[{"data":1,"prerenderedAt":5103},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11301":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":258,"related":261},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-09-16T04:45:26.395Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-09-16T04:44:00.147Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},43,42,1,23,4,26,40,37,36,0,4116,4105,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":37,"topPackage":71},2457,50,7121,9,55,2423,34,795,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5348837209302325,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":32,"advisoryIds":105,"advisoryCount":256,"providers":257},"opencode:11301","opencode-11301",11301,"URBAN.KI AirGuardAI","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai","363d2a9d9e13db101242ed39bc94a5524509eb1f","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai\u002F-\u002Fcommit\u002F363d2a9d9e13db101242ed39bc94a5524509eb1f","2026-09-15T12:42:44.969Z","2026-09-14T08:20:54.000Z",{"complete":90,"entryCount":91,"truncated":47},true,95,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","d8e9658e0c9c7ed8859da5223f957aa8010f39de","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-airguardai\u002F-\u002Fblob\u002F363d2a9d9e13db101242ed39bc94a5524509eb1f\u002Fuv.lock","59cb0231b92ede8e7f9c5ef5b78867b9fa36e7a4e0fc2600956a5c532b08c9e0",313514,"parsed",102,[102],"pypi",7,17,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4m7w-qmgq-4wj5","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-768j-98cg-p3fv","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-jw8x-6495-233v","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","GHSA-xrqw-3rrv-vx5w","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-3716",150,[],{"files":259,"occurrenceCount":100},[260],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":262,"vulnerabilities":1197},[263,276,286,296,306,315,324,333,344,356,366,375,385,394,404,413,424,434,443,452,461,470,481,490,500,509,519,529,538,547,556,565,574,583,592,601,610,619,628,637,645,654,663,672,681,690,699,708,717,725,734,743,752,761,770,779,788,797,807,816,825,834,843,852,861,870,879,888,897,906,915,923,932,940,950,958,967,975,984,993,1002,1011,1020,1029,1039,1048,1057,1066,1074,1083,1091,1100,1109,1117,1125,1134,1143,1152,1161,1170,1179,1188],{"id":264,"slug":265,"identity":266,"label":267,"aiRelevant":90,"provider":268,"advisoryCount":35,"licenseExpressions":271,"versions":273,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":275},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":269,"label":270},"hugging-face","Hugging Face",[272],"Apache-2.0",[274],"5.8.0",[56],{"id":277,"slug":278,"identity":279,"label":280,"aiRelevant":90,"provider":83,"advisoryCount":33,"licenseExpressions":281,"versions":283,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":285},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[282],"BSD-3-Clause",[284],"2.11.0",[56],{"id":287,"slug":288,"identity":289,"label":290,"aiRelevant":90,"provider":291,"advisoryCount":32,"licenseExpressions":292,"versions":293,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":295},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":269,"label":270},[272],[294],"4.8.5",[56],{"id":297,"slug":298,"identity":299,"label":300,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":301,"versions":303,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":305},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[302],"non-standard",[304],"1.13.0",[56],{"id":307,"slug":308,"identity":309,"label":310,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":311,"versions":312,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":314},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[282,302],[313],"1.8.0",[56],{"id":316,"slug":317,"identity":318,"label":319,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":320,"versions":321,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":323},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[302],[322],"0.22.2",[56],{"id":325,"slug":326,"identity":327,"label":328,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":329,"versions":330,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":332},"package:pypi:lightgbm","lightgbm-da1283c4","pypi:lightgbm","LightGBM",[302],[331],"4.6.0",[56],{"id":334,"slug":335,"identity":336,"label":337,"aiRelevant":47,"provider":83,"advisoryCount":338,"licenseExpressions":339,"versions":341,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":343},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[272,340],"Apache-2.0 AND MIT",[342],"3.13.5",[56],{"id":345,"slug":346,"identity":347,"label":348,"aiRelevant":47,"provider":83,"advisoryCount":349,"licenseExpressions":350,"versions":353,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":355},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[351,352],"HPND","MIT-CMU",[354],"12.2.0",[56],{"id":357,"slug":358,"identity":359,"label":360,"aiRelevant":47,"provider":83,"advisoryCount":361,"licenseExpressions":362,"versions":363,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":365},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[272],[364],"0.0.28",[56],{"id":367,"slug":368,"identity":369,"label":370,"aiRelevant":47,"provider":83,"advisoryCount":361,"licenseExpressions":371,"versions":372,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":374},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[282],[373],"1.0.0",[56],{"id":376,"slug":377,"identity":378,"label":379,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":380,"versions":382,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":384},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[381],"MIT",[383],"2.7.0",[56],{"id":386,"slug":387,"identity":388,"label":389,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":390,"versions":391,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":393},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[282,302],[392],"3.1.6",[56],{"id":395,"slug":396,"identity":397,"label":398,"aiRelevant":47,"provider":83,"advisoryCount":399,"licenseExpressions":400,"versions":401,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":403},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[272],[402],"2.34.0",[56],{"id":405,"slug":406,"identity":407,"label":408,"aiRelevant":47,"provider":83,"advisoryCount":399,"licenseExpressions":409,"versions":410,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":412},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[381],[411],"81.0.0",[56],{"id":414,"slug":415,"identity":416,"label":417,"aiRelevant":47,"provider":83,"advisoryCount":418,"licenseExpressions":419,"versions":421,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":423},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[381,420],"Unlicense",[422],"3.29.0",[56],{"id":425,"slug":426,"identity":427,"label":428,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":429,"versions":431,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":433},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[430],"MPL-2.0",[432],"2026.4.22",[56],{"id":435,"slug":436,"identity":437,"label":438,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":439,"versions":440,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":442},"package:pypi:click","click-ef97f731","pypi:click","click",[282,302],[441],"8.3.3",[56],{"id":444,"slug":445,"identity":446,"label":447,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":448,"versions":449,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":451},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[381],[450],"4.62.1",[56],{"id":453,"slug":454,"identity":455,"label":456,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":457,"versions":458,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":460},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[381],[459],"0.16.0",[56],{"id":462,"slug":463,"identity":464,"label":465,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":466,"versions":467,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":469},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[282,302],[468],"3.14",[56],{"id":471,"slug":472,"identity":473,"label":474,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":475,"versions":478,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":480},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[476,477],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[479],"3.11.9",[56],{"id":482,"slug":483,"identity":484,"label":485,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":486,"versions":487,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":489},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[272,302],[488],"24.0.0",[56],{"id":491,"slug":492,"identity":493,"label":494,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":495,"versions":497,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":499},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[496],"BSD-2-Clause",[498],"2.20.0",[56],{"id":501,"slug":502,"identity":503,"label":504,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":505,"versions":506,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":508},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[282],[507],"1.2.2",[56],{"id":510,"slug":511,"identity":512,"label":513,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":514,"versions":516,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":518},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[515],"MIT AND MPL-2.0",[517],"4.67.3",[56],{"id":520,"slug":521,"identity":522,"label":523,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":524,"versions":526,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":528},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[525],"PSF-2.0",[527],"2.6.1",[56],{"id":530,"slug":531,"identity":532,"label":533,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":534,"versions":535,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":537},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[272],[536],"1.4.0",[56],{"id":539,"slug":540,"identity":541,"label":542,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":543,"versions":544,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":546},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[381],[545],"0.0.4",[56],{"id":548,"slug":549,"identity":550,"label":551,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":552,"versions":553,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":555},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[381],[554],"4.13.0",[56],{"id":557,"slug":558,"identity":559,"label":560,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":561,"versions":562,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":564},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[381],[563],"26.1.0",[56],{"id":566,"slug":567,"identity":568,"label":569,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":570,"versions":571,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":573},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[381],[572],"3.4.7",[56],{"id":575,"slug":576,"identity":577,"label":578,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":579,"versions":580,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":582},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[302],[581],"0.4.6",[56],{"id":584,"slug":585,"identity":586,"label":587,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":588,"versions":589,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":591},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[302],[590],"1.3.3",[56],{"id":593,"slug":594,"identity":595,"label":596,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":597,"versions":598,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":600},"package:pypi:cuda-bindings","cuda-bindings-63e94baa","pypi:cuda-bindings","cuda-bindings",[302],[599],"13.2.0",[56],{"id":602,"slug":603,"identity":604,"label":605,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":606,"versions":607,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":609},"package:pypi:cuda-pathfinder","cuda-pathfinder-6d2ddb13","pypi:cuda-pathfinder","cuda-pathfinder",[272],[608],"1.5.4",[56],{"id":611,"slug":612,"identity":613,"label":614,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":615,"versions":616,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":618},"package:pypi:cuda-toolkit","cuda-toolkit-96ffd01e","pypi:cuda-toolkit","cuda-toolkit",[],[617],"13.0.2",[56],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":624,"versions":625,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":627},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[302],[626],"0.12.1",[56],{"id":629,"slug":630,"identity":631,"label":632,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":633,"versions":634,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":636},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[282],[635],"0.4.1",[56],{"id":638,"slug":639,"identity":640,"label":641,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":642,"versions":643,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":644},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[272],[313],[56],{"id":646,"slug":647,"identity":648,"label":649,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":650,"versions":651,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":653},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[282,302],[652],"2026.2.0",[56],{"id":655,"slug":656,"identity":657,"label":658,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":659,"versions":660,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":662},"package:pypi:gradio-client","gradio-client-f28a3144","pypi:gradio-client","gradio-client",[272],[661],"2.5.0",[56],{"id":664,"slug":665,"identity":666,"label":667,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":668,"versions":669,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":671},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[272],[670],"1.5.0",[56],{"id":673,"slug":674,"identity":675,"label":676,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":677,"versions":678,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":680},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[282],[679],"1.0.9",[56],{"id":682,"slug":683,"identity":684,"label":685,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":686,"versions":687,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":689},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[381],[688],"0.7.1",[56],{"id":691,"slug":692,"identity":693,"label":694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":695,"versions":696,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":698},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[282],[697],"0.28.1",[56],{"id":700,"slug":701,"identity":702,"label":703,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":704,"versions":705,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":707},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[272,302],[706],"1.14.0",[56],{"id":709,"slug":710,"identity":711,"label":712,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":713,"versions":714,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":716},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[282],[715],"1.5.3",[56],{"id":718,"slug":719,"identity":720,"label":721,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":722,"versions":723,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":724},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[302],[670],[56],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":730,"versions":731,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":733},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[381],[732],"4.2.0",[56],{"id":735,"slug":736,"identity":737,"label":738,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":739,"versions":740,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":742},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[282,302],[741],"3.0.3",[56],{"id":744,"slug":745,"identity":746,"label":747,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":748,"versions":749,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":751},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[302],[750],"3.10.9",[56],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":757,"versions":758,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":760},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[381],[759],"0.1.2",[56],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":766,"versions":767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":769},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[302],[768],"1.3.0",[56],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":775,"versions":776,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":778},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[272],[777],"6.7.1",[56],{"id":780,"slug":781,"identity":782,"label":783,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":784,"versions":785,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":787},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[282],[786],"0.70.19",[56],{"id":789,"slug":790,"identity":791,"label":792,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":793,"versions":794,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":796},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[282,302],[795],"3.6.1",[56],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":802,"versions":804,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":806},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[803,302],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[805],"2.4.4",[56],{"id":808,"slug":809,"identity":810,"label":811,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":812,"versions":813,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":815},"package:pypi:nvidia-cublas","nvidia-cublas-6a0535be","pypi:nvidia-cublas","nvidia-cublas",[302],[814],"13.1.0.3",[56],{"id":817,"slug":818,"identity":819,"label":820,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":821,"versions":822,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":824},"package:pypi:nvidia-cuda-cupti","nvidia-cuda-cupti-28886b51","pypi:nvidia-cuda-cupti","nvidia-cuda-cupti",[302],[823],"13.0.85",[56],{"id":826,"slug":827,"identity":828,"label":829,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":830,"versions":831,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":833},"package:pypi:nvidia-cuda-nvrtc","nvidia-cuda-nvrtc-79a057fb","pypi:nvidia-cuda-nvrtc","nvidia-cuda-nvrtc",[302],[832],"13.0.88",[56],{"id":835,"slug":836,"identity":837,"label":838,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":839,"versions":840,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":842},"package:pypi:nvidia-cuda-runtime","nvidia-cuda-runtime-55699b1c","pypi:nvidia-cuda-runtime","nvidia-cuda-runtime",[302],[841],"13.0.96",[56],{"id":844,"slug":845,"identity":846,"label":847,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":848,"versions":849,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":851},"package:pypi:nvidia-cudnn-cu13","nvidia-cudnn-cu13-2486f81c","pypi:nvidia-cudnn-cu13","nvidia-cudnn-cu13",[302],[850],"9.19.0.56",[56],{"id":853,"slug":854,"identity":855,"label":856,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":857,"versions":858,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":860},"package:pypi:nvidia-cufft","nvidia-cufft-b2cd0527","pypi:nvidia-cufft","nvidia-cufft",[302],[859],"12.0.0.61",[56],{"id":862,"slug":863,"identity":864,"label":865,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":866,"versions":867,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":869},"package:pypi:nvidia-cufile","nvidia-cufile-52c06111","pypi:nvidia-cufile","nvidia-cufile",[302],[868],"1.15.1.6",[56],{"id":871,"slug":872,"identity":873,"label":874,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":875,"versions":876,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":878},"package:pypi:nvidia-curand","nvidia-curand-05859d58","pypi:nvidia-curand","nvidia-curand",[302],[877],"10.4.0.35",[56],{"id":880,"slug":881,"identity":882,"label":883,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":884,"versions":885,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":887},"package:pypi:nvidia-cusolver","nvidia-cusolver-6f33f83d","pypi:nvidia-cusolver","nvidia-cusolver",[302],[886],"12.0.4.66",[56],{"id":889,"slug":890,"identity":891,"label":892,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":893,"versions":894,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":896},"package:pypi:nvidia-cusparse","nvidia-cusparse-6ffaf037","pypi:nvidia-cusparse","nvidia-cusparse",[302],[895],"12.6.3.3",[56],{"id":898,"slug":899,"identity":900,"label":901,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":902,"versions":903,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":905},"package:pypi:nvidia-cusparselt-cu13","nvidia-cusparselt-cu13-bf1c94c0","pypi:nvidia-cusparselt-cu13","nvidia-cusparselt-cu13",[302],[904],"0.8.0",[56],{"id":907,"slug":908,"identity":909,"label":910,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":911,"versions":912,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":914},"package:pypi:nvidia-nccl-cu13","nvidia-nccl-cu13-e883df84","pypi:nvidia-nccl-cu13","nvidia-nccl-cu13",[302],[913],"2.28.9",[56],{"id":916,"slug":917,"identity":918,"label":919,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":920,"versions":921,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":922},"package:pypi:nvidia-nvjitlink","nvidia-nvjitlink-c5d1771c","pypi:nvidia-nvjitlink","nvidia-nvjitlink",[302],[832],[56],{"id":924,"slug":925,"identity":926,"label":927,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":928,"versions":929,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":931},"package:pypi:nvidia-nvshmem-cu13","nvidia-nvshmem-cu13-8f04166d","pypi:nvidia-nvshmem-cu13","nvidia-nvshmem-cu13",[302],[930],"3.4.5",[56],{"id":933,"slug":934,"identity":935,"label":936,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":937,"versions":938,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":939},"package:pypi:nvidia-nvtx","nvidia-nvtx-2bf32610","pypi:nvidia-nvtx","nvidia-nvtx",[272],[823],[56],{"id":941,"slug":942,"identity":943,"label":944,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":945,"versions":947,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":949},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[946,302],"Apache-2.0 OR BSD-2-Clause",[948],"26.2",[56],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":955,"versions":956,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":957},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[302],[741],[56],{"id":959,"slug":960,"identity":961,"label":962,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":963,"versions":964,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":966},"package:pypi:polars","polars-f649ebed","pypi:polars","polars",[381,302],[965],"1.40.1",[56],{"id":968,"slug":969,"identity":970,"label":971,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":972,"versions":973,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":974},"package:pypi:polars-runtime-32","polars-runtime-32-7674b461","pypi:polars-runtime-32","polars-runtime-32",[381],[965],[56],{"id":976,"slug":977,"identity":978,"label":979,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":980,"versions":981,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":983},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[272],[982],"0.5.2",[56],{"id":985,"slug":986,"identity":987,"label":988,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":989,"versions":990,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":992},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[282],[991],"7.2.2",[56],{"id":994,"slug":995,"identity":996,"label":997,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":998,"versions":999,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1001},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[381],[1000],"3.3.2",[56],{"id":1003,"slug":1004,"identity":1005,"label":1006,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1007,"versions":1008,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1010},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[381],[1009],"3.7.2",[56],{"id":1012,"slug":1013,"identity":1014,"label":1015,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1016,"versions":1017,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1019},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[302],[1018],"2.9.0.post0",[56],{"id":1021,"slug":1022,"identity":1023,"label":1024,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1025,"versions":1026,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1028},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[381],[1027],"6.0.3",[56],{"id":1030,"slug":1031,"identity":1032,"label":1033,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1034,"versions":1036,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1038},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1035,302],"Apache-2.0 AND CNRI-Python",[1037],"2026.5.9",[56],{"id":1040,"slug":1041,"identity":1042,"label":1043,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1044,"versions":1045,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1047},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[381],[1046],"15.0.0",[56],{"id":1049,"slug":1050,"identity":1051,"label":1052,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1053,"versions":1054,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1056},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[302],[1055],"0.7.0",[56],{"id":1058,"slug":1059,"identity":1060,"label":1061,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1062,"versions":1063,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1065},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[302],[1064],"1.17.1",[56],{"id":1067,"slug":1068,"identity":1069,"label":1070,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1071,"versions":1072,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1073},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[302],[608],[56],{"id":1075,"slug":1076,"identity":1077,"label":1078,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1079,"versions":1080,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1082},"package:pypi:six","six-3c3888bd","pypi:six","six",[381],[1081],"1.17.0",[56],{"id":1084,"slug":1085,"identity":1086,"label":1087,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1088,"versions":1089,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1090},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[302],[706],[56],{"id":1092,"slug":1093,"identity":1094,"label":1095,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1096,"versions":1097,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1099},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[282],[1098],"3.6.0",[56],{"id":1101,"slug":1102,"identity":1103,"label":1104,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1105,"versions":1106,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1108},"package:pypi:trackio","trackio-de70160f","pypi:trackio","trackio",[381],[1107],"0.25.1",[56],{"id":1110,"slug":1111,"identity":1112,"label":1113,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1114,"versions":1115,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1116},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[381],[1098],[56],{"id":1118,"slug":1119,"identity":1120,"label":1121,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1122,"versions":1123,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1124},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[381],[1107],[56],{"id":1126,"slug":1127,"identity":1128,"label":1129,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1130,"versions":1131,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1133},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[525,302],[1132],"4.15.0",[56],{"id":1135,"slug":1136,"identity":1137,"label":1138,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1139,"versions":1140,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1142},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[272],[1141],"2026.2",[56],{"id":1144,"slug":1145,"identity":1146,"label":1147,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1148,"versions":1149,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1151},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[282],[1150],"0.46.0",[56],{"id":1153,"slug":1154,"identity":1155,"label":1156,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1157,"versions":1158,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1160},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[381],[1159],"0.22.1",[56],{"id":1162,"slug":1163,"identity":1164,"label":1165,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1166,"versions":1167,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1169},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[381],[1168],"1.1.1",[56],{"id":1171,"slug":1172,"identity":1173,"label":1174,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1175,"versions":1176,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1178},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[282],[1177],"16.0",[56],{"id":1180,"slug":1181,"identity":1182,"label":1183,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1184,"versions":1185,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1187},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[496,302],[1186],"3.7.0",[56],{"id":1189,"slug":1190,"identity":1191,"label":1192,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1193,"versions":1194,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1196},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[272],[1195],"1.23.0",[56],[1198,1237,1271,1304,1336,1362,1394,1437,1463,1489,1512,1547,1573,1593,1629,1647,1673,1702,1741,1767,1792,1820,1843,1880,1904,1927,1951,1981,2008,2027,2055,2078,2105,2128,2150,2173,2199,2222,2254,2287,2306,2357,2396,2419,2444,2468,2491,2525,2551,2581,2601,2626,2658,2713,2745,2775,2807,2841,2866,2905,2929,2957,2980,2999,3032,3057,3085,3108,3136,3170,3204,3226,3249,3270,3305,3335,3368,3391,3418,3443,3464,3493,3517,3536,3558,3588,3616,3639,3664,3687,3709,3731,3758,3783,3807,3828,3852,3878,3900,3927,3947,3984,4016,4043,4070,4098,4125,4155,4189,4211,4234,4262,4289,4316,4339,4369,4421,4444,4470,4504,4529,4561,4580,4599,4627,4652,4679,4699,4716,4735,4752,4773,4789,4804,4821,4836,4853,4870,4887,4901,4914,4927,4940,4953,4966,4979,4992,5015,5048,5077],{"id":106,"slug":1199,"dossier":47,"summary":1200,"aliases":1201,"sourceIds":1204,"published":1205,"modified":1206,"checkedAt":7,"severity":1207,"references":1211,"versionKeys":1235,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1202,1203],"CVE-2024-39689","PYSEC-2024-230",[106,1203],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[1208],{"type":1209,"score":1210},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1212,1215,1217,1220,1223,1226,1229,1231,1233],{"type":1213,"url":1214},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1213,"url":1216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1218,"url":1219},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1221,"url":1222},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1224,"url":1225},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1227,"url":1228},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1224,"url":1230},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1213,"url":1232},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1213,"url":1234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1236],"pypi:certifi@2024.6.2",{"id":107,"slug":1238,"dossier":47,"summary":1239,"aliases":1240,"sourceIds":1243,"published":1244,"modified":1245,"checkedAt":7,"severity":1246,"references":1249,"versionKeys":1261,"packageCount":32,"repositoryCount":42},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1241,1242],"CVE-2026-4372","PYSEC-2026-2289",[107,1242],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[1247],{"type":1209,"score":1248},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1250,1252,1254,1256,1259],{"type":1213,"url":1251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1218,"url":1253},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1221,"url":1255},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1257,"url":1258},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1213,"url":1260},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1262,1263,1264,1265,1266,1267,1268,1269,1270],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":108,"slug":1272,"dossier":47,"summary":1273,"aliases":1274,"sourceIds":1277,"published":1278,"modified":1279,"checkedAt":7,"severity":1280,"references":1283,"versionKeys":1300,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[1275,1276],"CVE-2025-54121","PYSEC-2026-1941",[108,1276],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[1281],{"type":1209,"score":1282},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1284,1286,1288,1290,1292,1294,1296,1298],{"type":1224,"url":1285},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":1213,"url":1287},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":1218,"url":1289},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":1221,"url":1291},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":1224,"url":1293},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":1224,"url":1295},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":1221,"url":1297},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":1213,"url":1299},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[1301,1302,1303],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":109,"slug":1305,"dossier":47,"summary":1306,"aliases":1307,"sourceIds":1310,"published":1311,"modified":1312,"checkedAt":7,"severity":1313,"references":1319,"versionKeys":1326,"packageCount":32,"repositoryCount":42},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1308,1309],"CVE-2026-54279","PYSEC-2026-2112",[109,1309],"2026-06-15T20:08:51Z","2026-09-10T03:51:07.471021274Z",[1314,1317],{"type":1315,"score":1316},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1209,"score":1318},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1320,1322,1324],{"type":1213,"url":1321},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1221,"url":1323},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1218,"url":1325},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[1327,1328,1329,1330,1331,1332,1333,1334,1335],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":110,"slug":1337,"dossier":47,"summary":1338,"aliases":1339,"sourceIds":1342,"published":1343,"modified":1344,"checkedAt":7,"severity":1345,"references":1350,"versionKeys":1360,"packageCount":32,"repositoryCount":1361},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[1340,1341],"CVE-2026-34514","PYSEC-2026-2096",[110,1341],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[1346,1348],{"type":1315,"score":1347},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1209,"score":1349},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1351,1353,1355,1357,1358],{"type":1218,"url":1352},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1213,"url":1354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1218,"url":1356},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1221,"url":1323},{"type":1213,"url":1359},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[1327,1328,1329,1330,1331,1332,1333,1334],10,{"id":111,"slug":1363,"dossier":90,"summary":1364,"aliases":1365,"sourceIds":1368,"published":1369,"modified":1370,"checkedAt":7,"severity":1371,"references":1374,"versionKeys":1387,"packageCount":32,"repositoryCount":1393},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1366,1367],"CVE-2025-66471","PYSEC-2026-1994",[111,1367],"2025-12-05T18:15:54Z","2026-09-10T03:50:31.327173527Z",[1372],{"type":1315,"score":1373},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1375,1377,1379,1381,1383,1385],{"type":1224,"url":1376},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1213,"url":1378},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1218,"url":1380},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1221,"url":1382},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1221,"url":1384},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1213,"url":1386},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1388,1389,1390,1391,1392],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",16,{"id":112,"slug":1395,"dossier":47,"summary":1396,"aliases":1397,"sourceIds":1401,"published":1402,"modified":1403,"checkedAt":7,"severity":1404,"references":1411,"versionKeys":1433,"packageCount":32,"repositoryCount":399},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1398,1399,1400],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[112,1400],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[1405,1407,1409],{"type":1209,"score":1406},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1315,"score":1408},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1209,"score":1410},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1412,1414,1417,1419,1421,1423,1425,1427,1429,1431],{"type":1213,"url":1413},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1415,"url":1416},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1415,"url":1418},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1224,"url":1420},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1221,"url":1422},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1224,"url":1424},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1415,"url":1426},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1213,"url":1428},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1213,"url":1430},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1213,"url":1432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1434,1435,1436],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":113,"slug":1438,"dossier":47,"summary":1439,"aliases":1440,"sourceIds":1443,"published":1444,"modified":1445,"checkedAt":7,"severity":1446,"references":1448,"versionKeys":1462,"packageCount":32,"repositoryCount":399},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[1441,1442],"CVE-2025-3933","PYSEC-2026-1977",[113,1442],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[1447],{"type":1209,"score":1282},[1449,1451,1453,1455,1456,1458,1460],{"type":1213,"url":1450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1224,"url":1452},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1224,"url":1454},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1221,"url":1255},{"type":1224,"url":1457},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1221,"url":1459},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1213,"url":1461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1262,1263,1264],{"id":114,"slug":1464,"dossier":90,"summary":1465,"aliases":1466,"sourceIds":1469,"published":1470,"modified":1471,"checkedAt":7,"severity":1472,"references":1475,"versionKeys":1488,"packageCount":32,"repositoryCount":1393},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1467,1468],"CVE-2026-21441","PYSEC-2026-1996",[114,1468],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1473,1474],{"type":1209,"score":1318},{"type":1315,"score":1373},[1476,1478,1480,1482,1483,1485,1486],{"type":1224,"url":1477},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1213,"url":1479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1218,"url":1481},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1221,"url":1382},{"type":1224,"url":1484},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1221,"url":1384},{"type":1213,"url":1487},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1388,1389,1390,1391,1392],{"id":115,"slug":1490,"dossier":47,"summary":1491,"aliases":1492,"sourceIds":1495,"published":1496,"modified":1497,"checkedAt":7,"severity":1498,"references":1502,"versionKeys":1511,"packageCount":32,"repositoryCount":1361},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1493,1494],"CVE-2026-34517","PYSEC-2026-2099",[115,1494],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[1499,1501],{"type":1315,"score":1500},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1209,"score":1282},[1503,1505,1507,1509,1510],{"type":1218,"url":1504},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1213,"url":1506},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1218,"url":1508},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":116,"slug":1513,"dossier":90,"summary":1514,"aliases":1515,"sourceIds":1519,"published":1520,"modified":1521,"checkedAt":7,"severity":1522,"references":1524,"versionKeys":1537,"packageCount":32,"repositoryCount":104},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1516,1517,1518],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[116,1518],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[1523],{"type":1209,"score":1318},[1525,1527,1529,1531,1533,1535],{"type":1257,"url":1526},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1213,"url":1528},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1218,"url":1530},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1224,"url":1532},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1221,"url":1534},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1213,"url":1536},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1538,1539,1540,1541,1542,1543,1544,1545,1546],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",{"id":117,"slug":1548,"dossier":47,"summary":1549,"aliases":1550,"sourceIds":1553,"published":1554,"modified":1555,"checkedAt":7,"severity":1556,"references":1559,"versionKeys":1572,"packageCount":32,"repositoryCount":361},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1551,1552],"CVE-2025-50182","PYSEC-2026-1997",[117,1552],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1557],{"type":1209,"score":1558},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1560,1562,1564,1566,1567,1569,1570],{"type":1224,"url":1561},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1213,"url":1563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1218,"url":1565},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1221,"url":1382},{"type":1224,"url":1568},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1221,"url":1384},{"type":1213,"url":1571},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1388,1389,1390,1391],{"id":118,"slug":1574,"dossier":47,"summary":1575,"aliases":1576,"sourceIds":1579,"published":1580,"modified":1581,"checkedAt":7,"severity":1582,"references":1586,"versionKeys":1592,"packageCount":32,"repositoryCount":42},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[1577,1578],"CVE-2026-54273","PYSEC-2026-2107",[118,1578],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[1583,1585],{"type":1315,"score":1584},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1209,"score":1318},[1587,1589,1591],{"type":1213,"url":1588},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1218,"url":1590},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1221,"url":1323},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":119,"slug":1594,"dossier":47,"summary":1595,"aliases":1596,"sourceIds":1599,"published":1600,"modified":1601,"checkedAt":7,"severity":1602,"references":1607,"versionKeys":1624,"packageCount":32,"repositoryCount":34},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[1597,1598],"CVE-2026-69112","PYSEC-2026-3804",[119,1598],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[1603,1605],{"type":1209,"score":1604},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":1315,"score":1606},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1608,1610,1612,1614,1616,1618,1620,1622],{"type":1213,"url":1609},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":1224,"url":1611},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":1224,"url":1613},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":1224,"url":1615},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":1221,"url":1617},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":1224,"url":1619},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":1221,"url":1621},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":1213,"url":1623},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[1625,1626,1627,1628],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":120,"slug":1630,"dossier":47,"summary":1631,"aliases":1632,"sourceIds":1635,"published":1636,"modified":1637,"checkedAt":7,"severity":1638,"references":1642,"versionKeys":1646,"packageCount":32,"repositoryCount":42},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[1633,1634],"CVE-2026-54275","PYSEC-2026-237",[120,1634],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[1639,1641],{"type":1315,"score":1640},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1209,"score":1318},[1643,1645],{"type":1213,"url":1644},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1221,"url":1323},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":121,"slug":1648,"dossier":47,"summary":1649,"aliases":1650,"sourceIds":1653,"published":1654,"modified":1655,"checkedAt":7,"severity":1656,"references":1659,"versionKeys":1672,"packageCount":32,"repositoryCount":34},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[1651,1652],"CVE-2025-6921","PYSEC-2026-1980",[121,1652],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[1657],{"type":1209,"score":1658},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1660,1662,1664,1666,1667,1669,1670],{"type":1213,"url":1661},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1224,"url":1663},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1224,"url":1665},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1221,"url":1255},{"type":1224,"url":1668},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1221,"url":1459},{"type":1213,"url":1671},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1262,1263,1264,1265],{"id":122,"slug":1674,"dossier":90,"summary":1675,"aliases":1676,"sourceIds":1680,"published":1681,"modified":1682,"checkedAt":7,"severity":1683,"references":1686,"versionKeys":1701,"packageCount":32,"repositoryCount":104},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1677,1678,1679],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[122,1679],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[1684],{"type":1209,"score":1685},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1687,1689,1691,1693,1695,1697,1699,1700],{"type":1257,"url":1688},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1213,"url":1690},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1218,"url":1692},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1218,"url":1694},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1218,"url":1696},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1224,"url":1698},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1221,"url":1534},{"type":1213,"url":1536},[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":123,"slug":1703,"dossier":47,"summary":1704,"aliases":1705,"sourceIds":1708,"published":1709,"modified":1710,"checkedAt":7,"severity":1711,"references":1714,"versionKeys":1737,"packageCount":32,"repositoryCount":1740},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1706,1707],"CVE-2026-4539","PYSEC-2026-2987",[123,1707],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[1712,1713],{"type":1209,"score":1406},{"type":1315,"score":1408},[1715,1717,1719,1721,1723,1725,1727,1729,1731,1733,1735],{"type":1213,"url":1716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1224,"url":1718},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1224,"url":1720},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1224,"url":1722},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1221,"url":1724},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1224,"url":1726},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1224,"url":1728},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1224,"url":1730},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1224,"url":1732},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1221,"url":1734},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1213,"url":1736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1738,1739],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",15,{"id":124,"slug":1742,"dossier":47,"summary":1743,"aliases":1744,"sourceIds":1748,"published":1749,"modified":1750,"checkedAt":7,"severity":1751,"references":1756,"versionKeys":1766,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1745,1746,1747],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[124,1747],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1752,1754],{"type":1315,"score":1753},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1209,"score":1755},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1757,1759,1761,1763,1765],{"type":1213,"url":1758},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1213,"url":1760},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1224,"url":1762},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1224,"url":1764},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1221,"url":1422},[1434],{"id":125,"slug":1768,"dossier":47,"summary":1769,"aliases":1770,"sourceIds":1773,"published":1774,"modified":1775,"checkedAt":7,"severity":1776,"references":1779,"versionKeys":1791,"packageCount":32,"repositoryCount":361},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[1771,1772],"CVE-2025-69226","PYSEC-2026-1097",[125,1772],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[1777],{"type":1315,"score":1778},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1780,1782,1784,1786,1787,1789],{"type":1224,"url":1781},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1213,"url":1783},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1218,"url":1785},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1221,"url":1323},{"type":1221,"url":1788},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1213,"url":1790},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[1327,1328,1329,1330,1331,1332,1333],{"id":126,"slug":1793,"dossier":47,"summary":1794,"aliases":1795,"sourceIds":1798,"published":1799,"modified":1800,"checkedAt":7,"severity":1801,"references":1805,"versionKeys":1818,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[1796,1797],"CVE-2024-53981","PYSEC-2026-1851",[126,1797],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[1802,1803],{"type":1209,"score":1318},{"type":1315,"score":1804},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1806,1808,1810,1812,1814,1816],{"type":1224,"url":1807},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":1213,"url":1809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":1224,"url":1811},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":1221,"url":1813},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":1221,"url":1815},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":1213,"url":1817},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[1819],"pypi:python-multipart@0.0.9",{"id":127,"slug":1821,"dossier":47,"summary":1822,"aliases":1823,"sourceIds":1826,"published":1827,"modified":1828,"checkedAt":7,"severity":1829,"references":1831,"versionKeys":1842,"packageCount":32,"repositoryCount":34},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[1824,1825],"CVE-2025-6638","PYSEC-2026-1981",[127,1825],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[1830],{"type":1209,"score":1658},[1832,1834,1835,1836,1837,1839,1840],{"type":1213,"url":1833},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1224,"url":1663},{"type":1224,"url":1665},{"type":1221,"url":1255},{"type":1224,"url":1838},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1221,"url":1459},{"type":1213,"url":1841},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1262,1263,1264,1265],{"id":128,"slug":1844,"dossier":47,"summary":1845,"aliases":1846,"sourceIds":1850,"published":1851,"modified":1852,"checkedAt":7,"severity":1853,"references":1858,"versionKeys":1875,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1847,1848,1849],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[128,1849],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[1854,1856],{"type":1315,"score":1855},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1209,"score":1857},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1859,1861,1863,1865,1867,1869,1871,1873],{"type":1257,"url":1860},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1213,"url":1862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1415,"url":1864},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1218,"url":1866},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1224,"url":1868},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1221,"url":1870},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1224,"url":1872},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1227,"url":1874},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1876,1877,1878,1879],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":129,"slug":1881,"dossier":47,"summary":1882,"aliases":1883,"sourceIds":1886,"published":1887,"modified":1888,"checkedAt":7,"severity":1889,"references":1891,"versionKeys":1900,"packageCount":32,"repositoryCount":103},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[1884,1885],"CVE-2026-53539","PYSEC-2026-3036",[129,1885],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[1890],{"type":1209,"score":1318},[1892,1894,1895,1896,1898],{"type":1224,"url":1893},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1221,"url":1813},{"type":1221,"url":1815},{"type":1213,"url":1897},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1213,"url":1899},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[1901,1902,1903,1819],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":130,"slug":1905,"dossier":90,"summary":1906,"aliases":1907,"sourceIds":1911,"published":1912,"modified":1913,"checkedAt":7,"severity":1914,"references":1916,"versionKeys":1926,"packageCount":32,"repositoryCount":104},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1908,1909,1910],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[130,1910],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[1915],{"type":1209,"score":1318},[1917,1919,1921,1922,1924,1925],{"type":1257,"url":1918},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1213,"url":1920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1218,"url":1530},{"type":1224,"url":1923},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1221,"url":1534},{"type":1213,"url":1536},[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":131,"slug":1928,"dossier":47,"summary":1929,"aliases":1930,"sourceIds":1934,"published":1935,"modified":1936,"checkedAt":7,"severity":1937,"references":1941,"versionKeys":1949,"packageCount":32,"repositoryCount":1950},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1931,1932,1933],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[131,1933],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[1938,1939],{"type":1209,"score":1410},{"type":1315,"score":1940},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1942,1944,1946,1947],{"type":1213,"url":1943},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1213,"url":1945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1221,"url":1534},{"type":1213,"url":1948},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1541,1542,1543,1544,1545],12,{"id":132,"slug":1952,"dossier":90,"summary":1953,"aliases":1954,"sourceIds":1958,"published":1959,"modified":1960,"checkedAt":7,"severity":1961,"references":1964,"versionKeys":1980,"packageCount":32,"repositoryCount":104},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1955,1956,1957],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[132,1957],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[1962],{"type":1315,"score":1963},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1965,1967,1969,1971,1973,1974,1976,1978],{"type":1224,"url":1966},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1213,"url":1968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1224,"url":1970},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1224,"url":1972},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1221,"url":1534},{"type":1224,"url":1975},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1221,"url":1977},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1213,"url":1979},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":133,"slug":1982,"dossier":47,"summary":1983,"aliases":1984,"sourceIds":1987,"published":1988,"modified":1989,"checkedAt":7,"severity":1990,"references":1996,"versionKeys":2007,"packageCount":32,"repositoryCount":1361},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[1985,1986],"CVE-2026-34520","PYSEC-2026-2102",[133,1986],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[1991,1993,1994],{"type":1209,"score":1992},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1315,"score":1347},{"type":1315,"score":1995},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1997,1999,2001,2003,2004,2005],{"type":1218,"url":1998},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1213,"url":2000},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1218,"url":2002},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1221,"url":1323},{"type":1213,"url":1359},{"type":1224,"url":2006},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[1327,1328,1329,1330,1331,1332,1333,1334],{"id":134,"slug":2009,"dossier":47,"summary":2010,"aliases":2011,"sourceIds":2014,"published":2015,"modified":2016,"checkedAt":7,"severity":2017,"references":2020,"versionKeys":2026,"packageCount":32,"repositoryCount":42},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2012,2013],"CVE-2026-54277","PYSEC-2026-2110",[134,2013],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[2018,2019],{"type":1315,"score":1584},{"type":1209,"score":1318},[2021,2023,2025],{"type":1213,"url":2022},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1218,"url":2024},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1221,"url":1323},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":135,"slug":2028,"dossier":90,"summary":2029,"aliases":2030,"sourceIds":2033,"published":2034,"modified":2035,"checkedAt":7,"severity":2036,"references":2040,"versionKeys":2049,"packageCount":32,"repositoryCount":2054},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2031,2032],"CVE-2026-45409","PYSEC-2026-215",[135,2032],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[2037,2038],{"type":1209,"score":1282},{"type":1315,"score":2039},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2041,2043,2045,2047],{"type":1213,"url":2042},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1213,"url":2044},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1221,"url":2046},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1224,"url":2048},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2050,2051,2052,2053],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":136,"slug":2056,"dossier":47,"summary":2057,"aliases":2058,"sourceIds":2061,"published":2062,"modified":2063,"checkedAt":7,"severity":2064,"references":2066,"versionKeys":2077,"packageCount":32,"repositoryCount":361},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2059,2060],"CVE-2025-69224","PYSEC-2026-1099",[136,2060],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[2065],{"type":1315,"score":1347},[2067,2069,2071,2073,2074,2075],{"type":1224,"url":2068},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1213,"url":2070},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1218,"url":2072},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":2076},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[1327,1328,1329,1330,1331,1332,1333],{"id":137,"slug":2079,"dossier":47,"summary":2080,"aliases":2081,"sourceIds":2084,"published":2085,"modified":2086,"checkedAt":7,"severity":2087,"references":2092,"versionKeys":2104,"packageCount":32,"repositoryCount":42},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2082,2083],"CVE-2026-1839","PYSEC-2026-2288",[137,2083],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[2088,2090],{"type":1209,"score":2089},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1209,"score":2091},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2093,2095,2097,2098,2100,2102],{"type":1213,"url":2094},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1218,"url":2096},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1221,"url":1255},{"type":1224,"url":2099},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1257,"url":2101},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1213,"url":2103},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1262,1263,1264,1265,1266,1267,1268,1269,1270],{"id":138,"slug":2106,"dossier":47,"summary":2107,"aliases":2108,"sourceIds":2111,"published":2112,"modified":2113,"checkedAt":7,"severity":2114,"references":2116,"versionKeys":2127,"packageCount":32,"repositoryCount":361},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[2109,2110],"CVE-2025-69228","PYSEC-2026-1100",[138,2110],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[2115],{"type":1315,"score":1584},[2117,2119,2121,2123,2124,2125],{"type":1224,"url":2118},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1213,"url":2120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1218,"url":2122},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":2126},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[1327,1328,1329,1330,1331,1332,1333],{"id":139,"slug":2129,"dossier":47,"summary":2130,"aliases":2131,"sourceIds":2134,"published":2135,"modified":2136,"checkedAt":7,"severity":2137,"references":2140,"versionKeys":2149,"packageCount":32,"repositoryCount":103},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[2132,2133],"CVE-2026-53538","PYSEC-2026-3037",[139,2133],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[2138],{"type":1209,"score":2139},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2141,2143,2144,2145,2147],{"type":1224,"url":2142},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1221,"url":1813},{"type":1221,"url":1815},{"type":1213,"url":2146},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1213,"url":2148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[1901,1902,1903,1819],{"id":140,"slug":2151,"dossier":47,"summary":2152,"aliases":2153,"sourceIds":2156,"published":2157,"modified":2158,"checkedAt":7,"severity":2159,"references":2161,"versionKeys":2172,"packageCount":32,"repositoryCount":361},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[2154,2155],"CVE-2025-69223","PYSEC-2026-1101",[140,2155],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[2160],{"type":1209,"score":1318},[2162,2164,2166,2168,2169,2170],{"type":1224,"url":2163},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1213,"url":2165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1218,"url":2167},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":2171},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[1327,1328,1329,1330,1331,1332,1333],{"id":141,"slug":2174,"dossier":90,"summary":2175,"aliases":2176,"sourceIds":2180,"published":2181,"modified":2182,"checkedAt":7,"severity":2183,"references":2185,"versionKeys":2198,"packageCount":32,"repositoryCount":104},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[2177,2178,2179],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[141,2179],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[2184],{"type":1209,"score":1318},[2186,2188,2190,2192,2194,2196,2197],{"type":1257,"url":2187},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1213,"url":2189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1218,"url":2191},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1218,"url":2193},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1224,"url":2195},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1221,"url":1534},{"type":1213,"url":1975},[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":142,"slug":2200,"dossier":47,"summary":2201,"aliases":2202,"sourceIds":2205,"published":2206,"modified":2207,"checkedAt":7,"severity":2208,"references":2210,"versionKeys":2221,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2203,2204],"CVE-2024-12720","PYSEC-2026-1982",[142,2204],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[2209],{"type":1209,"score":1658},[2211,2213,2215,2216,2218,2219],{"type":1213,"url":2212},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1224,"url":2214},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1221,"url":1255},{"type":1224,"url":2217},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1221,"url":1459},{"type":1213,"url":2220},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1262],{"id":143,"slug":2223,"dossier":47,"summary":2224,"aliases":2225,"sourceIds":2228,"published":2229,"modified":2230,"checkedAt":7,"severity":2231,"references":2234,"versionKeys":2247,"packageCount":32,"repositoryCount":103},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[2226,2227],"CVE-2025-66034","PYSEC-2026-1389",[143,2227],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[2232],{"type":1209,"score":2233},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[2235,2237,2239,2241,2243,2245],{"type":1224,"url":2236},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":1213,"url":2238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":1224,"url":2240},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":1221,"url":2242},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":1221,"url":2244},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":1213,"url":2246},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[2248,2249,2250,2251,2252,2253],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":144,"slug":2255,"dossier":47,"summary":2256,"aliases":2257,"sourceIds":2260,"published":2261,"modified":2262,"checkedAt":7,"severity":2263,"references":2265,"versionKeys":2282,"packageCount":32,"repositoryCount":2286},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[2258,2259],"CVE-2025-62727","PYSEC-2026-1942",[144,2259],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[2264],{"type":1209,"score":1318},[2266,2268,2270,2272,2275,2277,2279,2280],{"type":1224,"url":2267},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":1213,"url":2269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":1218,"url":2271},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":2273,"url":2274},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":1221,"url":2276},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":1224,"url":2278},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":1221,"url":1297},{"type":1213,"url":2281},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[1302,1303,2283,2284,2285],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",6,{"id":145,"slug":2288,"dossier":47,"summary":2289,"aliases":2290,"sourceIds":2293,"published":2294,"modified":2295,"checkedAt":7,"severity":2296,"references":2298,"versionKeys":2302,"packageCount":32,"repositoryCount":1361},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[2291,2292],"CVE-2026-54283","PYSEC-2026-249",[145,2292],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[2297],{"type":1209,"score":1318},[2299,2301],{"type":1213,"url":2300},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":1221,"url":2276},[1301,1302,1303,2283,2284,2285,2303,2304,2305],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":146,"slug":2307,"dossier":47,"summary":2308,"aliases":2309,"sourceIds":2313,"published":2314,"modified":2315,"checkedAt":7,"severity":2316,"references":2319,"versionKeys":2356,"packageCount":32,"repositoryCount":1361},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[2310,2311,2312],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[146,2311],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[2317],{"type":1209,"score":2318},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2320,2322,2324,2326,2328,2330,2332,2334,2336,2338,2339,2341,2344,2346,2348,2350,2352,2354],{"type":1213,"url":2321},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":1213,"url":2323},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":1218,"url":2325},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":1224,"url":2327},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1227,"url":2329},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":1224,"url":2331},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":1224,"url":2333},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":1224,"url":2335},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":1224,"url":2337},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":1221,"url":2276},{"type":1224,"url":2340},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":2342,"url":2343},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":1224,"url":2345},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":1224,"url":2347},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":1224,"url":2349},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":1224,"url":2351},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":1227,"url":2353},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":1213,"url":2355},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[1301,1302,1303,2283,2284,2285,2303,2304,2305],{"id":147,"slug":2358,"dossier":47,"summary":2359,"aliases":2360,"sourceIds":2364,"published":2365,"modified":2366,"checkedAt":7,"severity":2367,"references":2371,"versionKeys":2393,"packageCount":32,"repositoryCount":361},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[2361,2362,2363],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[147,2363],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[2368,2369],{"type":1209,"score":1406},{"type":1315,"score":2370},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2372,2374,2376,2378,2380,2382,2383,2385,2387,2389,2391],{"type":1213,"url":2373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1224,"url":2375},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1224,"url":2377},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1224,"url":2379},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1224,"url":2381},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1221,"url":1422},{"type":1224,"url":2384},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1224,"url":2386},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1224,"url":2388},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1221,"url":2390},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1213,"url":2392},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1434,1435,1436,2394,2395],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":148,"slug":2397,"dossier":90,"summary":2398,"aliases":2399,"sourceIds":2403,"published":2404,"modified":2405,"checkedAt":7,"severity":2406,"references":2408,"versionKeys":2418,"packageCount":32,"repositoryCount":104},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[2400,2401,2402],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[148,2402],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[2407],{"type":1209,"score":1318},[2409,2411,2413,2414,2416,2417],{"type":1257,"url":2410},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1213,"url":2412},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1218,"url":1530},{"type":1224,"url":2415},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1221,"url":1534},{"type":1213,"url":1536},[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":149,"slug":2420,"dossier":47,"summary":2421,"aliases":2422,"sourceIds":2425,"published":2426,"modified":2427,"checkedAt":7,"severity":2428,"references":2430,"versionKeys":2443,"packageCount":32,"repositoryCount":34},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2423,2424],"CVE-2025-5197","PYSEC-2026-1983",[149,2424],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[2429],{"type":1209,"score":1658},[2431,2433,2435,2437,2438,2440,2441],{"type":1213,"url":2432},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1224,"url":2434},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1224,"url":2436},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1221,"url":1255},{"type":1224,"url":2439},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1221,"url":1459},{"type":1213,"url":2442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1262,1263,1264,1265],{"id":150,"slug":2445,"dossier":47,"summary":2446,"aliases":2447,"sourceIds":2450,"published":2451,"modified":2452,"checkedAt":7,"severity":2453,"references":2456,"versionKeys":2467,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[2448,2449],"CVE-2025-53643","PYSEC-2026-1104",[150,2449],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[2454],{"type":1315,"score":2455},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2457,2459,2461,2463,2464,2465],{"type":1224,"url":2458},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1213,"url":2460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1218,"url":2462},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":2466},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[1327,1328,1329,1330],{"id":151,"slug":2469,"dossier":47,"summary":2470,"aliases":2471,"sourceIds":2474,"published":2475,"modified":2476,"checkedAt":7,"severity":2477,"references":2481,"versionKeys":2490,"packageCount":32,"repositoryCount":1361},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[2472,2473],"CVE-2026-34518","PYSEC-2026-2100",[151,2473],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[2478,2480],{"type":1209,"score":2479},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1315,"score":1778},[2482,2484,2486,2488,2489],{"type":1218,"url":2483},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1213,"url":2485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1218,"url":2487},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":152,"slug":2492,"dossier":47,"summary":2493,"aliases":2494,"sourceIds":2497,"published":2498,"modified":2499,"checkedAt":7,"severity":2500,"references":2503,"versionKeys":2522,"packageCount":32,"repositoryCount":361},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2495,2496],"CVE-2024-47081","PYSEC-2026-1872",[152,2496],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2501],{"type":1209,"score":2502},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2504,2506,2508,2510,2512,2514,2516,2518,2520],{"type":1224,"url":2505},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1213,"url":2507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1224,"url":2509},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1218,"url":2511},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1221,"url":2513},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1224,"url":2515},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1224,"url":2517},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1221,"url":2519},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1213,"url":2521},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2523,2524],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":153,"slug":2526,"dossier":90,"summary":2527,"aliases":2528,"sourceIds":2532,"published":2533,"modified":2534,"checkedAt":7,"severity":2535,"references":2537,"versionKeys":2550,"packageCount":32,"repositoryCount":104},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[2529,2530,2531],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[153,2531],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[2536],{"type":1209,"score":1318},[2538,2540,2542,2544,2546,2548,2549],{"type":1257,"url":2539},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1213,"url":2541},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1218,"url":2543},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1218,"url":2545},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1224,"url":2547},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1221,"url":1534},{"type":1213,"url":1975},[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":154,"slug":2552,"dossier":47,"summary":2553,"aliases":2554,"sourceIds":2557,"published":2558,"modified":2559,"checkedAt":7,"severity":2560,"references":2563,"versionKeys":2580,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2555,2556],"CVE-2024-35195","PYSEC-2026-1873",[154,2556],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2561],{"type":1209,"score":2562},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2564,2566,2568,2570,2572,2573,2575,2577,2578],{"type":1224,"url":2565},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1213,"url":2567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1224,"url":2569},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1218,"url":2571},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1221,"url":2513},{"type":1224,"url":2574},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1224,"url":2576},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1221,"url":2519},{"type":1213,"url":2579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2523],{"id":155,"slug":2582,"dossier":47,"summary":2583,"aliases":2584,"sourceIds":2587,"published":2588,"modified":2589,"checkedAt":7,"severity":2590,"references":2594,"versionKeys":2600,"packageCount":32,"repositoryCount":42},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[2585,2586],"CVE-2026-54280","PYSEC-2026-2113",[155,2586],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[2591,2593],{"type":1315,"score":2592},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1209,"score":1318},[2595,2597,2599],{"type":1213,"url":2596},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1218,"url":2598},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1221,"url":1323},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":156,"slug":2602,"dossier":47,"summary":2603,"aliases":2604,"sourceIds":2607,"published":2608,"modified":2609,"checkedAt":7,"severity":2610,"references":2614,"versionKeys":2625,"packageCount":32,"repositoryCount":1361},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[2605,2606],"CVE-2026-34525","PYSEC-2026-2103",[156,2606],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[2611,2613],{"type":1315,"score":2612},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1209,"score":1349},[2615,2617,2619,2621,2623,2624],{"type":1218,"url":2616},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1213,"url":2618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1218,"url":2620},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1218,"url":2622},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":157,"slug":2627,"dossier":47,"summary":2628,"aliases":2629,"sourceIds":2633,"published":2634,"modified":2635,"checkedAt":7,"severity":2636,"references":2641,"versionKeys":2657,"packageCount":32,"repositoryCount":418},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[2630,2631,2632],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[157],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[2637,2639],{"type":1209,"score":2638},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1315,"score":2640},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2642,2644,2646,2648,2649,2651,2653,2655],{"type":1213,"url":2643},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1224,"url":2645},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1224,"url":2647},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1221,"url":1422},{"type":1224,"url":2650},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1224,"url":2652},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1224,"url":2654},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1224,"url":2656},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1434,1435],{"id":158,"slug":2659,"dossier":47,"summary":2660,"aliases":2661,"sourceIds":2665,"published":2666,"modified":2667,"checkedAt":7,"severity":2668,"references":2672,"versionKeys":2712,"packageCount":32,"repositoryCount":1740},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2662,2663,2664],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[158,2664],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[2669,2671],{"type":1315,"score":2670},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1209,"score":1318},[2673,2675,2677,2679,2681,2683,2684,2686,2688,2690,2692,2694,2696,2698,2700,2702,2704,2706,2708,2710],{"type":1224,"url":2674},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1213,"url":2676},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1224,"url":2678},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1224,"url":2680},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1224,"url":2682},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1221,"url":1534},{"type":1224,"url":2685},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1224,"url":2687},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1224,"url":2689},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1213,"url":2691},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1213,"url":2693},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1213,"url":2695},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1213,"url":2697},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1213,"url":2699},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1213,"url":2701},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1213,"url":2703},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1213,"url":2705},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1213,"url":2707},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1213,"url":2709},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1213,"url":2711},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1538,1539,1540,1541,1542,1543,1544],{"id":159,"slug":2714,"dossier":47,"summary":2715,"aliases":2716,"sourceIds":2719,"published":2720,"modified":2721,"checkedAt":7,"severity":2722,"references":2725,"versionKeys":2742,"packageCount":32,"repositoryCount":418},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2717,2718],"CVE-2025-27516","PYSEC-2026-1471",[159,2718],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2723],{"type":1315,"score":2724},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2726,2728,2730,2732,2734,2736,2738,2740],{"type":1224,"url":2727},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1213,"url":2729},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1218,"url":2731},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1221,"url":2733},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1224,"url":2735},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1224,"url":2737},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1221,"url":2739},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1213,"url":2741},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2743,2744],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":160,"slug":2746,"dossier":47,"summary":2747,"aliases":2748,"sourceIds":2751,"published":2752,"modified":2753,"checkedAt":7,"severity":2754,"references":2757,"versionKeys":2772,"packageCount":32,"repositoryCount":2774},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[2749,2750],"CVE-2026-69244","PYSEC-2026-3545",[160,2750],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[2755],{"type":1315,"score":2756},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2758,2760,2762,2764,2765,2767,2768,2770],{"type":1224,"url":2759},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1224,"url":2761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":1224,"url":2763},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":1221,"url":1323},{"type":1224,"url":2766},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":1221,"url":1788},{"type":1213,"url":2769},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1213,"url":2771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[1327,1328,1329,1330,1331,1332,1333,1334,1335,2773],"pypi:aiohttp@3.14.1",13,{"id":161,"slug":2776,"dossier":47,"summary":2777,"aliases":2778,"sourceIds":2782,"published":2783,"modified":2784,"checkedAt":7,"severity":2785,"references":2790,"versionKeys":2806,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2779,2780,2781],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[161,2781],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[2786,2788],{"type":1209,"score":2787},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1315,"score":2789},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2791,2793,2795,2797,2798,2800,2802,2804],{"type":1213,"url":2792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1224,"url":2794},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1224,"url":2796},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1221,"url":1870},{"type":1224,"url":2799},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1224,"url":2801},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1221,"url":2803},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1213,"url":2805},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1876],{"id":162,"slug":2808,"dossier":47,"summary":2809,"aliases":2810,"sourceIds":2814,"published":2815,"modified":2816,"checkedAt":7,"severity":2817,"references":2822,"versionKeys":2840,"packageCount":32,"repositoryCount":418},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[2811,2812,2813],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[162],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[2818,2820],{"type":1209,"score":2819},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1315,"score":2821},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2823,2825,2827,2829,2831,2833,2834,2836,2838],{"type":1213,"url":2824},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1224,"url":2826},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1224,"url":2828},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1224,"url":2830},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1224,"url":2832},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1221,"url":1422},{"type":1224,"url":2835},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1224,"url":2837},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1224,"url":2839},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1434,1435],{"id":163,"slug":2842,"dossier":47,"summary":2843,"aliases":2844,"sourceIds":2847,"published":2848,"modified":2849,"checkedAt":7,"severity":2850,"references":2854,"versionKeys":2865,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[2845,2846],"CVE-2024-47874","PYSEC-2026-1943",[163,2846],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[2851,2853],{"type":1209,"score":2852},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":1315,"score":1804},[2855,2857,2859,2861,2862,2863],{"type":1224,"url":2856},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":1213,"url":2858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":1218,"url":2860},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":1221,"url":1291},{"type":1221,"url":1297},{"type":1213,"url":2864},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[1301],{"id":164,"slug":2867,"dossier":47,"summary":2868,"aliases":2869,"sourceIds":2872,"published":2873,"modified":2874,"checkedAt":7,"severity":2875,"references":2880,"versionKeys":2904,"packageCount":32,"repositoryCount":42},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[2870,2871],"CVE-2026-5241","PYSEC-2026-2290",[164,2871],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[2876,2878],{"type":1209,"score":2877},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1209,"score":2879},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2881,2883,2885,2887,2889,2891,2893,2895,2896,2898,2900,2902],{"type":1213,"url":2882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1218,"url":2884},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1213,"url":2886},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1213,"url":2888},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1224,"url":2890},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":1224,"url":2892},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":1415,"url":2894},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1221,"url":1255},{"type":1224,"url":2897},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1257,"url":2899},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1224,"url":2901},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":1213,"url":2903},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[1262,1263,1264,1265,1266,1267,1268,1269,1270],{"id":165,"slug":2906,"dossier":47,"summary":2907,"aliases":2908,"sourceIds":2911,"published":2912,"modified":2913,"checkedAt":7,"severity":2914,"references":2917,"versionKeys":2928,"packageCount":32,"repositoryCount":361},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[2909,2910],"CVE-2025-69230","PYSEC-2026-1105",[165,2910],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[2915],{"type":1315,"score":2916},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2918,2920,2922,2924,2925,2926],{"type":1224,"url":2919},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1213,"url":2921},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1218,"url":2923},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":2927},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[1327,1328,1329,1330,1331,1332,1333],{"id":166,"slug":2930,"dossier":90,"summary":2931,"aliases":2932,"sourceIds":2936,"published":2937,"modified":2938,"checkedAt":7,"severity":2939,"references":2942,"versionKeys":2956,"packageCount":32,"repositoryCount":104},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[2933,2934,2935],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[166,2935],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[2940],{"type":1209,"score":2941},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[2943,2945,2947,2949,2951,2952,2953,2954],{"type":1224,"url":2944},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1213,"url":2946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1224,"url":2948},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1224,"url":2950},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1221,"url":1534},{"type":1224,"url":1975},{"type":1221,"url":1977},{"type":1213,"url":2955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":167,"slug":2958,"dossier":47,"summary":2201,"aliases":2959,"sourceIds":2962,"published":2963,"modified":2964,"checkedAt":7,"severity":2965,"references":2968,"versionKeys":2979,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[2960,2961],"CVE-2025-1194","PYSEC-2026-1984",[167,2961],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[2966],{"type":1209,"score":2967},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2969,2971,2973,2974,2976,2977],{"type":1213,"url":2970},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1224,"url":2972},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1221,"url":1255},{"type":1224,"url":2975},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1221,"url":1459},{"type":1213,"url":2978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1262],{"id":168,"slug":2981,"dossier":47,"summary":2982,"aliases":2983,"sourceIds":2986,"published":2987,"modified":2988,"checkedAt":7,"severity":2989,"references":2992,"versionKeys":2998,"packageCount":32,"repositoryCount":42},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[2984,2985],"CVE-2026-54278","PYSEC-2026-2111",[168,2985],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[2990,2991],{"type":1315,"score":1584},{"type":1209,"score":1318},[2993,2995,2996],{"type":1213,"url":2994},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1221,"url":1323},{"type":1218,"url":2997},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":169,"slug":3000,"dossier":47,"summary":3001,"aliases":3002,"sourceIds":3005,"published":3006,"modified":3007,"checkedAt":7,"severity":3008,"references":3011,"versionKeys":3030,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[3003,3004],"CVE-2024-34062","PYSEC-2026-1976",[169,3004],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[3009],{"type":1209,"score":3010},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3012,3014,3016,3018,3020,3022,3024,3026,3028],{"type":1224,"url":3013},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1213,"url":3015},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1224,"url":3017},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1221,"url":3019},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1224,"url":3021},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1224,"url":3023},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1224,"url":3025},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1221,"url":3027},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1213,"url":3029},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[3031],"pypi:tqdm@4.66.2",{"id":170,"slug":3033,"dossier":47,"summary":3034,"aliases":3035,"sourceIds":3038,"published":3039,"modified":3040,"checkedAt":7,"severity":3041,"references":3043,"versionKeys":3056,"packageCount":32,"repositoryCount":361},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[3036,3037],"CVE-2025-69229","PYSEC-2026-1106",[170,3037],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[3042],{"type":1315,"score":1584},[3044,3046,3048,3050,3052,3053,3054],{"type":1224,"url":3045},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1213,"url":3047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1224,"url":3049},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1224,"url":3051},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":3055},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[1327,1328,1329,1330,1331,1332,1333],{"id":171,"slug":3058,"dossier":90,"summary":3059,"aliases":3060,"sourceIds":3063,"published":3064,"modified":3065,"checkedAt":7,"severity":3066,"references":3071,"versionKeys":3081,"packageCount":32,"repositoryCount":3084},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3061,3062],"CVE-2026-25645","PYSEC-2026-2275",[171,3062],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[3067,3069],{"type":1209,"score":3068},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1209,"score":3070},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3072,3074,3076,3078,3079],{"type":1213,"url":3073},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1213,"url":3075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1218,"url":3077},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1221,"url":2513},{"type":1213,"url":3080},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2523,2524,3082,3083],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":172,"slug":3086,"dossier":90,"summary":3087,"aliases":3088,"sourceIds":3091,"published":3092,"modified":3093,"checkedAt":7,"severity":3094,"references":3096,"versionKeys":3107,"packageCount":32,"repositoryCount":1393},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3089,3090],"CVE-2025-66418","PYSEC-2026-1998",[172,3090],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[3095],{"type":1315,"score":1373},[3097,3099,3101,3103,3104,3105],{"type":1224,"url":3098},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1213,"url":3100},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1218,"url":3102},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1221,"url":1382},{"type":1221,"url":1384},{"type":1213,"url":3106},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1388,1389,1390,1391,1392],{"id":173,"slug":3109,"dossier":47,"summary":3110,"aliases":3111,"sourceIds":3114,"published":3115,"modified":3116,"checkedAt":7,"severity":3117,"references":3120,"versionKeys":3135,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3112,3113],"CVE-2024-56201","PYSEC-2026-1472",[173,3113],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[3118,3119],{"type":1209,"score":1857},{"type":1315,"score":2724},[3121,3123,3125,3127,3129,3130,3132,3133],{"type":1224,"url":3122},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1213,"url":3124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1224,"url":3126},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1218,"url":3128},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1221,"url":2733},{"type":1224,"url":3131},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1221,"url":2739},{"type":1213,"url":3134},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2743],{"id":174,"slug":3137,"dossier":90,"summary":3138,"aliases":3139,"sourceIds":3143,"published":3144,"modified":3145,"checkedAt":7,"severity":3146,"references":3149,"versionKeys":3161,"packageCount":32,"repositoryCount":3084},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[3140,3141,3142],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[174,3142],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[3147],{"type":1209,"score":3148},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3150,3152,3154,3156,3158,3159],{"type":1257,"url":3151},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":1213,"url":3153},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":1218,"url":3155},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1224,"url":3157},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":1221,"url":1870},{"type":1213,"url":3160},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1876,1877,1878,1879,3162,3163,3164,3165,3166,3167,3168,3169],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":175,"slug":3171,"dossier":47,"summary":3172,"aliases":3173,"sourceIds":3176,"published":3177,"modified":3178,"checkedAt":7,"severity":3179,"references":3182,"versionKeys":3203,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3174,3175],"CVE-2024-34064","PYSEC-2026-1474",[175,3175],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[3180],{"type":1209,"score":3181},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3183,3185,3187,3189,3190,3192,3194,3196,3198,3200,3201],{"type":1224,"url":3184},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1213,"url":3186},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1218,"url":3188},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1221,"url":2733},{"type":1224,"url":3191},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1224,"url":3193},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1224,"url":3195},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1224,"url":3197},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1224,"url":3199},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1221,"url":2739},{"type":1213,"url":3202},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2743],{"id":176,"slug":3205,"dossier":47,"summary":3206,"aliases":3207,"sourceIds":3210,"published":3211,"modified":3212,"checkedAt":7,"severity":3213,"references":3216,"versionKeys":3225,"packageCount":32,"repositoryCount":1361},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[3208,3209],"CVE-2026-34513","PYSEC-2026-2095",[176,3209],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[3214,3215],{"type":1315,"score":1500},{"type":1209,"score":1318},[3217,3219,3221,3223,3224],{"type":1218,"url":3218},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1213,"url":3220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1218,"url":3222},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":177,"slug":3227,"dossier":47,"summary":3228,"aliases":3229,"sourceIds":3232,"published":3233,"modified":3234,"checkedAt":7,"severity":3235,"references":3240,"versionKeys":3248,"packageCount":32,"repositoryCount":42},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[3230,3231],"CVE-2026-47265","PYSEC-2026-2105",[177,3231],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[3236,3238],{"type":1315,"score":3237},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1209,"score":3239},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3241,3243,3245,3247],{"type":1218,"url":3242},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1213,"url":3244},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1218,"url":3246},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1221,"url":1323},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":178,"slug":3250,"dossier":47,"summary":3251,"aliases":3252,"sourceIds":3255,"published":3256,"modified":3257,"checkedAt":7,"severity":3258,"references":3263,"versionKeys":3269,"packageCount":32,"repositoryCount":42},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[3253,3254],"CVE-2026-54276","PYSEC-2026-2109",[178,3254],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[3259,3261],{"type":1315,"score":3260},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1209,"score":3262},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3264,3266,3268],{"type":1213,"url":3265},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1218,"url":3267},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1221,"url":1323},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":179,"slug":3271,"dossier":47,"summary":3272,"aliases":3273,"sourceIds":3276,"published":3277,"modified":3278,"checkedAt":7,"severity":3279,"references":3283,"versionKeys":3300,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[3274,3275],"CVE-2025-67221","PYSEC-2026-107",[179,3275],"2026-01-22T17:16:01.433Z","2026-09-10T03:50:33.258377926Z",[3280,3282],{"type":1315,"score":3281},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1209,"score":1318},[3284,3286,3288,3290,3292,3294,3296,3298],{"type":1213,"url":3285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":1224,"url":3287},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":1224,"url":3289},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":1224,"url":3291},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":1221,"url":3293},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":1257,"url":3295},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":1224,"url":3297},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":1213,"url":3299},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[3301,3302,3303,3304],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":180,"slug":3306,"dossier":47,"summary":3307,"aliases":3308,"sourceIds":3311,"published":3312,"modified":3313,"checkedAt":7,"severity":3314,"references":3318,"versionKeys":3334,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[3309,3310],"CVE-2024-11394","PYSEC-2024-229",[180,3310],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[3315,3317],{"type":1209,"score":3316},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1209,"score":2787},[3319,3321,3323,3325,3326,3328,3330,3332],{"type":1213,"url":3320},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1224,"url":3322},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1224,"url":3324},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1221,"url":1255},{"type":1224,"url":3327},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1224,"url":3329},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1213,"url":3331},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1213,"url":3333},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1262],{"id":181,"slug":3336,"dossier":47,"summary":3337,"aliases":3338,"sourceIds":3341,"published":3342,"modified":3343,"checkedAt":7,"severity":3344,"references":3349,"versionKeys":3367,"packageCount":32,"repositoryCount":42},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[3339,3340],"CVE-2026-34993","PYSEC-2026-2104",[181,3340],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[3345,3347],{"type":1209,"score":3346},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1209,"score":3348},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3350,3352,3354,3356,3357,3359,3361,3363,3364,3365],{"type":1218,"url":3351},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1213,"url":3353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1218,"url":3355},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1221,"url":1323},{"type":1224,"url":3358},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1224,"url":3360},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1213,"url":3362},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1213,"url":2886},{"type":1213,"url":2888},{"type":1415,"url":3366},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":182,"slug":3369,"dossier":47,"summary":3370,"aliases":3371,"sourceIds":3374,"published":3375,"modified":3376,"checkedAt":7,"severity":3377,"references":3379,"versionKeys":3390,"packageCount":32,"repositoryCount":361},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[3372,3373],"CVE-2025-69227","PYSEC-2026-1107",[182,3373],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[3378],{"type":1315,"score":1584},[3380,3382,3384,3386,3387,3388],{"type":1224,"url":3381},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1213,"url":3383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1224,"url":3385},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":3389},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[1327,1328,1329,1330,1331,1332,1333],{"id":183,"slug":3392,"dossier":90,"summary":3393,"aliases":3394,"sourceIds":3398,"published":3399,"modified":3400,"checkedAt":7,"severity":3401,"references":3403,"versionKeys":3417,"packageCount":32,"repositoryCount":104},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[3395,3396,3397],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[183,3397],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[3402],{"type":1209,"score":1318},[3404,3406,3408,3410,3412,3413,3414,3415],{"type":1224,"url":3405},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1213,"url":3407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1224,"url":3409},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1224,"url":3411},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1221,"url":1534},{"type":1224,"url":1975},{"type":1221,"url":1977},{"type":1213,"url":3416},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":184,"slug":3419,"dossier":47,"summary":3420,"aliases":3421,"sourceIds":3424,"published":3425,"modified":3426,"checkedAt":7,"severity":3427,"references":3429,"versionKeys":3442,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[3422,3423],"CVE-2025-3264","PYSEC-2026-1985",[184,3423],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[3428],{"type":1209,"score":1658},[3430,3432,3434,3436,3437,3439,3440],{"type":1213,"url":3431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1224,"url":3433},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1224,"url":3435},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1221,"url":1255},{"type":1224,"url":3438},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1221,"url":1459},{"type":1213,"url":3441},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1262],{"id":185,"slug":3444,"dossier":47,"summary":3445,"aliases":3446,"sourceIds":3449,"published":3450,"modified":3451,"checkedAt":7,"severity":3452,"references":3455,"versionKeys":3463,"packageCount":32,"repositoryCount":1361},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[3447,3448],"CVE-2026-54282","PYSEC-2026-248",[185,3448],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[3453,3454],{"type":1209,"score":2139},{"type":1209,"score":1349},[3456,3458,3460,3461],{"type":1213,"url":3457},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":1213,"url":3459},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":1221,"url":2276},{"type":1224,"url":3462},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[1301,1302,1303,2283,2284,2285,2303,2304,2305],{"id":186,"slug":3465,"dossier":47,"summary":3466,"aliases":3467,"sourceIds":3470,"published":3471,"modified":3472,"checkedAt":7,"severity":3473,"references":3478,"versionKeys":3491,"packageCount":32,"repositoryCount":32},"ghsa-jw8x-6495-233v-cb32b711","scikit-learn sensitive data leakage vulnerability",[3468,3469],"CVE-2024-5206","PYSEC-2024-110",[186,3469],"2024-06-06T19:16:00Z","2026-09-10T03:50:15.628224747Z",[3474,3476],{"type":1209,"score":3475},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1209,"score":3477},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3479,3481,3483,3485,3487,3489],{"type":1213,"url":3480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5206",{"type":1218,"url":3482},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn\u002Fcommit\u002F70ca21f106b603b611da73012c9ade7cd8e438b8",{"type":1224,"url":3484},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fscikit-learn\u002FPYSEC-2024-110.yaml",{"type":1221,"url":3486},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn",{"type":1224,"url":3488},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F14bc0917-a85b-4106-a170-d09d5191517c",{"type":1213,"url":3490},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw8x-6495-233v",[3492],"pypi:scikit-learn@1.3.2",{"id":187,"slug":3494,"dossier":47,"summary":3495,"aliases":3496,"sourceIds":3499,"published":3500,"modified":3501,"checkedAt":7,"severity":3502,"references":3507,"versionKeys":3516,"packageCount":32,"repositoryCount":1361},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[3497,3498],"CVE-2026-34516","PYSEC-2026-2098",[187,3498],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[3503,3504,3505],{"type":1209,"score":1318},{"type":1315,"score":1584},{"type":1315,"score":3506},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3508,3510,3512,3514,3515],{"type":1218,"url":3509},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1213,"url":3511},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1218,"url":3513},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":188,"slug":3518,"dossier":47,"summary":3519,"aliases":3520,"sourceIds":3523,"published":3524,"modified":3525,"checkedAt":7,"severity":3526,"references":3529,"versionKeys":3535,"packageCount":32,"repositoryCount":42},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[3521,3522],"CVE-2026-50269","PYSEC-2026-2106",[188,3522],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[3527,3528],{"type":1315,"score":1347},{"type":1209,"score":1318},[3530,3532,3534],{"type":1213,"url":3531},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1218,"url":3533},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1221,"url":1323},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":189,"slug":3537,"dossier":47,"summary":3538,"aliases":3539,"sourceIds":3542,"published":3543,"modified":3544,"checkedAt":7,"severity":3545,"references":3548,"versionKeys":3556,"packageCount":32,"repositoryCount":399},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[3540,3541],"CVE-2026-44432","PYSEC-2026-142",[189,3541],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[3546,3547],{"type":1209,"score":1318},{"type":1315,"score":1373},[3549,3551,3553,3555],{"type":1213,"url":3550},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1213,"url":3552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1224,"url":3554},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1221,"url":1382},[3557],"pypi:urllib3@2.6.3",{"id":190,"slug":3559,"dossier":47,"summary":3560,"aliases":3561,"sourceIds":3564,"published":3565,"modified":3566,"checkedAt":7,"severity":3567,"references":3570,"versionKeys":3583,"packageCount":32,"repositoryCount":1950},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[3562,3563],"CVE-2026-28684","PYSEC-2026-2270",[190,3563],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[3568],{"type":1209,"score":3569},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3571,3573,3575,3577,3579,3581],{"type":1218,"url":3572},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1213,"url":3574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1218,"url":3576},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1224,"url":3578},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1221,"url":3580},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1213,"url":3582},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[3584,3585,3586,3587],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":191,"slug":3589,"dossier":47,"summary":3590,"aliases":3591,"sourceIds":3594,"published":3595,"modified":3596,"checkedAt":7,"severity":3597,"references":3600,"versionKeys":3615,"packageCount":32,"repositoryCount":2774},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[3592,3593],"CVE-2026-69243","PYSEC-2026-3546",[191,3593],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[3598],{"type":1315,"score":3599},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3601,3603,3605,3607,3608,3610,3611,3613],{"type":1224,"url":3602},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1224,"url":3604},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":1224,"url":3606},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":1221,"url":1323},{"type":1224,"url":3609},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":1221,"url":1788},{"type":1213,"url":3612},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1213,"url":3614},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[1327,1328,1329,1330,1331,1332,1333,1334,1335,2773],{"id":192,"slug":3617,"dossier":47,"summary":3618,"aliases":3619,"sourceIds":3622,"published":3623,"modified":3624,"checkedAt":7,"severity":3625,"references":3627,"versionKeys":3638,"packageCount":32,"repositoryCount":2286},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[3620,3621],"CVE-2026-40347","PYSEC-2026-3038",[192,3621],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[3626],{"type":1209,"score":1282},[3628,3630,3632,3633,3635,3636],{"type":1224,"url":3629},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":1213,"url":3631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":1221,"url":1813},{"type":1224,"url":3634},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":1221,"url":1815},{"type":1213,"url":3637},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[1901,1902,1819],{"id":193,"slug":3640,"dossier":47,"summary":3641,"aliases":3642,"sourceIds":3645,"published":3646,"modified":3647,"checkedAt":7,"severity":3648,"references":3650,"versionKeys":3663,"packageCount":32,"repositoryCount":2774},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[3643,3644],"CVE-2026-59881","PYSEC-2026-3547",[193,3644],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[3649],{"type":1315,"score":2039},[3651,3653,3655,3657,3659,3660,3661],{"type":1224,"url":3652},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":1213,"url":3654},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":1224,"url":3656},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":1224,"url":3658},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":3662},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[1327,1328,1329,1330,1331,1332,1333,1334,1335,2773],{"id":194,"slug":3665,"dossier":47,"summary":3666,"aliases":3667,"sourceIds":3670,"published":3671,"modified":3672,"checkedAt":7,"severity":3673,"references":3675,"versionKeys":3686,"packageCount":32,"repositoryCount":361},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[3668,3669],"CVE-2025-69225","PYSEC-2026-1109",[194,3669],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[3674],{"type":1315,"score":1347},[3676,3678,3680,3682,3683,3684],{"type":1224,"url":3677},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1213,"url":3679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1218,"url":3681},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1221,"url":1323},{"type":1221,"url":1788},{"type":1213,"url":3685},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[1327,1328,1329,1330,1331,1332,1333],{"id":195,"slug":3688,"dossier":47,"summary":3689,"aliases":3690,"sourceIds":3693,"published":3694,"modified":3695,"checkedAt":7,"severity":3696,"references":3699,"versionKeys":3708,"packageCount":32,"repositoryCount":1361},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[3691,3692],"CVE-2026-34519","PYSEC-2026-2101",[195,3692],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[3697,3698],{"type":1315,"score":1347},{"type":1209,"score":1349},[3700,3702,3704,3706,3707],{"type":1218,"url":3701},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1213,"url":3703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1218,"url":3705},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":196,"slug":3710,"dossier":47,"summary":3711,"aliases":3712,"sourceIds":3715,"published":3716,"modified":3717,"checkedAt":7,"severity":3718,"references":3721,"versionKeys":3730,"packageCount":32,"repositoryCount":1361},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[3713,3714],"CVE-2026-34515","PYSEC-2026-2097",[196,3714],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[3719,3720],{"type":1315,"score":3237},{"type":1209,"score":3239},[3722,3724,3726,3728,3729],{"type":1218,"url":3723},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1213,"url":3725},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1218,"url":3727},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":197,"slug":3732,"dossier":47,"summary":3733,"aliases":3734,"sourceIds":3738,"published":3739,"modified":3740,"checkedAt":7,"severity":3741,"references":3744,"versionKeys":3757,"packageCount":32,"repositoryCount":2286},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[3735,3736,3737],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[197,3737],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[3742,3743],{"type":1209,"score":1282},{"type":1209,"score":1318},[3745,3747,3749,3751,3753,3755,3756],{"type":1257,"url":3746},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1213,"url":3748},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1218,"url":3750},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1218,"url":3752},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1224,"url":3754},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1221,"url":1534},{"type":1213,"url":1975},[1543,1544,1545,1546],{"id":198,"slug":3759,"dossier":47,"summary":3760,"aliases":3761,"sourceIds":3764,"published":3425,"modified":3765,"checkedAt":7,"severity":3766,"references":3769,"versionKeys":3782,"packageCount":32,"repositoryCount":399},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[3762,3763],"CVE-2025-3777","PYSEC-2026-1986",[198,3763],"2026-09-10T03:50:26.198077196Z",[3767],{"type":1209,"score":3768},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3770,3772,3774,3775,3777,3779,3780],{"type":1213,"url":3771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1224,"url":3773},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1221,"url":1255},{"type":1224,"url":3776},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1224,"url":3778},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1221,"url":1459},{"type":1213,"url":3781},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1262,1263,1264],{"id":199,"slug":3784,"dossier":90,"summary":3785,"aliases":3786,"sourceIds":3790,"published":3791,"modified":3792,"checkedAt":7,"severity":3793,"references":3795,"versionKeys":3806,"packageCount":32,"repositoryCount":104},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[3787,3788,3789],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[199,3789],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[3794],{"type":1209,"score":1318},[3796,3798,3800,3802,3804,3805],{"type":1257,"url":3797},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1213,"url":3799},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1218,"url":3801},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1224,"url":3803},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1221,"url":1534},{"type":1213,"url":1536},[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":200,"slug":3808,"dossier":47,"summary":3809,"aliases":3810,"sourceIds":3813,"published":3814,"modified":3815,"checkedAt":7,"severity":3816,"references":3818,"versionKeys":3827,"packageCount":32,"repositoryCount":2286},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[3811,3812],"CVE-2026-42561","PYSEC-2026-3039",[200,3812],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[3817],{"type":1209,"score":1318},[3819,3821,3823,3824,3825],{"type":1224,"url":3820},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":1213,"url":3822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":1221,"url":1813},{"type":1221,"url":1815},{"type":1213,"url":3826},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[1901,1902,1819],{"id":201,"slug":3829,"dossier":47,"summary":3830,"aliases":3831,"sourceIds":3834,"published":3835,"modified":3836,"checkedAt":7,"severity":3837,"references":3839,"versionKeys":3851,"packageCount":32,"repositoryCount":361},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3832,3833],"CVE-2025-50181","PYSEC-2026-1999",[201,3833],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[3838],{"type":1209,"score":1558},[3840,3842,3844,3846,3847,3848,3849],{"type":1224,"url":3841},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1213,"url":3843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1218,"url":3845},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1221,"url":1382},{"type":1224,"url":1568},{"type":1221,"url":1384},{"type":1213,"url":3850},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1388,1389,1390,1391],{"id":202,"slug":3853,"dossier":47,"summary":3854,"aliases":3855,"sourceIds":3859,"published":3860,"modified":3861,"checkedAt":7,"severity":3862,"references":3865,"versionKeys":3877,"packageCount":32,"repositoryCount":1393},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[3856,3857,3858],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[202,3858],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[3863,3864],{"type":1315,"score":2670},{"type":1209,"score":2091},[3866,3867,3869,3871,3873,3875,3876],{"type":1224,"url":2674},{"type":1218,"url":3868},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1213,"url":3870},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1218,"url":3872},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1218,"url":3874},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1221,"url":1534},{"type":1213,"url":1948},[1538,1539,1540,1541,1542,1543,1544,1545],{"id":203,"slug":3879,"dossier":47,"summary":3880,"aliases":3881,"sourceIds":3884,"published":3425,"modified":3885,"checkedAt":7,"severity":3886,"references":3888,"versionKeys":3899,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[3882,3883],"CVE-2025-3263","PYSEC-2026-1987",[203,3883],"2026-07-07T17:56:57.889099913Z",[3887],{"type":1209,"score":1658},[3889,3891,3892,3893,3894,3896,3897],{"type":1213,"url":3890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1224,"url":3433},{"type":1224,"url":3435},{"type":1221,"url":1255},{"type":1224,"url":3895},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1221,"url":1459},{"type":1213,"url":3898},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1262],{"id":204,"slug":3901,"dossier":47,"summary":3902,"aliases":3903,"sourceIds":3906,"published":3907,"modified":3908,"checkedAt":7,"severity":3909,"references":3913,"versionKeys":3926,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[3904,3905],"CVE-2024-56326","PYSEC-2026-1475",[204,3905],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[3910,3912],{"type":1209,"score":3911},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1315,"score":2724},[3914,3916,3918,3920,3921,3922,3923,3924],{"type":1224,"url":3915},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1213,"url":3917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1218,"url":3919},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1221,"url":2733},{"type":1224,"url":3131},{"type":1224,"url":2735},{"type":1221,"url":2739},{"type":1213,"url":3925},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2743],{"id":205,"slug":3928,"dossier":90,"summary":3929,"aliases":3930,"sourceIds":3933,"published":3934,"modified":3935,"checkedAt":7,"severity":3936,"references":3940,"versionKeys":3946,"packageCount":32,"repositoryCount":3084},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[3931,3932],"CVE-2026-44431","PYSEC-2026-141",[205,3932],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[3937,3938],{"type":1209,"score":2479},{"type":1315,"score":3939},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3941,3943,3945],{"type":1213,"url":3942},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1213,"url":3944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1221,"url":1382},[1388,1389,1390,1391,1392,3557],{"id":206,"slug":3948,"dossier":47,"summary":3949,"aliases":3950,"sourceIds":3954,"published":3955,"modified":3956,"checkedAt":7,"severity":3957,"references":3961,"versionKeys":3979,"packageCount":32,"repositoryCount":2774},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[3951,3952,3953],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[206],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[3958,3959],{"type":1209,"score":2819},{"type":1315,"score":3960},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3962,3964,3966,3968,3970,3972,3973,3975,3977],{"type":1213,"url":3963},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1224,"url":3965},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1224,"url":3967},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1224,"url":3969},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1224,"url":3971},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1221,"url":1422},{"type":1224,"url":3974},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1224,"url":3976},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1224,"url":3978},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1434,1435,1436,2394,2395,3980,3981,3982,3983],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":207,"slug":3985,"dossier":47,"summary":3986,"aliases":3987,"sourceIds":3990,"published":3991,"modified":3992,"checkedAt":7,"severity":3993,"references":3996,"versionKeys":4011,"packageCount":32,"repositoryCount":2774},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[3988,3989],"CVE-2026-22701","PYSEC-2026-1374",[207,3989],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[3994],{"type":1209,"score":3995},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3997,3999,4001,4003,4005,4007,4009],{"type":1224,"url":3998},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1213,"url":4000},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1224,"url":4002},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1224,"url":4004},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1221,"url":4006},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1221,"url":4008},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1213,"url":4010},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[4012,4013,4014,4015],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":208,"slug":4017,"dossier":47,"summary":4018,"aliases":4019,"sourceIds":4022,"published":4023,"modified":4024,"checkedAt":7,"severity":4025,"references":4028,"versionKeys":4042,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[4020,4021],"CVE-2025-2099","PYSEC-2025-40",[208,4021],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[4026,4027],{"type":1209,"score":1658},{"type":1209,"score":1318},[4029,4031,4033,4035,4036,4038,4040],{"type":1213,"url":4030},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1224,"url":4032},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1218,"url":4034},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1221,"url":1255},{"type":1224,"url":4037},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1224,"url":4039},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1213,"url":4041},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1262],{"id":209,"slug":4044,"dossier":47,"summary":3307,"aliases":4045,"sourceIds":4048,"published":4049,"modified":4050,"checkedAt":7,"severity":4051,"references":4055,"versionKeys":4069,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[4046,4047],"CVE-2024-11392","PYSEC-2024-227",[209,4047],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[4052,4054],{"type":1209,"score":4053},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1209,"score":2787},[4056,4058,4059,4060,4061,4063,4065,4067],{"type":1213,"url":4057},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1224,"url":3322},{"type":1224,"url":3324},{"type":1221,"url":1255},{"type":1224,"url":4062},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1224,"url":4064},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1213,"url":4066},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1213,"url":4068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1262],{"id":210,"slug":4071,"dossier":47,"summary":4072,"aliases":4073,"sourceIds":4077,"published":4078,"modified":4079,"checkedAt":7,"severity":4080,"references":4083,"versionKeys":4097,"packageCount":32,"repositoryCount":1393},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[4074,4075,4076],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[210,4076],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[4081,4082],{"type":1209,"score":1410},{"type":1315,"score":1940},[4084,4086,4088,4090,4092,4093,4094,4095],{"type":1224,"url":4085},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1213,"url":4087},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1224,"url":4089},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1224,"url":4091},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1221,"url":1534},{"type":1224,"url":1948},{"type":1221,"url":1977},{"type":1213,"url":4096},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1538,1539,1540,1541,1542,1543,1544,1545],{"id":211,"slug":4099,"dossier":47,"summary":4100,"aliases":4101,"sourceIds":4104,"published":4105,"modified":4106,"checkedAt":7,"severity":4107,"references":4109,"versionKeys":4124,"packageCount":32,"repositoryCount":34},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[4102,4103],"CVE-2025-6051","PYSEC-2026-1988",[211,4103],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[4108],{"type":1209,"score":1658},[4110,4112,4114,4116,4118,4119,4121,4122],{"type":1213,"url":4111},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1224,"url":4113},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1224,"url":4115},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1224,"url":4117},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1221,"url":1255},{"type":1224,"url":4120},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1221,"url":1459},{"type":1213,"url":4123},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1262,1263,1264,1265],{"id":212,"slug":4126,"dossier":47,"summary":4127,"aliases":4128,"sourceIds":4131,"published":4132,"modified":4133,"checkedAt":7,"severity":4134,"references":4137,"versionKeys":4150,"packageCount":32,"repositoryCount":2774},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[4129,4130],"CVE-2026-25087","PYSEC-2026-113",[212,4130],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[4135],{"type":1209,"score":4136},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[4138,4140,4142,4144,4146,4148],{"type":1213,"url":4139},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1218,"url":4141},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1221,"url":4143},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1224,"url":4145},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1213,"url":4147},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1213,"url":4149},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[4151,4152,4153,4154],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":213,"slug":4156,"dossier":47,"summary":4157,"aliases":4158,"sourceIds":4162,"published":2815,"modified":4163,"checkedAt":7,"severity":4164,"references":4167,"versionKeys":4185,"packageCount":32,"repositoryCount":1393},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[4159,4160,4161],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[213],"2026-09-10T03:49:48.419046410Z",[4165,4166],{"type":1209,"score":2819},{"type":1315,"score":3960},[4168,4170,4172,4174,4176,4178,4179,4181,4183],{"type":1213,"url":4169},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1224,"url":4171},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1224,"url":4173},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1224,"url":4175},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1224,"url":4177},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1221,"url":1422},{"type":1224,"url":4180},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1224,"url":4182},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1224,"url":4184},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[4186,4187,4188,1434,1435,1436,2394,2395,3980,3981,3982,3983],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":214,"slug":4190,"dossier":47,"summary":4191,"aliases":4192,"sourceIds":4195,"published":4196,"modified":4197,"checkedAt":7,"severity":4198,"references":4201,"versionKeys":4210,"packageCount":32,"repositoryCount":103},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[4193,4194],"CVE-2026-53540","PYSEC-2026-3040",[214,4194],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[4199],{"type":1209,"score":4200},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4202,4204,4205,4206,4208],{"type":1224,"url":4203},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1221,"url":1813},{"type":1221,"url":1815},{"type":1213,"url":4207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1213,"url":4209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[1901,1902,1903,1819],{"id":215,"slug":4212,"dossier":47,"summary":4213,"aliases":4214,"sourceIds":4217,"published":4218,"modified":4219,"checkedAt":7,"severity":4220,"references":4222,"versionKeys":4233,"packageCount":32,"repositoryCount":103},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[4215,4216],"CVE-2026-53537","PYSEC-2026-3041",[215,4216],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[4221],{"type":1209,"score":2139},[4223,4225,4227,4228,4230,4232],{"type":1224,"url":4224},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1213,"url":4226},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":1221,"url":1813},{"type":1213,"url":4229},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1224,"url":4231},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":1221,"url":1815},[1901,1902,1903,1819],{"id":216,"slug":4235,"dossier":47,"summary":4236,"aliases":4237,"sourceIds":4241,"published":2815,"modified":4242,"checkedAt":7,"severity":4243,"references":4246,"versionKeys":4261,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[4238,4239,4240],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[216],"2026-06-10T17:41:15.774477397Z",[4244,4245],{"type":1209,"score":2819},{"type":1315,"score":2821},[4247,4249,4250,4251,4252,4254,4255,4257,4259],{"type":1213,"url":4248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1224,"url":2826},{"type":1224,"url":2828},{"type":1224,"url":2830},{"type":1224,"url":4253},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1221,"url":1422},{"type":1224,"url":4256},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1224,"url":4258},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1224,"url":4260},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1434,1435,1436,2394,2395,3980,3981],{"id":217,"slug":4263,"dossier":90,"summary":4264,"aliases":4265,"sourceIds":4269,"published":4270,"modified":4271,"checkedAt":7,"severity":4272,"references":4274,"versionKeys":4288,"packageCount":32,"repositoryCount":104},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[4266,4267,4268],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[217,4268],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[4273],{"type":1315,"score":1804},[4275,4277,4279,4281,4283,4284,4285,4286],{"type":1224,"url":4276},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1213,"url":4278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1224,"url":4280},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1224,"url":4282},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1221,"url":1534},{"type":1224,"url":1975},{"type":1221,"url":1977},{"type":1213,"url":4287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":218,"slug":4290,"dossier":47,"summary":4291,"aliases":4292,"sourceIds":4295,"published":4296,"modified":4297,"checkedAt":7,"severity":4298,"references":4301,"versionKeys":4314,"packageCount":32,"repositoryCount":399},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[4293,4294],"CVE-2025-43859","PYSEC-2026-348",[218,4294],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[4299],{"type":1209,"score":4300},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4302,4304,4306,4308,4310,4312],{"type":1224,"url":4303},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1213,"url":4305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1224,"url":4307},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1221,"url":4309},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1221,"url":4311},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1213,"url":4313},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[4315],"pypi:h11@0.14.0",{"id":219,"slug":4317,"dossier":47,"summary":4318,"aliases":4319,"sourceIds":4322,"published":4323,"modified":4324,"checkedAt":7,"severity":4325,"references":4329,"versionKeys":4338,"packageCount":32,"repositoryCount":1361},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[4320,4321],"CVE-2026-22815","PYSEC-2026-2094",[219,4321],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[4326,4327],{"type":1315,"score":2039},{"type":1315,"score":4328},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4330,4332,4334,4336,4337],{"type":1218,"url":4331},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1213,"url":4333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1218,"url":4335},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1221,"url":1323},{"type":1213,"url":1359},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":220,"slug":4340,"dossier":47,"summary":4341,"aliases":4342,"sourceIds":4345,"published":4346,"modified":4347,"checkedAt":7,"severity":4348,"references":4351,"versionKeys":4368,"packageCount":32,"repositoryCount":2774},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[4343,4344],"CVE-2025-68146","PYSEC-2026-1375",[220,4344],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[4349],{"type":1209,"score":4350},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4352,4354,4356,4357,4359,4361,4363,4364,4366],{"type":1224,"url":4353},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1224,"url":4355},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1221,"url":4006},{"type":1224,"url":4358},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1224,"url":4360},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1224,"url":4362},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1221,"url":4008},{"type":1213,"url":4365},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1213,"url":4367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[4012,4013,4014,4015],{"id":221,"slug":4370,"dossier":47,"summary":4371,"aliases":4372,"sourceIds":4376,"published":4377,"modified":4378,"checkedAt":7,"severity":4379,"references":4382,"versionKeys":4420,"packageCount":32,"repositoryCount":1393},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[4373,4374,4375],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[221,4375],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[4380,4381],{"type":1209,"score":1318},{"type":1315,"score":1804},[4383,4385,4387,4389,4391,4392,4394,4396,4398,4400,4402,4404,4405,4407,4409,4411,4412,4414,4416,4418],{"type":1224,"url":4384},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1213,"url":4386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1224,"url":4388},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1224,"url":4390},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1221,"url":1534},{"type":1224,"url":4393},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1224,"url":4395},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1224,"url":4397},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1213,"url":4399},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1213,"url":4401},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1213,"url":4403},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1213,"url":2697},{"type":1213,"url":4406},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1213,"url":4408},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1213,"url":4410},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1213,"url":2699},{"type":1213,"url":4413},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1213,"url":4415},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1213,"url":4417},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1213,"url":4419},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1538,1539,1540,1541,1542,1543,1544,1545],{"id":222,"slug":4422,"dossier":47,"summary":4423,"aliases":4424,"sourceIds":4428,"published":4429,"modified":4430,"checkedAt":7,"severity":4431,"references":4434,"versionKeys":4443,"packageCount":32,"repositoryCount":1393},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[4425,4426,4427],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[222,4427],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[4432,4433],{"type":1209,"score":1410},{"type":1315,"score":1940},[4435,4437,4439,4441,4442],{"type":1213,"url":4436},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1213,"url":4438},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1224,"url":4440},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1221,"url":1534},{"type":1213,"url":1948},[1538,1539,1540,1541,1542,1543,1544,1545],{"id":223,"slug":4445,"dossier":47,"summary":4446,"aliases":4447,"sourceIds":4450,"published":4451,"modified":4452,"checkedAt":7,"severity":4453,"references":4456,"versionKeys":4469,"packageCount":32,"repositoryCount":2286},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[4448,4449],"CVE-2026-24486","PYSEC-2026-1852",[223,4449],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[4454],{"type":1209,"score":4455},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[4457,4459,4461,4463,4464,4466,4467],{"type":1224,"url":4458},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":1213,"url":4460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":1224,"url":4462},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":1221,"url":1813},{"type":1224,"url":4465},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":1221,"url":1815},{"type":1213,"url":4468},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[1901,1902,1819],{"id":224,"slug":4471,"dossier":47,"summary":4472,"aliases":4473,"sourceIds":4476,"published":4477,"modified":4478,"checkedAt":7,"severity":4479,"references":4481,"versionKeys":4503,"packageCount":32,"repositoryCount":1361},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[4474,4475],"CVE-2026-48818","PYSEC-2026-2281",[224,4475],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[4480],{"type":1209,"score":3239},[4482,4484,4485,4487,4489,4491,4493,4495,4497,4499,4501],{"type":1213,"url":4483},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":1221,"url":2276},{"type":1224,"url":4486},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":1224,"url":4488},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":1213,"url":4490},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":1213,"url":4492},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":1213,"url":4494},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":1213,"url":4496},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":1415,"url":4498},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":1218,"url":4500},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":1218,"url":4502},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[1301,1302,1303,2283,2284,2285,2303,2304,2305],{"id":225,"slug":4505,"dossier":47,"summary":3307,"aliases":4506,"sourceIds":4509,"published":3312,"modified":4510,"checkedAt":7,"severity":4511,"references":4514,"versionKeys":4528,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[4507,4508],"CVE-2024-11393","PYSEC-2024-228",[225,4508],"2026-09-10T03:50:55.987633957Z",[4512,4513],{"type":1209,"score":3316},{"type":1209,"score":2787},[4515,4517,4518,4519,4520,4522,4524,4526],{"type":1213,"url":4516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1224,"url":3322},{"type":1224,"url":3324},{"type":1221,"url":1255},{"type":1224,"url":4521},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1224,"url":4523},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1213,"url":4525},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1213,"url":4527},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1262],{"id":226,"slug":4530,"dossier":47,"summary":4531,"aliases":4532,"sourceIds":4536,"published":4537,"modified":4538,"checkedAt":7,"severity":4539,"references":4544,"versionKeys":4560,"packageCount":32,"repositoryCount":418},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[4533,4534,4535],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[226],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[4540,4542],{"type":1209,"score":4541},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1315,"score":4543},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4545,4547,4549,4551,4553,4554,4556,4558],{"type":1213,"url":4546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1224,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1224,"url":4550},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1224,"url":4552},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1221,"url":1422},{"type":1224,"url":4555},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1224,"url":4557},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1224,"url":4559},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1434,1435],{"id":227,"slug":4562,"dossier":47,"summary":4563,"aliases":4564,"sourceIds":4567,"published":4568,"modified":4569,"checkedAt":7,"severity":4570,"references":4572,"versionKeys":4579,"packageCount":32,"repositoryCount":1361},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[4565,4566],"CVE-2026-48817","PYSEC-2026-2280",[227,4566],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[4571],{"type":1209,"score":1349},[4573,4575,4577,4578],{"type":1213,"url":4574},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":1213,"url":4576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":1221,"url":2276},{"type":1213,"url":4496},[1301,1302,1303,2283,2284,2285,2303,2304,2305],{"id":228,"slug":4581,"dossier":47,"summary":4582,"aliases":4583,"sourceIds":4586,"published":4587,"modified":4588,"checkedAt":7,"severity":4589,"references":4592,"versionKeys":4598,"packageCount":32,"repositoryCount":42},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[4584,4585],"CVE-2026-54274","PYSEC-2026-2108",[228,4585],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[4590,4591],{"type":1315,"score":1584},{"type":1209,"score":1318},[4593,4595,4596],{"type":1213,"url":4594},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1221,"url":1323},{"type":1218,"url":4597},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":229,"slug":4600,"dossier":47,"summary":4601,"aliases":4602,"sourceIds":4606,"published":4607,"modified":4608,"checkedAt":7,"severity":4609,"references":4612,"versionKeys":4626,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[4603,4604,4605],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[229,4605],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[4610],{"type":1209,"score":4611},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4613,4615,4617,4619,4621,4623,4624],{"type":1213,"url":4614},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1213,"url":4616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1224,"url":4618},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1218,"url":4620},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1224,"url":4622},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1221,"url":1534},{"type":1224,"url":4625},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1541],{"id":230,"slug":4628,"dossier":90,"summary":4629,"aliases":4630,"sourceIds":4634,"published":4635,"modified":4636,"checkedAt":7,"severity":4637,"references":4640,"versionKeys":4651,"packageCount":32,"repositoryCount":104},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[4631,4632,4633],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[230,4633],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[4638],{"type":1209,"score":4639},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4641,4643,4645,4647,4649,4650],{"type":1257,"url":4642},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1213,"url":4644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1218,"url":4646},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1218,"url":4648},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1221,"url":1534},{"type":1213,"url":1975},[1538,1539,1540,1541,1542,1543,1544,1545,1546],{"id":231,"slug":4653,"dossier":47,"summary":4654,"aliases":4655,"sourceIds":4658,"published":4659,"modified":4660,"checkedAt":7,"severity":4661,"references":4664,"versionKeys":4677,"packageCount":32,"repositoryCount":1950},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[4656,4657],"CVE-2026-9856","PYSEC-2026-3929",[231,4657],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[4662],{"type":1209,"score":4663},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[4665,4667,4669,4671,4672,4674,4675],{"type":1213,"url":4666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":1224,"url":4668},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":1224,"url":4670},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":1221,"url":1255},{"type":1224,"url":4673},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":1221,"url":1459},{"type":1213,"url":4676},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[1262,1263,1264,1265,1266,1267,1268,1269,1270,4678],"pypi:transformers@5.8.0",{"id":232,"slug":4680,"dossier":47,"summary":83,"aliases":4681,"sourceIds":4684,"published":4685,"modified":4686,"checkedAt":7,"severity":4687,"references":4689,"versionKeys":4698,"packageCount":32,"repositoryCount":418},"pysec-2025-198-62b25ed4",[4682,4683],"BIT-pytorch-2025-46148","CVE-2025-46148",[232],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[4688],{"type":1209,"score":2479},[4690,4692,4694,4696],{"type":1213,"url":4691},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1213,"url":4693},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1415,"url":4695},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1218,"url":4697},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1434,1435],{"id":233,"slug":4700,"dossier":47,"summary":83,"aliases":4701,"sourceIds":4704,"published":4705,"modified":4706,"checkedAt":7,"severity":4707,"references":4709,"versionKeys":4715,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[4702,4703],"BIT-pytorch-2025-46149","CVE-2025-46149",[233],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[4708],{"type":1209,"score":2479},[4710,4711,4713],{"type":1213,"url":4691},{"type":1415,"url":4712},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1218,"url":4714},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1435],{"id":234,"slug":4717,"dossier":47,"summary":83,"aliases":4718,"sourceIds":4721,"published":4722,"modified":4723,"checkedAt":7,"severity":4724,"references":4726,"versionKeys":4734,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[4719,4720],"BIT-pytorch-2025-46150","CVE-2025-46150",[234],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[4725],{"type":1209,"score":2479},[4727,4728,4730,4732],{"type":1213,"url":4691},{"type":1415,"url":4729},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1415,"url":4731},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1218,"url":4733},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1435],{"id":235,"slug":4736,"dossier":47,"summary":83,"aliases":4737,"sourceIds":4740,"published":4741,"modified":4742,"checkedAt":7,"severity":4743,"references":4745,"versionKeys":4751,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[4738,4739],"BIT-pytorch-2025-46152","CVE-2025-46152",[235],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[4744],{"type":1209,"score":1282},[4746,4747,4749],{"type":1213,"url":4691},{"type":1415,"url":4748},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1218,"url":4750},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1435],{"id":236,"slug":4753,"dossier":47,"summary":83,"aliases":4754,"sourceIds":4757,"published":4758,"modified":4759,"checkedAt":7,"severity":4760,"references":4762,"versionKeys":4772,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[4755,4756],"BIT-pytorch-2025-46153","CVE-2025-46153",[236],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[4761],{"type":1209,"score":2479},[4763,4765,4766,4768,4770],{"type":1224,"url":4764},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1213,"url":4691},{"type":1213,"url":4767},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1415,"url":4769},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1218,"url":4771},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1435],{"id":237,"slug":4774,"dossier":47,"summary":83,"aliases":4775,"sourceIds":4778,"published":4779,"modified":4780,"checkedAt":7,"severity":4781,"references":4783,"versionKeys":4788,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[4776,4777],"BIT-pytorch-2025-55551","CVE-2025-55551",[237],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[4782],{"type":1209,"score":1318},[4784,4786],{"type":1213,"url":4785},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1415,"url":4787},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1434,1435,1436,2394,2395,3980],{"id":238,"slug":4790,"dossier":47,"summary":83,"aliases":4791,"sourceIds":4794,"published":4795,"modified":4796,"checkedAt":7,"severity":4797,"references":4799,"versionKeys":4803,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[4792,4793],"BIT-pytorch-2025-55552","CVE-2025-55552",[238],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[4798],{"type":1209,"score":1318},[4800,4801],{"type":1213,"url":4785},{"type":1415,"url":4802},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1434,1435,1436,2394,2395,3980],{"id":239,"slug":4805,"dossier":47,"summary":83,"aliases":4806,"sourceIds":4809,"published":4810,"modified":4811,"checkedAt":7,"severity":4812,"references":4814,"versionKeys":4820,"packageCount":32,"repositoryCount":399},"pysec-2025-205-fd5e58fd",[4807,4808],"BIT-pytorch-2025-55553","CVE-2025-55553",[239],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[4813],{"type":1209,"score":1318},[4815,4816,4818],{"type":1213,"url":4785},{"type":1415,"url":4817},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1218,"url":4819},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1434,1435,1436],{"id":240,"slug":4822,"dossier":47,"summary":83,"aliases":4823,"sourceIds":4826,"published":4827,"modified":4828,"checkedAt":7,"severity":4829,"references":4831,"versionKeys":4835,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[4824,4825],"BIT-pytorch-2025-55554","CVE-2025-55554",[240],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[4830],{"type":1209,"score":1282},[4832,4833],{"type":1213,"url":4785},{"type":1415,"url":4834},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1434,1435,1436,2394,2395,3980],{"id":241,"slug":4837,"dossier":47,"summary":83,"aliases":4838,"sourceIds":4841,"published":4842,"modified":4843,"checkedAt":7,"severity":4844,"references":4846,"versionKeys":4852,"packageCount":32,"repositoryCount":399},"pysec-2025-207-2abef3fc",[4839,4840],"BIT-pytorch-2025-55557","CVE-2025-55557",[241],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[4845],{"type":1209,"score":1318},[4847,4848,4850],{"type":1213,"url":4785},{"type":1415,"url":4849},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1218,"url":4851},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1434,1435,1436],{"id":242,"slug":4854,"dossier":47,"summary":83,"aliases":4855,"sourceIds":4858,"published":4859,"modified":4860,"checkedAt":7,"severity":4861,"references":4863,"versionKeys":4869,"packageCount":32,"repositoryCount":399},"pysec-2025-208-6e93fe9d",[4856,4857],"BIT-pytorch-2025-55558","CVE-2025-55558",[242],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[4862],{"type":1209,"score":1318},[4864,4865,4867],{"type":1213,"url":4785},{"type":1415,"url":4866},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1218,"url":4868},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1434,1435,1436],{"id":243,"slug":4871,"dossier":47,"summary":83,"aliases":4872,"sourceIds":4875,"published":4876,"modified":4877,"checkedAt":7,"severity":4878,"references":4880,"versionKeys":4886,"packageCount":32,"repositoryCount":399},"pysec-2025-209-e6f352b0",[4873,4874],"BIT-pytorch-2025-55560","CVE-2025-55560",[243],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[4879],{"type":1209,"score":1318},[4881,4882,4884],{"type":1213,"url":4785},{"type":1415,"url":4883},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1218,"url":4885},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1434,1435,1436],{"id":244,"slug":4888,"dossier":47,"summary":83,"aliases":4889,"sourceIds":4891,"published":4892,"modified":4893,"checkedAt":7,"severity":4894,"references":4896,"versionKeys":4899,"packageCount":32,"repositoryCount":4900},"pysec-2025-211-d8bd15de",[4890],"CVE-2025-14920",[244],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[4895],{"type":1209,"score":1248},[4897],{"type":1213,"url":4898},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1262,1263,1264,1265,1266],5,{"id":245,"slug":4902,"dossier":47,"summary":83,"aliases":4903,"sourceIds":4905,"published":4906,"modified":4907,"checkedAt":7,"severity":4908,"references":4910,"versionKeys":4913,"packageCount":32,"repositoryCount":4900},"pysec-2025-212-a011b97d",[4904],"CVE-2025-14921",[245],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[4909],{"type":1209,"score":1248},[4911],{"type":1213,"url":4912},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1262,1263,1264,1265,1266],{"id":246,"slug":4915,"dossier":47,"summary":83,"aliases":4916,"sourceIds":4918,"published":4919,"modified":4920,"checkedAt":7,"severity":4921,"references":4923,"versionKeys":4926,"packageCount":32,"repositoryCount":4900},"pysec-2025-213-9043dc9b",[4917],"CVE-2025-14924",[246],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[4922],{"type":1209,"score":1248},[4924],{"type":1213,"url":4925},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1262,1263,1264,1265,1266],{"id":247,"slug":4928,"dossier":47,"summary":83,"aliases":4929,"sourceIds":4931,"published":4932,"modified":4933,"checkedAt":7,"severity":4934,"references":4936,"versionKeys":4939,"packageCount":32,"repositoryCount":4900},"pysec-2025-214-eb241255",[4930],"CVE-2025-14926",[247],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[4935],{"type":1209,"score":1248},[4937],{"type":1213,"url":4938},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1262,1263,1264,1265,1266],{"id":248,"slug":4941,"dossier":47,"summary":83,"aliases":4942,"sourceIds":4944,"published":4945,"modified":4946,"checkedAt":7,"severity":4947,"references":4949,"versionKeys":4952,"packageCount":32,"repositoryCount":4900},"pysec-2025-215-6064f491",[4943],"CVE-2025-14927",[248],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[4948],{"type":1209,"score":1248},[4950],{"type":1213,"url":4951},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1262,1263,1264,1265,1266],{"id":249,"slug":4954,"dossier":47,"summary":83,"aliases":4955,"sourceIds":4957,"published":4958,"modified":4959,"checkedAt":7,"severity":4960,"references":4962,"versionKeys":4965,"packageCount":32,"repositoryCount":4900},"pysec-2025-216-5708ed01",[4956],"CVE-2025-14928",[249],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[4961],{"type":1209,"score":1248},[4963],{"type":1213,"url":4964},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1262,1263,1264,1265,1266],{"id":250,"slug":4967,"dossier":47,"summary":83,"aliases":4968,"sourceIds":4970,"published":4971,"modified":4972,"checkedAt":7,"severity":4973,"references":4975,"versionKeys":4978,"packageCount":32,"repositoryCount":42},"pysec-2025-217-2c1ad388",[4969],"CVE-2025-14929",[250],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[4974],{"type":1209,"score":1248},[4976],{"type":1213,"url":4977},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1262,1263,1264,1265,1266,1267,1268,1269,1270],{"id":251,"slug":4980,"dossier":47,"summary":83,"aliases":4981,"sourceIds":4983,"published":4984,"modified":4985,"checkedAt":7,"severity":4986,"references":4988,"versionKeys":4991,"packageCount":32,"repositoryCount":361},"pysec-2025-218-39811fc3",[4982],"CVE-2025-14930",[251],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[4987],{"type":1209,"score":1248},[4989],{"type":1213,"url":4990},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1262,1263,1264,1265,1266,1267],{"id":252,"slug":4993,"dossier":47,"summary":83,"aliases":4994,"sourceIds":4997,"published":4998,"modified":4999,"checkedAt":7,"severity":5000,"references":5002,"versionKeys":5013,"packageCount":32,"repositoryCount":5014},"pysec-2026-139-96951ff6",[4995,4996],"BIT-pytorch-2026-4538","CVE-2026-4538",[252],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[5001],{"type":1209,"score":3911},[5003,5005,5007,5009,5011],{"type":1224,"url":5004},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1213,"url":5006},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1213,"url":5008},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1415,"url":5010},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1218,"url":5012},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[4186,1434,1435,1436,2394,2395,3980,3981,3982,3983],14,{"id":253,"slug":5016,"dossier":90,"summary":83,"aliases":5017,"sourceIds":5020,"published":5021,"modified":5022,"checkedAt":7,"severity":5023,"references":5026,"versionKeys":5041,"packageCount":32,"repositoryCount":104},"pysec-2026-2132-627bf7c7",[5018,5019],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[253],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5024],{"type":1209,"score":5025},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5027,5029,5031,5033,5035,5037,5039],{"type":1224,"url":5028},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1224,"url":5030},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1213,"url":5032},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1213,"url":5034},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1415,"url":5036},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1218,"url":5038},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1257,"url":5040},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5042,5043,5044,5045,5046,5047],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":254,"slug":5049,"dossier":47,"summary":83,"aliases":5050,"sourceIds":5055,"published":5056,"modified":5057,"checkedAt":7,"severity":5058,"references":5060,"versionKeys":5076,"packageCount":32,"repositoryCount":2774},"pysec-2026-2286-8795b007",[5051,5052,5053,5054],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[254],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[5059],{"type":1209,"score":2787},[5061,5063,5065,5066,5068,5070,5072,5074],{"type":1224,"url":5062},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1224,"url":5064},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1213,"url":3362},{"type":1213,"url":5067},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1213,"url":5069},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1415,"url":5071},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1415,"url":5073},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1218,"url":5075},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1434,1435,1436,2394,2395,3980,3981,3982,3983],{"id":255,"slug":5078,"dossier":47,"summary":83,"aliases":5079,"sourceIds":5081,"published":5082,"modified":5083,"checkedAt":7,"severity":5084,"references":5087,"versionKeys":5096,"packageCount":32,"repositoryCount":2286},"pysec-2026-3716-664d8bb8",[5080],"CVE-2026-66007",[255],"2026-07-24T15:19:07.493Z","2026-08-19T13:45:02.994125715Z",[5085],{"type":1315,"score":5086},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5088,5090,5092,5094],{"type":1415,"url":5089},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fissues\u002F8324",{"type":1218,"url":5091},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fcommit\u002Ff989ef9b4cc6c0039a7a82458eebca49e2b58b4b",{"type":1218,"url":5093},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Fdatasets\u002Fpull\u002F8325",{"type":1218,"url":5095},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdatasets-path-traversal-via-unsanitized-file-name-metadata",[5097,5098,5099,5100,5101,5102],"pypi:datasets@3.2.0","pypi:datasets@3.5.1","pypi:datasets@3.6.0","pypi:datasets@4.3.0","pypi:datasets@4.4.1","pypi:datasets@4.8.5",1789534491210]