[{"data":1,"prerenderedAt":2880},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-9998":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":188,"related":191},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":38,"packageCount":100,"ecosystems":101,"aiPackageCount":32,"licenseExpressionCount":103,"unknownLicensePackageCount":38,"advisoryIds":104,"advisoryCount":186,"providers":187},"opencode:9998","opencode-9998",9998,"density-maps","uba-ki-lab\u002Fdensity-maps","A minimal library for Gaussian density map workflows with PyTorch and albumentations. Keywords: uba, umweltbundesamt, ki-lab, computer vision, object counting","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdensity-maps","1da30304236d86dfb376a429b1ea6e9fddba3a0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdensity-maps\u002F-\u002Fcommit\u002F1da30304236d86dfb376a429b1ea6e9fddba3a0a","2026-03-20T12:17:58.583Z","2026-03-20T09:58:21.000Z",{"complete":91,"entryCount":36,"truncated":46},true,[93],{"path":55,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":86,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","fa64e230fe01c25e6d465e090acbed3d4d86a694","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdensity-maps\u002F-\u002Fblob\u002F1da30304236d86dfb376a429b1ea6e9fddba3a0a\u002Fuv.lock","a3585500d962f78bc6cb14fec81c1117e03be3b4ca8961149d10c8a44c3682ed",357047,"parsed",66,[102],"pypi",13,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185],"GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-3749-ghw9-m3mg","GHSA-3wq7-rqq7-wx6j","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-5rjg-fvgr-3xxf","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-6jhg-hg63-jvvf","GHSA-6mq8-rvhq-8wgg","GHSA-6w46-j5rx-g56g","GHSA-887c-mr87-cxwp","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fh55-r93g-j68g","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gmj6-6f8f-6699","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-r73j-pqj5-w3x7","GHSA-rrmf-rvhw-rf47","GHSA-vgrw-7cvw-pwgx","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-x3gm-94wq-g975","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2026-139","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-2286","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",81,[],{"files":189,"occurrenceCount":100},[190],{"path":55,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":86,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":192,"vulnerabilities":800},[193,205,216,228,238,249,260,269,279,288,298,308,317,326,335,344,353,362,371,380,389,398,407,416,424,433,442,451,460,469,479,488,497,506,514,523,532,541,550,559,568,577,586,594,603,611,620,630,639,648,657,666,675,683,692,701,710,719,728,737,746,755,764,773,782,791],{"id":194,"slug":195,"identity":196,"label":197,"aiRelevant":91,"provider":198,"advisoryCount":199,"licenseExpressions":200,"versions":202,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":204},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[201],"BSD-3-Clause",[203],"2.10.0",[55],{"id":206,"slug":207,"identity":208,"label":209,"aiRelevant":46,"provider":198,"advisoryCount":30,"licenseExpressions":210,"versions":213,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":215},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[211,212],"Apache-2.0","Apache-2.0 AND MIT",[214],"3.13.3",[55],{"id":217,"slug":218,"identity":219,"label":220,"aiRelevant":46,"provider":198,"advisoryCount":221,"licenseExpressions":222,"versions":225,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":227},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[223,224],"HPND","MIT-CMU",[226],"12.1.1",[55],{"id":229,"slug":230,"identity":231,"label":232,"aiRelevant":46,"provider":198,"advisoryCount":34,"licenseExpressions":233,"versions":235,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":237},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[201,234],"non-standard",[236],"3.1.6",[55],{"id":239,"slug":240,"identity":241,"label":242,"aiRelevant":46,"provider":198,"advisoryCount":243,"licenseExpressions":244,"versions":246,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":248},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",3,[245],"MIT",[247],"82.0.1",[55],{"id":250,"slug":251,"identity":252,"label":253,"aiRelevant":46,"provider":198,"advisoryCount":254,"licenseExpressions":255,"versions":257,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":259},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[245,256],"Unlicense",[258],"3.25.2",[55],{"id":261,"slug":262,"identity":263,"label":264,"aiRelevant":46,"provider":198,"advisoryCount":32,"licenseExpressions":265,"versions":266,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":268},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[201,234],[267],"3.11",[55],{"id":270,"slug":271,"identity":272,"label":273,"aiRelevant":46,"provider":198,"advisoryCount":32,"licenseExpressions":274,"versions":276,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":278},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[275],"BSD-2-Clause",[277],"2.19.2",[55],{"id":280,"slug":281,"identity":282,"label":283,"aiRelevant":46,"provider":198,"advisoryCount":32,"licenseExpressions":284,"versions":285,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":287},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[245],[286],"9.0.2",[55],{"id":289,"slug":290,"identity":291,"label":292,"aiRelevant":46,"provider":198,"advisoryCount":32,"licenseExpressions":293,"versions":295,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":297},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[294],"MIT AND MPL-2.0",[296],"4.67.3",[55],{"id":299,"slug":300,"identity":301,"label":302,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":303,"versions":305,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":307},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[304],"PSF-2.0",[306],"2.6.1",[55],{"id":309,"slug":310,"identity":311,"label":312,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":313,"versions":314,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":316},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[211],[315],"1.4.0",[55],{"id":318,"slug":319,"identity":320,"label":321,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":322,"versions":323,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":325},"package:pypi:albucore","albucore-2d92e9fa","pypi:albucore","albucore",[234],[324],"0.0.24",[55],{"id":327,"slug":328,"identity":329,"label":330,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":331,"versions":332,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":334},"package:pypi:albumentations","albumentations-d333cb03","pypi:albumentations","albumentations",[234],[333],"2.0.8",[55],{"id":336,"slug":337,"identity":338,"label":339,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":340,"versions":341,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":343},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[245],[342],"0.7.0",[55],{"id":345,"slug":346,"identity":347,"label":348,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":349,"versions":350,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":352},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[245],[351],"25.4.0",[55],{"id":354,"slug":355,"identity":356,"label":357,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":358,"versions":359,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":361},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[234],[360],"0.4.6",[55],{"id":363,"slug":364,"identity":365,"label":366,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":367,"versions":368,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":370},"package:pypi:coverage","coverage-7ba89558","pypi:coverage","coverage",[211],[369],"7.13.4",[55],{"id":372,"slug":373,"identity":374,"label":375,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":376,"versions":377,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":379},"package:pypi:cuda-bindings","cuda-bindings-63e94baa","pypi:cuda-bindings","cuda-bindings",[234],[378],"12.9.4",[55],{"id":381,"slug":382,"identity":383,"label":384,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":385,"versions":386,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":388},"package:pypi:cuda-pathfinder","cuda-pathfinder-6d2ddb13","pypi:cuda-pathfinder","cuda-pathfinder",[211],[387],"1.4.2",[55],{"id":390,"slug":391,"identity":392,"label":393,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":394,"versions":395,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":397},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[211],[396],"1.8.0",[55],{"id":399,"slug":400,"identity":401,"label":402,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":403,"versions":404,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":406},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[201,234],[405],"2026.2.0",[55],{"id":408,"slug":409,"identity":410,"label":411,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":412,"versions":413,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":415},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[245],[414],"2.3.0",[55],{"id":417,"slug":418,"identity":419,"label":420,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":421,"versions":422,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":423},"package:pypi:lightning","lightning-28a5cccb","pypi:lightning","lightning",[211],[306],[55],{"id":425,"slug":426,"identity":427,"label":428,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":429,"versions":430,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":432},"package:pypi:lightning-utilities","lightning-utilities-46646cd2","pypi:lightning-utilities","lightning-utilities",[211],[431],"0.15.3",[55],{"id":434,"slug":435,"identity":436,"label":437,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":438,"versions":439,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":441},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[201,234],[440],"3.0.3",[55],{"id":443,"slug":444,"identity":445,"label":446,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":447,"versions":448,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":450},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[234],[449],"1.3.0",[55],{"id":452,"slug":453,"identity":454,"label":455,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":456,"versions":457,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":459},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[211],[458],"6.7.1",[55],{"id":461,"slug":462,"identity":463,"label":464,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":465,"versions":466,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":468},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[201,234],[467],"3.6.1",[55],{"id":470,"slug":471,"identity":472,"label":473,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":474,"versions":476,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":478},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[475,234],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[477],"2.4.3",[55],{"id":480,"slug":481,"identity":482,"label":483,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":484,"versions":485,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":487},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[234],[486],"12.8.4.1",[55],{"id":489,"slug":490,"identity":491,"label":492,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":493,"versions":494,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":496},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[234],[495],"12.8.90",[55],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":502,"versions":503,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":505},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[234],[504],"12.8.93",[55],{"id":507,"slug":508,"identity":509,"label":510,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":511,"versions":512,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":513},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[234],[495],[55],{"id":515,"slug":516,"identity":517,"label":518,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":519,"versions":520,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":522},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[234],[521],"9.10.2.21",[55],{"id":524,"slug":525,"identity":526,"label":527,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":528,"versions":529,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":531},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[234],[530],"11.3.3.83",[55],{"id":533,"slug":534,"identity":535,"label":536,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":537,"versions":538,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":540},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[234],[539],"1.13.1.3",[55],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":546,"versions":547,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":549},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[234],[548],"10.3.9.90",[55],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":555,"versions":556,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":558},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[234],[557],"11.7.3.90",[55],{"id":560,"slug":561,"identity":562,"label":563,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":564,"versions":565,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":567},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[234],[566],"12.5.8.93",[55],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":573,"versions":574,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":576},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[234],[575],"0.7.1",[55],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":582,"versions":583,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":585},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[201,234],[584],"2.27.5",[55],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":591,"versions":592,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":593},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[234],[504],[55],{"id":595,"slug":596,"identity":597,"label":598,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":599,"versions":600,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":602},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[201,234],[601],"3.4.5",[55],{"id":604,"slug":605,"identity":606,"label":607,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":608,"versions":609,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":610},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[211,234],[495],[55],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":616,"versions":617,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":619},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[211],[618],"4.13.0.92",[55],{"id":621,"slug":622,"identity":623,"label":624,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":625,"versions":627,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":629},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[626,234],"Apache-2.0 OR BSD-2-Clause",[628],"26.0",[55],{"id":631,"slug":632,"identity":633,"label":634,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":635,"versions":636,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":638},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[245],[637],"1.6.0",[55],{"id":640,"slug":641,"identity":642,"label":643,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":644,"versions":645,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":647},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[211],[646],"0.4.1",[55],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":653,"versions":654,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":656},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[245],[655],"2.12.5",[55],{"id":658,"slug":659,"identity":660,"label":661,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":662,"versions":663,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":665},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[245],[664],"2.41.5",[55],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":671,"versions":672,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":674},"package:pypi:pytest-cov","pytest-cov-1f608c88","pypi:pytest-cov","pytest-cov",[245],[673],"7.0.0",[55],{"id":676,"slug":677,"identity":678,"label":679,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":680,"versions":681,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":682},"package:pypi:pytorch-lightning","pytorch-lightning-1550c03a","pypi:pytorch-lightning","pytorch-lightning",[211],[306],[55],{"id":684,"slug":685,"identity":686,"label":687,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":688,"versions":689,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":691},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[245],[690],"6.0.3",[55],{"id":693,"slug":694,"identity":695,"label":696,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":697,"versions":698,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":700},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[245],[699],"0.15.6",[55],{"id":702,"slug":703,"identity":704,"label":705,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":706,"versions":707,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":709},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[234],[708],"1.17.1",[55],{"id":711,"slug":712,"identity":713,"label":714,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":715,"versions":716,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":718},"package:pypi:simsimd","simsimd-7089790e","pypi:simsimd","simsimd",[211],[717],"6.5.16",[55],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":724,"versions":725,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":727},"package:pypi:stringzilla","stringzilla-f268dc86","pypi:stringzilla","stringzilla",[211],[726],"4.6.0",[55],{"id":729,"slug":730,"identity":731,"label":732,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":733,"versions":734,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":736},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[234],[735],"1.14.0",[55],{"id":738,"slug":739,"identity":740,"label":741,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":742,"versions":743,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":745},"package:pypi:torchmetrics","torchmetrics-87072a51","pypi:torchmetrics","torchmetrics",[211],[744],"1.9.0",[55],{"id":747,"slug":748,"identity":749,"label":750,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":751,"versions":752,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":754},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[234],[753],"0.25.0",[55],{"id":756,"slug":757,"identity":758,"label":759,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":760,"versions":761,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":763},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[245],[762],"3.6.0",[55],{"id":765,"slug":766,"identity":767,"label":768,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":769,"versions":770,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":772},"package:pypi:ty","ty-9d155882","pypi:ty","ty",[245],[771],"0.0.23",[55],{"id":774,"slug":775,"identity":776,"label":777,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":778,"versions":779,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":781},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[304,234],[780],"4.15.0",[55],{"id":783,"slug":784,"identity":785,"label":786,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":787,"versions":788,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":790},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[245],[789],"0.4.2",[55],{"id":792,"slug":793,"identity":794,"label":795,"aiRelevant":46,"provider":198,"advisoryCount":38,"licenseExpressions":796,"versions":797,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":799},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[211],[798],"1.23.0",[55],[801,837,862,906,930,950,968,1006,1032,1057,1094,1124,1151,1170,1196,1219,1242,1265,1302,1341,1365,1388,1408,1433,1465,1524,1556,1588,1622,1646,1665,1698,1723,1751,1785,1807,1830,1851,1886,1909,1933,1952,1975,1997,2019,2046,2073,2109,2141,2170,2202,2231,2254,2284,2337,2360,2392,2411,2439,2459,2476,2495,2512,2533,2549,2564,2581,2596,2613,2630,2647,2669,2688,2705,2722,2740,2763,2792,2819,2840,2860],{"id":105,"slug":802,"dossier":46,"summary":803,"aliases":804,"sourceIds":807,"published":808,"modified":809,"checkedAt":7,"severity":810,"references":817,"versionKeys":827,"packageCount":32,"repositoryCount":836},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[805,806],"CVE-2026-54279","PYSEC-2026-2112",[105,806],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[811,814],{"type":812,"score":813},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":815,"score":816},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[818,821,824],{"type":819,"url":820},"ADVISORY","https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":822,"url":823},"PACKAGE","https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":825,"url":826},"FIX","https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[828,829,830,831,832,833,834,835],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":106,"slug":838,"dossier":46,"summary":839,"aliases":840,"sourceIds":843,"published":844,"modified":845,"checkedAt":7,"severity":846,"references":851,"versionKeys":861,"packageCount":32,"repositoryCount":836},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[841,842],"CVE-2026-34514","PYSEC-2026-2096",[106,842],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[847,849],{"type":812,"score":848},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":815,"score":850},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[852,854,856,858,859],{"type":825,"url":853},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":819,"url":855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":825,"url":857},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":822,"url":823},{"type":819,"url":860},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[828,829,830,831,832,833,834,835],{"id":107,"slug":863,"dossier":46,"summary":864,"aliases":865,"sourceIds":869,"published":870,"modified":871,"checkedAt":7,"severity":872,"references":879,"versionKeys":902,"packageCount":32,"repositoryCount":243},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[866,867,868],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[107,868],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[873,875,877],{"type":815,"score":874},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":812,"score":876},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":815,"score":878},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[880,882,885,887,890,892,894,896,898,900],{"type":819,"url":881},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":883,"url":884},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":883,"url":886},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":888,"url":889},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":822,"url":891},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":888,"url":893},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":883,"url":895},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":819,"url":897},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":819,"url":899},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":819,"url":901},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[903,904,905],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":108,"slug":907,"dossier":46,"summary":908,"aliases":909,"sourceIds":912,"published":913,"modified":914,"checkedAt":7,"severity":915,"references":920,"versionKeys":929,"packageCount":32,"repositoryCount":836},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[910,911],"CVE-2026-34517","PYSEC-2026-2099",[108,911],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[916,918],{"type":812,"score":917},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":815,"score":919},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[921,923,925,927,928],{"type":825,"url":922},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":819,"url":924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":825,"url":926},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":109,"slug":931,"dossier":46,"summary":932,"aliases":933,"sourceIds":936,"published":937,"modified":938,"checkedAt":7,"severity":939,"references":943,"versionKeys":949,"packageCount":32,"repositoryCount":836},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[934,935],"CVE-2026-54273","PYSEC-2026-2107",[109,935],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[940,942],{"type":812,"score":941},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":815,"score":816},[944,946,948],{"type":819,"url":945},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":825,"url":947},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":822,"url":823},[828,829,830,831,832,833,834,835],{"id":110,"slug":951,"dossier":46,"summary":952,"aliases":953,"sourceIds":956,"published":957,"modified":958,"checkedAt":7,"severity":959,"references":963,"versionKeys":967,"packageCount":32,"repositoryCount":836},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[954,955],"CVE-2026-54275","PYSEC-2026-237",[110,955],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[960,962],{"type":812,"score":961},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":815,"score":816},[964,966],{"type":819,"url":965},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":822,"url":823},[828,829,830,831,832,833,834,835],{"id":111,"slug":969,"dossier":91,"summary":970,"aliases":971,"sourceIds":974,"published":975,"modified":976,"checkedAt":7,"severity":977,"references":980,"versionKeys":1003,"packageCount":32,"repositoryCount":103},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[972,973],"CVE-2026-4539","PYSEC-2026-2987",[111,973],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[978,979],{"type":815,"score":874},{"type":812,"score":876},[981,983,985,987,989,991,993,995,997,999,1001],{"type":819,"url":982},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":888,"url":984},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":888,"url":986},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":888,"url":988},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":822,"url":990},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":888,"url":992},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":888,"url":994},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":888,"url":996},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":888,"url":998},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":822,"url":1000},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":819,"url":1002},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1004,1005],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":112,"slug":1007,"dossier":46,"summary":1008,"aliases":1009,"sourceIds":1013,"published":1014,"modified":1015,"checkedAt":7,"severity":1016,"references":1021,"versionKeys":1031,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1010,1011,1012],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[112,1012],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[1017,1019],{"type":812,"score":1018},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":815,"score":1020},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1022,1024,1026,1028,1030],{"type":819,"url":1023},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":819,"url":1025},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":888,"url":1027},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":888,"url":1029},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":822,"url":891},[903],{"id":113,"slug":1033,"dossier":46,"summary":1034,"aliases":1035,"sourceIds":1038,"published":1039,"modified":1040,"checkedAt":7,"severity":1041,"references":1044,"versionKeys":1056,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1036,1037],"CVE-2025-69226","PYSEC-2026-1097",[113,1037],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[1042],{"type":812,"score":1043},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1045,1047,1049,1051,1052,1054],{"type":888,"url":1046},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":819,"url":1048},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":825,"url":1050},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":822,"url":823},{"type":822,"url":1053},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":819,"url":1055},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[828,829,830,831,832,833,834],{"id":114,"slug":1058,"dossier":46,"summary":1059,"aliases":1060,"sourceIds":1064,"published":1065,"modified":1066,"checkedAt":7,"severity":1067,"references":1072,"versionKeys":1091,"packageCount":32,"repositoryCount":254},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1061,1062,1063],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[114,1063],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[1068,1070],{"type":812,"score":1069},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":815,"score":1071},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1073,1076,1078,1080,1082,1084,1086,1088],{"type":1074,"url":1075},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":819,"url":1077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":883,"url":1079},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":825,"url":1081},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":888,"url":1083},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":822,"url":1085},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":888,"url":1087},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1089,"url":1090},"ARTICLE","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1092,1093],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":115,"slug":1095,"dossier":46,"summary":1096,"aliases":1097,"sourceIds":1101,"published":1102,"modified":1103,"checkedAt":7,"severity":1104,"references":1108,"versionKeys":1117,"packageCount":32,"repositoryCount":1123},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1098,1099,1100],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[115,1100],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[1105,1106],{"type":815,"score":878},{"type":812,"score":1107},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1109,1111,1113,1115],{"type":819,"url":1110},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":819,"url":1112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":822,"url":1114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":819,"url":1116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1118,1119,1120,1121,1122],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":116,"slug":1125,"dossier":46,"summary":1126,"aliases":1127,"sourceIds":1130,"published":1131,"modified":1132,"checkedAt":7,"severity":1133,"references":1139,"versionKeys":1150,"packageCount":32,"repositoryCount":836},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[1128,1129],"CVE-2026-34520","PYSEC-2026-2102",[116,1129],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[1134,1136,1137],{"type":815,"score":1135},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":812,"score":848},{"type":812,"score":1138},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1140,1142,1144,1146,1147,1148],{"type":825,"url":1141},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":819,"url":1143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":825,"url":1145},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":822,"url":823},{"type":819,"url":860},{"type":888,"url":1149},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[828,829,830,831,832,833,834,835],{"id":117,"slug":1152,"dossier":46,"summary":1153,"aliases":1154,"sourceIds":1157,"published":1158,"modified":1159,"checkedAt":7,"severity":1160,"references":1163,"versionKeys":1169,"packageCount":32,"repositoryCount":836},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[1155,1156],"CVE-2026-54277","PYSEC-2026-2110",[117,1156],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[1161,1162],{"type":812,"score":941},{"type":815,"score":816},[1164,1166,1168],{"type":819,"url":1165},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":825,"url":1167},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":822,"url":823},[828,829,830,831,832,833,834,835],{"id":118,"slug":1171,"dossier":91,"summary":1172,"aliases":1173,"sourceIds":1176,"published":1177,"modified":1178,"checkedAt":7,"severity":1179,"references":1183,"versionKeys":1192,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1174,1175],"CVE-2026-45409","PYSEC-2026-215",[118,1175],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1180,1181],{"type":815,"score":919},{"type":812,"score":1182},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1184,1186,1188,1190],{"type":819,"url":1185},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":819,"url":1187},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":822,"url":1189},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":888,"url":1191},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1193,1194,1195],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":119,"slug":1197,"dossier":46,"summary":1198,"aliases":1199,"sourceIds":1202,"published":1203,"modified":1204,"checkedAt":7,"severity":1205,"references":1207,"versionKeys":1218,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[1200,1201],"CVE-2025-69224","PYSEC-2026-1099",[119,1201],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[1206],{"type":812,"score":848},[1208,1210,1212,1214,1215,1216],{"type":888,"url":1209},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":819,"url":1211},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":825,"url":1213},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[828,829,830,831,832,833,834],{"id":120,"slug":1220,"dossier":46,"summary":1221,"aliases":1222,"sourceIds":1225,"published":1226,"modified":1227,"checkedAt":7,"severity":1228,"references":1230,"versionKeys":1241,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[1223,1224],"CVE-2025-69228","PYSEC-2026-1100",[120,1224],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[1229],{"type":812,"score":941},[1231,1233,1235,1237,1238,1239],{"type":888,"url":1232},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":819,"url":1234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":825,"url":1236},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1240},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[828,829,830,831,832,833,834],{"id":121,"slug":1243,"dossier":46,"summary":1244,"aliases":1245,"sourceIds":1248,"published":1249,"modified":1250,"checkedAt":7,"severity":1251,"references":1253,"versionKeys":1264,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[1246,1247],"CVE-2025-69223","PYSEC-2026-1101",[121,1247],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[1252],{"type":815,"score":816},[1254,1256,1258,1260,1261,1262],{"type":888,"url":1255},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":819,"url":1257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":825,"url":1259},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1263},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[828,829,830,831,832,833,834],{"id":122,"slug":1266,"dossier":46,"summary":1267,"aliases":1268,"sourceIds":1271,"published":1272,"modified":1273,"checkedAt":7,"severity":1274,"references":1277,"versionKeys":1296,"packageCount":32,"repositoryCount":1301},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[1269,1270],"CVE-2025-71176","PYSEC-2026-1845",[122,1270],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[1275],{"type":815,"score":1276},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[1278,1280,1282,1284,1286,1288,1290,1292,1294],{"type":819,"url":1279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":888,"url":1281},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":888,"url":1283},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":888,"url":1285},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":822,"url":1287},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":888,"url":1289},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":888,"url":1291},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":822,"url":1293},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":819,"url":1295},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[1297,1298,1299,1300],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",6,{"id":123,"slug":1303,"dossier":46,"summary":1304,"aliases":1305,"sourceIds":1309,"published":1310,"modified":1311,"checkedAt":7,"severity":1312,"references":1316,"versionKeys":1338,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[1306,1307,1308],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[123,1308],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[1313,1314],{"type":815,"score":874},{"type":812,"score":1315},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1317,1319,1321,1323,1325,1327,1328,1330,1332,1334,1336],{"type":819,"url":1318},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":888,"url":1320},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":888,"url":1322},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":888,"url":1324},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":888,"url":1326},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":822,"url":891},{"type":888,"url":1329},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":888,"url":1331},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":888,"url":1333},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":822,"url":1335},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":819,"url":1337},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[903,904,905,1339,1340],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":124,"slug":1342,"dossier":46,"summary":1343,"aliases":1344,"sourceIds":1347,"published":1348,"modified":1349,"checkedAt":7,"severity":1350,"references":1353,"versionKeys":1364,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[1345,1346],"CVE-2025-53643","PYSEC-2026-1104",[124,1346],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[1351],{"type":812,"score":1352},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1354,1356,1358,1360,1361,1362],{"type":888,"url":1355},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":819,"url":1357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":825,"url":1359},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1363},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[828,829,830,831],{"id":125,"slug":1366,"dossier":46,"summary":1367,"aliases":1368,"sourceIds":1371,"published":1372,"modified":1373,"checkedAt":7,"severity":1374,"references":1378,"versionKeys":1387,"packageCount":32,"repositoryCount":836},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[1369,1370],"CVE-2026-34518","PYSEC-2026-2100",[125,1370],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[1375,1377],{"type":815,"score":1376},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":812,"score":1043},[1379,1381,1383,1385,1386],{"type":825,"url":1380},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":819,"url":1382},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":825,"url":1384},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":126,"slug":1389,"dossier":46,"summary":1390,"aliases":1391,"sourceIds":1394,"published":1395,"modified":1396,"checkedAt":7,"severity":1397,"references":1401,"versionKeys":1407,"packageCount":32,"repositoryCount":836},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[1392,1393],"CVE-2026-54280","PYSEC-2026-2113",[126,1393],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[1398,1400],{"type":812,"score":1399},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":815,"score":816},[1402,1404,1406],{"type":819,"url":1403},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":825,"url":1405},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":822,"url":823},[828,829,830,831,832,833,834,835],{"id":127,"slug":1409,"dossier":46,"summary":1410,"aliases":1411,"sourceIds":1414,"published":1415,"modified":1416,"checkedAt":7,"severity":1417,"references":1421,"versionKeys":1432,"packageCount":32,"repositoryCount":836},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[1412,1413],"CVE-2026-34525","PYSEC-2026-2103",[127,1413],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[1418,1420],{"type":812,"score":1419},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":815,"score":850},[1422,1424,1426,1428,1430,1431],{"type":825,"url":1423},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":819,"url":1425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":825,"url":1427},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":825,"url":1429},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":128,"slug":1434,"dossier":46,"summary":1435,"aliases":1436,"sourceIds":1440,"published":1441,"modified":1442,"checkedAt":7,"severity":1443,"references":1448,"versionKeys":1464,"packageCount":32,"repositoryCount":254},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[1437,1438,1439],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[128],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[1444,1446],{"type":815,"score":1445},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":812,"score":1447},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1449,1451,1453,1455,1456,1458,1460,1462],{"type":819,"url":1450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":888,"url":1452},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":888,"url":1454},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":822,"url":891},{"type":888,"url":1457},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":888,"url":1459},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":888,"url":1461},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":888,"url":1463},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[903,904],{"id":129,"slug":1466,"dossier":46,"summary":1467,"aliases":1468,"sourceIds":1472,"published":1473,"modified":1474,"checkedAt":7,"severity":1475,"references":1479,"versionKeys":1519,"packageCount":32,"repositoryCount":1523},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[1469,1470,1471],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[129,1471],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[1476,1478],{"type":812,"score":1477},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":815,"score":816},[1480,1482,1484,1486,1488,1490,1491,1493,1495,1497,1499,1501,1503,1505,1507,1509,1511,1513,1515,1517],{"type":888,"url":1481},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":819,"url":1483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":888,"url":1485},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":888,"url":1487},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":888,"url":1489},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":822,"url":1114},{"type":888,"url":1492},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":888,"url":1494},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":888,"url":1496},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":819,"url":1498},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":819,"url":1500},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":819,"url":1502},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":819,"url":1504},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":819,"url":1506},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":819,"url":1508},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":819,"url":1510},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":819,"url":1512},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":819,"url":1514},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":819,"url":1516},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":819,"url":1518},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1520,1521,1522,1118,1119,1120,1121],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":130,"slug":1525,"dossier":46,"summary":1526,"aliases":1527,"sourceIds":1530,"published":1531,"modified":1532,"checkedAt":7,"severity":1533,"references":1536,"versionKeys":1553,"packageCount":32,"repositoryCount":254},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[1528,1529],"CVE-2025-27516","PYSEC-2026-1471",[130,1529],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[1534],{"type":812,"score":1535},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1537,1539,1541,1543,1545,1547,1549,1551],{"type":888,"url":1538},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":819,"url":1540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":825,"url":1542},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":822,"url":1544},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":888,"url":1546},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":888,"url":1548},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":822,"url":1550},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":819,"url":1552},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[1554,1555],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":131,"slug":1557,"dossier":46,"summary":1558,"aliases":1559,"sourceIds":1563,"published":1564,"modified":1565,"checkedAt":7,"severity":1566,"references":1571,"versionKeys":1587,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[1560,1561,1562],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[131,1562],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[1567,1569],{"type":815,"score":1568},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":812,"score":1570},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1572,1574,1576,1578,1579,1581,1583,1585],{"type":819,"url":1573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":888,"url":1575},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":888,"url":1577},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":822,"url":1085},{"type":888,"url":1580},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":888,"url":1582},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":822,"url":1584},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":819,"url":1586},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1092],{"id":132,"slug":1589,"dossier":46,"summary":1590,"aliases":1591,"sourceIds":1595,"published":1596,"modified":1597,"checkedAt":7,"severity":1598,"references":1603,"versionKeys":1621,"packageCount":32,"repositoryCount":254},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[1592,1593,1594],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[132],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[1599,1601],{"type":815,"score":1600},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":812,"score":1602},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1604,1606,1608,1610,1612,1614,1615,1617,1619],{"type":819,"url":1605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":888,"url":1607},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":888,"url":1609},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":888,"url":1611},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":888,"url":1613},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":822,"url":891},{"type":888,"url":1616},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":888,"url":1618},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":888,"url":1620},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[903,904],{"id":133,"slug":1623,"dossier":46,"summary":1624,"aliases":1625,"sourceIds":1628,"published":1629,"modified":1630,"checkedAt":7,"severity":1631,"references":1634,"versionKeys":1645,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[1626,1627],"CVE-2025-69230","PYSEC-2026-1105",[133,1627],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[1632],{"type":812,"score":1633},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1635,1637,1639,1641,1642,1643],{"type":888,"url":1636},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":819,"url":1638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":825,"url":1640},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1644},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[828,829,830,831,832,833,834],{"id":134,"slug":1647,"dossier":46,"summary":1648,"aliases":1649,"sourceIds":1652,"published":1653,"modified":1654,"checkedAt":7,"severity":1655,"references":1658,"versionKeys":1664,"packageCount":32,"repositoryCount":836},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[1650,1651],"CVE-2026-54278","PYSEC-2026-2111",[134,1651],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[1656,1657],{"type":812,"score":941},{"type":815,"score":816},[1659,1661,1662],{"type":819,"url":1660},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":822,"url":823},{"type":825,"url":1663},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[828,829,830,831,832,833,834,835],{"id":135,"slug":1666,"dossier":46,"summary":1667,"aliases":1668,"sourceIds":1671,"published":1672,"modified":1673,"checkedAt":7,"severity":1674,"references":1677,"versionKeys":1696,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1669,1670],"CVE-2024-34062","PYSEC-2026-1976",[135,1670],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1675],{"type":815,"score":1676},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1678,1680,1682,1684,1686,1688,1690,1692,1694],{"type":888,"url":1679},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":819,"url":1681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":888,"url":1683},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":822,"url":1685},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":888,"url":1687},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":888,"url":1689},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":888,"url":1691},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":822,"url":1693},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":819,"url":1695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1697],"pypi:tqdm@4.66.2",{"id":136,"slug":1699,"dossier":46,"summary":1700,"aliases":1701,"sourceIds":1704,"published":1705,"modified":1706,"checkedAt":7,"severity":1707,"references":1709,"versionKeys":1722,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[1702,1703],"CVE-2025-69229","PYSEC-2026-1106",[136,1703],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[1708],{"type":812,"score":941},[1710,1712,1714,1716,1718,1719,1720],{"type":888,"url":1711},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":819,"url":1713},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":888,"url":1715},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":888,"url":1717},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1721},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[828,829,830,831,832,833,834],{"id":137,"slug":1724,"dossier":46,"summary":1725,"aliases":1726,"sourceIds":1729,"published":1730,"modified":1731,"checkedAt":7,"severity":1732,"references":1735,"versionKeys":1750,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[1727,1728],"CVE-2024-56201","PYSEC-2026-1472",[137,1728],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[1733,1734],{"type":815,"score":1071},{"type":812,"score":1535},[1736,1738,1740,1742,1744,1745,1747,1748],{"type":888,"url":1737},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":819,"url":1739},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":888,"url":1741},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":825,"url":1743},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":822,"url":1544},{"type":888,"url":1746},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":822,"url":1550},{"type":819,"url":1749},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[1554],{"id":138,"slug":1752,"dossier":46,"summary":1753,"aliases":1754,"sourceIds":1757,"published":1758,"modified":1759,"checkedAt":7,"severity":1760,"references":1763,"versionKeys":1784,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[1755,1756],"CVE-2024-34064","PYSEC-2026-1474",[138,1756],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[1761],{"type":815,"score":1762},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1764,1766,1768,1770,1771,1773,1775,1777,1779,1781,1782],{"type":888,"url":1765},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":819,"url":1767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":825,"url":1769},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":822,"url":1544},{"type":888,"url":1772},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":888,"url":1774},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":888,"url":1776},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":888,"url":1778},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":888,"url":1780},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":822,"url":1550},{"type":819,"url":1783},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[1554],{"id":139,"slug":1786,"dossier":46,"summary":1787,"aliases":1788,"sourceIds":1791,"published":1792,"modified":1793,"checkedAt":7,"severity":1794,"references":1797,"versionKeys":1806,"packageCount":32,"repositoryCount":836},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[1789,1790],"CVE-2026-34513","PYSEC-2026-2095",[139,1790],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[1795,1796],{"type":812,"score":917},{"type":815,"score":816},[1798,1800,1802,1804,1805],{"type":825,"url":1799},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":819,"url":1801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":825,"url":1803},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":140,"slug":1808,"dossier":46,"summary":1809,"aliases":1810,"sourceIds":1813,"published":1814,"modified":1815,"checkedAt":7,"severity":1816,"references":1821,"versionKeys":1829,"packageCount":32,"repositoryCount":836},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[1811,1812],"CVE-2026-47265","PYSEC-2026-2105",[140,1812],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[1817,1819],{"type":812,"score":1818},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":815,"score":1820},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1822,1824,1826,1828],{"type":825,"url":1823},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":819,"url":1825},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":825,"url":1827},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":822,"url":823},[828,829,830,831,832,833,834,835],{"id":141,"slug":1831,"dossier":46,"summary":1832,"aliases":1833,"sourceIds":1836,"published":1837,"modified":1838,"checkedAt":7,"severity":1839,"references":1844,"versionKeys":1850,"packageCount":32,"repositoryCount":836},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[1834,1835],"CVE-2026-54276","PYSEC-2026-2109",[141,1835],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[1840,1842],{"type":812,"score":1841},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":815,"score":1843},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[1845,1847,1849],{"type":819,"url":1846},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":825,"url":1848},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":822,"url":823},[828,829,830,831,832,833,834,835],{"id":142,"slug":1852,"dossier":46,"summary":1853,"aliases":1854,"sourceIds":1857,"published":1858,"modified":1859,"checkedAt":7,"severity":1860,"references":1865,"versionKeys":1885,"packageCount":32,"repositoryCount":836},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[1855,1856],"CVE-2026-34993","PYSEC-2026-2104",[142,1856],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[1861,1863],{"type":815,"score":1862},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":815,"score":1864},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1866,1868,1870,1872,1873,1875,1877,1879,1881,1883],{"type":825,"url":1867},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":819,"url":1869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":825,"url":1871},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":822,"url":823},{"type":888,"url":1874},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":888,"url":1876},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":819,"url":1878},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":819,"url":1880},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":819,"url":1882},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":883,"url":1884},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[828,829,830,831,832,833,834,835],{"id":143,"slug":1887,"dossier":46,"summary":1888,"aliases":1889,"sourceIds":1892,"published":1893,"modified":1894,"checkedAt":7,"severity":1895,"references":1897,"versionKeys":1908,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[1890,1891],"CVE-2025-69227","PYSEC-2026-1107",[143,1891],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[1896],{"type":812,"score":941},[1898,1900,1902,1904,1905,1906],{"type":888,"url":1899},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":819,"url":1901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":888,"url":1903},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1907},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[828,829,830,831,832,833,834],{"id":144,"slug":1910,"dossier":46,"summary":1911,"aliases":1912,"sourceIds":1915,"published":1916,"modified":1917,"checkedAt":7,"severity":1918,"references":1923,"versionKeys":1932,"packageCount":32,"repositoryCount":836},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[1913,1914],"CVE-2026-34516","PYSEC-2026-2098",[144,1914],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[1919,1920,1921],{"type":815,"score":816},{"type":812,"score":941},{"type":812,"score":1922},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1924,1926,1928,1930,1931],{"type":825,"url":1925},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":819,"url":1927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":825,"url":1929},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":145,"slug":1934,"dossier":46,"summary":1935,"aliases":1936,"sourceIds":1939,"published":1940,"modified":1941,"checkedAt":7,"severity":1942,"references":1945,"versionKeys":1951,"packageCount":32,"repositoryCount":836},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[1937,1938],"CVE-2026-50269","PYSEC-2026-2106",[145,1938],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[1943,1944],{"type":812,"score":848},{"type":815,"score":816},[1946,1948,1950],{"type":819,"url":1947},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":825,"url":1949},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":822,"url":823},[828,829,830,831,832,833,834,835],{"id":146,"slug":1953,"dossier":46,"summary":1954,"aliases":1955,"sourceIds":1958,"published":1959,"modified":1960,"checkedAt":7,"severity":1961,"references":1963,"versionKeys":1974,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[1956,1957],"CVE-2025-69225","PYSEC-2026-1109",[146,1957],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[1962],{"type":812,"score":848},[1964,1966,1968,1970,1971,1972],{"type":888,"url":1965},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":819,"url":1967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":825,"url":1969},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":822,"url":823},{"type":822,"url":1053},{"type":819,"url":1973},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[828,829,830,831,832,833,834],{"id":147,"slug":1976,"dossier":46,"summary":1977,"aliases":1978,"sourceIds":1981,"published":1982,"modified":1983,"checkedAt":7,"severity":1984,"references":1987,"versionKeys":1996,"packageCount":32,"repositoryCount":836},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[1979,1980],"CVE-2026-34519","PYSEC-2026-2101",[147,1980],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[1985,1986],{"type":812,"score":848},{"type":815,"score":850},[1988,1990,1992,1994,1995],{"type":825,"url":1989},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":819,"url":1991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":825,"url":1993},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":148,"slug":1998,"dossier":46,"summary":1999,"aliases":2000,"sourceIds":2003,"published":2004,"modified":2005,"checkedAt":7,"severity":2006,"references":2009,"versionKeys":2018,"packageCount":32,"repositoryCount":836},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[2001,2002],"CVE-2026-34515","PYSEC-2026-2097",[148,2002],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[2007,2008],{"type":812,"score":1818},{"type":815,"score":1820},[2010,2012,2014,2016,2017],{"type":825,"url":2011},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":819,"url":2013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":825,"url":2015},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":149,"slug":2020,"dossier":91,"summary":2021,"aliases":2022,"sourceIds":2026,"published":2027,"modified":2028,"checkedAt":7,"severity":2029,"references":2033,"versionKeys":2045,"packageCount":32,"repositoryCount":103},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[2023,2024,2025],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[149,2025],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[2030,2031],{"type":812,"score":1477},{"type":815,"score":2032},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2034,2035,2037,2039,2041,2043,2044],{"type":888,"url":1481},{"type":825,"url":2036},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":819,"url":2038},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":825,"url":2040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":825,"url":2042},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":822,"url":1114},{"type":819,"url":1116},[1520,1521,1522,1118,1119,1120,1121,1122],{"id":150,"slug":2047,"dossier":46,"summary":2048,"aliases":2049,"sourceIds":2052,"published":2053,"modified":2054,"checkedAt":7,"severity":2055,"references":2059,"versionKeys":2072,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[2050,2051],"CVE-2024-56326","PYSEC-2026-1475",[150,2051],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[2056,2058],{"type":815,"score":2057},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":812,"score":1535},[2060,2062,2064,2066,2067,2068,2069,2070],{"type":888,"url":2061},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":819,"url":2063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":825,"url":2065},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":822,"url":1544},{"type":888,"url":1746},{"type":888,"url":1546},{"type":822,"url":1550},{"type":819,"url":2071},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[1554],{"id":151,"slug":2074,"dossier":46,"summary":2075,"aliases":2076,"sourceIds":2080,"published":2081,"modified":2082,"checkedAt":7,"severity":2083,"references":2087,"versionKeys":2105,"packageCount":32,"repositoryCount":836},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[2077,2078,2079],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[151],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[2084,2085],{"type":815,"score":1600},{"type":812,"score":2086},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2088,2090,2092,2094,2096,2098,2099,2101,2103],{"type":819,"url":2089},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":888,"url":2091},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":888,"url":2093},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":888,"url":2095},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":888,"url":2097},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":822,"url":891},{"type":888,"url":2100},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":888,"url":2102},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":888,"url":2104},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[903,904,905,1339,1340,2106,2107,2108],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":152,"slug":2110,"dossier":46,"summary":2111,"aliases":2112,"sourceIds":2115,"published":2116,"modified":2117,"checkedAt":7,"severity":2118,"references":2121,"versionKeys":2136,"packageCount":32,"repositoryCount":1123},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[2113,2114],"CVE-2026-22701","PYSEC-2026-1374",[152,2114],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[2119],{"type":815,"score":2120},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[2122,2124,2126,2128,2130,2132,2134],{"type":888,"url":2123},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":819,"url":2125},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":888,"url":2127},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":888,"url":2129},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":822,"url":2131},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":822,"url":2133},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":819,"url":2135},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[2137,2138,2139,2140],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":153,"slug":2142,"dossier":91,"summary":2143,"aliases":2144,"sourceIds":2148,"published":2149,"modified":2150,"checkedAt":7,"severity":2151,"references":2154,"versionKeys":2169,"packageCount":32,"repositoryCount":103},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[2145,2146,2147],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[153,2147],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[2152,2153],{"type":815,"score":878},{"type":812,"score":1107},[2155,2157,2159,2161,2163,2164,2165,2167],{"type":888,"url":2156},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":819,"url":2158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":888,"url":2160},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":888,"url":2162},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":822,"url":1114},{"type":888,"url":1116},{"type":822,"url":2166},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":819,"url":2168},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":154,"slug":2171,"dossier":46,"summary":2172,"aliases":2173,"sourceIds":2177,"published":1596,"modified":2178,"checkedAt":7,"severity":2179,"references":2182,"versionKeys":2200,"packageCount":32,"repositoryCount":1123},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[2174,2175,2176],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[154],"2026-07-17T17:15:51.452848951Z",[2180,2181],{"type":815,"score":1600},{"type":812,"score":2086},[2183,2185,2187,2189,2191,2193,2194,2196,2198],{"type":819,"url":2184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":888,"url":2186},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":888,"url":2188},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":888,"url":2190},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":888,"url":2192},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":822,"url":891},{"type":888,"url":2195},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":888,"url":2197},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":888,"url":2199},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[2201,903,904,905,1339,1340,2106,2107,2108],"pypi:torch@2.10.0",{"id":155,"slug":2203,"dossier":46,"summary":2204,"aliases":2205,"sourceIds":2209,"published":1596,"modified":2210,"checkedAt":7,"severity":2211,"references":2214,"versionKeys":2229,"packageCount":32,"repositoryCount":2230},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[2206,2207,2208],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[155],"2026-06-10T17:41:15.774477397Z",[2212,2213],{"type":815,"score":1600},{"type":812,"score":1602},[2215,2217,2218,2219,2220,2222,2223,2225,2227],{"type":819,"url":2216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":888,"url":1607},{"type":888,"url":1609},{"type":888,"url":1611},{"type":888,"url":2221},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":822,"url":891},{"type":888,"url":2224},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":888,"url":2226},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":888,"url":2228},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[903,904,905,1339,1340,2106],8,{"id":156,"slug":2232,"dossier":46,"summary":2233,"aliases":2234,"sourceIds":2237,"published":2238,"modified":2239,"checkedAt":7,"severity":2240,"references":2244,"versionKeys":2253,"packageCount":32,"repositoryCount":836},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[2235,2236],"CVE-2026-22815","PYSEC-2026-2094",[156,2236],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[2241,2242],{"type":812,"score":1182},{"type":812,"score":2243},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2245,2247,2249,2251,2252],{"type":825,"url":2246},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":819,"url":2248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":825,"url":2250},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":822,"url":823},{"type":819,"url":860},[828,829,830,831,832,833,834,835],{"id":157,"slug":2255,"dossier":46,"summary":2256,"aliases":2257,"sourceIds":2260,"published":2261,"modified":2262,"checkedAt":7,"severity":2263,"references":2266,"versionKeys":2283,"packageCount":32,"repositoryCount":1123},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[2258,2259],"CVE-2025-68146","PYSEC-2026-1375",[157,2259],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[2264],{"type":815,"score":2265},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2267,2269,2271,2272,2274,2276,2278,2279,2281],{"type":888,"url":2268},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":888,"url":2270},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":822,"url":2131},{"type":888,"url":2273},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":888,"url":2275},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":888,"url":2277},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":822,"url":2133},{"type":819,"url":2280},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":819,"url":2282},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[2137,2138,2139,2140],{"id":158,"slug":2285,"dossier":91,"summary":2286,"aliases":2287,"sourceIds":2291,"published":2292,"modified":2293,"checkedAt":7,"severity":2294,"references":2298,"versionKeys":2336,"packageCount":32,"repositoryCount":103},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[2288,2289,2290],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[158,2290],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[2295,2296],{"type":815,"score":816},{"type":812,"score":2297},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2299,2301,2303,2305,2307,2308,2310,2312,2314,2316,2318,2320,2321,2323,2325,2327,2328,2330,2332,2334],{"type":888,"url":2300},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":819,"url":2302},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":888,"url":2304},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":888,"url":2306},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":822,"url":1114},{"type":888,"url":2309},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":888,"url":2311},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":888,"url":2313},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":819,"url":2315},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":819,"url":2317},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":819,"url":2319},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":819,"url":1504},{"type":819,"url":2322},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":819,"url":2324},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":819,"url":2326},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":819,"url":1506},{"type":819,"url":2329},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":819,"url":2331},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":819,"url":2333},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":819,"url":2335},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":159,"slug":2338,"dossier":91,"summary":2339,"aliases":2340,"sourceIds":2344,"published":2345,"modified":2346,"checkedAt":7,"severity":2347,"references":2350,"versionKeys":2359,"packageCount":32,"repositoryCount":103},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[2341,2342,2343],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[159,2343],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[2348,2349],{"type":815,"score":878},{"type":812,"score":1107},[2351,2353,2355,2357,2358],{"type":819,"url":2352},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":819,"url":2354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":888,"url":2356},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":822,"url":1114},{"type":819,"url":1116},[1520,1521,1522,1118,1119,1120,1121,1122],{"id":160,"slug":2361,"dossier":46,"summary":2362,"aliases":2363,"sourceIds":2367,"published":2368,"modified":2369,"checkedAt":7,"severity":2370,"references":2375,"versionKeys":2391,"packageCount":32,"repositoryCount":254},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[2364,2365,2366],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[160],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[2371,2373],{"type":815,"score":2372},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":812,"score":2374},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2376,2378,2380,2382,2384,2385,2387,2389],{"type":819,"url":2377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":888,"url":2379},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":888,"url":2381},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":888,"url":2383},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":822,"url":891},{"type":888,"url":2386},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":888,"url":2388},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":888,"url":2390},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[903,904],{"id":161,"slug":2393,"dossier":46,"summary":2394,"aliases":2395,"sourceIds":2398,"published":2399,"modified":2400,"checkedAt":7,"severity":2401,"references":2404,"versionKeys":2410,"packageCount":32,"repositoryCount":836},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[2396,2397],"CVE-2026-54274","PYSEC-2026-2108",[161,2397],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[2402,2403],{"type":812,"score":941},{"type":815,"score":816},[2405,2407,2408],{"type":819,"url":2406},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":822,"url":823},{"type":825,"url":2409},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[828,829,830,831,832,833,834,835],{"id":162,"slug":2412,"dossier":46,"summary":2413,"aliases":2414,"sourceIds":2418,"published":2419,"modified":2420,"checkedAt":7,"severity":2421,"references":2424,"versionKeys":2438,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[2415,2416,2417],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[162,2417],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[2422],{"type":815,"score":2423},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2425,2427,2429,2431,2433,2435,2436],{"type":819,"url":2426},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":819,"url":2428},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":888,"url":2430},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":825,"url":2432},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":888,"url":2434},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":822,"url":1114},{"type":888,"url":2437},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1118],{"id":163,"slug":2440,"dossier":46,"summary":198,"aliases":2441,"sourceIds":2444,"published":2445,"modified":2446,"checkedAt":7,"severity":2447,"references":2449,"versionKeys":2458,"packageCount":32,"repositoryCount":254},"pysec-2025-198-62b25ed4",[2442,2443],"BIT-pytorch-2025-46148","CVE-2025-46148",[163],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[2448],{"type":815,"score":1376},[2450,2452,2454,2456],{"type":819,"url":2451},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":819,"url":2453},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":883,"url":2455},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":825,"url":2457},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[903,904],{"id":164,"slug":2460,"dossier":46,"summary":198,"aliases":2461,"sourceIds":2464,"published":2465,"modified":2466,"checkedAt":7,"severity":2467,"references":2469,"versionKeys":2475,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[2462,2463],"BIT-pytorch-2025-46149","CVE-2025-46149",[164],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[2468],{"type":815,"score":1376},[2470,2471,2473],{"type":819,"url":2451},{"type":883,"url":2472},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":825,"url":2474},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[904],{"id":165,"slug":2477,"dossier":46,"summary":198,"aliases":2478,"sourceIds":2481,"published":2482,"modified":2483,"checkedAt":7,"severity":2484,"references":2486,"versionKeys":2494,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[2479,2480],"BIT-pytorch-2025-46150","CVE-2025-46150",[165],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[2485],{"type":815,"score":1376},[2487,2488,2490,2492],{"type":819,"url":2451},{"type":883,"url":2489},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":883,"url":2491},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":825,"url":2493},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[904],{"id":166,"slug":2496,"dossier":46,"summary":198,"aliases":2497,"sourceIds":2500,"published":2501,"modified":2502,"checkedAt":7,"severity":2503,"references":2505,"versionKeys":2511,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[2498,2499],"BIT-pytorch-2025-46152","CVE-2025-46152",[166],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[2504],{"type":815,"score":919},[2506,2507,2509],{"type":819,"url":2451},{"type":883,"url":2508},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":825,"url":2510},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[904],{"id":167,"slug":2513,"dossier":46,"summary":198,"aliases":2514,"sourceIds":2517,"published":2518,"modified":2519,"checkedAt":7,"severity":2520,"references":2522,"versionKeys":2532,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[2515,2516],"BIT-pytorch-2025-46153","CVE-2025-46153",[167],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[2521],{"type":815,"score":1376},[2523,2525,2526,2528,2530],{"type":888,"url":2524},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":819,"url":2451},{"type":819,"url":2527},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":883,"url":2529},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":825,"url":2531},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[904],{"id":168,"slug":2534,"dossier":46,"summary":198,"aliases":2535,"sourceIds":2538,"published":2539,"modified":2540,"checkedAt":7,"severity":2541,"references":2543,"versionKeys":2548,"packageCount":32,"repositoryCount":2230},"pysec-2025-203-2febb201",[2536,2537],"BIT-pytorch-2025-55551","CVE-2025-55551",[168],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[2542],{"type":815,"score":816},[2544,2546],{"type":819,"url":2545},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":883,"url":2547},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[903,904,905,1339,1340,2106],{"id":169,"slug":2550,"dossier":46,"summary":198,"aliases":2551,"sourceIds":2554,"published":2555,"modified":2556,"checkedAt":7,"severity":2557,"references":2559,"versionKeys":2563,"packageCount":32,"repositoryCount":2230},"pysec-2025-204-cdae47da",[2552,2553],"BIT-pytorch-2025-55552","CVE-2025-55552",[169],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[2558],{"type":815,"score":816},[2560,2561],{"type":819,"url":2545},{"type":883,"url":2562},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[903,904,905,1339,1340,2106],{"id":170,"slug":2565,"dossier":46,"summary":198,"aliases":2566,"sourceIds":2569,"published":2570,"modified":2571,"checkedAt":7,"severity":2572,"references":2574,"versionKeys":2580,"packageCount":32,"repositoryCount":243},"pysec-2025-205-fd5e58fd",[2567,2568],"BIT-pytorch-2025-55553","CVE-2025-55553",[170],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[2573],{"type":815,"score":816},[2575,2576,2578],{"type":819,"url":2545},{"type":883,"url":2577},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":825,"url":2579},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[903,904,905],{"id":171,"slug":2582,"dossier":46,"summary":198,"aliases":2583,"sourceIds":2586,"published":2587,"modified":2588,"checkedAt":7,"severity":2589,"references":2591,"versionKeys":2595,"packageCount":32,"repositoryCount":2230},"pysec-2025-206-58322476",[2584,2585],"BIT-pytorch-2025-55554","CVE-2025-55554",[171],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[2590],{"type":815,"score":919},[2592,2593],{"type":819,"url":2545},{"type":883,"url":2594},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[903,904,905,1339,1340,2106],{"id":172,"slug":2597,"dossier":46,"summary":198,"aliases":2598,"sourceIds":2601,"published":2602,"modified":2603,"checkedAt":7,"severity":2604,"references":2606,"versionKeys":2612,"packageCount":32,"repositoryCount":243},"pysec-2025-207-2abef3fc",[2599,2600],"BIT-pytorch-2025-55557","CVE-2025-55557",[172],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[2605],{"type":815,"score":816},[2607,2608,2610],{"type":819,"url":2545},{"type":883,"url":2609},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":825,"url":2611},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[903,904,905],{"id":173,"slug":2614,"dossier":46,"summary":198,"aliases":2615,"sourceIds":2618,"published":2619,"modified":2620,"checkedAt":7,"severity":2621,"references":2623,"versionKeys":2629,"packageCount":32,"repositoryCount":243},"pysec-2025-208-6e93fe9d",[2616,2617],"BIT-pytorch-2025-55558","CVE-2025-55558",[173],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[2622],{"type":815,"score":816},[2624,2625,2627],{"type":819,"url":2545},{"type":883,"url":2626},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":825,"url":2628},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[903,904,905],{"id":174,"slug":2631,"dossier":46,"summary":198,"aliases":2632,"sourceIds":2635,"published":2636,"modified":2637,"checkedAt":7,"severity":2638,"references":2640,"versionKeys":2646,"packageCount":32,"repositoryCount":243},"pysec-2025-209-e6f352b0",[2633,2634],"BIT-pytorch-2025-55560","CVE-2025-55560",[174],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[2639],{"type":815,"score":816},[2641,2642,2644],{"type":819,"url":2545},{"type":883,"url":2643},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":825,"url":2645},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[903,904,905],{"id":175,"slug":2648,"dossier":46,"summary":198,"aliases":2649,"sourceIds":2652,"published":2653,"modified":2654,"checkedAt":7,"severity":2655,"references":2657,"versionKeys":2668,"packageCount":32,"repositoryCount":1123},"pysec-2026-139-96951ff6",[2650,2651],"BIT-pytorch-2026-4538","CVE-2026-4538",[175],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[2656],{"type":815,"score":2057},[2658,2660,2662,2664,2666],{"type":888,"url":2659},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":819,"url":2661},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":819,"url":2663},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":883,"url":2665},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":825,"url":2667},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[2201,903,904,905,1339,1340,2106,2107,2108],{"id":176,"slug":2670,"dossier":91,"summary":198,"aliases":2671,"sourceIds":2675,"published":2676,"modified":2677,"checkedAt":7,"severity":2678,"references":2680,"versionKeys":2687,"packageCount":32,"repositoryCount":103},"pysec-2026-2253-e1ccf3df",[2672,2673,2674],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[176],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[2679],{"type":815,"score":816},[2681,2683,2685],{"type":819,"url":2682},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":825,"url":2684},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1074,"url":2686},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":177,"slug":2689,"dossier":91,"summary":198,"aliases":2690,"sourceIds":2694,"published":2695,"modified":2696,"checkedAt":7,"severity":2697,"references":2699,"versionKeys":2704,"packageCount":32,"repositoryCount":103},"pysec-2026-2254-a1ed1fd2",[2691,2692,2693],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[177],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[2698],{"type":815,"score":816},[2700,2701,2702],{"type":819,"url":2682},{"type":825,"url":2684},{"type":1074,"url":2703},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":178,"slug":2706,"dossier":91,"summary":198,"aliases":2707,"sourceIds":2711,"published":2712,"modified":2713,"checkedAt":7,"severity":2714,"references":2716,"versionKeys":2721,"packageCount":32,"repositoryCount":103},"pysec-2026-2255-d0951b98",[2708,2709,2710],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[178],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[2715],{"type":815,"score":816},[2717,2718,2719],{"type":819,"url":2682},{"type":825,"url":2684},{"type":1074,"url":2720},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":179,"slug":2723,"dossier":91,"summary":198,"aliases":2724,"sourceIds":2728,"published":2729,"modified":2730,"checkedAt":7,"severity":2731,"references":2733,"versionKeys":2739,"packageCount":32,"repositoryCount":103},"pysec-2026-2256-0f333f0b",[2725,2726,2727],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[179],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[2732],{"type":815,"score":816},[2734,2735,2737],{"type":819,"url":2682},{"type":825,"url":2736},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1074,"url":2738},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":180,"slug":2741,"dossier":91,"summary":198,"aliases":2742,"sourceIds":2746,"published":2747,"modified":2748,"checkedAt":7,"severity":2749,"references":2752,"versionKeys":2762,"packageCount":32,"repositoryCount":103},"pysec-2026-2257-bcbe5d79",[2743,2744,2745],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[180],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[2750],{"type":815,"score":2751},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2753,2754,2756,2758,2760],{"type":819,"url":2682},{"type":825,"url":2755},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":825,"url":2757},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":825,"url":2759},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1074,"url":2761},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":181,"slug":2764,"dossier":46,"summary":198,"aliases":2765,"sourceIds":2770,"published":2771,"modified":2772,"checkedAt":7,"severity":2773,"references":2775,"versionKeys":2791,"packageCount":32,"repositoryCount":836},"pysec-2026-2286-8795b007",[2766,2767,2768,2769],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[181],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[2774],{"type":815,"score":1568},[2776,2778,2780,2781,2783,2785,2787,2789],{"type":888,"url":2777},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":888,"url":2779},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":819,"url":1878},{"type":819,"url":2782},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":819,"url":2784},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":883,"url":2786},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":883,"url":2788},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":825,"url":2790},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[903,904,905,1339,1340,2106,2107,2108],{"id":182,"slug":2793,"dossier":91,"summary":198,"aliases":2794,"sourceIds":2798,"published":2799,"modified":2800,"checkedAt":7,"severity":2801,"references":2804,"versionKeys":2811,"packageCount":32,"repositoryCount":103},"pysec-2026-3447-df031425",[2795,2796,2797],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[182],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[2802],{"type":815,"score":2803},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2805,2807,2809],{"type":819,"url":2806},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":825,"url":2808},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1074,"url":2810},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[1092,1093,2812,2813,2814,2815,2816,2817,2818],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":183,"slug":2820,"dossier":91,"summary":198,"aliases":2821,"sourceIds":2825,"published":2826,"modified":2827,"checkedAt":7,"severity":2828,"references":2830,"versionKeys":2839,"packageCount":32,"repositoryCount":103},"pysec-2026-3451-3e5eac34",[2822,2823,2824],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[183],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[2829],{"type":815,"score":816},[2831,2833,2835,2837],{"type":819,"url":2832},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":825,"url":2834},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":825,"url":2836},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1074,"url":2838},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[1520,1521,1522,1118,1119,1120,1121,1122],{"id":184,"slug":2841,"dossier":46,"summary":198,"aliases":2842,"sourceIds":2846,"published":2847,"modified":2848,"checkedAt":7,"severity":2849,"references":2851,"versionKeys":2859,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[2843,2844,2845],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[184],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[2850],{"type":815,"score":816},[2852,2853,2855,2857],{"type":819,"url":2832},{"type":825,"url":2854},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":825,"url":2856},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1074,"url":2858},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[1120,1121,1122],{"id":185,"slug":2861,"dossier":91,"summary":198,"aliases":2862,"sourceIds":2866,"published":2867,"modified":2868,"checkedAt":7,"severity":2869,"references":2871,"versionKeys":2879,"packageCount":32,"repositoryCount":103},"pysec-2026-3453-83974725",[2863,2864,2865],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[185],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[2870],{"type":815,"score":816},[2872,2873,2875,2877],{"type":819,"url":2832},{"type":825,"url":2874},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":825,"url":2876},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1074,"url":2878},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[1520,1521,1522,1118,1119,1120,1121,1122],1784558561796]