[{"data":1,"prerenderedAt":1378},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-8712":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":148,"related":172},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":31,"artifactResolvedComponentCount":38,"exactManifestPinCount":31,"packageCount":65,"ecosystems":94,"aiPackageCount":65,"licenseExpressionCount":96,"unknownLicensePackageCount":38,"advisoryIds":97,"advisoryCount":146,"providers":147},"opencode:8712","opencode-8712",8712,"F13-RAG","landeshauptstadt-muenchen\u002Ff-13-rag","Microservice zur Durchsuchung von Texten und Datenbanken mit natürlicher Sprache","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag","ddae51bb41a08acf9c1bcdee5dc8ce92df04649c","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fcommit\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c","2026-02-12T08:49:11.302Z","2025-12-17T16:34:35.000Z",{"complete":91,"entryCount":92,"truncated":46},true,153,[],[95],"pypi",3,[98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],"GHSA-29pf-2h5f-8g72","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-4w7r-h757-3r74","GHSA-53q9-r3pm-6pq6","GHSA-59p9-h35m-wg4g","GHSA-69w3-r845-3855","GHSA-6rvg-6v2m-4j46","GHSA-887c-mr87-cxwp","GHSA-9356-575x-2w9m","GHSA-c678-jfcj-6jmf","GHSA-f4hp-rmr7-r7v8","GHSA-fgcw-684q-jj6r","GHSA-fpwr-67px-3qhx","GHSA-hxxf-235m-72v3","GHSA-jjph-296x-mrcr","GHSA-phhr-52qp-3mj4","GHSA-q2wp-rjmx-x6x9","GHSA-qfhq-4f3w-5fph","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-rcv9-qm8p-9p6j","GHSA-rrmf-rvhw-rf47","GHSA-vgrw-7cvw-pwgx","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2286",48,[],{"files":149,"occurrenceCount":31},[150,156,160,164,168],{"path":151,"kind":152,"sourceUrl":153,"commitSha":86,"blobSha":154,"state":155,"componentCount":65},"requirements-dev.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-dev.txt","76efb9a752987481ba23ef081e7e3a05d59ed513","parsed",{"path":157,"kind":152,"sourceUrl":158,"commitSha":86,"blobSha":159,"state":155,"componentCount":32},"requirements-gpu.in","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-gpu.in","6813fdb0df770767721e8b602ebe6c547b22da0b",{"path":161,"kind":152,"sourceUrl":162,"commitSha":86,"blobSha":163,"state":155,"componentCount":65},"requirements-gpu.txt","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-gpu.txt","8c2dfe24b230ff6ad5cc0779e7e45ce51a1e20a1",{"path":165,"kind":152,"sourceUrl":166,"commitSha":86,"blobSha":167,"state":155,"componentCount":65},"requirements-testing.txt","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-testing.txt","a62dcf771b99cedee4157c93a2e50d10f678e585",{"path":169,"kind":152,"sourceUrl":170,"commitSha":86,"blobSha":171,"state":155,"componentCount":65},"requirements.txt","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements.txt","da215299c628b804b28789cb8267236418948d82",{"packages":173,"vulnerabilities":248},[174,187,201,210,220,230,239],{"id":175,"slug":176,"identity":177,"label":178,"aiRelevant":91,"provider":179,"advisoryCount":70,"licenseExpressions":182,"versions":184,"dossier":91,"occurrenceCount":34,"directOccurrenceCount":38,"evidenceFiles":186},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":180,"label":181},"hugging-face","Hugging Face",[183],"Apache-2.0",[185],"4.57.3",[151,161,165,169],{"id":188,"slug":189,"identity":190,"label":191,"aiRelevant":91,"provider":192,"advisoryCount":193,"licenseExpressions":194,"versions":196,"dossier":91,"occurrenceCount":199,"directOccurrenceCount":32,"evidenceFiles":200},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[195],"BSD-3-Clause",[197,198],"2.7.1","2.9.1+cpu",5,[151,157,161,165,169],{"id":72,"slug":73,"identity":202,"label":74,"aiRelevant":91,"provider":203,"advisoryCount":38,"licenseExpressions":206,"versions":207,"dossier":91,"occurrenceCount":34,"directOccurrenceCount":38,"evidenceFiles":209},"pypi:openai",{"id":204,"label":205},"openai","OpenAI",[183],[208],"2.12.0",[151,161,165,169],{"id":211,"slug":212,"identity":213,"label":214,"aiRelevant":91,"provider":215,"advisoryCount":38,"licenseExpressions":216,"versions":217,"dossier":91,"occurrenceCount":34,"directOccurrenceCount":38,"evidenceFiles":219},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":180,"label":181},[183],[218],"5.2.0",[151,161,165,169],{"id":221,"slug":222,"identity":223,"label":224,"aiRelevant":91,"provider":192,"advisoryCount":38,"licenseExpressions":225,"versions":227,"dossier":91,"occurrenceCount":34,"directOccurrenceCount":38,"evidenceFiles":229},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[226],"non-standard",[228],"1.12.0",[151,161,165,169],{"id":231,"slug":232,"identity":233,"label":234,"aiRelevant":91,"provider":192,"advisoryCount":38,"licenseExpressions":235,"versions":236,"dossier":91,"occurrenceCount":34,"directOccurrenceCount":38,"evidenceFiles":238},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[226],[237],"0.22.1",[151,161,165,169],{"id":240,"slug":241,"identity":242,"label":243,"aiRelevant":91,"provider":192,"advisoryCount":38,"licenseExpressions":244,"versions":245,"dossier":91,"occurrenceCount":34,"directOccurrenceCount":38,"evidenceFiles":247},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[195,226],[246],"1.8.0",[151,161,165,169],[249,286,331,359,385,411,434,461,484,523,548,580,614,649,672,703,728,753,775,812,840,867,894,927,955,980,1012,1033,1050,1069,1086,1107,1123,1138,1155,1170,1187,1204,1221,1234,1247,1260,1273,1286,1299,1312,1325,1348],{"id":98,"slug":250,"dossier":46,"summary":251,"aliases":252,"sourceIds":255,"published":256,"modified":257,"checkedAt":7,"severity":258,"references":262,"versionKeys":277,"packageCount":32,"repositoryCount":285},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[253,254],"CVE-2026-4372","PYSEC-2026-2289",[98,254],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[259],{"type":260,"score":261},"CVSS_V3","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[263,266,269,272,275],{"type":264,"url":265},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":267,"url":268},"FIX","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":270,"url":271},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":273,"url":274},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":264,"url":276},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[278,279,280,281,282,283,284],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",8,{"id":99,"slug":287,"dossier":46,"summary":288,"aliases":289,"sourceIds":293,"published":294,"modified":295,"checkedAt":7,"severity":296,"references":304,"versionKeys":327,"packageCount":32,"repositoryCount":96},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[290,291,292],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[99,292],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[297,299,302],{"type":260,"score":298},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":300,"score":301},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":260,"score":303},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[305,307,310,312,315,317,319,321,323,325],{"type":264,"url":306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":308,"url":309},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":308,"url":311},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":313,"url":314},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":270,"url":316},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":313,"url":318},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":308,"url":320},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":264,"url":322},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":264,"url":324},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":264,"url":326},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[328,329,330],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":100,"slug":332,"dossier":46,"summary":333,"aliases":334,"sourceIds":337,"published":338,"modified":339,"checkedAt":7,"severity":340,"references":343,"versionKeys":357,"packageCount":32,"repositoryCount":358},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[335,336],"CVE-2025-3933","PYSEC-2026-1977",[100,336],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[341],{"type":260,"score":342},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[344,346,348,350,351,353,355],{"type":264,"url":345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":313,"url":347},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":313,"url":349},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":270,"url":271},{"type":313,"url":352},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":270,"url":354},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":264,"url":356},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[278,279],2,{"id":101,"slug":360,"dossier":46,"summary":361,"aliases":362,"sourceIds":365,"published":366,"modified":367,"checkedAt":7,"severity":368,"references":371,"versionKeys":384,"packageCount":32,"repositoryCount":358},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[363,364],"CVE-2025-6921","PYSEC-2026-1980",[101,364],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[369],{"type":260,"score":370},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[372,374,376,378,379,381,382],{"type":264,"url":373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":313,"url":375},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":313,"url":377},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":270,"url":271},{"type":313,"url":380},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":270,"url":354},{"type":264,"url":383},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[278,279],{"id":102,"slug":386,"dossier":46,"summary":387,"aliases":388,"sourceIds":392,"published":393,"modified":394,"checkedAt":7,"severity":395,"references":400,"versionKeys":410,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[389,390,391],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[102,391],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[396,398],{"type":300,"score":397},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":260,"score":399},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[401,403,405,407,409],{"type":264,"url":402},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":264,"url":404},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":313,"url":406},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":313,"url":408},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":270,"url":316},[328],{"id":103,"slug":412,"dossier":46,"summary":413,"aliases":414,"sourceIds":417,"published":418,"modified":419,"checkedAt":7,"severity":420,"references":422,"versionKeys":433,"packageCount":32,"repositoryCount":358},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[415,416],"CVE-2025-6638","PYSEC-2026-1981",[103,416],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[421],{"type":260,"score":370},[423,425,426,427,428,430,431],{"type":264,"url":424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":313,"url":375},{"type":313,"url":377},{"type":270,"url":271},{"type":313,"url":429},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":270,"url":354},{"type":264,"url":432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[278,279],{"id":104,"slug":435,"dossier":46,"summary":436,"aliases":437,"sourceIds":440,"published":441,"modified":442,"checkedAt":7,"severity":443,"references":448,"versionKeys":460,"packageCount":32,"repositoryCount":285},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[438,439],"CVE-2026-1839","PYSEC-2026-2288",[104,439],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[444,446],{"type":260,"score":445},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":260,"score":447},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[449,451,453,454,456,458],{"type":264,"url":450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":267,"url":452},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":270,"url":271},{"type":313,"url":455},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":273,"url":457},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":264,"url":459},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[278,279,280,281,282,283,284],{"id":105,"slug":462,"dossier":46,"summary":463,"aliases":464,"sourceIds":467,"published":468,"modified":469,"checkedAt":7,"severity":470,"references":472,"versionKeys":483,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[465,466],"CVE-2024-12720","PYSEC-2026-1982",[105,466],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[471],{"type":260,"score":370},[473,475,477,478,480,481],{"type":264,"url":474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":313,"url":476},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":270,"url":271},{"type":313,"url":479},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":270,"url":354},{"type":264,"url":482},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[278],{"id":106,"slug":485,"dossier":46,"summary":486,"aliases":487,"sourceIds":491,"published":492,"modified":493,"checkedAt":7,"severity":494,"references":498,"versionKeys":520,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[488,489,490],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[106,490],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[495,496],{"type":260,"score":298},{"type":300,"score":497},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[499,501,503,505,507,509,510,512,514,516,518],{"type":264,"url":500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":313,"url":502},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":313,"url":504},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":313,"url":506},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":313,"url":508},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":270,"url":316},{"type":313,"url":511},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":313,"url":513},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":313,"url":515},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":270,"url":517},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":264,"url":519},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[328,329,330,521,522],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":107,"slug":524,"dossier":46,"summary":525,"aliases":526,"sourceIds":529,"published":530,"modified":531,"checkedAt":7,"severity":532,"references":534,"versionKeys":547,"packageCount":32,"repositoryCount":358},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[527,528],"CVE-2025-5197","PYSEC-2026-1983",[107,528],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[533],{"type":260,"score":370},[535,537,539,541,542,544,545],{"type":264,"url":536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":313,"url":538},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":313,"url":540},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":270,"url":271},{"type":313,"url":543},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":270,"url":354},{"type":264,"url":546},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[278,279],{"id":108,"slug":549,"dossier":46,"summary":550,"aliases":551,"sourceIds":555,"published":556,"modified":557,"checkedAt":7,"severity":558,"references":563,"versionKeys":579,"packageCount":32,"repositoryCount":358},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[552,553,554],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[108],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[559,561],{"type":260,"score":560},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":300,"score":562},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[564,566,568,570,571,573,575,577],{"type":264,"url":565},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":313,"url":567},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":313,"url":569},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":270,"url":316},{"type":313,"url":572},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":313,"url":574},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":313,"url":576},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":313,"url":578},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[328,329],{"id":109,"slug":581,"dossier":46,"summary":582,"aliases":583,"sourceIds":587,"published":588,"modified":589,"checkedAt":7,"severity":590,"references":595,"versionKeys":613,"packageCount":32,"repositoryCount":358},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[584,585,586],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[109],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[591,593],{"type":260,"score":592},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":300,"score":594},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[596,598,600,602,604,606,607,609,611],{"type":264,"url":597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":313,"url":599},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":313,"url":601},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":313,"url":603},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":313,"url":605},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":270,"url":316},{"type":313,"url":608},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":313,"url":610},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":313,"url":612},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[328,329],{"id":110,"slug":615,"dossier":46,"summary":616,"aliases":617,"sourceIds":620,"published":621,"modified":622,"checkedAt":7,"severity":623,"references":628,"versionKeys":648,"packageCount":32,"repositoryCount":285},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[618,619],"CVE-2026-5241","PYSEC-2026-2290",[110,619],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[624,626],{"type":260,"score":625},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":260,"score":627},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[629,631,633,635,637,639,641,642,644,646],{"type":264,"url":630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":267,"url":632},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":264,"url":634},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":264,"url":636},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":313,"url":638},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":308,"url":640},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":270,"url":271},{"type":313,"url":643},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":273,"url":645},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":313,"url":647},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[278,279,280,281,282,283,284],{"id":111,"slug":650,"dossier":46,"summary":463,"aliases":651,"sourceIds":654,"published":655,"modified":656,"checkedAt":7,"severity":657,"references":660,"versionKeys":671,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[652,653],"CVE-2025-1194","PYSEC-2026-1984",[111,653],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[658],{"type":260,"score":659},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[661,663,665,666,668,669],{"type":264,"url":662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":313,"url":664},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":270,"url":271},{"type":313,"url":667},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":270,"url":354},{"type":264,"url":670},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[278],{"id":112,"slug":673,"dossier":46,"summary":674,"aliases":675,"sourceIds":678,"published":679,"modified":680,"checkedAt":7,"severity":681,"references":686,"versionKeys":702,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[676,677],"CVE-2024-11394","PYSEC-2024-229",[112,677],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[682,684],{"type":260,"score":683},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":260,"score":685},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[687,689,691,693,694,696,698,700],{"type":264,"url":688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":313,"url":690},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":313,"url":692},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":270,"url":271},{"type":313,"url":695},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":313,"url":697},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":264,"url":699},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":264,"url":701},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[278],{"id":113,"slug":704,"dossier":46,"summary":705,"aliases":706,"sourceIds":709,"published":710,"modified":711,"checkedAt":7,"severity":712,"references":714,"versionKeys":727,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[707,708],"CVE-2025-3264","PYSEC-2026-1985",[113,708],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[713],{"type":260,"score":370},[715,717,719,721,722,724,725],{"type":264,"url":716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":313,"url":718},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":313,"url":720},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":270,"url":271},{"type":313,"url":723},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":270,"url":354},{"type":264,"url":726},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[278],{"id":114,"slug":729,"dossier":46,"summary":730,"aliases":731,"sourceIds":734,"published":710,"modified":735,"checkedAt":7,"severity":736,"references":739,"versionKeys":752,"packageCount":32,"repositoryCount":358},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[732,733],"CVE-2025-3777","PYSEC-2026-1986",[114,733],"2026-07-07T17:56:47.225461188Z",[737],{"type":260,"score":738},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[740,742,744,745,747,749,750],{"type":264,"url":741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":313,"url":743},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":270,"url":271},{"type":313,"url":746},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":313,"url":748},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":270,"url":354},{"type":264,"url":751},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[278,279],{"id":115,"slug":754,"dossier":46,"summary":755,"aliases":756,"sourceIds":759,"published":710,"modified":760,"checkedAt":7,"severity":761,"references":763,"versionKeys":774,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[757,758],"CVE-2025-3263","PYSEC-2026-1987",[115,758],"2026-07-07T17:56:57.889099913Z",[762],{"type":260,"score":370},[764,766,767,768,769,771,772],{"type":264,"url":765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":313,"url":718},{"type":313,"url":720},{"type":270,"url":271},{"type":313,"url":770},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":270,"url":354},{"type":264,"url":773},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[278],{"id":116,"slug":776,"dossier":46,"summary":777,"aliases":778,"sourceIds":782,"published":783,"modified":784,"checkedAt":7,"severity":785,"references":789,"versionKeys":807,"packageCount":32,"repositoryCount":811},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[779,780,781],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[116],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[786,787],{"type":260,"score":592},{"type":300,"score":788},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[790,792,794,796,798,800,801,803,805],{"type":264,"url":791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":313,"url":793},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":313,"url":795},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":313,"url":797},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":313,"url":799},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":270,"url":316},{"type":313,"url":802},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":313,"url":804},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":313,"url":806},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[328,329,330,521,522,808,809,810],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",9,{"id":117,"slug":813,"dossier":46,"summary":814,"aliases":815,"sourceIds":818,"published":819,"modified":820,"checkedAt":7,"severity":821,"references":825,"versionKeys":839,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[816,817],"CVE-2025-2099","PYSEC-2025-40",[117,817],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[822,823],{"type":260,"score":370},{"type":260,"score":824},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[826,828,830,832,833,835,837],{"type":264,"url":827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":313,"url":829},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":267,"url":831},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":270,"url":271},{"type":313,"url":834},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":313,"url":836},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":264,"url":838},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[278],{"id":118,"slug":841,"dossier":46,"summary":674,"aliases":842,"sourceIds":845,"published":846,"modified":847,"checkedAt":7,"severity":848,"references":852,"versionKeys":866,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[843,844],"CVE-2024-11392","PYSEC-2024-227",[118,844],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[849,851],{"type":260,"score":850},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":260,"score":685},[853,855,856,857,858,860,862,864],{"type":264,"url":854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":313,"url":690},{"type":313,"url":692},{"type":270,"url":271},{"type":313,"url":859},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":313,"url":861},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":264,"url":863},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":264,"url":865},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[278],{"id":119,"slug":868,"dossier":46,"summary":869,"aliases":870,"sourceIds":873,"published":874,"modified":875,"checkedAt":7,"severity":876,"references":878,"versionKeys":893,"packageCount":32,"repositoryCount":358},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[871,872],"CVE-2025-6051","PYSEC-2026-1988",[119,872],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[877],{"type":260,"score":370},[879,881,883,885,887,888,890,891],{"type":264,"url":880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":313,"url":882},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":313,"url":884},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":313,"url":886},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":270,"url":271},{"type":313,"url":889},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":270,"url":354},{"type":264,"url":892},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[278,279],{"id":120,"slug":895,"dossier":46,"summary":896,"aliases":897,"sourceIds":901,"published":588,"modified":902,"checkedAt":7,"severity":903,"references":906,"versionKeys":924,"packageCount":32,"repositoryCount":926},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[898,899,900],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[120],"2026-07-17T17:15:51.452848951Z",[904,905],{"type":260,"score":592},{"type":300,"score":788},[907,909,911,913,915,917,918,920,922],{"type":264,"url":908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":313,"url":910},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":313,"url":912},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":313,"url":914},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":313,"url":916},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":270,"url":316},{"type":313,"url":919},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":313,"url":921},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":313,"url":923},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[925,328,329,330,521,522,808,809,810],"pypi:torch@2.10.0",10,{"id":121,"slug":928,"dossier":46,"summary":929,"aliases":930,"sourceIds":934,"published":588,"modified":935,"checkedAt":7,"severity":936,"references":939,"versionKeys":954,"packageCount":32,"repositoryCount":285},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[931,932,933],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[121],"2026-06-10T17:41:15.774477397Z",[937,938],{"type":260,"score":592},{"type":300,"score":594},[940,942,943,944,945,947,948,950,952],{"type":264,"url":941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":313,"url":599},{"type":313,"url":601},{"type":313,"url":603},{"type":313,"url":946},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":270,"url":316},{"type":313,"url":949},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":313,"url":951},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":313,"url":953},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[328,329,330,521,522,808],{"id":122,"slug":956,"dossier":46,"summary":674,"aliases":957,"sourceIds":960,"published":679,"modified":961,"checkedAt":7,"severity":962,"references":965,"versionKeys":979,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[958,959],"CVE-2024-11393","PYSEC-2024-228",[122,959],"2026-06-10T17:00:13.252500033Z",[963,964],{"type":260,"score":683},{"type":260,"score":685},[966,968,969,970,971,973,975,977],{"type":264,"url":967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":313,"url":690},{"type":313,"url":692},{"type":270,"url":271},{"type":313,"url":972},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":313,"url":974},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":264,"url":976},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":264,"url":978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[278],{"id":123,"slug":981,"dossier":46,"summary":982,"aliases":983,"sourceIds":987,"published":988,"modified":989,"checkedAt":7,"severity":990,"references":995,"versionKeys":1011,"packageCount":32,"repositoryCount":358},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[984,985,986],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[123],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[991,993],{"type":260,"score":992},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":300,"score":994},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[996,998,1000,1002,1004,1005,1007,1009],{"type":264,"url":997},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":313,"url":999},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":313,"url":1001},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":313,"url":1003},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":270,"url":316},{"type":313,"url":1006},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":313,"url":1008},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":313,"url":1010},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[328,329],{"id":124,"slug":1013,"dossier":46,"summary":192,"aliases":1014,"sourceIds":1017,"published":1018,"modified":1019,"checkedAt":7,"severity":1020,"references":1023,"versionKeys":1032,"packageCount":32,"repositoryCount":358},"pysec-2025-198-62b25ed4",[1015,1016],"BIT-pytorch-2025-46148","CVE-2025-46148",[124],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[1021],{"type":260,"score":1022},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1024,1026,1028,1030],{"type":264,"url":1025},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":264,"url":1027},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":308,"url":1029},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":267,"url":1031},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[328,329],{"id":125,"slug":1034,"dossier":46,"summary":192,"aliases":1035,"sourceIds":1038,"published":1039,"modified":1040,"checkedAt":7,"severity":1041,"references":1043,"versionKeys":1049,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[1036,1037],"BIT-pytorch-2025-46149","CVE-2025-46149",[125],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[1042],{"type":260,"score":1022},[1044,1045,1047],{"type":264,"url":1025},{"type":308,"url":1046},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":267,"url":1048},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[329],{"id":126,"slug":1051,"dossier":46,"summary":192,"aliases":1052,"sourceIds":1055,"published":1056,"modified":1057,"checkedAt":7,"severity":1058,"references":1060,"versionKeys":1068,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[1053,1054],"BIT-pytorch-2025-46150","CVE-2025-46150",[126],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[1059],{"type":260,"score":1022},[1061,1062,1064,1066],{"type":264,"url":1025},{"type":308,"url":1063},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":308,"url":1065},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":267,"url":1067},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[329],{"id":127,"slug":1070,"dossier":46,"summary":192,"aliases":1071,"sourceIds":1074,"published":1075,"modified":1076,"checkedAt":7,"severity":1077,"references":1079,"versionKeys":1085,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[1072,1073],"BIT-pytorch-2025-46152","CVE-2025-46152",[127],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[1078],{"type":260,"score":342},[1080,1081,1083],{"type":264,"url":1025},{"type":308,"url":1082},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":267,"url":1084},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[329],{"id":128,"slug":1087,"dossier":46,"summary":192,"aliases":1088,"sourceIds":1091,"published":1092,"modified":1093,"checkedAt":7,"severity":1094,"references":1096,"versionKeys":1106,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[1089,1090],"BIT-pytorch-2025-46153","CVE-2025-46153",[128],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[1095],{"type":260,"score":1022},[1097,1099,1100,1102,1104],{"type":313,"url":1098},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":264,"url":1025},{"type":264,"url":1101},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":308,"url":1103},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":267,"url":1105},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[329],{"id":129,"slug":1108,"dossier":46,"summary":192,"aliases":1109,"sourceIds":1112,"published":1113,"modified":1114,"checkedAt":7,"severity":1115,"references":1117,"versionKeys":1122,"packageCount":32,"repositoryCount":285},"pysec-2025-203-2febb201",[1110,1111],"BIT-pytorch-2025-55551","CVE-2025-55551",[129],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[1116],{"type":260,"score":824},[1118,1120],{"type":264,"url":1119},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":308,"url":1121},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[328,329,330,521,522,808],{"id":130,"slug":1124,"dossier":46,"summary":192,"aliases":1125,"sourceIds":1128,"published":1129,"modified":1130,"checkedAt":7,"severity":1131,"references":1133,"versionKeys":1137,"packageCount":32,"repositoryCount":285},"pysec-2025-204-cdae47da",[1126,1127],"BIT-pytorch-2025-55552","CVE-2025-55552",[130],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[1132],{"type":260,"score":824},[1134,1135],{"type":264,"url":1119},{"type":308,"url":1136},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[328,329,330,521,522,808],{"id":131,"slug":1139,"dossier":46,"summary":192,"aliases":1140,"sourceIds":1143,"published":1144,"modified":1145,"checkedAt":7,"severity":1146,"references":1148,"versionKeys":1154,"packageCount":32,"repositoryCount":96},"pysec-2025-205-fd5e58fd",[1141,1142],"BIT-pytorch-2025-55553","CVE-2025-55553",[131],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[1147],{"type":260,"score":824},[1149,1150,1152],{"type":264,"url":1119},{"type":308,"url":1151},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":267,"url":1153},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[328,329,330],{"id":132,"slug":1156,"dossier":46,"summary":192,"aliases":1157,"sourceIds":1160,"published":1161,"modified":1162,"checkedAt":7,"severity":1163,"references":1165,"versionKeys":1169,"packageCount":32,"repositoryCount":285},"pysec-2025-206-58322476",[1158,1159],"BIT-pytorch-2025-55554","CVE-2025-55554",[132],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[1164],{"type":260,"score":342},[1166,1167],{"type":264,"url":1119},{"type":308,"url":1168},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[328,329,330,521,522,808],{"id":133,"slug":1171,"dossier":46,"summary":192,"aliases":1172,"sourceIds":1175,"published":1176,"modified":1177,"checkedAt":7,"severity":1178,"references":1180,"versionKeys":1186,"packageCount":32,"repositoryCount":96},"pysec-2025-207-2abef3fc",[1173,1174],"BIT-pytorch-2025-55557","CVE-2025-55557",[133],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[1179],{"type":260,"score":824},[1181,1182,1184],{"type":264,"url":1119},{"type":308,"url":1183},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":267,"url":1185},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[328,329,330],{"id":134,"slug":1188,"dossier":46,"summary":192,"aliases":1189,"sourceIds":1192,"published":1193,"modified":1194,"checkedAt":7,"severity":1195,"references":1197,"versionKeys":1203,"packageCount":32,"repositoryCount":96},"pysec-2025-208-6e93fe9d",[1190,1191],"BIT-pytorch-2025-55558","CVE-2025-55558",[134],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[1196],{"type":260,"score":824},[1198,1199,1201],{"type":264,"url":1119},{"type":308,"url":1200},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":267,"url":1202},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[328,329,330],{"id":135,"slug":1205,"dossier":46,"summary":192,"aliases":1206,"sourceIds":1209,"published":1210,"modified":1211,"checkedAt":7,"severity":1212,"references":1214,"versionKeys":1220,"packageCount":32,"repositoryCount":96},"pysec-2025-209-e6f352b0",[1207,1208],"BIT-pytorch-2025-55560","CVE-2025-55560",[135],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[1213],{"type":260,"score":824},[1215,1216,1218],{"type":264,"url":1119},{"type":308,"url":1217},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":267,"url":1219},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[328,329,330],{"id":136,"slug":1222,"dossier":46,"summary":192,"aliases":1223,"sourceIds":1225,"published":1226,"modified":1227,"checkedAt":7,"severity":1228,"references":1230,"versionKeys":1233,"packageCount":32,"repositoryCount":96},"pysec-2025-211-d8bd15de",[1224],"CVE-2025-14920",[136],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[1229],{"type":260,"score":261},[1231],{"type":264,"url":1232},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[278,279,280],{"id":137,"slug":1235,"dossier":46,"summary":192,"aliases":1236,"sourceIds":1238,"published":1239,"modified":1240,"checkedAt":7,"severity":1241,"references":1243,"versionKeys":1246,"packageCount":32,"repositoryCount":96},"pysec-2025-212-a011b97d",[1237],"CVE-2025-14921",[137],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[1242],{"type":260,"score":261},[1244],{"type":264,"url":1245},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[278,279,280],{"id":138,"slug":1248,"dossier":46,"summary":192,"aliases":1249,"sourceIds":1251,"published":1252,"modified":1253,"checkedAt":7,"severity":1254,"references":1256,"versionKeys":1259,"packageCount":32,"repositoryCount":96},"pysec-2025-213-9043dc9b",[1250],"CVE-2025-14924",[138],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[1255],{"type":260,"score":261},[1257],{"type":264,"url":1258},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[278,279,280],{"id":139,"slug":1261,"dossier":46,"summary":192,"aliases":1262,"sourceIds":1264,"published":1265,"modified":1266,"checkedAt":7,"severity":1267,"references":1269,"versionKeys":1272,"packageCount":32,"repositoryCount":96},"pysec-2025-214-eb241255",[1263],"CVE-2025-14926",[139],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[1268],{"type":260,"score":261},[1270],{"type":264,"url":1271},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[278,279,280],{"id":140,"slug":1274,"dossier":46,"summary":192,"aliases":1275,"sourceIds":1277,"published":1278,"modified":1279,"checkedAt":7,"severity":1280,"references":1282,"versionKeys":1285,"packageCount":32,"repositoryCount":96},"pysec-2025-215-6064f491",[1276],"CVE-2025-14927",[140],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[1281],{"type":260,"score":261},[1283],{"type":264,"url":1284},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[278,279,280],{"id":141,"slug":1287,"dossier":46,"summary":192,"aliases":1288,"sourceIds":1290,"published":1291,"modified":1292,"checkedAt":7,"severity":1293,"references":1295,"versionKeys":1298,"packageCount":32,"repositoryCount":96},"pysec-2025-216-5708ed01",[1289],"CVE-2025-14928",[141],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[1294],{"type":260,"score":261},[1296],{"type":264,"url":1297},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[278,279,280],{"id":142,"slug":1300,"dossier":46,"summary":192,"aliases":1301,"sourceIds":1303,"published":1304,"modified":1305,"checkedAt":7,"severity":1306,"references":1308,"versionKeys":1311,"packageCount":32,"repositoryCount":285},"pysec-2025-217-2c1ad388",[1302],"CVE-2025-14929",[142],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[1307],{"type":260,"score":261},[1309],{"type":264,"url":1310},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[278,279,280,281,282,283,284],{"id":143,"slug":1313,"dossier":46,"summary":192,"aliases":1314,"sourceIds":1316,"published":1317,"modified":1318,"checkedAt":7,"severity":1319,"references":1321,"versionKeys":1324,"packageCount":32,"repositoryCount":199},"pysec-2025-218-39811fc3",[1315],"CVE-2025-14930",[143],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[1320],{"type":260,"score":261},[1322],{"type":264,"url":1323},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[278,279,280,281],{"id":144,"slug":1326,"dossier":46,"summary":192,"aliases":1327,"sourceIds":1330,"published":1331,"modified":1332,"checkedAt":7,"severity":1333,"references":1336,"versionKeys":1347,"packageCount":32,"repositoryCount":926},"pysec-2026-139-96951ff6",[1328,1329],"BIT-pytorch-2026-4538","CVE-2026-4538",[144],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[1334],{"type":260,"score":1335},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1337,1339,1341,1343,1345],{"type":313,"url":1338},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":264,"url":1340},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":264,"url":1342},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":308,"url":1344},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":267,"url":1346},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[925,328,329,330,521,522,808,809,810],{"id":145,"slug":1349,"dossier":46,"summary":192,"aliases":1350,"sourceIds":1355,"published":1356,"modified":1357,"checkedAt":7,"severity":1358,"references":1360,"versionKeys":1377,"packageCount":32,"repositoryCount":811},"pysec-2026-2286-8795b007",[1351,1352,1353,1354],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[145],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[1359],{"type":260,"score":685},[1361,1363,1365,1367,1369,1371,1373,1375],{"type":313,"url":1362},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":313,"url":1364},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":264,"url":1366},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":264,"url":1368},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":264,"url":1370},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":308,"url":1372},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":308,"url":1374},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":267,"url":1376},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[328,329,330,521,522,808,809,810],1784558562136]