[{"data":1,"prerenderedAt":911},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-transformers-65289303":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":287,"related":354},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":84,"category":85,"aiRelevant":86,"provider":87,"repositoryCount":90,"occurrenceCount":91,"directRepositoryCount":38,"versionCount":65,"licenseExpressions":92,"advisoryIds":94,"advisoryCount":70,"verifiedAttestation":46,"repositories":120,"versions":176},"package:pypi:transformers","transformers-65289303","pypi:transformers","pypi","transformers","Transformers","model-runtime",true,{"id":88,"label":89},"hugging-face","Hugging Face",8,11,[93],"Apache-2.0",[95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119],"GHSA-29pf-2h5f-8g72","GHSA-37mw-44qp-f5jm","GHSA-4w7r-h757-3r74","GHSA-59p9-h35m-wg4g","GHSA-69w3-r845-3855","GHSA-6rvg-6v2m-4j46","GHSA-9356-575x-2w9m","GHSA-fgcw-684q-jj6r","GHSA-fpwr-67px-3qhx","GHSA-hxxf-235m-72v3","GHSA-jjph-296x-mrcr","GHSA-phhr-52qp-3mj4","GHSA-q2wp-rjmx-x6x9","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-rcv9-qm8p-9p6j","GHSA-wrfc-pvp9-mr9g","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218",[121,128,135,142,149,156,163,170],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":126,"evidenceCount":34},"opencode:8712","opencode-8712","F13-RAG","landeshauptstadt-muenchen\u002Ff-13-rag",[127],"4.57.3",{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":133,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[134],"4.57.1",{"id":136,"slug":137,"name":138,"pathWithNamespace":139,"versions":140,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[141],"4.53.1",{"id":143,"slug":144,"name":145,"pathWithNamespace":146,"versions":147,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[148],"4.57.6",{"id":150,"slug":151,"name":152,"pathWithNamespace":153,"versions":154,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[155],"4.51.3",{"id":157,"slug":158,"name":159,"pathWithNamespace":160,"versions":161,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[162],"4.47.1",{"id":164,"slug":165,"name":166,"pathWithNamespace":167,"versions":168,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[169],"4.57.4",{"id":171,"slug":172,"name":173,"pathWithNamespace":174,"versions":175,"evidenceCount":32},"opencode:7811","opencode-7811","Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation",[134],[177,214,226,238,251,263,275],{"version":162,"repositoryCount":32,"occurrenceCount":32,"ageDays":178,"advisoryIds":179,"metadata":180},579,[95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119],{"state":181,"checkedAt":182,"publishedAt":183,"deprecated":46,"deprecatedReason":184,"licenses":185,"advisoryIds":186,"links":204,"relatedProjects":208,"attestations":212,"verifiedAttestation":46,"projectStatus":213},"resolved","2026-07-20T03:19:50.101Z","2024-12-17T15:42:35Z",null,[93],[95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,187,188,189,112,113,114,115,116,117,118,119,190,191,192,193,194,195,196,197,198,199,200,201,202,203],"PYSEC-2024-227","PYSEC-2024-228","PYSEC-2024-229","PYSEC-2025-40","PYSEC-2026-1977","PYSEC-2026-1980","PYSEC-2026-1981","PYSEC-2026-1982","PYSEC-2026-1983","PYSEC-2026-1984","PYSEC-2026-1985","PYSEC-2026-1986","PYSEC-2026-1987","PYSEC-2026-1988","PYSEC-2026-2288","PYSEC-2026-2289","PYSEC-2026-2290",[205],{"label":206,"url":207},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",[209],{"id":210,"relationType":206,"relationProvenance":211},"github.com\u002Fhuggingface\u002Ftransformers","UNVERIFIED_METADATA",[],"active",{"version":155,"repositoryCount":32,"occurrenceCount":32,"ageDays":215,"advisoryIds":216,"metadata":217},462,[95,96,97,98,99,101,102,106,110,112,113,114,115,116,117,118,119],{"state":181,"checkedAt":182,"publishedAt":218,"deprecated":46,"deprecatedReason":184,"licenses":219,"advisoryIds":220,"links":221,"relatedProjects":223,"attestations":225,"verifiedAttestation":46,"projectStatus":213},"2025-04-14T08:13:43Z",[93],[95,96,97,98,99,101,102,106,110,112,113,114,115,116,117,118,119,191,192,193,195,198,200,201,202,203],[222],{"label":206,"url":207},[224],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":141,"repositoryCount":32,"occurrenceCount":32,"ageDays":227,"advisoryIds":228,"metadata":229},381,[95,99,102,112,113,114,115,116,117,118,119],{"state":181,"checkedAt":182,"publishedAt":230,"deprecated":46,"deprecatedReason":184,"licenses":231,"advisoryIds":232,"links":233,"relatedProjects":235,"attestations":237,"verifiedAttestation":46,"projectStatus":213},"2025-07-04T08:28:37Z",[93],[95,99,102,112,113,114,115,116,117,118,119,201,202,203],[234],{"label":206,"url":207},[236],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":134,"repositoryCount":239,"occurrenceCount":239,"ageDays":240,"advisoryIds":241,"metadata":242},2,278,[95,99,102,118,119],{"state":181,"checkedAt":182,"publishedAt":243,"deprecated":46,"deprecatedReason":184,"licenses":244,"advisoryIds":245,"links":246,"relatedProjects":248,"attestations":250,"verifiedAttestation":46,"projectStatus":213},"2025-10-14T15:39:23Z",[93],[95,99,102,118,119,201,202,203],[247],{"label":206,"url":207},[249],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":127,"repositoryCount":32,"occurrenceCount":34,"ageDays":252,"advisoryIds":253,"metadata":254},236,[95,99,102,118],{"state":181,"checkedAt":182,"publishedAt":255,"deprecated":46,"deprecatedReason":184,"licenses":256,"advisoryIds":257,"links":258,"relatedProjects":260,"attestations":262,"verifiedAttestation":46,"projectStatus":213},"2025-11-25T15:51:26Z",[93],[95,99,102,118,201,202,203],[259],{"label":206,"url":207},[261],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":169,"repositoryCount":32,"occurrenceCount":32,"ageDays":264,"advisoryIds":265,"metadata":266},188,[95,99,102,118],{"state":181,"checkedAt":182,"publishedAt":267,"deprecated":46,"deprecatedReason":184,"licenses":268,"advisoryIds":269,"links":270,"relatedProjects":272,"attestations":274,"verifiedAttestation":46,"projectStatus":213},"2026-01-13T11:04:40Z",[93],[95,99,102,118,201,202,203],[271],{"label":206,"url":207},[273],{"id":210,"relationType":206,"relationProvenance":211},[],{"version":148,"repositoryCount":32,"occurrenceCount":32,"ageDays":276,"advisoryIds":277,"metadata":278},185,[95,99,102,118],{"state":181,"checkedAt":182,"publishedAt":279,"deprecated":46,"deprecatedReason":184,"licenses":280,"advisoryIds":281,"links":282,"relatedProjects":284,"attestations":286,"verifiedAttestation":46,"projectStatus":213},"2026-01-16T10:38:31Z",[93],[95,99,102,118,201,202,203],[283],{"label":206,"url":207},[285],{"id":210,"relationType":206,"relationProvenance":211},[],{"occurrences":288,"occurrenceCount":91},[289,296,304,309,314,319,325,331,337,343,349],{"id":290,"repositoryId":129,"repositorySlug":130,"repositoryName":131,"repositoryPathWithNamespace":132,"ecosystem":82,"name":83,"identity":81,"version":134,"versionKey":291,"direct":184,"development":184,"sourceKind":292,"filePath":55,"blobSha":293,"sourceUrl":294,"commitSha":295},"component:395be99a5328f264667dc515","pypi:transformers@4.57.1","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":297,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":82,"name":83,"identity":81,"version":127,"versionKey":298,"direct":46,"development":46,"sourceKind":299,"filePath":300,"blobSha":301,"sourceUrl":302,"commitSha":303},"component:fbf0f55fa357a51198ac661d","pypi:transformers@4.57.3","exact-manifest-pin","requirements-dev.txt","76efb9a752987481ba23ef081e7e3a05d59ed513","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-dev.txt","ddae51bb41a08acf9c1bcdee5dc8ce92df04649c",{"id":305,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":82,"name":83,"identity":81,"version":127,"versionKey":298,"direct":46,"development":46,"sourceKind":299,"filePath":306,"blobSha":307,"sourceUrl":308,"commitSha":303},"component:a12ccf7f1c803c76a6843ed7","requirements-gpu.txt","8c2dfe24b230ff6ad5cc0779e7e45ce51a1e20a1","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-gpu.txt",{"id":310,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":82,"name":83,"identity":81,"version":127,"versionKey":298,"direct":46,"development":46,"sourceKind":299,"filePath":311,"blobSha":312,"sourceUrl":313,"commitSha":303},"component:a6094080ecd81390ad348adc","requirements-testing.txt","a62dcf771b99cedee4157c93a2e50d10f678e585","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-testing.txt",{"id":315,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":82,"name":83,"identity":81,"version":127,"versionKey":298,"direct":46,"development":46,"sourceKind":299,"filePath":316,"blobSha":317,"sourceUrl":318,"commitSha":303},"component:1cf39a2552c7bf1805db6df0","requirements.txt","da215299c628b804b28789cb8267236418948d82","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements.txt",{"id":320,"repositoryId":136,"repositorySlug":137,"repositoryName":138,"repositoryPathWithNamespace":139,"ecosystem":82,"name":83,"identity":81,"version":141,"versionKey":321,"direct":184,"development":184,"sourceKind":292,"filePath":55,"blobSha":322,"sourceUrl":323,"commitSha":324},"component:0444c983afc1c7181c1da8e2","pypi:transformers@4.53.1","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":326,"repositoryId":143,"repositorySlug":144,"repositoryName":145,"repositoryPathWithNamespace":146,"ecosystem":82,"name":83,"identity":81,"version":148,"versionKey":327,"direct":184,"development":184,"sourceKind":292,"filePath":55,"blobSha":328,"sourceUrl":329,"commitSha":330},"component:2fe8dcf72a2ed6b598e18dd1","pypi:transformers@4.57.6","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":332,"repositoryId":150,"repositorySlug":151,"repositoryName":152,"repositoryPathWithNamespace":153,"ecosystem":82,"name":83,"identity":81,"version":155,"versionKey":333,"direct":184,"development":184,"sourceKind":292,"filePath":55,"blobSha":334,"sourceUrl":335,"commitSha":336},"component:78195b67a2c175e3450ff0ef","pypi:transformers@4.51.3","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":338,"repositoryId":157,"repositorySlug":158,"repositoryName":159,"repositoryPathWithNamespace":160,"ecosystem":82,"name":83,"identity":81,"version":162,"versionKey":339,"direct":184,"development":184,"sourceKind":292,"filePath":55,"blobSha":340,"sourceUrl":341,"commitSha":342},"component:07e6d714743f77c8dacbbd3f","pypi:transformers@4.47.1","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":344,"repositoryId":164,"repositorySlug":165,"repositoryName":166,"repositoryPathWithNamespace":167,"ecosystem":82,"name":83,"identity":81,"version":169,"versionKey":345,"direct":184,"development":184,"sourceKind":292,"filePath":55,"blobSha":346,"sourceUrl":347,"commitSha":348},"component:bec14d97b4bcaa8d5c3cd7c3","pypi:transformers@4.57.4","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":350,"repositoryId":171,"repositorySlug":172,"repositoryName":173,"repositoryPathWithNamespace":174,"ecosystem":82,"name":83,"identity":81,"version":134,"versionKey":291,"direct":184,"development":184,"sourceKind":292,"filePath":55,"blobSha":351,"sourceUrl":352,"commitSha":353},"component:a51c3ed3ad058dae4245dc1b","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","f64bf528432908908d92b8263d6933301033bb7f",{"repositories":355,"vulnerabilities":372},[356,358,360,362,364,366,368,370],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":357,"evidenceCount":34},[127],{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":359,"evidenceCount":32},[134],{"id":136,"slug":137,"name":138,"pathWithNamespace":139,"versions":361,"evidenceCount":32},[141],{"id":143,"slug":144,"name":145,"pathWithNamespace":146,"versions":363,"evidenceCount":32},[148],{"id":150,"slug":151,"name":152,"pathWithNamespace":153,"versions":365,"evidenceCount":32},[155],{"id":157,"slug":158,"name":159,"pathWithNamespace":160,"versions":367,"evidenceCount":32},[162],{"id":164,"slug":165,"name":166,"pathWithNamespace":167,"versions":369,"evidenceCount":32},[169],{"id":171,"slug":172,"name":173,"pathWithNamespace":174,"versions":371,"evidenceCount":32},[134],[373,400,427,452,474,500,522,546,581,603,633,657,681,702,729,755,781,805,819,832,845,858,871,884,897],{"id":95,"slug":374,"dossier":46,"summary":375,"aliases":376,"sourceIds":378,"published":379,"modified":380,"checkedAt":7,"severity":381,"references":385,"versionKeys":399,"packageCount":32,"repositoryCount":90},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[377,202],"CVE-2026-4372",[95,202],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[382],{"type":383,"score":384},"CVSS_V3","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[386,389,392,394,397],{"type":387,"url":388},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":390,"url":391},"FIX","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":393,"url":207},"PACKAGE",{"type":395,"url":396},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":387,"url":398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[339,333,321,291,298,345,327],{"id":96,"slug":401,"dossier":46,"summary":402,"aliases":403,"sourceIds":405,"published":406,"modified":407,"checkedAt":7,"severity":408,"references":411,"versionKeys":426,"packageCount":32,"repositoryCount":239},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[404,191],"CVE-2025-3933",[96,191],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[409],{"type":383,"score":410},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[412,414,417,419,420,422,424],{"type":387,"url":413},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":415,"url":416},"WEB","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":415,"url":418},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":393,"url":207},{"type":415,"url":421},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":393,"url":423},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":387,"url":425},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[339,333],{"id":97,"slug":428,"dossier":46,"summary":429,"aliases":430,"sourceIds":432,"published":433,"modified":434,"checkedAt":7,"severity":435,"references":438,"versionKeys":451,"packageCount":32,"repositoryCount":239},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[431,192],"CVE-2025-6921",[97,192],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[436],{"type":383,"score":437},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[439,441,443,445,446,448,449],{"type":387,"url":440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":415,"url":442},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":415,"url":444},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":393,"url":207},{"type":415,"url":447},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":393,"url":423},{"type":387,"url":450},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[339,333],{"id":98,"slug":453,"dossier":46,"summary":454,"aliases":455,"sourceIds":457,"published":458,"modified":459,"checkedAt":7,"severity":460,"references":462,"versionKeys":473,"packageCount":32,"repositoryCount":239},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[456,193],"CVE-2025-6638",[98,193],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[461],{"type":383,"score":437},[463,465,466,467,468,470,471],{"type":387,"url":464},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":415,"url":442},{"type":415,"url":444},{"type":393,"url":207},{"type":415,"url":469},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":393,"url":423},{"type":387,"url":472},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[339,333],{"id":99,"slug":475,"dossier":46,"summary":476,"aliases":477,"sourceIds":479,"published":480,"modified":481,"checkedAt":7,"severity":482,"references":487,"versionKeys":499,"packageCount":32,"repositoryCount":90},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[478,201],"CVE-2026-1839",[99,201],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[483,485],{"type":383,"score":484},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":383,"score":486},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[488,490,492,493,495,497],{"type":387,"url":489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":390,"url":491},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":393,"url":207},{"type":415,"url":494},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":395,"url":496},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":387,"url":498},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[339,333,321,291,298,345,327],{"id":100,"slug":501,"dossier":46,"summary":502,"aliases":503,"sourceIds":505,"published":506,"modified":507,"checkedAt":7,"severity":508,"references":510,"versionKeys":521,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[504,194],"CVE-2024-12720",[100,194],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[509],{"type":383,"score":437},[511,513,515,516,518,519],{"type":387,"url":512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":415,"url":514},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":393,"url":207},{"type":415,"url":517},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":393,"url":423},{"type":387,"url":520},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[339],{"id":101,"slug":523,"dossier":46,"summary":524,"aliases":525,"sourceIds":527,"published":528,"modified":529,"checkedAt":7,"severity":530,"references":532,"versionKeys":545,"packageCount":32,"repositoryCount":239},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[526,195],"CVE-2025-5197",[101,195],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[531],{"type":383,"score":437},[533,535,537,539,540,542,543],{"type":387,"url":534},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":415,"url":536},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":415,"url":538},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":393,"url":207},{"type":415,"url":541},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":393,"url":423},{"type":387,"url":544},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[339,333],{"id":102,"slug":547,"dossier":46,"summary":548,"aliases":549,"sourceIds":551,"published":552,"modified":553,"checkedAt":7,"severity":554,"references":559,"versionKeys":580,"packageCount":32,"repositoryCount":90},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[550,203],"CVE-2026-5241",[102,203],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[555,557],{"type":383,"score":556},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":383,"score":558},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[560,562,564,566,568,570,573,574,576,578],{"type":387,"url":561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":390,"url":563},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":387,"url":565},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":387,"url":567},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":415,"url":569},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":571,"url":572},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":393,"url":207},{"type":415,"url":575},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":395,"url":577},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":415,"url":579},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[339,333,321,291,298,345,327],{"id":103,"slug":582,"dossier":46,"summary":502,"aliases":583,"sourceIds":585,"published":586,"modified":587,"checkedAt":7,"severity":588,"references":591,"versionKeys":602,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[584,196],"CVE-2025-1194",[103,196],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[589],{"type":383,"score":590},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[592,594,596,597,599,600],{"type":387,"url":593},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":415,"url":595},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":393,"url":207},{"type":415,"url":598},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":393,"url":423},{"type":387,"url":601},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[339],{"id":104,"slug":604,"dossier":46,"summary":605,"aliases":606,"sourceIds":608,"published":609,"modified":610,"checkedAt":7,"severity":611,"references":616,"versionKeys":632,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[607,189],"CVE-2024-11394",[104,189],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[612,614],{"type":383,"score":613},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":383,"score":615},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[617,619,621,623,624,626,628,630],{"type":387,"url":618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":415,"url":620},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":415,"url":622},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":393,"url":207},{"type":415,"url":625},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":415,"url":627},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":387,"url":629},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":387,"url":631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[339],{"id":105,"slug":634,"dossier":46,"summary":635,"aliases":636,"sourceIds":638,"published":639,"modified":640,"checkedAt":7,"severity":641,"references":643,"versionKeys":656,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[637,197],"CVE-2025-3264",[105,197],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[642],{"type":383,"score":437},[644,646,648,650,651,653,654],{"type":387,"url":645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":415,"url":647},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":415,"url":649},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":393,"url":207},{"type":415,"url":652},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":393,"url":423},{"type":387,"url":655},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[339],{"id":106,"slug":658,"dossier":46,"summary":659,"aliases":660,"sourceIds":662,"published":639,"modified":663,"checkedAt":7,"severity":664,"references":667,"versionKeys":680,"packageCount":32,"repositoryCount":239},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[661,198],"CVE-2025-3777",[106,198],"2026-07-07T17:56:47.225461188Z",[665],{"type":383,"score":666},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[668,670,672,673,675,677,678],{"type":387,"url":669},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":415,"url":671},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":393,"url":207},{"type":415,"url":674},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":415,"url":676},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":393,"url":423},{"type":387,"url":679},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[339,333],{"id":107,"slug":682,"dossier":46,"summary":683,"aliases":684,"sourceIds":686,"published":639,"modified":687,"checkedAt":7,"severity":688,"references":690,"versionKeys":701,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[685,199],"CVE-2025-3263",[107,199],"2026-07-07T17:56:57.889099913Z",[689],{"type":383,"score":437},[691,693,694,695,696,698,699],{"type":387,"url":692},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":415,"url":647},{"type":415,"url":649},{"type":393,"url":207},{"type":415,"url":697},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":393,"url":423},{"type":387,"url":700},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[339],{"id":108,"slug":703,"dossier":46,"summary":704,"aliases":705,"sourceIds":707,"published":708,"modified":709,"checkedAt":7,"severity":710,"references":714,"versionKeys":728,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[706,190],"CVE-2025-2099",[108,190],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[711,712],{"type":383,"score":437},{"type":383,"score":713},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[715,717,719,721,722,724,726],{"type":387,"url":716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":415,"url":718},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":390,"url":720},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":393,"url":207},{"type":415,"url":723},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":415,"url":725},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":387,"url":727},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[339],{"id":109,"slug":730,"dossier":46,"summary":605,"aliases":731,"sourceIds":733,"published":734,"modified":735,"checkedAt":7,"severity":736,"references":740,"versionKeys":754,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[732,187],"CVE-2024-11392",[109,187],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[737,739],{"type":383,"score":738},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":383,"score":615},[741,743,744,745,746,748,750,752],{"type":387,"url":742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":415,"url":620},{"type":415,"url":622},{"type":393,"url":207},{"type":415,"url":747},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":415,"url":749},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":387,"url":751},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":387,"url":753},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[339],{"id":110,"slug":756,"dossier":46,"summary":757,"aliases":758,"sourceIds":760,"published":761,"modified":762,"checkedAt":7,"severity":763,"references":765,"versionKeys":780,"packageCount":32,"repositoryCount":239},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[759,200],"CVE-2025-6051",[110,200],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[764],{"type":383,"score":437},[766,768,770,772,774,775,777,778],{"type":387,"url":767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":415,"url":769},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":415,"url":771},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":415,"url":773},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":393,"url":207},{"type":415,"url":776},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":393,"url":423},{"type":387,"url":779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[339,333],{"id":111,"slug":782,"dossier":46,"summary":605,"aliases":783,"sourceIds":785,"published":609,"modified":786,"checkedAt":7,"severity":787,"references":790,"versionKeys":804,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[784,188],"CVE-2024-11393",[111,188],"2026-06-10T17:00:13.252500033Z",[788,789],{"type":383,"score":613},{"type":383,"score":615},[791,793,794,795,796,798,800,802],{"type":387,"url":792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":415,"url":620},{"type":415,"url":622},{"type":393,"url":207},{"type":415,"url":797},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":415,"url":799},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":387,"url":801},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":387,"url":803},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[339],{"id":112,"slug":806,"dossier":46,"summary":184,"aliases":807,"sourceIds":809,"published":810,"modified":811,"checkedAt":7,"severity":812,"references":814,"versionKeys":817,"packageCount":32,"repositoryCount":818},"pysec-2025-211-d8bd15de",[808],"CVE-2025-14920",[112],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[813],{"type":383,"score":384},[815],{"type":387,"url":816},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[339,333,321],3,{"id":113,"slug":820,"dossier":46,"summary":184,"aliases":821,"sourceIds":823,"published":824,"modified":825,"checkedAt":7,"severity":826,"references":828,"versionKeys":831,"packageCount":32,"repositoryCount":818},"pysec-2025-212-a011b97d",[822],"CVE-2025-14921",[113],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[827],{"type":383,"score":384},[829],{"type":387,"url":830},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[339,333,321],{"id":114,"slug":833,"dossier":46,"summary":184,"aliases":834,"sourceIds":836,"published":837,"modified":838,"checkedAt":7,"severity":839,"references":841,"versionKeys":844,"packageCount":32,"repositoryCount":818},"pysec-2025-213-9043dc9b",[835],"CVE-2025-14924",[114],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[840],{"type":383,"score":384},[842],{"type":387,"url":843},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[339,333,321],{"id":115,"slug":846,"dossier":46,"summary":184,"aliases":847,"sourceIds":849,"published":850,"modified":851,"checkedAt":7,"severity":852,"references":854,"versionKeys":857,"packageCount":32,"repositoryCount":818},"pysec-2025-214-eb241255",[848],"CVE-2025-14926",[115],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[853],{"type":383,"score":384},[855],{"type":387,"url":856},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[339,333,321],{"id":116,"slug":859,"dossier":46,"summary":184,"aliases":860,"sourceIds":862,"published":863,"modified":864,"checkedAt":7,"severity":865,"references":867,"versionKeys":870,"packageCount":32,"repositoryCount":818},"pysec-2025-215-6064f491",[861],"CVE-2025-14927",[116],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[866],{"type":383,"score":384},[868],{"type":387,"url":869},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[339,333,321],{"id":117,"slug":872,"dossier":46,"summary":184,"aliases":873,"sourceIds":875,"published":876,"modified":877,"checkedAt":7,"severity":878,"references":880,"versionKeys":883,"packageCount":32,"repositoryCount":818},"pysec-2025-216-5708ed01",[874],"CVE-2025-14928",[117],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[879],{"type":383,"score":384},[881],{"type":387,"url":882},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[339,333,321],{"id":118,"slug":885,"dossier":46,"summary":184,"aliases":886,"sourceIds":888,"published":889,"modified":890,"checkedAt":7,"severity":891,"references":893,"versionKeys":896,"packageCount":32,"repositoryCount":90},"pysec-2025-217-2c1ad388",[887],"CVE-2025-14929",[118],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[892],{"type":383,"score":384},[894],{"type":387,"url":895},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[339,333,321,291,298,345,327],{"id":119,"slug":898,"dossier":46,"summary":184,"aliases":899,"sourceIds":901,"published":902,"modified":903,"checkedAt":7,"severity":904,"references":906,"versionKeys":909,"packageCount":32,"repositoryCount":910},"pysec-2025-218-39811fc3",[900],"CVE-2025-14930",[119],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[905],{"type":383,"score":384},[907],{"type":387,"url":908},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[339,333,321,291],5,1784558563826]