":3541,"sourceIds":3545,"published":3546,"modified":3547,"checkedAt":7,"severity":3548,"references":3552,"versionKeys":3574,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[3542,3543,3544],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[164,3544],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[3549,3550],{"type":1892,"score":2134},{"type":1996,"score":3551},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3553,3555,3557,3559,3561,3563,3564,3566,3568,3570,3572],{"type":1896,"url":3554},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1907,"url":3556},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1907,"url":3558},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1907,"url":3560},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1907,"url":3562},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1904,"url":2150},{"type":1907,"url":3565},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1907,"url":3567},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1907,"url":3569},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1904,"url":3571},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1896,"url":3573},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2162,2163,2164,3575,3576],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":165,"slug":3578,"dossier":46,"summary":3579,"aliases":3580,"sourceIds":3583,"published":3584,"modified":3585,"checkedAt":7,"severity":3586,"references":3589,"versionKeys":3604,"packageCount":32,"repositoryCount":106},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[3581,3582],"CVE-2025-66448","PYSEC-2026-2015",[165,3582],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[3587],{"type":1892,"score":3588},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3590,3592,3594,3596,3598,3600,3602,3603],{"type":1907,"url":3591},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":1896,"url":3593},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":1907,"url":3595},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":1907,"url":3597},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":1896,"url":3599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":1907,"url":3601},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":166,"slug":3606,"dossier":46,"summary":3607,"aliases":3608,"sourceIds":3611,"published":3612,"modified":3613,"checkedAt":7,"severity":3614,"references":3617,"versionKeys":3636,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[3609,3610],"CVE-2026-12491","PYSEC-2026-3406",[166,3610],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[3615],{"type":1892,"score":3616},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[3618,3620,3622,3624,3626,3628,3630,3632,3634,3635],{"type":1907,"url":3619},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":1896,"url":3621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":1907,"url":3623},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":1907,"url":3625},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":1907,"url":3627},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":1907,"url":3629},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":1896,"url":3631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":1907,"url":3633},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2064],{"id":167,"slug":3638,"dossier":46,"summary":3639,"aliases":3640,"sourceIds":3643,"published":3644,"modified":3645,"checkedAt":7,"severity":3646,"references":3649,"versionKeys":3668,"packageCount":32,"repositoryCount":106},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[3641,3642],"CVE-2025-4565","PYSEC-2026-1806",[167,3642],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[3647],{"type":1996,"score":3648},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3650,3652,3654,3656,3658,3659,3661,3663,3665,3666],{"type":1907,"url":3651},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":1907,"url":3653},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":1896,"url":3655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":1907,"url":3657},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":1904,"url":3390},{"type":1907,"url":3660},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":1907,"url":3662},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":1907,"url":3664},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":1904,"url":3392},{"type":1896,"url":3667},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3396,3398,3399],{"id":168,"slug":3670,"dossier":46,"summary":3671,"aliases":3672,"sourceIds":3675,"published":3676,"modified":3677,"checkedAt":7,"severity":3678,"references":3680,"versionKeys":3693,"packageCount":32,"repositoryCount":491},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3673,3674],"CVE-2025-5197","PYSEC-2026-1983",[168,3674],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[3679],{"type":1892,"score":2559},[3681,3683,3685,3687,3688,3690,3691],{"type":1896,"url":3682},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1907,"url":3684},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1907,"url":3686},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1904,"url":1938},{"type":1907,"url":3689},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1904,"url":2187},{"type":1896,"url":3692},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1945,1946],{"id":169,"slug":3695,"dossier":46,"summary":3696,"aliases":3697,"sourceIds":3700,"published":3701,"modified":3702,"checkedAt":7,"severity":3703,"references":3706,"versionKeys":3730,"packageCount":32,"repositoryCount":106},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[3698,3699],"CVE-2026-48746","PYSEC-2026-226",[169,3699],"2026-06-16T17:36:41Z","2026-07-17T16:30:30.589294814Z",[3704],{"type":1892,"score":3705},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[3707,3709,3711,3713,3715,3717,3718,3719,3721,3723,3725,3726,3728],{"type":1896,"url":3708},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":1896,"url":3710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":2143,"url":3712},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":1907,"url":3714},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":1907,"url":3716},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":1907,"url":2355},{"type":1907,"url":2357},{"type":1907,"url":3720},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":1907,"url":3722},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":1907,"url":3724},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":1904,"url":2045},{"type":1907,"url":3727},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":1896,"url":3729},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",[2063,2064,2300],{"id":170,"slug":3732,"dossier":46,"summary":3733,"aliases":3734,"sourceIds":3737,"published":3738,"modified":3739,"checkedAt":7,"severity":3740,"references":3743,"versionKeys":3754,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[3735,3736],"CVE-2025-53643","PYSEC-2026-1104",[170,3736],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[3741],{"type":1996,"score":3742},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3744,3746,3748,3750,3751,3752],{"type":1907,"url":3745},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1896,"url":3747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1901,"url":3749},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":3753},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2008,2009,2010,2011],{"id":171,"slug":3756,"dossier":46,"summary":3757,"aliases":3758,"sourceIds":3761,"published":3762,"modified":3763,"checkedAt":7,"severity":3764,"references":3768,"versionKeys":3777,"packageCount":32,"repositoryCount":2016},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[3759,3760],"CVE-2026-34518","PYSEC-2026-2100",[171,3760],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[3765,3767],{"type":1892,"score":3766},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1996,"score":2648},[3769,3771,3773,3775,3776],{"type":1901,"url":3770},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1896,"url":3772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1901,"url":3774},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":172,"slug":3779,"dossier":46,"summary":3780,"aliases":3781,"sourceIds":3784,"published":3785,"modified":3786,"checkedAt":7,"severity":3787,"references":3791,"versionKeys":3810,"packageCount":32,"repositoryCount":106},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[3782,3783],"CVE-2026-9540","PYSEC-2026-3407",[172,3783],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[3788,3789],{"type":1892,"score":1963},{"type":1996,"score":3790},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3792,3794,3796,3798,3799,3801,3803,3805,3807,3808],{"type":1896,"url":3793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":1907,"url":3795},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":1907,"url":3797},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":1904,"url":2045},{"type":1907,"url":3800},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":1907,"url":3802},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":1907,"url":3804},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":1907,"url":3806},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":1904,"url":2041},{"type":1896,"url":3809},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[2063,2064,2300],{"id":173,"slug":3812,"dossier":46,"summary":3813,"aliases":3814,"sourceIds":3817,"published":3818,"modified":3819,"checkedAt":7,"severity":3820,"references":3822,"versionKeys":3834,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[3815,3816],"CVE-2025-48943","PYSEC-2025-55",[173,3816],"2025-05-28T19:42:12Z","2026-02-04T02:59:05.360205Z",[3821],{"type":1892,"score":2344},[3823,3825,3827,3829,3830,3831,3833],{"type":1896,"url":3824},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":1896,"url":3826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":2143,"url":3828},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":2143,"url":3185},{"type":1901,"url":3187},{"type":1907,"url":3832},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":1904,"url":2045},[2300],{"id":174,"slug":3836,"dossier":46,"summary":3837,"aliases":3838,"sourceIds":3841,"published":3842,"modified":3843,"checkedAt":7,"severity":3844,"references":3847,"versionKeys":3866,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[3839,3840],"CVE-2024-47081","PYSEC-2026-1872",[174,3840],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[3845],{"type":1892,"score":3846},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3848,3850,3852,3854,3856,3858,3860,3862,3864],{"type":1907,"url":3849},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1896,"url":3851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1907,"url":3853},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1901,"url":3855},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1904,"url":3857},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1907,"url":3859},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1907,"url":3861},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1904,"url":3863},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1896,"url":3865},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[3867,3868],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":175,"slug":3870,"dossier":46,"summary":3871,"aliases":3872,"sourceIds":3875,"published":3876,"modified":3877,"checkedAt":7,"severity":3878,"references":3881,"versionKeys":3896,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[3873,3874],"CVE-2025-30165","PYSEC-2026-2017",[175,3874],"2025-05-06T16:38:35Z","2026-07-17T16:30:32.007556436Z",[3879],{"type":1892,"score":3880},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3882,3884,3886,3888,3890,3891,3893,3895],{"type":1907,"url":3883},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":1896,"url":3885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":1896,"url":3887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":1907,"url":3889},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":1904,"url":2045},{"type":1907,"url":3892},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":1907,"url":3894},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":1904,"url":2041},[2300],{"id":176,"slug":3898,"dossier":46,"summary":3899,"aliases":3900,"sourceIds":3903,"published":3904,"modified":3905,"checkedAt":7,"severity":3906,"references":3909,"versionKeys":3926,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[3901,3902],"CVE-2024-35195","PYSEC-2026-1873",[176,3902],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[3907],{"type":1892,"score":3908},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3910,3912,3914,3916,3918,3919,3921,3923,3924],{"type":1907,"url":3911},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1896,"url":3913},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1907,"url":3915},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1901,"url":3917},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1904,"url":3857},{"type":1907,"url":3920},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1907,"url":3922},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1904,"url":3863},{"type":1896,"url":3925},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[3867],{"id":177,"slug":3928,"dossier":46,"summary":3929,"aliases":3930,"sourceIds":3933,"published":3934,"modified":3935,"checkedAt":7,"severity":3936,"references":3940,"versionKeys":3946,"packageCount":32,"repositoryCount":2016},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[3931,3932],"CVE-2026-54280","PYSEC-2026-2113",[177,3932],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[3937,3939],{"type":1996,"score":3938},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},[3941,3943,3945],{"type":1896,"url":3942},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1901,"url":3944},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":178,"slug":3948,"dossier":46,"summary":3949,"aliases":3950,"sourceIds":3953,"published":3954,"modified":3955,"checkedAt":7,"severity":3956,"references":3960,"versionKeys":3971,"packageCount":32,"repositoryCount":2016},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[3951,3952],"CVE-2026-34525","PYSEC-2026-2103",[178,3952],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[3957,3959],{"type":1996,"score":3958},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1892,"score":2078},[3961,3963,3965,3967,3969,3970],{"type":1901,"url":3962},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1896,"url":3964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1901,"url":3966},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1901,"url":3968},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":179,"slug":3973,"dossier":46,"summary":3974,"aliases":3975,"sourceIds":3978,"published":3979,"modified":3980,"checkedAt":7,"severity":3981,"references":3984,"versionKeys":3996,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[3976,3977],"CVE-2025-46722","PYSEC-2025-43",[179,3977],"2025-05-28T18:03:41Z","2026-02-04T03:00:21.842092Z",[3982],{"type":1892,"score":3983},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[3985,3987,3989,3991,3993,3995],{"type":1896,"url":3986},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":1896,"url":3988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":1907,"url":3990},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":1901,"url":3992},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":1907,"url":3994},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":1904,"url":2045},[2300],{"id":180,"slug":3998,"dossier":46,"summary":3999,"aliases":4000,"sourceIds":4004,"published":4005,"modified":4006,"checkedAt":7,"severity":4007,"references":4012,"versionKeys":4028,"packageCount":32,"repositoryCount":491},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4001,4002,4003],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[180],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4008,4010],{"type":1892,"score":4009},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1996,"score":4011},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4013,4015,4017,4019,4020,4022,4024,4026],{"type":1896,"url":4014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1907,"url":4016},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1907,"url":4018},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1904,"url":2150},{"type":1907,"url":4021},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1907,"url":4023},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1907,"url":4025},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1907,"url":4027},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2162,2163],{"id":181,"slug":4030,"dossier":46,"summary":4031,"aliases":4032,"sourceIds":4036,"published":4037,"modified":4038,"checkedAt":7,"severity":4039,"references":4043,"versionKeys":4080,"packageCount":32,"repositoryCount":4084},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4033,4034,4035],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[181,4035],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4040,4042],{"type":1996,"score":4041},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1892,"score":1999},[4044,4046,4048,4050,4052,4054,4055,4057,4059,4061,4063,4065,4067,4069,4070,4072,4073,4074,4076,4078],{"type":1907,"url":4045},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1896,"url":4047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1907,"url":4049},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1907,"url":4051},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1907,"url":4053},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1904,"url":2852},{"type":1907,"url":4056},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1907,"url":4058},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1907,"url":4060},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1896,"url":4062},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1896,"url":4064},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1896,"url":4066},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1896,"url":4068},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1896,"url":3333},{"type":1896,"url":4071},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1896,"url":2546},{"type":1896,"url":2061},{"type":1896,"url":4075},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1896,"url":4077},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1896,"url":4079},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4081,4082,4083,2856,2857,2858,2859],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":182,"slug":4086,"dossier":46,"summary":4087,"aliases":4088,"sourceIds":4091,"published":4092,"modified":4093,"checkedAt":7,"severity":4094,"references":4097,"versionKeys":4114,"packageCount":32,"repositoryCount":491},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4089,4090],"CVE-2025-27516","PYSEC-2026-1471",[182,4090],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4095],{"type":1996,"score":4096},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4098,4100,4102,4104,4106,4108,4110,4112],{"type":1907,"url":4099},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1896,"url":4101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1901,"url":4103},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1904,"url":4105},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1907,"url":4107},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1907,"url":4109},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1904,"url":4111},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1896,"url":4113},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4115,4116],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":183,"slug":4118,"dossier":46,"summary":4119,"aliases":4120,"sourceIds":4124,"published":4125,"modified":4126,"checkedAt":7,"severity":4127,"references":4131,"versionKeys":4147,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4121,4122,4123],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[183,4123],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4128,4129],{"type":1892,"score":2028},{"type":1996,"score":4130},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4132,4134,4136,4138,4139,4141,4143,4145],{"type":1896,"url":4133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1907,"url":4135},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1907,"url":4137},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1904,"url":2800},{"type":1907,"url":4140},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1907,"url":4142},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1904,"url":4144},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1896,"url":4146},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[2806],{"id":184,"slug":4149,"dossier":46,"summary":4150,"aliases":4151,"sourceIds":4155,"published":4156,"modified":4157,"checkedAt":7,"severity":4158,"references":4163,"versionKeys":4181,"packageCount":32,"repositoryCount":491},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[4152,4153,4154],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[184],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[4159,4161],{"type":1892,"score":4160},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1996,"score":4162},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4164,4166,4168,4170,4172,4174,4175,4177,4179],{"type":1896,"url":4165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1907,"url":4167},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1907,"url":4169},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1907,"url":4171},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1907,"url":4173},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1904,"url":2150},{"type":1907,"url":4176},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1907,"url":4178},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1907,"url":4180},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2162,2163],{"id":185,"slug":4183,"dossier":46,"summary":4184,"aliases":4185,"sourceIds":4188,"published":4189,"modified":4190,"checkedAt":7,"severity":4191,"references":4195,"versionKeys":4206,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[4186,4187],"CVE-2024-47874","PYSEC-2026-1943",[185,4187],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[4192,4194],{"type":1892,"score":4193},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":1996,"score":2674},[4196,4198,4200,4202,4203,4204],{"type":1907,"url":4197},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":1896,"url":4199},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":1901,"url":4201},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":1904,"url":1972},{"type":1904,"url":1978},{"type":1896,"url":4205},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[1982],{"id":186,"slug":4208,"dossier":46,"summary":4209,"aliases":4210,"sourceIds":4213,"published":4214,"modified":4215,"checkedAt":7,"severity":4216,"references":4221,"versionKeys":4240,"packageCount":32,"repositoryCount":104},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[4211,4212],"CVE-2026-5241","PYSEC-2026-2290",[186,4212],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[4217,4219],{"type":1892,"score":4218},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1892,"score":4220},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4222,4224,4226,4228,4229,4231,4233,4234,4236,4238],{"type":1896,"url":4223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1901,"url":4225},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1896,"url":4227},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1896,"url":3321},{"type":1907,"url":4230},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2143,"url":4232},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1904,"url":1938},{"type":1907,"url":4235},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1940,"url":4237},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1907,"url":4239},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[1945,1946,1947,1948,1949,1950,1951],{"id":187,"slug":4242,"dossier":46,"summary":4243,"aliases":4244,"sourceIds":4247,"published":4248,"modified":4249,"checkedAt":7,"severity":4250,"references":4253,"versionKeys":4264,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[4245,4246],"CVE-2025-69230","PYSEC-2026-1105",[187,4246],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[4251],{"type":1996,"score":4252},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4254,4256,4258,4260,4261,4262],{"type":1907,"url":4255},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1896,"url":4257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1901,"url":4259},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4263},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2008,2009,2010,2011,2012,2013,2014],{"id":188,"slug":4266,"dossier":46,"summary":3194,"aliases":4267,"sourceIds":4270,"published":4271,"modified":4272,"checkedAt":7,"severity":4273,"references":4276,"versionKeys":4287,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[4268,4269],"CVE-2025-1194","PYSEC-2026-1984",[188,4269],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[4274],{"type":1892,"score":4275},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4277,4279,4281,4282,4284,4285],{"type":1896,"url":4278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1907,"url":4280},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1904,"url":1938},{"type":1907,"url":4283},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1904,"url":2187},{"type":1896,"url":4286},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1945],{"id":189,"slug":4289,"dossier":46,"summary":4290,"aliases":4291,"sourceIds":4294,"published":4295,"modified":4296,"checkedAt":7,"severity":4297,"references":4300,"versionKeys":4306,"packageCount":32,"repositoryCount":2016},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[4292,4293],"CVE-2026-54278","PYSEC-2026-2111",[189,4293],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[4298,4299],{"type":1996,"score":2455},{"type":1892,"score":1999},[4301,4303,4304],{"type":1896,"url":4302},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1904,"url":2004},{"type":1901,"url":4305},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":190,"slug":4308,"dossier":46,"summary":4309,"aliases":4310,"sourceIds":4313,"published":4314,"modified":4315,"checkedAt":7,"severity":4316,"references":4319,"versionKeys":4338,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[4311,4312],"CVE-2024-34062","PYSEC-2026-1976",[190,4312],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[4317],{"type":1892,"score":4318},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4320,4322,4324,4326,4328,4330,4332,4334,4336],{"type":1907,"url":4321},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1896,"url":4323},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1907,"url":4325},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1904,"url":4327},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1907,"url":4329},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1907,"url":4331},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1907,"url":4333},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1904,"url":4335},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1896,"url":4337},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[4339],"pypi:tqdm@4.66.2",{"id":191,"slug":4341,"dossier":46,"summary":4342,"aliases":4343,"sourceIds":4346,"published":4347,"modified":4348,"checkedAt":7,"severity":4349,"references":4351,"versionKeys":4364,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[4344,4345],"CVE-2025-69229","PYSEC-2026-1106",[191,4345],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[4350],{"type":1996,"score":2455},[4352,4354,4356,4358,4360,4361,4362],{"type":1907,"url":4353},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1896,"url":4355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1907,"url":4357},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1907,"url":4359},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4363},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2008,2009,2010,2011,2012,2013,2014],{"id":192,"slug":4366,"dossier":91,"summary":4367,"aliases":4368,"sourceIds":4371,"published":4372,"modified":4373,"checkedAt":7,"severity":4374,"references":4379,"versionKeys":4389,"packageCount":32,"repositoryCount":405},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[4369,4370],"CVE-2026-25645","PYSEC-2026-2275",[192,4370],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[4375,4377],{"type":1892,"score":4376},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1892,"score":4378},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4380,4382,4384,4386,4387],{"type":1896,"url":4381},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1896,"url":4383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1901,"url":4385},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1904,"url":3857},{"type":1896,"url":4388},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[3867,3868,4390,4391],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":193,"slug":4393,"dossier":91,"summary":4394,"aliases":4395,"sourceIds":4398,"published":4399,"modified":4400,"checkedAt":7,"severity":4401,"references":4403,"versionKeys":4414,"packageCount":32,"repositoryCount":2121},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[4396,4397],"CVE-2025-66418","PYSEC-2026-1998",[193,4397],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[4402],{"type":1996,"score":2101},[4404,4406,4408,4410,4411,4412],{"type":1907,"url":4405},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1896,"url":4407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1901,"url":4409},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1904,"url":2110},{"type":1904,"url":2112},{"type":1896,"url":4413},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2116,2117,2118,2119,2120],{"id":194,"slug":4416,"dossier":46,"summary":4417,"aliases":4418,"sourceIds":4421,"published":4422,"modified":4423,"checkedAt":7,"severity":4424,"references":4427,"versionKeys":4442,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[4419,4420],"CVE-2024-56201","PYSEC-2026-1472",[194,4420],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[4425,4426],{"type":1892,"score":2787},{"type":1996,"score":4096},[4428,4430,4432,4434,4436,4437,4439,4440],{"type":1907,"url":4429},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1896,"url":4431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1907,"url":4433},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1901,"url":4435},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1904,"url":4105},{"type":1907,"url":4438},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1904,"url":4111},{"type":1896,"url":4441},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4115],{"id":195,"slug":4444,"dossier":46,"summary":4445,"aliases":4446,"sourceIds":4449,"published":4450,"modified":4451,"checkedAt":7,"severity":4452,"references":4455,"versionKeys":4467,"packageCount":32,"repositoryCount":106},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[4447,4448],"CVE-2026-22773","PYSEC-2026-143",[195,4448],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[4453,4454],{"type":1892,"score":2344},{"type":1892,"score":1999},[4456,4458,4460,4462,4464,4466],{"type":1940,"url":4457},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":1896,"url":4459},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":1907,"url":4461},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":1907,"url":4463},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":1907,"url":4465},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":1904,"url":2045},[2063,2064,2300],{"id":196,"slug":4469,"dossier":46,"summary":4470,"aliases":4471,"sourceIds":4474,"published":4475,"modified":4476,"checkedAt":7,"severity":4477,"references":4479,"versionKeys":4500,"packageCount":32,"repositoryCount":106},"ghsa-gx77-xgc2-4888-18e94d17","Ray's New Token Authentication is Disabled By Default",[4472,4473],"CVE-2025-34351","PYSEC-2026-518",[196,4473],"2025-11-27T03:30:26Z","2026-07-01T20:23:03.614509Z",[4478],{"type":1996,"score":2624},[4480,4482,4484,4485,4486,4488,4490,4492,4494,4495,4497,4498],{"type":1907,"url":4481},"https:\u002F\u002Fgithub.com\u002FJLLeitschuh\u002Fsecurity-research\u002Fsecurity\u002Fadvisories\u002FGHSA-w8vc-465m-jjw6",{"type":1896,"url":4483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-34351",{"type":1907,"url":3263},{"type":1904,"url":3269},{"type":1907,"url":4487},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.52.0",{"type":1907,"url":4489},"https:\u002F\u002Fwww.cve.org\u002Fresourcessupport\u002Fallresources\u002Fcnarules#section_4-1_Vulnerability_Determination",{"type":1907,"url":4491},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fjonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE",{"type":1907,"url":4493},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet",{"type":1907,"url":3273},{"type":1907,"url":4496},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fanyscale-ray-token-authentication-disabled-by-default-insecure-configuration",{"type":1904,"url":3281},{"type":1896,"url":4499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gx77-xgc2-4888",[3283,3284,4501],"pypi:ray@2.50.1",{"id":197,"slug":4503,"dossier":46,"summary":4504,"aliases":4505,"sourceIds":4508,"published":4509,"modified":4510,"checkedAt":7,"severity":4511,"references":4514,"versionKeys":4535,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[4506,4507],"CVE-2024-34064","PYSEC-2026-1474",[197,4507],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[4512],{"type":1892,"score":4513},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4515,4517,4519,4521,4522,4524,4526,4528,4530,4532,4533],{"type":1907,"url":4516},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1896,"url":4518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1901,"url":4520},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1904,"url":4105},{"type":1907,"url":4523},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1907,"url":4525},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1907,"url":4527},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1907,"url":4529},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1907,"url":4531},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1904,"url":4111},{"type":1896,"url":4534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4115],{"id":198,"slug":4537,"dossier":46,"summary":4538,"aliases":4539,"sourceIds":4542,"published":4543,"modified":4544,"checkedAt":7,"severity":4545,"references":4548,"versionKeys":4557,"packageCount":32,"repositoryCount":2016},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[4540,4541],"CVE-2026-34513","PYSEC-2026-2095",[198,4541],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[4546,4547],{"type":1996,"score":2379},{"type":1892,"score":1999},[4549,4551,4553,4555,4556],{"type":1901,"url":4550},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1896,"url":4552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1901,"url":4554},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":199,"slug":4559,"dossier":46,"summary":4560,"aliases":4561,"sourceIds":4564,"published":4565,"modified":4566,"checkedAt":7,"severity":4567,"references":4571,"versionKeys":4579,"packageCount":32,"repositoryCount":2016},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[4562,4563],"CVE-2026-47265","PYSEC-2026-2105",[199,4563],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[4568,4570],{"type":1996,"score":4569},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":2754},[4572,4574,4576,4578],{"type":1901,"url":4573},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1896,"url":4575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1901,"url":4577},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":200,"slug":4581,"dossier":46,"summary":4582,"aliases":4583,"sourceIds":4586,"published":4587,"modified":4588,"checkedAt":7,"severity":4589,"references":4591,"versionKeys":4606,"packageCount":32,"repositoryCount":106},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[4584,4585],"CVE-2026-54236","PYSEC-2026-3408",[200,4585],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[4590],{"type":1892,"score":3766},[4592,4594,4596,4598,4600,4602,4604,4605],{"type":1907,"url":4593},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":1896,"url":4595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":1907,"url":4597},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":1907,"url":4599},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":1896,"url":4601},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":1907,"url":4603},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":201,"slug":4608,"dossier":46,"summary":4609,"aliases":4610,"sourceIds":4613,"published":4614,"modified":4615,"checkedAt":7,"severity":4616,"references":4621,"versionKeys":4627,"packageCount":32,"repositoryCount":2016},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[4611,4612],"CVE-2026-54276","PYSEC-2026-2109",[201,4612],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[4617,4619],{"type":1996,"score":4618},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1892,"score":4620},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[4622,4624,4626],{"type":1896,"url":4623},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1901,"url":4625},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":202,"slug":4629,"dossier":46,"summary":4630,"aliases":4631,"sourceIds":4634,"published":4635,"modified":4636,"checkedAt":7,"severity":4637,"references":4639,"versionKeys":4652,"packageCount":32,"repositoryCount":106},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[4632,4633],"CVE-2026-44222","PYSEC-2026-3409",[202,4633],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[4638],{"type":1892,"score":2344},[4640,4642,4644,4646,4648,4650,4651],{"type":1907,"url":4641},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":1896,"url":4643},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":1907,"url":4645},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":1896,"url":4647},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":1907,"url":4649},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":203,"slug":4654,"dossier":46,"summary":4655,"aliases":4656,"sourceIds":4659,"published":4660,"modified":4661,"checkedAt":7,"severity":4662,"references":4666,"versionKeys":4682,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[4657,4658],"CVE-2024-11394","PYSEC-2024-229",[203,4658],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[4663,4665],{"type":1892,"score":4664},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1892,"score":2028},[4667,4669,4671,4673,4674,4676,4678,4680],{"type":1896,"url":4668},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1907,"url":4670},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1907,"url":4672},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1904,"url":1938},{"type":1907,"url":4675},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1907,"url":4677},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1896,"url":4679},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1896,"url":4681},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1945],{"id":204,"slug":4684,"dossier":46,"summary":4685,"aliases":4686,"sourceIds":4688,"published":4689,"modified":4690,"checkedAt":7,"severity":4691,"references":4694,"versionKeys":4702,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[4687],"CVE-2025-71379",[204],"2025-05-28T17:50:06Z","2026-07-08T07:35:38.046987158Z",[4692],{"type":1892,"score":4693},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4695,4697,4699,4701],{"type":1907,"url":4696},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":1907,"url":4698},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":1907,"url":4700},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":1904,"url":2045},[2300],{"id":205,"slug":4704,"dossier":46,"summary":4705,"aliases":4706,"sourceIds":4709,"published":4710,"modified":4711,"checkedAt":7,"severity":4712,"references":4715,"versionKeys":4724,"packageCount":32,"repositoryCount":491},"ghsa-j842-xgm4-wf88-5ee5f9f5","MLX has Wild Pointer Dereference in load_gguf()",[4707,4708],"CVE-2025-62609","PYSEC-2025-139",[205,4708],"2025-11-21T18:03:20Z","2026-06-06T00:45:47.874274188Z",[4713,4714],{"type":1996,"score":3790},{"type":1892,"score":1999},[4716,4718,4720,4722],{"type":1940,"url":4717},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-j842-xgm4-wf88",{"type":1896,"url":4719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62609",{"type":1904,"url":4721},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx",{"type":1907,"url":4723},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-139.yaml",[4725,4726],"pypi:mlx@0.29.0","pypi:mlx@0.29.3",{"id":206,"slug":4728,"dossier":46,"summary":4729,"aliases":4730,"sourceIds":4733,"published":4734,"modified":4735,"checkedAt":7,"severity":4736,"references":4741,"versionKeys":4758,"packageCount":32,"repositoryCount":2016},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[4731,4732],"CVE-2026-34993","PYSEC-2026-2104",[206,4732],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[4737,4739],{"type":1892,"score":4738},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1892,"score":4740},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4742,4744,4746,4748,4749,4751,4753,4754,4755,4756],{"type":1901,"url":4743},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1896,"url":4745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1901,"url":4747},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1904,"url":2004},{"type":1907,"url":4750},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1907,"url":4752},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1896,"url":3323},{"type":1896,"url":4227},{"type":1896,"url":3321},{"type":2143,"url":4757},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":207,"slug":4760,"dossier":46,"summary":4761,"aliases":4762,"sourceIds":4765,"published":4766,"modified":4767,"checkedAt":7,"severity":4768,"references":4770,"versionKeys":4781,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[4763,4764],"CVE-2025-69227","PYSEC-2026-1107",[207,4764],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[4769],{"type":1996,"score":2455},[4771,4773,4775,4777,4778,4779],{"type":1907,"url":4772},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1896,"url":4774},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1907,"url":4776},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4780},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2008,2009,2010,2011,2012,2013,2014],{"id":208,"slug":4783,"dossier":46,"summary":4784,"aliases":4785,"sourceIds":4788,"published":4789,"modified":4790,"checkedAt":7,"severity":4791,"references":4793,"versionKeys":4806,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[4786,4787],"CVE-2025-3264","PYSEC-2026-1985",[208,4787],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[4792],{"type":1892,"score":2559},[4794,4796,4798,4800,4801,4803,4804],{"type":1896,"url":4795},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1907,"url":4797},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1907,"url":4799},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1904,"url":1938},{"type":1907,"url":4802},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1904,"url":2187},{"type":1896,"url":4805},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1945],{"id":209,"slug":4808,"dossier":46,"summary":4809,"aliases":4810,"sourceIds":4813,"published":4814,"modified":4815,"checkedAt":7,"severity":4816,"references":4819,"versionKeys":4827,"packageCount":32,"repositoryCount":104},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[4811,4812],"CVE-2026-54282","PYSEC-2026-248",[209,4812],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[4817,4818],{"type":1892,"score":3103},{"type":1892,"score":2078},[4820,4822,4824,4825],{"type":1896,"url":4821},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":1896,"url":4823},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":1904,"url":3357},{"type":1907,"url":4826},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[1982,1983,1984,3364,3365,3486,3487],{"id":210,"slug":4829,"dossier":46,"summary":4830,"aliases":4831,"sourceIds":4834,"published":4835,"modified":4836,"checkedAt":7,"severity":4837,"references":4842,"versionKeys":4851,"packageCount":32,"repositoryCount":2016},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[4832,4833],"CVE-2026-34516","PYSEC-2026-2098",[210,4833],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[4838,4839,4840],{"type":1892,"score":1999},{"type":1996,"score":2455},{"type":1996,"score":4841},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4843,4845,4847,4849,4850],{"type":1901,"url":4844},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1896,"url":4846},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1901,"url":4848},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":211,"slug":4853,"dossier":46,"summary":4854,"aliases":4855,"sourceIds":4858,"published":4859,"modified":4860,"checkedAt":7,"severity":4861,"references":4864,"versionKeys":4870,"packageCount":32,"repositoryCount":2016},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[4856,4857],"CVE-2026-50269","PYSEC-2026-2106",[211,4857],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[4862,4863],{"type":1996,"score":2076},{"type":1892,"score":1999},[4865,4867,4869],{"type":1896,"url":4866},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1901,"url":4868},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":212,"slug":4872,"dossier":46,"summary":4873,"aliases":4874,"sourceIds":4877,"published":4878,"modified":4879,"checkedAt":7,"severity":4880,"references":4883,"versionKeys":4891,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[4875,4876],"CVE-2026-56340","PYSEC-2026-250",[212,4876],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[4881,4882],{"type":1892,"score":2787},{"type":1892,"score":1999},[4884,4886,4888,4889],{"type":1896,"url":4885},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":1907,"url":4887},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":1904,"url":2045},{"type":1896,"url":4890},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[2064],{"id":213,"slug":4893,"dossier":46,"summary":4894,"aliases":4895,"sourceIds":4898,"published":4899,"modified":4900,"checkedAt":7,"severity":4901,"references":4904,"versionKeys":4912,"packageCount":32,"repositoryCount":106},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[4896,4897],"CVE-2026-44432","PYSEC-2026-142",[213,4897],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[4902,4903],{"type":1892,"score":1999},{"type":1996,"score":2101},[4905,4907,4909,4911],{"type":1896,"url":4906},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1896,"url":4908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1907,"url":4910},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1904,"url":2110},[4913],"pypi:urllib3@2.6.3",{"id":214,"slug":4915,"dossier":46,"summary":4916,"aliases":4917,"sourceIds":4920,"published":4921,"modified":4922,"checkedAt":7,"severity":4923,"references":4926,"versionKeys":4939,"packageCount":32,"repositoryCount":4944},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[4918,4919],"CVE-2026-28684","PYSEC-2026-2270",[214,4919],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[4924],{"type":1892,"score":4925},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4927,4929,4931,4933,4935,4937],{"type":1901,"url":4928},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1896,"url":4930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1901,"url":4932},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1907,"url":4934},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1904,"url":4936},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1896,"url":4938},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[4940,4941,4942,4943],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":215,"slug":4946,"dossier":46,"summary":4947,"aliases":4948,"sourceIds":4951,"published":4952,"modified":4953,"checkedAt":7,"severity":4954,"references":4956,"versionKeys":4967,"packageCount":32,"repositoryCount":2831},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[4949,4950],"CVE-2026-40347","PYSEC-2026-3038",[215,4950],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[4955],{"type":1892,"score":1963},[4957,4959,4961,4962,4964,4965],{"type":1907,"url":4958},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":1896,"url":4960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":1904,"url":2683},{"type":1907,"url":4963},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":1904,"url":2685},{"type":1896,"url":4966},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[2829,2830,2689],{"id":216,"slug":4969,"dossier":46,"summary":4970,"aliases":4971,"sourceIds":4974,"published":4975,"modified":4976,"checkedAt":7,"severity":4977,"references":4979,"versionKeys":4990,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[4972,4973],"CVE-2025-69225","PYSEC-2026-1109",[216,4973],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[4978],{"type":1996,"score":2076},[4980,4982,4984,4986,4987,4988],{"type":1907,"url":4981},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1896,"url":4983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1901,"url":4985},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4989},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2008,2009,2010,2011,2012,2013,2014],{"id":217,"slug":4992,"dossier":46,"summary":4993,"aliases":4994,"sourceIds":4997,"published":4998,"modified":4999,"checkedAt":7,"severity":5000,"references":5002,"versionKeys":5017,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[4995,4996],"CVE-2025-62164","PYSEC-2026-2018",[217,4996],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[5001],{"type":1892,"score":2787},[5003,5005,5007,5009,5011,5013,5015,5016],{"type":1907,"url":5004},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":1896,"url":5006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":1907,"url":5008},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":1907,"url":5010},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":1896,"url":5012},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":1907,"url":5014},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2064],{"id":218,"slug":5019,"dossier":46,"summary":5020,"aliases":5021,"sourceIds":5025,"published":5026,"modified":5027,"checkedAt":7,"severity":5028,"references":5032,"versionKeys":5046,"packageCount":32,"repositoryCount":106},"ghsa-mw35-8rx3-xf9r-5497861f","Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization",[5022,5023,5024],"CVE-2026-41486","PYSEC-2026-2272","PYSEC-2026-2296",[218,5023],"2026-04-24T16:15:00Z","2026-07-13T07:26:16.094513511Z",[5029,5031],{"type":1996,"score":5030},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":1892,"score":2028},[5033,5035,5037,5039,5041,5043,5044],{"type":1896,"url":5034},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-mw35-8rx3-xf9r",{"type":1896,"url":5036},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41486",{"type":1907,"url":5038},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F54831",{"type":1901,"url":5040},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F62056",{"type":1901,"url":5042},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002Fc02bd31ae31996805868baa446a131a8d304525f",{"type":1904,"url":3269},{"type":1896,"url":5045},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.55.0",[3283,3284,4501],{"id":219,"slug":5048,"dossier":46,"summary":5049,"aliases":5050,"sourceIds":5053,"published":5054,"modified":5055,"checkedAt":7,"severity":5056,"references":5059,"versionKeys":5068,"packageCount":32,"repositoryCount":2016},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[5051,5052],"CVE-2026-34519","PYSEC-2026-2101",[219,5052],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[5057,5058],{"type":1996,"score":2076},{"type":1892,"score":2078},[5060,5062,5064,5066,5067],{"type":1901,"url":5061},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1896,"url":5063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1901,"url":5065},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":220,"slug":5070,"dossier":46,"summary":5071,"aliases":5072,"sourceIds":5075,"published":5076,"modified":5077,"checkedAt":7,"severity":5078,"references":5081,"versionKeys":5090,"packageCount":32,"repositoryCount":2016},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[5073,5074],"CVE-2026-34515","PYSEC-2026-2097",[220,5074],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[5079,5080],{"type":1996,"score":4569},{"type":1892,"score":2754},[5082,5084,5086,5088,5089],{"type":1901,"url":5083},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1896,"url":5085},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1901,"url":5087},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":221,"slug":5092,"dossier":46,"summary":5093,"aliases":5094,"sourceIds":5097,"published":4789,"modified":5098,"checkedAt":7,"severity":5099,"references":5102,"versionKeys":5115,"packageCount":32,"repositoryCount":491},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[5095,5096],"CVE-2025-3777","PYSEC-2026-1986",[221,5096],"2026-07-07T17:56:47.225461188Z",[5100],{"type":1892,"score":5101},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5103,5105,5107,5108,5110,5112,5113],{"type":1896,"url":5104},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1907,"url":5106},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1904,"url":1938},{"type":1907,"url":5109},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1907,"url":5111},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1904,"url":2187},{"type":1896,"url":5114},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1945,1946],{"id":222,"slug":5117,"dossier":46,"summary":5118,"aliases":5119,"sourceIds":5122,"published":5123,"modified":5124,"checkedAt":7,"severity":5125,"references":5129,"versionKeys":5144,"packageCount":32,"repositoryCount":106},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[5120,5121],"CVE-2025-62372","PYSEC-2026-2019",[222,5121],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[5126,5127],{"type":1892,"score":2344},{"type":1996,"score":5128},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[5130,5132,5134,5135,5137,5138,5140,5142,5143],{"type":1907,"url":5131},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":1896,"url":5133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":1907,"url":5008},{"type":1907,"url":5136},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":1907,"url":5010},{"type":1896,"url":5139},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":1907,"url":5141},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":223,"slug":5146,"dossier":46,"summary":5147,"aliases":5148,"sourceIds":5151,"published":5152,"modified":5153,"checkedAt":7,"severity":5154,"references":5156,"versionKeys":5165,"packageCount":32,"repositoryCount":2831},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[5149,5150],"CVE-2026-42561","PYSEC-2026-3039",[223,5150],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[5155],{"type":1892,"score":1999},[5157,5159,5161,5162,5163],{"type":1907,"url":5158},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":1896,"url":5160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":5164},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[2829,2830,2689],{"id":224,"slug":5167,"dossier":46,"summary":5168,"aliases":5169,"sourceIds":5172,"published":5173,"modified":5174,"checkedAt":7,"severity":5175,"references":5177,"versionKeys":5197,"packageCount":32,"repositoryCount":106},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[5170,5171],"CVE-2026-34755","PYSEC-2026-144",[224,5171],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[5176],{"type":1892,"score":2344},[5178,5180,5182,5184,5186,5187,5188,5190,5192,5194,5195],{"type":1901,"url":5179},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":1896,"url":5181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":1907,"url":5183},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":1907,"url":5185},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":1907,"url":2355},{"type":1907,"url":2357},{"type":1907,"url":5189},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":1907,"url":5191},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":1907,"url":5193},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":1904,"url":2045},{"type":1907,"url":5196},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[2063,2064,2300],{"id":225,"slug":5199,"dossier":46,"summary":5200,"aliases":5201,"sourceIds":5204,"published":5205,"modified":5206,"checkedAt":7,"severity":5207,"references":5209,"versionKeys":5221,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[5202,5203],"CVE-2025-50181","PYSEC-2026-1999",[225,5203],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[5208],{"type":1892,"score":2429},[5210,5212,5214,5216,5217,5218,5219],{"type":1907,"url":5211},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1896,"url":5213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1901,"url":5215},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1904,"url":2110},{"type":1907,"url":2439},{"type":1904,"url":2112},{"type":1896,"url":5220},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2116,2117,2118,2119],{"id":226,"slug":5223,"dossier":91,"summary":5224,"aliases":5225,"sourceIds":5229,"published":5230,"modified":5231,"checkedAt":7,"severity":5232,"references":5235,"versionKeys":5247,"packageCount":32,"repositoryCount":2121},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[5226,5227,5228],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[226,5228],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[5233,5234],{"type":1996,"score":4041},{"type":1892,"score":3001},[5236,5237,5239,5241,5243,5245,5246],{"type":1907,"url":4045},{"type":1901,"url":5238},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1896,"url":5240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1901,"url":5242},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1901,"url":5244},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1904,"url":2852},{"type":1896,"url":2854},[4081,4082,4083,2856,2857,2858,2859,2860],{"id":227,"slug":5249,"dossier":46,"summary":5250,"aliases":5251,"sourceIds":5254,"published":5255,"modified":5256,"checkedAt":7,"severity":5257,"references":5260,"versionKeys":5281,"packageCount":32,"repositoryCount":106},"ghsa-q279-jhrf-cc6v-6a45143b","Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack",[5252,5253],"CVE-2025-62593","PYSEC-2026-520",[227,5253],"2025-11-26T19:35:23Z","2026-07-01T20:23:03.643178Z",[5258],{"type":1996,"score":5259},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[5261,5263,5265,5267,5269,5271,5273,5274,5276,5278,5279],{"type":1907,"url":5262},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",{"type":1896,"url":5264},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62593",{"type":1907,"url":5266},"https:\u002F\u002Fgithub.com\u002Fnccgroup\u002Fsingularity\u002Fpull\u002F68",{"type":1907,"url":5268},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F70e7c72780bdec075dba6cad1afe0832772bfe09",{"type":1907,"url":5270},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Freleases-2.51.1\u002Fray-security\u002Findex.html",{"type":1907,"url":5272},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMalvertising",{"type":1904,"url":3269},{"type":1907,"url":5275},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Fe7889ae542bf0188610bc8b06d274cbf53790cbd\u002Fpython\u002Fray\u002Fdashboard\u002Fhttp_server_head.py#L184-L196",{"type":1907,"url":5277},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Ff39a860436dca3ed5b9dfae84bd867ac10c84dc6\u002Fpython\u002Fray\u002Fdashboard\u002Foptional_utils.py#L129-L155",{"type":1904,"url":3281},{"type":1896,"url":5280},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",[3283,3284,4501],{"id":228,"slug":5283,"dossier":46,"summary":5284,"aliases":5285,"sourceIds":5288,"published":4789,"modified":5289,"checkedAt":7,"severity":5290,"references":5292,"versionKeys":5303,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[5286,5287],"CVE-2025-3263","PYSEC-2026-1987",[228,5287],"2026-07-07T17:56:57.889099913Z",[5291],{"type":1892,"score":2559},[5293,5295,5296,5297,5298,5300,5301],{"type":1896,"url":5294},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1907,"url":4797},{"type":1907,"url":4799},{"type":1904,"url":1938},{"type":1907,"url":5299},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1904,"url":2187},{"type":1896,"url":5302},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1945],{"id":229,"slug":5305,"dossier":46,"summary":5306,"aliases":5307,"sourceIds":5310,"published":5311,"modified":5312,"checkedAt":7,"severity":5313,"references":5317,"versionKeys":5330,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[5308,5309],"CVE-2024-56326","PYSEC-2026-1475",[229,5309],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[5314,5316],{"type":1892,"score":5315},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1996,"score":4096},[5318,5320,5322,5324,5325,5326,5327,5328],{"type":1907,"url":5319},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1896,"url":5321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1901,"url":5323},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1904,"url":4105},{"type":1907,"url":4438},{"type":1907,"url":4107},{"type":1904,"url":4111},{"type":1896,"url":5329},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4115],{"id":230,"slug":5332,"dossier":46,"summary":5333,"aliases":5334,"sourceIds":5337,"published":5338,"modified":5339,"checkedAt":7,"severity":5340,"references":5345,"versionKeys":5357,"packageCount":32,"repositoryCount":106},"ghsa-q5fh-2hc8-f6rq-8b758e91","Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown \u002F job deletion)",[5335,5336],"CVE-2026-27482","PYSEC-2026-2271",[230,5336],"2026-02-20T21:15:25Z","2026-07-13T07:26:45.034743516Z",[5341,5343],{"type":1892,"score":5342},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"type":1892,"score":5344},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5346,5348,5350,5352,5354,5355],{"type":1940,"url":5347},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q5fh-2hc8-f6rq",{"type":1896,"url":5349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27482",{"type":1901,"url":5351},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F60526",{"type":1901,"url":5353},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",{"type":1904,"url":3269},{"type":1896,"url":5356},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.54.0",[3283,3284,4501],{"id":231,"slug":5359,"dossier":46,"summary":5360,"aliases":5361,"sourceIds":5364,"published":5365,"modified":5366,"checkedAt":7,"severity":5367,"references":5370,"versionKeys":5390,"packageCount":32,"repositoryCount":106},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[5362,5363],"CVE-2026-41523","PYSEC-2026-2300",[231,5363],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[5368],{"type":1892,"score":5369},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5371,5373,5375,5377,5378,5379,5381,5383,5385,5386,5388],{"type":1940,"url":5372},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":1896,"url":5374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":1901,"url":5376},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":1896,"url":2355},{"type":1896,"url":2357},{"type":1907,"url":5380},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":2143,"url":5382},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":1907,"url":5384},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":1904,"url":2045},{"type":1896,"url":5387},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":1907,"url":5389},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[2063,2064,2300],{"id":232,"slug":5392,"dossier":91,"summary":5393,"aliases":5394,"sourceIds":5397,"published":5398,"modified":5399,"checkedAt":7,"severity":5400,"references":5404,"versionKeys":5410,"packageCount":32,"repositoryCount":405},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[5395,5396],"CVE-2026-44431","PYSEC-2026-141",[232,5396],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[5401,5402],{"type":1892,"score":3766},{"type":1996,"score":5403},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5405,5407,5409],{"type":1896,"url":5406},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1896,"url":5408},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1904,"url":2110},[2116,2117,2118,2119,2120,4913],{"id":233,"slug":5412,"dossier":46,"summary":5413,"aliases":5414,"sourceIds":5418,"published":5419,"modified":5420,"checkedAt":7,"severity":5421,"references":5425,"versionKeys":5443,"packageCount":32,"repositoryCount":2016},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[5415,5416,5417],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[233],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[5422,5423],{"type":1892,"score":4160},{"type":1996,"score":5424},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5426,5428,5430,5432,5434,5436,5437,5439,5441],{"type":1896,"url":5427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1907,"url":5429},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1907,"url":5431},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1907,"url":5433},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1907,"url":5435},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1904,"url":2150},{"type":1907,"url":5438},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1907,"url":5440},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1907,"url":5442},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2162,2163,2164,3575,3576,5444,5445,5446],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":234,"slug":5448,"dossier":46,"summary":5449,"aliases":5450,"sourceIds":5453,"published":5454,"modified":5455,"checkedAt":7,"severity":5456,"references":5459,"versionKeys":5485,"packageCount":32,"repositoryCount":106},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[5451,5452],"CVE-2026-24779","PYSEC-2026-2020",[234,5452],"2026-01-28T16:14:28Z","2026-07-17T16:30:32.009053490Z",[5457],{"type":1892,"score":5458},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[5460,5462,5464,5466,5468,5470,5471,5472,5474,5476,5478,5480,5481,5482,5483,5484],{"type":1907,"url":5461},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":1896,"url":5463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":1907,"url":5465},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":1907,"url":5467},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":1907,"url":5469},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":1904,"url":2041},{"type":1904,"url":2045},{"type":1907,"url":5473},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":1896,"url":5475},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":1907,"url":5477},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":1907,"url":5479},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":1907,"url":2057},{"type":1907,"url":2061},{"type":1907,"url":2546},{"type":1907,"url":3716},{"type":1907,"url":3714},[2063,2064,2300],{"id":235,"slug":5487,"dossier":46,"summary":5488,"aliases":5489,"sourceIds":5492,"published":5493,"modified":5494,"checkedAt":7,"severity":5495,"references":5498,"versionKeys":5513,"packageCount":32,"repositoryCount":2861},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[5490,5491],"CVE-2026-22701","PYSEC-2026-1374",[235,5491],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[5496],{"type":1892,"score":5497},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5499,5501,5503,5505,5507,5509,5511],{"type":1907,"url":5500},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1896,"url":5502},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1907,"url":5504},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1907,"url":5506},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1904,"url":5508},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1904,"url":5510},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1896,"url":5512},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[5514,5515,5516,5517],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":236,"slug":5519,"dossier":46,"summary":5520,"aliases":5521,"sourceIds":5524,"published":5525,"modified":5526,"checkedAt":7,"severity":5527,"references":5530,"versionKeys":5544,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[5522,5523],"CVE-2025-2099","PYSEC-2025-40",[236,5523],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[5528,5529],{"type":1892,"score":2559},{"type":1892,"score":1999},[5531,5533,5535,5537,5538,5540,5542],{"type":1896,"url":5532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1907,"url":5534},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1901,"url":5536},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1904,"url":1938},{"type":1907,"url":5539},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1907,"url":5541},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1896,"url":5543},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1945],{"id":237,"slug":5546,"dossier":46,"summary":4655,"aliases":5547,"sourceIds":5550,"published":5551,"modified":5552,"checkedAt":7,"severity":5553,"references":5557,"versionKeys":5571,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[5548,5549],"CVE-2024-11392","PYSEC-2024-227",[237,5549],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[5554,5556],{"type":1892,"score":5555},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1892,"score":2028},[5558,5560,5561,5562,5563,5565,5567,5569],{"type":1896,"url":5559},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1907,"url":4670},{"type":1907,"url":4672},{"type":1904,"url":1938},{"type":1907,"url":5564},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1907,"url":5566},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1896,"url":5568},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1896,"url":5570},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1945],{"id":238,"slug":5573,"dossier":91,"summary":5574,"aliases":5575,"sourceIds":5579,"published":5580,"modified":5581,"checkedAt":7,"severity":5582,"references":5585,"versionKeys":5600,"packageCount":32,"repositoryCount":2121},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[5576,5577,5578],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[238,5578],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[5583,5584],{"type":1892,"score":2138},{"type":1996,"score":2845},[5586,5588,5590,5592,5594,5595,5596,5598],{"type":1907,"url":5587},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1896,"url":5589},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1907,"url":5591},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1907,"url":5593},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1904,"url":2852},{"type":1907,"url":2854},{"type":1904,"url":5597},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1896,"url":5599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":239,"slug":5602,"dossier":46,"summary":5603,"aliases":5604,"sourceIds":5607,"published":5608,"modified":5609,"checkedAt":7,"severity":5610,"references":5612,"versionKeys":5627,"packageCount":32,"repositoryCount":491},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[5605,5606],"CVE-2025-6051","PYSEC-2026-1988",[239,5606],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[5611],{"type":1892,"score":2559},[5613,5615,5617,5619,5621,5622,5624,5625],{"type":1896,"url":5614},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1907,"url":5616},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1907,"url":5618},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1907,"url":5620},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1904,"url":1938},{"type":1907,"url":5623},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1904,"url":2187},{"type":1896,"url":5626},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1945,1946],{"id":240,"slug":5629,"dossier":46,"summary":5630,"aliases":5631,"sourceIds":5634,"published":5635,"modified":5636,"checkedAt":7,"severity":5637,"references":5640,"versionKeys":5653,"packageCount":32,"repositoryCount":2861},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[5632,5633],"CVE-2026-25087","PYSEC-2026-113",[240,5633],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[5638],{"type":1892,"score":5639},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[5641,5643,5645,5647,5649,5651],{"type":1896,"url":5642},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1901,"url":5644},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1904,"url":5646},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1907,"url":5648},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1896,"url":5650},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1896,"url":5652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[5654,5655,5656,5657],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":241,"slug":5659,"dossier":46,"summary":5660,"aliases":5661,"sourceIds":5665,"published":4156,"modified":5666,"checkedAt":7,"severity":5667,"references":5670,"versionKeys":5688,"packageCount":32,"repositoryCount":2861},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[5662,5663,5664],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[241],"2026-07-17T17:15:51.452848951Z",[5668,5669],{"type":1892,"score":4160},{"type":1996,"score":5424},[5671,5673,5675,5677,5679,5681,5682,5684,5686],{"type":1896,"url":5672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1907,"url":5674},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1907,"url":5676},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1907,"url":5678},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1907,"url":5680},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1904,"url":2150},{"type":1907,"url":5683},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1907,"url":5685},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1907,"url":5687},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[5689,2162,2163,2164,3575,3576,5444,5445,5446],"pypi:torch@2.10.0",{"id":242,"slug":5691,"dossier":46,"summary":5692,"aliases":5693,"sourceIds":5696,"published":5697,"modified":5698,"checkedAt":7,"severity":5699,"references":5702,"versionKeys":5714,"packageCount":32,"repositoryCount":106},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[5694,5695],"CVE-2026-55574","PYSEC-2026-2304",[242,5695],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[5700,5701],{"type":1892,"score":1999},{"type":1996,"score":2674},[5703,5705,5707,5709,5711,5713],{"type":1896,"url":5704},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":1896,"url":5706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":1901,"url":5708},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":1901,"url":5710},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":1907,"url":5712},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":1904,"url":2045},[2063,2064,2300],{"id":243,"slug":5716,"dossier":46,"summary":5717,"aliases":5718,"sourceIds":5721,"published":5722,"modified":5723,"checkedAt":7,"severity":5724,"references":5726,"versionKeys":5741,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[5719,5720],"CVE-2025-48956","PYSEC-2026-2021",[243,5720],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[5725],{"type":1892,"score":1999},[5727,5729,5731,5733,5735,5737,5739,5740],{"type":1907,"url":5728},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":1896,"url":5730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":1907,"url":5732},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":1907,"url":5734},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":1896,"url":5736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":1907,"url":5738},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2300],{"id":244,"slug":5743,"dossier":46,"summary":5744,"aliases":5745,"sourceIds":5748,"published":5749,"modified":5750,"checkedAt":7,"severity":5751,"references":5754,"versionKeys":5763,"packageCount":32,"repositoryCount":2831},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[5746,5747],"CVE-2026-53540","PYSEC-2026-3040",[244,5747],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[5752],{"type":1892,"score":5753},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5755,5757,5758,5759,5761],{"type":1907,"url":5756},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":5760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1896,"url":5762},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[2829,2830,2689],{"id":245,"slug":5765,"dossier":46,"summary":5766,"aliases":5767,"sourceIds":5770,"published":5771,"modified":5772,"checkedAt":7,"severity":5773,"references":5775,"versionKeys":5786,"packageCount":32,"repositoryCount":2831},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[5768,5769],"CVE-2026-53537","PYSEC-2026-3041",[245,5769],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[5774],{"type":1892,"score":3103},[5776,5778,5780,5781,5783,5785],{"type":1907,"url":5777},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1896,"url":5779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":1904,"url":2683},{"type":1896,"url":5782},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1907,"url":5784},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":1904,"url":2685},[2829,2830,2689],{"id":246,"slug":5788,"dossier":46,"summary":5789,"aliases":5790,"sourceIds":5794,"published":4156,"modified":5795,"checkedAt":7,"severity":5796,"references":5799,"versionKeys":5814,"packageCount":32,"repositoryCount":104},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[5791,5792,5793],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[246],"2026-06-10T17:41:15.774477397Z",[5797,5798],{"type":1892,"score":4160},{"type":1996,"score":4162},[5800,5802,5803,5804,5805,5807,5808,5810,5812],{"type":1896,"url":5801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1907,"url":4167},{"type":1907,"url":4169},{"type":1907,"url":4171},{"type":1907,"url":5806},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1904,"url":2150},{"type":1907,"url":5809},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1907,"url":5811},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1907,"url":5813},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2162,2163,2164,3575,3576,5444],{"id":247,"slug":5816,"dossier":46,"summary":5817,"aliases":5818,"sourceIds":5821,"published":5822,"modified":5823,"checkedAt":7,"severity":5824,"references":5827,"versionKeys":5840,"packageCount":32,"repositoryCount":106},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[5819,5820],"CVE-2025-43859","PYSEC-2026-348",[247,5820],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[5825],{"type":1892,"score":5826},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5828,5830,5832,5834,5836,5838],{"type":1907,"url":5829},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1896,"url":5831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1907,"url":5833},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1904,"url":5835},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1904,"url":5837},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1896,"url":5839},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[5841],"pypi:h11@0.14.0",{"id":248,"slug":5843,"dossier":46,"summary":5844,"aliases":5845,"sourceIds":5848,"published":5849,"modified":5850,"checkedAt":7,"severity":5851,"references":5853,"versionKeys":5865,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[5846,5847],"CVE-2025-48944","PYSEC-2026-2023",[248,5847],"2025-05-28T19:42:32Z","2026-07-17T16:30:29.005158547Z",[5852],{"type":1892,"score":2344},[5854,5856,5858,5859,5861,5863,5864],{"type":1907,"url":5855},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":1896,"url":5857},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":1907,"url":3185},{"type":1896,"url":5860},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":1907,"url":5862},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2300],{"id":249,"slug":5867,"dossier":46,"summary":5868,"aliases":5869,"sourceIds":5872,"published":5873,"modified":5874,"checkedAt":7,"severity":5875,"references":5879,"versionKeys":5888,"packageCount":32,"repositoryCount":2016},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[5870,5871],"CVE-2026-22815","PYSEC-2026-2094",[249,5871],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[5876,5877],{"type":1996,"score":2920},{"type":1996,"score":5878},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5880,5882,5884,5886,5887],{"type":1901,"url":5881},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1896,"url":5883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1901,"url":5885},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":250,"slug":5890,"dossier":46,"summary":5891,"aliases":5892,"sourceIds":5895,"published":5896,"modified":5897,"checkedAt":7,"severity":5898,"references":5900,"versionKeys":5912,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[5893,5894],"CVE-2025-48887","PYSEC-2025-50",[250,5894],"2025-05-28T17:49:33Z","2026-06-10T17:14:19.371824623Z",[5899],{"type":1892,"score":2344},[5901,5903,5905,5906,5907,5909,5910],{"type":1940,"url":5902},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":1896,"url":5904},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":2143,"url":4698},{"type":1901,"url":4700},{"type":1907,"url":5908},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":1904,"url":2045},{"type":1896,"url":5911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[2300],{"id":251,"slug":5914,"dossier":46,"summary":5915,"aliases":5916,"sourceIds":5919,"published":5920,"modified":5921,"checkedAt":7,"severity":5922,"references":5926,"versionKeys":5938,"packageCount":32,"repositoryCount":491},"ghsa-w6vg-jg77-2qg6-e819e20a","MLX has heap-buffer-overflow in load()",[5917,5918],"CVE-2025-62608","PYSEC-2025-138",[251,5918],"2025-11-21T18:02:38Z","2026-06-06T00:45:48.146084644Z",[5923,5925],{"type":1996,"score":5924},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1892,"score":3705},[5927,5929,5931,5933,5935,5936],{"type":1940,"url":5928},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-w6vg-jg77-2qg6",{"type":1896,"url":5930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62608",{"type":1901,"url":5932},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F1",{"type":1901,"url":5934},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F2",{"type":1904,"url":4721},{"type":1907,"url":5937},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-138.yaml",[4725,4726],{"id":252,"slug":5940,"dossier":46,"summary":5941,"aliases":5942,"sourceIds":5945,"published":5946,"modified":5947,"checkedAt":7,"severity":5948,"references":5951,"versionKeys":5968,"packageCount":32,"repositoryCount":2861},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[5943,5944],"CVE-2025-68146","PYSEC-2026-1375",[252,5944],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[5949],{"type":1892,"score":5950},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5952,5954,5956,5957,5959,5961,5963,5964,5966],{"type":1907,"url":5953},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1907,"url":5955},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1904,"url":5508},{"type":1907,"url":5958},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1907,"url":5960},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1907,"url":5962},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1904,"url":5510},{"type":1896,"url":5965},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1896,"url":5967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[5514,5515,5516,5517],{"id":253,"slug":5970,"dossier":46,"summary":5971,"aliases":5972,"sourceIds":5975,"published":5976,"modified":5977,"checkedAt":7,"severity":5978,"references":5981,"versionKeys":5992,"packageCount":32,"repositoryCount":445},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[5973,5974],"CVE-2025-69872","PYSEC-2026-2447",[253,5974],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[5979],{"type":1996,"score":5980},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5982,5984,5986,5988,5990],{"type":1896,"url":5983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":1907,"url":5985},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":1904,"url":5987},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":1904,"url":5989},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":1896,"url":5991},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[5993],"pypi:diskcache@5.6.3",{"id":254,"slug":5995,"dossier":46,"summary":5996,"aliases":5997,"sourceIds":6000,"published":6001,"modified":6002,"checkedAt":7,"severity":6003,"references":6006,"versionKeys":6018,"packageCount":32,"repositoryCount":491},"ghsa-wcj4-jw5j-44wh-9e6393c7","CBORDecoder reuse can leak shareable values across decode calls",[5998,5999],"CVE-2025-68131","PYSEC-2025-90",[254,5999],"2025-12-31T02:15:42.527Z","2026-06-05T14:30:11.179250820Z",[6004,6005],{"type":1996,"score":5924},{"type":1892,"score":2754},[6007,6009,6011,6013,6015,6016],{"type":1940,"url":6008},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-wcj4-jw5j-44wh",{"type":1896,"url":6010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68131",{"type":1901,"url":6012},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F268",{"type":1907,"url":6014},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Ff1d701cd2c411ee40bb1fe383afe7f365f35abf0",{"type":1904,"url":2266},{"type":1907,"url":6017},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcbor2\u002FPYSEC-2025-90.yaml",[2270,2271],{"id":255,"slug":6020,"dossier":91,"summary":6021,"aliases":6022,"sourceIds":6026,"published":6027,"modified":6028,"checkedAt":7,"severity":6029,"references":6032,"versionKeys":6070,"packageCount":32,"repositoryCount":2121},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[6023,6024,6025],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[255,6025],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[6030,6031],{"type":1892,"score":1999},{"type":1996,"score":2674},[6033,6035,6037,6039,6041,6042,6044,6046,6048,6050,6052,6054,6055,6057,6059,6061,6062,6064,6066,6068],{"type":1907,"url":6034},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1896,"url":6036},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1907,"url":6038},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1907,"url":6040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1904,"url":2852},{"type":1907,"url":6043},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1907,"url":6045},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1907,"url":6047},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1896,"url":6049},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1896,"url":6051},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1896,"url":6053},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1896,"url":4068},{"type":1896,"url":6056},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1896,"url":6058},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1896,"url":6060},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1896,"url":3333},{"type":1896,"url":6063},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1896,"url":6065},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1896,"url":6067},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1896,"url":6069},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":256,"slug":6072,"dossier":91,"summary":6073,"aliases":6074,"sourceIds":6078,"published":6079,"modified":6080,"checkedAt":7,"severity":6081,"references":6084,"versionKeys":6093,"packageCount":32,"repositoryCount":2121},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[6075,6076,6077],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[256,6077],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[6082,6083],{"type":1892,"score":2138},{"type":1996,"score":2845},[6085,6087,6089,6091,6092],{"type":1896,"url":6086},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1896,"url":6088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1907,"url":6090},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1904,"url":2852},{"type":1896,"url":2854},[4081,4082,4083,2856,2857,2858,2859,2860],{"id":257,"slug":6095,"dossier":46,"summary":6096,"aliases":6097,"sourceIds":6100,"published":6101,"modified":6102,"checkedAt":7,"severity":6103,"references":6106,"versionKeys":6119,"packageCount":32,"repositoryCount":2831},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[6098,6099],"CVE-2026-24486","PYSEC-2026-1852",[257,6099],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[6104],{"type":1892,"score":6105},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[6107,6109,6111,6113,6114,6116,6117],{"type":1907,"url":6108},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":1896,"url":6110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":1907,"url":6112},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":1904,"url":2683},{"type":1907,"url":6115},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":1904,"url":2685},{"type":1896,"url":6118},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[2829,2830,2689],{"id":258,"slug":6121,"dossier":46,"summary":6122,"aliases":6123,"sourceIds":6126,"published":6127,"modified":6128,"checkedAt":7,"severity":6129,"references":6131,"versionKeys":6151,"packageCount":32,"repositoryCount":104},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[6124,6125],"CVE-2026-48818","PYSEC-2026-2281",[258,6125],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[6130],{"type":1892,"score":2754},[6132,6134,6135,6137,6139,6141,6142,6143,6145,6147,6149],{"type":1896,"url":6133},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":1904,"url":3357},{"type":1907,"url":6136},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":1907,"url":6138},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":1896,"url":6140},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":1896,"url":3714},{"type":1896,"url":3716},{"type":1896,"url":6144},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2143,"url":6146},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":1901,"url":6148},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":1901,"url":6150},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[1982,1983,1984,3364,3365,3486,3487],{"id":259,"slug":6153,"dossier":46,"summary":6154,"aliases":6155,"sourceIds":6158,"published":6159,"modified":6160,"checkedAt":7,"severity":6161,"references":6163,"versionKeys":6180,"packageCount":32,"repositoryCount":491},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[6156,6157],"CVE-2025-59425","PYSEC-2026-2026",[259,6157],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[6162],{"type":1892,"score":2754},[6164,6166,6168,6170,6172,6174,6175,6177,6179],{"type":1907,"url":6165},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":1896,"url":6167},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":1907,"url":6169},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":1896,"url":6171},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":1907,"url":6173},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":1904,"url":2045},{"type":1907,"url":6176},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":1907,"url":6178},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":1904,"url":2041},[2063,2300],{"id":260,"slug":6182,"dossier":46,"summary":4655,"aliases":6183,"sourceIds":6186,"published":4660,"modified":6187,"checkedAt":7,"severity":6188,"references":6191,"versionKeys":6205,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[6184,6185],"CVE-2024-11393","PYSEC-2024-228",[260,6185],"2026-06-10T17:00:13.252500033Z",[6189,6190],{"type":1892,"score":4664},{"type":1892,"score":2028},[6192,6194,6195,6196,6197,6199,6201,6203],{"type":1896,"url":6193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1907,"url":4670},{"type":1907,"url":4672},{"type":1904,"url":1938},{"type":1907,"url":6198},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1907,"url":6200},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1896,"url":6202},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1896,"url":6204},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1945],{"id":261,"slug":6207,"dossier":46,"summary":6208,"aliases":6209,"sourceIds":6212,"published":6213,"modified":6214,"checkedAt":7,"severity":6215,"references":6222,"versionKeys":6241,"packageCount":32,"repositoryCount":106},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[6210,6211],"CVE-2026-7141","PYSEC-2026-2306",[261,6211],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[6216,6218,6220],{"type":1892,"score":6217},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1996,"score":6219},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1996,"score":6221},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6223,6225,6227,6229,6231,6233,6235,6237,6239],{"type":1896,"url":6224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":2143,"url":6226},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":2143,"url":6228},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":1901,"url":6230},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":1901,"url":6232},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":1896,"url":6234},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":1896,"url":6236},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":2143,"url":6238},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":1896,"url":6240},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[2063,2064,2300],{"id":262,"slug":6243,"dossier":46,"summary":6244,"aliases":6245,"sourceIds":6249,"published":6250,"modified":6251,"checkedAt":7,"severity":6252,"references":6257,"versionKeys":6273,"packageCount":32,"repositoryCount":491},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[6246,6247,6248],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[262],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[6253,6255],{"type":1892,"score":6254},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1996,"score":6256},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6258,6260,6262,6264,6266,6267,6269,6271],{"type":1896,"url":6259},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1907,"url":6261},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1907,"url":6263},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1907,"url":6265},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1904,"url":2150},{"type":1907,"url":6268},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1907,"url":6270},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1907,"url":6272},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2162,2163],{"id":263,"slug":6275,"dossier":46,"summary":6276,"aliases":6277,"sourceIds":6280,"published":6281,"modified":6282,"checkedAt":7,"severity":6283,"references":6285,"versionKeys":6292,"packageCount":32,"repositoryCount":104},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[6278,6279],"CVE-2026-48817","PYSEC-2026-2280",[263,6279],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[6284],{"type":1892,"score":2078},[6286,6288,6290,6291],{"type":1896,"url":6287},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":1896,"url":6289},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":1904,"url":3357},{"type":1896,"url":6144},[1982,1983,1984,3364,3365,3486,3487],{"id":264,"slug":6294,"dossier":46,"summary":6295,"aliases":6296,"sourceIds":6299,"published":6300,"modified":6301,"checkedAt":7,"severity":6302,"references":6305,"versionKeys":6311,"packageCount":32,"repositoryCount":2016},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[6297,6298],"CVE-2026-54274","PYSEC-2026-2108",[264,6298],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[6303,6304],{"type":1996,"score":2455},{"type":1892,"score":1999},[6306,6308,6309],{"type":1896,"url":6307},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1904,"url":2004},{"type":1901,"url":6310},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":265,"slug":6313,"dossier":46,"summary":6314,"aliases":6315,"sourceIds":6319,"published":6320,"modified":6321,"checkedAt":7,"severity":6322,"references":6325,"versionKeys":6339,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[6316,6317,6318],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[265,6318],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[6323],{"type":1892,"score":6324},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6326,6328,6330,6332,6334,6336,6337],{"type":1896,"url":6327},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1896,"url":6329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1907,"url":6331},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1901,"url":6333},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1907,"url":6335},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1904,"url":2852},{"type":1907,"url":6338},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2856],{"id":266,"slug":6341,"dossier":46,"summary":314,"aliases":6342,"sourceIds":6345,"published":6346,"modified":6347,"checkedAt":7,"severity":6348,"references":6350,"versionKeys":6359,"packageCount":32,"repositoryCount":491},"pysec-2025-198-62b25ed4",[6343,6344],"BIT-pytorch-2025-46148","CVE-2025-46148",[266],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[6349],{"type":1892,"score":3766},[6351,6353,6355,6357],{"type":1896,"url":6352},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1896,"url":6354},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2143,"url":6356},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1901,"url":6358},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2162,2163],{"id":267,"slug":6361,"dossier":46,"summary":314,"aliases":6362,"sourceIds":6365,"published":6366,"modified":6367,"checkedAt":7,"severity":6368,"references":6370,"versionKeys":6376,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[6363,6364],"BIT-pytorch-2025-46149","CVE-2025-46149",[267],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[6369],{"type":1892,"score":3766},[6371,6372,6374],{"type":1896,"url":6352},{"type":2143,"url":6373},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1901,"url":6375},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2163],{"id":268,"slug":6378,"dossier":46,"summary":314,"aliases":6379,"sourceIds":6382,"published":6383,"modified":6384,"checkedAt":7,"severity":6385,"references":6387,"versionKeys":6395,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[6380,6381],"BIT-pytorch-2025-46150","CVE-2025-46150",[268],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[6386],{"type":1892,"score":3766},[6388,6389,6391,6393],{"type":1896,"url":6352},{"type":2143,"url":6390},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2143,"url":6392},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1901,"url":6394},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2163],{"id":269,"slug":6397,"dossier":46,"summary":314,"aliases":6398,"sourceIds":6401,"published":6402,"modified":6403,"checkedAt":7,"severity":6404,"references":6406,"versionKeys":6412,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[6399,6400],"BIT-pytorch-2025-46152","CVE-2025-46152",[269],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[6405],{"type":1892,"score":1963},[6407,6408,6410],{"type":1896,"url":6352},{"type":2143,"url":6409},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1901,"url":6411},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2163],{"id":270,"slug":6414,"dossier":46,"summary":314,"aliases":6415,"sourceIds":6418,"published":6419,"modified":6420,"checkedAt":7,"severity":6421,"references":6423,"versionKeys":6433,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[6416,6417],"BIT-pytorch-2025-46153","CVE-2025-46153",[270],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[6422],{"type":1892,"score":3766},[6424,6426,6427,6429,6431],{"type":1907,"url":6425},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1896,"url":6352},{"type":1896,"url":6428},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2143,"url":6430},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1901,"url":6432},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2163],{"id":271,"slug":6435,"dossier":46,"summary":314,"aliases":6436,"sourceIds":6439,"published":6440,"modified":6441,"checkedAt":7,"severity":6442,"references":6444,"versionKeys":6449,"packageCount":32,"repositoryCount":104},"pysec-2025-203-2febb201",[6437,6438],"BIT-pytorch-2025-55551","CVE-2025-55551",[271],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[6443],{"type":1892,"score":1999},[6445,6447],{"type":1896,"url":6446},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2143,"url":6448},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2162,2163,2164,3575,3576,5444],{"id":272,"slug":6451,"dossier":46,"summary":314,"aliases":6452,"sourceIds":6455,"published":6456,"modified":6457,"checkedAt":7,"severity":6458,"references":6460,"versionKeys":6464,"packageCount":32,"repositoryCount":104},"pysec-2025-204-cdae47da",[6453,6454],"BIT-pytorch-2025-55552","CVE-2025-55552",[272],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[6459],{"type":1892,"score":1999},[6461,6462],{"type":1896,"url":6446},{"type":2143,"url":6463},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2162,2163,2164,3575,3576,5444],{"id":273,"slug":6466,"dossier":46,"summary":314,"aliases":6467,"sourceIds":6470,"published":6471,"modified":6472,"checkedAt":7,"severity":6473,"references":6475,"versionKeys":6481,"packageCount":32,"repositoryCount":106},"pysec-2025-205-fd5e58fd",[6468,6469],"BIT-pytorch-2025-55553","CVE-2025-55553",[273],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[6474],{"type":1892,"score":1999},[6476,6477,6479],{"type":1896,"url":6446},{"type":2143,"url":6478},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1901,"url":6480},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2162,2163,2164],{"id":274,"slug":6483,"dossier":46,"summary":314,"aliases":6484,"sourceIds":6487,"published":6488,"modified":6489,"checkedAt":7,"severity":6490,"references":6492,"versionKeys":6496,"packageCount":32,"repositoryCount":104},"pysec-2025-206-58322476",[6485,6486],"BIT-pytorch-2025-55554","CVE-2025-55554",[274],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[6491],{"type":1892,"score":1963},[6493,6494],{"type":1896,"url":6446},{"type":2143,"url":6495},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2162,2163,2164,3575,3576,5444],{"id":275,"slug":6498,"dossier":46,"summary":314,"aliases":6499,"sourceIds":6502,"published":6503,"modified":6504,"checkedAt":7,"severity":6505,"references":6507,"versionKeys":6513,"packageCount":32,"repositoryCount":106},"pysec-2025-207-2abef3fc",[6500,6501],"BIT-pytorch-2025-55557","CVE-2025-55557",[275],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[6506],{"type":1892,"score":1999},[6508,6509,6511],{"type":1896,"url":6446},{"type":2143,"url":6510},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1901,"url":6512},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2162,2163,2164],{"id":276,"slug":6515,"dossier":46,"summary":314,"aliases":6516,"sourceIds":6519,"published":6520,"modified":6521,"checkedAt":7,"severity":6522,"references":6524,"versionKeys":6530,"packageCount":32,"repositoryCount":106},"pysec-2025-208-6e93fe9d",[6517,6518],"BIT-pytorch-2025-55558","CVE-2025-55558",[276],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[6523],{"type":1892,"score":1999},[6525,6526,6528],{"type":1896,"url":6446},{"type":2143,"url":6527},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1901,"url":6529},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2162,2163,2164],{"id":277,"slug":6532,"dossier":46,"summary":314,"aliases":6533,"sourceIds":6536,"published":6537,"modified":6538,"checkedAt":7,"severity":6539,"references":6541,"versionKeys":6547,"packageCount":32,"repositoryCount":106},"pysec-2025-209-e6f352b0",[6534,6535],"BIT-pytorch-2025-55560","CVE-2025-55560",[277],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[6540],{"type":1892,"score":1999},[6542,6543,6545],{"type":1896,"url":6446},{"type":2143,"url":6544},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1901,"url":6546},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2162,2163,2164],{"id":278,"slug":6549,"dossier":46,"summary":314,"aliases":6550,"sourceIds":6552,"published":6553,"modified":6554,"checkedAt":7,"severity":6555,"references":6557,"versionKeys":6560,"packageCount":32,"repositoryCount":106},"pysec-2025-211-d8bd15de",[6551],"CVE-2025-14920",[278],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[6556],{"type":1892,"score":1931},[6558],{"type":1896,"url":6559},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1945,1946,1947],{"id":279,"slug":6562,"dossier":46,"summary":314,"aliases":6563,"sourceIds":6565,"published":6566,"modified":6567,"checkedAt":7,"severity":6568,"references":6570,"versionKeys":6573,"packageCount":32,"repositoryCount":106},"pysec-2025-212-a011b97d",[6564],"CVE-2025-14921",[279],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[6569],{"type":1892,"score":1931},[6571],{"type":1896,"url":6572},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1945,1946,1947],{"id":280,"slug":6575,"dossier":46,"summary":314,"aliases":6576,"sourceIds":6578,"published":6579,"modified":6580,"checkedAt":7,"severity":6581,"references":6583,"versionKeys":6586,"packageCount":32,"repositoryCount":106},"pysec-2025-213-9043dc9b",[6577],"CVE-2025-14924",[280],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[6582],{"type":1892,"score":1931},[6584],{"type":1896,"url":6585},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1945,1946,1947],{"id":281,"slug":6588,"dossier":46,"summary":314,"aliases":6589,"sourceIds":6591,"published":6592,"modified":6593,"checkedAt":7,"severity":6594,"references":6596,"versionKeys":6599,"packageCount":32,"repositoryCount":106},"pysec-2025-214-eb241255",[6590],"CVE-2025-14926",[281],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[6595],{"type":1892,"score":1931},[6597],{"type":1896,"url":6598},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1945,1946,1947],{"id":282,"slug":6601,"dossier":46,"summary":314,"aliases":6602,"sourceIds":6604,"published":6605,"modified":6606,"checkedAt":7,"severity":6607,"references":6609,"versionKeys":6612,"packageCount":32,"repositoryCount":106},"pysec-2025-215-6064f491",[6603],"CVE-2025-14927",[282],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[6608],{"type":1892,"score":1931},[6610],{"type":1896,"url":6611},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1945,1946,1947],{"id":283,"slug":6614,"dossier":46,"summary":314,"aliases":6615,"sourceIds":6617,"published":6618,"modified":6619,"checkedAt":7,"severity":6620,"references":6622,"versionKeys":6625,"packageCount":32,"repositoryCount":106},"pysec-2025-216-5708ed01",[6616],"CVE-2025-14928",[283],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[6621],{"type":1892,"score":1931},[6623],{"type":1896,"url":6624},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1945,1946,1947],{"id":284,"slug":6627,"dossier":46,"summary":314,"aliases":6628,"sourceIds":6630,"published":6631,"modified":6632,"checkedAt":7,"severity":6633,"references":6635,"versionKeys":6638,"packageCount":32,"repositoryCount":104},"pysec-2025-217-2c1ad388",[6629],"CVE-2025-14929",[284],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[6634],{"type":1892,"score":1931},[6636],{"type":1896,"url":6637},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1945,1946,1947,1948,1949,1950,1951],{"id":285,"slug":6640,"dossier":46,"summary":314,"aliases":6641,"sourceIds":6643,"published":6644,"modified":6645,"checkedAt":7,"severity":6646,"references":6648,"versionKeys":6651,"packageCount":32,"repositoryCount":2831},"pysec-2025-218-39811fc3",[6642],"CVE-2025-14930",[285],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[6647],{"type":1892,"score":1931},[6649],{"type":1896,"url":6650},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1945,1946,1947,1948],{"id":286,"slug":6653,"dossier":46,"summary":314,"aliases":6654,"sourceIds":6656,"published":6657,"modified":6658,"checkedAt":7,"severity":6659,"references":6661,"versionKeys":6668,"packageCount":32,"repositoryCount":32},"pysec-2025-238-fe0347f8",[6655],"CVE-2025-64076",[286],"2025-11-18T18:16:14.263Z","2026-07-13T07:15:16.765464311Z",[6660],{"type":1892,"score":1999},[6662,6664,6666],{"type":2143,"url":6663},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fissues\u002F264",{"type":1901,"url":6665},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002F851473490281f82d82560b2368284ef33cf6e8f9",{"type":1901,"url":6667},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F265",[2270],{"id":287,"slug":6670,"dossier":46,"summary":314,"aliases":6671,"sourceIds":6674,"published":6675,"modified":6676,"checkedAt":7,"severity":6677,"references":6679,"versionKeys":6690,"packageCount":32,"repositoryCount":2861},"pysec-2026-139-96951ff6",[6672,6673],"BIT-pytorch-2026-4538","CVE-2026-4538",[287],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[6678],{"type":1892,"score":5315},[6680,6682,6684,6686,6688],{"type":1907,"url":6681},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1896,"url":6683},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1896,"url":6685},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2143,"url":6687},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1901,"url":6689},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[5689,2162,2163,2164,3575,3576,5444,5445,5446],{"id":288,"slug":6692,"dossier":91,"summary":314,"aliases":6693,"sourceIds":6696,"published":6697,"modified":6698,"checkedAt":7,"severity":6699,"references":6702,"versionKeys":6717,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[6694,6695],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[288],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[6700],{"type":1892,"score":6701},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6703,6705,6707,6709,6711,6713,6715],{"type":1907,"url":6704},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1907,"url":6706},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1896,"url":6708},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1896,"url":6710},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2143,"url":6712},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1901,"url":6714},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1940,"url":6716},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[6718,6719,6720,6721,6722,6723],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":289,"slug":6725,"dossier":91,"summary":314,"aliases":6726,"sourceIds":6730,"published":6731,"modified":6732,"checkedAt":7,"severity":6733,"references":6735,"versionKeys":6742,"packageCount":32,"repositoryCount":2121},"pysec-2026-2253-e1ccf3df",[6727,6728,6729],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[289],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[6734],{"type":1892,"score":1999},[6736,6738,6740],{"type":1896,"url":6737},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":1901,"url":6739},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1940,"url":6741},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":290,"slug":6744,"dossier":91,"summary":314,"aliases":6745,"sourceIds":6749,"published":6750,"modified":6751,"checkedAt":7,"severity":6752,"references":6754,"versionKeys":6759,"packageCount":32,"repositoryCount":2121},"pysec-2026-2254-a1ed1fd2",[6746,6747,6748],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[290],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[6753],{"type":1892,"score":1999},[6755,6756,6757],{"type":1896,"url":6737},{"type":1901,"url":6739},{"type":1940,"url":6758},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":291,"slug":6761,"dossier":91,"summary":314,"aliases":6762,"sourceIds":6766,"published":6767,"modified":6768,"checkedAt":7,"severity":6769,"references":6771,"versionKeys":6776,"packageCount":32,"repositoryCount":2121},"pysec-2026-2255-d0951b98",[6763,6764,6765],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[291],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[6770],{"type":1892,"score":1999},[6772,6773,6774],{"type":1896,"url":6737},{"type":1901,"url":6739},{"type":1940,"url":6775},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":292,"slug":6778,"dossier":91,"summary":314,"aliases":6779,"sourceIds":6783,"published":6784,"modified":6785,"checkedAt":7,"severity":6786,"references":6788,"versionKeys":6794,"packageCount":32,"repositoryCount":2121},"pysec-2026-2256-0f333f0b",[6780,6781,6782],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[292],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[6787],{"type":1892,"score":1999},[6789,6790,6792],{"type":1896,"url":6737},{"type":1901,"url":6791},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1940,"url":6793},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":293,"slug":6796,"dossier":91,"summary":314,"aliases":6797,"sourceIds":6801,"published":6802,"modified":6803,"checkedAt":7,"severity":6804,"references":6807,"versionKeys":6817,"packageCount":32,"repositoryCount":2121},"pysec-2026-2257-bcbe5d79",[6798,6799,6800],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[293],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[6805],{"type":1892,"score":6806},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[6808,6809,6811,6813,6815],{"type":1896,"url":6737},{"type":1901,"url":6810},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1901,"url":6812},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1901,"url":6814},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1940,"url":6816},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":294,"slug":6819,"dossier":46,"summary":314,"aliases":6820,"sourceIds":6823,"published":6824,"modified":6825,"checkedAt":7,"severity":6826,"references":6828,"versionKeys":6831,"packageCount":32,"repositoryCount":106},"pysec-2026-227-5f5a1d28",[6821,6822],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[294],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[6827],{"type":1892,"score":2028},[6829],{"type":1940,"url":6830},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[2063,2064,2300],{"id":295,"slug":6833,"dossier":46,"summary":314,"aliases":6834,"sourceIds":6837,"published":6838,"modified":6839,"checkedAt":7,"severity":6840,"references":6843,"versionKeys":6854,"packageCount":32,"repositoryCount":106},"pysec-2026-2273-c0c1a62e",[6835,6836],"CVE-2026-57516","GHSA-hhrp-gw25-jr43",[295],"2026-07-01T17:16:37.390Z","2026-07-13T07:15:44.097966037Z",[6841],{"type":1996,"score":6842},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6844,6846,6848,6850,6852],{"type":1896,"url":6845},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.56.0",{"type":1896,"url":6847},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fray-unsafe-deserialization-rce-via-webdataset-reader",{"type":1901,"url":6849},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63469",{"type":1901,"url":6851},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63470",{"type":1901,"url":6853},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-hhrp-gw25-jr43",[3283,3284,4501],{"id":296,"slug":6856,"dossier":46,"summary":314,"aliases":6857,"sourceIds":6862,"published":6863,"modified":6864,"checkedAt":7,"severity":6865,"references":6867,"versionKeys":6883,"packageCount":32,"repositoryCount":2016},"pysec-2026-2286-8795b007",[6858,6859,6860,6861],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[296],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[6866],{"type":1892,"score":2028},[6868,6870,6872,6873,6875,6877,6879,6881],{"type":1907,"url":6869},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1907,"url":6871},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1896,"url":3323},{"type":1896,"url":6874},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1896,"url":6876},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2143,"url":6878},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2143,"url":6880},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1901,"url":6882},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2162,2163,2164,3575,3576,5444,5445,5446],{"id":297,"slug":6885,"dossier":46,"summary":314,"aliases":6886,"sourceIds":6888,"published":6889,"modified":6890,"checkedAt":7,"severity":6891,"references":6893,"versionKeys":6903,"packageCount":32,"repositoryCount":106},"pysec-2026-2302-60c0b148",[6887],"CVE-2026-5497",[297],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[6892],{"type":1892,"score":1999},[6894,6896,6898,6900,6901],{"type":1907,"url":6895},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":1907,"url":6897},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":2143,"url":6899},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":1901,"url":5185},{"type":1940,"url":6902},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[2063,2064,2300],{"id":298,"slug":6905,"dossier":91,"summary":314,"aliases":6906,"sourceIds":6910,"published":6911,"modified":6912,"checkedAt":7,"severity":6913,"references":6916,"versionKeys":6923,"packageCount":32,"repositoryCount":2121},"pysec-2026-3447-df031425",[6907,6908,6909],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[298],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[6914],{"type":1892,"score":6915},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[6917,6919,6921],{"type":1896,"url":6918},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":1901,"url":6920},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1940,"url":6922},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[2806,2807,6924,6925,6926,6927,6928,6929,6930],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":299,"slug":6932,"dossier":91,"summary":314,"aliases":6933,"sourceIds":6937,"published":6938,"modified":6939,"checkedAt":7,"severity":6940,"references":6942,"versionKeys":6951,"packageCount":32,"repositoryCount":2121},"pysec-2026-3451-3e5eac34",[6934,6935,6936],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[299],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[6941],{"type":1892,"score":1999},[6943,6945,6947,6949],{"type":1896,"url":6944},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1901,"url":6946},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1901,"url":6948},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1940,"url":6950},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":300,"slug":6953,"dossier":46,"summary":314,"aliases":6954,"sourceIds":6958,"published":6959,"modified":6960,"checkedAt":7,"severity":6961,"references":6963,"versionKeys":6971,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[6955,6956,6957],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[300],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[6962],{"type":1892,"score":1999},[6964,6965,6967,6969],{"type":1896,"url":6944},{"type":1901,"url":6966},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1901,"url":6968},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1940,"url":6970},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[2858,2859,2860],{"id":301,"slug":6973,"dossier":91,"summary":314,"aliases":6974,"sourceIds":6978,"published":6979,"modified":6980,"checkedAt":7,"severity":6981,"references":6983,"versionKeys":6991,"packageCount":32,"repositoryCount":2121},"pysec-2026-3453-83974725",[6975,6976,6977],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[301],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[6982],{"type":1892,"score":1999},[6984,6985,6987,6989],{"type":1896,"url":6944},{"type":1901,"url":6986},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1901,"url":6988},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1940,"url":6990},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[4081,4082,4083,2856,2857,2858,2859,2860],1784558561150]