[{"data":1,"prerenderedAt":4332},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-9852":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":227,"related":239},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-10-01T06:23:02.848Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-10-01T06:19:50.815Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},44,43,1,24,4,27,41,39,38,0,4135,4124,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":38,"topPackage":71},2467,50,7265,9,55,2433,34,852,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5454545454545454,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":101,"artifactResolvedComponentCount":100,"exactManifestPinCount":102,"packageCount":100,"ecosystems":103,"aiPackageCount":32,"licenseExpressionCount":105,"unknownLicensePackageCount":32,"advisoryIds":106,"advisoryCount":225,"providers":226},"opencode:9852","opencode-9852",9852,"Datastore","f13\u002Fmicroservices\u002Fdatastore","Mandantenfähiger Datenspeicher für individuelle und gruppenbezogene Wissensdatenbanken für F13.","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fdatastore","d69c3e5b02c3ba9b93fd65ac8b7efb2ca0c715bb","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fdatastore\u002F-\u002Fcommit\u002Fd69c3e5b02c3ba9b93fd65ac8b7efb2ca0c715bb","2026-09-30T12:22:10.914Z","2026-09-30T12:59:03.000Z",{"complete":90,"entryCount":91,"truncated":47},true,372,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","e0610ba7ea5ec17b3a76a73214cd40b77714c857","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fdatastore\u002F-\u002Fblob\u002Fd69c3e5b02c3ba9b93fd65ac8b7efb2ca0c715bb\u002Fuv.lock","6595b6f54571e9af6cc1d55f3a760e5ca4e6191eb5043f8cea081d53d833f9e6",432979,"parsed",117,119,2,[104],"pypi",16,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224],"GHSA-248v-346w-9cwc","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2gx3-rcp4-g85q","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-42vr-xj54-vc7v","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-5p39-cfhj-2xmp","GHSA-5rvq-cxj2-64vf","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6w46-j5rx-g56g","GHSA-752w-5fwx-jx9f","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-8988-9cw3-xx77","GHSA-8qvm-5x2c-j2w7","GHSA-8wjv-2p76-3863","GHSA-94p9-xgh2-xp45","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-993g-76c3-p5m4","GHSA-9h52-p55h-vw2f","GHSA-9h9j-4vrj-gf7g","GHSA-9hjg-9r4m-mvj7","GHSA-9j54-fg26-wv3r","GHSA-9v7f-9g4p-ffgj","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-f96h-pmfr-66vw","GHSA-ffc3-869f-jxw9","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-g3cq-j2xw-wf74","GHSA-g6cj-pr64-35w5","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gh4c-6fx4-qh6g","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gvp8-978c-rx2q","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hxm8-2xgr-2p9m","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jwrc-g2q2-pq5p","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p4g4-x82p-q773","GHSA-p998-jp59-783m","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qmgc-5h2g-mvrw","GHSA-r6ph-v2qm-q3c2","GHSA-r6x4-923q-g947","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vj7q-gjh5-988w","GHSA-vqfr-h8mv-ghfj","GHSA-vxq7-64xx-v4gw","GHSA-w2cx-738m-mc7w","GHSA-w2fm-2cpv-w7v5","GHSA-w6j9-cwv2-h6wq","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xgmm-8j9v-c9wx","PYSEC-2025-183","PYSEC-2026-2132","PYSEC-2026-4013","PYSEC-2026-4014",118,[],{"files":228,"occurrenceCount":101},[229,234,238],{"path":230,"kind":231,"sourceUrl":232,"commitSha":85,"blobSha":233,"state":99,"componentCount":32},"requirements-dev.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fdatastore\u002F-\u002Fblob\u002Fd69c3e5b02c3ba9b93fd65ac8b7efb2ca0c715bb\u002Frequirements-dev.txt","700e298eb4ae818f9d220157c3b33e0240fab289",{"path":235,"kind":231,"sourceUrl":236,"commitSha":85,"blobSha":237,"state":99,"componentCount":32},"requirements.txt","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fdatastore\u002F-\u002Fblob\u002Fd69c3e5b02c3ba9b93fd65ac8b7efb2ca0c715bb\u002Frequirements.txt","ad3c5204a854c4f69e0d5d638f0d031882cbc968",{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":240,"vulnerabilities":1308},[241,252,264,275,285,295,305,315,325,335,344,353,362,372,381,391,400,409,418,427,437,446,455,465,475,484,493,502,511,520,529,538,547,556,564,573,582,592,601,610,619,628,637,646,655,664,673,682,691,700,709,718,727,736,745,753,762,771,779,788,797,806,815,824,833,842,851,860,869,877,885,894,903,912,922,931,940,949,958,967,976,985,994,1003,1011,1020,1029,1038,1047,1056,1065,1074,1083,1092,1102,1111,1120,1129,1138,1147,1156,1165,1174,1183,1192,1201,1210,1219,1228,1237,1246,1255,1264,1273,1281,1290,1299],{"id":72,"slug":73,"identity":242,"label":74,"aiRelevant":90,"provider":243,"advisoryCount":39,"licenseExpressions":246,"versions":248,"dossier":90,"occurrenceCount":250,"directOccurrenceCount":39,"evidenceFiles":251},"pypi:openai",{"id":244,"label":245},"openai","OpenAI",[247],"Apache-2.0",[249],"2.45.0",3,[230,235,56],{"id":253,"slug":254,"identity":255,"label":256,"aiRelevant":47,"provider":257,"advisoryCount":258,"licenseExpressions":259,"versions":261,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":263},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",null,33,[247,260],"Apache-2.0 AND MIT",[262],"3.14.3",[56],{"id":265,"slug":266,"identity":267,"label":268,"aiRelevant":47,"provider":257,"advisoryCount":269,"licenseExpressions":270,"versions":272,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":274},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",20,[271],"MIT",[273],"2.15.1",[56],{"id":276,"slug":277,"identity":278,"label":279,"aiRelevant":47,"provider":257,"advisoryCount":280,"licenseExpressions":281,"versions":282,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":284},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[271],[283],"2.7.0",[56],{"id":286,"slug":287,"identity":288,"label":289,"aiRelevant":47,"provider":257,"advisoryCount":66,"licenseExpressions":290,"versions":292,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":294},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",[291],"Apache-2.0 OR BSD-3-Clause",[293],"50.0.0",[56],{"id":296,"slug":297,"identity":298,"label":299,"aiRelevant":47,"provider":257,"advisoryCount":300,"licenseExpressions":301,"versions":302,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":304},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[247],[303],"0.0.32",[56],{"id":306,"slug":307,"identity":308,"label":309,"aiRelevant":47,"provider":257,"advisoryCount":300,"licenseExpressions":310,"versions":312,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":314},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[311],"BSD-3-Clause",[313],"1.3.1",[56],{"id":316,"slug":317,"identity":318,"label":319,"aiRelevant":47,"provider":257,"advisoryCount":320,"licenseExpressions":321,"versions":322,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":324},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",5,[271],[323],"21.7.1",[56],{"id":326,"slug":327,"identity":328,"label":329,"aiRelevant":47,"provider":257,"advisoryCount":34,"licenseExpressions":330,"versions":332,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":334},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[311,331],"non-standard",[333],"3.1.6",[56],{"id":336,"slug":337,"identity":338,"label":339,"aiRelevant":47,"provider":257,"advisoryCount":250,"licenseExpressions":340,"versions":341,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":343},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[271],[342],"1.29.0",[56],{"id":345,"slug":346,"identity":347,"label":348,"aiRelevant":47,"provider":257,"advisoryCount":250,"licenseExpressions":349,"versions":350,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":352},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[247],[351],"2.34.2",[56],{"id":354,"slug":355,"identity":356,"label":357,"aiRelevant":47,"provider":257,"advisoryCount":102,"licenseExpressions":358,"versions":359,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":361},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[271],[360],"4.14.2",[56],{"id":363,"slug":364,"identity":365,"label":366,"aiRelevant":47,"provider":257,"advisoryCount":102,"licenseExpressions":367,"versions":369,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":371},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[271,368],"Unlicense",[370],"3.32.2",[56],{"id":373,"slug":374,"identity":375,"label":376,"aiRelevant":47,"provider":257,"advisoryCount":102,"licenseExpressions":377,"versions":378,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":380},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[311],[379],"7.35.1",[56],{"id":382,"slug":383,"identity":384,"label":385,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":386,"versions":388,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":390},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[387],"MPL-2.0",[389],"2026.6.17",[56],{"id":392,"slug":393,"identity":394,"label":395,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":396,"versions":397,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":399},"package:pypi:click","click-ef97f731","pypi:click","click",[311,331],[398],"8.4.2",[56],{"id":401,"slug":402,"identity":403,"label":404,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":405,"versions":406,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":408},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[271],[407],"0.16.0",[56],{"id":410,"slug":411,"identity":412,"label":413,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":414,"versions":415,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":417},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[311,331],[416],"3.18",[56],{"id":419,"slug":420,"identity":421,"label":422,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":423,"versions":424,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":426},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[271],[425],"2.14.2",[56],{"id":428,"slug":429,"identity":430,"label":431,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":432,"versions":434,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":436},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[433],"BSD-2-Clause",[435],"2.20.0",[56],{"id":438,"slug":439,"identity":440,"label":441,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":442,"versions":443,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":445},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[271],[444],"9.1.1",[56],{"id":447,"slug":448,"identity":449,"label":450,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":451,"versions":452,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":454},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[311],[453],"1.2.2",[56],{"id":456,"slug":457,"identity":458,"label":459,"aiRelevant":47,"provider":257,"advisoryCount":32,"licenseExpressions":460,"versions":462,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":464},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[461],"MIT AND MPL-2.0",[463],"4.68.4",[56],{"id":466,"slug":467,"identity":468,"label":469,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":470,"versions":472,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":474},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[471],"PSF-2.0",[473],"2.7.1",[56],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":480,"versions":481,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":483},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[247],[482],"1.4.0",[56],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":489,"versions":490,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":492},"package:pypi:amqp","amqp-b7c07d93","pypi:amqp","amqp",[331],[491],"5.3.1",[56],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":498,"versions":499,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":501},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[271],[500],"0.0.4",[56],{"id":503,"slug":504,"identity":505,"label":506,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":507,"versions":508,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":510},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[271],[509],"0.7.0",[56],{"id":512,"slug":513,"identity":514,"label":515,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":516,"versions":517,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":519},"package:pypi:ast-serialize","ast-serialize-4fe42cf9","pypi:ast-serialize","ast-serialize",[271],[518],"0.6.0",[56],{"id":521,"slug":522,"identity":523,"label":524,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":525,"versions":526,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":528},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[271],[527],"26.1.0",[56],{"id":530,"slug":531,"identity":532,"label":533,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":534,"versions":535,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":537},"package:pypi:billiard","billiard-87cdf8d8","pypi:billiard","billiard",[331],[536],"4.2.4",[56],{"id":539,"slug":540,"identity":541,"label":542,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":543,"versions":544,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":546},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[433],[545],"5.0",[56],{"id":548,"slug":549,"identity":550,"label":551,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":552,"versions":553,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":555},"package:pypi:boto3","boto3-91d723f0","pypi:boto3","boto3",[247],[554],"1.43.46",[56],{"id":557,"slug":558,"identity":559,"label":560,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":561,"versions":562,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":563},"package:pypi:botocore","botocore-cd11abb8","pypi:botocore","botocore",[247],[554],[56],{"id":565,"slug":566,"identity":567,"label":568,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":569,"versions":570,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":572},"package:pypi:celery","celery-b40d49f4","pypi:celery","celery",[311],[571],"5.6.3",[56],{"id":574,"slug":575,"identity":576,"label":577,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":578,"versions":579,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":581},"package:pypi:celery-types","celery-types-9f28e176","pypi:celery-types","celery-types",[247],[580],"0.26.0",[56],{"id":583,"slug":584,"identity":585,"label":586,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":587,"versions":589,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":591},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[271,588],"MIT-0",[590],"2.1.0",[56],{"id":593,"slug":594,"identity":595,"label":596,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":597,"versions":598,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":600},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[271],[599],"3.5.0",[56],{"id":602,"slug":603,"identity":604,"label":605,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":606,"versions":607,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":609},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[271],[608],"3.4.9",[56],{"id":611,"slug":612,"identity":613,"label":614,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":615,"versions":616,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":618},"package:pypi:click-didyoumean","click-didyoumean-4dbcd2d4","pypi:click-didyoumean","click-didyoumean",[271],[617],"0.3.1",[56],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":624,"versions":625,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":627},"package:pypi:click-plugins","click-plugins-b43a6bb3","pypi:click-plugins","click-plugins",[331],[626],"1.1.1.2",[56],{"id":629,"slug":630,"identity":631,"label":632,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":633,"versions":634,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":636},"package:pypi:click-repl","click-repl-3c545c47","pypi:click-repl","click-repl",[271],[635],"0.3.0",[56],{"id":638,"slug":639,"identity":640,"label":641,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":642,"versions":643,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":645},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[331],[644],"0.4.6",[56],{"id":647,"slug":648,"identity":649,"label":650,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":651,"versions":652,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":654},"package:pypi:coverage","coverage-7ba89558","pypi:coverage","coverage",[247],[653],"7.15.1",[56],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":660,"versions":661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":663},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[471],[662],"0.4.3",[56],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":669,"versions":670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":672},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[247],[671],"1.9.0",[56],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":678,"versions":679,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":681},"package:pypi:events","events-aef5a02a","pypi:events","events",[331],[680],"0.5",[56],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":687,"versions":688,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":690},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[271],[689],"0.139.0",[56],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":696,"versions":697,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":699},"package:pypi:fastapi-mcp","fastapi-mcp-3648cecb","pypi:fastapi-mcp","fastapi-mcp",[331],[698],"0.4.0",[56],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":705,"versions":706,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":708},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[247],[707],"1.8.0",[56],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":714,"versions":715,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":717},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[247],[716],"1.82.1",[56],{"id":719,"slug":720,"identity":721,"label":722,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":723,"versions":724,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":726},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[311],[725],"1.0.9",[56],{"id":728,"slug":729,"identity":730,"label":731,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":732,"versions":733,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":735},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[271],[734],"0.8.0",[56],{"id":737,"slug":738,"identity":739,"label":740,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":741,"versions":742,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":744},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[311],[743],"0.28.1",[56],{"id":746,"slug":747,"identity":748,"label":749,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":750,"versions":751,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":752},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[271],[662],[56],{"id":754,"slug":755,"identity":756,"label":757,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":758,"versions":759,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":761},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[271],[760],"2.6.19",[56],{"id":763,"slug":764,"identity":765,"label":766,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":767,"versions":768,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":770},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[271],[769],"2.3.0",[56],{"id":772,"slug":773,"identity":774,"label":775,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":776,"versions":777,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":778},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[271],[407],[56],{"id":780,"slug":781,"identity":782,"label":783,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":784,"versions":785,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":787},"package:pypi:jmespath","jmespath-ffa3386c","pypi:jmespath","jmespath",[271],[786],"1.1.0",[56],{"id":789,"slug":790,"identity":791,"label":792,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":793,"versions":794,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":796},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[271],[795],"4.26.0",[56],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":802,"versions":803,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":805},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[271],[804],"2025.9.1",[56],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":811,"versions":812,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":814},"package:pypi:kombu","kombu-4085784d","pypi:kombu","kombu",[311],[813],"5.6.2",[56],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":820,"versions":821,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":823},"package:pypi:librt","librt-be98c166","pypi:librt","librt",[271],[822],"0.13.0",[56],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":829,"versions":830,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":832},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[247],[831],"30.4.4",[56],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":838,"versions":839,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":841},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[271],[840],"4.2.0",[56],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":847,"versions":848,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":850},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[311,331],[849],"3.0.3",[56],{"id":852,"slug":853,"identity":854,"label":855,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":856,"versions":857,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":859},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[271],[858],"0.1.2",[56],{"id":861,"slug":862,"identity":863,"label":864,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":865,"versions":866,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":868},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[247],[867],"6.7.1",[56],{"id":870,"slug":871,"identity":872,"label":873,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":874,"versions":875,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":876},"package:pypi:mypy","mypy-2008b5d3","pypi:mypy","mypy",[271],[769],[56],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":882,"versions":883,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":884},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[271],[786],[56],{"id":886,"slug":887,"identity":888,"label":889,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":890,"versions":891,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":893},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[331],[892],"1.10.0",[56],{"id":895,"slug":896,"identity":897,"label":898,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":899,"versions":900,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":902},"package:pypi:opensearch-protobufs","opensearch-protobufs-c5ca7ed7","pypi:opensearch-protobufs","opensearch-protobufs",[247],[901],"1.2.0",[56],{"id":904,"slug":905,"identity":906,"label":907,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":908,"versions":909,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":911},"package:pypi:opensearch-py","opensearch-py-f82a19ee","pypi:opensearch-py","opensearch-py",[247],[910],"3.2.0",[56],{"id":913,"slug":914,"identity":915,"label":916,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":917,"versions":919,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":921},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[918,331],"Apache-2.0 OR BSD-2-Clause",[920],"26.2",[56],{"id":923,"slug":924,"identity":925,"label":926,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":927,"versions":928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":930},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[387],[929],"1.1.1",[56],{"id":932,"slug":933,"identity":934,"label":935,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":936,"versions":937,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":939},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[271],[938],"4.11.0",[56],{"id":941,"slug":942,"identity":943,"label":944,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":945,"versions":946,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":948},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[271],[947],"1.6.0",[56],{"id":950,"slug":951,"identity":952,"label":953,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":954,"versions":955,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":957},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[271],[956],"4.5.1",[56],{"id":959,"slug":960,"identity":961,"label":962,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":963,"versions":964,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":966},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[311,331],[965],"3.0.52",[56],{"id":968,"slug":969,"identity":970,"label":971,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":972,"versions":973,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":975},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[247],[974],"0.5.2",[56],{"id":977,"slug":978,"identity":979,"label":980,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":981,"versions":982,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":984},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[311],[983],"3.0",[56],{"id":986,"slug":987,"identity":988,"label":989,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":990,"versions":991,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":993},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[271],[992],"2.13.4",[56],{"id":995,"slug":996,"identity":997,"label":998,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":999,"versions":1000,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1002},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[271],[1001],"2.46.4",[56],{"id":1004,"slug":1005,"identity":1006,"label":1007,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1008,"versions":1009,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1010},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[247],[482],[56],{"id":1012,"slug":1013,"identity":1014,"label":1015,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1016,"versions":1017,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1019},"package:pypi:pytest-cov","pytest-cov-1f608c88","pypi:pytest-cov","pytest-cov",[271],[1018],"7.1.0",[56],{"id":1021,"slug":1022,"identity":1023,"label":1024,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1025,"versions":1026,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1028},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[331],[1027],"2.9.0.post0",[56],{"id":1030,"slug":1031,"identity":1032,"label":1033,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1034,"versions":1036,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1037},"package:pypi:python-debian","python-debian-dcb8fb7e","pypi:python-debian","python-debian",[1035],"GPL-2.0-or-later",[929],[56],{"id":1039,"slug":1040,"identity":1041,"label":1042,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1043,"versions":1044,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1046},"package:pypi:python-discovery","python-discovery-6dfeea81","pypi:python-discovery","python-discovery",[331],[1045],"1.5.0",[56],{"id":1048,"slug":1049,"identity":1050,"label":1051,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1052,"versions":1053,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1055},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[271],[1054],"0.4.27",[56],{"id":1057,"slug":1058,"identity":1059,"label":1060,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1061,"versions":1062,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1064},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[1063],"312",[56],{"id":1066,"slug":1067,"identity":1068,"label":1069,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1070,"versions":1071,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1073},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[271],[1072],"6.0.3",[56],{"id":1075,"slug":1076,"identity":1077,"label":1078,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1079,"versions":1080,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1082},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[271],[1081],"0.37.0",[56],{"id":1084,"slug":1085,"identity":1086,"label":1087,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1088,"versions":1089,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1091},"package:pypi:respx","respx-6e4b8195","pypi:respx","respx",[311],[1090],"0.23.1",[56],{"id":1093,"slug":1094,"identity":1095,"label":1096,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1097,"versions":1099,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1101},"package:pypi:reuse","reuse-a5ec460b","pypi:reuse","reuse",[1098],"Apache-2.0 AND CC-BY-SA-4.0 AND CC0-1.0 AND GPL-3.0-or-later",[1100],"6.2.0",[56],{"id":1103,"slug":1104,"identity":1105,"label":1106,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1107,"versions":1108,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1110},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[271],[1109],"15.0.0",[56],{"id":1112,"slug":1113,"identity":1114,"label":1115,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1116,"versions":1117,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1119},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[271],[1118],"2026.6.3",[56],{"id":1121,"slug":1122,"identity":1123,"label":1124,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1125,"versions":1126,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1128},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[271],[1127],"0.15.21",[56],{"id":1130,"slug":1131,"identity":1132,"label":1133,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1134,"versions":1135,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1137},"package:pypi:s3transfer","s3transfer-34b3ad07","pypi:s3transfer","s3transfer",[247],[1136],"0.19.1",[56],{"id":1139,"slug":1140,"identity":1141,"label":1142,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1143,"versions":1144,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1146},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[331],[1145],"1.5.4",[56],{"id":1148,"slug":1149,"identity":1150,"label":1151,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1152,"versions":1153,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1155},"package:pypi:six","six-3c3888bd","pypi:six","six",[271],[1154],"1.17.0",[56],{"id":1157,"slug":1158,"identity":1159,"label":1160,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1161,"versions":1163,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1164},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[1162],"Apache-2.0 OR MIT",[313],[56],{"id":1166,"slug":1167,"identity":1168,"label":1169,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1170,"versions":1171,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1173},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[311],[1172],"3.4.5",[56],{"id":1175,"slug":1176,"identity":1177,"label":1178,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1179,"versions":1180,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1182},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[247],[1181],"9.1.4",[56],{"id":1184,"slug":1185,"identity":1186,"label":1187,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1188,"versions":1189,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1191},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[271],[1190],"2.4.1",[56],{"id":1193,"slug":1194,"identity":1195,"label":1196,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1197,"versions":1198,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1200},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[271],[1199],"0.15.0",[56],{"id":1202,"slug":1203,"identity":1204,"label":1205,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1206,"versions":1207,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1209},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[271],[1208],"0.26.8",[56],{"id":1211,"slug":1212,"identity":1213,"label":1214,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1215,"versions":1216,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1218},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[471,331],[1217],"4.16.0",[56],{"id":1220,"slug":1221,"identity":1222,"label":1223,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1224,"versions":1225,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1227},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[271],[1226],"0.4.2",[56],{"id":1229,"slug":1230,"identity":1231,"label":1232,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1233,"versions":1234,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1236},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[247],[1235],"2026.3",[56],{"id":1238,"slug":1239,"identity":1240,"label":1241,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1242,"versions":1243,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1245},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[271],[1244],"5.4.4",[56],{"id":1247,"slug":1248,"identity":1249,"label":1250,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1251,"versions":1252,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1254},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[311],[1253],"0.51.0",[56],{"id":1256,"slug":1257,"identity":1258,"label":1259,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1260,"versions":1261,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1263},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[271],[1262],"0.22.1",[56],{"id":1265,"slug":1266,"identity":1267,"label":1268,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1269,"versions":1270,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1272},"package:pypi:vine","vine-fa93acc9","pypi:vine","vine",[331],[1271],"5.1.0",[56],{"id":1274,"slug":1275,"identity":1276,"label":1277,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1278,"versions":1279,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1280},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[271],[901],[56],{"id":1282,"slug":1283,"identity":1284,"label":1285,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1286,"versions":1287,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1289},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[271],[1288],"0.8.2",[56],{"id":1291,"slug":1292,"identity":1293,"label":1294,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1295,"versions":1296,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1298},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[311],[1297],"16.1",[56],{"id":1300,"slug":1301,"identity":1302,"label":1303,"aiRelevant":47,"provider":257,"advisoryCount":39,"licenseExpressions":1304,"versions":1305,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1307},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[247],[1306],"1.24.2",[56],[1309,1348,1381,1413,1438,1463,1498,1524,1547,1568,1594,1614,1632,1650,1691,1715,1740,1773,1801,1832,1856,1883,1902,1930,1953,1976,1998,2021,2058,2081,2109,2142,2183,2204,2223,2274,2303,2335,2355,2386,2410,2433,2456,2486,2514,2548,2569,2589,2619,2639,2664,2696,2726,2751,2772,2796,2819,2838,2865,2898,2923,2951,2971,2994,3023,3041,3056,3090,3112,3135,3156,3177,3213,3236,3257,3289,3310,3330,3359,3389,3413,3432,3454,3475,3505,3533,3556,3581,3604,3626,3648,3668,3690,3711,3735,3762,3781,3813,3868,3888,3909,3932,3959,3985,4005,4025,4048,4069,4089,4119,4145,4179,4198,4217,4237,4254,4288,4312],{"id":107,"slug":1310,"dossier":47,"summary":1311,"aliases":1312,"sourceIds":1315,"published":1316,"modified":1317,"checkedAt":7,"severity":1318,"references":1322,"versionKeys":1346,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1313,1314],"CVE-2024-39689","PYSEC-2024-230",[107,1314],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[1319],{"type":1320,"score":1321},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1323,1326,1328,1331,1334,1337,1340,1342,1344],{"type":1324,"url":1325},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1324,"url":1327},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1329,"url":1330},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1332,"url":1333},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1335,"url":1336},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1338,"url":1339},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1335,"url":1341},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1324,"url":1343},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1324,"url":1345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1347],"pypi:certifi@2024.6.2",{"id":108,"slug":1349,"dossier":47,"summary":1350,"aliases":1351,"sourceIds":1354,"published":1355,"modified":1356,"checkedAt":7,"severity":1357,"references":1360,"versionKeys":1377,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[1352,1353],"CVE-2025-54121","PYSEC-2026-1941",[108,1353],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[1358],{"type":1320,"score":1359},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1361,1363,1365,1367,1369,1371,1373,1375],{"type":1335,"url":1362},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":1324,"url":1364},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":1329,"url":1366},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":1332,"url":1368},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":1335,"url":1370},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":1335,"url":1372},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":1332,"url":1374},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":1324,"url":1376},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[1378,1379,1380],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":109,"slug":1382,"dossier":47,"summary":1383,"aliases":1384,"sourceIds":1387,"published":1388,"modified":1389,"checkedAt":7,"severity":1390,"references":1396,"versionKeys":1403,"packageCount":32,"repositoryCount":42},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1385,1386],"CVE-2026-54279","PYSEC-2026-2112",[109,1386],"2026-06-15T20:08:51Z","2026-09-10T03:51:07.471021274Z",[1391,1394],{"type":1392,"score":1393},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1320,"score":1395},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1397,1399,1401],{"type":1324,"url":1398},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1332,"url":1400},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1329,"url":1402},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[1404,1405,1406,1407,1408,1409,1410,1411,1412],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":110,"slug":1414,"dossier":47,"summary":1415,"aliases":1416,"sourceIds":1418,"published":1419,"modified":1420,"checkedAt":7,"severity":1421,"references":1423,"versionKeys":1434,"packageCount":32,"repositoryCount":320},"ghsa-2gx3-rcp4-g85q-9272f372","PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)",[1417],"CVE-2026-101917",[110],"2026-09-29T23:11:51Z","2026-09-29T23:15:08.573706550Z",[1422],{"type":1320,"score":1359},[1424,1426,1428,1430,1432],{"type":1335,"url":1425},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",{"type":1324,"url":1427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101917",{"type":1335,"url":1429},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fba4853a75fb9676362da17f67d0f64bd18afd4e1",{"type":1332,"url":1431},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":1335,"url":1433},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.14.0",[1435,1436,1437],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.13.0","pypi:pyjwt@2.9.0",{"id":111,"slug":1439,"dossier":47,"summary":1440,"aliases":1441,"sourceIds":1444,"published":1445,"modified":1446,"checkedAt":7,"severity":1447,"references":1452,"versionKeys":1462,"packageCount":32,"repositoryCount":280},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[1442,1443],"CVE-2026-34514","PYSEC-2026-2096",[111,1443],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[1448,1450],{"type":1392,"score":1449},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1320,"score":1451},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1453,1455,1457,1459,1460],{"type":1329,"url":1454},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1324,"url":1456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1329,"url":1458},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1332,"url":1400},{"type":1324,"url":1461},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[1404,1405,1406,1407,1408,1409,1410,1411],{"id":112,"slug":1464,"dossier":90,"summary":1465,"aliases":1466,"sourceIds":1469,"published":1470,"modified":1471,"checkedAt":7,"severity":1472,"references":1475,"versionKeys":1492,"packageCount":32,"repositoryCount":105},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1467,1468],"CVE-2025-66471","PYSEC-2026-1994",[112,1468],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[1473],{"type":1392,"score":1474},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1476,1478,1480,1482,1484,1486,1488,1490],{"type":1335,"url":1477},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1324,"url":1479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1329,"url":1481},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1335,"url":1483},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":1324,"url":1485},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1335,"url":1487},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":1332,"url":1489},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1332,"url":1491},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[1493,1494,1495,1496,1497],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":113,"slug":1499,"dossier":47,"summary":1500,"aliases":1501,"sourceIds":1504,"published":1505,"modified":1506,"checkedAt":7,"severity":1507,"references":1510,"versionKeys":1523,"packageCount":32,"repositoryCount":105},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1502,1503],"CVE-2026-21441","PYSEC-2026-1996",[113,1503],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1508,1509],{"type":1320,"score":1395},{"type":1392,"score":1474},[1511,1513,1515,1517,1518,1520,1521],{"type":1335,"url":1512},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1324,"url":1514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1329,"url":1516},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1332,"url":1489},{"type":1335,"url":1519},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1332,"url":1491},{"type":1324,"url":1522},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1493,1494,1495,1496,1497],{"id":114,"slug":1525,"dossier":47,"summary":1526,"aliases":1527,"sourceIds":1530,"published":1531,"modified":1532,"checkedAt":7,"severity":1533,"references":1537,"versionKeys":1546,"packageCount":32,"repositoryCount":280},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1528,1529],"CVE-2026-34517","PYSEC-2026-2099",[114,1529],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[1534,1536],{"type":1392,"score":1535},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1320,"score":1359},[1538,1540,1542,1544,1545],{"type":1329,"url":1539},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1324,"url":1541},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1329,"url":1543},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":115,"slug":1548,"dossier":47,"summary":1549,"aliases":1550,"sourceIds":1552,"published":1553,"modified":1554,"checkedAt":7,"severity":1555,"references":1557,"versionKeys":1567,"packageCount":32,"repositoryCount":320},"ghsa-42vr-xj54-vc7v-bb2dfa49","PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt \u002F verify_signature=False)",[1551],"CVE-2026-101918",[115],"2026-09-30T15:41:05Z","2026-09-30T16:00:09.812873551Z",[1556],{"type":1320,"score":1359},[1558,1560,1562,1564,1565],{"type":1335,"url":1559},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",{"type":1324,"url":1561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101918",{"type":1335,"url":1563},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F5fde08a6cf906aa7698de2d6391d88b73006b17b",{"type":1332,"url":1431},{"type":1335,"url":1566},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.15.0",[1435,1436,1437],{"id":116,"slug":1569,"dossier":47,"summary":1570,"aliases":1571,"sourceIds":1574,"published":1575,"modified":1576,"checkedAt":7,"severity":1577,"references":1580,"versionKeys":1593,"packageCount":32,"repositoryCount":300},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1572,1573],"CVE-2025-50182","PYSEC-2026-1997",[116,1573],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1578],{"type":1320,"score":1579},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1581,1583,1585,1587,1588,1590,1591],{"type":1335,"url":1582},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1324,"url":1584},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1329,"url":1586},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1332,"url":1489},{"type":1335,"url":1589},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1332,"url":1491},{"type":1324,"url":1592},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1493,1494,1495,1496],{"id":117,"slug":1595,"dossier":47,"summary":1596,"aliases":1597,"sourceIds":1600,"published":1601,"modified":1602,"checkedAt":7,"severity":1603,"references":1607,"versionKeys":1613,"packageCount":32,"repositoryCount":42},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[1598,1599],"CVE-2026-54273","PYSEC-2026-2107",[117,1599],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[1604,1606],{"type":1392,"score":1605},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1320,"score":1395},[1608,1610,1612],{"type":1324,"url":1609},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1329,"url":1611},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1332,"url":1400},[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":118,"slug":1615,"dossier":47,"summary":1616,"aliases":1617,"sourceIds":1620,"published":1621,"modified":1622,"checkedAt":7,"severity":1623,"references":1627,"versionKeys":1631,"packageCount":32,"repositoryCount":42},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[1618,1619],"CVE-2026-54275","PYSEC-2026-237",[118,1619],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[1624,1626],{"type":1392,"score":1625},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1320,"score":1395},[1628,1630],{"type":1324,"url":1629},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1332,"url":1400},[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":119,"slug":1633,"dossier":47,"summary":1634,"aliases":1635,"sourceIds":1637,"published":1638,"modified":1639,"checkedAt":7,"severity":1640,"references":1643,"versionKeys":1648,"packageCount":32,"repositoryCount":102},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[1636],"CVE-2026-58203",[119],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[1641],{"type":1320,"score":1642},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1644,1646],{"type":1335,"url":1645},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":1332,"url":1647},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[1649],"pypi:pydantic-settings@2.12.0",{"id":120,"slug":1651,"dossier":47,"summary":1652,"aliases":1653,"sourceIds":1656,"published":1657,"modified":1658,"checkedAt":7,"severity":1659,"references":1664,"versionKeys":1687,"packageCount":32,"repositoryCount":1690},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1654,1655],"CVE-2026-4539","PYSEC-2026-2987",[120,1655],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[1660,1662],{"type":1320,"score":1661},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1392,"score":1663},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1665,1667,1669,1671,1673,1675,1677,1679,1681,1683,1685],{"type":1324,"url":1666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1335,"url":1668},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1335,"url":1670},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1335,"url":1672},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1332,"url":1674},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1335,"url":1676},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1335,"url":1678},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1335,"url":1680},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1335,"url":1682},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1332,"url":1684},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1324,"url":1686},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1688,1689],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",15,{"id":121,"slug":1692,"dossier":47,"summary":1693,"aliases":1694,"sourceIds":1695,"published":1696,"modified":1697,"checkedAt":7,"severity":1698,"references":1700,"versionKeys":1707,"packageCount":32,"repositoryCount":1714},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[121],"2026-06-15T20:12:27Z","2026-09-10T03:50:48.298936410Z",[1699],{"type":1320,"score":1395},[1701,1703,1705],{"type":1335,"url":1702},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":1332,"url":1704},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":1335,"url":1706},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[1708,1709,1710,1711,1712,1713],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",7,{"id":122,"slug":1716,"dossier":47,"summary":1717,"aliases":1718,"sourceIds":1721,"published":1722,"modified":1723,"checkedAt":7,"severity":1724,"references":1727,"versionKeys":1739,"packageCount":32,"repositoryCount":300},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1719,1720],"CVE-2025-69226","PYSEC-2026-1097",[122,1720],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[1725],{"type":1392,"score":1726},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1728,1730,1732,1734,1735,1737],{"type":1335,"url":1729},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1324,"url":1731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1329,"url":1733},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1332,"url":1400},{"type":1332,"url":1736},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1324,"url":1738},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[1404,1405,1406,1407,1408,1409,1410],{"id":123,"slug":1741,"dossier":47,"summary":1742,"aliases":1743,"sourceIds":1747,"published":1748,"modified":1749,"checkedAt":7,"severity":1750,"references":1753,"versionKeys":1768,"packageCount":32,"repositoryCount":1714},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[1744,1745,1746],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[123,1746],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[1751],{"type":1320,"score":1752},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1754,1756,1758,1760,1762,1764,1766],{"type":1335,"url":1755},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":1324,"url":1757},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":1335,"url":1759},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":1329,"url":1761},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":1332,"url":1763},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":1332,"url":1765},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":1324,"url":1767},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[1769,1770,1771,1772],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":124,"slug":1774,"dossier":47,"summary":1775,"aliases":1776,"sourceIds":1779,"published":1780,"modified":1781,"checkedAt":7,"severity":1782,"references":1786,"versionKeys":1799,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[1777,1778],"CVE-2024-53981","PYSEC-2026-1851",[124,1778],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[1783,1784],{"type":1320,"score":1395},{"type":1392,"score":1785},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1787,1789,1791,1793,1795,1797],{"type":1335,"url":1788},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":1324,"url":1790},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":1335,"url":1792},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":1332,"url":1794},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":1332,"url":1796},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":1324,"url":1798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[1800],"pypi:python-multipart@0.0.9",{"id":125,"slug":1802,"dossier":47,"summary":1803,"aliases":1804,"sourceIds":1806,"published":1807,"modified":1808,"checkedAt":7,"severity":1809,"references":1812,"versionKeys":1823,"packageCount":32,"repositoryCount":105},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[1805],"CVE-2026-64847",[125],"2026-09-18T17:17:10Z","2026-09-18T17:30:07.278440290Z",[1810],{"type":1392,"score":1811},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1813,1815,1817,1819,1821],{"type":1335,"url":1814},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":1335,"url":1816},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":1335,"url":1818},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":1332,"url":1820},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":1335,"url":1822},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",[1824,1825,1826,1827,1828,1829,1830,1831],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":126,"slug":1833,"dossier":47,"summary":1834,"aliases":1835,"sourceIds":1838,"published":1839,"modified":1840,"checkedAt":7,"severity":1841,"references":1843,"versionKeys":1852,"packageCount":32,"repositoryCount":1714},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[1836,1837],"CVE-2026-53539","PYSEC-2026-3036",[126,1837],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[1842],{"type":1320,"score":1395},[1844,1846,1847,1848,1850],{"type":1335,"url":1845},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1332,"url":1794},{"type":1332,"url":1796},{"type":1324,"url":1849},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1324,"url":1851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[1853,1854,1855,1800],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":127,"slug":1857,"dossier":47,"summary":1858,"aliases":1859,"sourceIds":1862,"published":1863,"modified":1864,"checkedAt":7,"severity":1865,"references":1871,"versionKeys":1882,"packageCount":32,"repositoryCount":280},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[1860,1861],"CVE-2026-34520","PYSEC-2026-2102",[127,1861],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[1866,1868,1869],{"type":1320,"score":1867},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1392,"score":1449},{"type":1392,"score":1870},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1872,1874,1876,1878,1879,1880],{"type":1329,"url":1873},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1324,"url":1875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1329,"url":1877},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1332,"url":1400},{"type":1324,"url":1461},{"type":1335,"url":1881},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[1404,1405,1406,1407,1408,1409,1410,1411],{"id":128,"slug":1884,"dossier":47,"summary":1885,"aliases":1886,"sourceIds":1889,"published":1890,"modified":1891,"checkedAt":7,"severity":1892,"references":1895,"versionKeys":1901,"packageCount":32,"repositoryCount":42},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[1887,1888],"CVE-2026-54277","PYSEC-2026-2110",[128,1888],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[1893,1894],{"type":1392,"score":1605},{"type":1320,"score":1395},[1896,1898,1900],{"type":1324,"url":1897},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1329,"url":1899},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1332,"url":1400},[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":129,"slug":1903,"dossier":90,"summary":1904,"aliases":1905,"sourceIds":1908,"published":1909,"modified":1910,"checkedAt":7,"severity":1911,"references":1915,"versionKeys":1924,"packageCount":32,"repositoryCount":1929},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1906,1907],"CVE-2026-45409","PYSEC-2026-215",[129,1907],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[1912,1913],{"type":1320,"score":1359},{"type":1392,"score":1914},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1916,1918,1920,1922],{"type":1324,"url":1917},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1324,"url":1919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1332,"url":1921},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1335,"url":1923},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1925,1926,1927,1928],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":130,"slug":1931,"dossier":47,"summary":1932,"aliases":1933,"sourceIds":1936,"published":1937,"modified":1938,"checkedAt":7,"severity":1939,"references":1941,"versionKeys":1952,"packageCount":32,"repositoryCount":300},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[1934,1935],"CVE-2025-69224","PYSEC-2026-1099",[130,1935],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[1940],{"type":1392,"score":1449},[1942,1944,1946,1948,1949,1950],{"type":1335,"url":1943},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1324,"url":1945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1329,"url":1947},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":1951},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[1404,1405,1406,1407,1408,1409,1410],{"id":131,"slug":1954,"dossier":47,"summary":1955,"aliases":1956,"sourceIds":1959,"published":1960,"modified":1961,"checkedAt":7,"severity":1962,"references":1964,"versionKeys":1975,"packageCount":32,"repositoryCount":300},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[1957,1958],"CVE-2025-69228","PYSEC-2026-1100",[131,1958],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[1963],{"type":1392,"score":1605},[1965,1967,1969,1971,1972,1973],{"type":1335,"url":1966},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1324,"url":1968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1329,"url":1970},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":1974},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[1404,1405,1406,1407,1408,1409,1410],{"id":132,"slug":1977,"dossier":47,"summary":1978,"aliases":1979,"sourceIds":1982,"published":1983,"modified":1984,"checkedAt":7,"severity":1985,"references":1988,"versionKeys":1997,"packageCount":32,"repositoryCount":1714},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[1980,1981],"CVE-2026-53538","PYSEC-2026-3037",[132,1981],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[1986],{"type":1320,"score":1987},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1989,1991,1992,1993,1995],{"type":1335,"url":1990},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1332,"url":1794},{"type":1332,"url":1796},{"type":1324,"url":1994},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1324,"url":1996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[1853,1854,1855,1800],{"id":133,"slug":1999,"dossier":47,"summary":2000,"aliases":2001,"sourceIds":2004,"published":2005,"modified":2006,"checkedAt":7,"severity":2007,"references":2009,"versionKeys":2020,"packageCount":32,"repositoryCount":300},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[2002,2003],"CVE-2025-69223","PYSEC-2026-1101",[133,2003],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[2008],{"type":1320,"score":1395},[2010,2012,2014,2016,2017,2018],{"type":1335,"url":2011},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1324,"url":2013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1329,"url":2015},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":2019},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[1404,1405,1406,1407,1408,1409,1410],{"id":134,"slug":2022,"dossier":47,"summary":2023,"aliases":2024,"sourceIds":2027,"published":2028,"modified":2029,"checkedAt":7,"severity":2030,"references":2033,"versionKeys":2052,"packageCount":32,"repositoryCount":1714},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[2025,2026],"CVE-2025-71176","PYSEC-2026-1845",[134,2026],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[2031],{"type":1320,"score":2032},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[2034,2036,2038,2040,2042,2044,2046,2048,2050],{"type":1324,"url":2035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":1335,"url":2037},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":1335,"url":2039},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":1335,"url":2041},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":1332,"url":2043},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":1335,"url":2045},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":1335,"url":2047},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":1332,"url":2049},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":1324,"url":2051},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[2053,2054,2055,2056,2057],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":135,"slug":2059,"dossier":47,"summary":2060,"aliases":2061,"sourceIds":2064,"published":2065,"modified":2066,"checkedAt":7,"severity":2067,"references":2069,"versionKeys":2080,"packageCount":32,"repositoryCount":250},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[2062,2063],"CVE-2026-32597","PYSEC-2026-120",[135,2063],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[2068],{"type":1320,"score":1321},[2070,2073,2075,2076,2078],{"type":2071,"url":2072},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":1324,"url":2074},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":1332,"url":1431},{"type":1335,"url":2077},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":1335,"url":2079},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[1435,1437],{"id":136,"slug":2082,"dossier":47,"summary":1693,"aliases":2083,"sourceIds":2086,"published":2087,"modified":2088,"checkedAt":7,"severity":2089,"references":2090,"versionKeys":2108,"packageCount":32,"repositoryCount":250},"ghsa-79v4-65xg-pq4g-b911b371",[2084,2085],"CVE-2024-12797","PYSEC-2026-1284",[136,2085],"2025-02-11T18:06:42Z","2026-09-10T03:50:22.501671988Z",[],[2091,2093,2095,2097,2099,2101,2102,2104,2106],{"type":1335,"url":2092},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":1324,"url":2094},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":1335,"url":2096},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":1335,"url":2098},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":1335,"url":2100},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":1332,"url":1704},{"type":1335,"url":2103},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":1332,"url":2105},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":1324,"url":2107},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[1708,1709,1710],{"id":137,"slug":2110,"dossier":47,"summary":2111,"aliases":2112,"sourceIds":2115,"published":2116,"modified":2117,"checkedAt":7,"severity":2118,"references":2120,"versionKeys":2137,"packageCount":32,"repositoryCount":2141},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[2113,2114],"CVE-2025-62727","PYSEC-2026-1942",[137,2114],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[2119],{"type":1320,"score":1395},[2121,2123,2125,2127,2130,2132,2134,2135],{"type":1335,"url":2122},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":1324,"url":2124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":1329,"url":2126},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":2128,"url":2129},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":1332,"url":2131},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":1335,"url":2133},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":1332,"url":1374},{"type":1324,"url":2136},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[1379,1380,2138,2139,2140],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",6,{"id":138,"slug":2143,"dossier":47,"summary":2144,"aliases":2145,"sourceIds":2148,"published":2149,"modified":2150,"checkedAt":7,"severity":2151,"references":2154,"versionKeys":2171,"packageCount":32,"repositoryCount":2182},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[2146,2147],"CVE-2026-0994","PYSEC-2026-1805",[138,2147],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[2152],{"type":1392,"score":2153},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[2155,2157,2159,2161,2163,2165,2167,2169],{"type":1324,"url":2156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":1335,"url":2158},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":1335,"url":2160},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":1335,"url":2162},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":1335,"url":2164},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":1332,"url":2166},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":1332,"url":2168},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":1324,"url":2170},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[2172,2173,2174,2175,2176,2177,2178,2179,2180,2181],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",13,{"id":139,"slug":2184,"dossier":47,"summary":2185,"aliases":2186,"sourceIds":2188,"published":2189,"modified":2190,"checkedAt":7,"severity":2191,"references":2194,"versionKeys":2203,"packageCount":32,"repositoryCount":105},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[2187],"CVE-2026-63374",[139],"2026-09-18T17:17:18Z","2026-09-18T17:30:07.278457589Z",[2192],{"type":1392,"score":2193},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2195,2197,2199,2201,2202],{"type":1335,"url":2196},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":1335,"url":2198},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":1335,"url":2200},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":1332,"url":1820},{"type":1335,"url":1822},[1824,1825,1826,1827,1828,1829,1830,1831],{"id":140,"slug":2205,"dossier":47,"summary":2206,"aliases":2207,"sourceIds":2210,"published":2211,"modified":2212,"checkedAt":7,"severity":2213,"references":2215,"versionKeys":2219,"packageCount":32,"repositoryCount":280},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[2208,2209],"CVE-2026-54283","PYSEC-2026-249",[140,2209],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[2214],{"type":1320,"score":1395},[2216,2218],{"type":1324,"url":2217},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":1332,"url":2131},[1378,1379,1380,2138,2139,2140,2220,2221,2222],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":141,"slug":2224,"dossier":47,"summary":2225,"aliases":2226,"sourceIds":2230,"published":2231,"modified":2232,"checkedAt":7,"severity":2233,"references":2236,"versionKeys":2273,"packageCount":32,"repositoryCount":280},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[2227,2228,2229],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[141,2228],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[2234],{"type":1320,"score":2235},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2237,2239,2241,2243,2245,2247,2249,2251,2253,2255,2256,2258,2261,2263,2265,2267,2269,2271],{"type":1324,"url":2238},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":1324,"url":2240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":1329,"url":2242},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":1335,"url":2244},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1338,"url":2246},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":1335,"url":2248},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":1335,"url":2250},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":1335,"url":2252},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":1335,"url":2254},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":1332,"url":2131},{"type":1335,"url":2257},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":2259,"url":2260},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":1335,"url":2262},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":1335,"url":2264},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":1335,"url":2266},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":1335,"url":2268},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":1338,"url":2270},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":1324,"url":2272},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[1378,1379,1380,2138,2139,2140,2220,2221,2222],{"id":142,"slug":2275,"dossier":90,"summary":2276,"aliases":2277,"sourceIds":2279,"published":2280,"modified":2281,"checkedAt":7,"severity":2282,"references":2285,"versionKeys":2299,"packageCount":32,"repositoryCount":2302},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[2278],"CVE-2026-97687",[142],"2026-09-30T14:46:04Z","2026-09-30T15:00:05.369237042Z",[2283],{"type":1392,"score":2284},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2286,2288,2290,2292,2294,2296,2297],{"type":1335,"url":2287},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":1324,"url":2289},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":1335,"url":2291},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":1335,"url":2293},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":1335,"url":2295},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":1332,"url":1489},{"type":1335,"url":2298},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",[1493,1494,1495,1496,1497,2300,2301],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",22,{"id":143,"slug":2304,"dossier":47,"summary":2305,"aliases":2306,"sourceIds":2309,"published":2310,"modified":2311,"checkedAt":7,"severity":2312,"references":2315,"versionKeys":2334,"packageCount":32,"repositoryCount":250},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[2307,2308],"CVE-2025-4565","PYSEC-2026-1806",[143,2308],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[2313],{"type":1392,"score":2314},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2316,2318,2320,2322,2324,2325,2327,2329,2331,2332],{"type":1335,"url":2317},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":1335,"url":2319},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":1324,"url":2321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":1335,"url":2323},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":1332,"url":2166},{"type":1335,"url":2326},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":1335,"url":2328},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":1335,"url":2330},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":1332,"url":2168},{"type":1324,"url":2333},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[2172,2174,2175],{"id":144,"slug":2336,"dossier":47,"summary":2337,"aliases":2338,"sourceIds":2340,"published":2341,"modified":2342,"checkedAt":7,"severity":2343,"references":2345,"versionKeys":2354,"packageCount":32,"repositoryCount":102},"ghsa-8wjv-2p76-3863-60244895","PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header",[2339],"CVE-2026-102265",[144],"2026-09-29T23:43:06Z","2026-09-29T23:45:37.333342767Z",[2344],{"type":1320,"score":1359},[2346,2348,2350,2352,2353],{"type":1335,"url":2347},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",{"type":1324,"url":2349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102265",{"type":1335,"url":2351},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F06573692ebcdec8831c3927513b3e87c31fbbb62",{"type":1332,"url":1431},{"type":1335,"url":1433},[1436],{"id":145,"slug":2356,"dossier":47,"summary":2357,"aliases":2358,"sourceIds":2361,"published":2362,"modified":2363,"checkedAt":7,"severity":2364,"references":2367,"versionKeys":2382,"packageCount":32,"repositoryCount":66},"ghsa-94p9-xgh2-xp45-1ed45366","virtualenv: Downloaded seed wheels (pip\u002Fsetuptools) are not integrity-checked before use",[2359,2360],"CVE-2026-102930","PYSEC-2026-4011",[145,2360],"2026-09-18T01:41:45Z","2026-10-01T00:00:04.703718723Z",[2365],{"type":1392,"score":2366},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2368,2370,2372,2374,2376,2378,2379,2381],{"type":1335,"url":2369},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-94p9-xgh2-xp45",{"type":1324,"url":2371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102930",{"type":1335,"url":2373},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3251",{"type":1329,"url":2375},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa01ed3e2f239d6ab1fce62c5c7664ccf268fff6d",{"type":1335,"url":2377},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4011.yaml",{"type":1332,"url":1763},{"type":1335,"url":2380},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.12",{"type":1332,"url":1765},[1769,1770,1771,1772,2383,2384,2385],"pypi:virtualenv@21.2.4","pypi:virtualenv@21.3.1","pypi:virtualenv@21.7.1",{"id":146,"slug":2387,"dossier":47,"summary":2388,"aliases":2389,"sourceIds":2392,"published":2393,"modified":2394,"checkedAt":7,"severity":2395,"references":2398,"versionKeys":2409,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[2390,2391],"CVE-2025-53643","PYSEC-2026-1104",[146,2391],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[2396],{"type":1392,"score":2397},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2399,2401,2403,2405,2406,2407],{"type":1335,"url":2400},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1324,"url":2402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1329,"url":2404},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":2408},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[1404,1405,1406,1407],{"id":147,"slug":2411,"dossier":47,"summary":2412,"aliases":2413,"sourceIds":2416,"published":2417,"modified":2418,"checkedAt":7,"severity":2419,"references":2423,"versionKeys":2432,"packageCount":32,"repositoryCount":280},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[2414,2415],"CVE-2026-34518","PYSEC-2026-2100",[147,2415],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[2420,2422],{"type":1320,"score":2421},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1392,"score":1726},[2424,2426,2428,2430,2431],{"type":1329,"url":2425},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1324,"url":2427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1329,"url":2429},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":148,"slug":2434,"dossier":47,"summary":2435,"aliases":2436,"sourceIds":2439,"published":2440,"modified":2441,"checkedAt":7,"severity":2442,"references":2445,"versionKeys":2455,"packageCount":32,"repositoryCount":250},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[2437,2438],"CVE-2026-48522","PYSEC-2026-175",[148,2438],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[2443],{"type":1320,"score":2444},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2446,2448,2450,2452,2453],{"type":2071,"url":2447},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":1324,"url":2449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":1335,"url":2451},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":1332,"url":1431},{"type":1335,"url":2454},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[1435,1437],{"id":149,"slug":2457,"dossier":47,"summary":2458,"aliases":2459,"sourceIds":2462,"published":2463,"modified":2464,"checkedAt":7,"severity":2465,"references":2467,"versionKeys":2482,"packageCount":32,"repositoryCount":250},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[2460,2461],"CVE-2025-66416","PYSEC-2026-1617",[149,2461],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[2466],{"type":1392,"score":2284},[2468,2470,2472,2474,2476,2478,2480],{"type":1335,"url":2469},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":1324,"url":2471},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":1335,"url":2473},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":1324,"url":2475},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":1332,"url":2477},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":1335,"url":2479},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":1332,"url":2481},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[2483,2484,2485],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0",{"id":150,"slug":2487,"dossier":47,"summary":2488,"aliases":2489,"sourceIds":2492,"published":2493,"modified":2494,"checkedAt":7,"severity":2495,"references":2498,"versionKeys":2513,"packageCount":32,"repositoryCount":66},"ghsa-9h9j-4vrj-gf7g-c50a1cd4","virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection",[2490,2491],"CVE-2026-102938","PYSEC-2026-4012",[150,2491],"2026-09-17T16:42:47Z","2026-10-01T00:00:04.697773611Z",[2496],{"type":1392,"score":2497},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2499,2501,2503,2505,2507,2509,2510,2512],{"type":1335,"url":2500},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-9h9j-4vrj-gf7g",{"type":1324,"url":2502},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102938",{"type":1335,"url":2504},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3247",{"type":1329,"url":2506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa30f995461043acb6cacbf3a890951563ccf7140",{"type":1335,"url":2508},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4012.yaml",{"type":1332,"url":1763},{"type":1335,"url":2511},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.11",{"type":1332,"url":1765},[1769,1770,1771,1772,2383,2384,2385],{"id":151,"slug":2515,"dossier":47,"summary":2516,"aliases":2517,"sourceIds":2520,"published":2521,"modified":2522,"checkedAt":7,"severity":2523,"references":2526,"versionKeys":2545,"packageCount":32,"repositoryCount":300},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2518,2519],"CVE-2024-47081","PYSEC-2026-1872",[151,2519],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2524],{"type":1320,"score":2525},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2527,2529,2531,2533,2535,2537,2539,2541,2543],{"type":1335,"url":2528},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1324,"url":2530},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1335,"url":2532},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1329,"url":2534},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1332,"url":2536},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1335,"url":2538},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1335,"url":2540},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1332,"url":2542},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1324,"url":2544},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2546,2547],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":152,"slug":2549,"dossier":47,"summary":2550,"aliases":2551,"sourceIds":2553,"published":2554,"modified":2555,"checkedAt":7,"severity":2556,"references":2559,"versionKeys":2568,"packageCount":32,"repositoryCount":102},"ghsa-9j54-fg26-wv3r-7789d387","PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation",[2552],"CVE-2026-102266",[152],"2026-09-29T23:43:19Z","2026-09-30T00:00:04.438003579Z",[2557],{"type":1320,"score":2558},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2560,2562,2564,2566,2567],{"type":1335,"url":2561},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",{"type":1324,"url":2563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102266",{"type":1335,"url":2565},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Ff91ed44dd65baaf457f4b3353ed35e98a753934c",{"type":1332,"url":1431},{"type":1335,"url":1433},[1436],{"id":153,"slug":2570,"dossier":47,"summary":2571,"aliases":2572,"sourceIds":2574,"published":2575,"modified":2576,"checkedAt":7,"severity":2577,"references":2579,"versionKeys":2588,"packageCount":32,"repositoryCount":320},"ghsa-9v7f-9g4p-ffgj-61cfc8ce","PyJWT: PyJWKClient follows redirects when fetching JWKS",[2573],"CVE-2026-102267",[153],"2026-09-29T23:15:00Z","2026-09-29T23:30:03.872305369Z",[2578],{"type":1320,"score":2558},[2580,2582,2584,2586,2587],{"type":1335,"url":2581},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",{"type":1324,"url":2583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102267",{"type":1335,"url":2585},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",{"type":1332,"url":1431},{"type":1335,"url":1433},[1435,1436,1437],{"id":154,"slug":2590,"dossier":47,"summary":2591,"aliases":2592,"sourceIds":2595,"published":2596,"modified":2597,"checkedAt":7,"severity":2598,"references":2601,"versionKeys":2618,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2593,2594],"CVE-2024-35195","PYSEC-2026-1873",[154,2594],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2599],{"type":1320,"score":2600},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2602,2604,2606,2608,2610,2611,2613,2615,2616],{"type":1335,"url":2603},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1324,"url":2605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1335,"url":2607},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1329,"url":2609},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1332,"url":2536},{"type":1335,"url":2612},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1335,"url":2614},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1332,"url":2542},{"type":1324,"url":2617},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2546],{"id":155,"slug":2620,"dossier":47,"summary":2621,"aliases":2622,"sourceIds":2625,"published":2626,"modified":2627,"checkedAt":7,"severity":2628,"references":2632,"versionKeys":2638,"packageCount":32,"repositoryCount":42},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[2623,2624],"CVE-2026-54280","PYSEC-2026-2113",[155,2624],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[2629,2631],{"type":1392,"score":2630},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1320,"score":1395},[2633,2635,2637],{"type":1324,"url":2634},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1329,"url":2636},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1332,"url":1400},[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":156,"slug":2640,"dossier":47,"summary":2641,"aliases":2642,"sourceIds":2645,"published":2646,"modified":2647,"checkedAt":7,"severity":2648,"references":2652,"versionKeys":2663,"packageCount":32,"repositoryCount":280},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[2643,2644],"CVE-2026-34525","PYSEC-2026-2103",[156,2644],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[2649,2651],{"type":1392,"score":2650},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1320,"score":1451},[2653,2655,2657,2659,2661,2662],{"type":1329,"url":2654},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1324,"url":2656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1329,"url":2658},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1329,"url":2660},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":157,"slug":2665,"dossier":47,"summary":2666,"aliases":2667,"sourceIds":2670,"published":2671,"modified":2672,"checkedAt":7,"severity":2673,"references":2676,"versionKeys":2693,"packageCount":32,"repositoryCount":102},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2668,2669],"CVE-2025-27516","PYSEC-2026-1471",[157,2669],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2674],{"type":1392,"score":2675},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2677,2679,2681,2683,2685,2687,2689,2691],{"type":1335,"url":2678},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1324,"url":2680},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1329,"url":2682},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1332,"url":2684},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1335,"url":2686},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1335,"url":2688},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1332,"url":2690},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1324,"url":2692},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2694,2695],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":158,"slug":2697,"dossier":47,"summary":2698,"aliases":2699,"sourceIds":2702,"published":2703,"modified":2704,"checkedAt":7,"severity":2705,"references":2708,"versionKeys":2723,"packageCount":32,"repositoryCount":2725},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[2700,2701],"CVE-2026-69244","PYSEC-2026-3545",[158,2701],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[2706],{"type":1392,"score":2707},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2709,2711,2713,2715,2716,2718,2719,2721],{"type":1335,"url":2710},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1335,"url":2712},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":1335,"url":2714},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":1332,"url":1400},{"type":1335,"url":2717},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":1332,"url":1736},{"type":1324,"url":2720},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1324,"url":2722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[1404,1405,1406,1407,1408,1409,1410,1411,1412,2724],"pypi:aiohttp@3.14.1",12,{"id":159,"slug":2727,"dossier":47,"summary":2728,"aliases":2729,"sourceIds":2732,"published":2733,"modified":2734,"checkedAt":7,"severity":2735,"references":2739,"versionKeys":2750,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[2730,2731],"CVE-2024-47874","PYSEC-2026-1943",[159,2731],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[2736,2738],{"type":1320,"score":2737},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":1392,"score":1785},[2740,2742,2744,2746,2747,2748],{"type":1335,"url":2741},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":1324,"url":2743},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":1329,"url":2745},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":1332,"url":1368},{"type":1332,"url":1374},{"type":1324,"url":2749},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[1378],{"id":160,"slug":2752,"dossier":47,"summary":2753,"aliases":2754,"sourceIds":2756,"published":2757,"modified":2758,"checkedAt":7,"severity":2759,"references":2762,"versionKeys":2771,"packageCount":32,"repositoryCount":320},"ghsa-ffc3-869f-jxw9-318ae071","PyJWT: Asymmetric-PEM detection bypass: whitespace\u002Fline-ending-mutated public keys skip the HS\u002Fasymmetric confusion guard",[2755],"CVE-2026-102268",[160],"2026-09-29T23:17:33Z","2026-09-29T23:30:03.866776038Z",[2760],{"type":1320,"score":2761},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2763,2765,2767,2769,2770],{"type":1335,"url":2764},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",{"type":1324,"url":2766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102268",{"type":1335,"url":2768},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8b4e233a22206b34ec1186e912e75c0b2396ac07",{"type":1332,"url":1431},{"type":1335,"url":1433},[1435,1436,1437],{"id":161,"slug":2773,"dossier":47,"summary":2774,"aliases":2775,"sourceIds":2778,"published":2779,"modified":2780,"checkedAt":7,"severity":2781,"references":2784,"versionKeys":2795,"packageCount":32,"repositoryCount":300},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[2776,2777],"CVE-2025-69230","PYSEC-2026-1105",[161,2777],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[2782],{"type":1392,"score":2783},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2785,2787,2789,2791,2792,2793],{"type":1335,"url":2786},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1324,"url":2788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1329,"url":2790},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":2794},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[1404,1405,1406,1407,1408,1409,1410],{"id":162,"slug":2797,"dossier":47,"summary":2798,"aliases":2799,"sourceIds":2802,"published":2803,"modified":2804,"checkedAt":7,"severity":2805,"references":2808,"versionKeys":2818,"packageCount":32,"repositoryCount":250},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[2800,2801],"CVE-2026-48524","PYSEC-2026-177",[162,2801],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[2806],{"type":1320,"score":2807},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2809,2811,2813,2815,2816],{"type":1324,"url":2810},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":1324,"url":2812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":1335,"url":2814},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":1332,"url":1431},{"type":1335,"url":2817},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[1435,1437],{"id":163,"slug":2820,"dossier":47,"summary":2821,"aliases":2822,"sourceIds":2825,"published":2826,"modified":2827,"checkedAt":7,"severity":2828,"references":2831,"versionKeys":2837,"packageCount":32,"repositoryCount":42},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[2823,2824],"CVE-2026-54278","PYSEC-2026-2111",[163,2824],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[2829,2830],{"type":1392,"score":1605},{"type":1320,"score":1395},[2832,2834,2835],{"type":1324,"url":2833},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1332,"url":1400},{"type":1329,"url":2836},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":164,"slug":2839,"dossier":47,"summary":2840,"aliases":2841,"sourceIds":2844,"published":2845,"modified":2846,"checkedAt":7,"severity":2847,"references":2850,"versionKeys":2863,"packageCount":32,"repositoryCount":2141},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[2842,2843],"CVE-2026-69247","PYSEC-2026-3552",[164,2843],"2026-08-03T21:17:00Z","2026-09-10T03:50:53.610446769Z",[2848],{"type":1392,"score":2849},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2851,2853,2855,2857,2858,2859,2861],{"type":1335,"url":2852},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":1335,"url":2854},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":1335,"url":2856},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":1332,"url":1704},{"type":1332,"url":2105},{"type":1324,"url":2860},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":1324,"url":2862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[1710,1711,1712,1713,2864],"pypi:cryptography@49.0.0",{"id":165,"slug":2866,"dossier":47,"summary":2867,"aliases":2868,"sourceIds":2871,"published":2872,"modified":2873,"checkedAt":7,"severity":2874,"references":2877,"versionKeys":2896,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[2869,2870],"CVE-2024-34062","PYSEC-2026-1976",[165,2870],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[2875],{"type":1320,"score":2876},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2878,2880,2882,2884,2886,2888,2890,2892,2894],{"type":1335,"url":2879},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1324,"url":2881},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1335,"url":2883},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1332,"url":2885},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1335,"url":2887},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1335,"url":2889},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1335,"url":2891},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1332,"url":2893},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1324,"url":2895},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[2897],"pypi:tqdm@4.66.2",{"id":166,"slug":2899,"dossier":47,"summary":2900,"aliases":2901,"sourceIds":2904,"published":2905,"modified":2906,"checkedAt":7,"severity":2907,"references":2909,"versionKeys":2922,"packageCount":32,"repositoryCount":300},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[2902,2903],"CVE-2025-69229","PYSEC-2026-1106",[166,2903],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[2908],{"type":1392,"score":1605},[2910,2912,2914,2916,2918,2919,2920],{"type":1335,"url":2911},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1324,"url":2913},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1335,"url":2915},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1335,"url":2917},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":2921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[1404,1405,1406,1407,1408,1409,1410],{"id":167,"slug":2924,"dossier":90,"summary":2925,"aliases":2926,"sourceIds":2929,"published":2930,"modified":2931,"checkedAt":7,"severity":2932,"references":2937,"versionKeys":2947,"packageCount":32,"repositoryCount":2950},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[2927,2928],"CVE-2026-25645","PYSEC-2026-2275",[167,2928],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[2933,2935],{"type":1320,"score":2934},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1320,"score":2936},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2938,2940,2942,2944,2945],{"type":1324,"url":2939},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1324,"url":2941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1329,"url":2943},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1332,"url":2536},{"type":1324,"url":2946},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2546,2547,2948,2949],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":168,"slug":2952,"dossier":47,"summary":2953,"aliases":2954,"sourceIds":2956,"published":2957,"modified":2958,"checkedAt":7,"severity":2959,"references":2961,"versionKeys":2970,"packageCount":32,"repositoryCount":1714},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[2955],"CVE-2026-97688",[168],"2026-09-30T15:00:38Z","2026-09-30T15:15:04.066660799Z",[2960],{"type":1392,"score":1914},[2962,2964,2966,2968,2969],{"type":1335,"url":2963},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":1324,"url":2965},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":1335,"url":2967},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":1332,"url":1489},{"type":1335,"url":2298},[2300,2301],{"id":169,"slug":2972,"dossier":47,"summary":2973,"aliases":2974,"sourceIds":2977,"published":2978,"modified":2979,"checkedAt":7,"severity":2980,"references":2982,"versionKeys":2993,"packageCount":32,"repositoryCount":105},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[2975,2976],"CVE-2025-66418","PYSEC-2026-1998",[169,2976],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[2981],{"type":1392,"score":1474},[2983,2985,2987,2989,2990,2991],{"type":1335,"url":2984},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1324,"url":2986},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1329,"url":2988},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1332,"url":1489},{"type":1332,"url":1491},{"type":1324,"url":2992},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1493,1494,1495,1496,1497],{"id":170,"slug":2995,"dossier":47,"summary":2996,"aliases":2997,"sourceIds":3000,"published":3001,"modified":3002,"checkedAt":7,"severity":3003,"references":3007,"versionKeys":3022,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[2998,2999],"CVE-2024-56201","PYSEC-2026-1472",[170,2999],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[3004,3006],{"type":1320,"score":3005},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1392,"score":2675},[3008,3010,3012,3014,3016,3017,3019,3020],{"type":1335,"url":3009},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1324,"url":3011},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1335,"url":3013},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1329,"url":3015},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1332,"url":2684},{"type":1335,"url":3018},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1332,"url":2690},{"type":1324,"url":3021},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2694],{"id":171,"slug":3024,"dossier":47,"summary":3025,"aliases":3026,"sourceIds":3028,"published":3029,"modified":3030,"checkedAt":7,"severity":3031,"references":3034,"versionKeys":3040,"packageCount":32,"repositoryCount":102},"ghsa-gvp8-978c-rx2q-c33a029f","PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse",[3027],"CVE-2026-103001",[171],"2026-09-30T23:53:17Z","2026-10-01T00:00:04.690126325Z",[3032],{"type":1320,"score":3033},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[3035,3037,3039],{"type":1335,"url":3036},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":1335,"url":3038},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0c87c8c8b1a74cac99ad8115f3050efcb7fbed35",{"type":1332,"url":1431},[1436],{"id":172,"slug":3042,"dossier":47,"summary":3043,"aliases":3044,"sourceIds":3045,"published":3046,"modified":3047,"checkedAt":7,"severity":3048,"references":3049,"versionKeys":3055,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[172],"2024-09-03T21:59:48Z","2026-09-10T03:50:18.241644273Z",[],[3050,3052,3053],{"type":1335,"url":3051},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":1332,"url":1704},{"type":1335,"url":3054},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[1708],{"id":173,"slug":3057,"dossier":47,"summary":3058,"aliases":3059,"sourceIds":3062,"published":3063,"modified":3064,"checkedAt":7,"severity":3065,"references":3068,"versionKeys":3089,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3060,3061],"CVE-2024-34064","PYSEC-2026-1474",[173,3061],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[3066],{"type":1320,"score":3067},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3069,3071,3073,3075,3076,3078,3080,3082,3084,3086,3087],{"type":1335,"url":3070},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1324,"url":3072},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1329,"url":3074},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1332,"url":2684},{"type":1335,"url":3077},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1335,"url":3079},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1335,"url":3081},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1335,"url":3083},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1335,"url":3085},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1332,"url":2690},{"type":1324,"url":3088},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2694],{"id":174,"slug":3091,"dossier":47,"summary":3092,"aliases":3093,"sourceIds":3096,"published":3097,"modified":3098,"checkedAt":7,"severity":3099,"references":3102,"versionKeys":3111,"packageCount":32,"repositoryCount":280},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[3094,3095],"CVE-2026-34513","PYSEC-2026-2095",[174,3095],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[3100,3101],{"type":1392,"score":1535},{"type":1320,"score":1395},[3103,3105,3107,3109,3110],{"type":1329,"url":3104},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1324,"url":3106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1329,"url":3108},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":175,"slug":3113,"dossier":47,"summary":3114,"aliases":3115,"sourceIds":3118,"published":3119,"modified":3120,"checkedAt":7,"severity":3121,"references":3126,"versionKeys":3134,"packageCount":32,"repositoryCount":42},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[3116,3117],"CVE-2026-47265","PYSEC-2026-2105",[175,3117],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[3122,3124],{"type":1392,"score":3123},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1320,"score":3125},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3127,3129,3131,3133],{"type":1329,"url":3128},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1324,"url":3130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1329,"url":3132},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1332,"url":1400},[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":176,"slug":3136,"dossier":47,"summary":3137,"aliases":3138,"sourceIds":3141,"published":3142,"modified":3143,"checkedAt":7,"severity":3144,"references":3149,"versionKeys":3155,"packageCount":32,"repositoryCount":42},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[3139,3140],"CVE-2026-54276","PYSEC-2026-2109",[176,3140],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[3145,3147],{"type":1392,"score":3146},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1320,"score":3148},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3150,3152,3154],{"type":1324,"url":3151},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1329,"url":3153},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1332,"url":1400},[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":177,"slug":3157,"dossier":47,"summary":3158,"aliases":3159,"sourceIds":3161,"published":3162,"modified":3163,"checkedAt":7,"severity":3164,"references":3167,"versionKeys":3176,"packageCount":32,"repositoryCount":320},"ghsa-hxm8-2xgr-2p9m-bfcf1f86","PyJWT: Non-canonical signature segments enable raw-token revocation bypass",[3160],"CVE-2026-102269",[177],"2026-09-29T23:17:55Z","2026-09-29T23:30:03.865434818Z",[3165],{"type":1320,"score":3166},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3168,3170,3172,3174,3175],{"type":1335,"url":3169},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",{"type":1324,"url":3171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102269",{"type":1335,"url":3173},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fe6f48401001609a8f99e71fcaf355fb895d508a8",{"type":1332,"url":1431},{"type":1335,"url":1433},[1435,1436,1437],{"id":178,"slug":3178,"dossier":47,"summary":3179,"aliases":3180,"sourceIds":3183,"published":3184,"modified":3185,"checkedAt":7,"severity":3186,"references":3191,"versionKeys":3212,"packageCount":32,"repositoryCount":42},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[3181,3182],"CVE-2026-34993","PYSEC-2026-2104",[178,3182],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[3187,3189],{"type":1320,"score":3188},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1320,"score":3190},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3192,3194,3196,3198,3199,3201,3203,3205,3207,3209],{"type":1329,"url":3193},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1324,"url":3195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1329,"url":3197},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1332,"url":1400},{"type":1335,"url":3200},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1335,"url":3202},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1324,"url":3204},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1324,"url":3206},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1324,"url":3208},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3210,"url":3211},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":179,"slug":3214,"dossier":47,"summary":3215,"aliases":3216,"sourceIds":3219,"published":3220,"modified":3221,"checkedAt":7,"severity":3222,"references":3224,"versionKeys":3235,"packageCount":32,"repositoryCount":300},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[3217,3218],"CVE-2025-69227","PYSEC-2026-1107",[179,3218],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[3223],{"type":1392,"score":1605},[3225,3227,3229,3231,3232,3233],{"type":1335,"url":3226},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1324,"url":3228},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1335,"url":3230},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":3234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[1404,1405,1406,1407,1408,1409,1410],{"id":180,"slug":3237,"dossier":47,"summary":3238,"aliases":3239,"sourceIds":3242,"published":3243,"modified":3244,"checkedAt":7,"severity":3245,"references":3248,"versionKeys":3256,"packageCount":32,"repositoryCount":280},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[3240,3241],"CVE-2026-54282","PYSEC-2026-248",[180,3241],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[3246,3247],{"type":1320,"score":1987},{"type":1320,"score":1451},[3249,3251,3253,3254],{"type":1324,"url":3250},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":1324,"url":3252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":1332,"url":2131},{"type":1335,"url":3255},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[1378,1379,1380,2138,2139,2140,2220,2221,2222],{"id":181,"slug":3258,"dossier":47,"summary":3259,"aliases":3260,"sourceIds":3263,"published":3264,"modified":3265,"checkedAt":7,"severity":3266,"references":3269,"versionKeys":3288,"packageCount":32,"repositoryCount":250},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[3261,3262],"CVE-2026-52869","PYSEC-2026-3482",[181,3262],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[3267],{"type":1320,"score":3268},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[3270,3272,3274,3276,3278,3280,3282,3283,3285,3286],{"type":1335,"url":3271},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":1324,"url":3273},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":1335,"url":3275},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":1335,"url":3277},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":1335,"url":3279},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":1335,"url":3281},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":1332,"url":2477},{"type":1335,"url":3284},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":1332,"url":2481},{"type":1324,"url":3287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[2483,2484,2485],{"id":182,"slug":3290,"dossier":47,"summary":3291,"aliases":3292,"sourceIds":3295,"published":3296,"modified":3297,"checkedAt":7,"severity":3298,"references":3301,"versionKeys":3309,"packageCount":32,"repositoryCount":250},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[3293,3294],"CVE-2026-48523","PYSEC-2026-176",[182,3294],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[3299],{"type":1320,"score":3300},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3302,3304,3306,3307],{"type":2071,"url":3303},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":1324,"url":3305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":1332,"url":1431},{"type":1335,"url":3308},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[1435,1437],{"id":183,"slug":3311,"dossier":47,"summary":3312,"aliases":3313,"sourceIds":3315,"published":3316,"modified":3317,"checkedAt":7,"severity":3318,"references":3321,"versionKeys":3329,"packageCount":32,"repositoryCount":320},"ghsa-jwrc-g2q2-pq5p-dfb984e1","PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.",[3314],"CVE-2026-102270",[183],"2026-09-30T14:40:25Z","2026-09-30T14:45:04.897791001Z",[3319],{"type":1320,"score":3320},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3322,3324,3326,3327,3328],{"type":1335,"url":3323},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",{"type":1324,"url":3325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102270",{"type":1335,"url":2768},{"type":1332,"url":1431},{"type":1335,"url":1433},[1435,1436,1437],{"id":184,"slug":3331,"dossier":47,"summary":3332,"aliases":3333,"sourceIds":3336,"published":3337,"modified":3338,"checkedAt":7,"severity":3339,"references":3341,"versionKeys":3358,"packageCount":32,"repositoryCount":1714},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[3334,3335],"CVE-2026-69249","PYSEC-2026-3553",[184,3335],"2026-08-03T21:26:50Z","2026-09-24T14:45:10.238420831Z",[3340],{"type":1392,"score":1785},[3342,3344,3346,3348,3350,3352,3353,3355,3356],{"type":1335,"url":3343},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":1324,"url":3345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",{"type":1335,"url":3347},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":1335,"url":3349},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F3763aa79b",{"type":1335,"url":3351},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":1332,"url":1704},{"type":1335,"url":3354},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-3553.yaml",{"type":1332,"url":2105},{"type":1324,"url":3357},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",[1708,1709,1710,1711,1712,1713],{"id":185,"slug":3360,"dossier":47,"summary":3361,"aliases":3362,"sourceIds":3365,"published":3366,"modified":3367,"checkedAt":7,"severity":3368,"references":3371,"versionKeys":3388,"packageCount":32,"repositoryCount":1714},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[3363,3364],"CVE-2026-69248","PYSEC-2026-3554",[185,3364],"2026-08-03T21:26:57Z","2026-09-24T15:00:04.719975807Z",[3369],{"type":1392,"score":3370},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3372,3374,3376,3378,3380,3382,3383,3385,3386],{"type":1335,"url":3373},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":1324,"url":3375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",{"type":1335,"url":3377},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":1335,"url":3379},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F286c89128",{"type":1335,"url":3381},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":1332,"url":1704},{"type":1335,"url":3384},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-3554.yaml",{"type":1332,"url":2105},{"type":1324,"url":3387},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",[1708,1709,1710,1711,1712,1713],{"id":186,"slug":3390,"dossier":47,"summary":3391,"aliases":3392,"sourceIds":3395,"published":3396,"modified":3397,"checkedAt":7,"severity":3398,"references":3403,"versionKeys":3412,"packageCount":32,"repositoryCount":280},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[3393,3394],"CVE-2026-34516","PYSEC-2026-2098",[186,3394],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[3399,3400,3401],{"type":1320,"score":1395},{"type":1392,"score":1605},{"type":1392,"score":3402},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3404,3406,3408,3410,3411],{"type":1329,"url":3405},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1324,"url":3407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1329,"url":3409},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":187,"slug":3414,"dossier":47,"summary":3415,"aliases":3416,"sourceIds":3419,"published":3420,"modified":3421,"checkedAt":7,"severity":3422,"references":3425,"versionKeys":3431,"packageCount":32,"repositoryCount":42},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[3417,3418],"CVE-2026-50269","PYSEC-2026-2106",[187,3418],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[3423,3424],{"type":1392,"score":1449},{"type":1320,"score":1395},[3426,3428,3430],{"type":1324,"url":3427},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1329,"url":3429},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1332,"url":1400},[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":188,"slug":3433,"dossier":47,"summary":3434,"aliases":3435,"sourceIds":3438,"published":3439,"modified":3440,"checkedAt":7,"severity":3441,"references":3445,"versionKeys":3453,"packageCount":32,"repositoryCount":1714},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[3436,3437],"CVE-2026-34073","PYSEC-2026-35",[188,3437],"2026-03-27T19:56:21Z","2026-09-10T03:51:00.592317622Z",[3442,3443],{"type":1320,"score":1451},{"type":1392,"score":3444},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3446,3448,3450,3451],{"type":1324,"url":3447},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":1324,"url":3449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":1332,"url":1704},{"type":1335,"url":3452},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[1708,1709,1710,1711,1712,1713],{"id":189,"slug":3455,"dossier":47,"summary":3456,"aliases":3457,"sourceIds":3460,"published":3461,"modified":3462,"checkedAt":7,"severity":3463,"references":3466,"versionKeys":3474,"packageCount":32,"repositoryCount":250},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[3458,3459],"CVE-2026-44432","PYSEC-2026-142",[189,3459],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[3464,3465],{"type":1320,"score":1395},{"type":1392,"score":1474},[3467,3469,3471,3473],{"type":1324,"url":3468},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1324,"url":3470},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1335,"url":3472},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1332,"url":1489},[2300],{"id":190,"slug":3476,"dossier":47,"summary":3477,"aliases":3478,"sourceIds":3481,"published":3482,"modified":3483,"checkedAt":7,"severity":3484,"references":3487,"versionKeys":3500,"packageCount":32,"repositoryCount":2725},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[3479,3480],"CVE-2026-28684","PYSEC-2026-2270",[190,3480],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[3485],{"type":1320,"score":3486},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3488,3490,3492,3494,3496,3498],{"type":1329,"url":3489},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1324,"url":3491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1329,"url":3493},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1335,"url":3495},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1332,"url":3497},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1324,"url":3499},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[3501,3502,3503,3504],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":191,"slug":3506,"dossier":47,"summary":3507,"aliases":3508,"sourceIds":3511,"published":3512,"modified":3513,"checkedAt":7,"severity":3514,"references":3517,"versionKeys":3532,"packageCount":32,"repositoryCount":2725},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[3509,3510],"CVE-2026-69243","PYSEC-2026-3546",[191,3510],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[3515],{"type":1392,"score":3516},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3518,3520,3522,3524,3525,3527,3528,3530],{"type":1335,"url":3519},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1335,"url":3521},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":1335,"url":3523},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":1332,"url":1400},{"type":1335,"url":3526},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":1332,"url":1736},{"type":1324,"url":3529},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1324,"url":3531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[1404,1405,1406,1407,1408,1409,1410,1411,1412,2724],{"id":192,"slug":3534,"dossier":47,"summary":3535,"aliases":3536,"sourceIds":3539,"published":3540,"modified":3541,"checkedAt":7,"severity":3542,"references":3544,"versionKeys":3555,"packageCount":32,"repositoryCount":2141},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[3537,3538],"CVE-2026-40347","PYSEC-2026-3038",[192,3538],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[3543],{"type":1320,"score":1359},[3545,3547,3549,3550,3552,3553],{"type":1335,"url":3546},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":1324,"url":3548},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":1332,"url":1794},{"type":1335,"url":3551},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":1332,"url":1796},{"type":1324,"url":3554},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[1853,1854,1800],{"id":193,"slug":3557,"dossier":47,"summary":3558,"aliases":3559,"sourceIds":3562,"published":3563,"modified":3564,"checkedAt":7,"severity":3565,"references":3567,"versionKeys":3580,"packageCount":32,"repositoryCount":2725},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[3560,3561],"CVE-2026-59881","PYSEC-2026-3547",[193,3561],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[3566],{"type":1392,"score":1914},[3568,3570,3572,3574,3576,3577,3578],{"type":1335,"url":3569},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":1324,"url":3571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":1335,"url":3573},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":1335,"url":3575},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":3579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[1404,1405,1406,1407,1408,1409,1410,1411,1412,2724],{"id":194,"slug":3582,"dossier":47,"summary":3583,"aliases":3584,"sourceIds":3587,"published":3588,"modified":3589,"checkedAt":7,"severity":3590,"references":3592,"versionKeys":3603,"packageCount":32,"repositoryCount":300},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[3585,3586],"CVE-2025-69225","PYSEC-2026-1109",[194,3586],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[3591],{"type":1392,"score":1449},[3593,3595,3597,3599,3600,3601],{"type":1335,"url":3594},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1324,"url":3596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1329,"url":3598},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1332,"url":1400},{"type":1332,"url":1736},{"type":1324,"url":3602},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[1404,1405,1406,1407,1408,1409,1410],{"id":195,"slug":3605,"dossier":47,"summary":3606,"aliases":3607,"sourceIds":3610,"published":3611,"modified":3612,"checkedAt":7,"severity":3613,"references":3616,"versionKeys":3625,"packageCount":32,"repositoryCount":280},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[3608,3609],"CVE-2026-34519","PYSEC-2026-2101",[195,3609],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[3614,3615],{"type":1392,"score":1449},{"type":1320,"score":1451},[3617,3619,3621,3623,3624],{"type":1329,"url":3618},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1324,"url":3620},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1329,"url":3622},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":196,"slug":3627,"dossier":47,"summary":3628,"aliases":3629,"sourceIds":3632,"published":3633,"modified":3634,"checkedAt":7,"severity":3635,"references":3639,"versionKeys":3647,"packageCount":32,"repositoryCount":250},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[3630,3631],"CVE-2026-39892","PYSEC-2026-36",[196,3631],"2026-04-08T19:23:08Z","2026-09-10T03:50:44.766981051Z",[3636,3637],{"type":1392,"score":1914},{"type":1320,"score":3638},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3640,3642,3644,3645],{"type":1324,"url":3641},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":1324,"url":3643},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":1332,"url":1704},{"type":1335,"url":3646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[1712,1713],{"id":197,"slug":3649,"dossier":47,"summary":3650,"aliases":3651,"sourceIds":3653,"published":3654,"modified":3655,"checkedAt":7,"severity":3656,"references":3658,"versionKeys":3667,"packageCount":32,"repositoryCount":320},"ghsa-p4g4-x82p-q773-9c537199","PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard",[3652],"CVE-2026-102271",[197],"2026-09-29T23:14:33Z","2026-09-29T23:30:03.853857825Z",[3657],{"type":1320,"score":2558},[3659,3661,3663,3665,3666],{"type":1335,"url":3660},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",{"type":1324,"url":3662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102271",{"type":1335,"url":3664},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F2798504fa2663364573cf2d1043d8d7fef389499",{"type":1332,"url":1431},{"type":1335,"url":1433},[1435,1436,1437],{"id":198,"slug":3669,"dossier":47,"summary":3670,"aliases":3671,"sourceIds":3674,"published":3675,"modified":3676,"checkedAt":7,"severity":3677,"references":3680,"versionKeys":3689,"packageCount":32,"repositoryCount":280},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[3672,3673],"CVE-2026-34515","PYSEC-2026-2097",[198,3673],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[3678,3679],{"type":1392,"score":3123},{"type":1320,"score":3125},[3681,3683,3685,3687,3688],{"type":1329,"url":3682},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1324,"url":3684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1329,"url":3686},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":199,"slug":3691,"dossier":47,"summary":3692,"aliases":3693,"sourceIds":3696,"published":3697,"modified":3698,"checkedAt":7,"severity":3699,"references":3701,"versionKeys":3710,"packageCount":32,"repositoryCount":2141},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[3694,3695],"CVE-2026-42561","PYSEC-2026-3039",[199,3695],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[3700],{"type":1320,"score":1395},[3702,3704,3706,3707,3708],{"type":1335,"url":3703},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":1324,"url":3705},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":1332,"url":1794},{"type":1332,"url":1796},{"type":1324,"url":3709},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[1853,1854,1800],{"id":200,"slug":3712,"dossier":47,"summary":3713,"aliases":3714,"sourceIds":3717,"published":3718,"modified":3719,"checkedAt":7,"severity":3720,"references":3722,"versionKeys":3734,"packageCount":32,"repositoryCount":300},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3715,3716],"CVE-2025-50181","PYSEC-2026-1999",[200,3716],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[3721],{"type":1320,"score":1579},[3723,3725,3727,3729,3730,3731,3732],{"type":1335,"url":3724},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1324,"url":3726},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1329,"url":3728},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1332,"url":1489},{"type":1335,"url":1589},{"type":1332,"url":1491},{"type":1324,"url":3733},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1493,1494,1495,1496],{"id":201,"slug":3736,"dossier":47,"summary":3737,"aliases":3738,"sourceIds":3741,"published":3742,"modified":3743,"checkedAt":7,"severity":3744,"references":3748,"versionKeys":3761,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[3739,3740],"CVE-2024-56326","PYSEC-2026-1475",[201,3740],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[3745,3747],{"type":1320,"score":3746},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1392,"score":2675},[3749,3751,3753,3755,3756,3757,3758,3759],{"type":1335,"url":3750},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1324,"url":3752},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1329,"url":3754},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1332,"url":2684},{"type":1335,"url":3018},{"type":1335,"url":2686},{"type":1332,"url":2690},{"type":1324,"url":3760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2694],{"id":202,"slug":3763,"dossier":90,"summary":3764,"aliases":3765,"sourceIds":3768,"published":3769,"modified":3770,"checkedAt":7,"severity":3771,"references":3774,"versionKeys":3780,"packageCount":32,"repositoryCount":2950},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[3766,3767],"CVE-2026-44431","PYSEC-2026-141",[202,3767],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[3772,3773],{"type":1320,"score":2421},{"type":1392,"score":2849},[3775,3777,3779],{"type":1324,"url":3776},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1324,"url":3778},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1332,"url":1489},[1493,1494,1495,1496,1497,2300],{"id":203,"slug":3782,"dossier":47,"summary":3783,"aliases":3784,"sourceIds":3787,"published":3788,"modified":3789,"checkedAt":7,"severity":3790,"references":3793,"versionKeys":3808,"packageCount":32,"repositoryCount":2182},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[3785,3786],"CVE-2026-22701","PYSEC-2026-1374",[203,3786],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[3791],{"type":1320,"score":3792},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3794,3796,3798,3800,3802,3804,3806],{"type":1335,"url":3795},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1324,"url":3797},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1335,"url":3799},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1335,"url":3801},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1332,"url":3803},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1332,"url":3805},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1324,"url":3807},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[3809,3810,3811,3812],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":204,"slug":3814,"dossier":47,"summary":3815,"aliases":3816,"sourceIds":3819,"published":3820,"modified":3821,"checkedAt":7,"severity":3822,"references":3827,"versionKeys":3867,"packageCount":32,"repositoryCount":1714},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[3817,3818],"CVE-2026-26007","PYSEC-2026-2141",[204,3818],"2026-02-10T21:27:06Z","2026-09-10T03:50:59.750965345Z",[3823,3825],{"type":1392,"score":3824},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":1320,"score":3826},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3828,3830,3832,3834,3835,3837,3839,3841,3843,3845,3847,3849,3851,3853,3855,3857,3859,3861,3863,3865],{"type":1335,"url":3829},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":1324,"url":3831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":1335,"url":3833},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":1332,"url":1704},{"type":1335,"url":3836},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":1335,"url":3838},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":1335,"url":3840},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":1324,"url":3842},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1324,"url":3844},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":1324,"url":3846},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":1324,"url":3848},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":1324,"url":3850},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":1324,"url":3852},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":1324,"url":3854},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":1324,"url":3856},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":1324,"url":3858},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":1324,"url":3860},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":1324,"url":3862},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":1324,"url":3864},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":1324,"url":3866},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1708,1709,1710,1711,1712,1713],{"id":205,"slug":3869,"dossier":47,"summary":3870,"aliases":3871,"sourceIds":3873,"published":3874,"modified":3875,"checkedAt":7,"severity":3876,"references":3878,"versionKeys":3887,"packageCount":32,"repositoryCount":102},"ghsa-r6x4-923q-g947-b796420c","PyJWT BOM Bypass",[3872],"CVE-2026-102272",[205],"2026-09-29T23:14:00Z","2026-09-29T23:30:03.855539261Z",[3877],{"type":1320,"score":2558},[3879,3881,3883,3885,3886],{"type":1335,"url":3880},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-r6x4-923q-g947",{"type":1324,"url":3882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102272",{"type":1335,"url":3884},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F180783930de91876bc0d601f826a1f2956057291",{"type":1332,"url":1431},{"type":1335,"url":1433},[1436],{"id":206,"slug":3889,"dossier":47,"summary":3890,"aliases":3891,"sourceIds":3894,"published":3895,"modified":3896,"checkedAt":7,"severity":3897,"references":3899,"versionKeys":3908,"packageCount":32,"repositoryCount":1714},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[3892,3893],"CVE-2026-53540","PYSEC-2026-3040",[206,3893],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[3898],{"type":1320,"score":2807},[3900,3902,3903,3904,3906],{"type":1335,"url":3901},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1332,"url":1794},{"type":1332,"url":1796},{"type":1324,"url":3905},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1324,"url":3907},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[1853,1854,1855,1800],{"id":207,"slug":3910,"dossier":47,"summary":3911,"aliases":3912,"sourceIds":3915,"published":3916,"modified":3917,"checkedAt":7,"severity":3918,"references":3920,"versionKeys":3931,"packageCount":32,"repositoryCount":1714},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[3913,3914],"CVE-2026-53537","PYSEC-2026-3041",[207,3914],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[3919],{"type":1320,"score":1987},[3921,3923,3925,3926,3928,3930],{"type":1335,"url":3922},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1324,"url":3924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":1332,"url":1794},{"type":1324,"url":3927},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1335,"url":3929},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":1332,"url":1796},[1853,1854,1855,1800],{"id":208,"slug":3933,"dossier":47,"summary":3934,"aliases":3935,"sourceIds":3938,"published":3939,"modified":3940,"checkedAt":7,"severity":3941,"references":3943,"versionKeys":3958,"packageCount":32,"repositoryCount":250},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[3936,3937],"CVE-2026-59950","PYSEC-2026-3483",[208,3937],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[3942],{"type":1392,"score":2284},[3944,3946,3948,3950,3952,3953,3955,3956],{"type":1335,"url":3945},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":1324,"url":3947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":1335,"url":3949},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":1335,"url":3951},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":1332,"url":2477},{"type":1335,"url":3954},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":1332,"url":2481},{"type":1324,"url":3957},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[2483,2484,2485],{"id":209,"slug":3960,"dossier":47,"summary":3961,"aliases":3962,"sourceIds":3965,"published":3966,"modified":3967,"checkedAt":7,"severity":3968,"references":3970,"versionKeys":3983,"packageCount":32,"repositoryCount":250},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[3963,3964],"CVE-2025-43859","PYSEC-2026-348",[209,3964],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[3969],{"type":1320,"score":2761},[3971,3973,3975,3977,3979,3981],{"type":1335,"url":3972},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1324,"url":3974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1335,"url":3976},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1332,"url":3978},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1332,"url":3980},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1324,"url":3982},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[3984],"pypi:h11@0.14.0",{"id":210,"slug":3986,"dossier":90,"summary":3987,"aliases":3988,"sourceIds":3990,"published":3991,"modified":3992,"checkedAt":7,"severity":3993,"references":3995,"versionKeys":4004,"packageCount":32,"repositoryCount":2302},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[3989],"CVE-2026-97689",[210],"2026-09-30T14:46:18Z","2026-09-30T15:00:05.904945330Z",[3994],{"type":1392,"score":1474},[3996,3998,4000,4002,4003],{"type":1335,"url":3997},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":1324,"url":3999},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":1335,"url":4001},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":1332,"url":1489},{"type":1335,"url":2298},[1493,1494,1495,1496,1497,2300,2301],{"id":211,"slug":4006,"dossier":47,"summary":4007,"aliases":4008,"sourceIds":4010,"published":4011,"modified":4012,"checkedAt":7,"severity":4013,"references":4015,"versionKeys":4024,"packageCount":32,"repositoryCount":102},"ghsa-w2cx-738m-mc7w-6741b272","PyJWT accepts public JWK containers as HMAC secrets",[4009],"CVE-2026-102273",[211],"2026-09-29T23:16:55Z","2026-09-29T23:30:03.873701729Z",[4014],{"type":1320,"score":2558},[4016,4018,4020,4022,4023],{"type":1335,"url":4017},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",{"type":1324,"url":4019},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102273",{"type":1335,"url":4021},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F801cd128528c62d9b23fcd161d1a2e1c17982f95",{"type":1332,"url":1431},{"type":1335,"url":1433},[1436],{"id":212,"slug":4026,"dossier":47,"summary":4027,"aliases":4028,"sourceIds":4031,"published":4032,"modified":4033,"checkedAt":7,"severity":4034,"references":4038,"versionKeys":4047,"packageCount":32,"repositoryCount":280},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[4029,4030],"CVE-2026-22815","PYSEC-2026-2094",[212,4030],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[4035,4036],{"type":1392,"score":1914},{"type":1392,"score":4037},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4039,4041,4043,4045,4046],{"type":1329,"url":4040},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1324,"url":4042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1329,"url":4044},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1332,"url":1400},{"type":1324,"url":1461},[1404,1405,1406,1407,1408,1409,1410,1411],{"id":213,"slug":4049,"dossier":47,"summary":4050,"aliases":4051,"sourceIds":4053,"published":4054,"modified":4055,"checkedAt":7,"severity":4056,"references":4059,"versionKeys":4068,"packageCount":32,"repositoryCount":320},"ghsa-w6j9-cwv2-h6wq-1e6b5139","PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set",[4052],"CVE-2026-102274",[213],"2026-09-29T18:23:01Z","2026-09-29T18:30:41.171809330Z",[4057],{"type":1320,"score":4058},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4060,4062,4064,4066,4067],{"type":1335,"url":4061},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",{"type":1324,"url":4063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102274",{"type":1335,"url":4065},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",{"type":1332,"url":1431},{"type":1335,"url":1433},[1435,1436,1437],{"id":214,"slug":4070,"dossier":47,"summary":4071,"aliases":4072,"sourceIds":4075,"published":4076,"modified":4077,"checkedAt":7,"severity":4078,"references":4080,"versionKeys":4088,"packageCount":32,"repositoryCount":250},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[4073,4074],"CVE-2026-48525","PYSEC-2026-178",[214,4074],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[4079],{"type":1320,"score":1359},[4081,4083,4085,4086],{"type":2071,"url":4082},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":1324,"url":4084},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":1332,"url":1431},{"type":1335,"url":4087},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[1435,1437],{"id":215,"slug":4090,"dossier":47,"summary":4091,"aliases":4092,"sourceIds":4095,"published":4096,"modified":4097,"checkedAt":7,"severity":4098,"references":4101,"versionKeys":4118,"packageCount":32,"repositoryCount":2182},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[4093,4094],"CVE-2025-68146","PYSEC-2026-1375",[215,4094],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[4099],{"type":1320,"score":4100},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4102,4104,4106,4107,4109,4111,4113,4114,4116],{"type":1335,"url":4103},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1335,"url":4105},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1332,"url":3803},{"type":1335,"url":4108},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1335,"url":4110},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1335,"url":4112},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1332,"url":3805},{"type":1324,"url":4115},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1324,"url":4117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[3809,3810,3811,3812],{"id":216,"slug":4120,"dossier":47,"summary":4121,"aliases":4122,"sourceIds":4125,"published":4126,"modified":4127,"checkedAt":7,"severity":4128,"references":4131,"versionKeys":4144,"packageCount":32,"repositoryCount":2141},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[4123,4124],"CVE-2026-24486","PYSEC-2026-1852",[216,4124],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[4129],{"type":1320,"score":4130},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[4132,4134,4136,4138,4139,4141,4142],{"type":1335,"url":4133},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":1324,"url":4135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":1335,"url":4137},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":1332,"url":1794},{"type":1335,"url":4140},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":1332,"url":1796},{"type":1324,"url":4143},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[1853,1854,1800],{"id":217,"slug":4146,"dossier":47,"summary":4147,"aliases":4148,"sourceIds":4151,"published":4152,"modified":4153,"checkedAt":7,"severity":4154,"references":4156,"versionKeys":4178,"packageCount":32,"repositoryCount":280},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[4149,4150],"CVE-2026-48818","PYSEC-2026-2281",[217,4150],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[4155],{"type":1320,"score":3125},[4157,4159,4160,4162,4164,4166,4168,4170,4172,4174,4176],{"type":1324,"url":4158},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":1332,"url":2131},{"type":1335,"url":4161},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":1335,"url":4163},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":1324,"url":4165},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":1324,"url":4167},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":1324,"url":4169},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":1324,"url":4171},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3210,"url":4173},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":1329,"url":4175},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":1329,"url":4177},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[1378,1379,1380,2138,2139,2140,2220,2221,2222],{"id":218,"slug":4180,"dossier":47,"summary":4181,"aliases":4182,"sourceIds":4185,"published":4186,"modified":4187,"checkedAt":7,"severity":4188,"references":4190,"versionKeys":4197,"packageCount":32,"repositoryCount":280},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[4183,4184],"CVE-2026-48817","PYSEC-2026-2280",[218,4184],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[4189],{"type":1320,"score":1451},[4191,4193,4195,4196],{"type":1324,"url":4192},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":1324,"url":4194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":1332,"url":2131},{"type":1324,"url":4171},[1378,1379,1380,2138,2139,2140,2220,2221,2222],{"id":219,"slug":4199,"dossier":47,"summary":4200,"aliases":4201,"sourceIds":4204,"published":4205,"modified":4206,"checkedAt":7,"severity":4207,"references":4210,"versionKeys":4216,"packageCount":32,"repositoryCount":42},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[4202,4203],"CVE-2026-54274","PYSEC-2026-2108",[219,4203],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[4208,4209],{"type":1392,"score":1605},{"type":1320,"score":1395},[4211,4213,4214],{"type":1324,"url":4212},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1332,"url":1400},{"type":1329,"url":4215},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[1404,1405,1406,1407,1408,1409,1410,1411,1412],{"id":220,"slug":4218,"dossier":47,"summary":4219,"aliases":4220,"sourceIds":4223,"published":4224,"modified":4225,"checkedAt":7,"severity":4226,"references":4228,"versionKeys":4236,"packageCount":32,"repositoryCount":250},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[4221,4222],"CVE-2026-48526","PYSEC-2026-179",[220,4222],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[4227],{"type":1320,"score":2558},[4229,4231,4233,4234],{"type":2071,"url":4230},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":1324,"url":4232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":1332,"url":1431},{"type":1335,"url":4235},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[1435,1437],{"id":221,"slug":4238,"dossier":47,"summary":257,"aliases":4239,"sourceIds":4241,"published":4242,"modified":4243,"checkedAt":7,"severity":4244,"references":4247,"versionKeys":4253,"packageCount":32,"repositoryCount":250},"pysec-2025-183-08217171",[4240],"CVE-2025-45768",[221],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[4245],{"type":1320,"score":4246},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[4248,4250,4252],{"type":1335,"url":4249},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3210,"url":4251},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":1332,"url":1431},[1435,1437],{"id":222,"slug":4255,"dossier":90,"summary":257,"aliases":4256,"sourceIds":4259,"published":4260,"modified":4261,"checkedAt":7,"severity":4262,"references":4265,"versionKeys":4280,"packageCount":32,"repositoryCount":4287},"pysec-2026-2132-627bf7c7",[4257,4258],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[222],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[4263],{"type":1320,"score":4264},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4266,4268,4270,4272,4274,4276,4278],{"type":1335,"url":4267},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1335,"url":4269},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1324,"url":4271},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1324,"url":4273},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3210,"url":4275},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1329,"url":4277},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2071,"url":4279},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[4281,4282,4283,4284,4285,4286],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",17,{"id":223,"slug":4289,"dossier":47,"summary":4290,"aliases":4291,"sourceIds":4294,"published":4295,"modified":4296,"checkedAt":7,"severity":4297,"references":4300,"versionKeys":4311,"packageCount":32,"repositoryCount":66},"pysec-2026-4013-c111658c","virtualenv bash and fish activation scripts execute commands embedded in paths",[4292,4293],"CVE-2026-102925","GHSA-p58f-9548-mpm2",[223],"2026-09-18T04:37:14Z","2026-09-30T16:45:02.556138982Z",[4298],{"type":1320,"score":4299},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4301,4303,4305,4307,4309,4310],{"type":1335,"url":4302},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-p58f-9548-mpm2",{"type":1335,"url":4304},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3252",{"type":1329,"url":4306},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",{"type":1335,"url":4308},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.13",{"type":1332,"url":1763},{"type":1332,"url":1765},[1769,1770,1771,1772,2383,2384,2385],{"id":224,"slug":4313,"dossier":47,"summary":4314,"aliases":4315,"sourceIds":4318,"published":2362,"modified":4319,"checkedAt":7,"severity":4320,"references":4321,"versionKeys":4331,"packageCount":32,"repositoryCount":66},"pysec-2026-4014-0a5c8171","Command injection via --prompt in activate.bat (batch activator)",[4316,4317],"CVE-2026-102937","GHSA-x78j-v8h9-3j2q",[224],"2026-09-30T16:45:02.570148666Z",[],[4322,4324,4326,4328,4329,4330],{"type":1335,"url":4323},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-x78j-v8h9-3j2q",{"type":1335,"url":4325},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3250",{"type":1329,"url":4327},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd721ff140ce4afdc2a9b76751e4584e25d9fbea6",{"type":1335,"url":2380},{"type":1332,"url":1763},{"type":1332,"url":1765},[1769,1770,1771,1772,2383,2384,2385],1790836218671]