[{"data":1,"prerenderedAt":19061},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11332":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":547,"related":552},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-11-12T08:58:58.139Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-11-12T08:57:16.613Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},49,48,1,29,6,33,45,47,46,0,5071,5059,12,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":42,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2865,51,9911,63,2827,38,1097,43,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:typing-extensions","typing-extensions-87d153eb","typing-extensions",0.5918367346938775,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":117,"artifactResolvedComponentCount":117,"exactManifestPinCount":39,"packageCount":118,"ecosystems":119,"aiPackageCount":32,"licenseExpressionCount":35,"unknownLicensePackageCount":32,"advisoryIds":122,"advisoryCount":542,"providers":543},"opencode:11332","opencode-11332",11332,"sprachbuchung-erzmobil","erzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil",null,"https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil","b89e10e2d7dc3fe7766c171353dd4e15df8f3e07","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fcommit\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07","2026-10-27T12:05:13.998Z","2026-10-27T12:05:12.000Z",{"complete":90,"entryCount":91,"truncated":47},true,490,[93,102,110],{"path":94,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":85,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"dashboard\u002Fpackage-lock.json","npm-lock","3953686d66a918f77e6a34d09ae6bbdc69d186b2","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fblob\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07\u002Fdashboard\u002Fpackage-lock.json","b6bb9f6359bbea5da66f8bbd840794270f5e5e08a6099742a59d53ef3494aeca",419338,"parsed",759,{"path":103,"kind":104,"blobSha":105,"sourceUrl":106,"commitSha":85,"contentSha256":107,"byteCount":108,"state":100,"componentCount":109},"sbom.cdx.json","cyclonedx-json","3349aa5ad7f9ceb0d1bae546f292be001343662a","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fblob\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07\u002Fsbom.cdx.json","75dcc620214a3fcc98f4e8798b8b4f9d9db47c47c4da5074833e4dddddef01b0",266969,781,{"path":56,"kind":111,"blobSha":112,"sourceUrl":113,"commitSha":85,"contentSha256":114,"byteCount":115,"state":100,"componentCount":116},"uv-lock","d586704dfa97d255af772ed32d3278fe3ecd5c3b","https:\u002F\u002Fgitlab.opencode.de\u002Ferzmobil\u002Fai-voicebot\u002Fsprachbuchung-erzmobil\u002F-\u002Fblob\u002Fb89e10e2d7dc3fe7766c171353dd4e15df8f3e07\u002Fuv.lock","3756746b4a4032cb0c77482692f2914d91928e9d92d8fc835b28e466623b7d1e",488931,206,1746,927,[120,121],"npm","pypi",[123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541],"GHSA-22hg-r758-rrw9","GHSA-239g-whfq-7xj9","GHSA-23c5-xmqv-rm74","GHSA-23mf-xhv8-69c2","GHSA-248v-346w-9cwc","GHSA-24rc-8hj2-v98c","GHSA-254f-3936-288h","GHSA-25h7-pfq9-p65f","GHSA-27h8-gf7j-v5hc","GHSA-27r3-jxmh-p828","GHSA-284h-m62q-gf8w","GHSA-2883-xcg3-v3hh","GHSA-28wg-ghj8-5hjv","GHSA-2c2j-9gv5-cj73","GHSA-2f96-g7mh-g2hx","GHSA-2fqr-mr3j-6wp8","GHSA-2g4f-4pwh-qvx6","GHSA-2g87-pp6c-29x5","GHSA-2gqq-gqf2-x968","GHSA-2gx3-rcp4-g85q","GHSA-2h4p-vjrc-8xpq","GHSA-2jfj-6hjv-fm6j","GHSA-2m5v-pch6-74hx","GHSA-2mjp-6q6p-2qxm","GHSA-2qfp-q593-8484","GHSA-2v37-7h3g-55p8","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-332p-7hrc-92wf","GHSA-333x-w4r6-6crp","GHSA-35jp-ww65-95wh","GHSA-35p6-xmwp-9g52","GHSA-37ch-88jc-xwx2","GHSA-38jv-5279-wg99","GHSA-394h-qwmc-48pf","GHSA-3f7w-8rr8-f37f","GHSA-3g43-6gmg-66jw","GHSA-3j72-p6qg-6xp7","GHSA-3jxr-9vmj-r5cp","GHSA-3p68-rc4w-qgx5","GHSA-3ppc-4f35-3m26","GHSA-3pq3-5fj3-cg6v","GHSA-3rp5-jjmw-4wv2","GHSA-3v7f-55p6-f55p","GHSA-3w6x-2g7m-8v23","GHSA-3wq7-rqq7-wx6j","GHSA-3wxw-xv34-2frg","GHSA-3xpg-4rpp-hhhm","GHSA-42h9-826w-cgv3","GHSA-42vr-xj54-vc7v","GHSA-43fc-jf86-j433","GHSA-43mp-35q3-x3fq","GHSA-445q-vr5w-6q77","GHSA-4558-3h8r-v8xp","GHSA-45hq-cxwh-f6vc","GHSA-462x-pgg6-55fp","GHSA-48p4-8xcf-vxj5","GHSA-494j-54xm-rwp3","GHSA-494p-63j8-28p3","GHSA-4992-7rv2-5pvq","GHSA-4cwx-7wf7-3272","GHSA-4fh9-h7wg-q85m","GHSA-4fvr-rgm6-gqmc","GHSA-4gmw-gg2m-w46p","GHSA-4hjh-wcwx-xvwj","GHSA-4hqw-qxg8-jxx2","GHSA-4m7w-qmgq-4wj5","GHSA-4mjr-xmp4-gh2g","GHSA-4qv8-2p9j-2685","GHSA-4rm8-3hmm-39fg","GHSA-4rr5-89j8-mwwm","GHSA-4w7w-5xrc-9h26","GHSA-4w7w-66w2-5vf9","GHSA-4x4j-2g7c-83w6","GHSA-4x5r-pxfx-6jf8","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52cp-r559-cp3m","GHSA-537c-gmf6-5ccf","GHSA-539m-9xh6-q6rr","GHSA-542g-h47m-68v8","GHSA-54jq-c3m8-4m76","GHSA-54p9-h82j-f925","GHSA-558c-9hv2-4prj","GHSA-55wc-3pg8-jfw6","GHSA-5639-2j2p-m4mx","GHSA-567q-5qvw-pf92","GHSA-587h-7wmj-h5pm","GHSA-58r4-6rv3-gfh8","GHSA-597g-3phw-6986","GHSA-59cr-6r3x-644w","GHSA-59g5-xgcq-4qw3","GHSA-5c9x-8gcm-mpgx","GHSA-5h93-6whr-6q8j","GHSA-5p39-cfhj-2xmp","GHSA-5p4m-2wfm-xmqj","GHSA-5rvq-cxj2-64vf","GHSA-5vjq-rrrf-7h2q","GHSA-5wmx-573v-2qwq","GHSA-5wr8-gcqf-gqf3","GHSA-5x8w-8jj5-q52h","GHSA-5x94-69rx-g8h2","GHSA-5xm2-6676-qcp9","GHSA-5xmw-vc9v-4wf2","GHSA-5xxx-qhh7-9287","GHSA-62hf-57xw-28j9","GHSA-62p4-gmf7-7g93","GHSA-62q4-447f-wv8h","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-654x-cwwv-5j9c","GHSA-65pc-fj4g-8rjx","GHSA-65qm-jvmh-6pqg","GHSA-68fv-2mgg-jv7q","GHSA-698v-4r3x-3vcv","GHSA-69f9-5gxw-wvc2","GHSA-69hj-f68j-2879","GHSA-6chq-wfr3-2hj9","GHSA-6cjc-53gc-5rqm","GHSA-6g55-p6wh-862q","GHSA-6hr6-w5qg-qmwg","GHSA-6j4f-fj2g-mc7p","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6p8h-3wgx-97gf","GHSA-6pq8-jhm2-2vcw","GHSA-6q48-6c7w-9gw2","GHSA-6r8x-57c9-28j4","GHSA-6rw7-vpxm-498p","GHSA-6w3r-xr62-4xcp","GHSA-6w46-j5rx-g56g","GHSA-73rr-hh4g-fpgx","GHSA-73wf-gq98-2v4g","GHSA-74r2-7ff9-mjj2","GHSA-752w-5fwx-jx9f","GHSA-7545-fcxq-7j24","GHSA-768j-98cg-p3fv","GHSA-777c-7fjr-54vf","GHSA-7833-fr7j-v32q","GHSA-78g4-xqwv-q3g8","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7mwm-ghpf-9vrm","GHSA-7q8q-rj6j-mhjq","GHSA-7r86-cg39-jmmj","GHSA-7rv5-mrxv-xcr9","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-83vg-56qc-22m7","GHSA-8436-99hf-9mmv","GHSA-847f-9342-265h","GHSA-84m7-p3x7-pcfv","GHSA-86qp-5c8j-p5mr","GHSA-8988-9cw3-xx77","GHSA-898c-q2cr-xwhg","GHSA-8g5g-8vmr-9782","GHSA-8mcc-hrx5-hvxc","GHSA-8mx5-7m5m-r77g","GHSA-8qvm-5x2c-j2w7","GHSA-8rjx-v5ww-45pp","GHSA-8v84-f9pq-wr9x","GHSA-8v8h-hg4w-mvq2","GHSA-8wjv-2p76-3863","GHSA-8xcm-r25x-g524","GHSA-93m4-6634-74q7","GHSA-94p4-4cq8-9g67","GHSA-94p9-xgh2-xp45","GHSA-9548-qrrj-x5pj","GHSA-956x-8gvw-wg5v","GHSA-966j-vmvw-g2g9","GHSA-97r2-qh9m-474h","GHSA-983w-rhvv-gwmv","GHSA-993g-76c3-p5m4","GHSA-9fm3-97px-rjf6","GHSA-9fr6-4gfg-395g","GHSA-9h52-p55h-vw2f","GHSA-9h9j-4vrj-gf7g","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9j54-fg26-wv3r","GHSA-9jrq-w75r-8gcw","GHSA-9rj7-rf2p-w77r","GHSA-9v7f-9g4p-ffgj","GHSA-9v8h-qqgm-4m35","GHSA-9v9v-9qvf-h2hj","GHSA-9vhv-jxww-xfm5","GHSA-9wx4-h78v-vm56","GHSA-9wx9-5pv9-3349","GHSA-9x8q-7h8h-wcw9","GHSA-9xw5-w5jj-pvcg","GHSA-9xwg-3r6f-jcx2","GHSA-c2c7-rcm5-vvqj","GHSA-c427-h43c-vf67","GHSA-c6hw-5grf-ff96","GHSA-c83g-rgw3-j3cx","GHSA-c947-3pg5-gm8q","GHSA-c978-59m8-c77v","GHSA-cfh3-3jmp-rvhc","GHSA-cp9v-662q-vvx9","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cw65-gx24-rc82","GHSA-cwqr-hh33-gh44","GHSA-cx28-75q4-x26q","GHSA-f269-vfmq-vjvj","GHSA-f2g6-542v-9j58","GHSA-f72v-6w45-q472","GHSA-f86p-h4j2-7qgj","GHSA-f886-m6hf-6m8v","GHSA-f96h-pmfr-66vw","GHSA-f9j4-qggq-h239","GHSA-f9xw-jh8m-3mwq","GHSA-fc2g-4w5p-6whm","GHSA-fc9g-5qg7-mf45","GHSA-ffc3-869f-jxw9","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-fq56-3cx3-fjxp","GHSA-fvcv-3m26-pcqx","GHSA-fx2h-pf6j-xcff","GHSA-fx3j-rwgx-fr94","GHSA-fxqj-rqcc-2cmp","GHSA-g3cq-j2xw-wf74","GHSA-g3hv-75wg-m249","GHSA-g4jq-h2w9-997c","GHSA-g4qv-2jxx-769h","GHSA-g5vv-9gxw-82hx","GHSA-g6cj-pr64-35w5","GHSA-g7cr-3p24-7wf7","GHSA-g7vv-2v7x-gj9p","GHSA-g842-9rc4-69pw","GHSA-g84x-mcqj-x9qq","GHSA-g8m3-5g58-fq7m","GHSA-g9mf-h72j-4rw9","GHSA-gc5v-m9x4-r6x2","GHSA-gcqx-w48m-w2h4","GHSA-gg2r-wvfm-q9rx","GHSA-gh4c-6fx4-qh6g","GHSA-gjv8-xp57-g29c","GHSA-gm37-52c6-37mw","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gq48-pqfc-9p58","GHSA-gvp8-978c-rx2q","GHSA-gx76-c99x-2c96","GHSA-h4gh-qq45-vh27","GHSA-h67p-54hq-rp68","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hfxv-24rg-xrqf","GHSA-hg6j-4rv6-33pg","GHSA-hh9p-6wh2-4mfc","GHSA-hhxq-47xx-j5xx","GHSA-hmq2-w58f-27jc","GHSA-hmw2-7cc7-3qxx","GHSA-hpj7-wq8m-9hgp","GHSA-hxm8-2xgr-2p9m","GHSA-j4m9-6w36-pw47","GHSA-j5f8-grm9-p9fc","GHSA-j8f7-rjxc-mr56","GHSA-j8rh-479h-cp32","GHSA-j934-xhv5-fg8f","GHSA-jf6q-chmf-3h3v","GHSA-jg22-mg44-37j8","GHSA-jg86-v3jv-hrpm","GHSA-jhhc-3hcp-qhm5","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jm66-cg57-jjv5","GHSA-jm78-9fvv-mhgr","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jqcg-44mw-7w3h","GHSA-jqfw-vq24-v9c3","GHSA-jqh4-m9w3-8hp9","GHSA-jr45-8vmc-qm54","GHSA-jwrc-g2q2-pq5p","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m5qp-6w8w-w647","GHSA-m64x-33q8-m5h7","GHSA-m6qw-4cw2-hm4m","GHSA-m7pr-hjqh-92cm","GHSA-m8rv-5g2x-5cg5","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mh29-5h37-fv8m","GHSA-mh99-v99m-4gvg","GHSA-mj87-hwqh-73pj","GHSA-mmx7-hfxf-jppx","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfp-p49p-3hf2","GHSA-mrhx-c7xc-m3w5","GHSA-mrwp-f3q8-3g9p","GHSA-mv93-w799-cj2w","GHSA-mwf2-3pr3-8698","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p498-v437-472g","GHSA-p4g4-x82p-q773","GHSA-p4wg-p73j-c528","GHSA-p538-c434-8v24","GHSA-p58f-9548-mpm2","GHSA-p88m-4jfj-68fv","GHSA-p8hx-v2p6-rp84","GHSA-p92q-9vqr-4j8v","GHSA-p998-jp59-783m","GHSA-p9ff-h696-f583","GHSA-pchr-8j38-3x4p","GHSA-pf86-5x62-jrwf","GHSA-pg7v-jwj7-p798","GHSA-phc3-fgpg-7m6h","GHSA-phj9-mv4w-65pm","GHSA-pmjh-fq2x-6v4x","GHSA-pmv8-rq9r-6j72","GHSA-pmwg-cvhr-8vh7","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pqxq-w44r-73xw","GHSA-pr7r-676h-xcf6","GHSA-pwv6-vv43-88gr","GHSA-pxh4-856f-4h89","GHSA-q2hr-2g5m-vwhr","GHSA-q2x7-8rv6-6q7h","GHSA-q45j-58j2-45rg","GHSA-q8mj-m7cp-5q26","GHSA-q8qp-cvcw-x6jj","GHSA-qccp-gfcp-xxvc","GHSA-qhr7-859c-m2p7","GHSA-qmgc-5h2g-mvrw","GHSA-qmx5-4p3x-wvqf","GHSA-qrxm-fqhp-jwvm","GHSA-qx2v-qp2m-jg93","GHSA-r28c-9q8g-f849","GHSA-r4q5-vmmm-2653","GHSA-r53p-7pc4-xj5r","GHSA-r543-q48m-4c9j","GHSA-r6ph-v2qm-q3c2","GHSA-r6x4-923q-g947","GHSA-r73j-pqj5-w3x7","GHSA-r825-w8mm-5pxw","GHSA-r9mr-m37c-5fr3","GHSA-rf6f-7fwh-wjgh","GHSA-rfgq-q3w2-pmv2","GHSA-rfgv-xxqx-mfg5","GHSA-rfpc-qcw5-3pc4","GHSA-rgw5-rvv9-x895","GHSA-rmxm-3fg6-px4f","GHSA-rpm5-65cw-6hj4","GHSA-rq7h-c2jc-7f22","GHSA-rwj8-pgh3-r573","GHSA-rwrf-2pqf-9j8j","GHSA-rx4f-c7p8-82vq","GHSA-rxp7-6hxx-x8q5","GHSA-v3r7-h72x-cjcm","GHSA-v422-hmwv-36x6","GHSA-v4x8-3wr5-3wq8","GHSA-v6wh-96g9-6wx3","GHSA-v87r-6q3f-2j67","GHSA-v92g-xgxw-vvmm","GHSA-v9p9-hfj2-hcw8","GHSA-v9pg-7xvm-68hf","GHSA-v9pv-5gc8-w2m6","GHSA-vf2m-468p-8v99","GHSA-vffw-93wf-4j4q","GHSA-vh66-26gq-q6x8","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vrm6-8vpv-qv8q","GHSA-vx6w-vv9f-6gvg","GHSA-vxj4-q4g9-crj7","GHSA-vxpw-j846-p89q","GHSA-vxq7-64xx-v4gw","GHSA-w2cx-738m-mc7w","GHSA-w2fm-2cpv-w7v5","GHSA-w4fh-qvv9-3v23","GHSA-w6j9-cwv2-h6wq","GHSA-w74x-v6f9-j3xg","GHSA-w7fw-mjwx-w883","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w889-685w-c8fh","GHSA-w8jc-g24h-crhw","GHSA-w9j2-pvgh-6h63","GHSA-whj4-6x5x-4v2j","GHSA-wjr9-j795-jxcr","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wp97-x4hv-qvhp","GHSA-wqp7-x3pw-xc5r","GHSA-wvpp-8hx9-p66j","GHSA-x2qx-6953-8485","GHSA-x33g-cr3x-6449","GHSA-x746-7m8f-x49c","GHSA-x78j-v8h9-3j2q","GHSA-xcgm-r5h9-7989","GHSA-xcq7-p3pf-p88h","GHSA-xg8h-j46f-w952","GHSA-xgh8-jp6q-p5x8","GHSA-xgmm-8j9v-c9wx","GHSA-xhjh-pmcv-23jw","GHSA-xhq7-xmqj-769h","GHSA-xj96-63gp-2gmr","GHSA-xjj6-f33q-929c","GHSA-xvh5-g6gv-559v","GHSA-xwg4-73v4-xw9w","GHSA-xx6v-rp6x-q39c","PYSEC-2025-183",419,[544],{"id":545,"label":546},"openai","OpenAI",{"files":548,"occurrenceCount":117},[549,550,551],{"path":94,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":85,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"path":103,"kind":104,"blobSha":105,"sourceUrl":106,"commitSha":85,"contentSha256":107,"byteCount":108,"state":100,"componentCount":109},{"path":56,"kind":111,"blobSha":112,"sourceUrl":113,"commitSha":85,"contentSha256":114,"byteCount":115,"state":100,"componentCount":116},{"packages":553,"vulnerabilities":8484},[554,566,578,589,600,611,620,630,640,649,660,670,681,691,700,710,719,729,738,747,757,767,778,787,796,805,815,824,833,842,851,860,869,878,888,897,906,915,925,934,943,952,961,971,980,989,998,1007,1016,1025,1034,1043,1052,1061,1070,1079,1088,1097,1106,1115,1124,1134,1143,1152,1161,1171,1181,1189,1197,1206,1215,1223,1232,1240,1249,1257,1265,1274,1282,1290,1298,1306,1314,1322,1330,1338,1346,1354,1362,1370,1378,1386,1394,1402,1410,1419,1428,1437,1446,1455,1464,1473,1482,1490,1498,1507,1516,1525,1534,1542,1551,1560,1569,1577,1585,1594,1603,1613,1622,1631,1640,1649,1658,1667,1676,1685,1694,1703,1712,1721,1730,1739,1748,1756,1765,1774,1783,1792,1801,1810,1819,1828,1837,1845,1853,1862,1871,1880,1888,1897,1905,1914,1922,1930,1939,1948,1957,1966,1975,1983,1991,2000,2008,2017,2026,2034,2043,2051,2060,2069,2078,2087,2095,2104,2112,2121,2129,2137,2145,2154,2162,2171,2180,2189,2197,2205,2214,2222,2230,2239,2247,2256,2264,2272,2280,2288,2297,2305,2314,2323,2331,2339,2347,2355,2363,2371,2379,2387,2395,2403,2411,2419,2427,2435,2443,2452,2461,2470,2479,2488,2496,2504,2512,2520,2528,2536,2544,2552,2560,2568,2576,2584,2592,2600,2609,2618,2626,2635,2644,2653,2663,2672,2681,2690,2699,2707,2716,2725,2734,2743,2752,2761,2770,2779,2788,2796,2804,2812,2821,2829,2838,2847,2855,2864,2873,2882,2891,2900,2909,2917,2926,2935,2944,2953,2961,2969,2977,2985,2993,3001,3009,3017,3025,3034,3043,3052,3060,3069,3078,3087,3096,3105,3114,3124,3133,3142,3151,3160,3169,3177,3185,3194,3203,3212,3222,3230,3239,3248,3257,3265,3273,3282,3291,3300,3309,3318,3327,3336,3345,3353,3362,3371,3380,3389,3398,3406,3415,3423,3431,3440,3449,3458,3468,3476,3486,3495,3504,3512,3520,3529,3537,3546,3554,3563,3571,3580,3589,3598,3606,3614,3622,3631,3640,3648,3656,3666,3674,3682,3690,3699,3707,3715,3724,3733,3742,3751,3759,3768,3777,3786,3794,3802,3810,3818,3826,3834,3843,3851,3859,3867,3875,3884,3893,3902,3910,3919,3928,3937,3946,3955,3963,3971,3979,3987,3995,4004,4012,4020,4028,4036,4045,4053,4062,4071,4080,4088,4096,4104,4113,4121,4130,4139,4147,4155,4164,4172,4181,4190,4199,4208,4216,4224,4232,4240,4249,4257,4266,4274,4283,4292,4301,4310,4319,4328,4337,4346,4355,4363,4371,4379,4388,4397,4406,4415,4425,4433,4441,4450,4458,4466,4475,4483,4492,4501,4510,4519,4528,4537,4545,4553,4561,4570,4579,4588,4596,4604,4613,4622,4631,4639,4648,4657,4665,4673,4681,4689,4697,4705,4714,4722,4731,4740,4749,4758,4767,4776,4787,4795,4803,4811,4820,4829,4837,4846,4854,4862,4870,4878,4887,4896,4905,4914,4923,4931,4939,4947,4956,4964,4973,4982,4990,4998,5006,5015,5023,5032,5041,5049,5057,5065,5073,5082,5091,5100,5109,5117,5125,5134,5143,5151,5159,5168,5177,5186,5194,5202,5210,5219,5227,5235,5243,5252,5260,5268,5276,5284,5293,5301,5309,5317,5325,5333,5341,5349,5358,5367,5375,5384,5393,5402,5411,5420,5428,5436,5444,5452,5461,5469,5478,5487,5496,5505,5514,5523,5531,5539,5548,5558,5566,5574,5582,5590,5598,5606,5614,5622,5630,5638,5646,5655,5663,5673,5682,5690,5698,5706,5714,5722,5731,5740,5748,5756,5764,5772,5780,5788,5796,5804,5812,5820,5828,5836,5844,5852,5860,5868,5876,5884,5892,5900,5909,5917,5925,5933,5941,5949,5957,5965,5973,5981,5989,5997,6005,6013,6021,6029,6037,6045,6053,6061,6069,6077,6085,6093,6101,6109,6117,6125,6133,6141,6149,6157,6165,6173,6182,6192,6201,6209,6217,6225,6234,6242,6251,6259,6268,6276,6285,6294,6302,6310,6318,6326,6335,6344,6352,6360,6370,6379,6389,6398,6407,6416,6425,6433,6441,6450,6459,6468,6477,6485,6493,6501,6509,6517,6525,6534,6543,6551,6559,6569,6577,6585,6593,6602,6610,6618,6627,6635,6644,6652,6660,6668,6676,6684,6693,6701,6710,6718,6727,6735,6744,6753,6762,6770,6779,6788,6797,6806,6815,6824,6833,6841,6850,6858,6866,6875,6884,6893,6902,6911,6921,6932,6940,6949,6957,6965,6974,6983,6992,7001,7010,7019,7028,7036,7045,7054,7062,7070,7078,7086,7094,7102,7111,7120,7129,7138,7147,7156,7164,7172,7181,7190,7198,7206,7215,7223,7232,7240,7248,7256,7264,7272,7280,7288,7296,7304,7312,7320,7328,7337,7345,7353,7361,7369,7377,7385,7394,7402,7411,7419,7427,7436,7445,7453,7461,7469,7478,7487,7497,7505,7514,7523,7531,7539,7547,7556,7564,7572,7581,7589,7597,7605,7613,7621,7629,7638,7647,7655,7664,7673,7682,7690,7698,7707,7715,7723,7731,7739,7748,7756,7764,7772,7780,7788,7796,7804,7812,7820,7829,7837,7846,7854,7862,7870,7878,7887,7895,7903,7911,7920,7929,7937,7945,7953,7962,7970,7980,7988,7997,8006,8014,8022,8031,8040,8048,8056,8062,8070,8079,8088,8096,8105,8113,8121,8129,8137,8145,8153,8161,8169,8177,8185,8193,8201,8209,8218,8226,8235,8243,8252,8260,8268,8276,8284,8292,8302,8310,8318,8327,8335,8343,8351,8360,8368,8376,8385,8393,8401,8410,8418,8427,8435,8443,8451,8460,8468,8476],{"id":555,"slug":556,"identity":557,"label":558,"aiRelevant":90,"provider":559,"advisoryCount":39,"licenseExpressions":560,"versions":562,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":565},"package:pypi:openai","openai-0dd26ac5","pypi:openai","OpenAI SDK",{"id":545,"label":546},[561],"Apache-2.0",[563],"2.54.0",2,[103,56],{"id":567,"slug":568,"identity":569,"label":570,"aiRelevant":47,"provider":83,"advisoryCount":571,"licenseExpressions":572,"versions":575,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":577},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",61,[573,574],"HPND","MIT-CMU",[576],"13.0.0",[103,56],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":47,"provider":83,"advisoryCount":583,"licenseExpressions":584,"versions":586,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":588},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",41,[561,585],"Apache-2.0 AND MIT",[587],"3.14.5",[103,56],{"id":590,"slug":591,"identity":592,"label":593,"aiRelevant":47,"provider":83,"advisoryCount":594,"licenseExpressions":595,"versions":597,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":599},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",37,[596],"BSD-3-Clause",[598],"3.2.1",[56],{"id":601,"slug":602,"identity":603,"label":604,"aiRelevant":47,"provider":83,"advisoryCount":605,"licenseExpressions":606,"versions":608,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":610},"package:npm:axios","axios-9a6bcef0","npm:axios","axios",36,[607],"MIT",[609],"1.20.0",[94,103],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":47,"provider":83,"advisoryCount":35,"licenseExpressions":616,"versions":617,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":619},"package:npm:undici","undici-9dcd4f20","npm:undici","undici",[607],[618],"7.29.1",[94,103],{"id":621,"slug":622,"identity":623,"label":624,"aiRelevant":47,"provider":83,"advisoryCount":625,"licenseExpressions":626,"versions":627,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":629},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",22,[607],[628],"2.15.1",[103,56],{"id":631,"slug":632,"identity":633,"label":634,"aiRelevant":47,"provider":83,"advisoryCount":635,"licenseExpressions":636,"versions":637,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":639},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",20,[607],[638],"21.14.13",[56],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":47,"provider":83,"advisoryCount":42,"licenseExpressions":645,"versions":646,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":648},"package:npm:vite","vite-d48e852f","npm:vite","vite",[607],[647],"8.3.5",[94,103],{"id":650,"slug":651,"identity":652,"label":653,"aiRelevant":47,"provider":83,"advisoryCount":654,"licenseExpressions":655,"versions":657,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":659},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",11,[607,656],"Unlicense",[658],"4.2.4",[56],{"id":661,"slug":662,"identity":663,"label":664,"aiRelevant":47,"provider":83,"advisoryCount":665,"licenseExpressions":666,"versions":667,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":669},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[607],[668],"2.8.0",[103,56],{"id":671,"slug":672,"identity":673,"label":674,"aiRelevant":47,"provider":83,"advisoryCount":675,"licenseExpressions":676,"versions":678,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":680},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[677],"Apache-2.0 OR BSD-3-Clause",[679],"50.0.2",[103,56],{"id":682,"slug":683,"identity":684,"label":685,"aiRelevant":47,"provider":83,"advisoryCount":686,"licenseExpressions":687,"versions":688,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":690},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[561],[689],"0.0.32",[103,56],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":47,"provider":83,"advisoryCount":686,"licenseExpressions":696,"versions":697,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":699},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[596],[698],"1.9.0",[103,56],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":47,"provider":83,"advisoryCount":705,"licenseExpressions":706,"versions":707,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":709},"package:npm:brace-expansion","brace-expansion-b42dfb29","npm:brace-expansion","brace-expansion",7,[607],[708],"5.0.12",[94,103],{"id":711,"slug":712,"identity":713,"label":714,"aiRelevant":47,"provider":83,"advisoryCount":705,"licenseExpressions":715,"versions":716,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":718},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[607],[717],"1.30.0",[103,56],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":47,"provider":83,"advisoryCount":724,"licenseExpressions":725,"versions":726,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":728},"package:npm:js-yaml","js-yaml-a53d8d92","npm:js-yaml","js-yaml",5,[607],[727],"4.3.2",[94,103],{"id":730,"slug":731,"identity":732,"label":733,"aiRelevant":47,"provider":83,"advisoryCount":724,"licenseExpressions":734,"versions":735,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":737},"package:npm:qs","qs-d2ee785a","npm:qs","qs",[596],[736],"6.16.0",[94,103],{"id":739,"slug":740,"identity":741,"label":742,"aiRelevant":47,"provider":83,"advisoryCount":724,"licenseExpressions":743,"versions":744,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":746},"package:npm:seroval","seroval-dd986b83","npm:seroval","seroval",[607],[745],"1.6.7",[94,103],{"id":748,"slug":749,"identity":750,"label":751,"aiRelevant":47,"provider":83,"advisoryCount":752,"licenseExpressions":753,"versions":754,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":756},"package:npm:fast-uri","fast-uri-130fc36a","npm:fast-uri","fast-uri",4,[596],[755],"3.1.8",[94,103],{"id":758,"slug":759,"identity":760,"label":761,"aiRelevant":47,"provider":83,"advisoryCount":752,"licenseExpressions":762,"versions":764,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":766},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[596,763],"non-standard",[765],"3.1.6",[56],{"id":768,"slug":769,"identity":770,"label":771,"aiRelevant":47,"provider":83,"advisoryCount":752,"licenseExpressions":772,"versions":775,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":777},"package:npm:minimatch","minimatch-91a6ff84","npm:minimatch","minimatch",[773,774],"BlueOak-1.0.0","ISC",[776],"10.2.6",[94,103],{"id":779,"slug":780,"identity":781,"label":782,"aiRelevant":47,"provider":83,"advisoryCount":752,"licenseExpressions":783,"versions":784,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":786},"package:npm:postcss","postcss-6e1650ce","npm:postcss","postcss",[607],[785],"8.5.31",[94,103],{"id":788,"slug":789,"identity":790,"label":791,"aiRelevant":47,"provider":83,"advisoryCount":752,"licenseExpressions":792,"versions":793,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":795},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[607],[794],"3.0.3",[56],{"id":797,"slug":798,"identity":799,"label":800,"aiRelevant":47,"provider":83,"advisoryCount":752,"licenseExpressions":801,"versions":802,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":804},"package:pypi:weasyprint","weasyprint-637c63f5","pypi:weasyprint","weasyprint",[763],[803],"70.0",[56],{"id":806,"slug":807,"identity":808,"label":809,"aiRelevant":47,"provider":83,"advisoryCount":810,"licenseExpressions":811,"versions":812,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":814},"package:pypi:mako","mako-ed406373","pypi:mako","mako",3,[607],[813],"1.4.3",[103,56],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":47,"provider":83,"advisoryCount":810,"licenseExpressions":820,"versions":821,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":823},"package:npm:nanoid","nanoid-93076b34","npm:nanoid","nanoid",[607],[822],"3.3.20",[94,103],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":47,"provider":83,"advisoryCount":810,"licenseExpressions":829,"versions":830,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":832},"package:pypi:pymdown-extensions","pymdown-extensions-74c5b54c","pypi:pymdown-extensions","pymdown-extensions",[607],[831],"12.3",[56],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":47,"provider":83,"advisoryCount":810,"licenseExpressions":838,"versions":839,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":841},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[561],[840],"2.34.2",[103,56],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":847,"versions":848,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":850},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[607],[849],"4.15.1",[103,56],{"id":852,"slug":853,"identity":854,"label":855,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":856,"versions":857,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":859},"package:npm:body-parser","body-parser-5bf85abf","npm:body-parser","body-parser",[607],[858],"2.3.0",[94,103],{"id":861,"slug":862,"identity":863,"label":864,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":865,"versions":866,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":868},"package:pypi:brotli","brotli-9f215eb0","pypi:brotli","brotli",[607],[867],"1.2.1",[56],{"id":870,"slug":871,"identity":872,"label":873,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":874,"versions":875,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":877},"package:npm:browserslist","browserslist-09335db7","npm:browserslist","browserslist",[607],[876],"4.29.0",[94,103],{"id":879,"slug":880,"identity":881,"label":882,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":883,"versions":885,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":887},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[884],"MPL-2.0",[886],"2026.10.19",[103,56],{"id":889,"slug":890,"identity":891,"label":892,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":893,"versions":894,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":896},"package:npm:flatted","flatted-bf8d419e","npm:flatted","flatted",[774],[895],"3.4.4",[94],{"id":898,"slug":899,"identity":900,"label":901,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":902,"versions":903,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":905},"package:npm:follow-redirects","follow-redirects-d49b3d60","npm:follow-redirects","follow-redirects",[607],[904],"1.16.1",[94,103],{"id":907,"slug":908,"identity":909,"label":910,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":911,"versions":912,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":914},"package:pypi:h2","h2-d3161986","pypi:h2","h2",[607],[913],"4.4.1",[103,56],{"id":916,"slug":917,"identity":918,"label":919,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":920,"versions":921,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":924},"package:npm:picomatch","picomatch-a3008e9b","npm:picomatch","picomatch",[607],[922,923],"2.3.2","4.0.7",[94,103],{"id":926,"slug":927,"identity":928,"label":929,"aiRelevant":47,"provider":83,"advisoryCount":564,"licenseExpressions":930,"versions":931,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":933},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[596],[932],"6.33.6",[103,56],{"id":935,"slug":936,"identity":937,"label":938,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":939,"versions":940,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":942},"package:npm:@babel\u002Fcore","babel-core-632b3ee7","npm:@babel\u002Fcore","@babel\u002Fcore",[607],[941],"7.29.7",[94,103],{"id":944,"slug":945,"identity":946,"label":947,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":948,"versions":949,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":951},"package:npm:@hono\u002Fnode-server","hono-node-server-b6d77065","npm:@hono\u002Fnode-server","@hono\u002Fnode-server",[607],[950],"1.19.17",[94,103],{"id":953,"slug":954,"identity":955,"label":956,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":957,"versions":958,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":960},"package:npm:@humanfs\u002Fnode","humanfs-node-63ca4f78","npm:@humanfs\u002Fnode","@humanfs\u002Fnode",[561],[959],"0.16.8",[94],{"id":962,"slug":963,"identity":964,"label":965,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":966,"versions":967,"dossier":47,"occurrenceCount":810,"directOccurrenceCount":39,"evidenceFiles":970},"package:npm:ajv","ajv-dd73454f","npm:ajv","ajv",[607],[968,969],"6.15.0","8.20.0",[94,103],{"id":972,"slug":973,"identity":974,"label":975,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":976,"versions":977,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":979},"package:pypi:azure-core","azure-core-999f329c","pypi:azure-core","azure-core",[607],[978],"1.41.0",[103,56],{"id":981,"slug":982,"identity":983,"label":984,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":985,"versions":986,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":988},"package:pypi:brotlicffi","brotlicffi-2b85a746","pypi:brotlicffi","brotlicffi",[607],[987],"1.2.1.0",[56],{"id":990,"slug":991,"identity":992,"label":993,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":994,"versions":995,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":997},"package:npm:deepmerge","deepmerge-33ca4e59","npm:deepmerge","deepmerge",[607],[996],"4.3.1",[94,103],{"id":999,"slug":1000,"identity":1001,"label":1002,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1003,"versions":1004,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1006},"package:npm:diff","diff-c3901306","npm:diff","diff",[596],[1005],"8.0.4",[94,103],{"id":1008,"slug":1009,"identity":1010,"label":1011,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1012,"versions":1013,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1015},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[607],[1014],"4.67.0",[56],{"id":1017,"slug":1018,"identity":1019,"label":1020,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1021,"versions":1022,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1024},"package:npm:form-data","form-data-19f364b7","npm:form-data","form-data",[607],[1023],"4.0.6",[94,103],{"id":1026,"slug":1027,"identity":1028,"label":1029,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1030,"versions":1031,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1033},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[607],[1032],"0.16.0",[103,56],{"id":1035,"slug":1036,"identity":1037,"label":1038,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1039,"versions":1040,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1042},"package:pypi:hpack","hpack-ae99dcfa","pypi:hpack","hpack",[607],[1041],"4.2.0",[103,56],{"id":1044,"slug":1045,"identity":1046,"label":1047,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1048,"versions":1049,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1051},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[596,763],[1050],"3.20",[103,56],{"id":1053,"slug":1054,"identity":1055,"label":1056,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1057,"versions":1058,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1060},"package:npm:ip-address","ip-address-06addbf3","npm:ip-address","ip-address",[607],[1059],"10.7.2",[94,103],{"id":1062,"slug":1063,"identity":1064,"label":1065,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1066,"versions":1067,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1069},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[596],[1068],"3.11.1",[103,56],{"id":1071,"slug":1072,"identity":1073,"label":1074,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1075,"versions":1076,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1078},"package:npm:mdast-util-to-hast","mdast-util-to-hast-18f18478","npm:mdast-util-to-hast","mdast-util-to-hast",[607],[1077],"13.2.1",[94,103],{"id":1080,"slug":1081,"identity":1082,"label":1083,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1084,"versions":1085,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1087},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[561],[1086],"7.1.0",[103,56],{"id":1089,"slug":1090,"identity":1091,"label":1092,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1093,"versions":1094,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1096},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[561],[1095],"1.45.1",[103,56],{"id":1098,"slug":1099,"identity":1100,"label":1101,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1102,"versions":1103,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1105},"package:npm:path-to-regexp","path-to-regexp-7c531171","npm:path-to-regexp","path-to-regexp",[607],[1104],"8.4.2",[94,103],{"id":1107,"slug":1108,"identity":1109,"label":1110,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1111,"versions":1112,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1114},"package:npm:proxy-addr","proxy-addr-70423975","npm:proxy-addr","proxy-addr",[607],[1113],"2.0.8",[94,103],{"id":1116,"slug":1117,"identity":1118,"label":1119,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1120,"versions":1121,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1123},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[607],[1122],"2.16.0",[103,56],{"id":1125,"slug":1126,"identity":1127,"label":1128,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1129,"versions":1131,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1133},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[1130],"BSD-2-Clause",[1132],"2.21.0",[56],{"id":1135,"slug":1136,"identity":1137,"label":1138,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1139,"versions":1140,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1142},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[607],[1141],"9.1.1",[56],{"id":1144,"slug":1145,"identity":1146,"label":1147,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1148,"versions":1149,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1151},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[596],[1150],"1.2.4",[103,56],{"id":1153,"slug":1154,"identity":1155,"label":1156,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1157,"versions":1158,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1160},"package:npm:source-map-js","source-map-js-41a605c1","npm:source-map-js","source-map-js",[596],[1159],"1.2.2",[94,103],{"id":1162,"slug":1163,"identity":1164,"label":1165,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1166,"versions":1168,"dossier":90,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1170},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[1167],"MIT AND MPL-2.0",[1169],"4.70.1",[103,56],{"id":1172,"slug":1173,"identity":1174,"label":1175,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1176,"versions":1177,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":1180},"package:npm:zod","zod-5dbeeafb","npm:zod","zod",[607],[1178,1179],"3.25.76","4.6.5",[94,103],{"id":1182,"slug":1183,"identity":1184,"label":1185,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1186,"versions":1187,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1188},"package:npm:@babel\u002Fcode-frame","babel-code-frame-d957c518","npm:@babel\u002Fcode-frame","@babel\u002Fcode-frame",[607],[941],[94,103],{"id":1190,"slug":1191,"identity":1192,"label":1193,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1194,"versions":1195,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1196},"package:npm:@babel\u002Fcompat-data","babel-compat-data-a62084ad","npm:@babel\u002Fcompat-data","@babel\u002Fcompat-data",[607],[941],[94,103],{"id":1198,"slug":1199,"identity":1200,"label":1201,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1202,"versions":1203,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1205},"package:npm:@babel\u002Fgenerator","babel-generator-ccac1203","npm:@babel\u002Fgenerator","@babel\u002Fgenerator",[607],[1204],"7.29.8",[94,103],{"id":1207,"slug":1208,"identity":1209,"label":1210,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1211,"versions":1212,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1214},"package:npm:@babel\u002Fhelper-annotate-as-pure","babel-helper-annotate-as-pure-87c36399","npm:@babel\u002Fhelper-annotate-as-pure","@babel\u002Fhelper-annotate-as-pure",[607],[1213],"7.27.3",[94,103],{"id":1216,"slug":1217,"identity":1218,"label":1219,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1220,"versions":1221,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1222},"package:npm:@babel\u002Fhelper-compilation-targets","babel-helper-compilation-targets-87d93937","npm:@babel\u002Fhelper-compilation-targets","@babel\u002Fhelper-compilation-targets",[607],[941],[94,103],{"id":1224,"slug":1225,"identity":1226,"label":1227,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1228,"versions":1229,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1231},"package:npm:@babel\u002Fhelper-create-class-features-plugin","babel-helper-create-class-features-plugin-77ddeb9a","npm:@babel\u002Fhelper-create-class-features-plugin","@babel\u002Fhelper-create-class-features-plugin",[607],[1230],"7.28.6",[94,103],{"id":1233,"slug":1234,"identity":1235,"label":1236,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1237,"versions":1238,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1239},"package:npm:@babel\u002Fhelper-globals","babel-helper-globals-0e9ab9db","npm:@babel\u002Fhelper-globals","@babel\u002Fhelper-globals",[607],[941],[94,103],{"id":1241,"slug":1242,"identity":1243,"label":1244,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1245,"versions":1246,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1248},"package:npm:@babel\u002Fhelper-member-expression-to-functions","babel-helper-member-expression-to-functions-334410bf","npm:@babel\u002Fhelper-member-expression-to-functions","@babel\u002Fhelper-member-expression-to-functions",[607],[1247],"7.28.5",[94,103],{"id":1250,"slug":1251,"identity":1252,"label":1253,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1254,"versions":1255,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1256},"package:npm:@babel\u002Fhelper-module-imports","babel-helper-module-imports-dbfc0776","npm:@babel\u002Fhelper-module-imports","@babel\u002Fhelper-module-imports",[607],[941],[94,103],{"id":1258,"slug":1259,"identity":1260,"label":1261,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1262,"versions":1263,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1264},"package:npm:@babel\u002Fhelper-module-transforms","babel-helper-module-transforms-fea089b3","npm:@babel\u002Fhelper-module-transforms","@babel\u002Fhelper-module-transforms",[607],[941],[94,103],{"id":1266,"slug":1267,"identity":1268,"label":1269,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1270,"versions":1271,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1273},"package:npm:@babel\u002Fhelper-optimise-call-expression","babel-helper-optimise-call-expression-e02554f6","npm:@babel\u002Fhelper-optimise-call-expression","@babel\u002Fhelper-optimise-call-expression",[607],[1272],"7.27.1",[94,103],{"id":1275,"slug":1276,"identity":1277,"label":1278,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1279,"versions":1280,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1281},"package:npm:@babel\u002Fhelper-plugin-utils","babel-helper-plugin-utils-a27c98fa","npm:@babel\u002Fhelper-plugin-utils","@babel\u002Fhelper-plugin-utils",[607],[1230],[94,103],{"id":1283,"slug":1284,"identity":1285,"label":1286,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1287,"versions":1288,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1289},"package:npm:@babel\u002Fhelper-replace-supers","babel-helper-replace-supers-aaf10973","npm:@babel\u002Fhelper-replace-supers","@babel\u002Fhelper-replace-supers",[607],[1230],[94,103],{"id":1291,"slug":1292,"identity":1293,"label":1294,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1295,"versions":1296,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1297},"package:npm:@babel\u002Fhelper-skip-transparent-expression-wrappers","babel-helper-skip-transparent-expression-wrappers-71673859","npm:@babel\u002Fhelper-skip-transparent-expression-wrappers","@babel\u002Fhelper-skip-transparent-expression-wrappers",[607],[1272],[94,103],{"id":1299,"slug":1300,"identity":1301,"label":1302,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1303,"versions":1304,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1305},"package:npm:@babel\u002Fhelper-string-parser","babel-helper-string-parser-50d29bcc","npm:@babel\u002Fhelper-string-parser","@babel\u002Fhelper-string-parser",[607],[941],[94,103],{"id":1307,"slug":1308,"identity":1309,"label":1310,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1311,"versions":1312,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1313},"package:npm:@babel\u002Fhelper-validator-identifier","babel-helper-validator-identifier-b255380b","npm:@babel\u002Fhelper-validator-identifier","@babel\u002Fhelper-validator-identifier",[607],[941],[94,103],{"id":1315,"slug":1316,"identity":1317,"label":1318,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1319,"versions":1320,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1321},"package:npm:@babel\u002Fhelper-validator-option","babel-helper-validator-option-ff70c556","npm:@babel\u002Fhelper-validator-option","@babel\u002Fhelper-validator-option",[607],[941],[94,103],{"id":1323,"slug":1324,"identity":1325,"label":1326,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1327,"versions":1328,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1329},"package:npm:@babel\u002Fhelpers","babel-helpers-14903e70","npm:@babel\u002Fhelpers","@babel\u002Fhelpers",[607],[941],[94,103],{"id":1331,"slug":1332,"identity":1333,"label":1334,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1335,"versions":1336,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1337},"package:npm:@babel\u002Fparser","babel-parser-90a7ae44","npm:@babel\u002Fparser","@babel\u002Fparser",[607],[1204],[94,103],{"id":1339,"slug":1340,"identity":1341,"label":1342,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1343,"versions":1344,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1345},"package:npm:@babel\u002Fplugin-syntax-jsx","babel-plugin-syntax-jsx-1e3853b7","npm:@babel\u002Fplugin-syntax-jsx","@babel\u002Fplugin-syntax-jsx",[607],[1230],[94,103],{"id":1347,"slug":1348,"identity":1349,"label":1350,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1351,"versions":1352,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1353},"package:npm:@babel\u002Fplugin-syntax-typescript","babel-plugin-syntax-typescript-86970e37","npm:@babel\u002Fplugin-syntax-typescript","@babel\u002Fplugin-syntax-typescript",[607],[1230],[94,103],{"id":1355,"slug":1356,"identity":1357,"label":1358,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1359,"versions":1360,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1361},"package:npm:@babel\u002Fplugin-transform-modules-commonjs","babel-plugin-transform-modules-commonjs-d191b1c2","npm:@babel\u002Fplugin-transform-modules-commonjs","@babel\u002Fplugin-transform-modules-commonjs",[607],[1230],[94,103],{"id":1363,"slug":1364,"identity":1365,"label":1366,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1367,"versions":1368,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1369},"package:npm:@babel\u002Fplugin-transform-typescript","babel-plugin-transform-typescript-ebf16b34","npm:@babel\u002Fplugin-transform-typescript","@babel\u002Fplugin-transform-typescript",[607],[1230],[94,103],{"id":1371,"slug":1372,"identity":1373,"label":1374,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1375,"versions":1376,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1377},"package:npm:@babel\u002Fpreset-typescript","babel-preset-typescript-f4f3124b","npm:@babel\u002Fpreset-typescript","@babel\u002Fpreset-typescript",[607],[1247],[94,103],{"id":1379,"slug":1380,"identity":1381,"label":1382,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1383,"versions":1384,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1385},"package:npm:@babel\u002Fruntime","babel-runtime-2e1b7c1b","npm:@babel\u002Fruntime","@babel\u002Fruntime",[607],[941],[94,103],{"id":1387,"slug":1388,"identity":1389,"label":1390,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1391,"versions":1392,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1393},"package:npm:@babel\u002Ftemplate","babel-template-1de2b79c","npm:@babel\u002Ftemplate","@babel\u002Ftemplate",[607],[941],[94,103],{"id":1395,"slug":1396,"identity":1397,"label":1398,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1399,"versions":1400,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1401},"package:npm:@babel\u002Ftraverse","babel-traverse-7876b2c3","npm:@babel\u002Ftraverse","@babel\u002Ftraverse",[607],[1204],[94,103],{"id":1403,"slug":1404,"identity":1405,"label":1406,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1407,"versions":1408,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1409},"package:npm:@babel\u002Ftypes","babel-types-7b046801","npm:@babel\u002Ftypes","@babel\u002Ftypes",[607],[1204],[94,103],{"id":1411,"slug":1412,"identity":1413,"label":1414,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1415,"versions":1416,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":1418},"package:npm:@base-ui\u002Freact","base-ui-react-07009e5c","npm:@base-ui\u002Freact","@base-ui\u002Freact",[607],[1417],"1.8.0",[94,103],{"id":1420,"slug":1421,"identity":1422,"label":1423,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1424,"versions":1425,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1427},"package:npm:@base-ui\u002Futils","base-ui-utils-3afb3ca8","npm:@base-ui\u002Futils","@base-ui\u002Futils",[607],[1426],"0.4.0",[94,103],{"id":1429,"slug":1430,"identity":1431,"label":1432,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1433,"versions":1434,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1436},"package:npm:@cacheable\u002Fmemory","cacheable-memory-e2aaab13","npm:@cacheable\u002Fmemory","@cacheable\u002Fmemory",[607],[1435],"2.2.0",[94],{"id":1438,"slug":1439,"identity":1440,"label":1441,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1442,"versions":1443,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1445},"package:npm:@cacheable\u002Futils","cacheable-utils-6145ea41","npm:@cacheable\u002Futils","@cacheable\u002Futils",[607],[1444],"2.5.0",[94],{"id":1447,"slug":1448,"identity":1449,"label":1450,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1451,"versions":1452,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1454},"package:npm:@date-fns\u002Ftz","date-fns-tz-f32b7dd3","npm:@date-fns\u002Ftz","@date-fns\u002Ftz",[607],[1453],"1.4.1",[94,103],{"id":1456,"slug":1457,"identity":1458,"label":1459,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1460,"versions":1461,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1463},"package:npm:@dotenvx\u002Fdotenvx","dotenvx-dotenvx-447509bb","npm:@dotenvx\u002Fdotenvx","@dotenvx\u002Fdotenvx",[596],[1462],"1.64.0",[94,103],{"id":1465,"slug":1466,"identity":1467,"label":1468,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1469,"versions":1470,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1472},"package:npm:@ecies\u002Fciphers","ecies-ciphers-e7b00c68","npm:@ecies\u002Fciphers","@ecies\u002Fciphers",[607],[1471],"0.2.6",[94,103],{"id":1474,"slug":1475,"identity":1476,"label":1477,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1478,"versions":1479,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1481},"package:npm:@emnapi\u002Fcore","emnapi-core-3406767f","npm:@emnapi\u002Fcore","@emnapi\u002Fcore",[607],[1480],"1.11.1",[103],{"id":1483,"slug":1484,"identity":1485,"label":1486,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1487,"versions":1488,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1489},"package:npm:@emnapi\u002Fruntime","emnapi-runtime-9e20d99c","npm:@emnapi\u002Fruntime","@emnapi\u002Fruntime",[607],[1480],[103],{"id":1491,"slug":1492,"identity":1493,"label":1494,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1495,"versions":1496,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1497},"package:npm:@emnapi\u002Fwasi-threads","emnapi-wasi-threads-d3f1c692","npm:@emnapi\u002Fwasi-threads","@emnapi\u002Fwasi-threads",[607],[1159],[103],{"id":1499,"slug":1500,"identity":1501,"label":1502,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1503,"versions":1504,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1506},"package:npm:@eslint-community\u002Feslint-utils","eslint-community-eslint-utils-c7538f47","npm:@eslint-community\u002Feslint-utils","@eslint-community\u002Feslint-utils",[607],[1505],"4.9.1",[94],{"id":1508,"slug":1509,"identity":1510,"label":1511,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1512,"versions":1513,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1515},"package:npm:@eslint-community\u002Fregexpp","eslint-community-regexpp-df306a50","npm:@eslint-community\u002Fregexpp","@eslint-community\u002Fregexpp",[607],[1514],"4.12.2",[94],{"id":1517,"slug":1518,"identity":1519,"label":1520,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1521,"versions":1522,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1524},"package:npm:@eslint\u002Fconfig-array","eslint-config-array-64c9736b","npm:@eslint\u002Fconfig-array","@eslint\u002Fconfig-array",[561],[1523],"0.23.5",[94],{"id":1526,"slug":1527,"identity":1528,"label":1529,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1530,"versions":1531,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1533},"package:npm:@eslint\u002Fconfig-helpers","eslint-config-helpers-a4919ae1","npm:@eslint\u002Fconfig-helpers","@eslint\u002Fconfig-helpers",[561],[1532],"0.7.0",[94],{"id":1535,"slug":1536,"identity":1537,"label":1538,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1539,"versions":1540,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1541},"package:npm:@eslint\u002Fcore","eslint-core-78aa818b","npm:@eslint\u002Fcore","@eslint\u002Fcore",[561],[867],[94],{"id":1543,"slug":1544,"identity":1545,"label":1546,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1547,"versions":1548,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1550},"package:npm:@eslint\u002Fjs","eslint-js-b7322adc","npm:@eslint\u002Fjs","@eslint\u002Fjs",[607],[1549],"10.0.1",[94],{"id":1552,"slug":1553,"identity":1554,"label":1555,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1556,"versions":1557,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1559},"package:npm:@eslint\u002Fobject-schema","eslint-object-schema-c1bb953b","npm:@eslint\u002Fobject-schema","@eslint\u002Fobject-schema",[561],[1558],"3.0.5",[94],{"id":1561,"slug":1562,"identity":1563,"label":1564,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1565,"versions":1566,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1568},"package:npm:@eslint\u002Fplugin-kit","eslint-plugin-kit-be347b9f","npm:@eslint\u002Fplugin-kit","@eslint\u002Fplugin-kit",[561],[1567],"0.7.3",[94],{"id":1570,"slug":1571,"identity":1572,"label":1573,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1574,"versions":1575,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1576},"package:npm:@floating-ui\u002Fcore","floating-ui-core-226c6ce1","npm:@floating-ui\u002Fcore","@floating-ui\u002Fcore",[607],[1417],[94,103],{"id":1578,"slug":1579,"identity":1580,"label":1581,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1582,"versions":1583,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1584},"package:npm:@floating-ui\u002Fdom","floating-ui-dom-92a0b816","npm:@floating-ui\u002Fdom","@floating-ui\u002Fdom",[607],[1417],[94,103],{"id":1586,"slug":1587,"identity":1588,"label":1589,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1590,"versions":1591,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1593},"package:npm:@floating-ui\u002Freact-dom","floating-ui-react-dom-41c4c55a","npm:@floating-ui\u002Freact-dom","@floating-ui\u002Freact-dom",[607],[1592],"2.1.9",[94,103],{"id":1595,"slug":1596,"identity":1597,"label":1598,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1599,"versions":1600,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1602},"package:npm:@floating-ui\u002Futils","floating-ui-utils-a5f87317","npm:@floating-ui\u002Futils","@floating-ui\u002Futils",[607],[1601],"0.2.12",[94,103],{"id":1604,"slug":1605,"identity":1606,"label":1607,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1608,"versions":1610,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":1612},"package:npm:@fontsource-variable\u002Fgeist","fontsource-variable-geist-e092d3ef","npm:@fontsource-variable\u002Fgeist","@fontsource-variable\u002Fgeist",[1609],"OFL-1.1",[1611],"5.3.0",[94,103],{"id":1614,"slug":1615,"identity":1616,"label":1617,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1618,"versions":1619,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1621},"package:npm:@humanfs\u002Fcore","humanfs-core-ae1d1f57","npm:@humanfs\u002Fcore","@humanfs\u002Fcore",[561],[1620],"0.19.2",[94],{"id":1623,"slug":1624,"identity":1625,"label":1626,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1627,"versions":1628,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1630},"package:npm:@humanfs\u002Ftypes","humanfs-types-de42ddb8","npm:@humanfs\u002Ftypes","@humanfs\u002Ftypes",[561],[1629],"0.15.0",[94],{"id":1632,"slug":1633,"identity":1634,"label":1635,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1636,"versions":1637,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1639},"package:npm:@humanwhocodes\u002Fmodule-importer","humanwhocodes-module-importer-2bdf1883","npm:@humanwhocodes\u002Fmodule-importer","@humanwhocodes\u002Fmodule-importer",[561],[1638],"1.0.1",[94],{"id":1641,"slug":1642,"identity":1643,"label":1644,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1645,"versions":1646,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1648},"package:npm:@humanwhocodes\u002Fretry","humanwhocodes-retry-179e58ff","npm:@humanwhocodes\u002Fretry","@humanwhocodes\u002Fretry",[561],[1647],"0.4.3",[94],{"id":1650,"slug":1651,"identity":1652,"label":1653,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1654,"versions":1655,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1657},"package:npm:@jridgewell\u002Fgen-mapping","jridgewell-gen-mapping-c100bb57","npm:@jridgewell\u002Fgen-mapping","@jridgewell\u002Fgen-mapping",[607],[1656],"0.3.13",[94,103],{"id":1659,"slug":1660,"identity":1661,"label":1662,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1663,"versions":1664,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1666},"package:npm:@jridgewell\u002Fremapping","jridgewell-remapping-a8cddd40","npm:@jridgewell\u002Fremapping","@jridgewell\u002Fremapping",[607],[1665],"2.3.5",[94,103],{"id":1668,"slug":1669,"identity":1670,"label":1671,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1672,"versions":1673,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1675},"package:npm:@jridgewell\u002Fresolve-uri","jridgewell-resolve-uri-f80859d6","npm:@jridgewell\u002Fresolve-uri","@jridgewell\u002Fresolve-uri",[607],[1674],"3.1.2",[94,103],{"id":1677,"slug":1678,"identity":1679,"label":1680,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1681,"versions":1682,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1684},"package:npm:@jridgewell\u002Fsourcemap-codec","jridgewell-sourcemap-codec-1b6bbd68","npm:@jridgewell\u002Fsourcemap-codec","@jridgewell\u002Fsourcemap-codec",[607],[1683],"1.5.5",[94,103],{"id":1686,"slug":1687,"identity":1688,"label":1689,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1690,"versions":1691,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1693},"package:npm:@jridgewell\u002Ftrace-mapping","jridgewell-trace-mapping-c6f15179","npm:@jridgewell\u002Ftrace-mapping","@jridgewell\u002Ftrace-mapping",[607],[1692],"0.3.31",[94,103],{"id":1695,"slug":1696,"identity":1697,"label":1698,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1699,"versions":1700,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1702},"package:npm:@keyv\u002Fbigmap","keyv-bigmap-76fbc824","npm:@keyv\u002Fbigmap","@keyv\u002Fbigmap",[607],[1701],"1.3.1",[94],{"id":1704,"slug":1705,"identity":1706,"label":1707,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1708,"versions":1709,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1711},"package:npm:@keyv\u002Fserialize","keyv-serialize-d7a49bfb","npm:@keyv\u002Fserialize","@keyv\u002Fserialize",[607],[1710],"1.1.1",[94],{"id":1713,"slug":1714,"identity":1715,"label":1716,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1717,"versions":1718,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1720},"package:npm:@modelcontextprotocol\u002Fsdk","modelcontextprotocol-sdk-252ea8a6","npm:@modelcontextprotocol\u002Fsdk","@modelcontextprotocol\u002Fsdk",[607],[1719],"1.32.1",[94,103],{"id":1722,"slug":1723,"identity":1724,"label":1725,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1726,"versions":1727,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1729},"package:npm:@napi-rs\u002Fwasm-runtime","napi-rs-wasm-runtime-38e2befb","npm:@napi-rs\u002Fwasm-runtime","@napi-rs\u002Fwasm-runtime",[607],[1728],"1.1.4",[103],{"id":1731,"slug":1732,"identity":1733,"label":1734,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1735,"versions":1736,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1738},"package:npm:@noble\u002Fciphers","noble-ciphers-c180756e","npm:@noble\u002Fciphers","@noble\u002Fciphers",[607],[1737],"1.3.0",[94,103],{"id":1740,"slug":1741,"identity":1742,"label":1743,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1744,"versions":1745,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1747},"package:npm:@noble\u002Fcurves","noble-curves-4ef91d43","npm:@noble\u002Fcurves","@noble\u002Fcurves",[607],[1746],"1.9.7",[94,103],{"id":1749,"slug":1750,"identity":1751,"label":1752,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1753,"versions":1754,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1755},"package:npm:@noble\u002Fhashes","noble-hashes-aeabb965","npm:@noble\u002Fhashes","@noble\u002Fhashes",[607],[1417],[94,103],{"id":1757,"slug":1758,"identity":1759,"label":1760,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1761,"versions":1762,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1764},"package:npm:@nodelib\u002Ffs.scandir","nodelib-fs-scandir-1c10ead4","npm:@nodelib\u002Ffs.scandir","@nodelib\u002Ffs.scandir",[607],[1763],"2.1.5",[94,103],{"id":1766,"slug":1767,"identity":1768,"label":1769,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1770,"versions":1771,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1773},"package:npm:@nodelib\u002Ffs.stat","nodelib-fs-stat-b7824bf1","npm:@nodelib\u002Ffs.stat","@nodelib\u002Ffs.stat",[607],[1772],"2.0.5",[94,103],{"id":1775,"slug":1776,"identity":1777,"label":1778,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1779,"versions":1780,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1782},"package:npm:@nodelib\u002Ffs.walk","nodelib-fs-walk-731ca7cb","npm:@nodelib\u002Ffs.walk","@nodelib\u002Ffs.walk",[607],[1781],"1.2.8",[94,103],{"id":1784,"slug":1785,"identity":1786,"label":1787,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1788,"versions":1789,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1791},"package:npm:@oxc-project\u002Ftypes","oxc-project-types-24a167b3","npm:@oxc-project\u002Ftypes","@oxc-project\u002Ftypes",[607],[1790],"0.154.0",[94,103],{"id":1793,"slug":1794,"identity":1795,"label":1796,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1797,"versions":1798,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1800},"package:npm:@radix-ui\u002Fnumber","radix-ui-number-581a3ecf","npm:@radix-ui\u002Fnumber","@radix-ui\u002Fnumber",[607],[1799],"1.1.3",[94,103],{"id":1802,"slug":1803,"identity":1804,"label":1805,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1806,"versions":1807,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1809},"package:npm:@radix-ui\u002Fprimitive","radix-ui-primitive-89244aca","npm:@radix-ui\u002Fprimitive","@radix-ui\u002Fprimitive",[607],[1808],"1.1.7",[94,103],{"id":1811,"slug":1812,"identity":1813,"label":1814,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1815,"versions":1816,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1818},"package:npm:@radix-ui\u002Freact-accessible-icon","radix-ui-react-accessible-icon-a630715c","npm:@radix-ui\u002Freact-accessible-icon","@radix-ui\u002Freact-accessible-icon",[607],[1817],"1.1.15",[94,103],{"id":1820,"slug":1821,"identity":1822,"label":1823,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1824,"versions":1825,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1827},"package:npm:@radix-ui\u002Freact-accordion","radix-ui-react-accordion-e9510ee0","npm:@radix-ui\u002Freact-accordion","@radix-ui\u002Freact-accordion",[607],[1826],"1.2.20",[94,103],{"id":1829,"slug":1830,"identity":1831,"label":1832,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1833,"versions":1834,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1836},"package:npm:@radix-ui\u002Freact-alert-dialog","radix-ui-react-alert-dialog-ecfddaf1","npm:@radix-ui\u002Freact-alert-dialog","@radix-ui\u002Freact-alert-dialog",[607],[1835],"1.1.23",[94,103],{"id":1838,"slug":1839,"identity":1840,"label":1841,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1842,"versions":1843,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1844},"package:npm:@radix-ui\u002Freact-arrow","radix-ui-react-arrow-0d7b9e5e","npm:@radix-ui\u002Freact-arrow","@radix-ui\u002Freact-arrow",[607],[1817],[94,103],{"id":1846,"slug":1847,"identity":1848,"label":1849,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1850,"versions":1851,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1852},"package:npm:@radix-ui\u002Freact-aspect-ratio","radix-ui-react-aspect-ratio-86842968","npm:@radix-ui\u002Freact-aspect-ratio","@radix-ui\u002Freact-aspect-ratio",[607],[1817],[94,103],{"id":1854,"slug":1855,"identity":1856,"label":1857,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1858,"versions":1859,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1861},"package:npm:@radix-ui\u002Freact-avatar","radix-ui-react-avatar-23783ea4","npm:@radix-ui\u002Freact-avatar","@radix-ui\u002Freact-avatar",[607],[1860],"1.2.6",[94,103],{"id":1863,"slug":1864,"identity":1865,"label":1866,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1867,"versions":1868,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1870},"package:npm:@radix-ui\u002Freact-checkbox","radix-ui-react-checkbox-839a806e","npm:@radix-ui\u002Freact-checkbox","@radix-ui\u002Freact-checkbox",[607],[1869],"1.3.11",[94,103],{"id":1872,"slug":1873,"identity":1874,"label":1875,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1876,"versions":1877,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1879},"package:npm:@radix-ui\u002Freact-collapsible","radix-ui-react-collapsible-2676b67f","npm:@radix-ui\u002Freact-collapsible","@radix-ui\u002Freact-collapsible",[607],[1878],"1.1.20",[94,103],{"id":1881,"slug":1882,"identity":1883,"label":1884,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1885,"versions":1886,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1887},"package:npm:@radix-ui\u002Freact-collection","radix-ui-react-collection-e7fefa5c","npm:@radix-ui\u002Freact-collection","@radix-ui\u002Freact-collection",[607],[1817],[94,103],{"id":1889,"slug":1890,"identity":1891,"label":1892,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1893,"versions":1894,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1896},"package:npm:@radix-ui\u002Freact-compose-refs","radix-ui-react-compose-refs-a50a329f","npm:@radix-ui\u002Freact-compose-refs","@radix-ui\u002Freact-compose-refs",[607],[1895],"1.1.5",[94,103],{"id":1898,"slug":1899,"identity":1900,"label":1901,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1902,"versions":1903,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1904},"package:npm:@radix-ui\u002Freact-context","radix-ui-react-context-576ee6a1","npm:@radix-ui\u002Freact-context","@radix-ui\u002Freact-context",[607],[1159],[94,103],{"id":1906,"slug":1907,"identity":1908,"label":1909,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1910,"versions":1911,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1913},"package:npm:@radix-ui\u002Freact-context-menu","radix-ui-react-context-menu-17a66bb5","npm:@radix-ui\u002Freact-context-menu","@radix-ui\u002Freact-context-menu",[607],[1912],"2.3.7",[94,103],{"id":1915,"slug":1916,"identity":1917,"label":1918,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1919,"versions":1920,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1921},"package:npm:@radix-ui\u002Freact-dialog","radix-ui-react-dialog-c9ec934b","npm:@radix-ui\u002Freact-dialog","@radix-ui\u002Freact-dialog",[607],[1835],[94,103],{"id":1923,"slug":1924,"identity":1925,"label":1926,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1927,"versions":1928,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1929},"package:npm:@radix-ui\u002Freact-direction","radix-ui-react-direction-54eadc4b","npm:@radix-ui\u002Freact-direction","@radix-ui\u002Freact-direction",[607],[1728],[94,103],{"id":1931,"slug":1932,"identity":1933,"label":1934,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1935,"versions":1936,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1938},"package:npm:@radix-ui\u002Freact-dismissable-layer","radix-ui-react-dismissable-layer-a3c6e769","npm:@radix-ui\u002Freact-dismissable-layer","@radix-ui\u002Freact-dismissable-layer",[607],[1937],"1.1.19",[94,103],{"id":1940,"slug":1941,"identity":1942,"label":1943,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1944,"versions":1945,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1947},"package:npm:@radix-ui\u002Freact-dropdown-menu","radix-ui-react-dropdown-menu-bc75d3c0","npm:@radix-ui\u002Freact-dropdown-menu","@radix-ui\u002Freact-dropdown-menu",[607],[1946],"2.1.24",[94,103],{"id":1949,"slug":1950,"identity":1951,"label":1952,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1953,"versions":1954,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1956},"package:npm:@radix-ui\u002Freact-focus-guards","radix-ui-react-focus-guards-42cfef3a","npm:@radix-ui\u002Freact-focus-guards","@radix-ui\u002Freact-focus-guards",[607],[1955],"1.1.6",[94,103],{"id":1958,"slug":1959,"identity":1960,"label":1961,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1962,"versions":1963,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1965},"package:npm:@radix-ui\u002Freact-focus-scope","radix-ui-react-focus-scope-29a5bbac","npm:@radix-ui\u002Freact-focus-scope","@radix-ui\u002Freact-focus-scope",[607],[1964],"1.1.16",[94,103],{"id":1967,"slug":1968,"identity":1969,"label":1970,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1971,"versions":1972,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1974},"package:npm:@radix-ui\u002Freact-form","radix-ui-react-form-f33c0802","npm:@radix-ui\u002Freact-form","@radix-ui\u002Freact-form",[607],[1973],"0.1.16",[94,103],{"id":1976,"slug":1977,"identity":1978,"label":1979,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1980,"versions":1981,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1982},"package:npm:@radix-ui\u002Freact-hover-card","radix-ui-react-hover-card-eb8c4657","npm:@radix-ui\u002Freact-hover-card","@radix-ui\u002Freact-hover-card",[607],[1835],[94,103],{"id":1984,"slug":1985,"identity":1986,"label":1987,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1988,"versions":1989,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1990},"package:npm:@radix-ui\u002Freact-id","radix-ui-react-id-987d2e61","npm:@radix-ui\u002Freact-id","@radix-ui\u002Freact-id",[607],[1728],[94,103],{"id":1992,"slug":1993,"identity":1994,"label":1995,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1996,"versions":1997,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":1999},"package:npm:@radix-ui\u002Freact-label","radix-ui-react-label-d3c208c7","npm:@radix-ui\u002Freact-label","@radix-ui\u002Freact-label",[607],[1998],"2.1.15",[94,103],{"id":2001,"slug":2002,"identity":2003,"label":2004,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2005,"versions":2006,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2007},"package:npm:@radix-ui\u002Freact-menu","radix-ui-react-menu-46fcb999","npm:@radix-ui\u002Freact-menu","@radix-ui\u002Freact-menu",[607],[1946],[94,103],{"id":2009,"slug":2010,"identity":2011,"label":2012,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2013,"versions":2014,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2016},"package:npm:@radix-ui\u002Freact-menubar","radix-ui-react-menubar-08d55efa","npm:@radix-ui\u002Freact-menubar","@radix-ui\u002Freact-menubar",[607],[2015],"1.1.24",[94,103],{"id":2018,"slug":2019,"identity":2020,"label":2021,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2022,"versions":2023,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2025},"package:npm:@radix-ui\u002Freact-navigation-menu","radix-ui-react-navigation-menu-8d483544","npm:@radix-ui\u002Freact-navigation-menu","@radix-ui\u002Freact-navigation-menu",[607],[2024],"1.2.22",[94,103],{"id":2027,"slug":2028,"identity":2029,"label":2030,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2031,"versions":2032,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2033},"package:npm:@radix-ui\u002Freact-one-time-password-field","radix-ui-react-one-time-password-field-76b294fc","npm:@radix-ui\u002Freact-one-time-password-field","@radix-ui\u002Freact-one-time-password-field",[607],[1973],[94,103],{"id":2035,"slug":2036,"identity":2037,"label":2038,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2039,"versions":2040,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2042},"package:npm:@radix-ui\u002Freact-password-toggle-field","radix-ui-react-password-toggle-field-991121f8","npm:@radix-ui\u002Freact-password-toggle-field","@radix-ui\u002Freact-password-toggle-field",[607],[2041],"0.1.11",[94,103],{"id":2044,"slug":2045,"identity":2046,"label":2047,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2048,"versions":2049,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2050},"package:npm:@radix-ui\u002Freact-popover","radix-ui-react-popover-da57f2a6","npm:@radix-ui\u002Freact-popover","@radix-ui\u002Freact-popover",[607],[1835],[94,103],{"id":2052,"slug":2053,"identity":2054,"label":2055,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2056,"versions":2057,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2059},"package:npm:@radix-ui\u002Freact-popper","radix-ui-react-popper-831b72db","npm:@radix-ui\u002Freact-popper","@radix-ui\u002Freact-popper",[607],[2058],"1.3.7",[94,103],{"id":2061,"slug":2062,"identity":2063,"label":2064,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2065,"versions":2066,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2068},"package:npm:@radix-ui\u002Freact-portal","radix-ui-react-portal-1382c60d","npm:@radix-ui\u002Freact-portal","@radix-ui\u002Freact-portal",[607],[2067],"1.1.17",[94,103],{"id":2070,"slug":2071,"identity":2072,"label":2073,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2074,"versions":2075,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2077},"package:npm:@radix-ui\u002Freact-presence","radix-ui-react-presence-adbec356","npm:@radix-ui\u002Freact-presence","@radix-ui\u002Freact-presence",[607],[2076],"1.1.10",[94,103],{"id":2079,"slug":2080,"identity":2081,"label":2082,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2083,"versions":2084,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2086},"package:npm:@radix-ui\u002Freact-primitive","radix-ui-react-primitive-89b4f1d1","npm:@radix-ui\u002Freact-primitive","@radix-ui\u002Freact-primitive",[607],[2085],"2.1.10",[94,103],{"id":2088,"slug":2089,"identity":2090,"label":2091,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2092,"versions":2093,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2094},"package:npm:@radix-ui\u002Freact-progress","radix-ui-react-progress-48e46dbe","npm:@radix-ui\u002Freact-progress","@radix-ui\u002Freact-progress",[607],[1964],[94,103],{"id":2096,"slug":2097,"identity":2098,"label":2099,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2100,"versions":2101,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2103},"package:npm:@radix-ui\u002Freact-radio-group","radix-ui-react-radio-group-672dcea5","npm:@radix-ui\u002Freact-radio-group","@radix-ui\u002Freact-radio-group",[607],[2102],"1.4.7",[94,103],{"id":2105,"slug":2106,"identity":2107,"label":2108,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2109,"versions":2110,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2111},"package:npm:@radix-ui\u002Freact-roving-focus","radix-ui-react-roving-focus-aab71eef","npm:@radix-ui\u002Freact-roving-focus","@radix-ui\u002Freact-roving-focus",[607],[1937],[94,103],{"id":2113,"slug":2114,"identity":2115,"label":2116,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2117,"versions":2118,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2120},"package:npm:@radix-ui\u002Freact-scroll-area","radix-ui-react-scroll-area-f6a4a63b","npm:@radix-ui\u002Freact-scroll-area","@radix-ui\u002Freact-scroll-area",[607],[2119],"1.2.18",[94,103],{"id":2122,"slug":2123,"identity":2124,"label":2125,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2126,"versions":2127,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2128},"package:npm:@radix-ui\u002Freact-select","radix-ui-react-select-5eaaf38a","npm:@radix-ui\u002Freact-select","@radix-ui\u002Freact-select",[607],[1912],[94,103],{"id":2130,"slug":2131,"identity":2132,"label":2133,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2134,"versions":2135,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2136},"package:npm:@radix-ui\u002Freact-separator","radix-ui-react-separator-3ab6e92e","npm:@radix-ui\u002Freact-separator","@radix-ui\u002Freact-separator",[607],[1817],[94,103],{"id":2138,"slug":2139,"identity":2140,"label":2141,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2142,"versions":2143,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2144},"package:npm:@radix-ui\u002Freact-slider","radix-ui-react-slider-4ec942a5","npm:@radix-ui\u002Freact-slider","@radix-ui\u002Freact-slider",[607],[2102],[94,103],{"id":2146,"slug":2147,"identity":2148,"label":2149,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2150,"versions":2151,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2153},"package:npm:@radix-ui\u002Freact-slot","radix-ui-react-slot-0b5c1020","npm:@radix-ui\u002Freact-slot","@radix-ui\u002Freact-slot",[607],[2152],"1.3.3",[94,103],{"id":2155,"slug":2156,"identity":2157,"label":2158,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2159,"versions":2160,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2161},"package:npm:@radix-ui\u002Freact-switch","radix-ui-react-switch-954a4ee2","npm:@radix-ui\u002Freact-switch","@radix-ui\u002Freact-switch",[607],[2058],[94,103],{"id":2163,"slug":2164,"identity":2165,"label":2166,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2167,"versions":2168,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2170},"package:npm:@radix-ui\u002Freact-tabs","radix-ui-react-tabs-d1364061","npm:@radix-ui\u002Freact-tabs","@radix-ui\u002Freact-tabs",[607],[2169],"1.1.21",[94,103],{"id":2172,"slug":2173,"identity":2174,"label":2175,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2176,"versions":2177,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2179},"package:npm:@radix-ui\u002Freact-toast","radix-ui-react-toast-d3a9320e","npm:@radix-ui\u002Freact-toast","@radix-ui\u002Freact-toast",[607],[2178],"1.2.23",[94,103],{"id":2181,"slug":2182,"identity":2183,"label":2184,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2185,"versions":2186,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2188},"package:npm:@radix-ui\u002Freact-toggle","radix-ui-react-toggle-84169dad","npm:@radix-ui\u002Freact-toggle","@radix-ui\u002Freact-toggle",[607],[2187],"1.1.18",[94,103],{"id":2190,"slug":2191,"identity":2192,"label":2193,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2194,"versions":2195,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2196},"package:npm:@radix-ui\u002Freact-toggle-group","radix-ui-react-toggle-group-4ba3d8a4","npm:@radix-ui\u002Freact-toggle-group","@radix-ui\u002Freact-toggle-group",[607],[1937],[94,103],{"id":2198,"slug":2199,"identity":2200,"label":2201,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2202,"versions":2203,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2204},"package:npm:@radix-ui\u002Freact-toolbar","radix-ui-react-toolbar-2cd2cf6e","npm:@radix-ui\u002Freact-toolbar","@radix-ui\u002Freact-toolbar",[607],[1937],[94,103],{"id":2206,"slug":2207,"identity":2208,"label":2209,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2210,"versions":2211,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2213},"package:npm:@radix-ui\u002Freact-tooltip","radix-ui-react-tooltip-bf2eced6","npm:@radix-ui\u002Freact-tooltip","@radix-ui\u002Freact-tooltip",[607],[2212],"1.2.16",[94,103],{"id":2215,"slug":2216,"identity":2217,"label":2218,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2219,"versions":2220,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2221},"package:npm:@radix-ui\u002Freact-use-callback-ref","radix-ui-react-use-callback-ref-bdf07aa2","npm:@radix-ui\u002Freact-use-callback-ref","@radix-ui\u002Freact-use-callback-ref",[607],[1728],[94,103],{"id":2223,"slug":2224,"identity":2225,"label":2226,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2227,"versions":2228,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2229},"package:npm:@radix-ui\u002Freact-use-controllable-state","radix-ui-react-use-controllable-state-6f6994ba","npm:@radix-ui\u002Freact-use-controllable-state","@radix-ui\u002Freact-use-controllable-state",[607],[1860],[94,103],{"id":2231,"slug":2232,"identity":2233,"label":2234,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2235,"versions":2236,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2238},"package:npm:@radix-ui\u002Freact-use-effect-event","radix-ui-react-use-effect-event-0dc07ac7","npm:@radix-ui\u002Freact-use-effect-event","@radix-ui\u002Freact-use-effect-event",[607],[2237],"0.0.5",[94,103],{"id":2240,"slug":2241,"identity":2242,"label":2243,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2244,"versions":2245,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2246},"package:npm:@radix-ui\u002Freact-use-escape-keydown","radix-ui-react-use-escape-keydown-1f78b742","npm:@radix-ui\u002Freact-use-escape-keydown","@radix-ui\u002Freact-use-escape-keydown",[607],[1895],[94,103],{"id":2248,"slug":2249,"identity":2250,"label":2251,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2252,"versions":2253,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2255},"package:npm:@radix-ui\u002Freact-use-is-hydrated","radix-ui-react-use-is-hydrated-931af649","npm:@radix-ui\u002Freact-use-is-hydrated","@radix-ui\u002Freact-use-is-hydrated",[607],[2254],"0.1.3",[94,103],{"id":2257,"slug":2258,"identity":2259,"label":2260,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2261,"versions":2262,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2263},"package:npm:@radix-ui\u002Freact-use-layout-effect","radix-ui-react-use-layout-effect-cd01a3ed","npm:@radix-ui\u002Freact-use-layout-effect","@radix-ui\u002Freact-use-layout-effect",[607],[1728],[94,103],{"id":2265,"slug":2266,"identity":2267,"label":2268,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2269,"versions":2270,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2271},"package:npm:@radix-ui\u002Freact-use-previous","radix-ui-react-use-previous-54a0a81a","npm:@radix-ui\u002Freact-use-previous","@radix-ui\u002Freact-use-previous",[607],[1728],[94,103],{"id":2273,"slug":2274,"identity":2275,"label":2276,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2277,"versions":2278,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2279},"package:npm:@radix-ui\u002Freact-use-rect","radix-ui-react-use-rect-7d2d8eb9","npm:@radix-ui\u002Freact-use-rect","@radix-ui\u002Freact-use-rect",[607],[1728],[94,103],{"id":2281,"slug":2282,"identity":2283,"label":2284,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2285,"versions":2286,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2287},"package:npm:@radix-ui\u002Freact-use-size","radix-ui-react-use-size-0ec9d7a7","npm:@radix-ui\u002Freact-use-size","@radix-ui\u002Freact-use-size",[607],[1728],[94,103],{"id":2289,"slug":2290,"identity":2291,"label":2292,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2293,"versions":2294,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2296},"package:npm:@radix-ui\u002Freact-visually-hidden","radix-ui-react-visually-hidden-b9c56e4c","npm:@radix-ui\u002Freact-visually-hidden","@radix-ui\u002Freact-visually-hidden",[607],[2295],"1.2.11",[94,103],{"id":2298,"slug":2299,"identity":2300,"label":2301,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2302,"versions":2303,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2304},"package:npm:@radix-ui\u002Frect","radix-ui-rect-bd869810","npm:@radix-ui\u002Frect","@radix-ui\u002Frect",[607],[1799],[94,103],{"id":2306,"slug":2307,"identity":2308,"label":2309,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2310,"versions":2311,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2313},"package:npm:@reduxjs\u002Ftoolkit","reduxjs-toolkit-37f98765","npm:@reduxjs\u002Ftoolkit","@reduxjs\u002Ftoolkit",[607],[2312],"2.11.2",[94,103],{"id":2315,"slug":2316,"identity":2317,"label":2318,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2319,"versions":2320,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2322},"package:npm:@rolldown\u002Fbinding-android-arm-eabi","rolldown-binding-android-arm-eabi-aafa4a7a","npm:@rolldown\u002Fbinding-android-arm-eabi","@rolldown\u002Fbinding-android-arm-eabi",[607],[2321],"1.2.14",[94,103],{"id":2324,"slug":2325,"identity":2326,"label":2327,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2328,"versions":2329,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2330},"package:npm:@rolldown\u002Fbinding-android-arm64","rolldown-binding-android-arm64-4fba01e6","npm:@rolldown\u002Fbinding-android-arm64","@rolldown\u002Fbinding-android-arm64",[607],[2321],[94,103],{"id":2332,"slug":2333,"identity":2334,"label":2335,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2336,"versions":2337,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2338},"package:npm:@rolldown\u002Fbinding-darwin-arm64","rolldown-binding-darwin-arm64-c68272ff","npm:@rolldown\u002Fbinding-darwin-arm64","@rolldown\u002Fbinding-darwin-arm64",[607],[2321],[94,103],{"id":2340,"slug":2341,"identity":2342,"label":2343,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2344,"versions":2345,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2346},"package:npm:@rolldown\u002Fbinding-darwin-x64","rolldown-binding-darwin-x64-530717d4","npm:@rolldown\u002Fbinding-darwin-x64","@rolldown\u002Fbinding-darwin-x64",[607],[2321],[94,103],{"id":2348,"slug":2349,"identity":2350,"label":2351,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2352,"versions":2353,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2354},"package:npm:@rolldown\u002Fbinding-freebsd-x64","rolldown-binding-freebsd-x64-9a434b5e","npm:@rolldown\u002Fbinding-freebsd-x64","@rolldown\u002Fbinding-freebsd-x64",[607],[2321],[94,103],{"id":2356,"slug":2357,"identity":2358,"label":2359,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2360,"versions":2361,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2362},"package:npm:@rolldown\u002Fbinding-linux-arm-gnueabihf","rolldown-binding-linux-arm-gnueabihf-5b12188b","npm:@rolldown\u002Fbinding-linux-arm-gnueabihf","@rolldown\u002Fbinding-linux-arm-gnueabihf",[607],[2321],[94,103],{"id":2364,"slug":2365,"identity":2366,"label":2367,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2368,"versions":2369,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2370},"package:npm:@rolldown\u002Fbinding-linux-arm64-gnu","rolldown-binding-linux-arm64-gnu-4d84f50b","npm:@rolldown\u002Fbinding-linux-arm64-gnu","@rolldown\u002Fbinding-linux-arm64-gnu",[607],[2321],[94,103],{"id":2372,"slug":2373,"identity":2374,"label":2375,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2376,"versions":2377,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2378},"package:npm:@rolldown\u002Fbinding-linux-arm64-musl","rolldown-binding-linux-arm64-musl-30032dd1","npm:@rolldown\u002Fbinding-linux-arm64-musl","@rolldown\u002Fbinding-linux-arm64-musl",[607],[2321],[94,103],{"id":2380,"slug":2381,"identity":2382,"label":2383,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2384,"versions":2385,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2386},"package:npm:@rolldown\u002Fbinding-linux-ppc64-gnu","rolldown-binding-linux-ppc64-gnu-5949f425","npm:@rolldown\u002Fbinding-linux-ppc64-gnu","@rolldown\u002Fbinding-linux-ppc64-gnu",[607],[2321],[94,103],{"id":2388,"slug":2389,"identity":2390,"label":2391,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2392,"versions":2393,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2394},"package:npm:@rolldown\u002Fbinding-linux-s390x-gnu","rolldown-binding-linux-s390x-gnu-b2becc57","npm:@rolldown\u002Fbinding-linux-s390x-gnu","@rolldown\u002Fbinding-linux-s390x-gnu",[607],[2321],[94,103],{"id":2396,"slug":2397,"identity":2398,"label":2399,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2400,"versions":2401,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2402},"package:npm:@rolldown\u002Fbinding-linux-x64-gnu","rolldown-binding-linux-x64-gnu-552bf0d8","npm:@rolldown\u002Fbinding-linux-x64-gnu","@rolldown\u002Fbinding-linux-x64-gnu",[607],[2321],[94,103],{"id":2404,"slug":2405,"identity":2406,"label":2407,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2408,"versions":2409,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2410},"package:npm:@rolldown\u002Fbinding-linux-x64-musl","rolldown-binding-linux-x64-musl-e9aa57fe","npm:@rolldown\u002Fbinding-linux-x64-musl","@rolldown\u002Fbinding-linux-x64-musl",[607],[2321],[94,103],{"id":2412,"slug":2413,"identity":2414,"label":2415,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2416,"versions":2417,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2418},"package:npm:@rolldown\u002Fbinding-openharmony-arm64","rolldown-binding-openharmony-arm64-a55f4196","npm:@rolldown\u002Fbinding-openharmony-arm64","@rolldown\u002Fbinding-openharmony-arm64",[607],[2321],[94,103],{"id":2420,"slug":2421,"identity":2422,"label":2423,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2424,"versions":2425,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2426},"package:npm:@rolldown\u002Fbinding-win32-arm64-msvc","rolldown-binding-win32-arm64-msvc-b4f088cf","npm:@rolldown\u002Fbinding-win32-arm64-msvc","@rolldown\u002Fbinding-win32-arm64-msvc",[607],[2321],[94,103],{"id":2428,"slug":2429,"identity":2430,"label":2431,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2432,"versions":2433,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2434},"package:npm:@rolldown\u002Fbinding-win32-x64-msvc","rolldown-binding-win32-x64-msvc-cc6d5954","npm:@rolldown\u002Fbinding-win32-x64-msvc","@rolldown\u002Fbinding-win32-x64-msvc",[607],[2321],[94,103],{"id":2436,"slug":2437,"identity":2438,"label":2439,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2440,"versions":2441,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2442},"package:npm:@rolldown\u002Fpluginutils","rolldown-pluginutils-73ff273e","npm:@rolldown\u002Fpluginutils","@rolldown\u002Fpluginutils",[607],[1638],[94,103],{"id":2444,"slug":2445,"identity":2446,"label":2447,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2448,"versions":2449,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2451},"package:npm:@sec-ant\u002Freadable-stream","sec-ant-readable-stream-3c590ee3","npm:@sec-ant\u002Freadable-stream","@sec-ant\u002Freadable-stream",[607],[2450],"0.4.1",[94,103],{"id":2453,"slug":2454,"identity":2455,"label":2456,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2457,"versions":2458,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2460},"package:npm:@sindresorhus\u002Fmerge-streams","sindresorhus-merge-streams-3bf40078","npm:@sindresorhus\u002Fmerge-streams","@sindresorhus\u002Fmerge-streams",[607],[2459],"4.0.0",[94,103],{"id":2462,"slug":2463,"identity":2464,"label":2465,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2466,"versions":2467,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2469},"package:npm:@standard-schema\u002Fspec","standard-schema-spec-d214ce9f","npm:@standard-schema\u002Fspec","@standard-schema\u002Fspec",[607],[2468],"1.1.0",[94,103],{"id":2471,"slug":2472,"identity":2473,"label":2474,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2475,"versions":2476,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2478},"package:npm:@standard-schema\u002Futils","standard-schema-utils-81950b73","npm:@standard-schema\u002Futils","@standard-schema\u002Futils",[607],[2477],"0.3.0",[94,103],{"id":2480,"slug":2481,"identity":2482,"label":2483,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2484,"versions":2485,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2487},"package:npm:@tailwindcss\u002Fnode","tailwindcss-node-5a7bda04","npm:@tailwindcss\u002Fnode","@tailwindcss\u002Fnode",[607],[2486],"4.3.3",[94,103],{"id":2489,"slug":2490,"identity":2491,"label":2492,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2493,"versions":2494,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2495},"package:npm:@tailwindcss\u002Foxide","tailwindcss-oxide-bc0deb5e","npm:@tailwindcss\u002Foxide","@tailwindcss\u002Foxide",[607],[2486],[94,103],{"id":2497,"slug":2498,"identity":2499,"label":2500,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2501,"versions":2502,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2503},"package:npm:@tailwindcss\u002Foxide-android-arm64","tailwindcss-oxide-android-arm64-ee536c9e","npm:@tailwindcss\u002Foxide-android-arm64","@tailwindcss\u002Foxide-android-arm64",[607],[2486],[94,103],{"id":2505,"slug":2506,"identity":2507,"label":2508,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2509,"versions":2510,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2511},"package:npm:@tailwindcss\u002Foxide-darwin-arm64","tailwindcss-oxide-darwin-arm64-292dea54","npm:@tailwindcss\u002Foxide-darwin-arm64","@tailwindcss\u002Foxide-darwin-arm64",[607],[2486],[94,103],{"id":2513,"slug":2514,"identity":2515,"label":2516,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2517,"versions":2518,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2519},"package:npm:@tailwindcss\u002Foxide-darwin-x64","tailwindcss-oxide-darwin-x64-47d8c409","npm:@tailwindcss\u002Foxide-darwin-x64","@tailwindcss\u002Foxide-darwin-x64",[607],[2486],[94,103],{"id":2521,"slug":2522,"identity":2523,"label":2524,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2525,"versions":2526,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2527},"package:npm:@tailwindcss\u002Foxide-freebsd-x64","tailwindcss-oxide-freebsd-x64-2a2dd5a3","npm:@tailwindcss\u002Foxide-freebsd-x64","@tailwindcss\u002Foxide-freebsd-x64",[607],[2486],[94,103],{"id":2529,"slug":2530,"identity":2531,"label":2532,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2533,"versions":2534,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2535},"package:npm:@tailwindcss\u002Foxide-linux-arm-gnueabihf","tailwindcss-oxide-linux-arm-gnueabihf-26461187","npm:@tailwindcss\u002Foxide-linux-arm-gnueabihf","@tailwindcss\u002Foxide-linux-arm-gnueabihf",[607],[2486],[94,103],{"id":2537,"slug":2538,"identity":2539,"label":2540,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2541,"versions":2542,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2543},"package:npm:@tailwindcss\u002Foxide-linux-arm64-gnu","tailwindcss-oxide-linux-arm64-gnu-6c30a655","npm:@tailwindcss\u002Foxide-linux-arm64-gnu","@tailwindcss\u002Foxide-linux-arm64-gnu",[607],[2486],[94,103],{"id":2545,"slug":2546,"identity":2547,"label":2548,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2549,"versions":2550,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2551},"package:npm:@tailwindcss\u002Foxide-linux-arm64-musl","tailwindcss-oxide-linux-arm64-musl-edeb0668","npm:@tailwindcss\u002Foxide-linux-arm64-musl","@tailwindcss\u002Foxide-linux-arm64-musl",[607],[2486],[94,103],{"id":2553,"slug":2554,"identity":2555,"label":2556,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2557,"versions":2558,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2559},"package:npm:@tailwindcss\u002Foxide-linux-x64-gnu","tailwindcss-oxide-linux-x64-gnu-1b7e7116","npm:@tailwindcss\u002Foxide-linux-x64-gnu","@tailwindcss\u002Foxide-linux-x64-gnu",[607],[2486],[94,103],{"id":2561,"slug":2562,"identity":2563,"label":2564,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2565,"versions":2566,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2567},"package:npm:@tailwindcss\u002Foxide-linux-x64-musl","tailwindcss-oxide-linux-x64-musl-6ecbe2a8","npm:@tailwindcss\u002Foxide-linux-x64-musl","@tailwindcss\u002Foxide-linux-x64-musl",[607],[2486],[94,103],{"id":2569,"slug":2570,"identity":2571,"label":2572,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2573,"versions":2574,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2575},"package:npm:@tailwindcss\u002Foxide-wasm32-wasi","tailwindcss-oxide-wasm32-wasi-ca1d3da4","npm:@tailwindcss\u002Foxide-wasm32-wasi","@tailwindcss\u002Foxide-wasm32-wasi",[607],[2486],[94,103],{"id":2577,"slug":2578,"identity":2579,"label":2580,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2581,"versions":2582,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2583},"package:npm:@tailwindcss\u002Foxide-win32-arm64-msvc","tailwindcss-oxide-win32-arm64-msvc-155b7f53","npm:@tailwindcss\u002Foxide-win32-arm64-msvc","@tailwindcss\u002Foxide-win32-arm64-msvc",[607],[2486],[94,103],{"id":2585,"slug":2586,"identity":2587,"label":2588,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2589,"versions":2590,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2591},"package:npm:@tailwindcss\u002Foxide-win32-x64-msvc","tailwindcss-oxide-win32-x64-msvc-ec1bb11f","npm:@tailwindcss\u002Foxide-win32-x64-msvc","@tailwindcss\u002Foxide-win32-x64-msvc",[607],[2486],[94,103],{"id":2593,"slug":2594,"identity":2595,"label":2596,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2597,"versions":2598,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":2599},"package:npm:@tailwindcss\u002Fvite","tailwindcss-vite-719b0a4f","npm:@tailwindcss\u002Fvite","@tailwindcss\u002Fvite",[607],[2486],[94,103],{"id":2601,"slug":2602,"identity":2603,"label":2604,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2605,"versions":2606,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2608},"package:npm:@tanstack\u002Fhistory","tanstack-history-7dd0468e","npm:@tanstack\u002Fhistory","@tanstack\u002Fhistory",[607],[2607],"1.162.4",[94,103],{"id":2610,"slug":2611,"identity":2612,"label":2613,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2614,"versions":2615,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2617},"package:npm:@tanstack\u002Fquery-core","tanstack-query-core-9a0f2868","npm:@tanstack\u002Fquery-core","@tanstack\u002Fquery-core",[607],[2616],"5.104.0",[94,103],{"id":2619,"slug":2620,"identity":2621,"label":2622,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2623,"versions":2624,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":2625},"package:npm:@tanstack\u002Freact-query","tanstack-react-query-049e9666","npm:@tanstack\u002Freact-query","@tanstack\u002Freact-query",[607],[2616],[94,103],{"id":2627,"slug":2628,"identity":2629,"label":2630,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2631,"versions":2632,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":2634},"package:npm:@tanstack\u002Freact-router","tanstack-react-router-0acc9b30","npm:@tanstack\u002Freact-router","@tanstack\u002Freact-router",[607],[2633],"1.170.40",[94,103],{"id":2636,"slug":2637,"identity":2638,"label":2639,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2640,"versions":2641,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":2643},"package:npm:@tanstack\u002Freact-router-devtools","tanstack-react-router-devtools-48fe6b35","npm:@tanstack\u002Freact-router-devtools","@tanstack\u002Freact-router-devtools",[607],[2642],"1.167.2",[94,103],{"id":2645,"slug":2646,"identity":2647,"label":2648,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2649,"versions":2650,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2652},"package:npm:@tanstack\u002Freact-store","tanstack-react-store-b1d17193","npm:@tanstack\u002Freact-store","@tanstack\u002Freact-store",[607],[2651],"0.11.1",[94,103],{"id":2654,"slug":2655,"identity":2656,"label":2657,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2658,"versions":2659,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":2662},"package:npm:@tanstack\u002Frouter-core","tanstack-router-core-e8c8be62","npm:@tanstack\u002Frouter-core","@tanstack\u002Frouter-core",[607],[2660,2661],"1.171.32","1.171.33",[94,103],{"id":2664,"slug":2665,"identity":2666,"label":2667,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2668,"versions":2669,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2671},"package:npm:@tanstack\u002Frouter-devtools-core","tanstack-router-devtools-core-b3340ea1","npm:@tanstack\u002Frouter-devtools-core","@tanstack\u002Frouter-devtools-core",[607],[2670],"1.168.2",[94,103],{"id":2673,"slug":2674,"identity":2675,"label":2676,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2677,"versions":2678,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2680},"package:npm:@tanstack\u002Frouter-generator","tanstack-router-generator-b6ba584d","npm:@tanstack\u002Frouter-generator","@tanstack\u002Frouter-generator",[607],[2679],"1.167.38",[94],{"id":2682,"slug":2683,"identity":2684,"label":2685,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2686,"versions":2687,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":2689},"package:npm:@tanstack\u002Frouter-plugin","tanstack-router-plugin-8bc6db3e","npm:@tanstack\u002Frouter-plugin","@tanstack\u002Frouter-plugin",[607],[2688],"1.168.40",[94],{"id":2691,"slug":2692,"identity":2693,"label":2694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2695,"versions":2696,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2698},"package:npm:@tanstack\u002Frouter-utils","tanstack-router-utils-e1dbb6f5","npm:@tanstack\u002Frouter-utils","@tanstack\u002Frouter-utils",[607],[2697],"1.162.3",[94],{"id":2700,"slug":2701,"identity":2702,"label":2703,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2704,"versions":2705,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2706},"package:npm:@tanstack\u002Fstore","tanstack-store-37e795f0","npm:@tanstack\u002Fstore","@tanstack\u002Fstore",[607],[2651],[94,103],{"id":2708,"slug":2709,"identity":2710,"label":2711,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2712,"versions":2713,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2715},"package:npm:@tanstack\u002Fvirtual-file-routes","tanstack-virtual-file-routes-a6d6195c","npm:@tanstack\u002Fvirtual-file-routes","@tanstack\u002Fvirtual-file-routes",[607],[2714],"1.162.0",[94],{"id":2717,"slug":2718,"identity":2719,"label":2720,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2721,"versions":2722,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2724},"package:npm:@ts-morph\u002Fcommon","ts-morph-common-1c7ef627","npm:@ts-morph\u002Fcommon","@ts-morph\u002Fcommon",[607],[2723],"0.27.0",[94,103],{"id":2726,"slug":2727,"identity":2728,"label":2729,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2730,"versions":2731,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2733},"package:npm:@tybys\u002Fwasm-util","tybys-wasm-util-031dcc8d","npm:@tybys\u002Fwasm-util","@tybys\u002Fwasm-util",[607],[2732],"0.10.2",[103],{"id":2735,"slug":2736,"identity":2737,"label":2738,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2739,"versions":2740,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2742},"package:npm:@types\u002Fd3-array","types-d3-array-a29b6cf2","npm:@types\u002Fd3-array","@types\u002Fd3-array",[607],[2741],"3.2.2",[94,103],{"id":2744,"slug":2745,"identity":2746,"label":2747,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2748,"versions":2749,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2751},"package:npm:@types\u002Fd3-color","types-d3-color-e40fd440","npm:@types\u002Fd3-color","@types\u002Fd3-color",[607],[2750],"3.1.3",[94,103],{"id":2753,"slug":2754,"identity":2755,"label":2756,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2757,"versions":2758,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2760},"package:npm:@types\u002Fd3-ease","types-d3-ease-149b739c","npm:@types\u002Fd3-ease","@types\u002Fd3-ease",[607],[2759],"3.0.2",[94,103],{"id":2762,"slug":2763,"identity":2764,"label":2765,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2766,"versions":2767,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2769},"package:npm:@types\u002Fd3-interpolate","types-d3-interpolate-7f90ad6f","npm:@types\u002Fd3-interpolate","@types\u002Fd3-interpolate",[607],[2768],"3.0.4",[94,103],{"id":2771,"slug":2772,"identity":2773,"label":2774,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2775,"versions":2776,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2778},"package:npm:@types\u002Fd3-path","types-d3-path-960b1008","npm:@types\u002Fd3-path","@types\u002Fd3-path",[607],[2777],"3.1.1",[94,103],{"id":2780,"slug":2781,"identity":2782,"label":2783,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2784,"versions":2785,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2787},"package:npm:@types\u002Fd3-scale","types-d3-scale-5a3300ab","npm:@types\u002Fd3-scale","@types\u002Fd3-scale",[607],[2786],"4.0.9",[94,103],{"id":2789,"slug":2790,"identity":2791,"label":2792,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2793,"versions":2794,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2795},"package:npm:@types\u002Fd3-shape","types-d3-shape-7b817826","npm:@types\u002Fd3-shape","@types\u002Fd3-shape",[607],[755],[94,103],{"id":2797,"slug":2798,"identity":2799,"label":2800,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2801,"versions":2802,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2803},"package:npm:@types\u002Fd3-time","types-d3-time-f20949e6","npm:@types\u002Fd3-time","@types\u002Fd3-time",[607],[2768],[94,103],{"id":2805,"slug":2806,"identity":2807,"label":2808,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2809,"versions":2810,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2811},"package:npm:@types\u002Fd3-timer","types-d3-timer-23dd2733","npm:@types\u002Fd3-timer","@types\u002Fd3-timer",[607],[2759],[94,103],{"id":2813,"slug":2814,"identity":2815,"label":2816,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2817,"versions":2818,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2820},"package:npm:@types\u002Fdebug","types-debug-09342db5","npm:@types\u002Fdebug","@types\u002Fdebug",[607],[2819],"4.1.13",[94,103],{"id":2822,"slug":2823,"identity":2824,"label":2825,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2826,"versions":2827,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2828},"package:npm:@types\u002Fesrecurse","types-esrecurse-39b3ab02","npm:@types\u002Fesrecurse","@types\u002Fesrecurse",[607],[996],[94],{"id":2830,"slug":2831,"identity":2832,"label":2833,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2834,"versions":2835,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2837},"package:npm:@types\u002Festree","types-estree-8dde2b7e","npm:@types\u002Festree","@types\u002Festree",[607],[2836],"1.0.8",[94,103],{"id":2839,"slug":2840,"identity":2841,"label":2842,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2843,"versions":2844,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2846},"package:npm:@types\u002Festree-jsx","types-estree-jsx-65519fd8","npm:@types\u002Festree-jsx","@types\u002Festree-jsx",[607],[2845],"1.0.5",[94,103],{"id":2848,"slug":2849,"identity":2850,"label":2851,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2852,"versions":2853,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2854},"package:npm:@types\u002Fhast","types-hast-976cd29f","npm:@types\u002Fhast","@types\u002Fhast",[607],[2768],[94,103],{"id":2856,"slug":2857,"identity":2858,"label":2859,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2860,"versions":2861,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2863},"package:npm:@types\u002Fjson-schema","types-json-schema-71e9bb24","npm:@types\u002Fjson-schema","@types\u002Fjson-schema",[607],[2862],"7.0.15",[94],{"id":2865,"slug":2866,"identity":2867,"label":2868,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2869,"versions":2870,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2872},"package:npm:@types\u002Fmdast","types-mdast-ca137420","npm:@types\u002Fmdast","@types\u002Fmdast",[607],[2871],"4.0.4",[94,103],{"id":2874,"slug":2875,"identity":2876,"label":2877,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2878,"versions":2879,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2881},"package:npm:@types\u002Fms","types-ms-7aa68791","npm:@types\u002Fms","@types\u002Fms",[607],[2880],"2.1.0",[94,103],{"id":2883,"slug":2884,"identity":2885,"label":2886,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2887,"versions":2888,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":2890},"package:npm:@types\u002Fnode","types-node-893179a0","npm:@types\u002Fnode","@types\u002Fnode",[607],[2889],"26.6.2",[94,103],{"id":2892,"slug":2893,"identity":2894,"label":2895,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2896,"versions":2897,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2899},"package:npm:@types\u002Fprismjs","types-prismjs-3298ce7a","npm:@types\u002Fprismjs","@types\u002Fprismjs",[607],[2898],"1.26.6",[94,103],{"id":2901,"slug":2902,"identity":2903,"label":2904,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2905,"versions":2906,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":2908},"package:npm:@types\u002Freact","types-react-1801b994","npm:@types\u002Freact","@types\u002Freact",[607],[2907],"19.3.0",[94,103],{"id":2910,"slug":2911,"identity":2912,"label":2913,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2914,"versions":2915,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":2916},"package:npm:@types\u002Freact-dom","types-react-dom-0822f902","npm:@types\u002Freact-dom","@types\u002Freact-dom",[607],[2907],[94,103],{"id":2918,"slug":2919,"identity":2920,"label":2921,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2922,"versions":2923,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":2925},"package:npm:@types\u002Funist","types-unist-33c4c02a","npm:@types\u002Funist","@types\u002Funist",[607],[2924,794],"2.0.11",[94,103],{"id":2927,"slug":2928,"identity":2929,"label":2930,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2931,"versions":2932,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2934},"package:npm:@types\u002Fuse-sync-external-store","types-use-sync-external-store-82a5c51e","npm:@types\u002Fuse-sync-external-store","@types\u002Fuse-sync-external-store",[607],[2933],"0.0.6",[94,103],{"id":2936,"slug":2937,"identity":2938,"label":2939,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2940,"versions":2941,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":2943},"package:npm:@types\u002Fvalidate-npm-package-name","types-validate-npm-package-name-ba658174","npm:@types\u002Fvalidate-npm-package-name","@types\u002Fvalidate-npm-package-name",[607],[2942],"4.0.2",[94,103],{"id":2945,"slug":2946,"identity":2947,"label":2948,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2949,"versions":2950,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2952},"package:npm:@typescript-eslint\u002Feslint-plugin","typescript-eslint-eslint-plugin-37895b16","npm:@typescript-eslint\u002Feslint-plugin","@typescript-eslint\u002Feslint-plugin",[607],[2951],"8.70.0",[94],{"id":2954,"slug":2955,"identity":2956,"label":2957,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2958,"versions":2959,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2960},"package:npm:@typescript-eslint\u002Fparser","typescript-eslint-parser-30fb3abf","npm:@typescript-eslint\u002Fparser","@typescript-eslint\u002Fparser",[1130,607],[2951],[94],{"id":2962,"slug":2963,"identity":2964,"label":2965,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2966,"versions":2967,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2968},"package:npm:@typescript-eslint\u002Fproject-service","typescript-eslint-project-service-4325b1df","npm:@typescript-eslint\u002Fproject-service","@typescript-eslint\u002Fproject-service",[607],[2951],[94],{"id":2970,"slug":2971,"identity":2972,"label":2973,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2974,"versions":2975,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2976},"package:npm:@typescript-eslint\u002Fscope-manager","typescript-eslint-scope-manager-9cced343","npm:@typescript-eslint\u002Fscope-manager","@typescript-eslint\u002Fscope-manager",[607],[2951],[94],{"id":2978,"slug":2979,"identity":2980,"label":2981,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2982,"versions":2983,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2984},"package:npm:@typescript-eslint\u002Ftsconfig-utils","typescript-eslint-tsconfig-utils-1c650a80","npm:@typescript-eslint\u002Ftsconfig-utils","@typescript-eslint\u002Ftsconfig-utils",[607],[2951],[94],{"id":2986,"slug":2987,"identity":2988,"label":2989,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2990,"versions":2991,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2992},"package:npm:@typescript-eslint\u002Ftype-utils","typescript-eslint-type-utils-7cdfbb29","npm:@typescript-eslint\u002Ftype-utils","@typescript-eslint\u002Ftype-utils",[607],[2951],[94],{"id":2994,"slug":2995,"identity":2996,"label":2997,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2998,"versions":2999,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3000},"package:npm:@typescript-eslint\u002Ftypes","typescript-eslint-types-77f3f786","npm:@typescript-eslint\u002Ftypes","@typescript-eslint\u002Ftypes",[607],[2951],[94],{"id":3002,"slug":3003,"identity":3004,"label":3005,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3006,"versions":3007,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3008},"package:npm:@typescript-eslint\u002Ftypescript-estree","typescript-eslint-typescript-estree-82954698","npm:@typescript-eslint\u002Ftypescript-estree","@typescript-eslint\u002Ftypescript-estree",[1130,607],[2951],[94],{"id":3010,"slug":3011,"identity":3012,"label":3013,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3014,"versions":3015,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3016},"package:npm:@typescript-eslint\u002Futils","typescript-eslint-utils-688d256d","npm:@typescript-eslint\u002Futils","@typescript-eslint\u002Futils",[607],[2951],[94],{"id":3018,"slug":3019,"identity":3020,"label":3021,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3022,"versions":3023,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3024},"package:npm:@typescript-eslint\u002Fvisitor-keys","typescript-eslint-visitor-keys-fbb1a81d","npm:@typescript-eslint\u002Fvisitor-keys","@typescript-eslint\u002Fvisitor-keys",[607],[2951],[94],{"id":3026,"slug":3027,"identity":3028,"label":3029,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3030,"versions":3031,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3033},"package:npm:@uiw\u002Fcopy-to-clipboard","uiw-copy-to-clipboard-8bead46c","npm:@uiw\u002Fcopy-to-clipboard","@uiw\u002Fcopy-to-clipboard",[607],[3032],"1.0.21",[94,103],{"id":3035,"slug":3036,"identity":3037,"label":3038,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3039,"versions":3040,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3042},"package:npm:@uiw\u002Freact-markdown-preview","uiw-react-markdown-preview-8928ea94","npm:@uiw\u002Freact-markdown-preview","@uiw\u002Freact-markdown-preview",[607],[3041],"5.2.1",[94,103],{"id":3044,"slug":3045,"identity":3046,"label":3047,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3048,"versions":3049,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":3051},"package:npm:@uiw\u002Freact-md-editor","uiw-react-md-editor-ba7a4bdd","npm:@uiw\u002Freact-md-editor","@uiw\u002Freact-md-editor",[607],[3050],"4.1.2",[94,103],{"id":3053,"slug":3054,"identity":3055,"label":3056,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3057,"versions":3058,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3059},"package:npm:@ungap\u002Fstructured-clone","ungap-structured-clone-ab04e895","npm:@ungap\u002Fstructured-clone","@ungap\u002Fstructured-clone",[774],[1701],[94,103],{"id":3061,"slug":3062,"identity":3063,"label":3064,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3065,"versions":3066,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":3068},"package:npm:@vitejs\u002Fplugin-react","vitejs-plugin-react-0eef6115","npm:@vitejs\u002Fplugin-react","@vitejs\u002Fplugin-react",[607],[3067],"6.1.1",[94],{"id":3070,"slug":3071,"identity":3072,"label":3073,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3074,"versions":3075,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3077},"package:npm:accepts","accepts-be3cbd71","npm:accepts","accepts",[607],[3076],"2.0.0",[94,103],{"id":3079,"slug":3080,"identity":3081,"label":3082,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3083,"versions":3084,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3086},"package:npm:acorn","acorn-7462fc91","npm:acorn","acorn",[607],[3085],"8.18.0",[94],{"id":3088,"slug":3089,"identity":3090,"label":3091,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3092,"versions":3093,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3095},"package:npm:acorn-jsx","acorn-jsx-39f7c275","npm:acorn-jsx","acorn-jsx",[607],[3094],"5.3.2",[94],{"id":3097,"slug":3098,"identity":3099,"label":3100,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3101,"versions":3102,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3104},"package:npm:agent-base","agent-base-a3970bdd","npm:agent-base","agent-base",[607],[3103],"6.0.2",[94,103],{"id":3106,"slug":3107,"identity":3108,"label":3109,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3110,"versions":3111,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3113},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[561],[3112],"25.1.0",[103,56],{"id":3115,"slug":3116,"identity":3117,"label":3118,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3119,"versions":3121,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3123},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[3120],"PSF-2.0",[3122],"2.7.1",[103,56],{"id":3125,"slug":3126,"identity":3127,"label":3128,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3129,"versions":3130,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3132},"package:pypi:aiohttp-retry","aiohttp-retry-70699ddd","pypi:aiohttp-retry","aiohttp-retry",[607],[3131],"2.9.1",[103,56],{"id":3134,"slug":3135,"identity":3136,"label":3137,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3138,"versions":3139,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3141},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[561],[3140],"1.4.0",[103,56],{"id":3143,"slug":3144,"identity":3145,"label":3146,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3147,"versions":3148,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":3150},"package:pypi:aiosmtplib","aiosmtplib-e8671b81","pypi:aiosmtplib","aiosmtplib",[607],[3149],"5.1.3",[103,56],{"id":3152,"slug":3153,"identity":3154,"label":3155,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3156,"versions":3157,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3159},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[607],[3158],"0.22.1",[56],{"id":3161,"slug":3162,"identity":3163,"label":3164,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3165,"versions":3166,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3168},"package:npm:ajv-formats","ajv-formats-78fbf756","npm:ajv-formats","ajv-formats",[607],[3167],"3.0.1",[94,103],{"id":3170,"slug":3171,"identity":3172,"label":3173,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3174,"versions":3175,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":3176},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[607],[609],[103,56],{"id":3178,"slug":3179,"identity":3180,"label":3181,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3182,"versions":3183,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3184},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[607],[2237],[103,56],{"id":3186,"slug":3187,"identity":3188,"label":3189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3190,"versions":3191,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3193},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[607],[3192],"0.8.0",[103,56],{"id":3195,"slug":3196,"identity":3197,"label":3198,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3199,"versions":3200,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3202},"package:npm:ansi-regex","ansi-regex-920343ce","npm:ansi-regex","ansi-regex",[607],[3201],"6.2.2",[94,103],{"id":3204,"slug":3205,"identity":3206,"label":3207,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3208,"versions":3209,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3211},"package:npm:ansis","ansis-fa431623","npm:ansis","ansis",[774],[3210],"4.4.0",[94],{"id":3213,"slug":3214,"identity":3215,"label":3216,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3217,"versions":3219,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3221},"package:npm:argparse","argparse-b5701db7","npm:argparse","argparse",[607,3120,3218],"Python-2.0",[3220],"2.0.1",[94,103],{"id":3223,"slug":3224,"identity":3225,"label":3226,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3227,"versions":3228,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3229},"package:npm:aria-hidden","aria-hidden-c855d183","npm:aria-hidden","aria-hidden",[607],[1860],[94,103],{"id":3231,"slug":3232,"identity":3233,"label":3234,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3235,"versions":3236,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3238},"package:pypi:ast-serialize","ast-serialize-4fe42cf9","pypi:ast-serialize","ast-serialize",[607],[3237],"0.13.1",[56],{"id":3240,"slug":3241,"identity":3242,"label":3243,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3244,"versions":3245,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3247},"package:npm:ast-types","ast-types-47084315","npm:ast-types","ast-types",[607],[3246],"0.16.1",[94,103],{"id":3249,"slug":3250,"identity":3251,"label":3252,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3253,"versions":3255,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3256},"package:pypi:astroid","astroid-12016648","pypi:astroid","astroid",[3254],"LGPL-2.1-or-later",[2871],[56],{"id":3258,"slug":3259,"identity":3260,"label":3261,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3262,"versions":3263,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3264},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[561],[2759],[56],{"id":3266,"slug":3267,"identity":3268,"label":3269,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3270,"versions":3271,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3272},"package:npm:asynckit","asynckit-084253d2","npm:asynckit","asynckit",[607],[1426],[94,103],{"id":3274,"slug":3275,"identity":3276,"label":3277,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3278,"versions":3279,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":3281},"package:pypi:asyncpg","asyncpg-0fe19492","pypi:asyncpg","asyncpg",[561],[3280],"0.32.0",[103,56],{"id":3283,"slug":3284,"identity":3285,"label":3286,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3287,"versions":3288,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3290},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[607],[3289],"26.1.0",[103,56],{"id":3292,"slug":3293,"identity":3294,"label":3295,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3296,"versions":3297,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3299},"package:pypi:audioop-lts","audioop-lts-1da6267f","pypi:audioop-lts","audioop-lts",[3120],[3298],"0.2.2",[103,56],{"id":3301,"slug":3302,"identity":3303,"label":3304,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3305,"versions":3306,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":3308},"package:pypi:azure-storage-queue","azure-storage-queue-fc8a7c70","pypi:azure-storage-queue","azure-storage-queue",[607],[3307],"12.18.0",[103,56],{"id":3310,"slug":3311,"identity":3312,"label":3313,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3314,"versions":3315,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":3317},"package:pypi:babel","babel-c668b0a9","pypi:babel","babel",[596],[3316],"2.18.0",[103,56],{"id":3319,"slug":3320,"identity":3321,"label":3322,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3323,"versions":3324,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3326},"package:npm:babel-dead-code-elimination","babel-dead-code-elimination-be561d65","npm:babel-dead-code-elimination","babel-dead-code-elimination",[607],[3325],"1.0.12",[94],{"id":3328,"slug":3329,"identity":3330,"label":3331,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3332,"versions":3333,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3335},"package:pypi:backrefs","backrefs-b5389480","pypi:backrefs","backrefs",[607],[3334],"8.1",[56],{"id":3337,"slug":3338,"identity":3339,"label":3340,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3341,"versions":3342,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3344},"package:npm:bail","bail-8d9e1b54","npm:bail","bail",[607],[3343],"2.0.2",[94,103],{"id":3346,"slug":3347,"identity":3348,"label":3349,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3350,"versions":3351,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3352},"package:npm:balanced-match","balanced-match-bdbd1dc3","npm:balanced-match","balanced-match",[607],[2871],[94,103],{"id":3354,"slug":3355,"identity":3356,"label":3357,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3358,"versions":3359,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3361},"package:npm:baseline-browser-mapping","baseline-browser-mapping-e31a849c","npm:baseline-browser-mapping","baseline-browser-mapping",[561],[3360],"2.11.25",[94,103],{"id":3363,"slug":3364,"identity":3365,"label":3366,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3367,"versions":3368,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3370},"package:npm:bcp-47-match","bcp-47-match-4036a9ba","npm:bcp-47-match","bcp-47-match",[607],[3369],"2.0.3",[94,103],{"id":3372,"slug":3373,"identity":3374,"label":3375,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3376,"versions":3377,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":3379},"package:pypi:bcrypt","bcrypt-f766cbbf","pypi:bcrypt","bcrypt",[561],[3378],"5.0.0",[103,56],{"id":3381,"slug":3382,"identity":3383,"label":3384,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3385,"versions":3386,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3388},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[607],[3387],"4.15.0",[56],{"id":3390,"slug":3391,"identity":3392,"label":3393,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3394,"versions":3395,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3397},"package:npm:boolbase","boolbase-23160ca2","npm:boolbase","boolbase",[774],[3396],"1.0.0",[94,103],{"id":3399,"slug":3400,"identity":3401,"label":3402,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3403,"versions":3404,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3405},"package:npm:braces","braces-16233bc9","npm:braces","braces",[607],[794],[94,103],{"id":3407,"slug":3408,"identity":3409,"label":3410,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3411,"versions":3412,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3414},"package:npm:bundle-name","bundle-name-d8e83f6d","npm:bundle-name","bundle-name",[607],[3413],"4.1.0",[94,103],{"id":3416,"slug":3417,"identity":3418,"label":3419,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3420,"versions":3421,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3422},"package:npm:bytes","bytes-8a22cc41","npm:bytes","bytes",[607],[1674],[94,103],{"id":3424,"slug":3425,"identity":3426,"label":3427,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3428,"versions":3429,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3430},"package:npm:cacheable","cacheable-0089dd05","npm:cacheable","cacheable",[607],[1444],[94],{"id":3432,"slug":3433,"identity":3434,"label":3435,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3436,"versions":3437,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3439},"package:npm:call-bind-apply-helpers","call-bind-apply-helpers-78957419","npm:call-bind-apply-helpers","call-bind-apply-helpers",[607],[3438],"1.0.2",[94,103],{"id":3441,"slug":3442,"identity":3443,"label":3444,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3445,"versions":3446,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3448},"package:npm:call-bound","call-bound-9572ae3f","npm:call-bound","call-bound",[607],[3447],"1.0.4",[94,103],{"id":3450,"slug":3451,"identity":3452,"label":3453,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3454,"versions":3455,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3457},"package:npm:callsites","callsites-3381460c","npm:callsites","callsites",[607],[3456],"3.1.0",[94,103],{"id":3459,"slug":3460,"identity":3461,"label":3462,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3463,"versions":3465,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3467},"package:npm:caniuse-lite","caniuse-lite-e06ab132","npm:caniuse-lite","caniuse-lite",[3464],"CC-BY-4.0",[3466],"1.0.30001810",[94,103],{"id":3469,"slug":3470,"identity":3471,"label":3472,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3473,"versions":3474,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3475},"package:npm:ccount","ccount-1701465a","npm:ccount","ccount",[607],[3220],[94,103],{"id":3477,"slug":3478,"identity":3479,"label":3480,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3481,"versions":3483,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3485},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[607,3482],"MIT-0",[3484],"2.1.1",[103,56],{"id":3487,"slug":3488,"identity":3489,"label":3490,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3491,"versions":3492,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3494},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[607],[3493],"3.5.0",[56],{"id":3496,"slug":3497,"identity":3498,"label":3499,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3500,"versions":3501,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3503},"package:npm:chalk","chalk-8df0bdaf","npm:chalk","chalk",[607],[3502],"5.6.2",[94,103],{"id":3505,"slug":3506,"identity":3507,"label":3508,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3509,"versions":3510,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3511},"package:npm:character-entities","character-entities-fadf7f03","npm:character-entities","character-entities",[607],[3343],[94,103],{"id":3513,"slug":3514,"identity":3515,"label":3516,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3517,"versions":3518,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3519},"package:npm:character-entities-html4","character-entities-html4-979c8601","npm:character-entities-html4","character-entities-html4",[607],[2880],[94,103],{"id":3521,"slug":3522,"identity":3523,"label":3524,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3525,"versions":3526,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3528},"package:npm:character-entities-legacy","character-entities-legacy-72cfb89e","npm:character-entities-legacy","character-entities-legacy",[607],[3527],"3.0.0",[94,103],{"id":3530,"slug":3531,"identity":3532,"label":3533,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3534,"versions":3535,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3536},"package:npm:character-reference-invalid","character-reference-invalid-791f1a58","npm:character-reference-invalid","character-reference-invalid",[607],[3220],[94,103],{"id":3538,"slug":3539,"identity":3540,"label":3541,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3542,"versions":3543,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3545},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[607],[3544],"3.5.2",[103,56],{"id":3547,"slug":3548,"identity":3549,"label":3550,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3551,"versions":3552,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3553},"package:npm:chokidar","chokidar-52c6aecd","npm:chokidar","chokidar",[607],[3378],[94],{"id":3555,"slug":3556,"identity":3557,"label":3558,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3559,"versions":3560,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":3562},"package:npm:class-variance-authority","class-variance-authority-3a19330f","npm:class-variance-authority","class-variance-authority",[561],[3561],"0.7.1",[94,103],{"id":3564,"slug":3565,"identity":3566,"label":3567,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3568,"versions":3569,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3570},"package:npm:cli-cursor","cli-cursor-c7c50cdb","npm:cli-cursor","cli-cursor",[607],[3378],[94,103],{"id":3572,"slug":3573,"identity":3574,"label":3575,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3576,"versions":3577,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3579},"package:npm:cli-spinners","cli-spinners-df2ee187","npm:cli-spinners","cli-spinners",[607],[3578],"2.9.2",[94,103],{"id":3581,"slug":3582,"identity":3583,"label":3584,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3585,"versions":3586,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3588},"package:pypi:click","click-ef97f731","pypi:click","click",[596,763],[3587],"8.5.0",[103,56],{"id":3590,"slug":3591,"identity":3592,"label":3593,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3594,"versions":3595,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3597},"package:pypi:click-option-group","click-option-group-43453dea","pypi:click-option-group","click-option-group",[596],[3596],"0.5.9",[56],{"id":3599,"slug":3600,"identity":3601,"label":3602,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3603,"versions":3604,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":3605},"package:npm:clsx","clsx-302ac87a","npm:clsx","clsx",[607],[3484],[94,103],{"id":3607,"slug":3608,"identity":3609,"label":3610,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3611,"versions":3612,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":3613},"package:npm:cmdk","cmdk-91729400","npm:cmdk","cmdk",[607],[1710],[94,103],{"id":3615,"slug":3616,"identity":3617,"label":3618,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3619,"versions":3620,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3621},"package:npm:cn","cn-18e9ace0","npm:cn","cn",[607],[1471],[94,103],{"id":3623,"slug":3624,"identity":3625,"label":3626,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3627,"versions":3628,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3630},"package:npm:code-block-writer","code-block-writer-bafd27e7","npm:code-block-writer","code-block-writer",[607],[3629],"13.0.3",[94,103],{"id":3632,"slug":3633,"identity":3634,"label":3635,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3636,"versions":3637,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3639},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[763],[3638],"0.4.6",[56],{"id":3641,"slug":3642,"identity":3643,"label":3644,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3645,"versions":3646,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3647},"package:npm:combined-stream","combined-stream-b0356c50","npm:combined-stream","combined-stream",[607],[2836],[94,103],{"id":3649,"slug":3650,"identity":3651,"label":3652,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3653,"versions":3654,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3655},"package:npm:comma-separated-tokens","comma-separated-tokens-938b545a","npm:comma-separated-tokens","comma-separated-tokens",[607],[3369],[94,103],{"id":3657,"slug":3658,"identity":3659,"label":3660,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3661,"versions":3662,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":3665},"package:npm:commander","commander-e4ed5c85","npm:commander","commander",[607],[3663,3664],"11.1.0","14.0.3",[94,103],{"id":3667,"slug":3668,"identity":3669,"label":3670,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3671,"versions":3672,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3673},"package:npm:content-disposition","content-disposition-87619660","npm:content-disposition","content-disposition",[607],[2468],[94,103],{"id":3675,"slug":3676,"identity":3677,"label":3678,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3679,"versions":3680,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":3681},"package:npm:content-type","content-type-7fa6e83d","npm:content-type","content-type",[607],[2845,2880],[94,103],{"id":3683,"slug":3684,"identity":3685,"label":3686,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3687,"versions":3688,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3689},"package:npm:convert-source-map","convert-source-map-78f51653","npm:convert-source-map","convert-source-map",[607],[3076],[94,103],{"id":3691,"slug":3692,"identity":3693,"label":3694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3695,"versions":3696,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3698},"package:npm:cookie","cookie-a2a53f4d","npm:cookie","cookie",[607],[3697],"0.7.2",[94,103],{"id":3700,"slug":3701,"identity":3702,"label":3703,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3704,"versions":3705,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3706},"package:npm:cookie-es","cookie-es-fccb14d2","npm:cookie-es","cookie-es",[607],[2777],[94,103],{"id":3708,"slug":3709,"identity":3710,"label":3711,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3712,"versions":3713,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3714},"package:npm:cookie-signature","cookie-signature-429a9ed6","npm:cookie-signature","cookie-signature",[607],[1159],[94,103],{"id":3716,"slug":3717,"identity":3718,"label":3719,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3720,"versions":3721,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3723},"package:npm:cors","cors-4759e73f","npm:cors","cors",[607],[3722],"2.8.6",[94,103],{"id":3725,"slug":3726,"identity":3727,"label":3728,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3729,"versions":3730,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3732},"package:npm:cosmiconfig","cosmiconfig-75133a25","npm:cosmiconfig","cosmiconfig",[607],[3731],"9.0.1",[94,103],{"id":3734,"slug":3735,"identity":3736,"label":3737,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3738,"versions":3739,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3741},"package:npm:cross-spawn","cross-spawn-11ddd240","npm:cross-spawn","cross-spawn",[607],[3740],"7.0.6",[94,103],{"id":3743,"slug":3744,"identity":3745,"label":3746,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3747,"versions":3748,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3750},"package:npm:css-selector-parser","css-selector-parser-0831c071","npm:css-selector-parser","css-selector-parser",[607],[3749],"3.3.0",[94,103],{"id":3752,"slug":3753,"identity":3754,"label":3755,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3756,"versions":3757,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3758},"package:npm:cssesc","cssesc-1c461bf4","npm:cssesc","cssesc",[607],[3527],[94,103],{"id":3760,"slug":3761,"identity":3762,"label":3763,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3764,"versions":3765,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3767},"package:pypi:cssselect2","cssselect2-87d00b2b","pypi:cssselect2","cssselect2",[763],[3766],"0.10.1",[56],{"id":3769,"slug":3770,"identity":3771,"label":3772,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3773,"versions":3774,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3776},"package:npm:csstype","csstype-64cd134e","npm:csstype","csstype",[607],[3775],"3.2.3",[94,103],{"id":3778,"slug":3779,"identity":3780,"label":3781,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3782,"versions":3783,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3785},"package:npm:d3-array","d3-array-d7030bb5","npm:d3-array","d3-array",[596,774],[3784],"3.2.4",[94,103],{"id":3787,"slug":3788,"identity":3789,"label":3790,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3791,"versions":3792,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3793},"package:npm:d3-color","d3-color-1b82248b","npm:d3-color","d3-color",[774],[3456],[94,103],{"id":3795,"slug":3796,"identity":3797,"label":3798,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3799,"versions":3800,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3801},"package:npm:d3-ease","d3-ease-325f140b","npm:d3-ease","d3-ease",[596],[3167],[94,103],{"id":3803,"slug":3804,"identity":3805,"label":3806,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3807,"versions":3808,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3809},"package:npm:d3-format","d3-format-6da42c7c","npm:d3-format","d3-format",[774],[1674],[94,103],{"id":3811,"slug":3812,"identity":3813,"label":3814,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3815,"versions":3816,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3817},"package:npm:d3-interpolate","d3-interpolate-0a6d9932","npm:d3-interpolate","d3-interpolate",[774],[3167],[94,103],{"id":3819,"slug":3820,"identity":3821,"label":3822,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3823,"versions":3824,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3825},"package:npm:d3-path","d3-path-0f72af98","npm:d3-path","d3-path",[596,774],[3456],[94,103],{"id":3827,"slug":3828,"identity":3829,"label":3830,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3831,"versions":3832,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3833},"package:npm:d3-scale","d3-scale-6d449a2e","npm:d3-scale","d3-scale",[774],[2942],[94,103],{"id":3835,"slug":3836,"identity":3837,"label":3838,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3839,"versions":3840,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3842},"package:npm:d3-shape","d3-shape-ce111f69","npm:d3-shape","d3-shape",[596,774],[3841],"3.2.0",[94,103],{"id":3844,"slug":3845,"identity":3846,"label":3847,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3848,"versions":3849,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3850},"package:npm:d3-time","d3-time-8374a368","npm:d3-time","d3-time",[774],[3456],[94,103],{"id":3852,"slug":3853,"identity":3854,"label":3855,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3856,"versions":3857,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3858},"package:npm:d3-time-format","d3-time-format-57557ec1","npm:d3-time-format","d3-time-format",[774],[3413],[94,103],{"id":3860,"slug":3861,"identity":3862,"label":3863,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3864,"versions":3865,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3866},"package:npm:d3-timer","d3-timer-2e634c1e","npm:d3-timer","d3-timer",[774],[3167],[94,103],{"id":3868,"slug":3869,"identity":3870,"label":3871,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3872,"versions":3873,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":3874},"package:npm:date-fns","date-fns-b797eff3","npm:date-fns","date-fns",[607],[3210],[94,103],{"id":3876,"slug":3877,"identity":3878,"label":3879,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3880,"versions":3881,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3883},"package:npm:debug","debug-e3b3b23f","npm:debug","debug",[607],[3882],"4.4.3",[94,103],{"id":3885,"slug":3886,"identity":3887,"label":3888,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3889,"versions":3890,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3892},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[607],[3891],"1.8.22",[56],{"id":3894,"slug":3895,"identity":3896,"label":3897,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3898,"versions":3899,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3901},"package:npm:decimal.js-light","decimal-js-light-bca5bfff","npm:decimal.js-light","decimal.js-light",[607],[3900],"2.5.1",[94,103],{"id":3903,"slug":3904,"identity":3905,"label":3906,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3907,"versions":3908,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3909},"package:npm:decode-named-character-reference","decode-named-character-reference-d0c309dc","npm:decode-named-character-reference","decode-named-character-reference",[607],[1737],[94,103],{"id":3911,"slug":3912,"identity":3913,"label":3914,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3915,"versions":3916,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3918},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[1130,763],[3917],"5.3.1",[56],{"id":3920,"slug":3921,"identity":3922,"label":3923,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3924,"versions":3925,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3927},"package:npm:dedent","dedent-30f4112e","npm:dedent","dedent",[607],[3926],"1.7.2",[94,103],{"id":3929,"slug":3930,"identity":3931,"label":3932,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3933,"versions":3934,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3936},"package:npm:deep-is","deep-is-0ee8b226","npm:deep-is","deep-is",[607],[3935],"0.1.4",[94],{"id":3938,"slug":3939,"identity":3940,"label":3941,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3942,"versions":3943,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3945},"package:npm:default-browser","default-browser-7bc285c6","npm:default-browser","default-browser",[607],[3944],"5.5.0",[94,103],{"id":3947,"slug":3948,"identity":3949,"label":3950,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3951,"versions":3952,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3954},"package:npm:default-browser-id","default-browser-id-1306286c","npm:default-browser-id","default-browser-id",[607],[3953],"5.0.1",[94,103],{"id":3956,"slug":3957,"identity":3958,"label":3959,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3960,"versions":3961,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3962},"package:npm:define-lazy-prop","define-lazy-prop-370561b8","npm:define-lazy-prop","define-lazy-prop",[607],[3527],[94,103],{"id":3964,"slug":3965,"identity":3966,"label":3967,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3968,"versions":3969,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3970},"package:npm:delayed-stream","delayed-stream-b1ee7639","npm:delayed-stream","delayed-stream",[607],[3396],[94,103],{"id":3972,"slug":3973,"identity":3974,"label":3975,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3976,"versions":3977,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3978},"package:npm:depd","depd-8c68abf1","npm:depd","depd",[607],[3076],[94,103],{"id":3980,"slug":3981,"identity":3982,"label":3983,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3984,"versions":3985,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3986},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[607],[1701],[103,56],{"id":3988,"slug":3989,"identity":3990,"label":3991,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3992,"versions":3993,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":3994},"package:npm:dequal","dequal-7b882b20","npm:dequal","dequal",[607],[3369],[94,103],{"id":3996,"slug":3997,"identity":3998,"label":3999,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4000,"versions":4001,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4003},"package:npm:detect-libc","detect-libc-b4be90cb","npm:detect-libc","detect-libc",[561],[4002],"2.1.2",[94,103],{"id":4005,"slug":4006,"identity":4007,"label":4008,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4009,"versions":4010,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4011},"package:npm:detect-node-es","detect-node-es-2d46ab7b","npm:detect-node-es","detect-node-es",[607],[2468],[94,103],{"id":4013,"slug":4014,"identity":4015,"label":4016,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4017,"versions":4018,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4019},"package:npm:devlop","devlop-b37fc7f6","npm:devlop","devlop",[607],[2468],[94,103],{"id":4021,"slug":4022,"identity":4023,"label":4024,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4025,"versions":4026,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4027},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[596],[2450],[56],{"id":4029,"slug":4030,"identity":4031,"label":4032,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4033,"versions":4034,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4035},"package:npm:direction","direction-5463ec66","npm:direction","direction",[607],[3220],[94,103],{"id":4037,"slug":4038,"identity":4039,"label":4040,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4041,"versions":4042,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4044},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[3120],[4043],"0.4.4",[56],{"id":4046,"slug":4047,"identity":4048,"label":4049,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4050,"versions":4051,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4052},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[561],[698],[103,56],{"id":4054,"slug":4055,"identity":4056,"label":4057,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4058,"versions":4059,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4061},"package:pypi:docopt","docopt-a034efe2","pypi:docopt","docopt",[607],[4060],"0.6.2",[56],{"id":4063,"slug":4064,"identity":4065,"label":4066,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4067,"versions":4068,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4070},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[607],[4069],"0.18.0",[103,56],{"id":4072,"slug":4073,"identity":4074,"label":4075,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4076,"versions":4077,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4079},"package:npm:dotenv","dotenv-230bc017","npm:dotenv","dotenv",[1130],[4078],"17.4.2",[94,103],{"id":4081,"slug":4082,"identity":4083,"label":4075,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4084,"versions":4085,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":4087},"package:pypi:dotenv","dotenv-c49c342b","pypi:dotenv",[607],[4086],"0.9.9",[103,56],{"id":4089,"slug":4090,"identity":4091,"label":4092,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4093,"versions":4094,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4095},"package:pypi:dotty-dict","dotty-dict-33e68274","pypi:dotty-dict","dotty-dict",[607],[1701],[56],{"id":4097,"slug":4098,"identity":4099,"label":4100,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4101,"versions":4102,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4103},"package:npm:dunder-proto","dunder-proto-06a3ed8c","npm:dunder-proto","dunder-proto",[607],[1638],[94,103],{"id":4105,"slug":4106,"identity":4107,"label":4108,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4109,"versions":4110,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4112},"package:npm:eciesjs","eciesjs-5462e624","npm:eciesjs","eciesjs",[607],[4111],"0.4.18",[94,103],{"id":4114,"slug":4115,"identity":4116,"label":4117,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4118,"versions":4119,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4120},"package:npm:ee-first","ee-first-53b9047e","npm:ee-first","ee-first",[607],[1710],[94,103],{"id":4122,"slug":4123,"identity":4124,"label":4125,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4126,"versions":4127,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4129},"package:npm:electron-to-chromium","electron-to-chromium-375b132f","npm:electron-to-chromium","electron-to-chromium",[774],[4128],"1.5.433",[94,103],{"id":4131,"slug":4132,"identity":4133,"label":4134,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4135,"versions":4136,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4138},"package:npm:embla-carousel","embla-carousel-2aafeebe","npm:embla-carousel","embla-carousel",[607],[4137],"8.6.0",[94,103],{"id":4140,"slug":4141,"identity":4142,"label":4143,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4144,"versions":4145,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":4146},"package:npm:embla-carousel-react","embla-carousel-react-836fc6dc","npm:embla-carousel-react","embla-carousel-react",[607],[4137],[94,103],{"id":4148,"slug":4149,"identity":4150,"label":4151,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4152,"versions":4153,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4154},"package:npm:embla-carousel-reactive-utils","embla-carousel-reactive-utils-bfd4d795","npm:embla-carousel-reactive-utils","embla-carousel-reactive-utils",[607],[4137],[94,103],{"id":4156,"slug":4157,"identity":4158,"label":4159,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4160,"versions":4161,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4163},"package:npm:emoji-regex","emoji-regex-8e51d994","npm:emoji-regex","emoji-regex",[607],[4162],"10.6.0",[94,103],{"id":4165,"slug":4166,"identity":4167,"label":4168,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4169,"versions":4170,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4171},"package:npm:encodeurl","encodeurl-7def4e10","npm:encodeurl","encodeurl",[607],[3076],[94,103],{"id":4173,"slug":4174,"identity":4175,"label":4176,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4177,"versions":4178,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4180},"package:npm:enhanced-resolve","enhanced-resolve-3bd00f72","npm:enhanced-resolve","enhanced-resolve",[607],[4179],"5.25.1",[94,103],{"id":4182,"slug":4183,"identity":4184,"label":4185,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4186,"versions":4187,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4189},"package:npm:entities","entities-dadc420c","npm:entities","entities",[1130],[4188],"6.0.1",[94,103],{"id":4191,"slug":4192,"identity":4193,"label":4194,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4195,"versions":4196,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4198},"package:npm:env-paths","env-paths-2a051888","npm:env-paths","env-paths",[607],[4197],"2.2.1",[94,103],{"id":4200,"slug":4201,"identity":4202,"label":4203,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4204,"versions":4205,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4207},"package:npm:error-ex","error-ex-ab587189","npm:error-ex","error-ex",[607],[4206],"1.3.4",[94,103],{"id":4209,"slug":4210,"identity":4211,"label":4212,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4213,"versions":4214,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4215},"package:npm:es-define-property","es-define-property-47323fb6","npm:es-define-property","es-define-property",[607],[1638],[94,103],{"id":4217,"slug":4218,"identity":4219,"label":4220,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4221,"versions":4222,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4223},"package:npm:es-errors","es-errors-ef18b576","npm:es-errors","es-errors",[607],[1737],[94,103],{"id":4225,"slug":4226,"identity":4227,"label":4228,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4229,"versions":4230,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4231},"package:npm:es-object-atoms","es-object-atoms-c0d03b04","npm:es-object-atoms","es-object-atoms",[607],[1710],[94,103],{"id":4233,"slug":4234,"identity":4235,"label":4236,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4237,"versions":4238,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4239},"package:npm:es-set-tostringtag","es-set-tostringtag-10bc0ea9","npm:es-set-tostringtag","es-set-tostringtag",[607],[2880],[94,103],{"id":4241,"slug":4242,"identity":4243,"label":4244,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4245,"versions":4246,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4248},"package:npm:es-toolkit","es-toolkit-4d2306f5","npm:es-toolkit","es-toolkit",[607],[4247],"1.46.0",[94,103],{"id":4250,"slug":4251,"identity":4252,"label":4253,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4254,"versions":4255,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4256},"package:npm:escalade","escalade-6fb20cfb","npm:escalade","escalade",[607],[3841],[94,103],{"id":4258,"slug":4259,"identity":4260,"label":4261,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4262,"versions":4263,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4265},"package:npm:escape-html","escape-html-fb926c89","npm:escape-html","escape-html",[607],[4264],"1.0.3",[94,103],{"id":4267,"slug":4268,"identity":4269,"label":4270,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4271,"versions":4272,"dossier":47,"occurrenceCount":810,"directOccurrenceCount":39,"evidenceFiles":4273},"package:npm:escape-string-regexp","escape-string-regexp-48b4cb67","npm:escape-string-regexp","escape-string-regexp",[607],[2459,3378],[94,103],{"id":4275,"slug":4276,"identity":4277,"label":4278,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4279,"versions":4280,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4282},"package:npm:eslint","eslint-421604c9","npm:eslint","eslint",[607],[4281],"10.11.0",[94],{"id":4284,"slug":4285,"identity":4286,"label":4287,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4288,"versions":4289,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4291},"package:npm:eslint-plugin-react-hooks","eslint-plugin-react-hooks-14270148","npm:eslint-plugin-react-hooks","eslint-plugin-react-hooks",[607],[4290],"7.1.1",[94],{"id":4293,"slug":4294,"identity":4295,"label":4296,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4297,"versions":4298,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4300},"package:npm:eslint-plugin-react-refresh","eslint-plugin-react-refresh-be6657b2","npm:eslint-plugin-react-refresh","eslint-plugin-react-refresh",[607],[4299],"0.5.7",[94],{"id":4302,"slug":4303,"identity":4304,"label":4305,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4306,"versions":4307,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4309},"package:npm:eslint-scope","eslint-scope-e94b244d","npm:eslint-scope","eslint-scope",[1130],[4308],"9.1.2",[94],{"id":4311,"slug":4312,"identity":4313,"label":4314,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4315,"versions":4316,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4318},"package:npm:eslint-visitor-keys","eslint-visitor-keys-32b1188a","npm:eslint-visitor-keys","eslint-visitor-keys",[561],[4317,3953],"3.4.3",[94],{"id":4320,"slug":4321,"identity":4322,"label":4323,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4324,"versions":4325,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4327},"package:npm:espree","espree-00afe3f4","npm:espree","espree",[1130],[4326],"11.2.0",[94],{"id":4329,"slug":4330,"identity":4331,"label":4332,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4333,"versions":4334,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4336},"package:npm:esprima","esprima-33701895","npm:esprima","esprima",[1130],[4335],"4.0.1",[94,103],{"id":4338,"slug":4339,"identity":4340,"label":4341,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4342,"versions":4343,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4345},"package:npm:esquery","esquery-c9ae3aa0","npm:esquery","esquery",[596],[4344],"1.7.0",[94],{"id":4347,"slug":4348,"identity":4349,"label":4350,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4351,"versions":4352,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4354},"package:npm:esrecurse","esrecurse-4abfbbe8","npm:esrecurse","esrecurse",[1130],[4353],"4.3.0",[94],{"id":4356,"slug":4357,"identity":4358,"label":4359,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4360,"versions":4361,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4362},"package:npm:estraverse","estraverse-042e57d4","npm:estraverse","estraverse",[1130],[1611],[94],{"id":4364,"slug":4365,"identity":4366,"label":4367,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4368,"versions":4369,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4370},"package:npm:estree-util-is-identifier-name","estree-util-is-identifier-name-16401954","npm:estree-util-is-identifier-name","estree-util-is-identifier-name",[607],[3527],[94,103],{"id":4372,"slug":4373,"identity":4374,"label":4375,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4376,"versions":4377,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4378},"package:npm:esutils","esutils-333daa20","npm:esutils","esutils",[1130],[3369],[94],{"id":4380,"slug":4381,"identity":4382,"label":4383,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4384,"versions":4385,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4387},"package:npm:etag","etag-5bf82a9a","npm:etag","etag",[607],[4386],"1.8.1",[94,103],{"id":4389,"slug":4390,"identity":4391,"label":4392,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4393,"versions":4394,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4396},"package:npm:eventemitter3","eventemitter3-dd086b94","npm:eventemitter3","eventemitter3",[607],[4395],"5.0.4",[94,103],{"id":4398,"slug":4399,"identity":4400,"label":4401,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4402,"versions":4403,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4405},"package:npm:eventsource","eventsource-b1d9e25a","npm:eventsource","eventsource",[607],[4404],"3.0.7",[94,103],{"id":4407,"slug":4408,"identity":4409,"label":4410,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4411,"versions":4412,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4414},"package:npm:eventsource-parser","eventsource-parser-1bfc59a5","npm:eventsource-parser","eventsource-parser",[607],[4413],"3.0.8",[94,103],{"id":4416,"slug":4417,"identity":4418,"label":4419,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4420,"versions":4421,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":4424},"package:npm:execa","execa-1234354e","npm:execa","execa",[607],[4422,4423],"5.1.1","9.6.1",[94,103],{"id":4426,"slug":4427,"identity":4428,"label":4429,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4430,"versions":4431,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4432},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[607],[858],[56],{"id":4434,"slug":4435,"identity":4436,"label":4437,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4438,"versions":4439,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4440},"package:npm:express","express-1db97c49","npm:express","express",[607],[3041],[94,103],{"id":4442,"slug":4443,"identity":4444,"label":4445,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4446,"versions":4447,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4449},"package:npm:express-rate-limit","express-rate-limit-d59e1958","npm:express-rate-limit","express-rate-limit",[607],[4448],"8.5.2",[94,103],{"id":4451,"slug":4452,"identity":4453,"label":4454,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4455,"versions":4456,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4457},"package:npm:extend","extend-a49ffc1d","npm:extend","extend",[607],[2759],[94,103],{"id":4459,"slug":4460,"identity":4461,"label":4462,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4463,"versions":4464,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4465},"package:npm:fast-deep-equal","fast-deep-equal-9efeb437","npm:fast-deep-equal","fast-deep-equal",[607],[2750],[94,103],{"id":4467,"slug":4468,"identity":4469,"label":4470,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4471,"versions":4472,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4474},"package:npm:fast-glob","fast-glob-252e51fb","npm:fast-glob","fast-glob",[607],[4473],"3.3.3",[94,103],{"id":4476,"slug":4477,"identity":4478,"label":4479,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4480,"versions":4481,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4482},"package:npm:fast-json-stable-stringify","fast-json-stable-stringify-178e5c18","npm:fast-json-stable-stringify","fast-json-stable-stringify",[607],[2880],[94],{"id":4484,"slug":4485,"identity":4486,"label":4487,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4488,"versions":4489,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4491},"package:npm:fast-levenshtein","fast-levenshtein-08886bf2","npm:fast-levenshtein","fast-levenshtein",[607],[4490],"2.0.6",[94],{"id":4493,"slug":4494,"identity":4495,"label":4496,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4497,"versions":4498,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":4500},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[607],[4499],"0.141.1",[103,56],{"id":4502,"slug":4503,"identity":4504,"label":4505,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4506,"versions":4507,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4509},"package:npm:fastq","fastq-cc3d7764","npm:fastq","fastq",[774],[4508],"1.20.1",[94,103],{"id":4511,"slug":4512,"identity":4513,"label":4514,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4515,"versions":4516,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4518},"package:npm:fdir","fdir-d78fecd4","npm:fdir","fdir",[607],[4517],"6.5.0",[94,103],{"id":4520,"slug":4521,"identity":4522,"label":4523,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4524,"versions":4525,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4527},"package:npm:figures","figures-d69096f0","npm:figures","figures",[607],[4526],"6.1.0",[94,103],{"id":4529,"slug":4530,"identity":4531,"label":4532,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4533,"versions":4534,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4536},"package:npm:file-entry-cache","file-entry-cache-126c69d4","npm:file-entry-cache","file-entry-cache",[607],[4535],"11.1.5",[94],{"id":4538,"slug":4539,"identity":4540,"label":4541,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4542,"versions":4543,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4544},"package:npm:fill-range","fill-range-2ea43335","npm:fill-range","fill-range",[607],[4290],[94,103],{"id":4546,"slug":4547,"identity":4548,"label":4549,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4550,"versions":4551,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4552},"package:npm:finalhandler","finalhandler-7a4e31f4","npm:finalhandler","finalhandler",[607],[3484],[94,103],{"id":4554,"slug":4555,"identity":4556,"label":4557,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4558,"versions":4559,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4560},"package:npm:find-up","find-up-bf684d3a","npm:find-up","find-up",[607],[3378],[94],{"id":4562,"slug":4563,"identity":4564,"label":4565,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4566,"versions":4567,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4569},"package:npm:flat-cache","flat-cache-b7f57c59","npm:flat-cache","flat-cache",[607],[4568],"6.1.23",[94],{"id":4571,"slug":4572,"identity":4573,"label":4574,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4575,"versions":4576,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4578},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[561],[4577],"25.12.19",[103,56],{"id":4580,"slug":4581,"identity":4582,"label":4583,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4584,"versions":4585,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4587},"package:npm:forwarded","forwarded-752269ca","npm:forwarded","forwarded",[607],[4586],"0.2.0",[94,103],{"id":4589,"slug":4590,"identity":4591,"label":4592,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4593,"versions":4594,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4595},"package:npm:fresh","fresh-eb605422","npm:fresh","fresh",[607],[3076],[94,103],{"id":4597,"slug":4598,"identity":4599,"label":4600,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4601,"versions":4602,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4603},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[561],[1417],[103,56],{"id":4605,"slug":4606,"identity":4607,"label":4608,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4609,"versions":4610,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4612},"package:npm:fs-extra","fs-extra-d5f614b1","npm:fs-extra","fs-extra",[607],[4611],"11.3.4",[94,103],{"id":4614,"slug":4615,"identity":4616,"label":4617,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4618,"versions":4619,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4621},"package:npm:fsevents","fsevents-f43d69ec","npm:fsevents","fsevents",[607],[4620],"2.3.3",[94,103],{"id":4623,"slug":4624,"identity":4625,"label":4626,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4627,"versions":4628,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4630},"package:npm:function-bind","function-bind-45751970","npm:function-bind","function-bind",[607],[4629],"1.1.2",[94,103],{"id":4632,"slug":4633,"identity":4634,"label":4635,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4636,"versions":4637,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4638},"package:npm:fuzzysort","fuzzysort-795a26a9","npm:fuzzysort","fuzzysort",[607],[3456],[94,103],{"id":4640,"slug":4641,"identity":4642,"label":4643,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4644,"versions":4645,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4647},"package:npm:gensync","gensync-102f0859","npm:gensync","gensync",[607],[4646],"1.0.0-beta.2",[94,103],{"id":4649,"slug":4650,"identity":4651,"label":4652,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4653,"versions":4654,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4656},"package:npm:get-east-asian-width","get-east-asian-width-fa28f6a7","npm:get-east-asian-width","get-east-asian-width",[607],[4655],"1.5.0",[94,103],{"id":4658,"slug":4659,"identity":4660,"label":4661,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4662,"versions":4663,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4664},"package:npm:get-intrinsic","get-intrinsic-2b696d7d","npm:get-intrinsic","get-intrinsic",[607],[1737],[94,103],{"id":4666,"slug":4667,"identity":4668,"label":4669,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4670,"versions":4671,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4672},"package:npm:get-nonce","get-nonce-a5be7768","npm:get-nonce","get-nonce",[607],[1638],[94,103],{"id":4674,"slug":4675,"identity":4676,"label":4677,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4678,"versions":4679,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4680},"package:npm:get-own-enumerable-keys","get-own-enumerable-keys-eaae0cb2","npm:get-own-enumerable-keys","get-own-enumerable-keys",[607],[3396],[94,103],{"id":4682,"slug":4683,"identity":4684,"label":4685,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4686,"versions":4687,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4688},"package:npm:get-proto","get-proto-1cc62888","npm:get-proto","get-proto",[607],[1638],[94,103],{"id":4690,"slug":4691,"identity":4692,"label":4693,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4694,"versions":4695,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":4696},"package:npm:get-stream","get-stream-320a5eb9","npm:get-stream","get-stream",[607],[4188,3731],[94,103],{"id":4698,"slug":4699,"identity":4700,"label":4701,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4702,"versions":4703,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4704},"package:pypi:ghp-import","ghp-import-17055206","pypi:ghp-import","ghp-import",[561],[2880],[56],{"id":4706,"slug":4707,"identity":4708,"label":4709,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4710,"versions":4711,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4713},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[763],[4712],"4.0.12",[56],{"id":4715,"slug":4716,"identity":4717,"label":4718,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4719,"versions":4720,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4721},"package:npm:github-slugger","github-slugger-71153285","npm:github-slugger","github-slugger",[774],[3076],[94,103],{"id":4723,"slug":4724,"identity":4725,"label":4726,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4727,"versions":4728,"dossier":47,"occurrenceCount":810,"directOccurrenceCount":39,"evidenceFiles":4730},"package:npm:glob-parent","glob-parent-3d212448","npm:glob-parent","glob-parent",[774],[4729,3103],"5.1.2",[94,103],{"id":4732,"slug":4733,"identity":4734,"label":4735,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4736,"versions":4737,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":4739},"package:npm:globals","globals-6245888b","npm:globals","globals",[607],[4738],"17.12.0",[94],{"id":4741,"slug":4742,"identity":4743,"label":4744,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4745,"versions":4746,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4748},"package:npm:goober","goober-129a261c","npm:goober","goober",[607],[4747],"2.1.19",[94,103],{"id":4750,"slug":4751,"identity":4752,"label":4753,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4754,"versions":4755,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4757},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[561],[4756],"1.75.5",[103,56],{"id":4759,"slug":4760,"identity":4761,"label":4762,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4763,"versions":4764,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4766},"package:npm:gopd","gopd-3abcb949","npm:gopd","gopd",[607],[4765],"1.2.0",[94,103],{"id":4768,"slug":4769,"identity":4770,"label":4771,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4772,"versions":4773,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4775},"package:npm:graceful-fs","graceful-fs-0b6c8932","npm:graceful-fs","graceful-fs",[774],[4774],"4.2.11",[94,103],{"id":4777,"slug":4778,"identity":4779,"label":4780,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4781,"versions":4784,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4786},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[607,4782,4783],"MIT AND PSF-2.0","MIT AND Python-2.0",[4785],"3.5.6",[103,56],{"id":4788,"slug":4789,"identity":4790,"label":4791,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4792,"versions":4793,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4794},"package:pypi:griffelib","griffelib-750f9275","pypi:griffelib","griffelib",[774],[922],[103,56],{"id":4796,"slug":4797,"identity":4798,"label":4799,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4800,"versions":4801,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4802},"package:npm:has-symbols","has-symbols-4abfccb0","npm:has-symbols","has-symbols",[607],[2468],[94,103],{"id":4804,"slug":4805,"identity":4806,"label":4807,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4808,"versions":4809,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4810},"package:npm:has-tostringtag","has-tostringtag-ca3c086c","npm:has-tostringtag","has-tostringtag",[607],[3438],[94,103],{"id":4812,"slug":4813,"identity":4814,"label":4815,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4816,"versions":4817,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4819},"package:npm:hashery","hashery-699de3fd","npm:hashery","hashery",[607],[4818],"1.5.1",[94],{"id":4821,"slug":4822,"identity":4823,"label":4824,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4825,"versions":4826,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4828},"package:npm:hasown","hasown-c4159556","npm:hasown","hasown",[607],[4827],"2.0.4",[94,103],{"id":4830,"slug":4831,"identity":4832,"label":4833,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4834,"versions":4835,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4836},"package:npm:hast-util-from-html","hast-util-from-html-b7fa7ac7","npm:hast-util-from-html","hast-util-from-html",[607],[3369],[94,103],{"id":4838,"slug":4839,"identity":4840,"label":4841,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4842,"versions":4843,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4845},"package:npm:hast-util-from-parse5","hast-util-from-parse5-4eaf729b","npm:hast-util-from-parse5","hast-util-from-parse5",[607],[4844],"8.0.3",[94,103],{"id":4847,"slug":4848,"identity":4849,"label":4850,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4851,"versions":4852,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4853},"package:npm:hast-util-has-property","hast-util-has-property-78931d31","npm:hast-util-has-property","hast-util-has-property",[607],[3527],[94,103],{"id":4855,"slug":4856,"identity":4857,"label":4858,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4859,"versions":4860,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4861},"package:npm:hast-util-heading-rank","hast-util-heading-rank-e117b11e","npm:hast-util-heading-rank","hast-util-heading-rank",[607],[3527],[94,103],{"id":4863,"slug":4864,"identity":4865,"label":4866,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4867,"versions":4868,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4869},"package:npm:hast-util-is-element","hast-util-is-element-3bc52b2c","npm:hast-util-is-element","hast-util-is-element",[607],[3527],[94,103],{"id":4871,"slug":4872,"identity":4873,"label":4874,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4875,"versions":4876,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4877},"package:npm:hast-util-parse-selector","hast-util-parse-selector-e8996606","npm:hast-util-parse-selector","hast-util-parse-selector",[607],[2459],[94,103],{"id":4879,"slug":4880,"identity":4881,"label":4882,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4883,"versions":4884,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4886},"package:npm:hast-util-raw","hast-util-raw-c7946ecc","npm:hast-util-raw","hast-util-raw",[607],[4885],"9.1.0",[94,103],{"id":4888,"slug":4889,"identity":4890,"label":4891,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4892,"versions":4893,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4895},"package:npm:hast-util-select","hast-util-select-463d3ede","npm:hast-util-select","hast-util-select",[607],[4894],"6.0.4",[94,103],{"id":4897,"slug":4898,"identity":4899,"label":4900,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4901,"versions":4902,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4904},"package:npm:hast-util-to-html","hast-util-to-html-f4ac12ec","npm:hast-util-to-html","hast-util-to-html",[607],[4903],"9.0.5",[94,103],{"id":4906,"slug":4907,"identity":4908,"label":4909,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4910,"versions":4911,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4913},"package:npm:hast-util-to-jsx-runtime","hast-util-to-jsx-runtime-7e0c3661","npm:hast-util-to-jsx-runtime","hast-util-to-jsx-runtime",[607],[4912],"2.3.6",[94,103],{"id":4915,"slug":4916,"identity":4917,"label":4918,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4919,"versions":4920,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4922},"package:npm:hast-util-to-parse5","hast-util-to-parse5-89ad8f13","npm:hast-util-to-parse5","hast-util-to-parse5",[607],[4921],"8.0.1",[94,103],{"id":4924,"slug":4925,"identity":4926,"label":4927,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4928,"versions":4929,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4930},"package:npm:hast-util-to-string","hast-util-to-string-936c8d7e","npm:hast-util-to-string","hast-util-to-string",[607],[3167],[94,103],{"id":4932,"slug":4933,"identity":4934,"label":4935,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4936,"versions":4937,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4938},"package:npm:hast-util-whitespace","hast-util-whitespace-8daf8cab","npm:hast-util-whitespace","hast-util-whitespace",[607],[3527],[94,103],{"id":4940,"slug":4941,"identity":4942,"label":4943,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4944,"versions":4945,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4946},"package:npm:hastscript","hastscript-3c8216dc","npm:hastscript","hastscript",[607],[3731],[94,103],{"id":4948,"slug":4949,"identity":4950,"label":4951,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4952,"versions":4953,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4955},"package:npm:hermes-estree","hermes-estree-aea47267","npm:hermes-estree","hermes-estree",[607],[4954],"0.25.1",[94],{"id":4957,"slug":4958,"identity":4959,"label":4960,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4961,"versions":4962,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":4963},"package:npm:hermes-parser","hermes-parser-e7c3b0a8","npm:hermes-parser","hermes-parser",[607],[4954],[94],{"id":4965,"slug":4966,"identity":4967,"label":4968,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4969,"versions":4970,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4972},"package:npm:hono","hono-02d807eb","npm:hono","hono",[607],[4971],"4.13.13",[94,103],{"id":4974,"slug":4975,"identity":4976,"label":4977,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4978,"versions":4979,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4981},"package:npm:hookified","hookified-81aa52fa","npm:hookified","hookified",[607],[4980,1435],"1.15.1",[94],{"id":4983,"slug":4984,"identity":4985,"label":4986,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4987,"versions":4988,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4989},"package:npm:html-url-attributes","html-url-attributes-f6365024","npm:html-url-attributes","html-url-attributes",[607],[3167],[94,103],{"id":4991,"slug":4992,"identity":4993,"label":4994,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":4995,"versions":4996,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":4997},"package:npm:html-void-elements","html-void-elements-fe14cfa5","npm:html-void-elements","html-void-elements",[607],[3527],[94,103],{"id":4999,"slug":5000,"identity":5001,"label":5002,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5003,"versions":5004,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5005},"package:npm:http-errors","http-errors-a224027f","npm:http-errors","http-errors",[607],[3220],[94,103],{"id":5007,"slug":5008,"identity":5009,"label":5010,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5011,"versions":5012,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5014},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[596],[5013],"1.0.9",[103,56],{"id":5016,"slug":5017,"identity":5018,"label":5019,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5020,"versions":5021,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5022},"package:npm:https-proxy-agent","https-proxy-agent-0ae16386","npm:https-proxy-agent","https-proxy-agent",[607],[3953],[94,103],{"id":5024,"slug":5025,"identity":5026,"label":5027,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5028,"versions":5029,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5031},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[607],[5030],"0.9.0",[103,56],{"id":5033,"slug":5034,"identity":5035,"label":5036,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5037,"versions":5038,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":5040},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[596],[5039],"0.28.1",[103,56],{"id":5042,"slug":5043,"identity":5044,"label":5045,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5046,"versions":5047,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5048},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[607],[1647],[103,56],{"id":5050,"slug":5051,"identity":5052,"label":5053,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5054,"versions":5055,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5056},"package:npm:human-signals","human-signals-f5f4f158","npm:human-signals","human-signals",[561],[2880,4921],[94,103],{"id":5058,"slug":5059,"identity":5060,"label":5061,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5062,"versions":5063,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5064},"package:pypi:hyperframe","hyperframe-e8ff0952","pypi:hyperframe","hyperframe",[607],[4526],[103,56],{"id":5066,"slug":5067,"identity":5068,"label":5069,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5070,"versions":5071,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5072},"package:npm:iconv-lite","iconv-lite-cfec4972","npm:iconv-lite","iconv-lite",[607],[3697],[94,103],{"id":5074,"slug":5075,"identity":5076,"label":5077,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5078,"versions":5079,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5081},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[607],[5080],"2.6.20",[56],{"id":5083,"slug":5084,"identity":5085,"label":5086,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5087,"versions":5088,"dossier":47,"occurrenceCount":810,"directOccurrenceCount":39,"evidenceFiles":5090},"package:npm:ignore","ignore-3015b1fc","npm:ignore","ignore",[607],[3094,5089],"7.0.9",[94,103],{"id":5092,"slug":5093,"identity":5094,"label":5095,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5096,"versions":5097,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5099},"package:npm:immer","immer-55532025","npm:immer","immer",[607],[5098],"11.1.18",[94,103],{"id":5101,"slug":5102,"identity":5103,"label":5104,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5105,"versions":5106,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5108},"package:npm:import-fresh","import-fresh-66023a8c","npm:import-fresh","import-fresh",[607],[5107],"3.3.1",[94,103],{"id":5110,"slug":5111,"identity":5112,"label":5113,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5114,"versions":5115,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5116},"package:npm:imurmurhash","imurmurhash-24981ac0","npm:imurmurhash","imurmurhash",[607],[3935],[94],{"id":5118,"slug":5119,"identity":5120,"label":5121,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5122,"versions":5123,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5124},"package:npm:inherits","inherits-bef218e5","npm:inherits","inherits",[774],[4827],[94,103],{"id":5126,"slug":5127,"identity":5128,"label":5129,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5130,"versions":5131,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5133},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[607],[5132],"2.3.1",[56],{"id":5135,"slug":5136,"identity":5137,"label":5138,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5139,"versions":5140,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5142},"package:npm:inline-style-parser","inline-style-parser-1aeed0d8","npm:inline-style-parser","inline-style-parser",[607],[5141],"0.2.7",[94,103],{"id":5144,"slug":5145,"identity":5146,"label":5147,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5148,"versions":5149,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":5150},"package:npm:input-otp","input-otp-b2c180c5","npm:input-otp","input-otp",[607],[4655],[94,103],{"id":5152,"slug":5153,"identity":5154,"label":5155,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5156,"versions":5157,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5158},"package:npm:internmap","internmap-00fa1d76","npm:internmap","internmap",[774],[3369],[94,103],{"id":5160,"slug":5161,"identity":5162,"label":5163,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5164,"versions":5165,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5167},"package:npm:ipaddr.js","ipaddr-js-20a3bae6","npm:ipaddr.js","ipaddr.js",[607],[5166],"1.9.1",[94,103],{"id":5169,"slug":5170,"identity":5171,"label":5172,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5173,"versions":5174,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5176},"package:pypi:ipdb","ipdb-fbd53910","pypi:ipdb","ipdb",[596],[5175],"0.13.13",[56],{"id":5178,"slug":5179,"identity":5180,"label":5181,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5182,"versions":5183,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5185},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[596],[5184],"9.17.1",[56],{"id":5187,"slug":5188,"identity":5189,"label":5190,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5191,"versions":5192,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5193},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[763],[1710],[56],{"id":5195,"slug":5196,"identity":5197,"label":5198,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5199,"versions":5200,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5201},"package:npm:is-alphabetical","is-alphabetical-796b345e","npm:is-alphabetical","is-alphabetical",[607],[3220],[94,103],{"id":5203,"slug":5204,"identity":5205,"label":5206,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5207,"versions":5208,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5209},"package:npm:is-alphanumerical","is-alphanumerical-7faaa48c","npm:is-alphanumerical","is-alphanumerical",[607],[3220],[94,103],{"id":5211,"slug":5212,"identity":5213,"label":5214,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5215,"versions":5216,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5218},"package:npm:is-arrayish","is-arrayish-aba830f6","npm:is-arrayish","is-arrayish",[607],[5217],"0.2.1",[94,103],{"id":5220,"slug":5221,"identity":5222,"label":5223,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5224,"versions":5225,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5226},"package:npm:is-decimal","is-decimal-2f11a7f7","npm:is-decimal","is-decimal",[607],[3220],[94,103],{"id":5228,"slug":5229,"identity":5230,"label":5231,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5232,"versions":5233,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5234},"package:npm:is-docker","is-docker-8be7f538","npm:is-docker","is-docker",[607],[3527],[94,103],{"id":5236,"slug":5237,"identity":5238,"label":5239,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5240,"versions":5241,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5242},"package:npm:is-extglob","is-extglob-1afbb12e","npm:is-extglob","is-extglob",[607],[3484],[94,103],{"id":5244,"slug":5245,"identity":5246,"label":5247,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5248,"versions":5249,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5251},"package:npm:is-glob","is-glob-dc8c90d2","npm:is-glob","is-glob",[607],[5250],"4.0.3",[94,103],{"id":5253,"slug":5254,"identity":5255,"label":5256,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5257,"versions":5258,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5259},"package:npm:is-hexadecimal","is-hexadecimal-f99521ce","npm:is-hexadecimal","is-hexadecimal",[607],[3220],[94,103],{"id":5261,"slug":5262,"identity":5263,"label":5264,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5265,"versions":5266,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5267},"package:npm:is-in-ssh","is-in-ssh-f5e90a30","npm:is-in-ssh","is-in-ssh",[607],[3396],[94,103],{"id":5269,"slug":5270,"identity":5271,"label":5272,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5273,"versions":5274,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5275},"package:npm:is-inside-container","is-inside-container-686bd0fe","npm:is-inside-container","is-inside-container",[607],[3396],[94,103],{"id":5277,"slug":5278,"identity":5279,"label":5280,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5281,"versions":5282,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5283},"package:npm:is-interactive","is-interactive-195b706b","npm:is-interactive","is-interactive",[607],[3076],[94,103],{"id":5285,"slug":5286,"identity":5287,"label":5288,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5289,"versions":5290,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5292},"package:npm:is-number","is-number-c0feb6a5","npm:is-number","is-number",[607],[5291],"7.0.0",[94,103],{"id":5294,"slug":5295,"identity":5296,"label":5297,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5298,"versions":5299,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5300},"package:npm:is-obj","is-obj-ef6d3426","npm:is-obj","is-obj",[607],[3527],[94,103],{"id":5302,"slug":5303,"identity":5304,"label":5305,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5306,"versions":5307,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5308},"package:npm:is-plain-obj","is-plain-obj-f8b24205","npm:is-plain-obj","is-plain-obj",[607],[3413],[94,103],{"id":5310,"slug":5311,"identity":5312,"label":5313,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5314,"versions":5315,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5316},"package:npm:is-promise","is-promise-04c84dd0","npm:is-promise","is-promise",[607],[2459],[94,103],{"id":5318,"slug":5319,"identity":5320,"label":5321,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5322,"versions":5323,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5324},"package:npm:is-regexp","is-regexp-2d0c3977","npm:is-regexp","is-regexp",[607],[3456],[94,103],{"id":5326,"slug":5327,"identity":5328,"label":5329,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5330,"versions":5331,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5332},"package:npm:is-stream","is-stream-cebd7dab","npm:is-stream","is-stream",[607],[3220,4335],[94,103],{"id":5334,"slug":5335,"identity":5336,"label":5337,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5338,"versions":5339,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5340},"package:npm:is-unicode-supported","is-unicode-supported-28b534d6","npm:is-unicode-supported","is-unicode-supported",[607],[1737,2880],[94,103],{"id":5342,"slug":5343,"identity":5344,"label":5345,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5346,"versions":5347,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5348},"package:npm:is-wsl","is-wsl-02f7fa6a","npm:is-wsl","is-wsl",[607],[2777],[94,103],{"id":5350,"slug":5351,"identity":5352,"label":5353,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5354,"versions":5355,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5357},"package:npm:isbot","isbot-62434f54","npm:isbot","isbot",[656],[5356],"5.1.39",[94,103],{"id":5359,"slug":5360,"identity":5361,"label":5362,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5363,"versions":5364,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5366},"package:npm:isexe","isexe-47f89bdf","npm:isexe","isexe",[773,774],[3076,5365],"3.1.5",[94,103],{"id":5368,"slug":5369,"identity":5370,"label":5371,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5372,"versions":5373,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5374},"package:pypi:isodate","isodate-fdef8b9b","pypi:isodate","isodate",[596],[3697],[103,56],{"id":5376,"slug":5377,"identity":5378,"label":5379,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5380,"versions":5381,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5383},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[607],[5382],"9.0.2",[56],{"id":5385,"slug":5386,"identity":5387,"label":5388,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5389,"versions":5390,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5392},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[607],[5391],"0.20.1",[56],{"id":5394,"slug":5395,"identity":5396,"label":5397,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5398,"versions":5399,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5401},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[607],[5400],"0.17.0",[103,56],{"id":5403,"slug":5404,"identity":5405,"label":5406,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5407,"versions":5408,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5410},"package:npm:jiti","jiti-82df3f95","npm:jiti","jiti",[607],[5409],"2.7.0",[94,103],{"id":5412,"slug":5413,"identity":5414,"label":5415,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5416,"versions":5417,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5419},"package:npm:jose","jose-3db1b283","npm:jose","jose",[607],[5418],"6.2.3",[94,103],{"id":5421,"slug":5422,"identity":5423,"label":5424,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5425,"versions":5426,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5427},"package:npm:js-tokens","js-tokens-8b3f06fa","npm:js-tokens","js-tokens",[607],[2459],[94,103],{"id":5429,"slug":5430,"identity":5431,"label":5432,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5433,"versions":5434,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5435},"package:npm:jsesc","jsesc-96b39045","npm:jsesc","jsesc",[607],[3456],[94,103],{"id":5437,"slug":5438,"identity":5439,"label":5440,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5441,"versions":5442,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5443},"package:npm:json-parse-even-better-errors","json-parse-even-better-errors-49f997fe","npm:json-parse-even-better-errors","json-parse-even-better-errors",[607],[5132],[94,103],{"id":5445,"slug":5446,"identity":5447,"label":5448,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5449,"versions":5450,"dossier":47,"occurrenceCount":810,"directOccurrenceCount":39,"evidenceFiles":5451},"package:npm:json-schema-traverse","json-schema-traverse-5fe5e658","npm:json-schema-traverse","json-schema-traverse",[607],[2450,3396],[94,103],{"id":5453,"slug":5454,"identity":5455,"label":5456,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5457,"versions":5458,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5460},"package:npm:json-schema-typed","json-schema-typed-e82a9ee2","npm:json-schema-typed","json-schema-typed",[1130],[5459],"8.0.2",[94,103],{"id":5462,"slug":5463,"identity":5464,"label":5465,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5466,"versions":5467,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5468},"package:npm:json-stable-stringify-without-jsonify","json-stable-stringify-without-jsonify-58ac8634","npm:json-stable-stringify-without-jsonify","json-stable-stringify-without-jsonify",[607],[1638],[94],{"id":5470,"slug":5471,"identity":5472,"label":5473,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5474,"versions":5475,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5477},"package:npm:json5","json5-2e47090b","npm:json5","json5",[607],[5476],"2.2.3",[94,103],{"id":5479,"slug":5480,"identity":5481,"label":5482,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5483,"versions":5484,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5486},"package:npm:jsonfile","jsonfile-a7643986","npm:jsonfile","jsonfile",[607],[5485],"6.2.1",[94,103],{"id":5488,"slug":5489,"identity":5490,"label":5491,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5492,"versions":5493,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5495},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[607],[5494],"4.26.0",[103,56],{"id":5497,"slug":5498,"identity":5499,"label":5500,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5501,"versions":5502,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5504},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[607],[5503],"2025.9.1",[103,56],{"id":5506,"slug":5507,"identity":5508,"label":5509,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5510,"versions":5511,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5513},"package:npm:keyv","keyv-f710ed0f","npm:keyv","keyv",[607],[5512],"5.6.0",[94],{"id":5515,"slug":5516,"identity":5517,"label":5518,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5519,"versions":5520,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5522},"package:npm:kleur","kleur-37f67ac0","npm:kleur","kleur",[607],[794,5521],"4.1.5",[94,103],{"id":5524,"slug":5525,"identity":5526,"label":5527,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5528,"versions":5529,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5530},"package:npm:levn","levn-1b7ee804","npm:levn","levn",[607],[2450],[94],{"id":5532,"slug":5533,"identity":5534,"label":5535,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5536,"versions":5537,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5538},"package:pypi:librt","librt-be98c166","pypi:librt","librt",[607],[1032],[56],{"id":5540,"slug":5541,"identity":5542,"label":5543,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5544,"versions":5545,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5547},"package:pypi:libsass","libsass-a516c5c0","pypi:libsass","libsass",[607],[5546],"0.23.0",[56],{"id":5549,"slug":5550,"identity":5551,"label":5552,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5553,"versions":5554,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5557},"package:npm:lightningcss","lightningcss-c58528d1","npm:lightningcss","lightningcss",[884],[5555,5556],"1.32.0","1.33.0",[94,103],{"id":5559,"slug":5560,"identity":5561,"label":5562,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5563,"versions":5564,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5565},"package:npm:lightningcss-android-arm64","lightningcss-android-arm64-9590ce22","npm:lightningcss-android-arm64","lightningcss-android-arm64",[884],[5555,5556],[94,103],{"id":5567,"slug":5568,"identity":5569,"label":5570,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5571,"versions":5572,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5573},"package:npm:lightningcss-darwin-arm64","lightningcss-darwin-arm64-f50d3ffb","npm:lightningcss-darwin-arm64","lightningcss-darwin-arm64",[884],[5555,5556],[94,103],{"id":5575,"slug":5576,"identity":5577,"label":5578,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5579,"versions":5580,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5581},"package:npm:lightningcss-darwin-x64","lightningcss-darwin-x64-d1e6258e","npm:lightningcss-darwin-x64","lightningcss-darwin-x64",[884],[5555,5556],[94,103],{"id":5583,"slug":5584,"identity":5585,"label":5586,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5587,"versions":5588,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5589},"package:npm:lightningcss-freebsd-x64","lightningcss-freebsd-x64-980efbea","npm:lightningcss-freebsd-x64","lightningcss-freebsd-x64",[884],[5555,5556],[94,103],{"id":5591,"slug":5592,"identity":5593,"label":5594,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5595,"versions":5596,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5597},"package:npm:lightningcss-linux-arm-gnueabihf","lightningcss-linux-arm-gnueabihf-fa17a0b9","npm:lightningcss-linux-arm-gnueabihf","lightningcss-linux-arm-gnueabihf",[884],[5555,5556],[94,103],{"id":5599,"slug":5600,"identity":5601,"label":5602,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5603,"versions":5604,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5605},"package:npm:lightningcss-linux-arm64-gnu","lightningcss-linux-arm64-gnu-94e49992","npm:lightningcss-linux-arm64-gnu","lightningcss-linux-arm64-gnu",[884],[5555,5556],[94,103],{"id":5607,"slug":5608,"identity":5609,"label":5610,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5611,"versions":5612,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5613},"package:npm:lightningcss-linux-arm64-musl","lightningcss-linux-arm64-musl-6ab82229","npm:lightningcss-linux-arm64-musl","lightningcss-linux-arm64-musl",[884],[5555,5556],[94,103],{"id":5615,"slug":5616,"identity":5617,"label":5618,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5619,"versions":5620,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5621},"package:npm:lightningcss-linux-x64-gnu","lightningcss-linux-x64-gnu-7ca4fe6b","npm:lightningcss-linux-x64-gnu","lightningcss-linux-x64-gnu",[884],[5555,5556],[94,103],{"id":5623,"slug":5624,"identity":5625,"label":5626,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5627,"versions":5628,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5629},"package:npm:lightningcss-linux-x64-musl","lightningcss-linux-x64-musl-58b7df26","npm:lightningcss-linux-x64-musl","lightningcss-linux-x64-musl",[884],[5555,5556],[94,103],{"id":5631,"slug":5632,"identity":5633,"label":5634,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5635,"versions":5636,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5637},"package:npm:lightningcss-win32-arm64-msvc","lightningcss-win32-arm64-msvc-611f8e1b","npm:lightningcss-win32-arm64-msvc","lightningcss-win32-arm64-msvc",[884],[5555,5556],[94,103],{"id":5639,"slug":5640,"identity":5641,"label":5642,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5643,"versions":5644,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":5645},"package:npm:lightningcss-win32-x64-msvc","lightningcss-win32-x64-msvc-a0bbc0ce","npm:lightningcss-win32-x64-msvc","lightningcss-win32-x64-msvc",[884],[5555,5556],[94,103],{"id":5647,"slug":5648,"identity":5649,"label":5650,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5651,"versions":5652,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5654},"package:pypi:limits","limits-3fbfd900","pypi:limits","limits",[607],[5653],"5.8.0",[103,56],{"id":5656,"slug":5657,"identity":5658,"label":5659,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5660,"versions":5661,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5662},"package:npm:lines-and-columns","lines-and-columns-2a720476","npm:lines-and-columns","lines-and-columns",[607],[1150],[94,103],{"id":5664,"slug":5665,"identity":5666,"label":5667,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5668,"versions":5670,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5672},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[561,1130,5669,763],"BSD-2-Clause AND Apache-2.0 WITH LLVM-exception",[5671],"0.50.0",[103,56],{"id":5674,"slug":5675,"identity":5676,"label":5677,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5678,"versions":5679,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5681},"package:npm:locate-path","locate-path-b0cb3d76","npm:locate-path","locate-path",[607],[5680],"6.0.0",[94],{"id":5683,"slug":5684,"identity":5685,"label":5686,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5687,"versions":5688,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5689},"package:npm:log-symbols","log-symbols-772a44bf","npm:log-symbols","log-symbols",[607],[5680],[94,103],{"id":5691,"slug":5692,"identity":5693,"label":5694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5695,"versions":5696,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":5697},"package:pypi:loguru","loguru-e43ce3bb","pypi:loguru","loguru",[607],[1567],[103,56],{"id":5699,"slug":5700,"identity":5701,"label":5702,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5703,"versions":5704,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5705},"package:npm:longest-streak","longest-streak-29a5f621","npm:longest-streak","longest-streak",[607],[3456],[94,103],{"id":5707,"slug":5708,"identity":5709,"label":5710,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5711,"versions":5712,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5713},"package:pypi:loudness","loudness-06e89bbf","pypi:loudness","loudness",[607],[4586],[103,56],{"id":5715,"slug":5716,"identity":5717,"label":5718,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5719,"versions":5720,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5721},"package:npm:lru-cache","lru-cache-e88912e8","npm:lru-cache","lru-cache",[773,774],[4422],[94,103],{"id":5723,"slug":5724,"identity":5725,"label":5726,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5727,"versions":5728,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":5730},"package:npm:lucide-react","lucide-react-a154fc81","npm:lucide-react","lucide-react",[774],[5729],"1.48.0",[94,103],{"id":5732,"slug":5733,"identity":5734,"label":5735,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5736,"versions":5737,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5739},"package:npm:magic-string","magic-string-57707138","npm:magic-string","magic-string",[607],[5738],"0.30.21",[94,103],{"id":5741,"slug":5742,"identity":5743,"label":5744,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5745,"versions":5746,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5747},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[607],[1041],[56],{"id":5749,"slug":5750,"identity":5751,"label":5752,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5753,"versions":5754,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5755},"package:npm:markdown-table","markdown-table-6bc447bb","npm:markdown-table","markdown-table",[607],[2768],[94,103],{"id":5757,"slug":5758,"identity":5759,"label":5760,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5761,"versions":5762,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5763},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[596],[2768],[103,56],{"id":5765,"slug":5766,"identity":5767,"label":5768,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5769,"versions":5770,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5771},"package:npm:math-intrinsics","math-intrinsics-8ccaf44c","npm:math-intrinsics","math-intrinsics",[607],[2468],[94,103],{"id":5773,"slug":5774,"identity":5775,"label":5776,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5777,"versions":5778,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5779},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[596],[3298],[56],{"id":5781,"slug":5782,"identity":5783,"label":5784,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5785,"versions":5786,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5787},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[607],[1532],[56],{"id":5789,"slug":5790,"identity":5791,"label":5792,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5793,"versions":5794,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5795},"package:npm:mdast-util-find-and-replace","mdast-util-find-and-replace-a446a0eb","npm:mdast-util-find-and-replace","mdast-util-find-and-replace",[607],[2759],[94,103],{"id":5797,"slug":5798,"identity":5799,"label":5800,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5801,"versions":5802,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5803},"package:npm:mdast-util-from-markdown","mdast-util-from-markdown-400c606c","npm:mdast-util-from-markdown","mdast-util-from-markdown",[607],[3369],[94,103],{"id":5805,"slug":5806,"identity":5807,"label":5808,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5809,"versions":5810,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5811},"package:npm:mdast-util-gfm","mdast-util-gfm-091e29c3","npm:mdast-util-gfm","mdast-util-gfm",[607],[3456],[94,103],{"id":5813,"slug":5814,"identity":5815,"label":5816,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5817,"versions":5818,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5819},"package:npm:mdast-util-gfm-autolink-literal","mdast-util-gfm-autolink-literal-48f344f0","npm:mdast-util-gfm-autolink-literal","mdast-util-gfm-autolink-literal",[607],[3220],[94,103],{"id":5821,"slug":5822,"identity":5823,"label":5824,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5825,"versions":5826,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5827},"package:npm:mdast-util-gfm-footnote","mdast-util-gfm-footnote-bd727231","npm:mdast-util-gfm-footnote","mdast-util-gfm-footnote",[607],[2880],[94,103],{"id":5829,"slug":5830,"identity":5831,"label":5832,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5833,"versions":5834,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5835},"package:npm:mdast-util-gfm-strikethrough","mdast-util-gfm-strikethrough-190e64fd","npm:mdast-util-gfm-strikethrough","mdast-util-gfm-strikethrough",[607],[3076],[94,103],{"id":5837,"slug":5838,"identity":5839,"label":5840,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5841,"versions":5842,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5843},"package:npm:mdast-util-gfm-table","mdast-util-gfm-table-a1aad123","npm:mdast-util-gfm-table","mdast-util-gfm-table",[607],[3076],[94,103],{"id":5845,"slug":5846,"identity":5847,"label":5848,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5849,"versions":5850,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5851},"package:npm:mdast-util-gfm-task-list-item","mdast-util-gfm-task-list-item-268dddc7","npm:mdast-util-gfm-task-list-item","mdast-util-gfm-task-list-item",[607],[3076],[94,103],{"id":5853,"slug":5854,"identity":5855,"label":5856,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5857,"versions":5858,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5859},"package:npm:mdast-util-mdx-expression","mdast-util-mdx-expression-561b68a8","npm:mdast-util-mdx-expression","mdast-util-mdx-expression",[607],[3220],[94,103],{"id":5861,"slug":5862,"identity":5863,"label":5864,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5865,"versions":5866,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5867},"package:npm:mdast-util-mdx-jsx","mdast-util-mdx-jsx-904d32a8","npm:mdast-util-mdx-jsx","mdast-util-mdx-jsx",[607],[3841],[94,103],{"id":5869,"slug":5870,"identity":5871,"label":5872,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5873,"versions":5874,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5875},"package:npm:mdast-util-mdxjs-esm","mdast-util-mdxjs-esm-b0facab2","npm:mdast-util-mdxjs-esm","mdast-util-mdxjs-esm",[607],[3220],[94,103],{"id":5877,"slug":5878,"identity":5879,"label":5880,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5881,"versions":5882,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5883},"package:npm:mdast-util-phrasing","mdast-util-phrasing-29a5c68e","npm:mdast-util-phrasing","mdast-util-phrasing",[607],[3413],[94,103],{"id":5885,"slug":5886,"identity":5887,"label":5888,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5889,"versions":5890,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5891},"package:npm:mdast-util-to-markdown","mdast-util-to-markdown-19aea245","npm:mdast-util-to-markdown","mdast-util-to-markdown",[607],[4002],[94,103],{"id":5893,"slug":5894,"identity":5895,"label":5896,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5897,"versions":5898,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5899},"package:npm:mdast-util-to-string","mdast-util-to-string-04f6a9c9","npm:mdast-util-to-string","mdast-util-to-string",[607],[2459],[94,103],{"id":5901,"slug":5902,"identity":5903,"label":5904,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5905,"versions":5906,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5908},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[607],[5907],"0.1.2",[56],{"id":5910,"slug":5911,"identity":5912,"label":5913,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5914,"versions":5915,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5916},"package:npm:media-typer","media-typer-fd5f066e","npm:media-typer","media-typer",[607],[2468],[94,103],{"id":5918,"slug":5919,"identity":5920,"label":5921,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5922,"versions":5923,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5924},"package:npm:merge-descriptors","merge-descriptors-16241c3a","npm:merge-descriptors","merge-descriptors",[607],[3076],[94,103],{"id":5926,"slug":5927,"identity":5928,"label":5929,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5930,"versions":5931,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5932},"package:npm:merge-stream","merge-stream-d0a3d295","npm:merge-stream","merge-stream",[607],[3076],[94,103],{"id":5934,"slug":5935,"identity":5936,"label":5937,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5938,"versions":5939,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5940},"package:npm:merge2","merge2-39f0191e","npm:merge2","merge2",[607],[1453],[94,103],{"id":5942,"slug":5943,"identity":5944,"label":5945,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5946,"versions":5947,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":5948},"package:pypi:mergedeep","mergedeep-77a23f49","pypi:mergedeep","mergedeep",[607],[4206],[56],{"id":5950,"slug":5951,"identity":5952,"label":5953,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5954,"versions":5955,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5956},"package:npm:micromark","micromark-55bbc568","npm:micromark","micromark",[607],[2942],[94,103],{"id":5958,"slug":5959,"identity":5960,"label":5961,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5962,"versions":5963,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5964},"package:npm:micromark-core-commonmark","micromark-core-commonmark-195430fe","npm:micromark-core-commonmark","micromark-core-commonmark",[607],[3369],[94,103],{"id":5966,"slug":5967,"identity":5968,"label":5969,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5970,"versions":5971,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5972},"package:npm:micromark-extension-gfm","micromark-extension-gfm-d83f6864","npm:micromark-extension-gfm","micromark-extension-gfm",[607],[3527],[94,103],{"id":5974,"slug":5975,"identity":5976,"label":5977,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5978,"versions":5979,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5980},"package:npm:micromark-extension-gfm-autolink-literal","micromark-extension-gfm-autolink-literal-6fb38d16","npm:micromark-extension-gfm-autolink-literal","micromark-extension-gfm-autolink-literal",[607],[2880],[94,103],{"id":5982,"slug":5983,"identity":5984,"label":5985,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5986,"versions":5987,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5988},"package:npm:micromark-extension-gfm-footnote","micromark-extension-gfm-footnote-972092cc","npm:micromark-extension-gfm-footnote","micromark-extension-gfm-footnote",[607],[2880],[94,103],{"id":5990,"slug":5991,"identity":5992,"label":5993,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":5994,"versions":5995,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":5996},"package:npm:micromark-extension-gfm-strikethrough","micromark-extension-gfm-strikethrough-e57211a9","npm:micromark-extension-gfm-strikethrough","micromark-extension-gfm-strikethrough",[607],[2880],[94,103],{"id":5998,"slug":5999,"identity":6000,"label":6001,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6002,"versions":6003,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6004},"package:npm:micromark-extension-gfm-table","micromark-extension-gfm-table-2cfc1887","npm:micromark-extension-gfm-table","micromark-extension-gfm-table",[607],[3484],[94,103],{"id":6006,"slug":6007,"identity":6008,"label":6009,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6010,"versions":6011,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6012},"package:npm:micromark-extension-gfm-tagfilter","micromark-extension-gfm-tagfilter-39b91d25","npm:micromark-extension-gfm-tagfilter","micromark-extension-gfm-tagfilter",[607],[3076],[94,103],{"id":6014,"slug":6015,"identity":6016,"label":6017,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6018,"versions":6019,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6020},"package:npm:micromark-extension-gfm-task-list-item","micromark-extension-gfm-task-list-item-dad1b650","npm:micromark-extension-gfm-task-list-item","micromark-extension-gfm-task-list-item",[607],[2880],[94,103],{"id":6022,"slug":6023,"identity":6024,"label":6025,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6026,"versions":6027,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6028},"package:npm:micromark-factory-destination","micromark-factory-destination-293963ae","npm:micromark-factory-destination","micromark-factory-destination",[607],[3220],[94,103],{"id":6030,"slug":6031,"identity":6032,"label":6033,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6034,"versions":6035,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6036},"package:npm:micromark-factory-label","micromark-factory-label-3ab1ecf9","npm:micromark-factory-label","micromark-factory-label",[607],[3220],[94,103],{"id":6038,"slug":6039,"identity":6040,"label":6041,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6042,"versions":6043,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6044},"package:npm:micromark-factory-space","micromark-factory-space-c47a5adb","npm:micromark-factory-space","micromark-factory-space",[607],[3220],[94,103],{"id":6046,"slug":6047,"identity":6048,"label":6049,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6050,"versions":6051,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6052},"package:npm:micromark-factory-title","micromark-factory-title-ece0d9b2","npm:micromark-factory-title","micromark-factory-title",[607],[3220],[94,103],{"id":6054,"slug":6055,"identity":6056,"label":6057,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6058,"versions":6059,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6060},"package:npm:micromark-factory-whitespace","micromark-factory-whitespace-04b6efd9","npm:micromark-factory-whitespace","micromark-factory-whitespace",[607],[3220],[94,103],{"id":6062,"slug":6063,"identity":6064,"label":6065,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6066,"versions":6067,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6068},"package:npm:micromark-util-character","micromark-util-character-7601c4de","npm:micromark-util-character","micromark-util-character",[607],[3484],[94,103],{"id":6070,"slug":6071,"identity":6072,"label":6073,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6074,"versions":6075,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6076},"package:npm:micromark-util-chunked","micromark-util-chunked-101a1909","npm:micromark-util-chunked","micromark-util-chunked",[607],[3220],[94,103],{"id":6078,"slug":6079,"identity":6080,"label":6081,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6082,"versions":6083,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6084},"package:npm:micromark-util-classify-character","micromark-util-classify-character-de955105","npm:micromark-util-classify-character","micromark-util-classify-character",[607],[3220],[94,103],{"id":6086,"slug":6087,"identity":6088,"label":6089,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6090,"versions":6091,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6092},"package:npm:micromark-util-combine-extensions","micromark-util-combine-extensions-5b258c79","npm:micromark-util-combine-extensions","micromark-util-combine-extensions",[607],[3220],[94,103],{"id":6094,"slug":6095,"identity":6096,"label":6097,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6098,"versions":6099,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6100},"package:npm:micromark-util-decode-numeric-character-reference","micromark-util-decode-numeric-character-reference-69132fb7","npm:micromark-util-decode-numeric-character-reference","micromark-util-decode-numeric-character-reference",[607],[3343],[94,103],{"id":6102,"slug":6103,"identity":6104,"label":6105,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6106,"versions":6107,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6108},"package:npm:micromark-util-decode-string","micromark-util-decode-string-a0d91cc4","npm:micromark-util-decode-string","micromark-util-decode-string",[607],[3220],[94,103],{"id":6110,"slug":6111,"identity":6112,"label":6113,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6114,"versions":6115,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6116},"package:npm:micromark-util-encode","micromark-util-encode-2a1c6cb9","npm:micromark-util-encode","micromark-util-encode",[607],[3220],[94,103],{"id":6118,"slug":6119,"identity":6120,"label":6121,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6122,"versions":6123,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6124},"package:npm:micromark-util-html-tag-name","micromark-util-html-tag-name-02488597","npm:micromark-util-html-tag-name","micromark-util-html-tag-name",[607],[3220],[94,103],{"id":6126,"slug":6127,"identity":6128,"label":6129,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6130,"versions":6131,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6132},"package:npm:micromark-util-normalize-identifier","micromark-util-normalize-identifier-a9758761","npm:micromark-util-normalize-identifier","micromark-util-normalize-identifier",[607],[3220],[94,103],{"id":6134,"slug":6135,"identity":6136,"label":6137,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6138,"versions":6139,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6140},"package:npm:micromark-util-resolve-all","micromark-util-resolve-all-0f225c93","npm:micromark-util-resolve-all","micromark-util-resolve-all",[607],[3220],[94,103],{"id":6142,"slug":6143,"identity":6144,"label":6145,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6146,"versions":6147,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6148},"package:npm:micromark-util-sanitize-uri","micromark-util-sanitize-uri-44638e5e","npm:micromark-util-sanitize-uri","micromark-util-sanitize-uri",[607],[3220],[94,103],{"id":6150,"slug":6151,"identity":6152,"label":6153,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6154,"versions":6155,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6156},"package:npm:micromark-util-subtokenize","micromark-util-subtokenize-bbc2eccf","npm:micromark-util-subtokenize","micromark-util-subtokenize",[607],[2880],[94,103],{"id":6158,"slug":6159,"identity":6160,"label":6161,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6162,"versions":6163,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6164},"package:npm:micromark-util-symbol","micromark-util-symbol-0cbff0df","npm:micromark-util-symbol","micromark-util-symbol",[607],[3220],[94,103],{"id":6166,"slug":6167,"identity":6168,"label":6169,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6170,"versions":6171,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6172},"package:npm:micromark-util-types","micromark-util-types-ac5660bc","npm:micromark-util-types","micromark-util-types",[607],[3343],[94,103],{"id":6174,"slug":6175,"identity":6176,"label":6177,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6178,"versions":6179,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6181},"package:npm:micromatch","micromatch-5e92d7dd","npm:micromatch","micromatch",[607],[6180],"4.0.8",[94,103],{"id":6183,"slug":6184,"identity":6185,"label":6186,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6187,"versions":6188,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":6191},"package:npm:mime-db","mime-db-2aca89e7","npm:mime-db","mime-db",[607],[6189,6190],"1.52.0","1.54.0",[94,103],{"id":6193,"slug":6194,"identity":6195,"label":6196,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6197,"versions":6198,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":6200},"package:npm:mime-types","mime-types-a32c45ef","npm:mime-types","mime-types",[607],[6199,2759],"2.1.35",[94,103],{"id":6202,"slug":6203,"identity":6204,"label":6205,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6206,"versions":6207,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6208},"package:npm:mimic-fn","mimic-fn-1b56a239","npm:mimic-fn","mimic-fn",[607],[2880],[94,103],{"id":6210,"slug":6211,"identity":6212,"label":6213,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6214,"versions":6215,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6216},"package:npm:mimic-function","mimic-function-5b93d1fd","npm:mimic-function","mimic-function",[607],[3953],[94,103],{"id":6218,"slug":6219,"identity":6220,"label":6221,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6222,"versions":6223,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6224},"package:npm:minimist","minimist-f0c39d1e","npm:minimist","minimist",[607],[1781],[94,103],{"id":6226,"slug":6227,"identity":6228,"label":6229,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6230,"versions":6231,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6233},"package:pypi:mkdocs","mkdocs-a74efb5d","pypi:mkdocs","mkdocs",[1130],[6232],"1.6.1",[56],{"id":6235,"slug":6236,"identity":6237,"label":6238,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6239,"versions":6240,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6241},"package:pypi:mkdocs-get-deps","mkdocs-get-deps-504099a6","pypi:mkdocs-get-deps","mkdocs-get-deps",[607],[3298],[56],{"id":6243,"slug":6244,"identity":6245,"label":6246,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6247,"versions":6248,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6250},"package:pypi:mkdocs-material","mkdocs-material-59ad908c","pypi:mkdocs-material","mkdocs-material",[607],[6249],"9.7.7",[56],{"id":6252,"slug":6253,"identity":6254,"label":6255,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6256,"versions":6257,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6258},"package:pypi:mkdocs-material-extensions","mkdocs-material-extensions-9672e965","pypi:mkdocs-material-extensions","mkdocs-material-extensions",[607],[1701],[56],{"id":6260,"slug":6261,"identity":6262,"label":6263,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6264,"versions":6265,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6267},"package:pypi:mkdocs-to-pdf","mkdocs-to-pdf-41f8f7a9","pypi:mkdocs-to-pdf","mkdocs-to-pdf",[607],[6266],"0.12.1",[56],{"id":6269,"slug":6270,"identity":6271,"label":6272,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6273,"versions":6274,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6275},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[596],[1737],[103,56],{"id":6277,"slug":6278,"identity":6279,"label":6280,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6281,"versions":6282,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6284},"package:npm:ms","ms-1f5985e4","npm:ms","ms",[607],[6283],"2.1.3",[94,103],{"id":6286,"slug":6287,"identity":6288,"label":6289,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6290,"versions":6291,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6293},"package:pypi:mypy","mypy-2008b5d3","pypi:mypy","mypy",[607],[6292],"2.4.0",[56],{"id":6295,"slug":6296,"identity":6297,"label":6298,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6299,"versions":6300,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6301},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[607],[2468],[56],{"id":6303,"slug":6304,"identity":6305,"label":6306,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6307,"versions":6308,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6309},"package:npm:natural-compare","natural-compare-948a7244","npm:natural-compare","natural-compare",[607],[3140],[94],{"id":6311,"slug":6312,"identity":6313,"label":6314,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6315,"versions":6316,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6317},"package:npm:negotiator","negotiator-44ced9f0","npm:negotiator","negotiator",[607],[3396],[94,103],{"id":6319,"slug":6320,"identity":6321,"label":6322,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6323,"versions":6324,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":6325},"package:npm:next-themes","next-themes-9e7031bb","npm:next-themes","next-themes",[607],[3638],[94,103],{"id":6327,"slug":6328,"identity":6329,"label":6330,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6331,"versions":6332,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6334},"package:npm:node-releases","node-releases-e645deb1","npm:node-releases","node-releases",[607],[6333],"2.0.56",[94,103],{"id":6336,"slug":6337,"identity":6338,"label":6339,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6340,"versions":6341,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":6343},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[596,763],[6342],"1.11.0",[103,56],{"id":6345,"slug":6346,"identity":6347,"label":6348,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6349,"versions":6350,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":6351},"package:npm:npm-run-path","npm-run-path-b2a4132a","npm:npm-run-path","npm-run-path",[607],[4335,5680],[94,103],{"id":6353,"slug":6354,"identity":6355,"label":6356,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6357,"versions":6358,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6359},"package:npm:nth-check","nth-check-0cd8cb4c","npm:nth-check","nth-check",[1130],[3484],[94,103],{"id":6361,"slug":6362,"identity":6363,"label":6364,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6365,"versions":6367,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6369},"package:pypi:num2words","num2words-21434d3a","pypi:num2words","num2words",[6366],"LGPL-2.1",[6368],"0.5.14",[103,56],{"id":6371,"slug":6372,"identity":6373,"label":6374,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6375,"versions":6376,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6378},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[763],[6377],"0.68.0",[103,56],{"id":6380,"slug":6381,"identity":6382,"label":6383,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6384,"versions":6386,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6388},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[6385,763],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[6387],"2.5.4",[103,56],{"id":6390,"slug":6391,"identity":6392,"label":6393,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6394,"versions":6395,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6397},"package:npm:object-assign","object-assign-fa9dc3dc","npm:object-assign","object-assign",[607],[6396],"4.1.1",[94,103],{"id":6399,"slug":6400,"identity":6401,"label":6402,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6403,"versions":6404,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6406},"package:npm:object-inspect","object-inspect-e860635c","npm:object-inspect","object-inspect",[607],[6405],"1.13.4",[94,103],{"id":6408,"slug":6409,"identity":6410,"label":6411,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6412,"versions":6413,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6415},"package:npm:object-treeify","object-treeify-b80577d7","npm:object-treeify","object-treeify",[607],[6414],"1.1.33",[94,103],{"id":6417,"slug":6418,"identity":6419,"label":6420,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6421,"versions":6422,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6424},"package:npm:on-finished","on-finished-7268054d","npm:on-finished","on-finished",[607],[6423],"2.4.1",[94,103],{"id":6426,"slug":6427,"identity":6428,"label":6429,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6430,"versions":6431,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6432},"package:npm:once","once-15d11e4d","npm:once","once",[774],[3140],[94,103],{"id":6434,"slug":6435,"identity":6436,"label":6437,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6438,"versions":6439,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":6440},"package:npm:onetime","onetime-a2a82057","npm:onetime","onetime",[607],[4729,5291],[94,103],{"id":6442,"slug":6443,"identity":6444,"label":6445,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6446,"versions":6447,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6449},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[607],[6448],"1.24.4",[103,56],{"id":6451,"slug":6452,"identity":6453,"label":6454,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6455,"versions":6456,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6458},"package:npm:open","open-ea526a80","npm:open","open",[607],[6457],"11.0.0",[94,103],{"id":6460,"slug":6461,"identity":6462,"label":6463,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6464,"versions":6465,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":6467},"package:pypi:openai-agents","openai-agents-9a2ca669","pypi:openai-agents","openai-agents",[607],[6466],"0.13.6",[103,56],{"id":6469,"slug":6470,"identity":6471,"label":6472,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6473,"versions":6474,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6476},"package:pypi:opentelemetry-exporter-http-transport","opentelemetry-exporter-http-transport-6aa16cfc","pypi:opentelemetry-exporter-http-transport","opentelemetry-exporter-http-transport",[561],[6475],"0.66b1",[103,56],{"id":6478,"slug":6479,"identity":6480,"label":6481,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6482,"versions":6483,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6484},"package:pypi:opentelemetry-exporter-otlp-common","opentelemetry-exporter-otlp-common-1383434b","pypi:opentelemetry-exporter-otlp-common","opentelemetry-exporter-otlp-common",[561],[6475],[103,56],{"id":6486,"slug":6487,"identity":6488,"label":6489,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6490,"versions":6491,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6492},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[561],[1095],[103,56],{"id":6494,"slug":6495,"identity":6496,"label":6497,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6498,"versions":6499,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":6500},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[561],[1095],[103,56],{"id":6502,"slug":6503,"identity":6504,"label":6505,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6506,"versions":6507,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6508},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[561],[1095],[103,56],{"id":6510,"slug":6511,"identity":6512,"label":6513,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6514,"versions":6515,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":6516},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[561],[1095],[103,56],{"id":6518,"slug":6519,"identity":6520,"label":6521,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6522,"versions":6523,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6524},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[561],[6475],[103,56],{"id":6526,"slug":6527,"identity":6528,"label":6529,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6530,"versions":6531,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6533},"package:npm:optionator","optionator-8de2d3ef","npm:optionator","optionator",[607],[6532],"0.9.4",[94],{"id":6535,"slug":6536,"identity":6537,"label":6538,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6539,"versions":6540,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6542},"package:npm:ora","ora-e208f4d8","npm:ora","ora",[607],[6541],"8.2.0",[94,103],{"id":6544,"slug":6545,"identity":6546,"label":6547,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6548,"versions":6549,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6550},"package:npm:p-limit","p-limit-989e28a2","npm:p-limit","p-limit",[607],[3456],[94],{"id":6552,"slug":6553,"identity":6554,"label":6555,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6556,"versions":6557,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6558},"package:npm:p-locate","p-locate-df7c6699","npm:p-locate","p-locate",[607],[3378],[94],{"id":6560,"slug":6561,"identity":6562,"label":6563,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6564,"versions":6566,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6568},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[6565,763],"Apache-2.0 OR BSD-2-Clause",[6567],"26.3",[103,56],{"id":6570,"slug":6571,"identity":6572,"label":6573,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6574,"versions":6575,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6576},"package:pypi:paginate","paginate-5ae8b120","pypi:paginate","paginate",[607],[4299],[56],{"id":6578,"slug":6579,"identity":6580,"label":6581,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6582,"versions":6583,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6584},"package:npm:parent-module","parent-module-09f7937b","npm:parent-module","parent-module",[607],[1638],[94,103],{"id":6586,"slug":6587,"identity":6588,"label":6589,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6590,"versions":6591,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6592},"package:npm:parse-entities","parse-entities-5c37e9d8","npm:parse-entities","parse-entities",[607],[2942],[94,103],{"id":6594,"slug":6595,"identity":6596,"label":6597,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6598,"versions":6599,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6601},"package:npm:parse-json","parse-json-f7a0a4f2","npm:parse-json","parse-json",[607],[6600],"5.2.0",[94,103],{"id":6603,"slug":6604,"identity":6605,"label":6606,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6607,"versions":6608,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6609},"package:npm:parse-ms","parse-ms-29a5c8ce","npm:parse-ms","parse-ms",[607],[2459],[94,103],{"id":6611,"slug":6612,"identity":6613,"label":6614,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6615,"versions":6616,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6617},"package:npm:parse-numeric-range","parse-numeric-range-12084147","npm:parse-numeric-range","parse-numeric-range",[774],[1737],[94,103],{"id":6619,"slug":6620,"identity":6621,"label":6622,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6623,"versions":6624,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6626},"package:npm:parse5","parse5-7a4b420d","npm:parse5","parse5",[607],[6625],"7.3.0",[94,103],{"id":6628,"slug":6629,"identity":6630,"label":6631,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6632,"versions":6633,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6634},"package:npm:parseurl","parseurl-2b58ab3c","npm:parseurl","parseurl",[607],[2152],[94,103],{"id":6636,"slug":6637,"identity":6638,"label":6639,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6640,"versions":6641,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6643},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[607],[6642],"0.8.7",[56],{"id":6645,"slug":6646,"identity":6647,"label":6648,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6649,"versions":6650,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6651},"package:npm:path-browserify","path-browserify-4c14fc14","npm:path-browserify","path-browserify",[607],[1638],[94,103],{"id":6653,"slug":6654,"identity":6655,"label":6656,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6657,"versions":6658,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6659},"package:npm:path-exists","path-exists-912be959","npm:path-exists","path-exists",[607],[2459],[94],{"id":6661,"slug":6662,"identity":6663,"label":6664,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6665,"versions":6666,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":6667},"package:npm:path-key","path-key-369bc367","npm:path-key","path-key",[607],[2777,2459],[94,103],{"id":6669,"slug":6670,"identity":6671,"label":6672,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6673,"versions":6674,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6675},"package:npm:pathe","pathe-d655e854","npm:pathe","pathe",[607],[3369],[94],{"id":6677,"slug":6678,"identity":6679,"label":6680,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6681,"versions":6682,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6683},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[884],[1710],[56],{"id":6685,"slug":6686,"identity":6687,"label":6688,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6689,"versions":6690,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6692},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[774],[6691],"4.9.0",[56],{"id":6694,"slug":6695,"identity":6696,"label":6697,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6698,"versions":6699,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6700},"package:npm:picocolors","picocolors-63d33c23","npm:picocolors","picocolors",[774],[1710],[94,103],{"id":6702,"slug":6703,"identity":6704,"label":6705,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6706,"versions":6707,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":6709},"package:pypi:pipecat-ai","pipecat-ai-3fa93743","pypi:pipecat-ai","pipecat-ai",[1130],[6708],"1.14.0",[103,56],{"id":6711,"slug":6712,"identity":6713,"label":6714,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6715,"versions":6716,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6717},"package:npm:pkce-challenge","pkce-challenge-f9f15269","npm:pkce-challenge","pkce-challenge",[607],[3953],[94,103],{"id":6719,"slug":6720,"identity":6721,"label":6722,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6723,"versions":6724,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6726},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[607],[6725],"4.13.5",[56],{"id":6728,"slug":6729,"identity":6730,"label":6731,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6732,"versions":6733,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6734},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[607],[4344],[56],{"id":6736,"slug":6737,"identity":6738,"label":6739,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6740,"versions":6741,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6743},"package:npm:postcss-selector-parser","postcss-selector-parser-e1de6cba","npm:postcss-selector-parser","postcss-selector-parser",[607],[6742],"7.1.6",[94,103],{"id":6745,"slug":6746,"identity":6747,"label":6748,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6749,"versions":6750,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6752},"package:npm:powershell-utils","powershell-utils-6fdd7cc1","npm:powershell-utils","powershell-utils",[607],[6751],"0.1.0",[94,103],{"id":6754,"slug":6755,"identity":6756,"label":6757,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6758,"versions":6759,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6761},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[607],[6760],"4.7.0",[56],{"id":6763,"slug":6764,"identity":6765,"label":6766,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6767,"versions":6768,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6769},"package:npm:prelude-ls","prelude-ls-64dbf7f1","npm:prelude-ls","prelude-ls",[607],[867],[94],{"id":6771,"slug":6772,"identity":6773,"label":6774,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6775,"versions":6776,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":6778},"package:npm:prettier","prettier-48ef094b","npm:prettier","prettier",[607],[6777],"3.9.8",[94],{"id":6780,"slug":6781,"identity":6782,"label":6783,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6784,"versions":6785,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":6787},"package:npm:prettier-plugin-tailwindcss","prettier-plugin-tailwindcss-9dc36172","npm:prettier-plugin-tailwindcss","prettier-plugin-tailwindcss",[607],[6786],"0.8.1",[94],{"id":6789,"slug":6790,"identity":6791,"label":6792,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6793,"versions":6794,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6796},"package:npm:pretty-ms","pretty-ms-09063416","npm:pretty-ms","pretty-ms",[607],[6795],"9.3.0",[94,103],{"id":6798,"slug":6799,"identity":6800,"label":6801,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6802,"versions":6803,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":6805},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[596,763],[6804],"3.0.53",[103,56],{"id":6807,"slug":6808,"identity":6809,"label":6810,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6811,"versions":6812,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6814},"package:npm:prompts","prompts-86e18d33","npm:prompts","prompts",[607],[6813],"2.4.2",[94,103],{"id":6816,"slug":6817,"identity":6818,"label":6819,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6820,"versions":6821,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6823},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[561],[6822],"0.5.4",[103,56],{"id":6825,"slug":6826,"identity":6827,"label":6828,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6829,"versions":6830,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6832},"package:npm:property-information","property-information-4a9b5253","npm:property-information","property-information",[607],[6831],"7.2.0",[94,103],{"id":6834,"slug":6835,"identity":6836,"label":6837,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6838,"versions":6839,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6840},"package:npm:proxy-from-env","proxy-from-env-30b120c8","npm:proxy-from-env","proxy-from-env",[607],[2880],[94,103],{"id":6842,"slug":6843,"identity":6844,"label":6845,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6846,"versions":6847,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6849},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[596],[6848],"7.2.2",[56],{"id":6851,"slug":6852,"identity":6853,"label":6854,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6855,"versions":6856,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6857},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[774],[1532],[56],{"id":6859,"slug":6860,"identity":6861,"label":6862,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6863,"versions":6864,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6865},"package:npm:punycode","punycode-ffd39662","npm:punycode","punycode",[607],[5132],[94],{"id":6867,"slug":6868,"identity":6869,"label":6870,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6871,"versions":6872,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6874},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[607],[6873],"0.2.4",[56],{"id":6876,"slug":6877,"identity":6878,"label":6879,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6880,"versions":6881,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6883},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[596],[6882],"3.11",[103,56],{"id":6885,"slug":6886,"identity":6887,"label":6888,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6889,"versions":6890,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":6892},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[607],[6891],"2.14.1",[103,56],{"id":6894,"slug":6895,"identity":6896,"label":6897,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6898,"versions":6899,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":6901},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[607],[6900],"2.50.1",[103,56],{"id":6903,"slug":6904,"identity":6905,"label":6906,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6907,"versions":6908,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6910},"package:pypi:pydyf","pydyf-60de6213","pypi:pydyf","pydyf",[763],[6909],"0.13.0",[56],{"id":6912,"slug":6913,"identity":6914,"label":6915,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6916,"versions":6918,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6920},"package:pypi:pylint","pylint-25488847","pypi:pylint","pylint",[6917],"GPL-2.0-or-later",[6919],"4.0.10",[56],{"id":6922,"slug":6923,"identity":6924,"label":6925,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6926,"versions":6929,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6931},"package:pypi:pyphen","pyphen-9e168dac","pypi:pyphen","pyphen",[6917,6927,6928],"LGPL-2.0-or-later","MPL-1.1",[6930],"0.18.1",[56],{"id":6933,"slug":6934,"identity":6935,"label":6936,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6937,"versions":6938,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6939},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[561],[3140],[56],{"id":6941,"slug":6942,"identity":6943,"label":6944,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6945,"versions":6946,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6948},"package:pypi:pytest-rerunfailures","pytest-rerunfailures-4c7ba7f5","pypi:pytest-rerunfailures","pytest-rerunfailures",[884],[6947],"16.7",[56],{"id":6950,"slug":6951,"identity":6952,"label":6953,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6954,"versions":6955,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6956},"package:pypi:pytest-timeout","pytest-timeout-60d0ba05","pypi:pytest-timeout","pytest-timeout",[607],[6292],[56],{"id":6958,"slug":6959,"identity":6960,"label":6961,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6962,"versions":6963,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6964},"package:pypi:python-barcode","python-barcode-38ddfa72","pypi:python-barcode","python-barcode",[607],[3246],[56],{"id":6966,"slug":6967,"identity":6968,"label":6969,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6970,"versions":6971,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6973},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[763],[6972],"2.9.0.post0",[56],{"id":6975,"slug":6976,"identity":6977,"label":6978,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6979,"versions":6980,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6982},"package:pypi:python-discovery","python-discovery-6dfeea81","pypi:python-discovery","python-discovery",[607],[6981],"1.6.4",[56],{"id":6984,"slug":6985,"identity":6986,"label":6987,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6988,"versions":6990,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":6991},"package:pypi:python-gitlab","python-gitlab-ca77f17a","pypi:python-gitlab","python-gitlab",[6989],"LGPL-3.0-or-later",[4137],[56],{"id":6993,"slug":6994,"identity":6995,"label":6996,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":6997,"versions":6998,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7000},"package:pypi:python-semantic-release","python-semantic-release-abd077f0","pypi:python-semantic-release","python-semantic-release",[607],[6999],"10.7.0",[56],{"id":7002,"slug":7003,"identity":7004,"label":7005,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7006,"versions":7007,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7009},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[7008],"312",[56],{"id":7011,"slug":7012,"identity":7013,"label":7014,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7015,"versions":7016,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7018},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[607],[7017],"6.0.3",[103,56],{"id":7020,"slug":7021,"identity":7022,"label":7023,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7024,"versions":7025,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7027},"package:pypi:pyyaml-env-tag","pyyaml-env-tag-7c09b2b4","pypi:pyyaml-env-tag","pyyaml-env-tag",[607],[7026],"1.1",[56],{"id":7029,"slug":7030,"identity":7031,"label":7032,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7033,"versions":7034,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7035},"package:npm:qified","qified-75549a5f","npm:qified","qified",[607],[3766],[94],{"id":7037,"slug":7038,"identity":7039,"label":7040,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7041,"versions":7042,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7044},"package:pypi:qrcode","qrcode-dc7f5ffb","pypi:qrcode","qrcode",[763],[7043],"8.2",[56],{"id":7046,"slug":7047,"identity":7048,"label":7049,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7050,"versions":7051,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7053},"package:npm:queue-microtask","queue-microtask-3a600ba4","npm:queue-microtask","queue-microtask",[607],[7052],"1.2.3",[94,103],{"id":7055,"slug":7056,"identity":7057,"label":7058,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7059,"versions":7060,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7061},"package:npm:radix-ui","radix-ui-46d73883","npm:radix-ui","radix-ui",[607],[745],[94,103],{"id":7063,"slug":7064,"identity":7065,"label":7066,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7067,"versions":7068,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7069},"package:npm:range-parser","range-parser-64541a01","npm:range-parser","range-parser",[607],[867],[94,103],{"id":7071,"slug":7072,"identity":7073,"label":7074,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7075,"versions":7076,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7077},"package:npm:raw-body","raw-body-ab6f4962","npm:raw-body","raw-body",[607],[2759],[94,103],{"id":7079,"slug":7080,"identity":7081,"label":7082,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7083,"versions":7084,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7085},"package:npm:react","react-29607ded","npm:react","react",[607],[2907],[94,103],{"id":7087,"slug":7088,"identity":7089,"label":7090,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7091,"versions":7092,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7093},"package:npm:react-day-picker","react-day-picker-47672710","npm:react-day-picker","react-day-picker",[607],[1549],[94,103],{"id":7095,"slug":7096,"identity":7097,"label":7098,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7099,"versions":7100,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7101},"package:npm:react-dom","react-dom-fb4a1520","npm:react-dom","react-dom",[607],[2907],[94,103],{"id":7103,"slug":7104,"identity":7105,"label":7106,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7107,"versions":7108,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7110},"package:npm:react-is","react-is-d95e9978","npm:react-is","react-is",[607],[7109],"19.2.5",[94,103],{"id":7112,"slug":7113,"identity":7114,"label":7115,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7116,"versions":7117,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7119},"package:npm:react-markdown","react-markdown-62167450","npm:react-markdown","react-markdown",[607],[7118],"10.1.0",[94,103],{"id":7121,"slug":7122,"identity":7123,"label":7124,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7125,"versions":7126,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7128},"package:npm:react-redux","react-redux-683d99aa","npm:react-redux","react-redux",[607],[7127],"9.2.0",[94,103],{"id":7130,"slug":7131,"identity":7132,"label":7133,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7134,"versions":7135,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7137},"package:npm:react-remove-scroll","react-remove-scroll-fb631c55","npm:react-remove-scroll","react-remove-scroll",[607],[7136],"2.7.2",[94,103],{"id":7139,"slug":7140,"identity":7141,"label":7142,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7143,"versions":7144,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7146},"package:npm:react-remove-scroll-bar","react-remove-scroll-bar-09543480","npm:react-remove-scroll-bar","react-remove-scroll-bar",[607],[7145],"2.3.8",[94,103],{"id":7148,"slug":7149,"identity":7150,"label":7151,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7152,"versions":7153,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7155},"package:npm:react-resizable-panels","react-resizable-panels-8b9ad5c4","npm:react-resizable-panels","react-resizable-panels",[607],[7154],"4.14.1",[94,103],{"id":7157,"slug":7158,"identity":7159,"label":7160,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7161,"versions":7162,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7163},"package:npm:react-style-singleton","react-style-singleton-023f9f7d","npm:react-style-singleton","react-style-singleton",[607],[5476],[94,103],{"id":7165,"slug":7166,"identity":7167,"label":7168,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7169,"versions":7170,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7171},"package:npm:readdirp","readdirp-8a27c4bc","npm:readdirp","readdirp",[607],[4422],[94],{"id":7173,"slug":7174,"identity":7175,"label":7176,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7177,"versions":7178,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7180},"package:npm:recast","recast-8192fc08","npm:recast","recast",[607],[7179],"0.23.11",[94,103],{"id":7182,"slug":7183,"identity":7184,"label":7185,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7186,"versions":7187,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7189},"package:npm:recharts","recharts-61e9d91c","npm:recharts","recharts",[607],[7188],"3.10.1",[94,103],{"id":7191,"slug":7192,"identity":7193,"label":7194,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7195,"versions":7196,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7197},"package:npm:redux","redux-4962b903","npm:redux","redux",[607],[3953],[94,103],{"id":7199,"slug":7200,"identity":7201,"label":7202,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7203,"versions":7204,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7205},"package:npm:redux-thunk","redux-thunk-6e5de0fb","npm:redux-thunk","redux-thunk",[607],[3456],[94,103],{"id":7207,"slug":7208,"identity":7209,"label":7210,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7211,"versions":7212,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7214},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[607],[7213],"0.37.0",[103,56],{"id":7216,"slug":7217,"identity":7218,"label":7219,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7220,"versions":7221,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7222},"package:npm:refractor","refractor-d9f014dd","npm:refractor","refractor",[607],[3378],[94,103],{"id":7224,"slug":7225,"identity":7226,"label":7227,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7228,"versions":7229,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7231},"package:npm:rehype","rehype-326ca846","npm:rehype","rehype",[607],[7230],"13.0.2",[94,103],{"id":7233,"slug":7234,"identity":7235,"label":7236,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7237,"versions":7238,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7239},"package:npm:rehype-attr","rehype-attr-ab618519","npm:rehype-attr","rehype-attr",[607],[2942],[94,103],{"id":7241,"slug":7242,"identity":7243,"label":7244,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7245,"versions":7246,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7247},"package:npm:rehype-autolink-headings","rehype-autolink-headings-d314de6b","npm:rehype-autolink-headings","rehype-autolink-headings",[607],[1086],[94,103],{"id":7249,"slug":7250,"identity":7251,"label":7252,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7253,"versions":7254,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7255},"package:npm:rehype-ignore","rehype-ignore-77a2340f","npm:rehype-ignore","rehype-ignore",[607],[3369],[94,103],{"id":7257,"slug":7258,"identity":7259,"label":7260,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7261,"versions":7262,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7263},"package:npm:rehype-parse","rehype-parse-2e7c5ec2","npm:rehype-parse","rehype-parse",[607],[3731],[94,103],{"id":7265,"slug":7266,"identity":7267,"label":7268,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7269,"versions":7270,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7271},"package:npm:rehype-prism-plus","rehype-prism-plus-a723284c","npm:rehype-prism-plus","rehype-prism-plus",[607],[3343],[94,103],{"id":7273,"slug":7274,"identity":7275,"label":7276,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7277,"versions":7278,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7279},"package:npm:rehype-raw","rehype-raw-f1f2bc28","npm:rehype-raw","rehype-raw",[607],[5291],[94,103],{"id":7281,"slug":7282,"identity":7283,"label":7284,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7285,"versions":7286,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7287},"package:npm:rehype-rewrite","rehype-rewrite-674ca3a8","npm:rehype-rewrite","rehype-rewrite",[607],[2871],[94,103],{"id":7289,"slug":7290,"identity":7291,"label":7292,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7293,"versions":7294,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7295},"package:npm:rehype-slug","rehype-slug-12617363","npm:rehype-slug","rehype-slug",[607],[5680],[94,103],{"id":7297,"slug":7298,"identity":7299,"label":7300,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7301,"versions":7302,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7303},"package:npm:rehype-stringify","rehype-stringify-94c9fbb6","npm:rehype-stringify","rehype-stringify",[607],[1549],[94,103],{"id":7305,"slug":7306,"identity":7307,"label":7308,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7309,"versions":7310,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7311},"package:npm:remark-gfm","remark-gfm-7828ea76","npm:remark-gfm","remark-gfm",[607],[4335],[94,103],{"id":7313,"slug":7314,"identity":7315,"label":7316,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7317,"versions":7318,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7319},"package:npm:remark-github-blockquote-alert","remark-github-blockquote-alert-7622d9a0","npm:remark-github-blockquote-alert","remark-github-blockquote-alert",[607],[1701],[94,103],{"id":7321,"slug":7322,"identity":7323,"label":7324,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7325,"versions":7326,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7327},"package:npm:remark-parse","remark-parse-4812c797","npm:remark-parse","remark-parse",[607],[6457],[94,103],{"id":7329,"slug":7330,"identity":7331,"label":7332,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7333,"versions":7334,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7336},"package:npm:remark-rehype","remark-rehype-f68daab1","npm:remark-rehype","remark-rehype",[607],[7335],"11.1.2",[94,103],{"id":7338,"slug":7339,"identity":7340,"label":7341,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7342,"versions":7343,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7344},"package:npm:remark-stringify","remark-stringify-d466fc2a","npm:remark-stringify","remark-stringify",[607],[6457],[94,103],{"id":7346,"slug":7347,"identity":7348,"label":7349,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7350,"versions":7351,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7352},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[561],[3396],[56],{"id":7354,"slug":7355,"identity":7356,"label":7357,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7358,"versions":7359,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7360},"package:npm:require-from-string","require-from-string-c13fac7a","npm:require-from-string","require-from-string",[607],[3343],[94,103],{"id":7362,"slug":7363,"identity":7364,"label":7365,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7366,"versions":7367,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7368},"package:pypi:resampy","resampy-8b55441c","pypi:resampy","resampy",[774],[1647],[103,56],{"id":7370,"slug":7371,"identity":7372,"label":7373,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7374,"versions":7375,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":7376},"package:npm:reselect","reselect-ed47b27b","npm:reselect","reselect",[607],[6600,1611],[94,103],{"id":7378,"slug":7379,"identity":7380,"label":7381,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7382,"versions":7383,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7384},"package:npm:resolve-from","resolve-from-28917033","npm:resolve-from","resolve-from",[607],[2459],[94,103],{"id":7386,"slug":7387,"identity":7388,"label":7389,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7390,"versions":7391,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7393},"package:npm:restore-cursor","restore-cursor-87a0e680","npm:restore-cursor","restore-cursor",[607],[7392],"5.1.0",[94,103],{"id":7395,"slug":7396,"identity":7397,"label":7398,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7399,"versions":7400,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7401},"package:npm:reusify","reusify-3316f946","npm:reusify","reusify",[607],[2468],[94,103],{"id":7403,"slug":7404,"identity":7405,"label":7406,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7407,"versions":7408,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7410},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[607],[7409],"15.0.0",[56],{"id":7412,"slug":7413,"identity":7414,"label":7415,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7416,"versions":7417,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7418},"package:npm:rolldown","rolldown-53931726","npm:rolldown","rolldown",[607],[2321],[94,103],{"id":7420,"slug":7421,"identity":7422,"label":7423,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7424,"versions":7425,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7426},"package:npm:router","router-05a7fc6e","npm:router","router",[607],[1435],[94,103],{"id":7428,"slug":7429,"identity":7430,"label":7431,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7432,"versions":7433,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7435},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[607],[7434],"2026.9.1",[103,56],{"id":7437,"slug":7438,"identity":7439,"label":7440,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7441,"versions":7442,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7444},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[607],[7443],"0.16.10",[56],{"id":7446,"slug":7447,"identity":7448,"label":7449,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7450,"versions":7451,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7452},"package:npm:run-applescript","run-applescript-39774afe","npm:run-applescript","run-applescript",[607],[1086],[94,103],{"id":7454,"slug":7455,"identity":7456,"label":7457,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7458,"versions":7459,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7460},"package:npm:run-parallel","run-parallel-50a8a921","npm:run-parallel","run-parallel",[607],[4765],[94,103],{"id":7462,"slug":7463,"identity":7464,"label":7465,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7466,"versions":7467,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7468},"package:npm:safer-buffer","safer-buffer-ecb57a88","npm:safer-buffer","safer-buffer",[607],[4002],[94,103],{"id":7470,"slug":7471,"identity":7472,"label":7473,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7474,"versions":7475,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7477},"package:npm:scheduler","scheduler-f5eceb7d","npm:scheduler","scheduler",[607],[7476],"0.28.0",[94,103],{"id":7479,"slug":7480,"identity":7481,"label":7482,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7483,"versions":7484,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":7486},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[763],[7485],"1.18.1",[103,56],{"id":7488,"slug":7489,"identity":7490,"label":7491,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7492,"versions":7493,"dossier":47,"occurrenceCount":810,"directOccurrenceCount":39,"evidenceFiles":7496},"package:npm:semver","semver-8e84695e","npm:semver","semver",[774],[7494,7495],"6.3.1","7.8.5",[94,103],{"id":7498,"slug":7499,"identity":7500,"label":7501,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7502,"versions":7503,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7504},"package:npm:send","send-d870dc25","npm:send","send",[607],[867],[94,103],{"id":7506,"slug":7507,"identity":7508,"label":7509,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7510,"versions":7511,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7513},"package:pypi:sentencex","sentencex-dc1cf0e2","pypi:sentencex","sentencex",[607],[7512],"1.0.32",[103,56],{"id":7515,"slug":7516,"identity":7517,"label":7518,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7519,"versions":7520,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":7522},"package:pypi:sentry-sdk","sentry-sdk-2727cc69","pypi:sentry-sdk","sentry-sdk",[607],[7521],"2.72.0",[103,56],{"id":7524,"slug":7525,"identity":7526,"label":7527,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7528,"versions":7529,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7530},"package:npm:seroval-plugins","seroval-plugins-5204bbff","npm:seroval-plugins","seroval-plugins",[607],[745],[94,103],{"id":7532,"slug":7533,"identity":7534,"label":7535,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7536,"versions":7537,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7538},"package:npm:serve-static","serve-static-9b722b2d","npm:serve-static","serve-static",[607],[4197],[94,103],{"id":7540,"slug":7541,"identity":7542,"label":7543,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7544,"versions":7545,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7546},"package:npm:setprototypeof","setprototypeof-e3faf556","npm:setprototypeof","setprototypeof",[774],[4765],[94,103],{"id":7548,"slug":7549,"identity":7550,"label":7551,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7552,"versions":7553,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7555},"package:npm:shadcn","shadcn-418c56ec","npm:shadcn","shadcn",[607],[7554],"4.21.0",[94,103],{"id":7557,"slug":7558,"identity":7559,"label":7560,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7561,"versions":7562,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7563},"package:npm:shebang-command","shebang-command-e7e36d5c","npm:shebang-command","shebang-command",[607],[3076],[94,103],{"id":7565,"slug":7566,"identity":7567,"label":7568,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7569,"versions":7570,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7571},"package:npm:shebang-regex","shebang-regex-37d0cef7","npm:shebang-regex","shebang-regex",[607],[3527],[94,103],{"id":7573,"slug":7574,"identity":7575,"label":7576,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7577,"versions":7578,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7580},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[774],[7579],"1.5.4",[56],{"id":7582,"slug":7583,"identity":7584,"label":7585,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7586,"versions":7587,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7588},"package:npm:side-channel","side-channel-d59c04c6","npm:side-channel","side-channel",[607],[1710],[94,103],{"id":7590,"slug":7591,"identity":7592,"label":7593,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7594,"versions":7595,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7596},"package:npm:side-channel-list","side-channel-list-46f991b9","npm:side-channel-list","side-channel-list",[607],[1638],[94,103],{"id":7598,"slug":7599,"identity":7600,"label":7601,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7602,"versions":7603,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7604},"package:npm:side-channel-map","side-channel-map-2deeb875","npm:side-channel-map","side-channel-map",[607],[1638],[94,103],{"id":7606,"slug":7607,"identity":7608,"label":7609,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7610,"versions":7611,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7612},"package:npm:side-channel-weakmap","side-channel-weakmap-d3de1245","npm:side-channel-weakmap","side-channel-weakmap",[607],[3438],[94,103],{"id":7614,"slug":7615,"identity":7616,"label":7617,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7618,"versions":7619,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":7620},"package:npm:signal-exit","signal-exit-81be8954","npm:signal-exit","signal-exit",[774],[4404,3413],[94,103],{"id":7622,"slug":7623,"identity":7624,"label":7625,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7626,"versions":7627,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7628},"package:npm:sisteransi","sisteransi-4e7f1197","npm:sisteransi","sisteransi",[607],[2845],[94,103],{"id":7630,"slug":7631,"identity":7632,"label":7633,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7634,"versions":7635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7637},"package:pypi:six","six-3c3888bd","pypi:six","six",[607],[7636],"1.17.0",[56],{"id":7639,"slug":7640,"identity":7641,"label":7642,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7643,"versions":7644,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":7646},"package:pypi:slowapi","slowapi-f9a4c599","pypi:slowapi","slowapi",[607],[7645],"0.1.10",[103,56],{"id":7648,"slug":7649,"identity":7650,"label":7651,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7652,"versions":7653,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7654},"package:npm:smart-buffer","smart-buffer-bf4702a2","npm:smart-buffer","smart-buffer",[607],[1041],[94,103],{"id":7656,"slug":7657,"identity":7658,"label":7659,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7660,"versions":7661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7663},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[596],[7662],"5.0.3",[56],{"id":7665,"slug":7666,"identity":7667,"label":7668,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7669,"versions":7671,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7672},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[7670],"Apache-2.0 OR MIT",[1701],[103,56],{"id":7674,"slug":7675,"identity":7676,"label":7677,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7678,"versions":7679,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7681},"package:npm:socks","socks-d172a456","npm:socks","socks",[607],[7680],"2.8.10",[94,103],{"id":7683,"slug":7684,"identity":7685,"label":7686,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7687,"versions":7688,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7689},"package:npm:sonner","sonner-929a7298","npm:sonner","sonner",[607],[1113],[94,103],{"id":7691,"slug":7692,"identity":7693,"label":7694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7695,"versions":7696,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7697},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[596],[3237],[103,56],{"id":7699,"slug":7700,"identity":7701,"label":7702,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7703,"versions":7704,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7706},"package:npm:source-map","source-map-40e335ad","npm:source-map","source-map",[596],[7705],"0.6.1",[94,103],{"id":7708,"slug":7709,"identity":7710,"label":7711,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7712,"versions":7713,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7714},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[6927,3254],[3396],[103,56],{"id":7716,"slug":7717,"identity":7718,"label":7719,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7720,"versions":7721,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7722},"package:npm:space-separated-tokens","space-separated-tokens-c471a577","npm:space-separated-tokens","space-separated-tokens",[607],[3343],[94,103],{"id":7724,"slug":7725,"identity":7726,"label":7727,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7728,"versions":7729,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":7730},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[607],[1763],[103,56],{"id":7732,"slug":7733,"identity":7734,"label":7735,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7736,"versions":7737,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7738},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[596],[3493],[103,56],{"id":7740,"slug":7741,"identity":7742,"label":7743,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7744,"versions":7745,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7747},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[607],[7746],"0.6.3",[56],{"id":7749,"slug":7750,"identity":7751,"label":7752,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7753,"versions":7754,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7755},"package:npm:statuses","statuses-c4dfedb5","npm:statuses","statuses",[607],[3343],[94,103],{"id":7757,"slug":7758,"identity":7759,"label":7760,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7761,"versions":7762,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7763},"package:npm:stdin-discarder","stdin-discarder-f4e99411","npm:stdin-discarder","stdin-discarder",[607],[3298],[94,103],{"id":7765,"slug":7766,"identity":7767,"label":7768,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7769,"versions":7770,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7771},"package:npm:string-width","string-width-79897e90","npm:string-width","string-width",[607],[6831],[94,103],{"id":7773,"slug":7774,"identity":7775,"label":7776,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7777,"versions":7778,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7779},"package:npm:stringify-entities","stringify-entities-125d7ead","npm:stringify-entities","stringify-entities",[607],[2871],[94,103],{"id":7781,"slug":7782,"identity":7783,"label":7784,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7785,"versions":7786,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7787},"package:npm:stringify-object","stringify-object-01a8c0cb","npm:stringify-object","stringify-object",[1130],[3378],[94,103],{"id":7789,"slug":7790,"identity":7791,"label":7792,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7793,"versions":7794,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7795},"package:npm:strip-ansi","strip-ansi-bbd27d8f","npm:strip-ansi","strip-ansi",[607],[6831],[94,103],{"id":7797,"slug":7798,"identity":7799,"label":7800,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7801,"versions":7802,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7803},"package:npm:strip-bom","strip-bom-9f52200c","npm:strip-bom","strip-bom",[607],[3527],[94,103],{"id":7805,"slug":7806,"identity":7807,"label":7808,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7809,"versions":7810,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":7811},"package:npm:strip-final-newline","strip-final-newline-40ad4c14","npm:strip-final-newline","strip-final-newline",[607],[3076,2459],[94,103],{"id":7813,"slug":7814,"identity":7815,"label":7816,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7817,"versions":7818,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7819},"package:npm:style-to-js","style-to-js-7af2bdaf","npm:style-to-js","style-to-js",[607],[2169],[94,103],{"id":7821,"slug":7822,"identity":7823,"label":7824,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7825,"versions":7826,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7828},"package:npm:style-to-object","style-to-object-dc5ae31c","npm:style-to-object","style-to-object",[607],[7827],"1.0.14",[94,103],{"id":7830,"slug":7831,"identity":7832,"label":7833,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7834,"versions":7835,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7836},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[596,607,763],[6708],[103,56],{"id":7838,"slug":7839,"identity":7840,"label":7841,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7842,"versions":7843,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7845},"package:npm:tailwind-merge","tailwind-merge-149e8091","npm:tailwind-merge","tailwind-merge",[607],[7844],"3.7.0",[94,103],{"id":7847,"slug":7848,"identity":7849,"label":7850,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7851,"versions":7852,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7853},"package:npm:tailwindcss","tailwindcss-73c205c0","npm:tailwindcss","tailwindcss",[607],[2486],[94,103],{"id":7855,"slug":7856,"identity":7857,"label":7858,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7859,"versions":7860,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7861},"package:npm:tapable","tapable-41f824e6","npm:tapable","tapable",[607],[4620],[94,103],{"id":7863,"slug":7864,"identity":7865,"label":7866,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7867,"versions":7868,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7869},"package:npm:tiny-invariant","tiny-invariant-b42ee6ec","npm:tiny-invariant","tiny-invariant",[607],[2152],[94,103],{"id":7871,"slug":7872,"identity":7873,"label":7874,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7875,"versions":7876,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7877},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[763],[4818],[56],{"id":7879,"slug":7880,"identity":7881,"label":7882,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7883,"versions":7884,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7886},"package:npm:tinyglobby","tinyglobby-dc19540c","npm:tinyglobby","tinyglobby",[607],[7885],"0.2.17",[94,103],{"id":7888,"slug":7889,"identity":7890,"label":7891,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7892,"versions":7893,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7894},"package:pypi:tinyhtml5","tinyhtml5-2f138940","pypi:tinyhtml5","tinyhtml5",[607],[2880],[56],{"id":7896,"slug":7897,"identity":7898,"label":7899,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7900,"versions":7901,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7902},"package:npm:to-regex-range","to-regex-range-468662f2","npm:to-regex-range","to-regex-range",[607],[3953],[94,103],{"id":7904,"slug":7905,"identity":7906,"label":7907,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7908,"versions":7909,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7910},"package:npm:toidentifier","toidentifier-d7c0e2d2","npm:toidentifier","toidentifier",[607],[1638],[94,103],{"id":7912,"slug":7913,"identity":7914,"label":7915,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7916,"versions":7917,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7919},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[607],[7918],"0.15.2",[56],{"id":7921,"slug":7922,"identity":7923,"label":7924,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7925,"versions":7926,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7928},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[596],[7927],"5.16.1",[56],{"id":7930,"slug":7931,"identity":7932,"label":7933,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7934,"versions":7935,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7936},"package:npm:trim-lines","trim-lines-d6032ca4","npm:trim-lines","trim-lines",[607],[3167],[94,103],{"id":7938,"slug":7939,"identity":7940,"label":7941,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7942,"versions":7943,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7944},"package:npm:trough","trough-9f16011a","npm:trough","trough",[607],[1435],[94,103],{"id":7946,"slug":7947,"identity":7948,"label":7949,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7950,"versions":7951,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":7952},"package:npm:ts-api-utils","ts-api-utils-07fd653b","npm:ts-api-utils","ts-api-utils",[607],[1444],[94],{"id":7954,"slug":7955,"identity":7956,"label":7957,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7958,"versions":7959,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7961},"package:npm:ts-morph","ts-morph-6d1fe574","npm:ts-morph","ts-morph",[607],[7960],"26.0.0",[94,103],{"id":7963,"slug":7964,"identity":7965,"label":7966,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7967,"versions":7968,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7969},"package:npm:tsconfig-paths","tsconfig-paths-70d85491","npm:tsconfig-paths","tsconfig-paths",[607],[1041],[94,103],{"id":7971,"slug":7972,"identity":7973,"label":7974,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7975,"versions":7977,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":7979},"package:npm:tslib","tslib-d05e0935","npm:tslib","tslib",[7976],"0BSD",[7978],"2.8.1",[94,103],{"id":7981,"slug":7982,"identity":7983,"label":7984,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7985,"versions":7986,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":7987},"package:npm:tw-animate-css","tw-animate-css-c0808f2a","npm:tw-animate-css","tw-animate-css",[607],[3140],[94,103],{"id":7989,"slug":7990,"identity":7991,"label":7992,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":7993,"versions":7994,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":7996},"package:pypi:twilio","twilio-fea8bb79","pypi:twilio","twilio",[607],[7995],"9.12.0",[103,56],{"id":7998,"slug":7999,"identity":8000,"label":8001,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8002,"versions":8003,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8005},"package:pypi:ty","ty-9d155882","pypi:ty","ty",[607],[8004],"0.0.89",[56],{"id":8007,"slug":8008,"identity":8009,"label":8010,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8011,"versions":8012,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8013},"package:npm:type-check","type-check-a7a05ff6","npm:type-check","type-check",[607],[1426],[94],{"id":8015,"slug":8016,"identity":8017,"label":8018,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8019,"versions":8020,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8021},"package:npm:type-is","type-is-95471b5f","npm:type-is","type-is",[607],[2880],[94,103],{"id":8023,"slug":8024,"identity":8025,"label":8026,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8027,"versions":8028,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8030},"package:pypi:types-requests","types-requests-1c349d80","pypi:types-requests","types-requests",[561],[8029],"2.33.0.20261006",[103,56],{"id":8032,"slug":8033,"identity":8034,"label":8035,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8036,"versions":8037,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8039},"package:pypi:types-ujson","types-ujson-a1c81a59","pypi:types-ujson","types-ujson",[561],[8038],"5.10.0.20250822",[56],{"id":8041,"slug":8042,"identity":8043,"label":8044,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8045,"versions":8046,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":8047},"package:npm:typescript","typescript-9b49e36c","npm:typescript","typescript",[561],[7017],[94,103],{"id":8049,"slug":8050,"identity":8051,"label":8052,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8053,"versions":8054,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":8055},"package:npm:typescript-eslint","typescript-eslint-63885413","npm:typescript-eslint","typescript-eslint",[607],[2951],[94],{"id":72,"slug":73,"identity":8057,"label":74,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8058,"versions":8059,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8061},"pypi:typing-extensions",[3120,763],[8060],"4.16.0",[103,56],{"id":8063,"slug":8064,"identity":8065,"label":8066,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8067,"versions":8068,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8069},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[607],[4043],[103,56],{"id":8071,"slug":8072,"identity":8073,"label":8074,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8075,"versions":8076,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":8078},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[561],[8077],"2026.5",[103,56],{"id":8080,"slug":8081,"identity":8082,"label":8083,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8084,"versions":8085,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8087},"package:npm:undici-types","undici-types-385a20bc","npm:undici-types","undici-types",[607],[8086],"8.9.0",[94,103],{"id":8089,"slug":8090,"identity":8091,"label":8092,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8093,"versions":8094,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8095},"package:npm:unicorn-magic","unicorn-magic-cc44159a","npm:unicorn-magic","unicorn-magic",[607],[2477],[94,103],{"id":8097,"slug":8098,"identity":8099,"label":8100,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8101,"versions":8102,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8104},"package:npm:unified","unified-d3d1b160","npm:unified","unified",[607],[8103],"11.0.5",[94,103],{"id":8106,"slug":8107,"identity":8108,"label":8109,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8110,"versions":8111,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8112},"package:npm:unist-util-filter","unist-util-filter-9d40f8ab","npm:unist-util-filter","unist-util-filter",[607],[3953],[94,103],{"id":8114,"slug":8115,"identity":8116,"label":8117,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8118,"versions":8119,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8120},"package:npm:unist-util-is","unist-util-is-500f2b54","npm:unist-util-is","unist-util-is",[607],[4188],[94,103],{"id":8122,"slug":8123,"identity":8124,"label":8125,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8126,"versions":8127,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8128},"package:npm:unist-util-position","unist-util-position-501a2562","npm:unist-util-position","unist-util-position",[607],[3378],[94,103],{"id":8130,"slug":8131,"identity":8132,"label":8133,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8134,"versions":8135,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8136},"package:npm:unist-util-stringify-position","unist-util-stringify-position-297cc0d5","npm:unist-util-stringify-position","unist-util-stringify-position",[607],[2459],[94,103],{"id":8138,"slug":8139,"identity":8140,"label":8141,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8142,"versions":8143,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":8144},"package:npm:unist-util-visit","unist-util-visit-97738386","npm:unist-util-visit","unist-util-visit",[607],[3378,7392],[94,103],{"id":8146,"slug":8147,"identity":8148,"label":8149,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8150,"versions":8151,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8152},"package:npm:unist-util-visit-parents","unist-util-visit-parents-fed995ef","npm:unist-util-visit-parents","unist-util-visit-parents",[607],[3103],[94,103],{"id":8154,"slug":8155,"identity":8156,"label":8157,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8158,"versions":8159,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8160},"package:npm:universalify","universalify-024c7947","npm:universalify","universalify",[607],[3220],[94,103],{"id":8162,"slug":8163,"identity":8164,"label":8165,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8166,"versions":8167,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8168},"package:npm:unpipe","unpipe-0327ee3f","npm:unpipe","unpipe",[607],[3396],[94,103],{"id":8170,"slug":8171,"identity":8172,"label":8173,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8174,"versions":8175,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8176},"package:npm:unplugin","unplugin-cc9b53f3","npm:unplugin","unplugin",[607],[3749],[94],{"id":8178,"slug":8179,"identity":8180,"label":8181,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8182,"versions":8183,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8184},"package:npm:update-browserslist-db","update-browserslist-db-75400f27","npm:update-browserslist-db","update-browserslist-db",[607],[2152],[94,103],{"id":8186,"slug":8187,"identity":8188,"label":8189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8190,"versions":8191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8192},"package:npm:uri-js","uri-js-1053a491","npm:uri-js","uri-js",[1130],[913],[94],{"id":8194,"slug":8195,"identity":8196,"label":8197,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8198,"versions":8199,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8200},"package:npm:use-callback-ref","use-callback-ref-e82b364e","npm:use-callback-ref","use-callback-ref",[607],[2152],[94,103],{"id":8202,"slug":8203,"identity":8204,"label":8205,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8206,"versions":8207,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8208},"package:npm:use-sidecar","use-sidecar-b0a9a935","npm:use-sidecar","use-sidecar",[607],[1799],[94,103],{"id":8210,"slug":8211,"identity":8212,"label":8213,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8214,"versions":8215,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8217},"package:npm:use-sync-external-store","use-sync-external-store-085f0fd1","npm:use-sync-external-store","use-sync-external-store",[607],[8216],"1.6.0",[94,103],{"id":8219,"slug":8220,"identity":8221,"label":8222,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8223,"versions":8224,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8225},"package:npm:util-deprecate","util-deprecate-2b1985a1","npm:util-deprecate","util-deprecate",[607],[3438],[94,103],{"id":8227,"slug":8228,"identity":8229,"label":8230,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8231,"versions":8232,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":8234},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[596],[8233],"0.53.0",[103,56],{"id":8236,"slug":8237,"identity":8238,"label":8239,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8240,"versions":8241,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8242},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[607],[5546],[103,56],{"id":8244,"slug":8245,"identity":8246,"label":8247,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8248,"versions":8249,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8251},"package:npm:validate-npm-package-name","validate-npm-package-name-1ea4086a","npm:validate-npm-package-name","validate-npm-package-name",[774],[8250],"7.0.2",[94,103],{"id":8253,"slug":8254,"identity":8255,"label":8256,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8257,"versions":8258,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8259},"package:npm:vary","vary-f8fd7044","npm:vary","vary",[607],[4629],[94,103],{"id":8261,"slug":8262,"identity":8263,"label":8264,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8265,"versions":8266,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":564,"evidenceFiles":8267},"package:npm:vaul","vaul-ba55d071","npm:vaul","vaul",[607],[4629],[94,103],{"id":8269,"slug":8270,"identity":8271,"label":8272,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8273,"versions":8274,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8275},"package:npm:vfile","vfile-33c4321c","npm:vfile","vfile",[607],[7017],[94,103],{"id":8277,"slug":8278,"identity":8279,"label":8280,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8281,"versions":8282,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8283},"package:npm:vfile-location","vfile-location-f2ca8efa","npm:vfile-location","vfile-location",[607],[7662],[94,103],{"id":8285,"slug":8286,"identity":8287,"label":8288,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8289,"versions":8290,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8291},"package:npm:vfile-message","vfile-message-95198ca1","npm:vfile-message","vfile-message",[607],[5250],[94,103],{"id":8293,"slug":8294,"identity":8295,"label":8296,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8297,"versions":8299,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8301},"package:npm:victory-vendor","victory-vendor-1fd44678","npm:victory-vendor","victory-vendor",[8298],"ISC AND MIT",[8300],"37.3.6",[94,103],{"id":8303,"slug":8304,"identity":8305,"label":8306,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8307,"versions":8308,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8309},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[561],[5680],[56],{"id":8311,"slug":8312,"identity":8313,"label":8314,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8315,"versions":8316,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8317},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[607],[1737],[103,56],{"id":8319,"slug":8320,"identity":8321,"label":8322,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8323,"versions":8324,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8326},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[607],[8325],"0.9.2",[103,56],{"id":8328,"slug":8329,"identity":8330,"label":8331,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8332,"versions":8333,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8334},"package:npm:web-namespaces","web-namespaces-2f44061f","npm:web-namespaces","web-namespaces",[607],[3220],[94,103],{"id":8336,"slug":8337,"identity":8338,"label":8339,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8340,"versions":8341,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8342},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[763],[7705],[56],{"id":8344,"slug":8345,"identity":8346,"label":8347,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8348,"versions":8349,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8350},"package:npm:webpack-virtual-modules","webpack-virtual-modules-a9467704","npm:webpack-virtual-modules","webpack-virtual-modules",[607],[4060],[94],{"id":8352,"slug":8353,"identity":8354,"label":8355,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8356,"versions":8357,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":32,"evidenceFiles":8359},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[596],[8358],"13.1",[103,56],{"id":8361,"slug":8362,"identity":8363,"label":8364,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8365,"versions":8366,"dossier":47,"occurrenceCount":752,"directOccurrenceCount":39,"evidenceFiles":8367},"package:npm:which","which-1e7f9364","npm:which","which",[774],[3343,2459],[94,103],{"id":8369,"slug":8370,"identity":8371,"label":8372,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8373,"versions":8374,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8375},"package:pypi:win32-setctime","win32-setctime-649675e1","pypi:win32-setctime","win32-setctime",[607],[4765],[56],{"id":8377,"slug":8378,"identity":8379,"label":8380,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8381,"versions":8382,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8384},"package:npm:word-wrap","word-wrap-124a9003","npm:word-wrap","word-wrap",[607],[8383],"1.2.5",[94],{"id":8386,"slug":8387,"identity":8388,"label":8389,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8390,"versions":8391,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8392},"package:npm:wrappy","wrappy-f4e94e3b","npm:wrappy","wrappy",[774],[3438],[94,103],{"id":8394,"slug":8395,"identity":8396,"label":8397,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8398,"versions":8399,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8400},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[1130,763],[3900],[103,56],{"id":8402,"slug":8403,"identity":8404,"label":8405,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8406,"versions":8407,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8409},"package:npm:wsl-utils","wsl-utils-2721a0d6","npm:wsl-utils","wsl-utils",[607],[8408],"0.3.1",[94,103],{"id":8411,"slug":8412,"identity":8413,"label":8414,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8415,"versions":8416,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8417},"package:npm:yallist","yallist-7f7ac870","npm:yallist","yallist",[774],[2777],[94,103],{"id":8419,"slug":8420,"identity":8421,"label":8422,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8423,"versions":8424,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8426},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[561],[8425],"1.25.1",[103,56],{"id":8428,"slug":8429,"identity":8430,"label":8431,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8432,"versions":8433,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8434},"package:npm:yocto-queue","yocto-queue-1d448017","npm:yocto-queue","yocto-queue",[607],[6751],[94],{"id":8436,"slug":8437,"identity":8438,"label":8439,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8440,"versions":8441,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8442},"package:npm:yocto-spinner","yocto-spinner-7c8aa105","npm:yocto-spinner","yocto-spinner",[607],[2468],[94,103],{"id":8444,"slug":8445,"identity":8446,"label":8447,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8448,"versions":8449,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8450},"package:npm:yoctocolors","yoctocolors-31353206","npm:yoctocolors","yoctocolors",[607],[4002],[94,103],{"id":8452,"slug":8453,"identity":8454,"label":8455,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8456,"versions":8457,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8459},"package:npm:zod-to-json-schema","zod-to-json-schema-075caf94","npm:zod-to-json-schema","zod-to-json-schema",[774],[8458],"3.25.2",[94,103],{"id":8461,"slug":8462,"identity":8463,"label":8464,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8465,"versions":8466,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8467},"package:npm:zod-validation-error","zod-validation-error-a3cf2664","npm:zod-validation-error","zod-validation-error",[607],[2942],[94],{"id":8469,"slug":8470,"identity":8471,"label":8472,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8473,"versions":8474,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":8475},"package:pypi:zopfli","zopfli-5e2184a1","pypi:zopfli","zopfli",[561],[1647],[56],{"id":8477,"slug":8478,"identity":8479,"label":8480,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":8481,"versions":8482,"dossier":47,"occurrenceCount":564,"directOccurrenceCount":39,"evidenceFiles":8483},"package:npm:zwitch","zwitch-d8ea4eb0","npm:zwitch","zwitch",[607],[4827],[94,103],[8485,8524,8561,8586,8608,8643,8667,8689,8712,8735,8766,8793,8828,8859,8892,8923,8957,8993,9036,9066,9096,9128,9153,9185,9210,9250,9280,9305,9331,9367,9389,9419,9442,9470,9498,9524,9555,9582,9600,9627,9667,9703,9722,9746,9775,9797,9815,9838,9868,9892,9925,9950,9979,10003,10020,10047,10073,10095,10121,10142,10166,10187,10212,10237,10257,10286,10317,10338,10356,10379,10406,10430,10453,10477,10508,10537,10559,10577,10618,10643,10666,10690,10710,10735,10764,10787,10811,10839,10866,10889,10912,10939,10961,10988,11005,11038,11076,11090,11114,11137,11166,11184,11208,11231,11252,11282,11305,11328,11358,11385,11412,11431,11458,11484,11505,11535,11558,11581,11607,11624,11644,11670,11696,11723,11746,11767,11790,11816,11839,11875,11901,11923,11946,11983,12008,12031,12052,12074,12097,12129,12152,12184,12208,12236,12268,12308,12331,12359,12378,12404,12431,12450,12471,12495,12519,12545,12573,12624,12656,12676,12698,12728,12746,12777,12799,12822,12854,12878,12914,12934,12961,12990,13014,13042,13064,13086,13118,13141,13168,13191,13217,13246,13284,13310,13334,13356,13383,13407,13472,13499,13519,13549,13571,13591,13611,13636,13655,13680,13702,13722,13743,13766,13820,13843,13875,13902,13925,13945,13966,13986,14007,14032,14054,14089,14114,14134,14155,14179,14199,14224,14248,14270,14298,14321,14344,14373,14391,14412,14431,14450,14477,14505,14530,14555,14582,14606,14639,14664,14689,14707,14726,14753,14776,14797,14821,14847,14870,14893,14921,14940,14963,14984,14999,15016,15050,15072,15090,15112,15139,15162,15194,15226,15246,15270,15291,15314,15336,15356,15380,15404,15438,15459,15480,15503,15530,15556,15580,15601,15633,15654,15678,15705,15729,15753,15777,15806,15836,15860,15880,15899,15917,15944,15966,15987,16017,16045,16070,16102,16125,16153,16178,16201,16224,16253,16278,16299,16321,16343,16388,16409,16433,16454,16481,16509,16527,16550,16569,16591,16615,16639,16656,16683,16703,16727,16753,16780,16798,16819,16843,16864,16882,16908,16925,16950,16976,16996,17016,17039,17058,17081,17109,17133,17160,17179,17198,17219,17251,17275,17327,17351,17379,17401,17424,17456,17477,17504,17526,17549,17570,17590,17619,17649,17674,17698,17721,17748,17778,17798,17814,17834,17860,17884,17905,17929,17946,17969,17989,18016,18043,18071,18094,18112,18134,18173,18197,18221,18244,18270,18294,18321,18340,18360,18390,18411,18431,18448,18500,18527,18550,18576,18595,18629,18656,18678,18701,18720,18747,18766,18798,18825,18848,18868,18885,18918,18943,18970,19000,19027,19044],{"id":123,"slug":8486,"dossier":90,"summary":8487,"aliases":8488,"sourceIds":8491,"published":8492,"modified":8493,"checkedAt":7,"severity":8494,"references":8498,"versionKeys":8512,"packageCount":32,"repositoryCount":8523},"ghsa-22hg-r758-rrw9-14adf850","Pillow: Infinite loop in MIC n_frames when the embedded TIFF",[8489,8490],"BIT-pillow-2026-112390","CVE-2026-112390",[123],"2026-10-21T20:39:49Z","2026-10-26T08:56:03.565713059Z",[8495],{"type":8496,"score":8497},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8499,8502,8505,8507,8510],{"type":8500,"url":8501},"WEB","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-22hg-r758-rrw9",{"type":8503,"url":8504},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112390",{"type":8500,"url":8506},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F26cb3ed061173b817b9ee4b6f507cb0e1e293218",{"type":8508,"url":8509},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":8500,"url":8511},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F13.0.0",[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0","pypi:pillow@12.3.0",19,{"id":124,"slug":8525,"dossier":47,"summary":8526,"aliases":8527,"sourceIds":8530,"published":8531,"modified":8532,"checkedAt":7,"severity":8533,"references":8539,"versionKeys":8557,"packageCount":32,"repositoryCount":34},"ghsa-239g-whfq-7xj9-ede3fcd6","GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution",[8528,8529],"CVE-2026-87817","PYSEC-2026-3982",[124,8529],"2026-09-09T12:17:16.830Z","2026-09-30T23:45:04.022111787Z",[8534,8537],{"type":8535,"score":8536},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8496,"score":8538},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8540,8543,8545,8547,8549,8551,8553,8555],{"type":8541,"url":8542},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-239g-whfq-7xj9",{"type":8503,"url":8544},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-87817",{"type":8500,"url":8546},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2218",{"type":8500,"url":8548},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fc7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b",{"type":8508,"url":8550},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":8500,"url":8552},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.60",{"type":8500,"url":8554},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3982.yaml",{"type":8503,"url":8556},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-remote-code-execution-via-git-directory-impersonation",[8558,8559,8560],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":125,"slug":8562,"dossier":47,"summary":8563,"aliases":8564,"sourceIds":8566,"published":8567,"modified":8568,"checkedAt":7,"severity":8569,"references":8572,"versionKeys":8581,"packageCount":32,"repositoryCount":564},"ghsa-23c5-xmqv-rm74-946f15d0","minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",[8565],"CVE-2026-27904",[125],"2026-02-26T22:07:15Z","2026-09-10T03:50:59.274637421Z",[8570],{"type":8535,"score":8571},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[8573,8575,8577,8579],{"type":8500,"url":8574},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-23c5-xmqv-rm74",{"type":8503,"url":8576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27904",{"type":8500,"url":8578},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F11d0df6165d15a955462316b26d52e5efae06fce",{"type":8508,"url":8580},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch",[8582,8583,8584,8585],"npm:minimatch@10.0.3","npm:minimatch@10.1.1","npm:minimatch@3.1.2","npm:minimatch@9.0.5",{"id":126,"slug":8587,"dossier":47,"summary":8588,"aliases":8589,"sourceIds":8591,"published":8592,"modified":8593,"checkedAt":7,"severity":8594,"references":8597,"versionKeys":8607,"packageCount":32,"repositoryCount":34},"ghsa-23mf-xhv8-69c2-0feffb42","GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)",[8590],"CVE-2026-110859",[126],"2026-10-27T15:28:03Z","2026-10-27T15:47:08.812491596Z",[8595],{"type":8496,"score":8596},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8598,8600,8602,8604,8605],{"type":8500,"url":8599},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-23mf-xhv8-69c2",{"type":8500,"url":8601},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2233",{"type":8500,"url":8603},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8da65080849a56a2fc9f3e7817bbf0524e8397d5",{"type":8508,"url":8550},{"type":8500,"url":8606},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.2.0",[8558,8559,8560],{"id":127,"slug":8609,"dossier":47,"summary":8610,"aliases":8611,"sourceIds":8614,"published":8615,"modified":8616,"checkedAt":7,"severity":8617,"references":8620,"versionKeys":8641,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[8612,8613],"CVE-2024-39689","PYSEC-2024-230",[127,8613],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[8618],{"type":8535,"score":8619},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[8621,8623,8625,8628,8630,8632,8635,8637,8639],{"type":8503,"url":8622},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":8503,"url":8624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":8626,"url":8627},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":8508,"url":8629},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":8500,"url":8631},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":8633,"url":8634},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":8500,"url":8636},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":8503,"url":8638},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":8503,"url":8640},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[8642],"pypi:certifi@2024.6.2",{"id":128,"slug":8644,"dossier":90,"summary":8645,"aliases":8646,"sourceIds":8649,"published":8650,"modified":8651,"checkedAt":7,"severity":8652,"references":8655,"versionKeys":8666,"packageCount":32,"repositoryCount":8523},"ghsa-24rc-8hj2-v98c-379a2f18","Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape \u002F absolute mode",[8647,8648],"BIT-pillow-2026-96638","CVE-2026-96638",[128],"2026-10-22T15:59:35Z","2026-10-29T10:55:36.262902070Z",[8653],{"type":8535,"score":8654},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[8656,8658,8660,8662,8664,8665],{"type":8500,"url":8657},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-24rc-8hj2-v98c",{"type":8503,"url":8659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96638",{"type":8500,"url":8661},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10015",{"type":8500,"url":8663},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe7794835e323ff2691d9b3a974cade1a44301b9a",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":129,"slug":8668,"dossier":90,"summary":8669,"aliases":8670,"sourceIds":8673,"published":8674,"modified":8675,"checkedAt":7,"severity":8676,"references":8679,"versionKeys":8688,"packageCount":32,"repositoryCount":8523},"ghsa-254f-3936-288h-1cc364b4","Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()",[8671,8672],"BIT-pillow-2026-112391","CVE-2026-112391",[129],"2026-10-21T21:11:07Z","2026-10-26T08:56:17.690706279Z",[8677],{"type":8496,"score":8678},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[8680,8682,8684,8686,8687],{"type":8500,"url":8681},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-254f-3936-288h",{"type":8503,"url":8683},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112391",{"type":8500,"url":8685},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F94cb11c44ff7345414da17ebfea1598a529ad9cd",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":130,"slug":8690,"dossier":47,"summary":8691,"aliases":8692,"sourceIds":8694,"published":8695,"modified":8696,"checkedAt":7,"severity":8697,"references":8699,"versionKeys":8710,"packageCount":32,"repositoryCount":564},"ghsa-25h7-pfq9-p65f-1f62933a","flatted vulnerable to unbounded recursion DoS in parse() revive phase",[8693],"CVE-2026-32141",[130],"2026-03-13T15:40:42Z","2026-09-10T03:50:36.276174418Z",[8698],{"type":8535,"score":8571},[8700,8702,8704,8706,8708],{"type":8500,"url":8701},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fsecurity\u002Fadvisories\u002FGHSA-25h7-pfq9-p65f",{"type":8503,"url":8703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32141",{"type":8500,"url":8705},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fpull\u002F88",{"type":8500,"url":8707},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fcommit\u002F7eb65d857e1a40de11c47461cdbc8541449f0606",{"type":8508,"url":8709},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted",[8711],"npm:flatted@3.3.3",{"id":131,"slug":8713,"dossier":90,"summary":8714,"aliases":8715,"sourceIds":8719,"published":8720,"modified":8721,"checkedAt":7,"severity":8722,"references":8725,"versionKeys":8734,"packageCount":32,"repositoryCount":8523},"ghsa-27h8-gf7j-v5hc-bd4ebeac","Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images",[8716,8717,8718],"BIT-pillow-2026-112392","CVE-2026-112392","PYSEC-2026-4326",[131,8718],"2026-10-19T22:17:06.587Z","2026-10-27T11:10:35.409737764Z",[8723,8724],{"type":8496,"score":8497},{"type":8535,"score":8571},[8726,8728,8730,8732,8733],{"type":8626,"url":8727},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-27h8-gf7j-v5hc",{"type":8503,"url":8729},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112392",{"type":8626,"url":8731},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F443e3130a8c11594fd0e296afad497e11e678961",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":132,"slug":8736,"dossier":47,"summary":8737,"aliases":8738,"sourceIds":8740,"published":8741,"modified":8742,"checkedAt":7,"severity":8743,"references":8745,"versionKeys":8762,"packageCount":32,"repositoryCount":564},"ghsa-27r3-jxmh-p828-539d4c66","body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body",[8739],"CVE-2026-111181",[132],"2026-10-23T20:53:11Z","2026-10-23T21:00:06.131613693Z",[8744],{"type":8535,"score":8571},[8746,8748,8750,8752,8754,8756,8758,8760],{"type":8500,"url":8747},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fsecurity\u002Fadvisories\u002FGHSA-27r3-jxmh-p828",{"type":8503,"url":8749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111181",{"type":8500,"url":8751},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002F1260c3845f54502a05a87594f09a334786bb34d7",{"type":8500,"url":8753},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002Ff7075eae3a84c3473ab4bf0a777da28db208e916",{"type":8500,"url":8755},"https:\u002F\u002Fcna.openjsf.org\u002Fsecurity-advisories.html",{"type":8508,"url":8757},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser",{"type":8500,"url":8759},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002F1.20.9",{"type":8500,"url":8761},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002Fv2.4.0",[8763,8764,8765],"npm:body-parser@1.20.3","npm:body-parser@1.20.4","npm:body-parser@2.3.0",{"id":133,"slug":8767,"dossier":47,"summary":8768,"aliases":8769,"sourceIds":8772,"published":8773,"modified":8774,"checkedAt":7,"severity":8775,"references":8782,"versionKeys":8792,"packageCount":32,"repositoryCount":34},"ghsa-284h-m62q-gf8w-da9acb0c","GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE",[8770,8771],"CVE-2026-78676","PYSEC-2026-3786",[133,8771],"2026-08-25T02:16:52.030Z","2026-09-08T19:00:06.885837775Z",[8776,8778,8780],{"type":8535,"score":8777},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8496,"score":8779},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8496,"score":8781},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8783,8785,8787,8788,8790],{"type":8541,"url":8784},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-284h-m62q-gf8w",{"type":8503,"url":8786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78676",{"type":8508,"url":8550},{"type":8500,"url":8789},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3786.yaml",{"type":8503,"url":8791},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-config-injection",[8558,8559,8560],{"id":134,"slug":8794,"dossier":47,"summary":8795,"aliases":8796,"sourceIds":8798,"published":8799,"modified":8800,"checkedAt":7,"severity":8801,"references":8803,"versionKeys":8822,"packageCount":32,"repositoryCount":810},"ghsa-2883-xcg3-v3hh-763c5083","js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources",[8797],"CVE-2026-84375",[134],"2026-09-08T21:24:51Z","2026-09-08T21:30:05.575808098Z",[8802],{"type":8535,"score":8571},[8804,8806,8808,8810,8812,8814,8816,8818,8820],{"type":8500,"url":8805},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-2883-xcg3-v3hh",{"type":8503,"url":8807},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84375",{"type":8500,"url":8809},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fpull\u002F797",{"type":8500,"url":8811},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F3485bc06ff8a0251505f44a00414d90df2466639",{"type":8500,"url":8813},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F6a8e05f9a485188ed730ac81e81ae221352ef480",{"type":8500,"url":8815},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002Fd90b6612a5a84385bdcb556c44578eac76dc0f6b",{"type":8508,"url":8817},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml",{"type":8500,"url":8819},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F3.15.2",{"type":8500,"url":8821},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F4.3.2",[8823,8824,8825,8826,8827],"npm:js-yaml@3.14.1","npm:js-yaml@3.14.2","npm:js-yaml@4.1.0","npm:js-yaml@4.1.1","npm:js-yaml@4.3.0",{"id":135,"slug":8829,"dossier":47,"summary":8830,"aliases":8831,"sourceIds":8833,"published":8834,"modified":8835,"checkedAt":7,"severity":8836,"references":8840,"versionKeys":8857,"packageCount":32,"repositoryCount":810},"ghsa-28wg-ghj8-5hjv-10215c04","nanoid: non-secure generators can loop indefinitely with negative size",[8832],"CVE-2026-67214",[135],"2026-07-29T15:31:12Z","2026-09-10T03:50:51.191256883Z",[8837,8839],{"type":8535,"score":8838},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":8496,"score":8497},[8841,8843,8845,8847,8849,8851,8853,8855],{"type":8503,"url":8842},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67214",{"type":8500,"url":8844},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fpull\u002F600",{"type":8500,"url":8846},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fpull\u002F601",{"type":8500,"url":8848},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002F6ccc67bbaba71d3d77a21d9b636f4171a268ce49",{"type":8500,"url":8850},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fe835c9b71eab832bc6106944bdd26ea96cf2c66d",{"type":8508,"url":8852},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid",{"type":8500,"url":8854},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.16",{"type":8500,"url":8856},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnanoid-before-infinite-loop-via-negative-size-in-non-secure-module",[8858],"npm:nanoid@3.3.11",{"id":136,"slug":8860,"dossier":47,"summary":8861,"aliases":8862,"sourceIds":8865,"published":8866,"modified":8867,"checkedAt":7,"severity":8868,"references":8871,"versionKeys":8888,"packageCount":32,"repositoryCount":752},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[8863,8864],"CVE-2025-54121","PYSEC-2026-1941",[136,8864],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[8869],{"type":8535,"score":8870},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[8872,8874,8876,8878,8880,8882,8884,8886],{"type":8500,"url":8873},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":8503,"url":8875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":8626,"url":8877},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":8508,"url":8879},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":8500,"url":8881},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":8500,"url":8883},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":8508,"url":8885},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":8503,"url":8887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[8889,8890,8891],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":137,"slug":8893,"dossier":47,"summary":8894,"aliases":8895,"sourceIds":8898,"published":8899,"modified":8900,"checkedAt":7,"severity":8901,"references":8904,"versionKeys":8922,"packageCount":32,"repositoryCount":34},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[8896,8897],"CVE-2026-67325","PYSEC-2026-3836",[137,8897],"2026-07-21T19:43:43Z","2026-09-23T05:15:05.950374846Z",[8902],{"type":8535,"score":8903},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[8905,8907,8909,8911,8913,8914,8916,8918,8920],{"type":8500,"url":8906},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":8503,"url":8908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67325",{"type":8500,"url":8910},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":8500,"url":8912},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":8508,"url":8550},{"type":8500,"url":8915},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",{"type":8500,"url":8917},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-option-prefix-abbreviation",{"type":8508,"url":8919},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fgitpython",{"type":8503,"url":8921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",[8558,8559,8560],{"id":138,"slug":8924,"dossier":47,"summary":8925,"aliases":8926,"sourceIds":8929,"published":8930,"modified":8931,"checkedAt":7,"severity":8932,"references":8936,"versionKeys":8947,"packageCount":32,"repositoryCount":654},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[8927,8928],"CVE-2026-54279","PYSEC-2026-2112",[138,8928],"2026-06-15T20:08:51Z","2026-11-03T16:45:04.163545105Z",[8933,8934],{"type":8535,"score":8571},{"type":8496,"score":8935},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",[8937,8939,8941,8943,8945],{"type":8503,"url":8938},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":8503,"url":8940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54279",{"type":8626,"url":8942},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",{"type":8508,"url":8944},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":8500,"url":8946},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2112.yaml",[8948,8949,8950,8951,8952,8953,8954,8955,8956],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":139,"slug":8958,"dossier":47,"summary":8959,"aliases":8960,"sourceIds":8962,"published":8963,"modified":8964,"checkedAt":7,"severity":8965,"references":8968,"versionKeys":8991,"packageCount":32,"repositoryCount":564},"ghsa-2g4f-4pwh-qvx6-26ecd362","ajv has ReDoS when using `$data` option",[8961],"CVE-2025-69873",[139],"2026-02-11T21:30:39Z","2026-09-10T03:50:33.716487588Z",[8966],{"type":8496,"score":8967},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8969,8971,8973,8975,8977,8979,8981,8983,8985,8987,8989],{"type":8503,"url":8970},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69873",{"type":8500,"url":8972},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fpull\u002F2586",{"type":8500,"url":8974},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fpull\u002F2588",{"type":8500,"url":8976},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fpull\u002F2590",{"type":8500,"url":8978},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F6991",{"type":8500,"url":8980},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Fcommit\u002F720a23fa453ffae8340e92c9b0fe886c54cfe0d5",{"type":8500,"url":8982},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69873-ajv-ReDoS.md",{"type":8503,"url":8984},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g4f-4pwh-qvx6",{"type":8508,"url":8986},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv",{"type":8500,"url":8988},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Freleases\u002Ftag\u002Fv6.14.0",{"type":8500,"url":8990},"https:\u002F\u002Fgithub.com\u002Fajv-validator\u002Fajv\u002Freleases\u002Ftag\u002Fv8.18.0",[8992],"npm:ajv@6.12.6",{"id":140,"slug":8994,"dossier":47,"summary":8995,"aliases":8996,"sourceIds":8998,"published":8999,"modified":9000,"checkedAt":7,"severity":9001,"references":9004,"versionKeys":9032,"packageCount":32,"repositoryCount":9035},"ghsa-2g87-pp6c-29x5-5aaa26fd","aiohttp: Multiple instances of excessive or unbounded memory\u002FCPU use",[8997],"CVE-2026-123817",[140],"2026-10-19T17:07:23Z","2026-11-09T21:30:07.738926065Z",[9002],{"type":8496,"score":9003},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9005,9007,9009,9011,9013,9015,9017,9019,9021,9023,9025,9027,9029,9030],{"type":8500,"url":9006},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2g87-pp6c-29x5",{"type":8500,"url":9008},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F09bcaa73ff084a0c539bbf16a0a78743acb7141f",{"type":8500,"url":9010},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae507423f681161efa77d20052b4054397c7fb6",{"type":8500,"url":9012},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F3d850ee9b92573c7e913821cbcb96005beb3f4df",{"type":8500,"url":9014},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47babd8c23ca79e2bae6cc8dcb5752b61e369fc7",{"type":8500,"url":9016},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F615fec3d4f088f30d2ee72cad760152e92aa1c53",{"type":8500,"url":9018},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6963ee0befec1502b6bb7b4db6c72d044c08f4fa",{"type":8500,"url":9020},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a4f6682817839313b04b8e5cea2b39c1a88ab4f",{"type":8500,"url":9022},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8cfbe9abe5e11b84006a10f9bdf82bf607671dab",{"type":8500,"url":9024},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa555ab698e08e9baea7386d5b4c0761cb8956fdd",{"type":8500,"url":9026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc6ac0e44c3c573ff9616f4a6a532992538b31e43",{"type":8500,"url":9028},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fd925a80539ffd227da1d93ab4a5bff123cc777db",{"type":8508,"url":8944},{"type":8500,"url":9031},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.4",[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],"pypi:aiohttp@3.14.1","pypi:aiohttp@3.14.3",13,{"id":141,"slug":9037,"dossier":47,"summary":9038,"aliases":9039,"sourceIds":9041,"published":9042,"modified":9043,"checkedAt":7,"severity":9044,"references":9047,"versionKeys":9063,"packageCount":32,"repositoryCount":32},"ghsa-2gqq-gqf2-x968-3100bf54","undici vulnerable to response truncation via oversized chunked responses in the dump interceptor",[9040],"CVE-2026-84947",[141],"2026-09-29T18:18:51Z","2026-09-29T18:28:11.302166457Z",[9045],{"type":8535,"score":9046},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[9048,9050,9052,9054,9056,9057,9059,9061],{"type":8500,"url":9049},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2gqq-gqf2-x968",{"type":8503,"url":9051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84947",{"type":8500,"url":9053},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F21693f406f0142f3504192e9f9b022dcf84782ae",{"type":8500,"url":9055},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F6d583124e7cf60b640097d64144ed633cc450584",{"type":8500,"url":8755},{"type":8508,"url":9058},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici",{"type":8500,"url":9060},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.29.1",{"type":8500,"url":9062},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.10.2",[9064,9065],"npm:undici@7.13.0","npm:undici@7.18.2",{"id":142,"slug":9067,"dossier":47,"summary":9068,"aliases":9069,"sourceIds":9072,"published":9073,"modified":9074,"checkedAt":7,"severity":9075,"references":9077,"versionKeys":9092,"packageCount":32,"repositoryCount":752},"ghsa-2gx3-rcp4-g85q-9272f372","PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)",[9070,9071],"CVE-2026-101917","PYSEC-2026-4140",[142,9071],"2026-09-29T23:11:51Z","2026-10-01T17:56:20.150726241Z",[9076],{"type":8535,"score":8870},[9078,9080,9082,9084,9086,9088,9090],{"type":8500,"url":9079},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",{"type":8503,"url":9081},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101917",{"type":8500,"url":9083},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fba4853a75fb9676362da17f67d0f64bd18afd4e1",{"type":8508,"url":9085},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":8500,"url":9087},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.14.0",{"type":8508,"url":9089},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyjwt",{"type":8503,"url":9091},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",[9093,9094,9095],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.13.0","pypi:pyjwt@2.9.0",{"id":143,"slug":9097,"dossier":47,"summary":9098,"aliases":9099,"sourceIds":9102,"published":9103,"modified":9104,"checkedAt":7,"severity":9105,"references":9108,"versionKeys":9125,"packageCount":32,"repositoryCount":724},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[9100,9101],"CVE-2026-44307","PYSEC-2026-2617",[143,9101],"2026-05-06T21:45:16Z","2026-09-10T03:50:45.452547864Z",[9106],{"type":8496,"score":9107},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9109,9111,9113,9115,9117,9119,9121,9123],{"type":8500,"url":9110},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":8503,"url":9112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":8500,"url":9114},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":8500,"url":9116},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":8508,"url":9118},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":8500,"url":9120},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":8508,"url":9122},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":8503,"url":9124},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[9126,9127],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":144,"slug":9129,"dossier":47,"summary":9130,"aliases":9131,"sourceIds":9133,"published":9134,"modified":9135,"checkedAt":7,"severity":9136,"references":9139,"versionKeys":9152,"packageCount":32,"repositoryCount":32},"ghsa-2jfj-6hjv-fm6j-6286571a","undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches",[9132],"CVE-2026-84933",[144],"2026-09-29T18:19:58Z","2026-09-29T18:30:41.174435110Z",[9137],{"type":8535,"score":9138},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[9140,9142,9144,9146,9148,9149,9150,9151],{"type":8500,"url":9141},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2jfj-6hjv-fm6j",{"type":8503,"url":9143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84933",{"type":8500,"url":9145},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb6c5a00252c37da9dd2db9bead053bb843e1f988",{"type":8500,"url":9147},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcb75bbb34224a968b4ad80cab8b7aba5e0b3b28a",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9060},{"type":8500,"url":9062},[9064,9065],{"id":145,"slug":9154,"dossier":47,"summary":9155,"aliases":9156,"sourceIds":9158,"published":9159,"modified":9160,"checkedAt":7,"severity":9161,"references":9164,"versionKeys":9183,"packageCount":32,"repositoryCount":564},"ghsa-2m5v-pch6-74hx-9bc28a85","undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent",[9157],"CVE-2026-109383",[145],"2026-10-27T19:02:26Z","2026-10-27T19:15:22.407771210Z",[9162],{"type":8535,"score":9163},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9165,9167,9169,9171,9173,9175,9176,9177,9179,9181],{"type":8500,"url":9166},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2m5v-pch6-74hx",{"type":8503,"url":9168},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109383",{"type":8500,"url":9170},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F04cb74b1db131ff8f5b4557dce811cbf5f4664b4",{"type":8500,"url":9172},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F8c59f6b302898cb2e9b0f7962cd7212b6e597c9f",{"type":8500,"url":9174},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Ff75eac00ac177f7b2e6c8bfbd52d4113164286e6",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9178},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.29.1",{"type":8500,"url":9180},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.30.1",{"type":8500,"url":9182},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.12.2",[9064,9065,9184],"npm:undici@7.29.1",{"id":146,"slug":9186,"dossier":47,"summary":9187,"aliases":9188,"sourceIds":9190,"published":9191,"modified":9192,"checkedAt":7,"severity":9193,"references":9196,"versionKeys":9209,"packageCount":32,"repositoryCount":32},"ghsa-2mjp-6q6p-2qxm-7fbfca50","Undici has an HTTP Request\u002FResponse Smuggling issue",[9189],"CVE-2026-1525",[146],"2026-03-13T20:07:03Z","2026-09-10T03:50:36.493109202Z",[9194],{"type":8535,"score":9195},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[9197,9199,9201,9203,9204,9206,9207],{"type":8500,"url":9198},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-2mjp-6q6p-2qxm",{"type":8503,"url":9200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1525",{"type":8500,"url":9202},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3556037",{"type":8500,"url":8755},{"type":8500,"url":9205},"https:\u002F\u002Fcwe.mitre.org\u002Fdata\u002Fdefinitions\u002F444.html",{"type":8508,"url":9058},{"type":8500,"url":9208},"https:\u002F\u002Fwww.rfc-editor.org\u002Frfc\u002Frfc9110.html#section-8.6",[9064,9065],{"id":147,"slug":9211,"dossier":47,"summary":9212,"aliases":9213,"sourceIds":9217,"published":9218,"modified":9219,"checkedAt":7,"severity":9220,"references":9223,"versionKeys":9248,"packageCount":32,"repositoryCount":32},"ghsa-2qfp-q593-8484-b683fc2e","Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation",[9214,9215,9216],"CVE-2025-6176","PYSEC-2026-1906","PYSEC-2026-2401",[147,9216],"2025-10-31T00:30:35Z","2026-09-10T03:50:29.153413546Z",[9221],{"type":8535,"score":9222},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[9224,9226,9228,9230,9232,9234,9236,9238,9240,9242,9244,9246],{"type":8503,"url":9225},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6176",{"type":8500,"url":9227},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fissues\u002F1327",{"type":8500,"url":9229},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fissues\u002F1375",{"type":8500,"url":9231},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fpull\u002F1234",{"type":8500,"url":9233},"https:\u002F\u002Fgithub.com\u002Fscrapy\u002Fscrapy\u002Fpull\u002F7134",{"type":8500,"url":9235},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002F67d78bc41db1a0d03f2e763497748f2f69946627",{"type":8500,"url":9237},"https:\u002F\u002Fgithub.com\u002Fscrapy\u002Fscrapy\u002Fcommit\u002F14737e91edc513967f516fc839cc9c8a4f8d91da",{"type":8508,"url":9239},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli",{"type":8500,"url":9241},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Freleases\u002Ftag\u002Fv1.2.0",{"type":8500,"url":9243},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2c26a886-5984-47ee-a421-0d5fe1344eb0",{"type":8508,"url":9245},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbrotli",{"type":8503,"url":9247},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2qfp-q593-8484",[9249],"pypi:brotli@1.1.0",{"id":148,"slug":9251,"dossier":47,"summary":9252,"aliases":9253,"sourceIds":9255,"published":8834,"modified":9256,"checkedAt":7,"severity":9257,"references":9260,"versionKeys":9278,"packageCount":32,"repositoryCount":752},"ghsa-2v37-7h3g-55p8-563431fd","nanoid: custom generators can loop indefinitely when size is zero",[9254],"CVE-2026-67213",[148],"2026-09-10T03:50:51.243328986Z",[9258,9259],{"type":8535,"score":8838},{"type":8496,"score":8497},[9261,9263,9265,9267,9269,9270,9272,9274,9276],{"type":8503,"url":9262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67213",{"type":8500,"url":9264},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fcb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7",{"type":8500,"url":9266},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fe10f8d40ce9d1ab47f66d65a16b48086432730d0",{"type":8500,"url":9268},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Ff9d13f150847d117877adee3460a46eceb0cf49b",{"type":8508,"url":8852},{"type":8500,"url":9271},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F3.3.17",{"type":8500,"url":9273},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F3.3.18",{"type":8500,"url":9275},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.6",{"type":8500,"url":9277},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom",[8858,9279],"npm:nanoid@3.3.16",{"id":149,"slug":9281,"dossier":47,"summary":9282,"aliases":9283,"sourceIds":9286,"published":9287,"modified":9288,"checkedAt":7,"severity":9289,"references":9294,"versionKeys":9304,"packageCount":32,"repositoryCount":665},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[9284,9285],"CVE-2026-34514","PYSEC-2026-2096",[149,9285],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[9290,9292],{"type":8496,"score":9291},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8535,"score":9293},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[9295,9297,9299,9301,9302],{"type":8626,"url":9296},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":8503,"url":9298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":8626,"url":9300},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":8508,"url":8944},{"type":8503,"url":9303},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[8948,8949,8950,8951,8952,8953,8954,8955],{"id":150,"slug":9306,"dossier":47,"summary":9307,"aliases":9308,"sourceIds":9311,"published":9312,"modified":9313,"checkedAt":7,"severity":9314,"references":9316,"versionKeys":9327,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[9309,9310],"CVE-2026-49476","PYSEC-2026-3071",[150,9310],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[9315],{"type":8535,"score":8571},[9317,9319,9321,9323,9325],{"type":8500,"url":9318},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":8508,"url":9320},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":8508,"url":9322},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":8503,"url":9324},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":8503,"url":9326},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[9328,9329,9330],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":151,"slug":9332,"dossier":47,"summary":9333,"aliases":9334,"sourceIds":9337,"published":9338,"modified":9339,"checkedAt":7,"severity":9340,"references":9343,"versionKeys":9360,"packageCount":32,"repositoryCount":9366},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[9335,9336],"CVE-2025-66471","PYSEC-2026-1994",[151,9336],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[9341],{"type":8496,"score":9342},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[9344,9346,9348,9350,9352,9354,9356,9358],{"type":8500,"url":9345},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":8503,"url":9347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":8626,"url":9349},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":8500,"url":9351},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":8503,"url":9353},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":8500,"url":9355},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":8508,"url":9357},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":8508,"url":9359},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[9361,9362,9363,9364,9365],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",17,{"id":152,"slug":9368,"dossier":90,"summary":9369,"aliases":9370,"sourceIds":9373,"published":9374,"modified":9375,"checkedAt":7,"severity":9376,"references":9379,"versionKeys":9388,"packageCount":32,"repositoryCount":8523},"ghsa-332p-7hrc-92wf-af7b2989","Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",[9371,9372],"BIT-pillow-2026-112393","CVE-2026-112393",[152],"2026-10-21T21:28:09Z","2026-10-26T08:56:07.886625845Z",[9377],{"type":8496,"score":9378},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9380,9382,9384,9386,9387],{"type":8500,"url":9381},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-332p-7hrc-92wf",{"type":8503,"url":9383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112393",{"type":8500,"url":9385},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F11582e5ffbdceb973d5ee593f3105af5a9852b40",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":153,"slug":9390,"dossier":47,"summary":9391,"aliases":9392,"sourceIds":9394,"published":9395,"modified":9396,"checkedAt":7,"severity":9397,"references":9399,"versionKeys":9417,"packageCount":32,"repositoryCount":32},"ghsa-333x-w4r6-6crp-edd42481","fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references",[9393],"CVE-2026-110725",[153],"2026-10-23T21:36:40Z","2026-10-23T21:45:04.900311356Z",[9398],{"type":8535,"score":9046},[9400,9402,9404,9406,9408,9409,9411,9413,9415],{"type":8500,"url":9401},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-333x-w4r6-6crp",{"type":8503,"url":9403},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110725",{"type":8500,"url":9405},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F39e6493c1356f30a0084171627eb266786e1620e",{"type":8500,"url":9407},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fa9b8d67353630aab053cd727cf629023dd018d2b",{"type":8500,"url":8755},{"type":8508,"url":9410},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri",{"type":8500,"url":9412},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Freleases\u002Ftag\u002Fv2.4.8",{"type":8500,"url":9414},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Freleases\u002Ftag\u002Fv3.1.9",{"type":8500,"url":9416},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Freleases\u002Ftag\u002Fv4.2.3",[9418],"npm:fast-uri@3.1.8",{"id":154,"slug":9420,"dossier":47,"summary":9421,"aliases":9422,"sourceIds":9424,"published":9425,"modified":9426,"checkedAt":7,"severity":9427,"references":9430,"versionKeys":9439,"packageCount":32,"repositoryCount":32},"ghsa-35jp-ww65-95wh-20697265","axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`",[9423],"CVE-2026-44494",[154],"2026-05-29T16:04:00Z","2026-09-10T03:51:04.268287831Z",[9428],{"type":8535,"score":9429},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N",[9431,9433,9435,9437],{"type":8500,"url":9432},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-35jp-ww65-95wh",{"type":8503,"url":9434},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44494",{"type":8503,"url":9436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fvcv-3m26-pcqx",{"type":8508,"url":9438},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios",[9440,9441],"npm:axios@1.11.0","npm:axios@1.13.2",{"id":155,"slug":9443,"dossier":47,"summary":9444,"aliases":9445,"sourceIds":9447,"published":9448,"modified":9449,"checkedAt":7,"severity":9450,"references":9452,"versionKeys":9469,"packageCount":32,"repositoryCount":32},"ghsa-35p6-xmwp-9g52-9ca8b935","undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse",[9446],"CVE-2026-6733",[155],"2026-06-19T14:19:13Z","2026-09-10T03:51:07.666603424Z",[9451],{"type":8535,"score":9046},[9453,9455,9457,9459,9461,9462,9463,9465,9467],{"type":8500,"url":9454},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-35p6-xmwp-9g52",{"type":8503,"url":9456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6733",{"type":8500,"url":9458},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F6ea54ef8c4051e95bb68c89d4a5c9274fe6fbb4b",{"type":8500,"url":9460},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3582376",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9464},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.27.0",{"type":8500,"url":9466},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.28.0",{"type":8500,"url":9468},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.5.0",[9064,9065],{"id":156,"slug":9471,"dossier":47,"summary":9472,"aliases":9473,"sourceIds":9477,"published":9478,"modified":9479,"checkedAt":7,"severity":9480,"references":9482,"versionKeys":9496,"packageCount":32,"repositoryCount":32},"ghsa-37ch-88jc-xwx2-2809a0d1","path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",[9474,9475,9476],"CVE-2024-45296","CVE-2026-4867","GHSA-9wv6-86v2-598j",[156],"2026-03-27T20:04:53Z","2026-09-10T03:50:36.768786245Z",[9481],{"type":8535,"score":8571},[9483,9485,9487,9489,9490,9492,9494],{"type":8500,"url":9484},"https:\u002F\u002Fgithub.com\u002Fpillarjs\u002Fpath-to-regexp\u002Fsecurity\u002Fadvisories\u002FGHSA-37ch-88jc-xwx2",{"type":8503,"url":9486},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4867",{"type":8500,"url":9488},"https:\u002F\u002Fblakeembrey.com\u002Fposts\u002F2024-09-web-redos",{"type":8500,"url":8755},{"type":8503,"url":9491},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wv6-86v2-598j",{"type":8508,"url":9493},"https:\u002F\u002Fgithub.com\u002Fpillarjs\u002Fpath-to-regexp",{"type":8500,"url":9495},"https:\u002F\u002Fgithub.com\u002Fpillarjs\u002Fpath-to-regexp\u002Freleases\u002Ftag\u002Fv.0.1.13",[9497],"npm:path-to-regexp@0.1.12",{"id":157,"slug":9499,"dossier":47,"summary":9500,"aliases":9501,"sourceIds":9504,"published":9505,"modified":9506,"checkedAt":7,"severity":9507,"references":9510,"versionKeys":9523,"packageCount":32,"repositoryCount":9366},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[9502,9503],"CVE-2026-21441","PYSEC-2026-1996",[157,9503],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[9508,9509],{"type":8535,"score":8571},{"type":8496,"score":9342},[9511,9513,9515,9517,9518,9520,9521],{"type":8500,"url":9512},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":8503,"url":9514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":8626,"url":9516},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":8508,"url":9357},{"type":8500,"url":9519},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":8508,"url":9359},{"type":8503,"url":9522},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[9361,9362,9363,9364,9365],{"id":158,"slug":9525,"dossier":47,"summary":9526,"aliases":9527,"sourceIds":9530,"published":9531,"modified":9532,"checkedAt":7,"severity":9533,"references":9536,"versionKeys":9549,"packageCount":32,"repositoryCount":686},"ghsa-394h-qwmc-48pf-2e9bb5ce","virtualenv: Xonsh activation literals depend on the script decoding codec",[9528,9529],"BIT-virtualenv-2026-113718","CVE-2026-113718",[158],"2026-10-23T22:24:43Z","2026-10-29T10:55:57.228294866Z",[9534],{"type":8496,"score":9535},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9537,9539,9541,9543,9545,9547],{"type":8500,"url":9538},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-394h-qwmc-48pf",{"type":8503,"url":9540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113718",{"type":8500,"url":9542},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3432",{"type":8500,"url":9544},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe5fc2e6e189a877ff559af288919e3525d13e5e0",{"type":8508,"url":9546},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":8500,"url":9548},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.9",[9550,9551,9552,9553,9554],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.32.0","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":159,"slug":9556,"dossier":47,"summary":9557,"aliases":9558,"sourceIds":9561,"published":9562,"modified":9563,"checkedAt":7,"severity":9564,"references":9569,"versionKeys":9581,"packageCount":32,"repositoryCount":34},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[9559,9560],"CVE-2026-73620","PYSEC-2026-3949",[159,9560],"2026-08-03T20:09:56Z","2026-09-10T13:10:44.075529324Z",[9565,9567],{"type":8535,"score":9566},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":8496,"score":9568},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9570,9572,9574,9576,9577,9579],{"type":8541,"url":9571},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":8500,"url":9573},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":8500,"url":9575},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":8508,"url":8550},{"type":8500,"url":9578},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",{"type":8503,"url":9580},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-and-read",[8558,8559,8560],{"id":160,"slug":9583,"dossier":47,"summary":9584,"aliases":9585,"sourceIds":9587,"published":9588,"modified":9589,"checkedAt":7,"severity":9590,"references":9593,"versionKeys":9599,"packageCount":32,"repositoryCount":32},"ghsa-3g43-6gmg-66jw-7dc8cdbd","axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge",[9586],"CVE-2026-44495",[160],"2026-05-29T16:07:31Z","2026-09-10T03:51:04.440180855Z",[9591],{"type":8535,"score":9592},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",[9594,9596,9598],{"type":8500,"url":9595},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3g43-6gmg-66jw",{"type":8503,"url":9597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44495",{"type":8508,"url":9438},[9440,9441],{"id":161,"slug":9601,"dossier":90,"summary":9602,"aliases":9603,"sourceIds":9607,"published":9608,"modified":9609,"checkedAt":7,"severity":9610,"references":9614,"versionKeys":9626,"packageCount":32,"repositoryCount":8523},"ghsa-3j72-p6qg-6xp7-6d019684","Pillow: TarIO negative size field causes infinite CPU-spin loop",[9604,9605,9606],"BIT-pillow-2026-96642","CVE-2026-96642","PYSEC-2026-4341",[161,9606],"2026-10-21T21:20:32.650Z","2026-10-29T10:55:45.826300321Z",[9611,9613],{"type":8496,"score":9612},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8535,"score":8654},[9615,9617,9619,9622,9624,9625],{"type":8503,"url":9616},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-3j72-p6qg-6xp7",{"type":8503,"url":9618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96642",{"type":9620,"url":9621},"REPORT","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10012",{"type":8626,"url":9623},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19b695fdcc5eddc37374e2b1645fc4185edaf71d",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":162,"slug":9628,"dossier":47,"summary":9629,"aliases":9630,"sourceIds":9632,"published":9633,"modified":9634,"checkedAt":7,"severity":9635,"references":9639,"versionKeys":9664,"packageCount":32,"repositoryCount":564},"ghsa-3jxr-9vmj-r5cp-a4f3a60d","brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",[9631],"CVE-2026-13149",[162],"2026-07-20T20:51:09Z","2026-09-10T03:51:10.092354944Z",[9636,9637],{"type":8535,"score":8870},{"type":8496,"score":9638},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FS:N\u002FAU:Y\u002FR:U\u002FV:D\u002FRE:M\u002FU:Amber",[9640,9642,9644,9646,9648,9650,9652,9654,9656,9658,9660,9662],{"type":8500,"url":9641},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-3jxr-9vmj-r5cp",{"type":8503,"url":9643},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-13149",{"type":8500,"url":9645},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F122",{"type":8500,"url":9647},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F123",{"type":8500,"url":9649},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F835d6be91201122d9adffb0c0c8c094189ace265",{"type":8500,"url":9651},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fc7e33ec13ac1a684c116720843ce24e208611754",{"type":8500,"url":9653},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fd74e63030c012e3b7ae81657b8d665619cd51b95",{"type":8508,"url":9655},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion",{"type":8500,"url":9657},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Freleases\u002Ftag\u002Fv1.1.16",{"type":8500,"url":9659},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Freleases\u002Ftag\u002Fv2.1.2",{"type":8500,"url":9661},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Freleases\u002Ftag\u002Fv5.0.7",{"type":8500,"url":9663},"https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002Fbrace-expansion",[9665,9666],"npm:brace-expansion@1.1.12","npm:brace-expansion@2.0.2",{"id":163,"slug":9668,"dossier":47,"summary":9669,"aliases":9670,"sourceIds":9672,"published":9673,"modified":9674,"checkedAt":7,"severity":9675,"references":9680,"versionKeys":9702,"packageCount":32,"repositoryCount":32},"ghsa-3p68-rc4w-qgx5-b9fd4cd5","Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF",[9671],"CVE-2025-62718",[163],"2026-04-09T17:32:19Z","2026-09-10T03:50:42.452672741Z",[9676,9678],{"type":8535,"score":9677},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":8496,"score":9679},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[9681,9683,9685,9687,9689,9691,9693,9695,9697,9698,9700],{"type":8500,"url":9682},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3p68-rc4w-qgx5",{"type":8503,"url":9684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62718",{"type":8500,"url":9686},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10661",{"type":8500,"url":9688},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10688",{"type":8500,"url":9690},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F03cdfc99e8db32a390e12128208b6778492cee9c",{"type":8500,"url":9692},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Ffb3befb6daac6cad26b2e54094d0f2d9e47f24df",{"type":8500,"url":9694},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc1034#section-3.1",{"type":8500,"url":9696},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc3986#section-3.2.2",{"type":8508,"url":9438},{"type":8500,"url":9699},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.31.0",{"type":8500,"url":9701},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.15.0",[9440,9441],{"id":164,"slug":9704,"dossier":47,"summary":9705,"aliases":9706,"sourceIds":9708,"published":9709,"modified":9710,"checkedAt":7,"severity":9711,"references":9713,"versionKeys":9721,"packageCount":32,"repositoryCount":564},"ghsa-3ppc-4f35-3m26-03892396","minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",[9707],"CVE-2026-26996",[164],"2026-02-18T22:38:11Z","2026-09-10T03:50:33.812431744Z",[9712],{"type":8496,"score":9003},[9714,9716,9718,9720],{"type":8500,"url":9715},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-3ppc-4f35-3m26",{"type":8503,"url":9717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26996",{"type":8500,"url":9719},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F2e111f3a79abc00fa73110195de2c0f2351904f5",{"type":8508,"url":8580},[8582,8583,8584,8585],{"id":165,"slug":9723,"dossier":47,"summary":9724,"aliases":9725,"sourceIds":9727,"published":9728,"modified":9729,"checkedAt":7,"severity":9730,"references":9733,"versionKeys":9745,"packageCount":32,"repositoryCount":32},"ghsa-3pq3-5fj3-cg6v-602045f2","Axios: HTTP\u002F2 adapter bypasses configured DNS lookup and proxy controls",[9726],"CVE-2026-101898",[165],"2026-09-30T15:02:14Z","2026-09-30T15:15:04.067807024Z",[9731],{"type":8496,"score":9732},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[9734,9736,9738,9740,9742,9743],{"type":8500,"url":9735},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3pq3-5fj3-cg6v",{"type":8503,"url":9737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101898",{"type":8500,"url":9739},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F11141",{"type":8500,"url":9741},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fd19040bda7a8be2f82c3c6e1a5bc03917daee39a",{"type":8508,"url":9438},{"type":8500,"url":9744},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.20.0",[9441],{"id":166,"slug":9747,"dossier":47,"summary":9748,"aliases":9749,"sourceIds":9752,"published":9753,"modified":9754,"checkedAt":7,"severity":9755,"references":9760,"versionKeys":9774,"packageCount":32,"repositoryCount":34},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[9750,9751],"CVE-2026-69097","PYSEC-2026-3981",[166,9751],"2026-07-24T16:22:02Z","2026-10-23T21:47:05Z",[9756,9758],{"type":8535,"score":9757},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8535,"score":9759},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[9761,9763,9765,9767,9768,9770,9772],{"type":8541,"url":9762},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":8500,"url":9764},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2176",{"type":8500,"url":9766},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":8508,"url":8550},{"type":8500,"url":9769},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",{"type":8500,"url":9771},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3981.yaml",{"type":8503,"url":9773},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-submodule-names",[8558,8559,8560],{"id":167,"slug":9776,"dossier":47,"summary":9777,"aliases":9778,"sourceIds":9780,"published":9781,"modified":9782,"checkedAt":7,"severity":9783,"references":9785,"versionKeys":9794,"packageCount":32,"repositoryCount":810},"ghsa-3v7f-55p6-f55p-cfa06046","Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",[9779],"CVE-2026-33672",[167],"2026-03-25T21:13:39Z","2026-09-10T03:50:36.949634538Z",[9784],{"type":8535,"score":9293},[9786,9788,9790,9792],{"type":8500,"url":9787},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fsecurity\u002Fadvisories\u002FGHSA-3v7f-55p6-f55p",{"type":8503,"url":9789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33672",{"type":8500,"url":9791},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fcommit\u002F4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903",{"type":8508,"url":9793},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch",[9795,9796],"npm:picomatch@2.3.1","npm:picomatch@4.0.3",{"id":168,"slug":9798,"dossier":47,"summary":9799,"aliases":9800,"sourceIds":9802,"published":9803,"modified":9804,"checkedAt":7,"severity":9805,"references":9808,"versionKeys":9814,"packageCount":32,"repositoryCount":32},"ghsa-3w6x-2g7m-8v23-acc11428","Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`",[9801],"CVE-2026-42044",[168],"2026-05-05T00:19:33Z","2026-09-10T03:50:45.398396828Z",[9806],{"type":8535,"score":9807},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[9809,9811,9813],{"type":8500,"url":9810},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-3w6x-2g7m-8v23",{"type":8503,"url":9812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42044",{"type":8508,"url":9438},[9440,9441],{"id":169,"slug":9816,"dossier":47,"summary":9817,"aliases":9818,"sourceIds":9821,"published":9822,"modified":9823,"checkedAt":7,"severity":9824,"references":9828,"versionKeys":9837,"packageCount":32,"repositoryCount":665},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[9819,9820],"CVE-2026-34517","PYSEC-2026-2099",[169,9820],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[9825,9827],{"type":8496,"score":9826},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8535,"score":8870},[9829,9831,9833,9835,9836],{"type":8626,"url":9830},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":8503,"url":9832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":8626,"url":9834},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":170,"slug":9839,"dossier":47,"summary":9840,"aliases":9841,"sourceIds":9844,"published":9845,"modified":9846,"checkedAt":7,"severity":9847,"references":9850,"versionKeys":9867,"packageCount":32,"repositoryCount":34},"ghsa-3wxw-xv34-2frg-c013ae2d","GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)",[9842,9843],"CVE-2026-78679","PYSEC-2026-3837",[170,9843],"2026-09-08T19:42:22Z","2026-09-23T05:15:05.925079070Z",[9848],{"type":8535,"score":9849},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[9851,9853,9855,9857,9859,9860,9862,9864,9865],{"type":8500,"url":9852},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",{"type":8503,"url":9854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78679",{"type":8500,"url":9856},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2208",{"type":8500,"url":9858},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6",{"type":8508,"url":8550},{"type":8500,"url":9861},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.59",{"type":8500,"url":9863},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-tagreference-create",{"type":8508,"url":8919},{"type":8503,"url":9866},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",[8558,8559,8560],{"id":171,"slug":9869,"dossier":47,"summary":9870,"aliases":9871,"sourceIds":9873,"published":9874,"modified":9875,"checkedAt":7,"severity":9876,"references":9878,"versionKeys":9891,"packageCount":32,"repositoryCount":32},"ghsa-3xpg-4rpp-hhhm-9f4d35c1","undici vulnerable to Denial of Service via unbounded decompression of compressed responses",[9872],"CVE-2026-84890",[171],"2026-09-29T18:20:37Z","2026-09-29T18:30:41.143057118Z",[9877],{"type":8535,"score":8838},[9879,9881,9883,9885,9887,9888,9889,9890],{"type":8500,"url":9880},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-3xpg-4rpp-hhhm",{"type":8503,"url":9882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84890",{"type":8500,"url":9884},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2c7d7e1227043c644c4c32cfd1e276f4fd4fcb11",{"type":8500,"url":9886},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F7aac7f12f757844763c8b8f1ab6e305e80d55838",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9060},{"type":8500,"url":9062},[9065],{"id":172,"slug":9893,"dossier":47,"summary":9894,"aliases":9895,"sourceIds":9897,"published":9898,"modified":9899,"checkedAt":7,"severity":9900,"references":9902,"versionKeys":9924,"packageCount":32,"repositoryCount":32},"ghsa-42h9-826w-cgv3-ec079418","Axios: Excessive recursion in formDataToJSON can cause denial of service",[9896],"CVE-2026-67313",[172],"2026-07-20T17:58:59Z","2026-09-10T03:51:10.187294734Z",[9901],{"type":8496,"score":8678},[9903,9905,9907,9909,9911,9913,9915,9917,9918,9920,9922],{"type":8500,"url":9904},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-42h9-826w-cgv3",{"type":8503,"url":9906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67313",{"type":8503,"url":9908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68942",{"type":8500,"url":9910},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F11000",{"type":8500,"url":9912},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F11001",{"type":8500,"url":9914},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F1417285c69344bbcc6420a021f67dee0c6fedb2d",{"type":8500,"url":9916},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F32fc489632377d214db55bfa4e2c48486a7d7ce2",{"type":8508,"url":9438},{"type":8500,"url":9919},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.33.0",{"type":8500,"url":9921},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.18.0",{"type":8500,"url":9923},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-denial-of-service-via-formdatatojson",[9440,9441],{"id":173,"slug":9926,"dossier":47,"summary":9927,"aliases":9928,"sourceIds":9931,"published":9932,"modified":9933,"checkedAt":7,"severity":9934,"references":9936,"versionKeys":9949,"packageCount":32,"repositoryCount":752},"ghsa-42vr-xj54-vc7v-bb2dfa49","PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt \u002F verify_signature=False)",[9929,9930],"CVE-2026-101918","PYSEC-2026-4141",[173,9930],"2026-09-30T15:41:05Z","2026-10-01T17:56:09.538835697Z",[9935],{"type":8535,"score":8870},[9937,9939,9941,9943,9944,9946,9947],{"type":8500,"url":9938},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",{"type":8503,"url":9940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101918",{"type":8500,"url":9942},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F5fde08a6cf906aa7698de2d6391d88b73006b17b",{"type":8508,"url":9085},{"type":8500,"url":9945},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.15.0",{"type":8508,"url":9089},{"type":8503,"url":9948},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",[9093,9094,9095],{"id":174,"slug":9951,"dossier":47,"summary":9952,"aliases":9953,"sourceIds":9955,"published":9956,"modified":9957,"checkedAt":7,"severity":9958,"references":9960,"versionKeys":9978,"packageCount":32,"repositoryCount":32},"ghsa-43fc-jf86-j433-2bd62bad","Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig",[9954],"CVE-2026-25639",[174],"2026-02-09T17:46:14Z","2026-09-10T03:50:34.100599628Z",[9959],{"type":8535,"score":8571},[9961,9963,9965,9967,9969,9971,9973,9974,9976],{"type":8500,"url":9962},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-43fc-jf86-j433",{"type":8503,"url":9964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25639",{"type":8500,"url":9966},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7369",{"type":8500,"url":9968},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7388",{"type":8500,"url":9970},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F28c721588c7a77e7503d0a434e016f852c597b57",{"type":8500,"url":9972},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fd7ff1409c68168d3057fc3891f911b2b92616f9e",{"type":8508,"url":9438},{"type":8500,"url":9975},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.30.3",{"type":8500,"url":9977},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.13.5",[9440,9441],{"id":175,"slug":9980,"dossier":47,"summary":9981,"aliases":9982,"sourceIds":9985,"published":9986,"modified":9987,"checkedAt":7,"severity":9988,"references":9991,"versionKeys":10002,"packageCount":32,"repositoryCount":686},"ghsa-43mp-35q3-x3fq-895b1d20","virtualenv: Deletion recovery can change a symlink target's mode",[9983,9984],"BIT-virtualenv-2026-113724","CVE-2026-113724",[175],"2026-10-21T21:31:34Z","2026-10-29T10:55:47.691444554Z",[9989],{"type":8535,"score":9990},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[9992,9994,9996,9998,10000,10001],{"type":8500,"url":9993},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-43mp-35q3-x3fq",{"type":8503,"url":9995},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113724",{"type":8500,"url":9997},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3427",{"type":8500,"url":9999},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2bfdc0230d1b2685fedfcfe66c835b9a2ec7c440",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":176,"slug":10004,"dossier":47,"summary":10005,"aliases":10006,"sourceIds":10008,"published":10009,"modified":10010,"checkedAt":7,"severity":10011,"references":10013,"versionKeys":10019,"packageCount":32,"repositoryCount":32},"ghsa-445q-vr5w-6q77-193bc3c3","Axios: CRLF Injection in multipart\u002Fform-data body via unsanitized blob.type in formDataToStream",[10007],"CVE-2026-42037",[176],"2026-05-05T00:40:45Z","2026-09-10T03:50:45.396631689Z",[10012],{"type":8535,"score":9293},[10014,10016,10018],{"type":8500,"url":10015},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-445q-vr5w-6q77",{"type":8503,"url":10017},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42037",{"type":8508,"url":9438},[9440,9441],{"id":177,"slug":10021,"dossier":90,"summary":10022,"aliases":10023,"sourceIds":10027,"published":10028,"modified":10029,"checkedAt":7,"severity":10030,"references":10035,"versionKeys":10046,"packageCount":32,"repositoryCount":8523},"ghsa-4558-3h8r-v8xp-9e09a0b2","Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size",[10024,10025,10026],"BIT-pillow-2026-112394","CVE-2026-112394","PYSEC-2026-4327",[177,10026],"2026-10-19T21:17:07.747Z","2026-10-27T11:10:34.006455299Z",[10031,10033],{"type":8496,"score":10032},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8535,"score":10034},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:H",[10036,10038,10040,10042,10044,10045],{"type":8541,"url":10037},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4558-3h8r-v8xp",{"type":8503,"url":10039},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112394",{"type":8500,"url":10041},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9723",{"type":8626,"url":10043},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F392ee6f0d19a4adb766a63e9a99f3c28193b8d31",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":178,"slug":10048,"dossier":47,"summary":10049,"aliases":10050,"sourceIds":10054,"published":10055,"modified":10056,"checkedAt":7,"severity":10057,"references":10059,"versionKeys":10071,"packageCount":32,"repositoryCount":10072},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[10051,10052,10053],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[178,10053],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[10058],{"type":8535,"score":8571},[10060,10062,10064,10066,10068,10069],{"type":8541,"url":10061},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":8503,"url":10063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":8626,"url":10065},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":8500,"url":10067},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":8508,"url":8509},{"type":8503,"url":10070},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[8513,8514,8515,8516,8517,8518,8519,8520,8521],18,{"id":179,"slug":10074,"dossier":90,"summary":10075,"aliases":10076,"sourceIds":10079,"published":10080,"modified":10081,"checkedAt":7,"severity":10082,"references":10085,"versionKeys":10094,"packageCount":32,"repositoryCount":8523},"ghsa-462x-pgg6-55fp-29049dd8","Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)",[10077,10078],"BIT-pillow-2026-112395","CVE-2026-112395",[179],"2026-10-20T20:49:26Z","2026-10-26T08:56:01.770928143Z",[10083],{"type":8535,"score":10084},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[10086,10088,10090,10092,10093],{"type":8500,"url":10087},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-462x-pgg6-55fp",{"type":8503,"url":10089},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112395",{"type":8500,"url":10091},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F76869efdbbf2ad7dccd7536520fb61b7a00ab61e",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":180,"slug":10096,"dossier":47,"summary":10097,"aliases":10098,"sourceIds":10101,"published":10102,"modified":10103,"checkedAt":7,"severity":10104,"references":10107,"versionKeys":10120,"packageCount":32,"repositoryCount":686},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[10099,10100],"CVE-2025-50182","PYSEC-2026-1997",[180,10100],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[10105],{"type":8535,"score":10106},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[10108,10110,10112,10114,10115,10117,10118],{"type":8500,"url":10109},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":8503,"url":10111},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":8626,"url":10113},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":8508,"url":9357},{"type":8500,"url":10116},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":8508,"url":9359},{"type":8503,"url":10119},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[9361,9362,9363,9364],{"id":181,"slug":10122,"dossier":47,"summary":10123,"aliases":10124,"sourceIds":10126,"published":10127,"modified":10128,"checkedAt":7,"severity":10129,"references":10132,"versionKeys":10141,"packageCount":32,"repositoryCount":9035},"ghsa-494j-54xm-rwp3-eab1773e","AIOHTTP: Secure attribute not enforced for shared cookie",[10125],"CVE-2026-111063",[181],"2026-10-19T17:07:47Z","2026-10-26T15:00:05.287728271Z",[10130],{"type":8496,"score":10131},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10133,10135,10137,10139,10140],{"type":8500,"url":10134},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-494j-54xm-rwp3",{"type":8503,"url":10136},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111063",{"type":8500,"url":10138},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F999c356d61e966faffa97b06ab0d0455226d36c5",{"type":8508,"url":8944},{"type":8500,"url":9031},[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],{"id":182,"slug":10143,"dossier":47,"summary":10144,"aliases":10145,"sourceIds":10148,"published":10149,"modified":10150,"checkedAt":7,"severity":10151,"references":10154,"versionKeys":10165,"packageCount":32,"repositoryCount":686},"ghsa-494p-63j8-28p3-74531279","virtualenv: Downloaded wheel selection and caching precede verification",[10146,10147],"BIT-virtualenv-2026-113714","CVE-2026-113714",[182],"2026-10-23T22:25:22Z","2026-10-29T10:55:43.999222952Z",[10152],{"type":8496,"score":10153},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[10155,10157,10159,10161,10163,10164],{"type":8500,"url":10156},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-494p-63j8-28p3",{"type":8503,"url":10158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113714",{"type":8500,"url":10160},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3430",{"type":8500,"url":10162},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F7babec66e043e1cc8bc66869a063653898719d96",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":183,"slug":10167,"dossier":47,"summary":10168,"aliases":10169,"sourceIds":10171,"published":10172,"modified":10173,"checkedAt":7,"severity":10174,"references":10177,"versionKeys":10186,"packageCount":32,"repositoryCount":32},"ghsa-4992-7rv2-5pvq-12913d15","Undici has CRLF Injection in undici via `upgrade` option",[10170],"CVE-2026-1527",[183],"2026-03-13T20:41:26Z","2026-09-10T03:50:37.246920699Z",[10175],{"type":8535,"score":10176},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[10178,10180,10182,10184,10185],{"type":8500,"url":10179},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4992-7rv2-5pvq",{"type":8503,"url":10181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1527",{"type":8500,"url":10183},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3487198",{"type":8500,"url":8755},{"type":8508,"url":9058},[9064,9065],{"id":184,"slug":10188,"dossier":47,"summary":10189,"aliases":10190,"sourceIds":10192,"published":10193,"modified":10194,"checkedAt":7,"severity":10195,"references":10198,"versionKeys":10211,"packageCount":32,"repositoryCount":32},"ghsa-4cwx-7wf7-3272-2a4cbb99","undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives",[10191],"CVE-2026-13697",[184],"2026-08-03T19:19:47Z","2026-09-10T03:51:13.021707572Z",[10196],{"type":8535,"score":10197},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[10199,10201,10203,10205,10206,10207,10209],{"type":8500,"url":10200},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4cwx-7wf7-3272",{"type":8503,"url":10202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-13697",{"type":8500,"url":10204},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4fe5bc5fefe5ac81a200fc8e1cf84b8bf8464451",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":10208},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv7.29.0",{"type":8500,"url":10210},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv8.9.0",[9064,9065],{"id":185,"slug":10213,"dossier":47,"summary":10214,"aliases":10215,"sourceIds":10217,"published":10218,"modified":10219,"checkedAt":7,"severity":10220,"references":10224,"versionKeys":10235,"packageCount":32,"repositoryCount":32},"ghsa-4fh9-h7wg-q85m-f401ee5c","mdast-util-to-hast has unsanitized class attribute",[10216],"CVE-2025-66400",[185],"2025-12-02T01:25:46Z","2026-09-10T03:50:31.288154267Z",[10221,10222],{"type":8535,"score":9293},{"type":8496,"score":10223},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10225,10227,10229,10231,10233],{"type":8500,"url":10226},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast\u002Fsecurity\u002Fadvisories\u002FGHSA-4fh9-h7wg-q85m",{"type":8503,"url":10228},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66400",{"type":8500,"url":10230},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast\u002Fcommit\u002F6fc783ae6abdeb798fd5a68e7f3f21411dde7403",{"type":8500,"url":10232},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast\u002Fcommit\u002Fab3a79570a1afbfa7efef5d4a0cd9b5caafbc5d7",{"type":8508,"url":10234},"https:\u002F\u002Fgithub.com\u002Fsyntax-tree\u002Fmdast-util-to-hast",[10236],"npm:mdast-util-to-hast@13.2.0",{"id":186,"slug":10238,"dossier":47,"summary":10239,"aliases":10240,"sourceIds":10243,"published":10244,"modified":10245,"checkedAt":7,"severity":10246,"references":10250,"versionKeys":10256,"packageCount":32,"repositoryCount":654},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[10241,10242],"CVE-2026-54273","PYSEC-2026-2107",[186,10242],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[10247,10249],{"type":8496,"score":10248},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8535,"score":8571},[10251,10253,10255],{"type":8503,"url":10252},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":8626,"url":10254},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":8508,"url":8944},[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":187,"slug":10258,"dossier":47,"summary":10259,"aliases":10260,"sourceIds":10263,"published":10264,"modified":10265,"checkedAt":7,"severity":10266,"references":10268,"versionKeys":10285,"packageCount":32,"repositoryCount":34},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[10261,10262],"CVE-2026-76219","PYSEC-2026-3838",[187,10262],"2026-08-07T15:33:57Z","2026-09-10T12:25:42.767166279Z",[10267],{"type":8535,"score":9566},[10269,10271,10273,10275,10277,10278,10280,10282,10283],{"type":8500,"url":10270},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":8503,"url":10272},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76219",{"type":8500,"url":10274},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":8500,"url":10276},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":8508,"url":8550},{"type":8500,"url":10279},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",{"type":8500,"url":10281},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-read-tree",{"type":8508,"url":8919},{"type":8503,"url":10284},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",[8558,8559,8560],{"id":188,"slug":10287,"dossier":47,"summary":10288,"aliases":10289,"sourceIds":10291,"published":10292,"modified":10293,"checkedAt":7,"severity":10294,"references":10296,"versionKeys":10316,"packageCount":32,"repositoryCount":32},"ghsa-4hjh-wcwx-xvwj-0390ef58","Axios is vulnerable to DoS attack through lack of data size check",[10290],"CVE-2025-58754",[188],"2025-09-11T21:07:55Z","2026-09-10T03:50:27.860875468Z",[10295],{"type":8535,"score":8571},[10297,10299,10301,10303,10305,10307,10309,10311,10312,10314],{"type":8500,"url":10298},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-4hjh-wcwx-xvwj",{"type":8503,"url":10300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58754",{"type":8500,"url":10302},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7011",{"type":8500,"url":10304},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F7034",{"type":8500,"url":10306},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F945435fc51467303768202250debb8d4ae892593",{"type":8500,"url":10308},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fa1b1d3f073a988601583a604f5f9f5d05a3d0b67",{"type":8500,"url":10310},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fc30252f685e8f4326722de84923fcbc8cf557f06",{"type":8508,"url":9438},{"type":8500,"url":10313},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.30.2",{"type":8500,"url":10315},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.12.0",[9440],{"id":189,"slug":10318,"dossier":47,"summary":10319,"aliases":10320,"sourceIds":10322,"published":10323,"modified":10324,"checkedAt":7,"severity":10325,"references":10328,"versionKeys":10337,"packageCount":32,"repositoryCount":32},"ghsa-4hqw-qxg8-jxx2-6e84c6d9","Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders",[10321],"CVE-2026-101900",[189],"2026-09-30T15:34:46Z","2026-09-30T15:46:17.701967512Z",[10326],{"type":8496,"score":10327},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:H\u002FSA:N",[10329,10331,10333,10334,10335,10336],{"type":8500,"url":10330},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-4hqw-qxg8-jxx2",{"type":8503,"url":10332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101900",{"type":8500,"url":9739},{"type":8500,"url":9741},{"type":8508,"url":9438},{"type":8500,"url":9744},[9441],{"id":190,"slug":10339,"dossier":47,"summary":10340,"aliases":10341,"sourceIds":10344,"published":10345,"modified":10346,"checkedAt":7,"severity":10347,"references":10351,"versionKeys":10355,"packageCount":32,"repositoryCount":654},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[10342,10343],"CVE-2026-54275","PYSEC-2026-237",[190,10343],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[10348,10350],{"type":8496,"score":10349},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8535,"score":8571},[10352,10354],{"type":8503,"url":10353},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":8508,"url":8944},[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":191,"slug":10357,"dossier":47,"summary":10358,"aliases":10359,"sourceIds":10361,"published":10362,"modified":10363,"checkedAt":7,"severity":10364,"references":10367,"versionKeys":10376,"packageCount":32,"repositoryCount":32},"ghsa-4mjr-xmp4-gh2g-3eea625c","qs: Denial of Service via Attacker Controlled isBuffer",[10360],"CVE-2026-82417",[191],"2026-09-02T14:45:13Z","2026-09-10T03:51:14.991984096Z",[10365,10366],{"type":8535,"score":8870},{"type":8496,"score":8678},[10368,10370,10372,10374],{"type":8500,"url":10369},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-4mjr-xmp4-gh2g",{"type":8503,"url":10371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82417",{"type":8500,"url":10373},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002Fe83d321ffafb38cf210683ac31714fce6ce1c6c6",{"type":8508,"url":10375},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs",[10377,10378],"npm:qs@6.13.0","npm:qs@6.14.1",{"id":192,"slug":10380,"dossier":47,"summary":10381,"aliases":10382,"sourceIds":10384,"published":10385,"modified":10386,"checkedAt":7,"severity":10387,"references":10389,"versionKeys":10405,"packageCount":32,"repositoryCount":564},"ghsa-4qv8-2p9j-2685-48c36546","undici vulnerable to Denial of Service via unbounded memory in the EventSource parser",[10383],"CVE-2026-109924",[192],"2026-10-23T22:13:29Z","2026-10-23T22:30:04.104974737Z",[10388],{"type":8535,"score":8838},[10390,10392,10394,10396,10398,10400,10401,10402,10403,10404],{"type":8500,"url":10391},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4qv8-2p9j-2685",{"type":8503,"url":10393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109924",{"type":8500,"url":10395},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F299162740d5f39120092277e70efacb4d151c1c6",{"type":8500,"url":10397},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F789ef26461c648480433846607154f52d74ec9ab",{"type":8500,"url":10399},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fc43b23fdc6b37e1283d4347408bb16800f867d9e",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9178},{"type":8500,"url":9180},{"type":8500,"url":9182},[9064,9065,9184],{"id":193,"slug":10407,"dossier":90,"summary":10408,"aliases":10409,"sourceIds":10413,"published":10414,"modified":10415,"checkedAt":7,"severity":10416,"references":10418,"versionKeys":10429,"packageCount":32,"repositoryCount":8523},"ghsa-4rm8-3hmm-39fg-6e9ca404","Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise",[10410,10411,10412],"BIT-pillow-2026-96641","CVE-2026-96641","PYSEC-2026-4340",[193,10412],"2026-10-21T21:20:32.500Z","2026-10-29T10:56:07.449486409Z",[10417],{"type":8535,"score":8654},[10419,10421,10423,10425,10427,10428],{"type":8503,"url":10420},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rm8-3hmm-39fg",{"type":8503,"url":10422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96641",{"type":9620,"url":10424},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10010",{"type":8626,"url":10426},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F80de4be9e38d3a6148dd4d8491eb80cd12b760a4",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":194,"slug":10431,"dossier":47,"summary":10432,"aliases":10433,"sourceIds":10437,"published":10438,"modified":10439,"checkedAt":7,"severity":10440,"references":10443,"versionKeys":10452,"packageCount":32,"repositoryCount":654},"ghsa-4rr5-89j8-mwwm-f8e3c770","Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer",[10434,10435,10436],"BIT-pillow-2026-112396","CVE-2026-112396","PYSEC-2026-4328",[194,10436],"2026-10-19T22:17:06.837Z","2026-10-27T11:10:49.694224501Z",[10441,10442],{"type":8535,"score":8838},{"type":8535,"score":8571},[10444,10446,10448,10450,10451],{"type":8541,"url":10445},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rr5-89j8-mwwm",{"type":8503,"url":10447},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112396",{"type":8626,"url":10449},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fdc95da20207827a062cfbf551ee9f6031465a8bb",{"type":8508,"url":8509},{"type":8503,"url":8511},[8517,8518,8519,8520,8521,8522],{"id":195,"slug":10454,"dossier":47,"summary":10455,"aliases":10456,"sourceIds":10458,"published":10459,"modified":10460,"checkedAt":7,"severity":10461,"references":10463,"versionKeys":10476,"packageCount":32,"repositoryCount":564},"ghsa-4w7w-5xrc-9h26-97337653","undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects",[10457],"CVE-2026-109829",[195],"2026-10-27T19:02:31Z","2026-10-27T19:15:22.403656345Z",[10462],{"type":8535,"score":9163},[10464,10466,10468,10470,10472,10473,10474,10475],{"type":8500,"url":10465},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-4w7w-5xrc-9h26",{"type":8503,"url":10467},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109829",{"type":8500,"url":10469},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F26c2bfb3def0b67241ce878e80657ed5d6c3efa8",{"type":8500,"url":10471},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb20b82ad80a405a12b6ce1f341bcd418de390aa0",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9180},{"type":8500,"url":9182},[9064,9065,9184],{"id":196,"slug":10478,"dossier":47,"summary":10479,"aliases":10480,"sourceIds":10482,"published":10483,"modified":10484,"checkedAt":7,"severity":10485,"references":10487,"versionKeys":10504,"packageCount":32,"repositoryCount":810},"ghsa-4w7w-66w2-5vf9-1ec64746","Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",[10481],"CVE-2026-39365",[196],"2026-04-06T18:03:46Z","2026-09-10T03:50:42.779400319Z",[10486],{"type":8496,"score":10131},[10488,10490,10492,10494,10496,10498,10500,10502],{"type":8500,"url":10489},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-4w7w-66w2-5vf9",{"type":8503,"url":10491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39365",{"type":8500,"url":10493},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F22161",{"type":8500,"url":10495},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F79f002f2286c03c88c7b74c511c7f9fc6dc46694",{"type":8508,"url":10497},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite",{"type":8500,"url":10499},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv6.4.2",{"type":8500,"url":10501},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv7.3.2",{"type":8500,"url":10503},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Freleases\u002Ftag\u002Fv8.0.5",[10505,10506,10507],"npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1",{"id":197,"slug":10509,"dossier":47,"summary":10510,"aliases":10511,"sourceIds":10515,"published":10516,"modified":10517,"checkedAt":7,"severity":10518,"references":10521,"versionKeys":10536,"packageCount":32,"repositoryCount":10072},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[10512,10513,10514],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[197,10514],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[10519],{"type":8535,"score":10520},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[10522,10524,10526,10528,10530,10532,10534,10535],{"type":8541,"url":10523},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":8503,"url":10525},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":8626,"url":10527},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":8626,"url":10529},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":8626,"url":10531},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":8500,"url":10533},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":8508,"url":8509},{"type":8503,"url":10070},[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":198,"slug":10538,"dossier":47,"summary":10539,"aliases":10540,"sourceIds":10542,"published":10543,"modified":10544,"checkedAt":7,"severity":10545,"references":10548,"versionKeys":10557,"packageCount":32,"repositoryCount":32},"ghsa-4x5r-pxfx-6jf8-59419f35","@babel\u002Fcore: Arbitrary File Read via sourceMappingURL Comment",[10541],"CVE-2026-49356",[198],"2026-06-15T17:14:14Z","2026-09-10T03:50:48.280629201Z",[10546],{"type":8535,"score":10547},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:N\u002FA:N",[10549,10551,10553,10555],{"type":8500,"url":10550},"https:\u002F\u002Fgithub.com\u002Fbabel\u002Fbabel\u002Fsecurity\u002Fadvisories\u002FGHSA-4x5r-pxfx-6jf8",{"type":8503,"url":10552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49356",{"type":8500,"url":10554},"https:\u002F\u002Fbabeljs.io\u002Fdocs\u002Foptions#inputsourcemap",{"type":8508,"url":10556},"https:\u002F\u002Fgithub.com\u002Fbabel\u002Fbabel",[10558],"npm:@babel\u002Fcore@7.26.10",{"id":199,"slug":10560,"dossier":47,"summary":10561,"aliases":10562,"sourceIds":10564,"published":10565,"modified":10566,"checkedAt":7,"severity":10567,"references":10570,"versionKeys":10575,"packageCount":32,"repositoryCount":564},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[10563],"CVE-2026-58203",[199],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[10568],{"type":8535,"score":10569},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[10571,10573],{"type":8500,"url":10572},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":8508,"url":10574},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[10576],"pypi:pydantic-settings@2.12.0",{"id":200,"slug":10578,"dossier":47,"summary":10579,"aliases":10580,"sourceIds":10583,"published":10584,"modified":10585,"checkedAt":7,"severity":10586,"references":10591,"versionKeys":10614,"packageCount":32,"repositoryCount":10617},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[10581,10582],"CVE-2026-4539","PYSEC-2026-2987",[200,10582],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[10587,10589],{"type":8535,"score":10588},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":8496,"score":10590},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[10592,10594,10596,10598,10600,10602,10604,10606,10608,10610,10612],{"type":8503,"url":10593},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":8500,"url":10595},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":8500,"url":10597},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":8500,"url":10599},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":8508,"url":10601},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":8500,"url":10603},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":8500,"url":10605},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":8500,"url":10607},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":8500,"url":10609},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":8508,"url":10611},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":8503,"url":10613},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[10615,10616],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",16,{"id":201,"slug":10619,"dossier":47,"summary":10620,"aliases":10621,"sourceIds":10623,"published":10624,"modified":10625,"checkedAt":7,"severity":10626,"references":10628,"versionKeys":10642,"packageCount":32,"repositoryCount":564},"ghsa-52cp-r559-cp3m-8cf6b3f8","js-yaml: YAML merge-key chains can force quadratic CPU consumption",[10622],"CVE-2026-59869",[201],"2026-07-20T21:19:09Z","2026-09-10T03:50:12.263307536Z",[10627],{"type":8535,"score":8571},[10629,10631,10633,10635,10637,10638,10640],{"type":8500,"url":10630},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-52cp-r559-cp3m",{"type":8503,"url":10632},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59869",{"type":8500,"url":10634},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",{"type":8500,"url":10636},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F59423c6f8cdc78742ac00e25a4dd39ef16b702e4",{"type":8508,"url":8817},{"type":8500,"url":10639},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F3.15.0",{"type":8500,"url":10641},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Freleases\u002Ftag\u002F4.3.0",[8823,8824,8825,8826],{"id":202,"slug":10644,"dossier":47,"summary":10645,"aliases":10646,"sourceIds":10647,"published":10648,"modified":10649,"checkedAt":7,"severity":10650,"references":10652,"versionKeys":10659,"packageCount":32,"repositoryCount":705},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[202],"2026-06-15T20:12:27Z","2026-09-10T03:50:48.298936410Z",[10651],{"type":8535,"score":8571},[10653,10655,10657],{"type":8500,"url":10654},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":8508,"url":10656},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":8500,"url":10658},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[10660,10661,10662,10663,10664,10665],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":203,"slug":10667,"dossier":47,"summary":10668,"aliases":10669,"sourceIds":10672,"published":10673,"modified":10674,"checkedAt":7,"severity":10675,"references":10679,"versionKeys":10689,"packageCount":32,"repositoryCount":34},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[10670,10671],"CVE-2026-73619","PYSEC-2026-3948",[203,10671],"2026-08-03T20:14:28Z","2026-09-10T13:11:01.695990206Z",[10676,10677],{"type":8535,"score":9849},{"type":8496,"score":10678},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[10680,10682,10683,10685,10686,10687],{"type":8541,"url":10681},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":8500,"url":9573},{"type":8500,"url":10684},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":8508,"url":8550},{"type":8500,"url":9578},{"type":8503,"url":10688},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-archive",[8558,8559,8560],{"id":204,"slug":10691,"dossier":47,"summary":10692,"aliases":10693,"sourceIds":10695,"published":10696,"modified":10697,"checkedAt":7,"severity":10698,"references":10700,"versionKeys":10709,"packageCount":32,"repositoryCount":32},"ghsa-542g-h47m-68v8-ba3bccdd","Axios: Denial of Service via Unhandled 'error' Event in HTTP\u002F2 ClientHttp2Session Initialization",[10694],"CVE-2026-101901",[204],"2026-09-30T15:01:07Z","2026-09-30T15:15:04.061469672Z",[10699],{"type":8496,"score":8497},[10701,10703,10705,10706,10707,10708],{"type":8500,"url":10702},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-542g-h47m-68v8",{"type":8503,"url":10704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101901",{"type":8500,"url":9739},{"type":8500,"url":9741},{"type":8508,"url":9438},{"type":8500,"url":9744},[9441],{"id":205,"slug":10711,"dossier":47,"summary":10712,"aliases":10713,"sourceIds":10716,"published":10717,"modified":10718,"checkedAt":7,"severity":10719,"references":10722,"versionKeys":10734,"packageCount":32,"repositoryCount":686},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[10714,10715],"CVE-2025-69226","PYSEC-2026-1097",[205,10715],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[10720],{"type":8496,"score":10721},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[10723,10725,10727,10729,10730,10732],{"type":8500,"url":10724},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":8503,"url":10726},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":8626,"url":10728},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":8508,"url":8944},{"type":8508,"url":10731},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":8503,"url":10733},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[8948,8949,8950,8951,8952,8953,8954],{"id":206,"slug":10736,"dossier":47,"summary":10737,"aliases":10738,"sourceIds":10741,"published":10742,"modified":10743,"checkedAt":7,"severity":10744,"references":10746,"versionKeys":10761,"packageCount":32,"repositoryCount":686},"ghsa-54p9-h82j-f925-623d2ef6","Multidict: Reference leak in CIMultiDict\u002FMultiDict items-view union and subtraction",[10739,10740],"CVE-2026-104874","PYSEC-2026-4244",[206,10740],"2026-10-05T23:40:58Z","2026-10-15T14:56:05.601333622Z",[10745],{"type":8535,"score":8870},[10747,10749,10751,10753,10755,10757,10759],{"type":8500,"url":10748},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fsecurity\u002Fadvisories\u002FGHSA-54p9-h82j-f925",{"type":8503,"url":10750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104874",{"type":8500,"url":10752},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fcommit\u002F350b4a07bf8ff851b6d7544e81b1c748bdc74c40",{"type":8508,"url":10754},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict",{"type":8500,"url":10756},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Freleases\u002Ftag\u002Fv6.9.1",{"type":8508,"url":10758},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmultidict",{"type":8503,"url":10760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54p9-h82j-f925",[10762,10763],"pypi:multidict@6.7.0","pypi:multidict@6.7.1",{"id":207,"slug":10765,"dossier":47,"summary":10766,"aliases":10767,"sourceIds":10770,"published":10771,"modified":10772,"checkedAt":7,"severity":10773,"references":10775,"versionKeys":10786,"packageCount":32,"repositoryCount":686},"ghsa-558c-9hv2-4prj-1ba67416","virtualenv: Generated files can follow existing destination links",[10768,10769],"BIT-virtualenv-2026-113721","CVE-2026-113721",[207],"2026-10-22T17:03:12Z","2026-10-29T10:55:51.822936662Z",[10774],{"type":8535,"score":9990},[10776,10778,10780,10782,10784,10785],{"type":8500,"url":10777},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-558c-9hv2-4prj",{"type":8503,"url":10779},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113721",{"type":8500,"url":10781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3431",{"type":8500,"url":10783},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd25f28699eefb1fc34a251e5adf2b5de844c36cd",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":208,"slug":10788,"dossier":47,"summary":10789,"aliases":10790,"sourceIds":10792,"published":10793,"modified":10794,"checkedAt":7,"severity":10795,"references":10797,"versionKeys":10810,"packageCount":32,"repositoryCount":564},"ghsa-55wc-3pg8-jfw6-7a30c525","undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor",[10791],"CVE-2026-87029",[208],"2026-10-27T19:02:10Z","2026-10-27T19:15:22.392692308Z",[10796],{"type":8535,"score":8838},[10798,10800,10802,10804,10806,10807,10808,10809],{"type":8500,"url":10799},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-55wc-3pg8-jfw6",{"type":8503,"url":10801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-87029",{"type":8500,"url":10803},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F63cba7712ca012b2603c6aeeb4c72d8692332cd0",{"type":8500,"url":10805},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Ff851f315db1f2acce0ea668f88d9d0fa61c8420c",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9180},{"type":8500,"url":9182},[9065,9184],{"id":209,"slug":10812,"dossier":47,"summary":10813,"aliases":10814,"sourceIds":10817,"published":10818,"modified":10819,"checkedAt":7,"severity":10820,"references":10822,"versionKeys":10837,"packageCount":32,"repositoryCount":34},"ghsa-5639-2j2p-m4mx-3aefc2b3","Mako: Path traversal via drive-letter URI on Windows in TemplateLookup",[10815,10816],"CVE-2026-102991","PYSEC-2026-4243",[209,10816],"2026-10-05T23:42:02Z","2026-10-15T14:55:45.473045835Z",[10821],{"type":8535,"score":9138},[10823,10825,10827,10829,10831,10832,10834,10835],{"type":8500,"url":10824},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",{"type":8503,"url":10826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102991",{"type":8500,"url":10828},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F441",{"type":8500,"url":10830},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F000ed85e4e48771eff460bf4fc721fb43de80e08",{"type":8508,"url":9118},{"type":8500,"url":10833},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_4_2",{"type":8508,"url":9122},{"type":8503,"url":10836},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",[9126,10838,9127],"pypi:mako@1.3.12",{"id":210,"slug":10840,"dossier":47,"summary":10841,"aliases":10842,"sourceIds":10844,"published":10845,"modified":10846,"checkedAt":7,"severity":10847,"references":10850,"versionKeys":10861,"packageCount":32,"repositoryCount":724},"ghsa-567q-5qvw-pf92-60527ab6","filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break",[10843],"CVE-2026-112907",[210],"2026-10-23T22:27:32Z","2026-10-23T22:45:03.452878321Z",[10848],{"type":8535,"score":10849},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[10851,10853,10855,10857,10859],{"type":8500,"url":10852},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-567q-5qvw-pf92",{"type":8500,"url":10854},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F835",{"type":8500,"url":10856},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Fe1e825b1992f69fb6b346dc395d5ae4893536c0a",{"type":8508,"url":10858},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":8500,"url":10860},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.2.1",[10862,10863,10864,10865],"pypi:filelock@3.25.2","pypi:filelock@3.29.0","pypi:filelock@3.29.4","pypi:filelock@3.29.7",{"id":211,"slug":10867,"dossier":47,"summary":10868,"aliases":10869,"sourceIds":10871,"published":10872,"modified":10873,"checkedAt":7,"severity":10874,"references":10877,"versionKeys":10888,"packageCount":32,"repositoryCount":810},"ghsa-587h-7wmj-h5pm-d91659cb","launch-editor: `fs.existsSync()` existence check can be bypassed on Windows",[10870],"CVE-2026-112942",[211],"2026-10-20T19:48:25Z","2026-10-20T20:00:04.608979840Z",[10875],{"type":8496,"score":10876},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[10878,10880,10882,10884,10886],{"type":8500,"url":10879},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-587h-7wmj-h5pm",{"type":8503,"url":10881},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112942",{"type":8500,"url":10883},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fcommit\u002Ff13cd835d4b8e860b1d4d080ad8a490cc2463679",{"type":8508,"url":10885},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor",{"type":8500,"url":10887},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Freleases\u002Ftag\u002Fv2.14.2",[10505,10506,10507],{"id":212,"slug":10890,"dossier":90,"summary":10891,"aliases":10892,"sourceIds":10896,"published":10897,"modified":10898,"checkedAt":7,"severity":10899,"references":10902,"versionKeys":10911,"packageCount":32,"repositoryCount":8523},"ghsa-58r4-6rv3-gfh8-17253bd5","Pillow: Out-of-bounds access in _imagingmorph on a zero-width image",[10893,10894,10895],"BIT-pillow-2026-112397","CVE-2026-112397","PYSEC-2026-4329",[212,10895],"2026-10-19T22:17:06.970Z","2026-10-28T11:10:53.627071818Z",[10900,10901],{"type":8496,"score":9003},{"type":8535,"score":8571},[10903,10905,10907,10909,10910],{"type":8541,"url":10904},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-58r4-6rv3-gfh8",{"type":8503,"url":10906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112397",{"type":8626,"url":10908},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F18f7c0dfee93063c51db6ed0ca8c4da2999dcb64",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":213,"slug":10913,"dossier":47,"summary":10914,"aliases":10915,"sourceIds":10919,"published":10920,"modified":10921,"checkedAt":7,"severity":10922,"references":10924,"versionKeys":10938,"packageCount":32,"repositoryCount":686},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[10916,10917,10918],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[213,10918],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[10923],{"type":8535,"score":9990},[10925,10927,10929,10931,10933,10934,10936],{"type":8500,"url":10926},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":8503,"url":10928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":8500,"url":10930},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":8626,"url":10932},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":8508,"url":9546},{"type":8508,"url":10935},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":8503,"url":10937},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[9550,9551,9552,9553,9554],{"id":214,"slug":10940,"dossier":47,"summary":10941,"aliases":10942,"sourceIds":10944,"published":10945,"modified":10946,"checkedAt":7,"severity":10947,"references":10950,"versionKeys":10960,"packageCount":32,"repositoryCount":34},"ghsa-59cr-6r3x-644w-a8ec12fb","GitPython submodule update path traversal can write outside the repository",[10943],"CVE-2026-100689",[214],"2026-09-30T23:47:12Z","2026-10-01T00:00:05.754996881Z",[10948],{"type":8496,"score":10949},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[10951,10953,10955,10957,10958],{"type":8500,"url":10952},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-59cr-6r3x-644w",{"type":8500,"url":10954},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2225",{"type":8500,"url":10956},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed0ebc2f2e74d979cdc367a4864a7731fdcc093",{"type":8508,"url":8550},{"type":8500,"url":10959},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.62",[8558,8559,8560],{"id":215,"slug":10962,"dossier":47,"summary":10963,"aliases":10964,"sourceIds":10967,"published":10968,"modified":10969,"checkedAt":7,"severity":10970,"references":10973,"versionKeys":10986,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[10965,10966],"CVE-2024-53981","PYSEC-2026-1851",[215,10966],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[10971,10972],{"type":8535,"score":8571},{"type":8496,"score":9003},[10974,10976,10978,10980,10982,10984],{"type":8500,"url":10975},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":8503,"url":10977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":8500,"url":10979},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":8508,"url":10981},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":8508,"url":10983},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":8503,"url":10985},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[10987],"pypi:python-multipart@0.0.9",{"id":216,"slug":10989,"dossier":47,"summary":10990,"aliases":10991,"sourceIds":10993,"published":10994,"modified":10995,"checkedAt":7,"severity":10996,"references":10998,"versionKeys":11004,"packageCount":32,"repositoryCount":32},"ghsa-5c9x-8gcm-mpgx-c911a679","Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0",[10992],"CVE-2026-42034",[216],"2026-05-05T00:33:25Z","2026-09-10T03:50:45.707956373Z",[10997],{"type":8535,"score":8870},[10999,11001,11003],{"type":8500,"url":11000},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-5c9x-8gcm-mpgx",{"type":8503,"url":11002},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42034",{"type":8508,"url":9438},[9440,9441],{"id":217,"slug":11006,"dossier":47,"summary":11007,"aliases":11008,"sourceIds":11010,"published":11011,"modified":11012,"checkedAt":7,"severity":11013,"references":11016,"versionKeys":11033,"packageCount":32,"repositoryCount":752},"ghsa-5h93-6whr-6q8j-24a4ef90","Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies",[11009],"CVE-2026-116685",[217],"2026-10-27T21:05:34Z","2026-10-27T21:15:03.819223133Z",[11014],{"type":8535,"score":11015},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[11017,11019,11021,11023,11025,11027,11029,11031],{"type":8500,"url":11018},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-5h93-6whr-6q8j",{"type":8500,"url":11020},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3397",{"type":8500,"url":11022},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3448",{"type":8500,"url":11024},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F2106335745563b2321b8c73fef2c12903d00aa6e",{"type":8500,"url":11026},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fc6762e821c527925f0b617db216d00fbd1d0bf99",{"type":8508,"url":11028},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":8500,"url":11030},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.30.0",{"type":8500,"url":11032},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv2.2.0",[11034,11035,11036,11037],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0","pypi:mcp@1.28.1",{"id":218,"slug":11039,"dossier":47,"summary":11040,"aliases":11041,"sourceIds":11044,"published":11045,"modified":11046,"checkedAt":7,"severity":11047,"references":11050,"versionKeys":11067,"packageCount":32,"repositoryCount":10617},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[11042,11043],"CVE-2026-64847","PYSEC-2026-4024",[218,11043],"2026-09-18T17:17:10Z","2026-10-01T17:55:57.336188727Z",[11048],{"type":8496,"score":11049},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[11051,11053,11055,11057,11059,11061,11063,11065],{"type":8500,"url":11052},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":8500,"url":11054},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":8500,"url":11056},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":8508,"url":11058},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":8500,"url":11060},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",{"type":8508,"url":11062},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fanyio",{"type":8503,"url":11064},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":8503,"url":11066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-64847",[11068,11069,11070,11071,11072,11073,11074,11075],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":219,"slug":11077,"dossier":47,"summary":11078,"aliases":11079,"sourceIds":11080,"published":11081,"modified":11082,"checkedAt":7,"severity":11083,"references":11085,"versionKeys":11089,"packageCount":32,"repositoryCount":810},"ghsa-5p4m-2wfm-xmqj-cf9a2800","JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported",[],[219],"2026-08-06T20:27:32Z","2026-09-10T03:50:53.407436483Z",[11084],{"type":8535,"score":8571},[11086,11088],{"type":8500,"url":11087},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-5p4m-2wfm-xmqj",{"type":8508,"url":8817},[8823,8824,8825,8826,8827],{"id":220,"slug":11091,"dossier":47,"summary":11092,"aliases":11093,"sourceIds":11096,"published":11097,"modified":11098,"checkedAt":7,"severity":11099,"references":11101,"versionKeys":11110,"packageCount":32,"repositoryCount":705},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[11094,11095],"CVE-2026-53539","PYSEC-2026-3036",[220,11095],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[11100],{"type":8535,"score":8571},[11102,11104,11105,11106,11108],{"type":8500,"url":11103},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":8508,"url":10981},{"type":8508,"url":10983},{"type":8503,"url":11107},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":8503,"url":11109},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[11111,11112,11113,10987],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":221,"slug":11115,"dossier":47,"summary":11116,"aliases":11117,"sourceIds":11120,"published":11121,"modified":11122,"checkedAt":7,"severity":11123,"references":11126,"versionKeys":11136,"packageCount":32,"repositoryCount":686},"ghsa-5vjq-rrrf-7h2q-86d7b4a3","virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST",[11118,11119],"BIT-virtualenv-2026-113726","CVE-2026-113726",[221],"2026-10-21T16:46:23Z","2026-10-29T10:55:33.825448161Z",[11124],{"type":8535,"score":11125},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[11127,11129,11131,11133,11134],{"type":8500,"url":11128},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-5vjq-rrrf-7h2q",{"type":8503,"url":11130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113726",{"type":8500,"url":11132},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5b915367da82bd024b2a0d28d2f98007034b4aa2",{"type":8508,"url":9546},{"type":8500,"url":11135},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.4",[9550,9551,9552,9553,9554],{"id":222,"slug":11138,"dossier":47,"summary":11139,"aliases":11140,"sourceIds":11143,"published":11144,"modified":11145,"checkedAt":7,"severity":11146,"references":11149,"versionKeys":11164,"packageCount":32,"repositoryCount":564},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[11141,11142],"CVE-2025-69534","PYSEC-2026-89",[222,11142],"2026-03-05T15:16:11.243Z","2026-09-10T03:50:37.537940778Z",[11147,11148],{"type":8535,"score":8571},{"type":8496,"score":8967},[11150,11152,11154,11156,11158,11160,11162],{"type":8503,"url":11151},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":9620,"url":11153},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":8500,"url":11155},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":8508,"url":11157},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":8500,"url":11159},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":8500,"url":11161},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":8503,"url":11163},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[11165],"pypi:markdown@3.8",{"id":223,"slug":11167,"dossier":47,"summary":11168,"aliases":11169,"sourceIds":11171,"published":11172,"modified":11173,"checkedAt":7,"severity":11174,"references":11176,"versionKeys":11183,"packageCount":32,"repositoryCount":9035},"ghsa-5wr8-gcqf-gqf3-8b4786ad","aiohttp server lacks an initial request\u002Fheader timeout",[11170],"CVE-2026-111064",[223],"2026-10-19T17:08:04Z","2026-10-19T17:15:04.139404381Z",[11175],{"type":8496,"score":8497},[11177,11179,11181,11182],{"type":8500,"url":11178},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-5wr8-gcqf-gqf3",{"type":8500,"url":11180},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbe846822b4b3a5a54b6163e794b42dc06fba54a3",{"type":8508,"url":8944},{"type":8500,"url":9031},[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],{"id":224,"slug":11185,"dossier":90,"summary":11186,"aliases":11187,"sourceIds":11191,"published":11192,"modified":11193,"checkedAt":7,"severity":11194,"references":11198,"versionKeys":11207,"packageCount":32,"repositoryCount":8523},"ghsa-5x8w-8jj5-q52h-96fe86d3","Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution",[11188,11189,11190],"BIT-pillow-2026-112398","CVE-2026-112398","PYSEC-2026-4330",[224,11190],"2026-10-19T22:17:07.107Z","2026-10-28T11:10:48.833199086Z",[11195,11197],{"type":8496,"score":11196},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8535,"score":8777},[11199,11201,11203,11205,11206],{"type":8541,"url":11200},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x8w-8jj5-q52h",{"type":8503,"url":11202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112398",{"type":8626,"url":11204},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F242a059aedc1935097d9aa1dc3f099750467ba75",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":225,"slug":11209,"dossier":47,"summary":11210,"aliases":11211,"sourceIds":11215,"published":11216,"modified":11217,"checkedAt":7,"severity":11218,"references":11220,"versionKeys":11230,"packageCount":32,"repositoryCount":10072},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[11212,11213,11214],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[225,11214],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[11219],{"type":8535,"score":8571},[11221,11223,11225,11226,11228,11229],{"type":8541,"url":11222},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":8503,"url":11224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":8626,"url":10065},{"type":8500,"url":11227},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":8508,"url":8509},{"type":8503,"url":10070},[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":226,"slug":11232,"dossier":90,"summary":11233,"aliases":11234,"sourceIds":11237,"published":11238,"modified":11239,"checkedAt":7,"severity":11240,"references":11242,"versionKeys":11251,"packageCount":32,"repositoryCount":8523},"ghsa-5xm2-6676-qcp9-1e22ee95","Pillow: APNG background disposal allocates full canvas before decompression bomb check",[11235,11236],"BIT-pillow-2026-112399","CVE-2026-112399",[226],"2026-10-21T21:17:56Z","2026-10-26T08:56:16.789537980Z",[11241],{"type":8496,"score":9003},[11243,11245,11247,11249,11250],{"type":8500,"url":11244},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xm2-6676-qcp9",{"type":8503,"url":11246},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112399",{"type":8500,"url":11248},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff1acfc54c53502948d0d14121872061df931db48",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":227,"slug":11253,"dossier":47,"summary":11254,"aliases":11255,"sourceIds":11259,"published":11260,"modified":11261,"checkedAt":7,"severity":11262,"references":11267,"versionKeys":11281,"packageCount":32,"repositoryCount":9035},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[11256,11257,11258],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[227,11258],"2026-05-04T20:18:27Z","2026-10-19T20:00:04.709097863Z",[11263,11265],{"type":8535,"score":11264},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":8496,"score":11266},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[11268,11270,11272,11274,11276,11278,11279],{"type":8503,"url":11269},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":8503,"url":11271},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":8500,"url":11273},"https:\u002F\u002Fgithub.com\u002Fdesigncomputer\u002Fmysql_mcp_server\u002Fcommit\u002Fa96549f4a4d65443fd6e9c7f2324fba9a5c80a82",{"type":8500,"url":11275},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcf6de8ca9b23e714aa5310e1c791eda66fc0b670",{"type":8500,"url":11277},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2251.yaml",{"type":8508,"url":8509},{"type":8503,"url":11280},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[8516,8517,8518,8519,8520],{"id":228,"slug":11283,"dossier":47,"summary":11284,"aliases":11285,"sourceIds":11288,"published":11289,"modified":11290,"checkedAt":7,"severity":11291,"references":11294,"versionKeys":11304,"packageCount":32,"repositoryCount":34},"ghsa-5xxx-qhh7-9287-87d91b3e","GitPython: Incomplete unsafe_git_revision_options denylist omits --contents\u002F-S, enabling arbitrary file read via Repo.blame()",[11286,11287],"CVE-2026-78678","PYSEC-2026-3788",[228,11287],"2026-08-25T02:16:52.313Z","2026-09-08T19:00:06.904435463Z",[11292,11293],{"type":8535,"score":9849},{"type":8496,"score":10678},[11295,11297,11299,11300,11302],{"type":8541,"url":11296},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-5xxx-qhh7-9287",{"type":8503,"url":11298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78678",{"type":8508,"url":8550},{"type":8500,"url":11301},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3788.yaml",{"type":8503,"url":11303},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-blame",[8558,8559,8560],{"id":229,"slug":11306,"dossier":47,"summary":11307,"aliases":11308,"sourceIds":11310,"published":11311,"modified":11312,"checkedAt":7,"severity":11313,"references":11317,"versionKeys":11327,"packageCount":32,"repositoryCount":32},"ghsa-62hf-57xw-28j9-99ff537b","Axios: unbounded recursion in toFormData causes DoS via deeply nested request data",[11309],"CVE-2026-42039",[229],"2026-05-05T00:34:32Z","2026-09-10T03:50:45.703789635Z",[11314,11315],{"type":8535,"score":8571},{"type":8496,"score":11316},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[11318,11320,11322,11324,11325],{"type":8500,"url":11319},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-62hf-57xw-28j9",{"type":8503,"url":11321},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42039",{"type":8500,"url":11323},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F85132ffba1a77609ea5d101c8a413dea7174932f",{"type":8508,"url":9438},{"type":8500,"url":11326},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.15.1",[9440,9441],{"id":230,"slug":11329,"dossier":47,"summary":11330,"aliases":11331,"sourceIds":11335,"published":11336,"modified":11337,"checkedAt":7,"severity":11338,"references":11341,"versionKeys":11357,"packageCount":32,"repositoryCount":10072},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[11332,11333,11334],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[230,11334],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[11339],{"type":8496,"score":11340},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[11342,11344,11346,11348,11350,11351,11353,11355],{"type":8500,"url":11343},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":8503,"url":11345},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":8500,"url":11347},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":8500,"url":11349},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":8508,"url":8509},{"type":8500,"url":11352},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":8508,"url":11354},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":8503,"url":11356},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":231,"slug":11359,"dossier":47,"summary":11360,"aliases":11361,"sourceIds":11364,"published":11365,"modified":11366,"checkedAt":7,"severity":11367,"references":11370,"versionKeys":11383,"packageCount":32,"repositoryCount":32},"ghsa-62q4-447f-wv8h-ddd02de0","Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path",[11362,11363],"CVE-2026-46338","PYSEC-2026-2999",[231,11363],"2026-05-19T20:00:29Z","2026-09-10T03:50:45.703936995Z",[11368],{"type":8535,"score":11369},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[11371,11373,11375,11377,11379,11381],{"type":8500,"url":11372},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":8500,"url":11374},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fpull\u002F2039",{"type":8508,"url":11376},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions",{"type":8508,"url":11378},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpymdown-extensions",{"type":8503,"url":11380},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62q4-447f-wv8h",{"type":8503,"url":11382},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-46338",[11384],"pypi:pymdown-extensions@10.21.2",{"id":232,"slug":11386,"dossier":47,"summary":11387,"aliases":11388,"sourceIds":11391,"published":11392,"modified":11393,"checkedAt":7,"severity":11394,"references":11400,"versionKeys":11411,"packageCount":32,"repositoryCount":665},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[11389,11390],"CVE-2026-34520","PYSEC-2026-2102",[232,11390],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[11395,11397,11398],{"type":8535,"score":11396},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":8496,"score":9291},{"type":8496,"score":11399},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11401,11403,11405,11407,11408,11409],{"type":8626,"url":11402},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":8503,"url":11404},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":8626,"url":11406},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":8508,"url":8944},{"type":8503,"url":9303},{"type":8500,"url":11410},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[8948,8949,8950,8951,8952,8953,8954,8955],{"id":233,"slug":11413,"dossier":47,"summary":11414,"aliases":11415,"sourceIds":11418,"published":11419,"modified":11420,"checkedAt":7,"severity":11421,"references":11424,"versionKeys":11430,"packageCount":32,"repositoryCount":654},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[11416,11417],"CVE-2026-54277","PYSEC-2026-2110",[233,11417],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[11422,11423],{"type":8496,"score":10248},{"type":8535,"score":8571},[11425,11427,11429],{"type":8503,"url":11426},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":8626,"url":11428},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":8508,"url":8944},[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":234,"slug":11432,"dossier":47,"summary":11433,"aliases":11434,"sourceIds":11438,"published":11439,"modified":11440,"checkedAt":7,"severity":11441,"references":11445,"versionKeys":11456,"packageCount":32,"repositoryCount":11457},"ghsa-654x-cwwv-5j9c-54c66942","Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1",[11435,11436,11437],"BIT-pillow-2026-114501","CVE-2026-114501","PYSEC-2026-4336",[234,11437],"2026-10-21T22:16:49.410Z","2026-10-29T10:56:00.934076155Z",[11442,11443],{"type":8496,"score":10131},{"type":8535,"score":11444},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[11446,11448,11450,11452,11454,11455],{"type":8503,"url":11447},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-654x-cwwv-5j9c",{"type":8503,"url":11449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114501",{"type":9620,"url":11451},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10172",{"type":8626,"url":11453},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19f64946eb247b973dd4560be7dea3bf979d2e6a",{"type":8508,"url":8509},{"type":8503,"url":8511},[8516,8517,8518,8519,8520,8521,8522],15,{"id":235,"slug":11459,"dossier":90,"summary":11460,"aliases":11461,"sourceIds":11464,"published":11465,"modified":11466,"checkedAt":7,"severity":11467,"references":11470,"versionKeys":11479,"packageCount":32,"repositoryCount":625},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[11462,11463],"CVE-2026-45409","PYSEC-2026-215",[235,11463],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[11468,11469],{"type":8535,"score":8870},{"type":8496,"score":11316},[11471,11473,11475,11477],{"type":8503,"url":11472},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":8503,"url":11474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":8508,"url":11476},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":8500,"url":11478},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[11480,11481,11482,11483],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",{"id":236,"slug":11485,"dossier":90,"summary":11486,"aliases":11487,"sourceIds":11490,"published":11491,"modified":11492,"checkedAt":7,"severity":11493,"references":11495,"versionKeys":11504,"packageCount":32,"repositoryCount":8523},"ghsa-65qm-jvmh-6pqg-7925f039","Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS",[11488,11489],"BIT-pillow-2026-112400","CVE-2026-112400",[236],"2026-10-20T20:53:36Z","2026-10-26T08:55:49.781288748Z",[11494],{"type":8496,"score":9003},[11496,11498,11500,11502,11503],{"type":8500,"url":11497},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-65qm-jvmh-6pqg",{"type":8503,"url":11499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112400",{"type":8500,"url":11501},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6faed707cfb760a4cbd726ddc8406f576cf35bf7",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":237,"slug":11506,"dossier":47,"summary":11507,"aliases":11508,"sourceIds":11510,"published":11511,"modified":11512,"checkedAt":7,"severity":11513,"references":11516,"versionKeys":11533,"packageCount":32,"repositoryCount":752},"ghsa-68fv-2mgg-jv7q-a588da43","source-map-js allows event-loop denial of service through indexed source-map section offsets",[11509],"CVE-2026-93749",[237],"2026-09-18T18:31:44Z","2026-10-05T23:45:07.974936711Z",[11514,11515],{"type":8535,"score":8571},{"type":8496,"score":9003},[11517,11519,11521,11523,11525,11527,11529,11531],{"type":8503,"url":11518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-93749",{"type":8500,"url":11520},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fissues\u002F76",{"type":8500,"url":11522},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fpull\u002F79",{"type":8500,"url":11524},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fcommit\u002Fcf7658058ceeaa8619d5ae0ec90be6905209d016",{"type":8508,"url":11526},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js",{"type":8500,"url":11528},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Fblob\u002Fc1cd8904bb7bd0c7fb5879fcda48134d82a27934\u002Flib\u002Fsource-node.js#L115-L118",{"type":8500,"url":11530},"https:\u002F\u002Fgithub.com\u002F7rulnik\u002Fsource-map-js\u002Freleases\u002Ftag\u002Fv1.2.2",{"type":8500,"url":11532},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fsource-map-js-through-1.2.1-event-loop-denial-of-service",[11534],"npm:source-map-js@1.2.1",{"id":238,"slug":11536,"dossier":47,"summary":11537,"aliases":11538,"sourceIds":11540,"published":11541,"modified":11542,"checkedAt":7,"severity":11543,"references":11546,"versionKeys":11557,"packageCount":32,"repositoryCount":810},"ghsa-698v-4r3x-3vcv-1bca3b44","launch-editor: escapeCmdArgs() omits % escaping on Windows",[11539],"CVE-2026-112943",[238],"2026-10-20T18:30:24Z","2026-10-20T18:45:09.467993691Z",[11544],{"type":8496,"score":11545},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[11547,11549,11551,11553,11555,11556],{"type":8500,"url":11548},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-698v-4r3x-3vcv",{"type":8503,"url":11550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112943",{"type":8500,"url":11552},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fpull\u002F155",{"type":8500,"url":11554},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fcommit\u002F3c2f9bf2ff8fe63d056a8f9cc52d825b66ca79fc",{"type":8508,"url":10885},{"type":8500,"url":10887},[10505,10506,10507],{"id":239,"slug":11559,"dossier":47,"summary":11560,"aliases":11561,"sourceIds":11564,"published":11565,"modified":11566,"checkedAt":7,"severity":11567,"references":11569,"versionKeys":11580,"packageCount":32,"repositoryCount":686},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[11562,11563],"CVE-2025-69224","PYSEC-2026-1099",[239,11563],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[11568],{"type":8496,"score":9291},[11570,11572,11574,11576,11577,11578],{"type":8500,"url":11571},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":8503,"url":11573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":8626,"url":11575},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":11579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[8948,8949,8950,8951,8952,8953,8954],{"id":240,"slug":11582,"dossier":90,"summary":11583,"aliases":11584,"sourceIds":11586,"published":11587,"modified":11588,"checkedAt":7,"severity":11589,"references":11592,"versionKeys":11601,"packageCount":32,"repositoryCount":8523},"ghsa-69hj-f68j-2879-d34e420d","filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path",[11585],"CVE-2026-112909",[240],"2026-10-28T21:08:35Z","2026-10-28T21:15:04.974667790Z",[11590],{"type":8535,"score":11591},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[11593,11595,11597,11598,11599,11600],{"type":8500,"url":11594},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-69hj-f68j-2879",{"type":8503,"url":11596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112909",{"type":8500,"url":10854},{"type":8500,"url":10856},{"type":8508,"url":10858},{"type":8500,"url":10860},[11602,11603,11604,11605,11606,10862,10863,10864,10865],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0","pypi:filelock@3.20.3",{"id":241,"slug":11608,"dossier":47,"summary":11609,"aliases":11610,"sourceIds":11612,"published":11613,"modified":11614,"checkedAt":7,"severity":11615,"references":11617,"versionKeys":11623,"packageCount":32,"repositoryCount":32},"ghsa-6chq-wfr3-2hj9-cc9a2a5e","Axios: Header Injection via Prototype Pollution",[11611],"CVE-2026-42035",[241],"2026-05-05T00:25:47Z","2026-09-10T03:51:04.772235088Z",[11616],{"type":8535,"score":9163},[11618,11620,11622],{"type":8500,"url":11619},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-6chq-wfr3-2hj9",{"type":8503,"url":11621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42035",{"type":8508,"url":9438},[9440,9441],{"id":242,"slug":11625,"dossier":47,"summary":11626,"aliases":11627,"sourceIds":11629,"published":11630,"modified":11631,"checkedAt":7,"severity":11632,"references":11634,"versionKeys":11643,"packageCount":32,"repositoryCount":9035},"ghsa-6cjc-53gc-5rqm-f1beb40a","AIOHTTP: Connector pool exhaustion via Max-Age overflow",[11628],"CVE-2026-111065",[242],"2026-10-20T19:57:24Z","2026-10-20T20:15:05.286053785Z",[11633],{"type":8496,"score":11316},[11635,11637,11639,11641,11642],{"type":8500,"url":11636},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6cjc-53gc-5rqm",{"type":8503,"url":11638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111065",{"type":8500,"url":11640},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9dd8eaf4e31f1237ef2c1574a8c82a739fca5805",{"type":8508,"url":8944},{"type":8500,"url":9031},[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],{"id":243,"slug":11645,"dossier":47,"summary":11646,"aliases":11647,"sourceIds":11649,"published":11650,"modified":11651,"checkedAt":7,"severity":11652,"references":11655,"versionKeys":11666,"packageCount":32,"repositoryCount":810},"ghsa-6g55-p6wh-862q-12f1aeab","PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments",[11648],"CVE-2026-45623",[243],"2026-07-23T15:06:16Z","2026-09-10T03:51:10.752909750Z",[11653],{"type":8535,"score":11654},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[11656,11658,11660,11662,11664],{"type":8500,"url":11657},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-6g55-p6wh-862q",{"type":8500,"url":11659},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002Faaec7b78b3ce2792585b4b300ef1bd5dd5b3e8ad",{"type":8500,"url":11661},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002Fc64b7488d2731dfa16213739b42c34faf5a9eba3",{"type":8508,"url":11663},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss",{"type":8500,"url":11665},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.12",[11667,11668,11669],"npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6",{"id":244,"slug":11671,"dossier":47,"summary":11672,"aliases":11673,"sourceIds":11676,"published":11677,"modified":11678,"checkedAt":7,"severity":11679,"references":11681,"versionKeys":11694,"packageCount":32,"repositoryCount":32},"ghsa-6hr6-w5qg-qmwg-135c855f","h2: Duplicate Host header could facilitate request smuggling",[11674,11675],"CVE-2026-71554","PYSEC-2026-3628",[244,11675],"2026-08-06T21:53:41Z","2026-09-10T03:51:13.136510577Z",[11680],{"type":8535,"score":8870},[11682,11684,11686,11688,11690,11692],{"type":8500,"url":11683},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fsecurity\u002Fadvisories\u002FGHSA-6hr6-w5qg-qmwg",{"type":8500,"url":11685},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fcommit\u002F292a40829feefda98c8509dcdbbb4a57af9bd6a6",{"type":8508,"url":11687},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2",{"type":8508,"url":11689},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh2",{"type":8503,"url":11691},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hr6-w5qg-qmwg",{"type":8503,"url":11693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71554",[11695],"pypi:h2@4.1.0",{"id":245,"slug":11697,"dossier":47,"summary":11698,"aliases":11699,"sourceIds":11701,"published":11702,"modified":11703,"checkedAt":7,"severity":11704,"references":11706,"versionKeys":11720,"packageCount":32,"repositoryCount":810},"ghsa-6j4f-fj2g-mc7p-48b1368d","brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion",[11700],"CVE-2026-102276",[245],"2026-09-29T23:44:58Z","2026-09-30T00:00:03.836613572Z",[11705],{"type":8535,"score":8571},[11707,11709,11711,11713,11715,11717,11719],{"type":8500,"url":11708},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-6j4f-fj2g-mc7p",{"type":8503,"url":11710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102276",{"type":8500,"url":11712},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc",{"type":8500,"url":11714},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F316359e6019c39b3254c8ba8e25dc586a480652c",{"type":8500,"url":11716},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F5171e681c0922b7ae8bfaf9a331e309107be6edc",{"type":8500,"url":11718},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F6735c94873ca570bcdd6a0690033bdd3126379d3",{"type":8508,"url":9655},[9665,11721,9666,11722],"npm:brace-expansion@1.1.16","npm:brace-expansion@5.0.8",{"id":246,"slug":11724,"dossier":47,"summary":11725,"aliases":11726,"sourceIds":11729,"published":11730,"modified":11731,"checkedAt":7,"severity":11732,"references":11734,"versionKeys":11745,"packageCount":32,"repositoryCount":686},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[11727,11728],"CVE-2025-69228","PYSEC-2026-1100",[246,11728],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[11733],{"type":8496,"score":10248},[11735,11737,11739,11741,11742,11743],{"type":8500,"url":11736},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":8503,"url":11738},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":8626,"url":11740},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":11744},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[8948,8949,8950,8951,8952,8953,8954],{"id":247,"slug":11747,"dossier":47,"summary":11748,"aliases":11749,"sourceIds":11752,"published":11753,"modified":11754,"checkedAt":7,"severity":11755,"references":11757,"versionKeys":11766,"packageCount":32,"repositoryCount":705},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[11750,11751],"CVE-2026-53538","PYSEC-2026-3037",[247,11751],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[11756],{"type":8535,"score":9046},[11758,11760,11761,11762,11764],{"type":8500,"url":11759},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":8508,"url":10981},{"type":8508,"url":10983},{"type":8503,"url":11763},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":8503,"url":11765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[11111,11112,11113,10987],{"id":248,"slug":11768,"dossier":47,"summary":11769,"aliases":11770,"sourceIds":11773,"published":11774,"modified":11775,"checkedAt":7,"severity":11776,"references":11778,"versionKeys":11789,"packageCount":32,"repositoryCount":686},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[11771,11772],"CVE-2025-69223","PYSEC-2026-1101",[248,11772],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[11777],{"type":8535,"score":8571},[11779,11781,11783,11785,11786,11787],{"type":8500,"url":11780},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":8503,"url":11782},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":8626,"url":11784},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":11788},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[8948,8949,8950,8951,8952,8953,8954],{"id":249,"slug":11791,"dossier":47,"summary":11792,"aliases":11793,"sourceIds":11796,"published":11797,"modified":11798,"checkedAt":7,"severity":11799,"references":11803,"versionKeys":11815,"packageCount":32,"repositoryCount":34},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[11794,11795],"CVE-2026-73623","PYSEC-2026-3952",[249,11795],"2026-07-24T16:42:09Z","2026-09-10T13:11:03.995690741Z",[11800,11802],{"type":8535,"score":11801},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8535,"score":8903},[11804,11806,11808,11810,11811,11813],{"type":8541,"url":11805},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":8500,"url":11807},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":8500,"url":11809},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":8508,"url":8550},{"type":8500,"url":11812},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",{"type":8503,"url":11814},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-template",[8558,8559,8560],{"id":250,"slug":11817,"dossier":47,"summary":11818,"aliases":11819,"sourceIds":11821,"published":11822,"modified":11823,"checkedAt":7,"severity":11824,"references":11827,"versionKeys":11837,"packageCount":32,"repositoryCount":564},"ghsa-6pq8-jhm2-2vcw-7a7bd087","qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)",[11820],"CVE-2026-110816",[250],"2026-10-27T16:10:55Z","2026-10-27T16:15:05.324423680Z",[11825,11826],{"type":8535,"score":8870},{"type":8496,"score":8678},[11828,11830,11832,11834,11835],{"type":8500,"url":11829},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-6pq8-jhm2-2vcw",{"type":8503,"url":11831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110816",{"type":8500,"url":11833},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002Fa952e7519338ef0cfb25694a2988848f93333727",{"type":8508,"url":10375},{"type":8500,"url":11836},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Freleases\u002Ftag\u002Fv6.16.1",[10377,10378,11838],"npm:qs@6.16.0",{"id":251,"slug":11840,"dossier":90,"summary":11841,"aliases":11842,"sourceIds":11844,"published":11845,"modified":11846,"checkedAt":7,"severity":11847,"references":11850,"versionKeys":11862,"packageCount":32,"repositoryCount":11874},"ghsa-6q48-6c7w-9gw2-05036ff0","certifi bundles emSign root CAs with compromised intermediate CA keys",[11843],"PYSEC-2026-4320",[251,11843],"2026-10-20T19:35:05Z","2026-10-30T14:00:02.590922333Z",[11848],{"type":8496,"score":11849},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[11851,11853,11855,11857,11858,11860],{"type":8500,"url":11852},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",{"type":8500,"url":11854},"https:\u002F\u002Fdiscuss.python.org\u002Ft\u002Finformation-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident\u002F109576",{"type":8500,"url":11856},"https:\u002F\u002Femudhra.we-have-a-problem.com\u002F",{"type":8508,"url":8629},{"type":8508,"url":11859},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcertifi",{"type":8503,"url":11861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",[11863,8642,11864,11865,11866,11867,11868,11869,11870,11871,11872,11873],"pypi:certifi@2024.12.14","pypi:certifi@2025.1.31","pypi:certifi@2025.10.5","pypi:certifi@2025.11.12","pypi:certifi@2025.4.26","pypi:certifi@2025.6.15","pypi:certifi@2025.8.3","pypi:certifi@2026.1.4","pypi:certifi@2026.2.25","pypi:certifi@2026.4.22","pypi:certifi@2026.6.17",21,{"id":252,"slug":11876,"dossier":47,"summary":11877,"aliases":11878,"sourceIds":11882,"published":11883,"modified":11884,"checkedAt":7,"severity":11885,"references":11887,"versionKeys":11900,"packageCount":32,"repositoryCount":10072},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[11879,11880,11881],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[252,11881],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[11886],{"type":8535,"score":8571},[11888,11890,11892,11894,11896,11898,11899],{"type":8541,"url":11889},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":8503,"url":11891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":8626,"url":11893},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":8626,"url":11895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":8500,"url":11897},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":8508,"url":8509},{"type":8503,"url":11352},[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":253,"slug":11902,"dossier":47,"summary":11903,"aliases":11904,"sourceIds":11906,"published":11907,"modified":11908,"checkedAt":7,"severity":11909,"references":11914,"versionKeys":11922,"packageCount":32,"repositoryCount":32},"ghsa-6rw7-vpxm-498p-92461380","qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion",[11905],"CVE-2025-15284",[253],"2025-12-30T21:02:54Z","2026-09-10T03:50:31.670581449Z",[11910,11912],{"type":8535,"score":11911},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":8496,"score":11913},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:L",[11915,11917,11919,11921],{"type":8500,"url":11916},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-6rw7-vpxm-498p",{"type":8503,"url":11918},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15284",{"type":8500,"url":11920},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002F3086902ecf7f088d0d1803887643ac6c03d415b9",{"type":8508,"url":10375},[10377],{"id":254,"slug":11924,"dossier":47,"summary":11925,"aliases":11926,"sourceIds":11929,"published":11930,"modified":11931,"checkedAt":7,"severity":11932,"references":11934,"versionKeys":11945,"packageCount":32,"repositoryCount":686},"ghsa-6w3r-xr62-4xcp-69d1732a","virtualenv: Bash prompt values can change meaning under older compatibility modes",[11927,11928],"BIT-virtualenv-2026-113723","CVE-2026-113723",[254],"2026-10-23T22:21:57Z","2026-10-29T10:55:32.039209236Z",[11933],{"type":8496,"score":9535},[11935,11937,11939,11941,11943,11944],{"type":8500,"url":11936},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-6w3r-xr62-4xcp",{"type":8503,"url":11938},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113723",{"type":8500,"url":11940},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3418",{"type":8500,"url":11942},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5f48d711731311428aebfae61d46957762155b22",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":255,"slug":11947,"dossier":47,"summary":11948,"aliases":11949,"sourceIds":11952,"published":11953,"modified":11954,"checkedAt":7,"severity":11955,"references":11958,"versionKeys":11977,"packageCount":32,"repositoryCount":686},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[11950,11951],"CVE-2025-71176","PYSEC-2026-1845",[255,11951],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[11956],{"type":8535,"score":11957},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[11959,11961,11963,11965,11967,11969,11971,11973,11975],{"type":8503,"url":11960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":8500,"url":11962},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":8500,"url":11964},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":8500,"url":11966},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":8508,"url":11968},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":8500,"url":11970},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":8500,"url":11972},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":8508,"url":11974},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":8503,"url":11976},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[11978,11979,11980,11981,11982],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":256,"slug":11984,"dossier":47,"summary":11985,"aliases":11986,"sourceIds":11988,"published":11989,"modified":11990,"checkedAt":7,"severity":11991,"references":11993,"versionKeys":12006,"packageCount":32,"repositoryCount":32},"ghsa-73rr-hh4g-fpgx-9d9e2d44","jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",[11987],"CVE-2026-24001",[256],"2026-01-14T21:34:12Z","2026-09-10T03:50:32.703687207Z",[11992],{"type":8496,"score":9826},[11994,11996,11998,12000,12002,12004],{"type":8500,"url":11995},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fsecurity\u002Fadvisories\u002FGHSA-73rr-hh4g-fpgx",{"type":8503,"url":11997},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24001",{"type":8500,"url":11999},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fissues\u002F653",{"type":8500,"url":12001},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fpull\u002F649",{"type":8500,"url":12003},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff\u002Fcommit\u002F15a1585230748c8ae6f8274c202e0c87309142f5",{"type":8508,"url":12005},"https:\u002F\u002Fgithub.com\u002Fkpdecker\u002Fjsdiff",[12007],"npm:diff@5.2.0",{"id":257,"slug":12009,"dossier":47,"summary":12010,"aliases":12011,"sourceIds":12013,"published":12014,"modified":12015,"checkedAt":7,"severity":12016,"references":12018,"versionKeys":12029,"packageCount":32,"repositoryCount":32},"ghsa-73wf-gq98-2v4g-759c3c89","Browserslist: Uncaught crash \u002F prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)",[12012],"CVE-2026-73088",[257],"2026-09-01T16:41:54Z","2026-09-10T03:51:15.295037659Z",[12017],{"type":8535,"score":8571},[12019,12021,12023,12025,12027],{"type":8500,"url":12020},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fsecurity\u002Fadvisories\u002FGHSA-73wf-gq98-2v4g",{"type":8503,"url":12022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-73088",{"type":8500,"url":12024},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fcommit\u002Ff9914ad9effc865ccc27d816255625890b31ca51",{"type":8508,"url":12026},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist",{"type":8500,"url":12028},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Freleases\u002Ftag\u002F4.28.7",[12030],"npm:browserslist@4.24.4",{"id":258,"slug":12032,"dossier":90,"summary":12033,"aliases":12034,"sourceIds":12037,"published":12038,"modified":12039,"checkedAt":7,"severity":12040,"references":12042,"versionKeys":12051,"packageCount":32,"repositoryCount":8523},"ghsa-74r2-7ff9-mjj2-9127f170","Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()",[12035,12036],"BIT-pillow-2026-112401","CVE-2026-112401",[258],"2026-10-21T20:42:11Z","2026-10-26T08:56:13.792431880Z",[12041],{"type":8496,"score":11316},[12043,12045,12047,12049,12050],{"type":8500,"url":12044},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-74r2-7ff9-mjj2",{"type":8503,"url":12046},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112401",{"type":8500,"url":12048},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F68a3fe957d8a4d552e8c69d96066d749f0614c7e",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":259,"slug":12053,"dossier":47,"summary":12054,"aliases":12055,"sourceIds":12058,"published":12059,"modified":12060,"checkedAt":7,"severity":12061,"references":12063,"versionKeys":12073,"packageCount":32,"repositoryCount":810},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[12056,12057],"CVE-2026-32597","PYSEC-2026-120",[259,12057],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[12062],{"type":8535,"score":8619},[12064,12066,12068,12069,12071],{"type":8541,"url":12065},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":8503,"url":12067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":8508,"url":9085},{"type":8500,"url":12070},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":8500,"url":12072},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[9093,9095],{"id":260,"slug":12075,"dossier":47,"summary":12076,"aliases":12077,"sourceIds":12080,"published":12081,"modified":12082,"checkedAt":7,"severity":12083,"references":12088,"versionKeys":12096,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[12078,12079],"CVE-2026-44243","PYSEC-2026-2162",[260,12079],"2026-05-06T19:38:48Z","2026-09-10T03:50:45.903378498Z",[12084,12086],{"type":8535,"score":12085},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":8496,"score":12087},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[12089,12091,12093,12094],{"type":8541,"url":12090},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":8503,"url":12092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":8508,"url":8550},{"type":8626,"url":12095},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[8558,8559,8560],{"id":261,"slug":12098,"dossier":47,"summary":12099,"aliases":12100,"sourceIds":12103,"published":12104,"modified":12105,"checkedAt":7,"severity":12106,"references":12109,"versionKeys":12122,"packageCount":32,"repositoryCount":686},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[12101,12102],"CVE-2025-66034","PYSEC-2026-1389",[261,12102],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[12107],{"type":8535,"score":12108},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[12110,12112,12114,12116,12118,12120],{"type":8500,"url":12111},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":8503,"url":12113},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":8500,"url":12115},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":8508,"url":12117},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":8508,"url":12119},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":8503,"url":12121},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[12123,12124,12125,12126,12127,12128],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":262,"slug":12130,"dossier":47,"summary":12131,"aliases":12132,"sourceIds":12134,"published":12135,"modified":12136,"checkedAt":7,"severity":12137,"references":12139,"versionKeys":12151,"packageCount":32,"repositoryCount":32},"ghsa-777c-7fjr-54vf-79940191","Allocation of Resources Without Limits or Throttling in Axios",[12133],"CVE-2026-44488",[262],"2026-06-04T14:21:37Z","2026-09-10T03:50:48.738717543Z",[12138],{"type":8535,"score":8571},[12140,12142,12144,12146,12148,12149],{"type":8500,"url":12141},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-777c-7fjr-54vf",{"type":8503,"url":12143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44488",{"type":8500,"url":12145},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10795",{"type":8500,"url":12147},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10796",{"type":8508,"url":9438},{"type":8500,"url":12150},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.16.0",[9440,9441],{"id":263,"slug":12153,"dossier":47,"summary":12154,"aliases":12155,"sourceIds":12158,"published":12159,"modified":12160,"checkedAt":7,"severity":12161,"references":12168,"versionKeys":12183,"packageCount":32,"repositoryCount":34},"ghsa-7833-fr7j-v32q-fd003872","GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)",[12156,12157],"CVE-2026-78675","PYSEC-2026-3785",[263,12157],"2026-08-25T02:16:51.887Z","2026-09-23T05:15:05.931147061Z",[12162,12164,12166],{"type":8535,"score":12163},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":8496,"score":12165},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8535,"score":12167},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[12169,12171,12173,12175,12177,12178,12179,12181],{"type":8541,"url":12170},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7833-fr7j-v32q",{"type":8503,"url":12172},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78675",{"type":8500,"url":12174},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2211",{"type":8500,"url":12176},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fef7568e3b317ce617eacda39b8b54dcdff8c3b5c",{"type":8508,"url":8550},{"type":8500,"url":9861},{"type":8500,"url":12180},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3785.yaml",{"type":8503,"url":12182},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-local-file-content-disclosure-via-gitmodules",[8558,8559,8560],{"id":264,"slug":12185,"dossier":47,"summary":12186,"aliases":12187,"sourceIds":12188,"published":12189,"modified":12190,"checkedAt":7,"severity":12191,"references":12194,"versionKeys":12207,"packageCount":32,"repositoryCount":9366},"ghsa-78g4-xqwv-q3g8-95d38591","Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()",[],[264],"2026-10-22T17:01:08Z","2026-10-22T17:15:04.326552524Z",[12192],{"type":8535,"score":12193},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[12195,12197,12199,12201,12203,12204,12205],{"type":8500,"url":12196},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-78g4-xqwv-q3g8",{"type":8500,"url":12198},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5f8114c8096b181fae493543cd3837d9f9a971cc",{"type":8500,"url":12200},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd3470c327840f4c216a1610f30e7091dfd0b97c0",{"type":8500,"url":12202},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fcommit\u002F91d08b11a72764f6d199f32fa0c1b1abd4edc2ad",{"type":8508,"url":8509},{"type":8500,"url":8511},{"type":8500,"url":12206},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FOSV-2025-219",[8515,8516,8517,8518,8519,8520,8521,8522],{"id":265,"slug":12209,"dossier":47,"summary":10645,"aliases":12210,"sourceIds":12213,"published":12214,"modified":12215,"checkedAt":7,"severity":12216,"references":12217,"versionKeys":12235,"packageCount":32,"repositoryCount":810},"ghsa-79v4-65xg-pq4g-b911b371",[12211,12212],"CVE-2024-12797","PYSEC-2026-1284",[265,12212],"2025-02-11T18:06:42Z","2026-09-10T03:50:22.501671988Z",[],[12218,12220,12222,12224,12226,12228,12229,12231,12233],{"type":8500,"url":12219},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":8503,"url":12221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":8500,"url":12223},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":8500,"url":12225},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":8500,"url":12227},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":8508,"url":10656},{"type":8500,"url":12230},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":8508,"url":12232},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":8503,"url":12234},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[10660,10661,10662],{"id":266,"slug":12237,"dossier":47,"summary":12238,"aliases":12239,"sourceIds":12242,"published":12243,"modified":12244,"checkedAt":7,"severity":12245,"references":12247,"versionKeys":12264,"packageCount":32,"repositoryCount":34},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[12240,12241],"CVE-2025-62727","PYSEC-2026-1942",[266,12241],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[12246],{"type":8535,"score":8571},[12248,12250,12252,12254,12257,12259,12261,12262],{"type":8500,"url":12249},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":8503,"url":12251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":8626,"url":12253},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":12255,"url":12256},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":8508,"url":12258},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":8500,"url":12260},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":8508,"url":8885},{"type":8503,"url":12263},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[8890,8891,12265,12266,12267],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":267,"slug":12269,"dossier":47,"summary":12270,"aliases":12271,"sourceIds":12274,"published":12275,"modified":12276,"checkedAt":7,"severity":12277,"references":12280,"versionKeys":12297,"packageCount":32,"repositoryCount":9035},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[12272,12273],"CVE-2026-0994","PYSEC-2026-1805",[267,12273],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[12278],{"type":8496,"score":12279},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[12281,12283,12285,12287,12289,12291,12293,12295],{"type":8503,"url":12282},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":8500,"url":12284},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":8500,"url":12286},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":8500,"url":12288},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":8500,"url":12290},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":8508,"url":12292},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":8508,"url":12294},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":8503,"url":12296},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[12298,12299,12300,12301,12302,12303,12304,12305,12306,12307],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":268,"slug":12309,"dossier":90,"summary":12310,"aliases":12311,"sourceIds":12315,"published":12316,"modified":12317,"checkedAt":7,"severity":12318,"references":12321,"versionKeys":12330,"packageCount":32,"repositoryCount":8523},"ghsa-7mwm-ghpf-9vrm-446e4269","Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform",[12312,12313,12314],"BIT-pillow-2026-112402","CVE-2026-112402","PYSEC-2026-4331",[268,12314],"2026-10-19T22:17:07.633Z","2026-10-28T11:10:35.587185673Z",[12319,12320],{"type":8496,"score":9003},{"type":8535,"score":8571},[12322,12324,12326,12328,12329],{"type":8626,"url":12323},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-7mwm-ghpf-9vrm",{"type":8503,"url":12325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112402",{"type":8626,"url":12327},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faafa6c75f7cdabb9f409a8aac7c780bea31d08d9",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":269,"slug":12332,"dossier":47,"summary":12333,"aliases":12334,"sourceIds":12336,"published":12337,"modified":12338,"checkedAt":7,"severity":12339,"references":12342,"versionKeys":12358,"packageCount":32,"repositoryCount":32},"ghsa-7q8q-rj6j-mhjq-b9d31f9e","Axios: Nested axios option objects can consume polluted prototype values",[12335],"CVE-2026-67319",[269],"2026-07-20T22:37:31Z","2026-09-10T03:51:10.872027953Z",[12340],{"type":8496,"score":12341},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:L\u002FSA:N",[12343,12345,12347,12349,12350,12351,12352,12353,12354,12355,12356],{"type":8500,"url":12344},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-7q8q-rj6j-mhjq",{"type":8503,"url":12346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67319",{"type":8503,"url":12348},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69123",{"type":8500,"url":9910},{"type":8500,"url":9912},{"type":8500,"url":9914},{"type":8500,"url":9916},{"type":8508,"url":9438},{"type":8500,"url":9919},{"type":8500,"url":9921},{"type":8500,"url":12357},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-prototype-pollution-via-nested-option-objects",[9440,9441],{"id":270,"slug":12360,"dossier":47,"summary":12361,"aliases":12362,"sourceIds":12364,"published":12365,"modified":12366,"checkedAt":7,"severity":12367,"references":12369,"versionKeys":12377,"packageCount":32,"repositoryCount":564},"ghsa-7r86-cg39-jmmj-b67be21b","minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",[12363],"CVE-2026-27903",[270],"2026-02-26T22:10:18Z","2026-09-10T03:50:34.376990726Z",[12368],{"type":8535,"score":8571},[12370,12372,12374,12376],{"type":8500,"url":12371},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-7r86-cg39-jmmj",{"type":8503,"url":12373},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27903",{"type":8500,"url":12375},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F0bf499aa45f5059b56809cc3b75ff3eafeb8d748",{"type":8508,"url":8580},[8582,8583,8584,8585],{"id":271,"slug":12379,"dossier":47,"summary":12380,"aliases":12381,"sourceIds":12383,"published":12384,"modified":12385,"checkedAt":7,"severity":12386,"references":12389,"versionKeys":12402,"packageCount":32,"repositoryCount":32},"ghsa-7rv5-mrxv-xcr9-8fcf3ecf","Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check",[12382],"CVE-2026-116580",[271],"2026-10-28T21:17:15Z","2026-10-28T21:30:03.899348358Z",[12387],{"type":8535,"score":12388},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[12390,12392,12394,12396,12398,12400],{"type":8500,"url":12391},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-7rv5-mrxv-xcr9",{"type":8503,"url":12393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116580",{"type":8500,"url":12395},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002F3edc78b495ea0d6bd498143e5b3e56996607c5f2",{"type":8500,"url":12397},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002F50926b3ee198fb757e6ce3aa70efeed38d931c8d",{"type":8508,"url":12399},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval",{"type":8500,"url":12401},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Freleases\u002Ftag\u002Fseroval@1.6.8",[12403],"npm:seroval@1.6.7",{"id":272,"slug":12405,"dossier":47,"summary":12406,"aliases":12407,"sourceIds":12410,"published":12411,"modified":12412,"checkedAt":7,"severity":12413,"references":12416,"versionKeys":12430,"packageCount":32,"repositoryCount":10617},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[12408,12409],"CVE-2026-63374","PYSEC-2026-4025",[272,12409],"2026-09-18T17:17:18Z","2026-10-01T17:56:11.058322399Z",[12414],{"type":8496,"score":12415},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[12417,12419,12421,12423,12424,12425,12426,12428],{"type":8500,"url":12418},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":8500,"url":12420},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":8500,"url":12422},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":8508,"url":11058},{"type":8500,"url":11060},{"type":8508,"url":11062},{"type":8503,"url":12427},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":8503,"url":12429},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63374",[11068,11069,11070,11071,11072,11073,11074,11075],{"id":273,"slug":12432,"dossier":47,"summary":12433,"aliases":12434,"sourceIds":12437,"published":12438,"modified":12439,"checkedAt":7,"severity":12440,"references":12442,"versionKeys":12446,"packageCount":32,"repositoryCount":665},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[12435,12436],"CVE-2026-54283","PYSEC-2026-249",[273,12436],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[12441],{"type":8535,"score":8571},[12443,12445],{"type":8503,"url":12444},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":8508,"url":12258},[8889,8890,8891,12265,12266,12267,12447,12448,12449],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":274,"slug":12451,"dossier":47,"summary":12452,"aliases":12453,"sourceIds":12456,"published":12457,"modified":12458,"checkedAt":7,"severity":12459,"references":12461,"versionKeys":12470,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[12454,12455],"CVE-2026-49477","PYSEC-2026-3072",[274,12455],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[12460],{"type":8535,"score":8571},[12462,12464,12465,12466,12468],{"type":8500,"url":12463},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":8508,"url":9320},{"type":8508,"url":9322},{"type":8503,"url":12467},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":8503,"url":12469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[9328,9329,9330],{"id":275,"slug":12472,"dossier":47,"summary":12473,"aliases":12474,"sourceIds":12476,"published":12477,"modified":12478,"checkedAt":7,"severity":12479,"references":12482,"versionKeys":12494,"packageCount":32,"repositoryCount":34},"ghsa-83vg-56qc-22m7-6ad99a7a","GitPython validates a submodule's \".git\" path only after cloning into it (RCE)",[12475],"CVE-2026-114145",[275],"2026-10-22T16:41:14Z","2026-10-22T16:45:04.297463159Z",[12480],{"type":8535,"score":12481},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[12483,12485,12487,12489,12491,12492],{"type":8500,"url":12484},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-83vg-56qc-22m7",{"type":8503,"url":12486},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114145",{"type":8500,"url":12488},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2264",{"type":8500,"url":12490},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F97eadb888d2f99567e3113f4e455be4ca128f697",{"type":8508,"url":8550},{"type":8500,"url":12493},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.2.1",[8558,8559,8560],{"id":276,"slug":12496,"dossier":47,"summary":12497,"aliases":12498,"sourceIds":12500,"published":12501,"modified":12502,"checkedAt":7,"severity":12503,"references":12505,"versionKeys":12518,"packageCount":32,"repositoryCount":32},"ghsa-8436-99hf-9mmv-7d937725","undici vulnerable to caching and replay of unsafe HTTP method responses",[12499],"CVE-2026-85008",[276],"2026-09-29T18:16:28Z","2026-09-29T18:28:12.530229215Z",[12504],{"type":8535,"score":9046},[12506,12508,12510,12512,12514,12515,12516,12517],{"type":8500,"url":12507},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-8436-99hf-9mmv",{"type":8503,"url":12509},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85008",{"type":8500,"url":12511},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2be07bf97b3022e0324142d31f99f6e019d815e3",{"type":8500,"url":12513},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb61d9432bac7caac51273ad209862e4c0bf935ae",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9060},{"type":8500,"url":9062},[9064,9065],{"id":277,"slug":12520,"dossier":47,"summary":12521,"aliases":12522,"sourceIds":12525,"published":12526,"modified":12527,"checkedAt":7,"severity":12528,"references":12531,"versionKeys":12544,"packageCount":32,"repositoryCount":32},"ghsa-847f-9342-265h-4ea27b92","h2 allows HTTP Request Smuggling due to illegal characters in headers",[12523,12524],"CVE-2025-57804","PYSEC-2026-1435",[277,12524],"2025-08-25T20:44:43Z","2026-09-10T03:50:26.965133425Z",[12529],{"type":8496,"score":12530},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:L\u002FSA:N",[12532,12534,12536,12538,12539,12541,12542],{"type":8500,"url":12533},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fsecurity\u002Fadvisories\u002FGHSA-847f-9342-265h",{"type":8503,"url":12535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57804",{"type":8500,"url":12537},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fcommit\u002F035e9899f95e3709af098f578bfc3cd302298e3a",{"type":8508,"url":11687},{"type":8500,"url":12540},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F09\u002Fmsg00004.html",{"type":8508,"url":11689},{"type":8503,"url":12543},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-847f-9342-265h",[11695],{"id":278,"slug":12546,"dossier":47,"summary":12547,"aliases":12548,"sourceIds":12550,"published":12551,"modified":12552,"checkedAt":7,"severity":12553,"references":12556,"versionKeys":12572,"packageCount":32,"repositoryCount":752},"ghsa-84m7-p3x7-pcfv-fb980c8b","MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion",[12549],"CVE-2026-59951",[278],"2026-10-15T20:13:13Z","2026-10-15T20:30:08.565001293Z",[12554,12555],{"type":8535,"score":8571},{"type":8496,"score":11316},[12557,12559,12561,12563,12565,12567,12569,12570,12571],{"type":8500,"url":12558},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-84m7-p3x7-pcfv",{"type":8503,"url":12560},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59951",{"type":8500,"url":12562},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3395",{"type":8500,"url":12564},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3426",{"type":8500,"url":12566},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F92120b4b0f50385af096592d7cee932fc1d994e7",{"type":8500,"url":12568},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd2290ca3434731b68ea3e2270bc06a6e6575931b",{"type":8508,"url":11028},{"type":8500,"url":11030},{"type":8500,"url":11032},[11034,11035,11036,11037],{"id":279,"slug":12574,"dossier":47,"summary":12575,"aliases":12576,"sourceIds":12580,"published":12581,"modified":12582,"checkedAt":7,"severity":12583,"references":12586,"versionKeys":12623,"packageCount":32,"repositoryCount":665},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[12577,12578,12579],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[279,12578],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[12584],{"type":8535,"score":12585},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[12587,12589,12591,12593,12595,12597,12599,12601,12603,12605,12606,12608,12611,12613,12615,12617,12619,12621],{"type":8503,"url":12588},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":8503,"url":12590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":8626,"url":12592},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":8500,"url":12594},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":8633,"url":12596},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":8500,"url":12598},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":8500,"url":12600},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":8500,"url":12602},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":8500,"url":12604},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":8508,"url":12258},{"type":8500,"url":12607},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":12609,"url":12610},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":8500,"url":12612},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":8500,"url":12614},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":8500,"url":12616},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":8500,"url":12618},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":8633,"url":12620},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":8503,"url":12622},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[8889,8890,8891,12265,12266,12267,12447,12448,12449],{"id":280,"slug":12625,"dossier":90,"summary":12626,"aliases":12627,"sourceIds":12630,"published":12631,"modified":12632,"checkedAt":7,"severity":12633,"references":12636,"versionKeys":12653,"packageCount":32,"repositoryCount":625},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[12628,12629],"CVE-2026-97687","PYSEC-2026-4175",[280,12629],"2026-09-30T14:46:04Z","2026-10-01T17:55:53.793608550Z",[12634],{"type":8496,"score":12635},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[12637,12639,12641,12643,12645,12647,12648,12650,12651],{"type":8500,"url":12638},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":8503,"url":12640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":8500,"url":12642},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":8500,"url":12644},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":8500,"url":12646},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":8508,"url":9357},{"type":8500,"url":12649},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",{"type":8508,"url":9359},{"type":8503,"url":12652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",[9361,9362,9363,9364,9365,12654,12655],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":281,"slug":12657,"dossier":47,"summary":12658,"aliases":12659,"sourceIds":12661,"published":12662,"modified":12663,"checkedAt":7,"severity":12664,"references":12667,"versionKeys":12675,"packageCount":32,"repositoryCount":32},"ghsa-898c-q2cr-xwhg-6a541ace","axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions",[12660],"CVE-2026-44490",[281],"2026-05-29T15:54:57Z","2026-09-10T03:51:04.811379218Z",[12665],{"type":8535,"score":12666},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[12668,12670,12672,12674],{"type":8500,"url":12669},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-898c-q2cr-xwhg",{"type":8503,"url":12671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2018-16487",{"type":8503,"url":12673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44490",{"type":8508,"url":9438},[9440,9441],{"id":282,"slug":12677,"dossier":47,"summary":12678,"aliases":12679,"sourceIds":12683,"published":12684,"modified":12685,"checkedAt":7,"severity":12686,"references":12689,"versionKeys":12697,"packageCount":32,"repositoryCount":8523},"ghsa-8g5g-8vmr-9782-3b73f6ca","Pillow: Heap buffer overflow in ImagingJpegDecode",[12680,12681,12682],"BIT-pillow-2026-112403","CVE-2026-112403","PYSEC-2026-4332",[282,12682],"2026-10-19T22:17:07.770Z","2026-10-28T11:10:51.788355157Z",[12687,12688],{"type":8496,"score":11196},{"type":8535,"score":8777},[12690,12692,12694,12695,12696],{"type":8541,"url":12691},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8g5g-8vmr-9782",{"type":8503,"url":12693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112403",{"type":8626,"url":11204},{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":283,"slug":12699,"dossier":47,"summary":12700,"aliases":12701,"sourceIds":12704,"published":12705,"modified":12706,"checkedAt":7,"severity":12707,"references":12712,"versionKeys":12727,"packageCount":32,"repositoryCount":34},"ghsa-8mcc-hrx5-hvxc-9da62a9f","GitPython: clone_from()\u002Fclone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination",[12702,12703],"CVE-2026-78677","PYSEC-2026-3787",[283,12703],"2026-08-25T02:16:52.173Z","2026-09-08T19:00:06.914140693Z",[12708,12709,12710],{"type":8535,"score":11654},{"type":8496,"score":9107},{"type":8496,"score":12711},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[12713,12715,12717,12719,12721,12722,12723,12725],{"type":8541,"url":12714},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-8mcc-hrx5-hvxc",{"type":8503,"url":12716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78677",{"type":8500,"url":12718},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2210",{"type":8500,"url":12720},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fb68afff45af0f49e79a3e2d2162018986b37ad5d",{"type":8508,"url":8550},{"type":8500,"url":9861},{"type":8500,"url":12724},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3787.yaml",{"type":8503,"url":12726},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-separate-git-dir",[8558,8559,8560],{"id":284,"slug":12729,"dossier":47,"summary":12730,"aliases":12731,"sourceIds":12733,"published":12734,"modified":12735,"checkedAt":7,"severity":12736,"references":12738,"versionKeys":12745,"packageCount":32,"repositoryCount":8523},"ghsa-8mx5-7m5m-r77g-03e425ff","filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL",[12732],"CVE-2026-112910",[284],"2026-10-28T21:08:55Z","2026-10-28T21:15:05.688436299Z",[12737],{"type":8535,"score":10569},[12739,12741,12742,12743,12744],{"type":8500,"url":12740},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-8mx5-7m5m-r77g",{"type":8500,"url":10854},{"type":8500,"url":10856},{"type":8508,"url":10858},{"type":8500,"url":10860},[11602,11603,11604,11605,11606,10862,10863,10864,10865],{"id":285,"slug":12747,"dossier":47,"summary":12748,"aliases":12749,"sourceIds":12752,"published":12753,"modified":12754,"checkedAt":7,"severity":12755,"references":12757,"versionKeys":12776,"packageCount":32,"repositoryCount":810},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[12750,12751],"CVE-2025-4565","PYSEC-2026-1806",[285,12751],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[12756],{"type":8496,"score":8497},[12758,12760,12762,12764,12766,12767,12769,12771,12773,12774],{"type":8500,"url":12759},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":8500,"url":12761},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":8503,"url":12763},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":8500,"url":12765},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":8508,"url":12292},{"type":8500,"url":12768},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":8500,"url":12770},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":8500,"url":12772},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":8508,"url":12294},{"type":8503,"url":12775},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[12298,12300,12301],{"id":286,"slug":12778,"dossier":47,"summary":12779,"aliases":12780,"sourceIds":12783,"published":12784,"modified":12785,"checkedAt":7,"severity":12786,"references":12788,"versionKeys":12798,"packageCount":32,"repositoryCount":686},"ghsa-8rjx-v5ww-45pp-d32996f1","virtualenv activation scripts run code from a path that contains a placeholder name",[12781,12782],"BIT-virtualenv-2026-113776","CVE-2026-113776",[286],"2026-10-21T16:39:38Z","2026-10-29T10:55:59.336337258Z",[12787],{"type":8535,"score":11125},[12789,12791,12793,12795,12796],{"type":8500,"url":12790},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-8rjx-v5ww-45pp",{"type":8503,"url":12792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113776",{"type":8500,"url":12794},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F602b26623a724827ff171bf11fef4ad186d01f74",{"type":8508,"url":9546},{"type":8500,"url":12797},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.2",[9550,9551,9552,9553,9554],{"id":287,"slug":12800,"dossier":47,"summary":12801,"aliases":12802,"sourceIds":12806,"published":12807,"modified":12808,"checkedAt":7,"severity":12809,"references":12811,"versionKeys":12821,"packageCount":32,"repositoryCount":10072},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[12803,12804,12805],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[287,12805],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[12810],{"type":8535,"score":8571},[12812,12814,12816,12817,12819,12820],{"type":8541,"url":12813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":8503,"url":12815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":8626,"url":10065},{"type":8500,"url":12818},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":8508,"url":8509},{"type":8503,"url":10070},[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":288,"slug":12823,"dossier":47,"summary":12824,"aliases":12825,"sourceIds":12828,"published":12829,"modified":12830,"checkedAt":7,"severity":12831,"references":12833,"versionKeys":12852,"packageCount":32,"repositoryCount":32},"ghsa-8v8h-hg4w-mvq2-aca160b2","hpack: Unbounded variable integer decoding can cause run-away computation on malformed input",[12826,12827],"CVE-2026-59980","PYSEC-2026-4053",[288,12827],"2026-09-24T19:43:26Z","2026-10-01T17:55:38.238084125Z",[12832],{"type":8496,"score":8678},[12834,12836,12838,12840,12842,12844,12846,12848,12850],{"type":8500,"url":12835},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack\u002Fsecurity\u002Fadvisories\u002FGHSA-8v8h-hg4w-mvq2",{"type":8503,"url":12837},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59980",{"type":8500,"url":12839},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack\u002Fcommit\u002F8cfb02c547740e16dbfe7aba77bad84b297cec2c",{"type":8500,"url":12841},"https:\u002F\u002Fcs.opensource.google\u002Fgo\u002Fx\u002Fnet\u002F+\u002Fmaster:http2\u002Fhpack\u002Fhpack.go;l=468;drc=8e2b117aee74f6b86c207a808b0255de45c0a18a",{"type":8500,"url":12843},"https:\u002F\u002Fdocs.rs\u002Fhttp2\u002F0.5.19\u002Fsrc\u002Fhttp2\u002Fhpack\u002Fdecoder.rs.html#403",{"type":8508,"url":12845},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack",{"type":8500,"url":12847},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhpack\u002Freleases\u002Ftag\u002Fv4.2.0",{"type":8508,"url":12849},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fhpack",{"type":8503,"url":12851},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8v8h-hg4w-mvq2",[12853],"pypi:hpack@4.0.0",{"id":289,"slug":12855,"dossier":47,"summary":12856,"aliases":12857,"sourceIds":12860,"published":12861,"modified":12862,"checkedAt":7,"severity":12863,"references":12865,"versionKeys":12877,"packageCount":32,"repositoryCount":32},"ghsa-8wjv-2p76-3863-60244895","PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header",[12858,12859],"CVE-2026-102265","PYSEC-2026-4142",[289,12859],"2026-09-29T23:43:06Z","2026-10-01T17:55:45.157085612Z",[12864],{"type":8535,"score":8870},[12866,12868,12870,12872,12873,12874,12875],{"type":8500,"url":12867},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",{"type":8503,"url":12869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102265",{"type":8500,"url":12871},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F06573692ebcdec8831c3927513b3e87c31fbbb62",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":12876},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",[9094],{"id":290,"slug":12879,"dossier":47,"summary":12880,"aliases":12881,"sourceIds":12883,"published":12884,"modified":12885,"checkedAt":7,"severity":12886,"references":12888,"versionKeys":12913,"packageCount":32,"repositoryCount":32},"ghsa-8xcm-r25x-g524-9e9c51a0","undici vulnerable to downstream response desynchronization via retry interceptor",[12882],"CVE-2026-16728",[290],"2026-08-03T19:24:33Z","2026-09-10T03:51:13.567076059Z",[12887],{"type":8535,"score":9677},[12889,12891,12893,12895,12897,12899,12901,12903,12905,12907,12908,12909,12911,12912],{"type":8500,"url":12890},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-8xcm-r25x-g524",{"type":8503,"url":12892},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-16728",{"type":8500,"url":12894},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F1b5a5312c3a7d7a30c31bf0d000b39a8a2531e1c",{"type":8500,"url":12896},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2b3f749336d356bbbc50192f87f6cf7bc714721a",{"type":8500,"url":12898},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4a9dafb16ff43880cf590e6d9c2aeee25fbff6d7",{"type":8500,"url":12900},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4fd5a0c61e627f928b7003adc4ffe1e55ec63420",{"type":8500,"url":12902},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcba3a52ac2e7abcc4e656d82af8579ea82c2bb9e",{"type":8500,"url":12904},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fe11a68ed4ff345c79402476f7a00d473443e318d",{"type":8500,"url":12906},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3828685",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":12910},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.28.0",{"type":8500,"url":10208},{"type":8500,"url":10210},[9064,9065],{"id":291,"slug":12915,"dossier":47,"summary":12916,"aliases":12917,"sourceIds":12919,"published":12920,"modified":12921,"checkedAt":7,"severity":12922,"references":12925,"versionKeys":12933,"packageCount":32,"repositoryCount":32},"ghsa-93m4-6634-74q7-557bfeeb","vite allows server.fs.deny bypass via backslash on Windows",[12918],"CVE-2025-62522",[291],"2025-10-20T19:54:28Z","2026-09-10T03:50:29.574857832Z",[12923],{"type":8496,"score":12924},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[12926,12928,12930,12932],{"type":8500,"url":12927},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-93m4-6634-74q7",{"type":8503,"url":12929},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62522",{"type":8500,"url":12931},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff479cc57c425ed41ceb434fecebd63931b1ed4ed",{"type":8508,"url":10497},[10506],{"id":292,"slug":12935,"dossier":47,"summary":12936,"aliases":12937,"sourceIds":12940,"published":12941,"modified":12942,"checkedAt":7,"severity":12943,"references":12946,"versionKeys":12960,"packageCount":32,"repositoryCount":34},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[12938,12939],"CVE-2026-73622","PYSEC-2026-3951",[292,12939],"2026-07-24T21:45:16Z","2026-09-24T14:45:07.411775302Z",[12944,12945],{"type":8535,"score":11654},{"type":8496,"score":12711},[12947,12949,12951,12953,12954,12956,12958],{"type":8541,"url":12948},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":8500,"url":12950},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":8626,"url":12952},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",{"type":8508,"url":8550},{"type":8500,"url":12955},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",{"type":8500,"url":12957},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3951.yaml",{"type":8503,"url":12959},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-remote-add",[8558,8559,8560],{"id":293,"slug":12962,"dossier":47,"summary":12963,"aliases":12964,"sourceIds":12968,"published":12969,"modified":12970,"checkedAt":7,"severity":12971,"references":12974,"versionKeys":12989,"packageCount":32,"repositoryCount":686},"ghsa-94p9-xgh2-xp45-1ed45366","virtualenv: Downloaded seed wheels (pip\u002Fsetuptools) are not integrity-checked before use",[12965,12966,12967],"BIT-virtualenv-2026-102930","CVE-2026-102930","PYSEC-2026-4011",[293,12967],"2026-09-18T01:41:45Z","2026-10-06T15:26:06.490658879Z",[12972],{"type":8496,"score":12973},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[12975,12977,12979,12981,12983,12985,12986,12988],{"type":8500,"url":12976},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-94p9-xgh2-xp45",{"type":8503,"url":12978},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102930",{"type":8500,"url":12980},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3251",{"type":8626,"url":12982},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa01ed3e2f239d6ab1fce62c5c7664ccf268fff6d",{"type":8500,"url":12984},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4011.yaml",{"type":8508,"url":9546},{"type":8500,"url":12987},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.12",{"type":8508,"url":10935},[9550,9551,9552,9553,9554],{"id":294,"slug":12991,"dossier":47,"summary":12992,"aliases":12993,"sourceIds":12996,"published":12997,"modified":12998,"checkedAt":7,"severity":12999,"references":13002,"versionKeys":13013,"packageCount":32,"repositoryCount":752},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[12994,12995],"CVE-2025-53643","PYSEC-2026-1104",[294,12995],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[13000],{"type":8496,"score":13001},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[13003,13005,13007,13009,13010,13011],{"type":8500,"url":13004},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":8503,"url":13006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":8626,"url":13008},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":13012},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[8948,8949,8950,8951],{"id":295,"slug":13015,"dossier":47,"summary":13016,"aliases":13017,"sourceIds":13020,"published":13021,"modified":13022,"checkedAt":7,"severity":13023,"references":13025,"versionKeys":13041,"packageCount":32,"repositoryCount":34},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[13018,13019],"CVE-2026-67323","PYSEC-2026-3839",[295,13019],"2026-07-21T20:10:06Z","2026-09-10T12:25:39.217544351Z",[13024],{"type":8535,"score":12163},[13026,13028,13030,13032,13034,13035,13036,13038,13039],{"type":8500,"url":13027},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":8503,"url":13029},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67323",{"type":8500,"url":13031},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":8500,"url":13033},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":8508,"url":8550},{"type":8500,"url":8915},{"type":8500,"url":13037},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-unguarded-git-options",{"type":8508,"url":8919},{"type":8503,"url":13040},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",[8558,8559,8560],{"id":296,"slug":13043,"dossier":47,"summary":13044,"aliases":13045,"sourceIds":13048,"published":13049,"modified":13050,"checkedAt":7,"severity":13051,"references":13054,"versionKeys":13063,"packageCount":32,"repositoryCount":665},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[13046,13047],"CVE-2026-34518","PYSEC-2026-2100",[296,13047],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[13052,13053],{"type":8535,"score":11444},{"type":8496,"score":10721},[13055,13057,13059,13061,13062],{"type":8626,"url":13056},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":8503,"url":13058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":8626,"url":13060},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":297,"slug":13065,"dossier":47,"summary":13066,"aliases":13067,"sourceIds":13069,"published":13070,"modified":13071,"checkedAt":7,"severity":13072,"references":13074,"versionKeys":13085,"packageCount":32,"repositoryCount":32},"ghsa-97r2-qh9m-474h-644e1396","Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)",[13068],"CVE-2026-116581",[297],"2026-10-28T21:17:27Z","2026-10-28T21:30:06.799577215Z",[13073],{"type":8535,"score":8571},[13075,13077,13079,13081,13083,13084],{"type":8500,"url":13076},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-97r2-qh9m-474h",{"type":8503,"url":13078},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116581",{"type":8500,"url":13080},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002Fcdcee3e3bc384ee844360844f8ea98fd2b275d69",{"type":8500,"url":13082},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002Fe176f9267e59ddd6c9de89cc9fe85c5b37a5b728",{"type":8508,"url":12399},{"type":8500,"url":12401},[12403],{"id":298,"slug":13087,"dossier":47,"summary":13088,"aliases":13089,"sourceIds":13092,"published":13093,"modified":13094,"checkedAt":7,"severity":13095,"references":13097,"versionKeys":13116,"packageCount":32,"repositoryCount":32},"ghsa-983w-rhvv-gwmv-c6b60e52","WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect",[13090,13091],"CVE-2025-68616","PYSEC-2026-2034",[298,13091],"2026-01-20T16:29:53Z","2026-07-07T17:57:32.367800639Z",[13096],{"type":8535,"score":11654},[13098,13100,13102,13104,13106,13108,13110,13112,13114],{"type":8500,"url":13099},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-983w-rhvv-gwmv",{"type":8503,"url":13101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68616",{"type":8500,"url":13103},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fcommit\u002Fb6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565",{"type":8500,"url":13105},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-68616",{"type":8500,"url":13107},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2430858",{"type":8508,"url":13109},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint",{"type":8500,"url":13111},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2025\u002Fcve-2025-68616.json",{"type":8508,"url":13113},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fweasyprint",{"type":8503,"url":13115},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-983w-rhvv-gwmv",[13117],"pypi:weasyprint@64.1",{"id":299,"slug":13119,"dossier":47,"summary":13120,"aliases":13121,"sourceIds":13124,"published":13125,"modified":13126,"checkedAt":7,"severity":13127,"references":13130,"versionKeys":13140,"packageCount":32,"repositoryCount":810},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[13122,13123],"CVE-2026-48522","PYSEC-2026-175",[299,13123],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[13128],{"type":8535,"score":13129},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[13131,13133,13135,13137,13138],{"type":8541,"url":13132},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":8503,"url":13134},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":8500,"url":13136},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":8508,"url":9085},{"type":8500,"url":13139},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[9093,9095],{"id":300,"slug":13142,"dossier":47,"summary":13143,"aliases":13144,"sourceIds":13146,"published":13147,"modified":13148,"checkedAt":7,"severity":13149,"references":13151,"versionKeys":13167,"packageCount":32,"repositoryCount":564},"ghsa-9fm3-97px-rjf6-8587a763","undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering",[13145],"CVE-2026-109932",[300],"2026-10-27T19:02:15Z","2026-10-27T19:15:22.400702743Z",[13150],{"type":8535,"score":8838},[13152,13154,13156,13158,13160,13162,13163,13164,13165,13166],{"type":8500,"url":13153},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-9fm3-97px-rjf6",{"type":8503,"url":13155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109932",{"type":8500,"url":13157},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F39f93e142df03e559fe7c3d1fc7fba9beee2c185",{"type":8500,"url":13159},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F53944624462b6797560288c55dbd8c66857bb495",{"type":8500,"url":13161},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb217373bb024cd93f85eb5b3ffd25684855f60f8",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9178},{"type":8500,"url":9180},{"type":8500,"url":9182},[9064,9065,9184],{"id":301,"slug":13169,"dossier":47,"summary":13170,"aliases":13171,"sourceIds":13173,"published":13174,"modified":13175,"checkedAt":7,"severity":13176,"references":13179,"versionKeys":13190,"packageCount":32,"repositoryCount":32},"ghsa-9fr6-4gfg-395g-dd20f37d","Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method",[13172],"CVE-2026-101902",[301],"2026-09-30T15:12:49Z","2026-09-30T15:30:03.718390401Z",[13177],{"type":8496,"score":13178},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:H\u002FSA:N",[13180,13182,13184,13185,13186,13187,13189],{"type":8500,"url":13181},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-9fr6-4gfg-395g",{"type":8503,"url":13183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101902",{"type":8500,"url":9739},{"type":8500,"url":9741},{"type":8508,"url":9438},{"type":8500,"url":13188},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.34.0",{"type":8500,"url":9744},[9440,9441],{"id":302,"slug":13192,"dossier":47,"summary":13193,"aliases":13194,"sourceIds":13197,"published":13198,"modified":13199,"checkedAt":7,"severity":13200,"references":13202,"versionKeys":13216,"packageCount":32,"repositoryCount":810},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[13195,13196],"CVE-2025-66416","PYSEC-2026-1617",[302,13196],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[13201],{"type":8496,"score":12635},[13203,13205,13207,13209,13211,13212,13214],{"type":8500,"url":13204},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":8503,"url":13206},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":8500,"url":13208},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":8503,"url":13210},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":8508,"url":11028},{"type":8500,"url":13213},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":8508,"url":13215},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[11034,11035,11036],{"id":303,"slug":13218,"dossier":47,"summary":13219,"aliases":13220,"sourceIds":13224,"published":13225,"modified":13226,"checkedAt":7,"severity":13227,"references":13230,"versionKeys":13245,"packageCount":32,"repositoryCount":686},"ghsa-9h9j-4vrj-gf7g-c50a1cd4","virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection",[13221,13222,13223],"BIT-virtualenv-2026-102938","CVE-2026-102938","PYSEC-2026-4012",[303,13223],"2026-09-17T16:42:47Z","2026-10-06T15:25:56.172772842Z",[13228],{"type":8496,"score":13229},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[13231,13233,13235,13237,13239,13241,13242,13244],{"type":8500,"url":13232},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-9h9j-4vrj-gf7g",{"type":8503,"url":13234},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102938",{"type":8500,"url":13236},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3247",{"type":8626,"url":13238},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa30f995461043acb6cacbf3a890951563ccf7140",{"type":8500,"url":13240},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4012.yaml",{"type":8508,"url":9546},{"type":8500,"url":13243},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.11",{"type":8508,"url":10935},[9550,9551,9552,9553,9554],{"id":304,"slug":13247,"dossier":47,"summary":13248,"aliases":13249,"sourceIds":13252,"published":13253,"modified":13254,"checkedAt":7,"severity":13255,"references":13258,"versionKeys":13281,"packageCount":32,"repositoryCount":686},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[13250,13251],"CVE-2024-47081","PYSEC-2026-1872",[304,13251],"2025-06-09T19:06:08Z","2026-10-19T20:00:04.716114530Z",[13256],{"type":8535,"score":13257},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[13259,13261,13263,13265,13267,13269,13271,13273,13275,13277,13279],{"type":8500,"url":13260},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":8503,"url":13262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":8500,"url":13264},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":8626,"url":13266},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":8503,"url":13268},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":8508,"url":13270},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":8500,"url":13272},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.32.4",{"type":8500,"url":13274},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Frequests\u002FPYSEC-2026-1872.yaml",{"type":8508,"url":13276},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":8500,"url":13278},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":8500,"url":13280},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",[13282,13283],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":305,"slug":13285,"dossier":47,"summary":13286,"aliases":13287,"sourceIds":13291,"published":13292,"modified":13293,"checkedAt":7,"severity":13294,"references":13296,"versionKeys":13309,"packageCount":32,"repositoryCount":10072},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[13288,13289,13290],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[305,13290],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[13295],{"type":8535,"score":8571},[13297,13299,13301,13303,13305,13307,13308],{"type":8541,"url":13298},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":8503,"url":13300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":8626,"url":13302},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":8626,"url":13304},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":8500,"url":13306},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":8508,"url":8509},{"type":8503,"url":11352},[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":306,"slug":13311,"dossier":47,"summary":13312,"aliases":13313,"sourceIds":13316,"published":13317,"modified":13318,"checkedAt":7,"severity":13319,"references":13321,"versionKeys":13333,"packageCount":32,"repositoryCount":32},"ghsa-9j54-fg26-wv3r-7789d387","PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation",[13314,13315],"CVE-2026-102266","PYSEC-2026-4143",[306,13315],"2026-09-29T23:43:19Z","2026-10-01T17:56:01.035847258Z",[13320],{"type":8535,"score":9163},[13322,13324,13326,13328,13329,13330,13331],{"type":8500,"url":13323},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",{"type":8503,"url":13325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102266",{"type":8500,"url":13327},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Ff91ed44dd65baaf457f4b3353ed35e98a753934c",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":13332},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",[9094],{"id":307,"slug":13335,"dossier":47,"summary":13336,"aliases":13337,"sourceIds":13339,"published":13340,"modified":13341,"checkedAt":7,"severity":13342,"references":13345,"versionKeys":13355,"packageCount":32,"repositoryCount":810},"ghsa-9jrq-w75r-8gcw-21865588","Vite: Cross origin script execution through Vite custom middleware",[13338],"CVE-2026-112945",[307],"2026-10-21T16:48:14Z","2026-10-21T17:00:26.569382874Z",[13343],{"type":8496,"score":13344},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[13346,13348,13350,13352,13354],{"type":8500,"url":13347},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-9jrq-w75r-8gcw",{"type":8503,"url":13349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112945",{"type":8500,"url":13351},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F23653",{"type":8500,"url":13353},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F7dafd8e56f152403a3230608fa4005273c2e9e17",{"type":8508,"url":10497},[10505,10506,10507],{"id":308,"slug":13357,"dossier":47,"summary":13358,"aliases":13359,"sourceIds":13362,"published":13363,"modified":13364,"checkedAt":7,"severity":13365,"references":13367,"versionKeys":13382,"packageCount":32,"repositoryCount":34},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[13360,13361],"CVE-2026-76218","PYSEC-2026-3840",[308,13361],"2026-08-07T15:36:43Z","2026-09-10T12:25:55.324487522Z",[13366],{"type":8535,"score":11801},[13368,13370,13372,13373,13375,13376,13377,13379,13380],{"type":8500,"url":13369},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":8503,"url":13371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76218",{"type":8500,"url":10274},{"type":8500,"url":13374},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":8508,"url":8550},{"type":8500,"url":10279},{"type":8500,"url":13378},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-repo-init",{"type":8508,"url":8919},{"type":8503,"url":13381},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",[8558,8559,8560],{"id":309,"slug":13384,"dossier":47,"summary":13385,"aliases":13386,"sourceIds":13389,"published":13390,"modified":13391,"checkedAt":7,"severity":13392,"references":13394,"versionKeys":13406,"packageCount":32,"repositoryCount":752},"ghsa-9v7f-9g4p-ffgj-61cfc8ce","PyJWT: PyJWKClient follows redirects when fetching JWKS",[13387,13388],"CVE-2026-102267","PYSEC-2026-4144",[309,13388],"2026-09-29T23:15:00Z","2026-10-01T17:56:19.395032954Z",[13393],{"type":8535,"score":9163},[13395,13397,13399,13401,13402,13403,13404],{"type":8500,"url":13396},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",{"type":8503,"url":13398},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102267",{"type":8500,"url":13400},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":13405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",[9093,9094,9095],{"id":310,"slug":13408,"dossier":47,"summary":13409,"aliases":13410,"sourceIds":13422,"published":13423,"modified":13424,"checkedAt":7,"severity":13425,"references":13429,"versionKeys":13470,"packageCount":564,"repositoryCount":32},"ghsa-9v8h-qqgm-4m35-781aec0d","Brotli: Out-of-bounds write in the Brotli decoder (\"Node2Shell\") also affects the PyPI Brotli package",[13411,13412,13413,13414,13415,13416,13417,13418,13419,13420,13421],"BIT-brotli-2026-111497","BIT-dotnet-2026-111497","BIT-dotnet-sdk-2026-111497","BIT-node-2026-111497","BIT-node-min-2026-111497","BIT-powershell-2026-111497","CVE-2026-111497","GHSA-c9gr-gmg4-2vqv","GO-2026-6888","PYSEC-2026-4322","PYSEC-2026-4323",[310,13420,13421],"2026-10-22T15:32:49Z","2026-11-05T23:25:49.434824566Z",[13426,13427],{"type":8535,"score":8777},{"type":8496,"score":13428},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13430,13432,13434,13436,13438,13440,13442,13444,13446,13448,13450,13452,13454,13456,13458,13460,13462,13464,13466,13468],{"type":8503,"url":13431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111497",{"type":8500,"url":13433},"https:\u002F\u002Fgithub.com\u002Fdotnet\u002Fannouncements\u002Fissues\u002F494",{"type":8500,"url":13435},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002Fda9806362874b9bd4b552a3af360b5d6347beb12",{"type":8500,"url":13437},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002Fb418fa81c48262a86a95332b0bc6d62c30aa78b6",{"type":8500,"url":13439},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002F50a9b70a4d5e1443fc40927952276b68fffa83a0",{"type":8626,"url":13441},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Fcommit\u002F0ed4268a4401abcb4472096340477cf4af7d1a2b",{"type":8500,"url":13443},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fbrotlicffi\u002FPYSEC-2026-4323.yaml",{"type":8500,"url":13445},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F10\u002Fmsg00049.html",{"type":8500,"url":13447},"https:\u002F\u002Fnodejs.org\u002Fen\u002Fblog\u002Fvulnerability\u002Foctober-2026-security-releases",{"type":8500,"url":13449},"https:\u002F\u002Fnodejs.org\u002Fen\u002Fblog\u002Fvulnerability\u002Foctober-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high",{"type":8500,"url":13451},"https:\u002F\u002Fopensourcemalware.com\u002Fblog\u002Fnode2shell-affects-python",{"type":8500,"url":13453},"https:\u002F\u002Fpatchtheplanet.org\u002Fbrotli",{"type":8500,"url":13455},"https:\u002F\u002Fpypi.org\u002Fproject\u002FBrotli",{"type":8500,"url":13457},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbrotlicffi",{"type":8500,"url":13459},"https:\u002F\u002Fwww.aikido.dev\u002Fblog\u002Fnode2shell-nodejs-brotli-rce-cve-2026-111497",{"type":8500,"url":13461},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497",{"type":8503,"url":13463},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-111497",{"type":8500,"url":13465},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fbrotli\u002Freleases\u002Ftag\u002Fv1.2.1",{"type":8508,"url":13467},"https:\u002F\u002Fpypi.org\u002Fproject\u002FBrotli\u002F",{"type":8508,"url":13469},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbrotlicffi\u002F",[9249,13471],"pypi:brotlicffi@1.1.0.0",{"id":311,"slug":13473,"dossier":47,"summary":13474,"aliases":13475,"sourceIds":13479,"published":13480,"modified":13481,"checkedAt":7,"severity":13482,"references":13487,"versionKeys":13498,"packageCount":32,"repositoryCount":8523},"ghsa-9v9v-9qvf-h2hj-0344c250","Pillow: Heap over-read in WMF\u002FEMF rendering via 16-bit dimension truncation (Windows builds)",[13476,13477,13478],"BIT-pillow-2026-96644","CVE-2026-96644","PYSEC-2026-4343",[311,13478],"2026-10-21T21:20:32.943Z","2026-10-29T10:55:35.129178084Z",[13483,13485],{"type":8496,"score":13484},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8535,"score":13486},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[13488,13490,13492,13494,13496,13497],{"type":8503,"url":13489},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9v9v-9qvf-h2hj",{"type":8503,"url":13491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96644",{"type":9620,"url":13493},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10120",{"type":8626,"url":13495},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4cf46bee338304c5c8968fd7f132ba0d40c428b7",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":312,"slug":13500,"dossier":47,"summary":13501,"aliases":13502,"sourceIds":13504,"published":13505,"modified":13506,"checkedAt":7,"severity":13507,"references":13509,"versionKeys":13518,"packageCount":32,"repositoryCount":724},"ghsa-9vhv-jxww-xfm5-e19a009a","filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",[13503],"CVE-2026-112913",[312],"2026-10-23T22:28:19Z","2026-10-23T22:45:03.439584635Z",[13508],{"type":8535,"score":10588},[13510,13512,13514,13516,13517],{"type":8500,"url":13511},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-9vhv-jxww-xfm5",{"type":8500,"url":13513},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F834",{"type":8500,"url":13515},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d",{"type":8508,"url":10858},{"type":8500,"url":10860},[10862,10863,10864,10865],{"id":313,"slug":13520,"dossier":47,"summary":13521,"aliases":13522,"sourceIds":13525,"published":13526,"modified":13527,"checkedAt":7,"severity":13528,"references":13531,"versionKeys":13548,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[13523,13524],"CVE-2024-35195","PYSEC-2026-1873",[313,13524],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[13529],{"type":8535,"score":13530},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[13532,13534,13536,13538,13540,13541,13543,13545,13546],{"type":8500,"url":13533},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":8503,"url":13535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":8500,"url":13537},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":8626,"url":13539},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":8508,"url":13270},{"type":8500,"url":13542},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":8500,"url":13544},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":8508,"url":13276},{"type":8503,"url":13547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[13282],{"id":314,"slug":13550,"dossier":47,"summary":13551,"aliases":13552,"sourceIds":13554,"published":13555,"modified":13556,"checkedAt":7,"severity":13557,"references":13560,"versionKeys":13570,"packageCount":32,"repositoryCount":32},"ghsa-9wx9-5pv9-3349-f9ad6b42","Seroval: Script injection through RegExp sources in serialized output",[13553],"CVE-2026-116582",[314],"2026-10-28T21:17:31Z","2026-10-28T21:30:04.992414732Z",[13558],{"type":8535,"score":13559},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[13561,13563,13565,13567,13568],{"type":8500,"url":13562},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx9-5pv9-3349",{"type":8503,"url":13564},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116582",{"type":8500,"url":13566},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002Ff94ee0b63936dae954ff50d5b5e8ea7cb9b284e6",{"type":8508,"url":12399},{"type":8500,"url":13569},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Freleases\u002Ftag\u002Fseroval@1.6.10",[12403],{"id":315,"slug":13572,"dossier":47,"summary":13573,"aliases":13574,"sourceIds":13577,"published":13578,"modified":13579,"checkedAt":7,"severity":13580,"references":13584,"versionKeys":13590,"packageCount":32,"repositoryCount":654},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[13575,13576],"CVE-2026-54280","PYSEC-2026-2113",[315,13576],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[13581,13583],{"type":8496,"score":13582},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8535,"score":8571},[13585,13587,13589],{"type":8503,"url":13586},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":8626,"url":13588},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":8508,"url":8944},[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":316,"slug":13592,"dossier":47,"summary":13593,"aliases":13594,"sourceIds":13596,"published":13597,"modified":13598,"checkedAt":7,"severity":13599,"references":13601,"versionKeys":13610,"packageCount":32,"repositoryCount":9035},"ghsa-9xw5-w5jj-pvcg-5b93a500","AIOHTTP: File descriptor exhaustion in multipart requests",[13595],"CVE-2026-111066",[316],"2026-10-20T19:52:09Z","2026-10-20T20:00:04.692319554Z",[13600],{"type":8496,"score":8497},[13602,13604,13606,13608,13609],{"type":8500,"url":13603},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9xw5-w5jj-pvcg",{"type":8503,"url":13605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111066",{"type":8500,"url":13607},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2d94633b7f1b4c1ba07d647b629a8440652b2d09",{"type":8508,"url":8944},{"type":8500,"url":9031},[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],{"id":317,"slug":13612,"dossier":47,"summary":13613,"aliases":13614,"sourceIds":13617,"published":13618,"modified":13619,"checkedAt":7,"severity":13620,"references":13622,"versionKeys":13635,"packageCount":32,"repositoryCount":32},"ghsa-9xwg-3r6f-jcx2-8434e377","PyMdown Extensions: Path traversal in the b64 extension lets \u003Cimg src> read files outside base_path",[13615,13616],"CVE-2026-61632","PYSEC-2026-3609",[317,13616],"2026-07-24T16:18:33Z","2026-09-10T03:51:11.365684709Z",[13621],{"type":8535,"score":11444},[13623,13625,13627,13628,13630,13631,13633],{"type":8500,"url":13624},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-9xwg-3r6f-jcx2",{"type":8500,"url":13626},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fcommit\u002Fedce35586d11a1ef78bb187bc60497fe6dbf3b64",{"type":8508,"url":11376},{"type":8500,"url":13629},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Freleases\u002Ftag\u002F11.0",{"type":8508,"url":11378},{"type":8503,"url":13632},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9xwg-3r6f-jcx2",{"type":8503,"url":13634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-61632",[11384],{"id":318,"slug":13637,"dossier":47,"summary":13638,"aliases":13639,"sourceIds":13641,"published":13642,"modified":13643,"checkedAt":7,"severity":13644,"references":13646,"versionKeys":13654,"packageCount":32,"repositoryCount":810},"ghsa-c2c7-rcm5-vvqj-6ccdec4e","Picomatch has a ReDoS vulnerability via extglob quantifiers",[13640],"CVE-2026-33671",[318],"2026-03-25T21:12:07Z","2026-09-10T03:51:00.292614896Z",[13645],{"type":8535,"score":8571},[13647,13649,13651,13653],{"type":8500,"url":13648},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fsecurity\u002Fadvisories\u002FGHSA-c2c7-rcm5-vvqj",{"type":8503,"url":13650},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33671",{"type":8500,"url":13652},"https:\u002F\u002Fgithub.com\u002Fmicromatch\u002Fpicomatch\u002Fcommit\u002F5eceecd27543b8e056b9307d69e105ea03618a7d",{"type":8508,"url":9793},[9795,9796],{"id":319,"slug":13656,"dossier":47,"summary":13657,"aliases":13658,"sourceIds":13661,"published":13662,"modified":13663,"checkedAt":7,"severity":13664,"references":13668,"versionKeys":13679,"packageCount":32,"repositoryCount":665},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[13659,13660],"CVE-2026-34525","PYSEC-2026-2103",[319,13660],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[13665,13667],{"type":8496,"score":13666},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":8535,"score":9293},[13669,13671,13673,13675,13677,13678],{"type":8626,"url":13670},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":8503,"url":13672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":8626,"url":13674},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":8626,"url":13676},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":320,"slug":13681,"dossier":47,"summary":13682,"aliases":13683,"sourceIds":13686,"published":13687,"modified":13688,"checkedAt":7,"severity":13689,"references":13692,"versionKeys":13701,"packageCount":32,"repositoryCount":8523},"ghsa-c6hw-5grf-ff96-1e7aec72","Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels",[13684,13685],"BIT-pillow-2026-112404","CVE-2026-112404",[320],"2026-10-20T20:42:00Z","2026-10-26T08:55:55.669563065Z",[13690],{"type":8496,"score":13691},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13693,13695,13697,13699,13700],{"type":8500,"url":13694},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-c6hw-5grf-ff96",{"type":8503,"url":13696},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112404",{"type":8500,"url":13698},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":321,"slug":13703,"dossier":47,"summary":13704,"aliases":13705,"sourceIds":13707,"published":13708,"modified":13709,"checkedAt":7,"severity":13710,"references":13712,"versionKeys":13721,"packageCount":32,"repositoryCount":32},"ghsa-c83g-rgw3-j3cx-c08d66e8","Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM",[13706],"CVE-2026-73089",[321],"2026-09-01T16:42:13Z","2026-09-10T03:50:54.622936829Z",[13711],{"type":8535,"score":8571},[13713,13715,13717,13719,13720],{"type":8500,"url":13714},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fsecurity\u002Fadvisories\u002FGHSA-c83g-rgw3-j3cx",{"type":8503,"url":13716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-73089",{"type":8500,"url":13718},"https:\u002F\u002Fgithub.com\u002Fbrowserslist\u002Fbrowserslist\u002Fcommit\u002Ff2931a3ff2a3a31abf84ef01a7400b270aad6405",{"type":8508,"url":12026},{"type":8500,"url":12028},[12030],{"id":322,"slug":13723,"dossier":47,"summary":13724,"aliases":13725,"sourceIds":13728,"published":13729,"modified":13730,"checkedAt":7,"severity":13731,"references":13733,"versionKeys":13742,"packageCount":32,"repositoryCount":686},"ghsa-c947-3pg5-gm8q-45da7664","virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote",[13726,13727],"BIT-virtualenv-2026-113732","CVE-2026-113732",[322],"2026-10-21T16:39:58Z","2026-10-29T10:55:30.348006947Z",[13732],{"type":8535,"score":11125},[13734,13736,13738,13740,13741],{"type":8500,"url":13735},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c947-3pg5-gm8q",{"type":8503,"url":13737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113732",{"type":8500,"url":13739},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F3bddeaf8d02c3ee7f576503efb082f8f494cfcab",{"type":8508,"url":9546},{"type":8500,"url":12797},[9550,9551,9552,9553,9554],{"id":323,"slug":13744,"dossier":47,"summary":13745,"aliases":13746,"sourceIds":13749,"published":13750,"modified":13751,"checkedAt":7,"severity":13752,"references":13754,"versionKeys":13765,"packageCount":32,"repositoryCount":686},"ghsa-c978-59m8-c77v-420aeea3","virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax",[13747,13748],"BIT-virtualenv-2026-113722","CVE-2026-113722",[323],"2026-10-21T21:30:12Z","2026-10-29T10:55:46.719521464Z",[13753],{"type":8535,"score":11125},[13755,13757,13759,13761,13763,13764],{"type":8500,"url":13756},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c978-59m8-c77v",{"type":8503,"url":13758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113722",{"type":8500,"url":13760},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3417",{"type":8500,"url":13762},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2519941bed33ee0d3ac99277f67913e439e476a9",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":324,"slug":13767,"dossier":47,"summary":13768,"aliases":13769,"sourceIds":13773,"published":13774,"modified":13775,"checkedAt":7,"severity":13776,"references":13779,"versionKeys":13819,"packageCount":32,"repositoryCount":10617},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[13770,13771,13772],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[324,13772],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[13777,13778],{"type":8496,"score":12165},{"type":8535,"score":8571},[13780,13782,13784,13786,13788,13790,13791,13793,13795,13797,13799,13801,13803,13805,13807,13809,13811,13813,13815,13817],{"type":8500,"url":13781},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":8503,"url":13783},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":8500,"url":13785},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":8500,"url":13787},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":8500,"url":13789},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":8508,"url":8509},{"type":8500,"url":13792},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":8500,"url":13794},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":8500,"url":13796},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":8503,"url":13798},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":8503,"url":13800},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":8503,"url":13802},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":8503,"url":13804},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":8503,"url":13806},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":8503,"url":13808},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":8503,"url":13810},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":8503,"url":13812},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":8503,"url":13814},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":8503,"url":13816},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":8503,"url":13818},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[8513,8514,8515,8516,8517,8518,8519],{"id":325,"slug":13821,"dossier":47,"summary":13822,"aliases":13823,"sourceIds":13827,"published":13828,"modified":13829,"checkedAt":7,"severity":13830,"references":13833,"versionKeys":13842,"packageCount":32,"repositoryCount":705},"ghsa-cp9v-662q-vvx9-b0a60d48","Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0",[13824,13825,13826],"BIT-pillow-2026-112405","CVE-2026-112405","PYSEC-2026-4333",[325,13826],"2026-10-19T22:17:08.027Z","2026-10-28T11:10:36.014536437Z",[13831,13832],{"type":8496,"score":9003},{"type":8535,"score":8571},[13834,13836,13838,13840,13841],{"type":8541,"url":13835},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cp9v-662q-vvx9",{"type":8503,"url":13837},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112405",{"type":8626,"url":13839},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb6ee66e8b2c2c0932bdf65f963268d9f2927ef86",{"type":8508,"url":8509},{"type":8503,"url":8511},[8518,8519,8520,8521,8522],{"id":326,"slug":13844,"dossier":47,"summary":13845,"aliases":13846,"sourceIds":13849,"published":13850,"modified":13851,"checkedAt":7,"severity":13852,"references":13855,"versionKeys":13872,"packageCount":32,"repositoryCount":564},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[13847,13848],"CVE-2025-27516","PYSEC-2026-1471",[326,13848],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[13853],{"type":8496,"score":13854},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13856,13858,13860,13862,13864,13866,13868,13870],{"type":8500,"url":13857},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":8503,"url":13859},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":8626,"url":13861},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":8508,"url":13863},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":8500,"url":13865},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":8500,"url":13867},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":8508,"url":13869},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":8503,"url":13871},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[13873,13874],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":327,"slug":13876,"dossier":47,"summary":13877,"aliases":13878,"sourceIds":13881,"published":13882,"modified":13883,"checkedAt":7,"severity":13884,"references":13886,"versionKeys":13901,"packageCount":32,"repositoryCount":42},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[13879,13880],"CVE-2026-69244","PYSEC-2026-3545",[327,13880],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[13885],{"type":8496,"score":9612},[13887,13889,13891,13893,13894,13896,13897,13899],{"type":8500,"url":13888},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":8500,"url":13890},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":8500,"url":13892},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":8508,"url":8944},{"type":8500,"url":13895},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":8508,"url":10731},{"type":8503,"url":13898},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":8503,"url":13900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033],{"id":328,"slug":13903,"dossier":47,"summary":13904,"aliases":13905,"sourceIds":13908,"published":13909,"modified":13910,"checkedAt":7,"severity":13911,"references":13913,"versionKeys":13924,"packageCount":32,"repositoryCount":686},"ghsa-cw65-gx24-rc82-d2d30a51","virtualenv: Builtin creation follows linked environment directories",[13906,13907],"BIT-virtualenv-2026-113716","CVE-2026-113716",[328],"2026-10-21T21:35:56Z","2026-10-29T10:55:59.838026441Z",[13912],{"type":8535,"score":9990},[13914,13916,13918,13920,13922,13923],{"type":8500,"url":13915},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cw65-gx24-rc82",{"type":8503,"url":13917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113716",{"type":8500,"url":13919},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3429",{"type":8500,"url":13921},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F554d9f9d4f7758f5cf53f993031e29787f1f74c5",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":329,"slug":13926,"dossier":47,"summary":13927,"aliases":13928,"sourceIds":13930,"published":13931,"modified":13932,"checkedAt":7,"severity":13933,"references":13935,"versionKeys":13944,"packageCount":32,"repositoryCount":724},"ghsa-cwqr-hh33-gh44-4ee53d3a","filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout",[13929],"CVE-2026-112915",[329],"2026-10-28T21:08:49Z","2026-10-28T21:15:04.923553251Z",[13934],{"type":8535,"score":11264},[13936,13938,13940,13941,13942,13943],{"type":8500,"url":13937},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-cwqr-hh33-gh44",{"type":8503,"url":13939},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112915",{"type":8500,"url":13513},{"type":8500,"url":13515},{"type":8508,"url":10858},{"type":8500,"url":10860},[10862,10863,10864,10865],{"id":330,"slug":13946,"dossier":47,"summary":13947,"aliases":13948,"sourceIds":13951,"published":13952,"modified":13953,"checkedAt":7,"severity":13954,"references":13956,"versionKeys":13965,"packageCount":32,"repositoryCount":686},"ghsa-cx28-75q4-x26q-bb017595","virtualenv: Pip seeding with download omits wheel digest verification",[13949,13950],"BIT-virtualenv-2026-113717","CVE-2026-113717",[330],"2026-10-23T22:26:04Z","2026-10-29T10:55:56.839709622Z",[13955],{"type":8496,"score":10153},[13957,13959,13961,13962,13963,13964],{"type":8500,"url":13958},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cx28-75q4-x26q",{"type":8503,"url":13960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113717",{"type":8500,"url":10160},{"type":8500,"url":10162},{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":331,"slug":13967,"dossier":47,"summary":13968,"aliases":13969,"sourceIds":13971,"published":13972,"modified":13973,"checkedAt":7,"severity":13974,"references":13976,"versionKeys":13985,"packageCount":32,"repositoryCount":32},"ghsa-f269-vfmq-vjvj-ae91eae7","Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client",[13970],"CVE-2026-1528",[331],"2026-03-13T20:07:26Z","2026-09-10T03:50:38.848760381Z",[13975],{"type":8535,"score":8571},[13977,13979,13981,13983,13984],{"type":8500,"url":13978},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-f269-vfmq-vjvj",{"type":8503,"url":13980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1528",{"type":8500,"url":13982},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3537648",{"type":8500,"url":8755},{"type":8508,"url":9058},[9064,9065],{"id":332,"slug":13987,"dossier":47,"summary":13988,"aliases":13989,"sourceIds":13992,"published":13993,"modified":13994,"checkedAt":7,"severity":13995,"references":13997,"versionKeys":14006,"packageCount":32,"repositoryCount":8523},"ghsa-f2g6-542v-9j58-1b810101","Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle",[13990,13991],"BIT-pillow-2026-112406","CVE-2026-112406",[332],"2026-10-21T21:21:07Z","2026-10-26T08:56:13.538142549Z",[13996],{"type":8496,"score":9003},[13998,14000,14002,14004,14005],{"type":8500,"url":13999},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-f2g6-542v-9j58",{"type":8503,"url":14001},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112406",{"type":8500,"url":14003},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb3ebf20c694f2f12537a629c30229a1d5a53f777",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":333,"slug":14008,"dossier":47,"summary":14009,"aliases":14010,"sourceIds":14012,"published":14013,"modified":14014,"checkedAt":7,"severity":14015,"references":14018,"versionKeys":14031,"packageCount":32,"repositoryCount":564},"ghsa-f72v-6w45-q472-bdbac4d6","undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens",[14011],"CVE-2026-109841",[333],"2026-10-23T22:12:57Z","2026-10-23T22:30:04.094314933Z",[14016],{"type":8535,"score":14017},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[14019,14021,14023,14025,14027,14028,14029,14030],{"type":8500,"url":14020},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-f72v-6w45-q472",{"type":8503,"url":14022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109841",{"type":8500,"url":14024},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F18bc8a1e09d15bc45815154a289dcf6fd5254d00",{"type":8500,"url":14026},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F4f7ef6806e532ab9e29ccd6229b1b9d241e1b1f0",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9180},{"type":8500,"url":9182},[9065,9184],{"id":334,"slug":14033,"dossier":47,"summary":14034,"aliases":14035,"sourceIds":14037,"published":14038,"modified":14039,"checkedAt":7,"severity":14040,"references":14043,"versionKeys":14053,"packageCount":32,"repositoryCount":32},"ghsa-f86p-h4j2-7qgj-9355f720","Seroval: Code injection through a typed array's own constructor property",[14036],"CVE-2026-116583",[334],"2026-10-28T21:17:36Z","2026-10-28T21:30:05.897308225Z",[14041],{"type":8496,"score":14042},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[14044,14046,14048,14050,14051],{"type":8500,"url":14045},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-f86p-h4j2-7qgj",{"type":8503,"url":14047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116583",{"type":8500,"url":14049},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fcommit\u002F1313ebbad9687bc0245e08bfd576376e57e0e5c1",{"type":8508,"url":12399},{"type":8500,"url":14052},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Freleases\u002Ftag\u002Fseroval@1.6.11",[12403],{"id":335,"slug":14055,"dossier":47,"summary":14056,"aliases":14057,"sourceIds":14059,"published":14060,"modified":14061,"checkedAt":7,"severity":14062,"references":14064,"versionKeys":14088,"packageCount":32,"repositoryCount":564},"ghsa-f886-m6hf-6m8v-159d3b25","brace-expansion: Zero-step sequence causes process hang and memory exhaustion",[14058],"CVE-2026-33750",[335],"2026-03-26T18:29:42Z","2026-09-10T03:51:00.342356761Z",[14063],{"type":8535,"score":8654},[14065,14067,14069,14071,14073,14075,14077,14079,14081,14083,14084,14086],{"type":8500,"url":14066},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-f886-m6hf-6m8v",{"type":8503,"url":14068},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33750",{"type":8500,"url":14070},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fissues\u002F98",{"type":8500,"url":14072},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F95",{"type":8500,"url":14074},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F96",{"type":8500,"url":14076},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F97",{"type":8500,"url":14078},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F311ac0d54994158c0a384e286a7d6cbb17ee8ed5",{"type":8500,"url":14080},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F7fd684f89fdde3549563d0a6522226a9189472a2",{"type":8500,"url":14082},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fb9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a",{"type":8508,"url":9655},{"type":8500,"url":14085},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fblob\u002Fdaa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a\u002Fsrc\u002Findex.ts#L107-L113",{"type":8500,"url":14087},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fblob\u002Fdaa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a\u002Fsrc\u002Findex.ts#L184",[9665,9666],{"id":336,"slug":14090,"dossier":47,"summary":14091,"aliases":14092,"sourceIds":14095,"published":14096,"modified":14097,"checkedAt":7,"severity":14098,"references":14102,"versionKeys":14113,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[14093,14094],"CVE-2024-47874","PYSEC-2026-1943",[336,14094],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[14099,14101],{"type":8535,"score":14100},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":8496,"score":9003},[14103,14105,14107,14109,14110,14111],{"type":8500,"url":14104},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":8503,"url":14106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":8626,"url":14108},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":8508,"url":8879},{"type":8508,"url":8885},{"type":8503,"url":14112},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[8889],{"id":337,"slug":14115,"dossier":47,"summary":14116,"aliases":14117,"sourceIds":14119,"published":14120,"modified":14121,"checkedAt":7,"severity":14122,"references":14124,"versionKeys":14133,"packageCount":32,"repositoryCount":34},"ghsa-f9j4-qggq-h239-968ed9a4","GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution",[14118],"CVE-2026-110858",[337],"2026-10-27T15:26:50Z","2026-10-27T15:47:24.258288646Z",[14123],{"type":8535,"score":12193},[14125,14127,14129,14131,14132],{"type":8500,"url":14126},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-f9j4-qggq-h239",{"type":8500,"url":14128},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2247",{"type":8500,"url":14130},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F790bb3164948625ffb043d2a162425d55923fe9a",{"type":8508,"url":8550},{"type":8500,"url":8606},[8558,8559,8560],{"id":338,"slug":14135,"dossier":47,"summary":14136,"aliases":14137,"sourceIds":14139,"published":14140,"modified":14141,"checkedAt":7,"severity":14142,"references":14145,"versionKeys":14154,"packageCount":32,"repositoryCount":9035},"ghsa-f9xw-jh8m-3mwq-43205cf6","AIOHTTP: Absolute-form request targets can spoof Request.scheme",[14138],"CVE-2026-111748",[338],"2026-10-20T20:01:40Z","2026-10-20T20:15:05.218624757Z",[14143],{"type":8496,"score":14144},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14146,14148,14150,14152,14153],{"type":8500,"url":14147},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-f9xw-jh8m-3mwq",{"type":8503,"url":14149},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111748",{"type":8500,"url":14151},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6d4e7b01f9b951aa084a75d7356e907d4ee80411",{"type":8508,"url":8944},{"type":8500,"url":9031},[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],{"id":339,"slug":14156,"dossier":47,"summary":14157,"aliases":14158,"sourceIds":14161,"published":14162,"modified":14163,"checkedAt":7,"severity":14164,"references":14167,"versionKeys":14178,"packageCount":32,"repositoryCount":686},"ghsa-fc2g-4w5p-6whm-f875e0d2","virtualenv: Seeded files retain permissions from an older cache",[14159,14160],"BIT-virtualenv-2026-113720","CVE-2026-113720",[339],"2026-10-23T22:23:11Z","2026-10-29T10:55:56.743073990Z",[14165],{"type":8496,"score":14166},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[14168,14170,14172,14174,14176,14177],{"type":8500,"url":14169},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-fc2g-4w5p-6whm",{"type":8503,"url":14171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113720",{"type":8500,"url":14173},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3425",{"type":8500,"url":14175},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F35f0b33562790176dd186d0a3c517af3acc7a0e1",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":340,"slug":14180,"dossier":47,"summary":14181,"aliases":14182,"sourceIds":14185,"published":14186,"modified":14187,"checkedAt":7,"severity":14188,"references":14190,"versionKeys":14198,"packageCount":32,"repositoryCount":8523},"ghsa-fc9g-5qg7-mf45-6ce92387","Pillow: Quadratic GIF comment copying during save",[14183,14184],"BIT-pillow-2026-112891","CVE-2026-112891",[340],"2026-10-21T20:38:43Z","2026-10-26T08:56:06.483214483Z",[14189],{"type":8496,"score":11316},[14191,14193,14195,14196,14197],{"type":8500,"url":14192},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fc9g-5qg7-mf45",{"type":8503,"url":14194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112891",{"type":8500,"url":12048},{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":341,"slug":14200,"dossier":47,"summary":14201,"aliases":14202,"sourceIds":14205,"published":14206,"modified":14207,"checkedAt":7,"severity":14208,"references":14211,"versionKeys":14223,"packageCount":32,"repositoryCount":752},"ghsa-ffc3-869f-jxw9-318ae071","PyJWT: Asymmetric-PEM detection bypass: whitespace\u002Fline-ending-mutated public keys skip the HS\u002Fasymmetric confusion guard",[14203,14204],"CVE-2026-102268","PYSEC-2026-4145",[341,14204],"2026-09-29T23:17:33Z","2026-10-01T17:55:42.096970476Z",[14209],{"type":8535,"score":14210},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[14212,14214,14216,14218,14219,14220,14221],{"type":8500,"url":14213},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",{"type":8503,"url":14215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102268",{"type":8500,"url":14217},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8b4e233a22206b34ec1186e912e75c0b2396ac07",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":14222},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",[9093,9094,9095],{"id":342,"slug":14225,"dossier":47,"summary":14226,"aliases":14227,"sourceIds":14230,"published":14231,"modified":14232,"checkedAt":7,"severity":14233,"references":14236,"versionKeys":14247,"packageCount":32,"repositoryCount":686},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[14228,14229],"CVE-2025-69230","PYSEC-2026-1105",[342,14229],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[14234],{"type":8496,"score":14235},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[14237,14239,14241,14243,14244,14245],{"type":8500,"url":14238},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":8503,"url":14240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":8626,"url":14242},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":14246},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[8948,8949,8950,8951,8952,8953,8954],{"id":343,"slug":14249,"dossier":47,"summary":14250,"aliases":14251,"sourceIds":14254,"published":14255,"modified":14256,"checkedAt":7,"severity":14257,"references":14259,"versionKeys":14269,"packageCount":32,"repositoryCount":810},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[14252,14253],"CVE-2026-48524","PYSEC-2026-177",[343,14253],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[14258],{"type":8535,"score":11911},[14260,14262,14264,14266,14267],{"type":8503,"url":14261},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":8503,"url":14263},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":8500,"url":14265},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":8508,"url":9085},{"type":8500,"url":14268},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[9093,9095],{"id":344,"slug":14271,"dossier":47,"summary":14272,"aliases":14273,"sourceIds":14277,"published":14278,"modified":14279,"checkedAt":7,"severity":14280,"references":14283,"versionKeys":14297,"packageCount":32,"repositoryCount":10072},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[14274,14275,14276],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[344,14276],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[14281],{"type":8535,"score":14282},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[14284,14286,14288,14290,14292,14293,14294,14295],{"type":8500,"url":14285},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":8503,"url":14287},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":8500,"url":14289},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":8500,"url":14291},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":8508,"url":8509},{"type":8500,"url":11352},{"type":8508,"url":11354},{"type":8503,"url":14296},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":345,"slug":14299,"dossier":47,"summary":14300,"aliases":14301,"sourceIds":14304,"published":14305,"modified":14306,"checkedAt":7,"severity":14307,"references":14310,"versionKeys":14320,"packageCount":32,"repositoryCount":34},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[14302,14303],"CVE-2026-73624","PYSEC-2026-3995",[345,14303],"2026-07-24T16:41:20Z","2026-09-29T09:10:55.738617943Z",[14308,14309],{"type":8535,"score":9566},{"type":8496,"score":9568},[14311,14313,14314,14316,14317,14318],{"type":8541,"url":14312},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":8500,"url":11807},{"type":8500,"url":14315},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":8508,"url":8550},{"type":8500,"url":11812},{"type":8503,"url":14319},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-diff",[8558,8559,8560],{"id":346,"slug":14322,"dossier":47,"summary":14323,"aliases":14324,"sourceIds":14326,"published":14327,"modified":14328,"checkedAt":7,"severity":14329,"references":14332,"versionKeys":14343,"packageCount":32,"repositoryCount":724},"ghsa-fq56-3cx3-fjxp-d2885806","filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders",[14325],"CVE-2026-112935",[346],"2026-10-28T21:08:08Z","2026-10-28T21:15:04.933315565Z",[14330],{"type":8535,"score":14331},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[14333,14335,14337,14339,14341,14342],{"type":8500,"url":14334},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-fq56-3cx3-fjxp",{"type":8503,"url":14336},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112935",{"type":8500,"url":14338},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F843",{"type":8500,"url":14340},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F740ff666b62a88496c8d7394e4e6230605e4d62b",{"type":8508,"url":10858},{"type":8500,"url":10860},[10862,10863,10864,10865],{"id":347,"slug":14345,"dossier":47,"summary":14346,"aliases":14347,"sourceIds":14349,"published":14350,"modified":14351,"checkedAt":7,"severity":14352,"references":14354,"versionKeys":14372,"packageCount":32,"repositoryCount":32},"ghsa-fvcv-3m26-pcqx-aa71c009","Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain",[14348],"CVE-2026-40175",[347],"2026-04-10T19:47:16Z","2026-09-10T03:50:44.273401032Z",[14353],{"type":8535,"score":9677},[14355,14357,14359,14361,14363,14364,14365,14367,14369,14370,14371],{"type":8500,"url":14356},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-fvcv-3m26-pcqx",{"type":8503,"url":14358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40175",{"type":8500,"url":14360},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10660",{"type":8500,"url":14362},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10660#issuecomment-4224168081",{"type":8500,"url":9688},{"type":8500,"url":9690},{"type":8500,"url":14366},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F363185461b90b1b78845dc8a99a1f103d9b122a1",{"type":8500,"url":14368},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-876049.html",{"type":8508,"url":9438},{"type":8500,"url":9699},{"type":8500,"url":9701},[9440,9441],{"id":348,"slug":14374,"dossier":47,"summary":14375,"aliases":14376,"sourceIds":14378,"published":14379,"modified":14380,"checkedAt":7,"severity":14381,"references":14384,"versionKeys":14390,"packageCount":32,"repositoryCount":810},"ghsa-fx2h-pf6j-xcff-156ab351","vite: `server.fs.deny` bypass on Windows alternate paths",[14377],"CVE-2026-53571",[348],"2026-06-15T17:17:45Z","2026-10-27T15:15:07.885624041Z",[14382],{"type":8496,"score":14383},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",[14385,14387,14389],{"type":8500,"url":14386},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-fx2h-pf6j-xcff",{"type":8503,"url":14388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53571",{"type":8508,"url":10497},[10505,10506,10507],{"id":349,"slug":14392,"dossier":47,"summary":14393,"aliases":14394,"sourceIds":14396,"published":14397,"modified":14398,"checkedAt":7,"severity":14399,"references":14402,"versionKeys":14411,"packageCount":32,"repositoryCount":34},"ghsa-fx3j-rwgx-fr94-14d75c26","GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name",[14395],"CVE-2026-110855",[349],"2026-10-27T15:26:32Z","2026-10-27T15:47:24.291028301Z",[14400],{"type":8535,"score":14401},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[14403,14405,14407,14409,14410],{"type":8500,"url":14404},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fx3j-rwgx-fr94",{"type":8500,"url":14406},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2255",{"type":8500,"url":14408},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9349ff58ee00c9fb14d515c8e693f33b2144b238",{"type":8508,"url":8550},{"type":8500,"url":8606},[8558,8559,8560],{"id":350,"slug":14413,"dossier":47,"summary":14414,"aliases":14415,"sourceIds":14417,"published":14418,"modified":14419,"checkedAt":7,"severity":14420,"references":14422,"versionKeys":14430,"packageCount":32,"repositoryCount":810},"ghsa-fxqj-rqcc-2cmp-34c312ef","PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",[14416],"CVE-2026-69153",[350],"2026-08-03T17:11:39Z","2026-09-10T03:50:53.572374167Z",[14421],{"type":8496,"score":10131},[14423,14425,14427,14428],{"type":8500,"url":14424},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-fxqj-rqcc-2cmp",{"type":8500,"url":14426},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002F7beca139e70f9075c6b19700fcb00dd8033e5da8",{"type":8508,"url":11663},{"type":8500,"url":14429},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.19",[11667,11668,11669],{"id":351,"slug":14432,"dossier":47,"summary":14433,"aliases":14434,"sourceIds":14437,"published":14438,"modified":14439,"checkedAt":7,"severity":14440,"references":14443,"versionKeys":14449,"packageCount":32,"repositoryCount":654},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[14435,14436],"CVE-2026-54278","PYSEC-2026-2111",[351,14436],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[14441,14442],{"type":8496,"score":10248},{"type":8535,"score":8571},[14444,14446,14447],{"type":8503,"url":14445},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":8508,"url":8944},{"type":8626,"url":14448},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":352,"slug":14451,"dossier":47,"summary":14452,"aliases":14453,"sourceIds":14455,"published":14456,"modified":14457,"checkedAt":7,"severity":14458,"references":14460,"versionKeys":14474,"packageCount":32,"repositoryCount":724},"ghsa-g3hv-75wg-m249-8b521a59","minimatch has potential denial of service via globparts amplification",[14454],"CVE-2026-118764",[352],"2026-10-30T23:09:55Z","2026-11-04T17:01:25.850114200Z",[14459],{"type":8496,"score":11316},[14461,14463,14465,14467,14469,14471,14472],{"type":8500,"url":14462},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fsecurity\u002Fadvisories\u002FGHSA-g3hv-75wg-m249",{"type":8503,"url":14464},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-118764",{"type":8500,"url":14466},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F297b6c1a01f2410b3ba1ebed14ba222d0c3c1033",{"type":8500,"url":14468},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002F77a0f5c4b80bdc641c3c930a1d9edf5ad2db57f8",{"type":8500,"url":14470},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Fcommit\u002Ffd0b3ab9cbc5bf1aff1c99f1f46e413c2b3340da",{"type":8508,"url":8580},{"type":8500,"url":14473},"https:\u002F\u002Fgithub.com\u002Fisaacs\u002Fminimatch\u002Freleases\u002Ftag\u002Fv11.0.1",[8582,8583,14475,14476,8585],"npm:minimatch@10.2.5","npm:minimatch@10.2.6",{"id":353,"slug":14478,"dossier":47,"summary":14479,"aliases":14480,"sourceIds":14482,"published":14483,"modified":14484,"checkedAt":7,"severity":14485,"references":14488,"versionKeys":14504,"packageCount":32,"repositoryCount":32},"ghsa-g4jq-h2w9-997c-b5be310c","Vite middleware may serve files starting with the same name with the public directory",[14481],"CVE-2025-58751",[353],"2025-09-09T20:55:56Z","2026-09-10T03:50:28.405024248Z",[14486],{"type":8496,"score":14487},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14489,14491,14493,14495,14497,14499,14501,14503],{"type":8500,"url":14490},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-g4jq-h2w9-997c",{"type":8503,"url":14492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58751",{"type":8500,"url":14494},"https:\u002F\u002Fgithub.com\u002Flukeed\u002Fsirv\u002Fcommit\u002Ff0113f3f8266328d804ee808f763a3c11f8997eb",{"type":8500,"url":14496},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F09f2b52e8d5907f26602653caf41b3a56692600d",{"type":8500,"url":14498},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F4f1c35bcbb5830290c694aa14b6789e07450f069",{"type":8500,"url":14500},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F63e2a5d232218f3f8d852056751e609a5367aaec",{"type":8500,"url":14502},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Fe11d24008b97d4ca731ecc1a3b95260a6d12e7e0",{"type":8508,"url":10497},[10506],{"id":354,"slug":14506,"dossier":47,"summary":14507,"aliases":14508,"sourceIds":14512,"published":14513,"modified":14514,"checkedAt":7,"severity":14515,"references":14518,"versionKeys":14529,"packageCount":32,"repositoryCount":9366},"ghsa-g4qv-2jxx-769h-01f137f2","Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time",[14509,14510,14511],"BIT-pillow-2026-96643","CVE-2026-96643","PYSEC-2026-4342",[354,14511],"2026-10-21T21:20:32.797Z","2026-10-29T10:55:44.091799759Z",[14516,14517],{"type":8496,"score":9612},{"type":8535,"score":8654},[14519,14521,14523,14525,14527,14528],{"type":8503,"url":14520},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g4qv-2jxx-769h",{"type":8503,"url":14522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96643",{"type":9620,"url":14524},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10073",{"type":8626,"url":14526},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F806e38381c781f32bbd22f4cd026678acd40fd6c",{"type":8508,"url":8509},{"type":8503,"url":8511},[8515,8516,8517,8518,8519,8520,8521,8522],{"id":355,"slug":14531,"dossier":47,"summary":14532,"aliases":14533,"sourceIds":14536,"published":14537,"modified":14538,"checkedAt":7,"severity":14539,"references":14541,"versionKeys":14554,"packageCount":32,"repositoryCount":34},"ghsa-g5vv-9gxw-82hx-203070a6","GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author\u002Fcommitter field parsing",[14534,14535],"CVE-2026-87819","PYSEC-2026-3984",[355,14535],"2026-09-09T12:17:17.120Z","2026-09-30T23:45:04.037560336Z",[14540],{"type":8535,"score":8571},[14542,14544,14546,14548,14549,14550,14552],{"type":8541,"url":14543},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-g5vv-9gxw-82hx",{"type":8500,"url":14545},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2215",{"type":8500,"url":14547},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F751473a5f3221d6f989291cbebcc404353fd3ba8",{"type":8508,"url":8550},{"type":8500,"url":8552},{"type":8500,"url":14551},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3984.yaml",{"type":8503,"url":14553},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-denial-of-service-via-redos",[8558,8559,8560],{"id":356,"slug":14556,"dossier":47,"summary":14557,"aliases":14558,"sourceIds":14561,"published":14562,"modified":14563,"checkedAt":7,"severity":14564,"references":14567,"versionKeys":14580,"packageCount":32,"repositoryCount":34},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[14559,14560],"CVE-2026-69247","PYSEC-2026-3552",[356,14560],"2026-08-03T21:17:00Z","2026-09-10T03:50:53.610446769Z",[14565],{"type":8496,"score":14566},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14568,14570,14572,14574,14575,14576,14578],{"type":8500,"url":14569},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":8500,"url":14571},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":8500,"url":14573},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":8508,"url":10656},{"type":8508,"url":12232},{"type":8503,"url":14577},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":8503,"url":14579},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[10662,10663,10664,10665,14581],"pypi:cryptography@49.0.0",{"id":357,"slug":14583,"dossier":47,"summary":14584,"aliases":14585,"sourceIds":14588,"published":14589,"modified":14590,"checkedAt":7,"severity":14591,"references":14594,"versionKeys":14605,"packageCount":32,"repositoryCount":8523},"ghsa-g7cr-3p24-7wf7-568f0c0a","Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer",[14586,14587],"BIT-pillow-2026-96778","CVE-2026-96778",[357],"2026-10-22T16:05:39Z","2026-10-29T10:56:05.933422167Z",[14592],{"type":8496,"score":14593},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[14595,14597,14599,14601,14603,14604],{"type":8500,"url":14596},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g7cr-3p24-7wf7",{"type":8503,"url":14598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96778",{"type":8500,"url":14600},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10124",{"type":8500,"url":14602},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F02561b8dc6117d5670d4b469fecdd02c70854f9b",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":358,"slug":14607,"dossier":47,"summary":14608,"aliases":14609,"sourceIds":14612,"published":14613,"modified":14614,"checkedAt":7,"severity":14615,"references":14618,"versionKeys":14637,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[14610,14611],"CVE-2024-34062","PYSEC-2026-1976",[358,14611],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[14616],{"type":8535,"score":14617},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[14619,14621,14623,14625,14627,14629,14631,14633,14635],{"type":8500,"url":14620},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":8503,"url":14622},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":8500,"url":14624},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":8508,"url":14626},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":8500,"url":14628},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":8500,"url":14630},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":8500,"url":14632},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":8508,"url":14634},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":8503,"url":14636},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[14638],"pypi:tqdm@4.66.2",{"id":359,"slug":14640,"dossier":47,"summary":14641,"aliases":14642,"sourceIds":14646,"published":14647,"modified":14648,"checkedAt":7,"severity":14649,"references":14652,"versionKeys":14663,"packageCount":32,"repositoryCount":8523},"ghsa-g842-9rc4-69pw-38a3cbdb","Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS",[14643,14644,14645],"BIT-pillow-2026-96637","CVE-2026-96637","PYSEC-2026-4338",[359,14645],"2026-10-21T21:20:31.927Z","2026-10-29T10:55:56.102454725Z",[14650,14651],{"type":8496,"score":9612},{"type":8535,"score":8654},[14653,14655,14657,14659,14661,14662],{"type":8503,"url":14654},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g842-9rc4-69pw",{"type":8503,"url":14656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96637",{"type":9620,"url":14658},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10076",{"type":8626,"url":14660},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F7cb0e02389d8aac2a60896a490f572db0b07b841",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":360,"slug":14665,"dossier":47,"summary":14666,"aliases":14667,"sourceIds":14670,"published":14671,"modified":14672,"checkedAt":7,"severity":14673,"references":14675,"versionKeys":14688,"packageCount":32,"repositoryCount":686},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[14668,14669],"CVE-2025-69229","PYSEC-2026-1106",[360,14669],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[14674],{"type":8496,"score":10248},[14676,14678,14680,14682,14684,14685,14686],{"type":8500,"url":14677},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":8503,"url":14679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":8500,"url":14681},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":8500,"url":14683},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":14687},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[8948,8949,8950,8951,8952,8953,8954],{"id":361,"slug":14690,"dossier":47,"summary":14691,"aliases":14692,"sourceIds":14694,"published":14695,"modified":14696,"checkedAt":7,"severity":14697,"references":14699,"versionKeys":14706,"packageCount":32,"repositoryCount":32},"ghsa-g8m3-5g58-fq7m-ea928b69","undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching",[14693],"CVE-2026-11525",[361],"2026-06-19T14:34:46Z","2026-09-10T03:51:08.663204806Z",[14698],{"type":8535,"score":9046},[14700,14702,14704,14705],{"type":8500,"url":14701},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-g8m3-5g58-fq7m",{"type":8503,"url":14703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-11525",{"type":8500,"url":8755},{"type":8508,"url":9058},[9064,9065],{"id":362,"slug":14708,"dossier":47,"summary":14709,"aliases":14710,"sourceIds":14712,"published":14713,"modified":14714,"checkedAt":7,"severity":14715,"references":14717,"versionKeys":14725,"packageCount":32,"repositoryCount":32},"ghsa-g9mf-h72j-4rw9-2ea01f94","Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",[14711],"CVE-2026-22036",[362],"2026-01-14T21:06:08Z","2026-09-10T03:50:33.216915457Z",[14716],{"type":8535,"score":8838},[14718,14720,14722,14724],{"type":8500,"url":14719},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-g9mf-h72j-4rw9",{"type":8503,"url":14721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22036",{"type":8500,"url":14723},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb04e3cbb569c1596f86c108e9b52c79d8475dcb3",{"type":8508,"url":9058},[9064],{"id":363,"slug":14727,"dossier":47,"summary":14728,"aliases":14729,"sourceIds":14732,"published":14733,"modified":14734,"checkedAt":7,"severity":14735,"references":14740,"versionKeys":14750,"packageCount":32,"repositoryCount":8523},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[14730,14731],"CVE-2026-25645","PYSEC-2026-2275",[363,14731],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[14736,14738],{"type":8535,"score":14737},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":8535,"score":14739},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[14741,14743,14745,14747,14748],{"type":8503,"url":14742},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":8503,"url":14744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":8626,"url":14746},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":8508,"url":13270},{"type":8503,"url":14749},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[13282,13283,14751,14752],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":364,"slug":14754,"dossier":47,"summary":14755,"aliases":14756,"sourceIds":14758,"published":11511,"modified":14759,"checkedAt":7,"severity":14760,"references":14763,"versionKeys":14774,"packageCount":32,"repositoryCount":564},"ghsa-gcqx-w48m-w2h4-1fcaae43","deepmerge mergeObject() allows prototype poisoning of returned objects",[14757],"CVE-2026-93753",[364],"2026-10-27T21:45:04.256048049Z",[14761,14762],{"type":8535,"score":9293},{"type":8496,"score":9291},[14764,14766,14768,14770,14772],{"type":8503,"url":14765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-93753",{"type":8500,"url":14767},"https:\u002F\u002Fgithub.com\u002FTehShrike\u002Fdeepmerge\u002Fissues\u002F273",{"type":8508,"url":14769},"https:\u002F\u002Fgithub.com\u002FTehShrike\u002Fdeepmerge",{"type":8500,"url":14771},"https:\u002F\u002Fgithub.com\u002FTehShrike\u002Fdeepmerge\u002Fblob\u002F5b87756a5671635679001cbac72aa42f23472c81\u002Findex.js#L39-L60",{"type":8500,"url":14773},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdeepmerge-through-4.3.1-prototype-poisoning-via-mergeobject",[14775],"npm:deepmerge@4.3.1",{"id":365,"slug":14777,"dossier":47,"summary":14778,"aliases":14779,"sourceIds":14782,"published":14783,"modified":14784,"checkedAt":7,"severity":14785,"references":14787,"versionKeys":14796,"packageCount":32,"repositoryCount":8523},"ghsa-gg2r-wvfm-q9rx-9e34ef8d","Pillow: MSP RLE decoder expands a tiny file into unbounded memory",[14780,14781],"BIT-pillow-2026-112892","CVE-2026-112892",[365],"2026-10-21T21:12:56Z","2026-10-26T08:55:54.537605973Z",[14786],{"type":8496,"score":9003},[14788,14790,14792,14794,14795],{"type":8500,"url":14789},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-gg2r-wvfm-q9rx",{"type":8503,"url":14791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112892",{"type":8500,"url":14793},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5dcb630b9798efd91929cb873d677aeee6ed0bb3",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":366,"slug":14798,"dossier":47,"summary":14799,"aliases":14800,"sourceIds":14803,"published":14804,"modified":14805,"checkedAt":7,"severity":14806,"references":14808,"versionKeys":14820,"packageCount":32,"repositoryCount":34},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[14801,14802],"CVE-2026-97688","PYSEC-2026-4176",[366,14802],"2026-09-30T15:00:38Z","2026-10-01T17:55:40.608255720Z",[14807],{"type":8496,"score":11316},[14809,14811,14813,14815,14816,14817,14818],{"type":8500,"url":14810},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":8503,"url":14812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":8500,"url":14814},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":8508,"url":9357},{"type":8500,"url":12649},{"type":8508,"url":9359},{"type":8503,"url":14819},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",[12654,12655],{"id":367,"slug":14822,"dossier":47,"summary":14823,"aliases":14824,"sourceIds":14827,"published":14828,"modified":14829,"checkedAt":7,"severity":14830,"references":14832,"versionKeys":14845,"packageCount":32,"repositoryCount":705},"ghsa-gjv8-xp57-g29c-0bfb5cb1","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` \u002F `VALUE` selector sub-patterns",[14825,14826],"CVE-2026-86000","PYSEC-2026-4170",[367,14826],"2026-09-17T20:32:58Z","2026-10-01T17:56:08.291385035Z",[14831],{"type":8535,"score":8870},[14833,14835,14837,14839,14840,14842,14843],{"type":8500,"url":14834},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",{"type":8503,"url":14836},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-86000",{"type":8500,"url":14838},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fce44e4996e6632871c18cdd7a7fb641be8ef34ef",{"type":8508,"url":9320},{"type":8500,"url":14841},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.9",{"type":8508,"url":9322},{"type":8503,"url":14844},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",[9328,9329,9330,14846],"pypi:soupsieve@2.8.4",{"id":368,"slug":14848,"dossier":47,"summary":14849,"aliases":14850,"sourceIds":14853,"published":14854,"modified":14855,"checkedAt":7,"severity":14856,"references":14858,"versionKeys":14869,"packageCount":32,"repositoryCount":32},"ghsa-gm37-52c6-37mw-5e0593eb","pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors",[14851,14852],"CVE-2026-67422","PYSEC-2026-3654",[368,14852],"2026-08-07T18:26:07Z","2026-09-10T03:51:14.089911270Z",[14857],{"type":8535,"score":8571},[14859,14861,14863,14865,14866,14867],{"type":8500,"url":14860},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fsecurity\u002Fadvisories\u002FGHSA-gm37-52c6-37mw",{"type":8503,"url":14862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67422",{"type":8500,"url":14864},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fpymdown-extensions\u002Fcommit\u002Fc68498598d7b13011bb4571350b6e3612a4ce44b",{"type":8508,"url":11376},{"type":8508,"url":11378},{"type":8503,"url":14868},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm37-52c6-37mw",[11384],{"id":369,"slug":14871,"dossier":47,"summary":14872,"aliases":14873,"sourceIds":14876,"published":14877,"modified":14878,"checkedAt":7,"severity":14879,"references":14881,"versionKeys":14892,"packageCount":32,"repositoryCount":9366},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[14874,14875],"CVE-2025-66418","PYSEC-2026-1998",[369,14875],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[14880],{"type":8496,"score":9342},[14882,14884,14886,14888,14889,14890],{"type":8500,"url":14883},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":8503,"url":14885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":8626,"url":14887},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":8508,"url":9357},{"type":8508,"url":9359},{"type":8503,"url":14891},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[9361,9362,9363,9364,9365],{"id":370,"slug":14894,"dossier":47,"summary":14895,"aliases":14896,"sourceIds":14899,"published":14900,"modified":14901,"checkedAt":7,"severity":14902,"references":14905,"versionKeys":14920,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[14897,14898],"CVE-2024-56201","PYSEC-2026-1472",[370,14898],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[14903,14904],{"type":8535,"score":8903},{"type":8496,"score":13854},[14906,14908,14910,14912,14914,14915,14917,14918],{"type":8500,"url":14907},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":8503,"url":14909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":8500,"url":14911},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":8626,"url":14913},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":8508,"url":13863},{"type":8500,"url":14916},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":8508,"url":13869},{"type":8503,"url":14919},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[13873],{"id":371,"slug":14922,"dossier":47,"summary":14923,"aliases":14924,"sourceIds":14926,"published":14927,"modified":14928,"checkedAt":7,"severity":14929,"references":14930,"versionKeys":14939,"packageCount":32,"repositoryCount":34},"ghsa-gq48-pqfc-9p58-0aa8d93f","GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree",[14925],"CVE-2026-110860",[371],"2026-10-27T15:26:57Z","2026-10-27T15:47:24.379897252Z",[],[14931,14933,14935,14937,14938],{"type":8500,"url":14932},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-gq48-pqfc-9p58",{"type":8500,"url":14934},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2232",{"type":8500,"url":14936},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F24b6f95d4b90ab1483fb601c736ac6e7c059cd61",{"type":8508,"url":8550},{"type":8500,"url":8606},[8558,8559,8560],{"id":372,"slug":14941,"dossier":47,"summary":14942,"aliases":14943,"sourceIds":14946,"published":14947,"modified":14948,"checkedAt":7,"severity":14949,"references":14951,"versionKeys":14962,"packageCount":32,"repositoryCount":32},"ghsa-gvp8-978c-rx2q-c33a029f","PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse",[14944,14945],"CVE-2026-103001","PYSEC-2026-4146",[372,14945],"2026-09-30T23:53:17Z","2026-10-01T17:55:53.001409325Z",[14950],{"type":8535,"score":9807},[14952,14954,14956,14957,14958,14960],{"type":8500,"url":14953},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":8500,"url":14955},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0c87c8c8b1a74cac99ad8115f3050efcb7fbed35",{"type":8508,"url":9085},{"type":8508,"url":9089},{"type":8503,"url":14959},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":8503,"url":14961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-103001",[9094],{"id":373,"slug":14964,"dossier":47,"summary":14965,"aliases":14966,"sourceIds":14968,"published":14969,"modified":14970,"checkedAt":7,"severity":14971,"references":14974,"versionKeys":14983,"packageCount":32,"repositoryCount":9035},"ghsa-gx76-c99x-2c96-30159937","AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies",[14967],"CVE-2026-111749",[373],"2026-10-20T19:58:14Z","2026-10-20T20:15:05.188135798Z",[14972],{"type":8496,"score":14973},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14975,14977,14979,14981,14982],{"type":8500,"url":14976},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-gx76-c99x-2c96",{"type":8503,"url":14978},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111749",{"type":8500,"url":14980},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a07c171ef9f3be583e2907dcd1931372efca8d6",{"type":8508,"url":8944},{"type":8500,"url":9031},[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],{"id":374,"slug":14985,"dossier":47,"summary":14986,"aliases":14987,"sourceIds":14988,"published":14989,"modified":14990,"checkedAt":7,"severity":14991,"references":14992,"versionKeys":14998,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[374],"2024-09-03T21:59:48Z","2026-09-10T03:50:18.241644273Z",[],[14993,14995,14996],{"type":8500,"url":14994},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":8508,"url":10656},{"type":8500,"url":14997},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[10660],{"id":375,"slug":15000,"dossier":47,"summary":15001,"aliases":15002,"sourceIds":15004,"published":15005,"modified":15006,"checkedAt":7,"severity":15007,"references":15009,"versionKeys":15015,"packageCount":32,"repositoryCount":564},"ghsa-h67p-54hq-rp68-7c13d245","JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",[15003],"CVE-2026-53550",[375],"2026-06-15T17:15:07Z","2026-09-10T03:50:49.729923880Z",[15008],{"type":8535,"score":8870},[15010,15012,15014],{"type":8500,"url":15011},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-h67p-54hq-rp68",{"type":8503,"url":15013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53550",{"type":8508,"url":8817},[8823,8824,8825,8826],{"id":376,"slug":15017,"dossier":47,"summary":15018,"aliases":15019,"sourceIds":15022,"published":15023,"modified":15024,"checkedAt":7,"severity":15025,"references":15028,"versionKeys":15049,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[15020,15021],"CVE-2024-34064","PYSEC-2026-1474",[376,15021],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[15026],{"type":8535,"score":15027},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[15029,15031,15033,15035,15036,15038,15040,15042,15044,15046,15047],{"type":8500,"url":15030},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":8503,"url":15032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":8626,"url":15034},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":8508,"url":13863},{"type":8500,"url":15037},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":8500,"url":15039},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":8500,"url":15041},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":8500,"url":15043},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":8500,"url":15045},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":8508,"url":13869},{"type":8503,"url":15048},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[13873],{"id":377,"slug":15051,"dossier":47,"summary":15052,"aliases":15053,"sourceIds":15056,"published":15057,"modified":15058,"checkedAt":7,"severity":15059,"references":15062,"versionKeys":15071,"packageCount":32,"repositoryCount":665},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[15054,15055],"CVE-2026-34513","PYSEC-2026-2095",[377,15055],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[15060,15061],{"type":8496,"score":9826},{"type":8535,"score":8571},[15063,15065,15067,15069,15070],{"type":8626,"url":15064},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":8503,"url":15066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":8626,"url":15068},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":378,"slug":15073,"dossier":47,"summary":15074,"aliases":15075,"sourceIds":15077,"published":15078,"modified":15079,"checkedAt":7,"severity":15080,"references":15082,"versionKeys":15089,"packageCount":32,"repositoryCount":32},"ghsa-hfxv-24rg-xrqf-abdaa203","Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection",[15076],"CVE-2026-44496",[378],"2026-06-04T14:24:06Z","2026-09-10T03:50:49.732285826Z",[15081],{"type":8535,"score":8571},[15083,15085,15086,15088],{"type":8500,"url":15084},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-hfxv-24rg-xrqf",{"type":8508,"url":9438},{"type":8500,"url":15087},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv0.32.0",{"type":8500,"url":12150},[9440,9441],{"id":379,"slug":15091,"dossier":47,"summary":15092,"aliases":15093,"sourceIds":15096,"published":15097,"modified":15098,"checkedAt":7,"severity":15099,"references":15103,"versionKeys":15111,"packageCount":32,"repositoryCount":654},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[15094,15095],"CVE-2026-47265","PYSEC-2026-2105",[379,15095],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[15100,15102],{"type":8496,"score":15101},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":8535,"score":11654},[15104,15106,15108,15110],{"type":8626,"url":15105},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":8503,"url":15107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":8626,"url":15109},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":8508,"url":8944},[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":380,"slug":15113,"dossier":47,"summary":15114,"aliases":15115,"sourceIds":15118,"published":15119,"modified":15120,"checkedAt":7,"severity":15121,"references":15123,"versionKeys":15138,"packageCount":32,"repositoryCount":34},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[15116,15117],"CVE-2026-76217","PYSEC-2026-3841",[380,15117],"2026-08-07T15:43:56Z","2026-09-10T12:26:07.095223621Z",[15122],{"type":8535,"score":9849},[15124,15126,15128,15129,15131,15132,15133,15135,15136],{"type":8500,"url":15125},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":8503,"url":15127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76217",{"type":8500,"url":10274},{"type":8500,"url":15130},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":8508,"url":8550},{"type":8500,"url":10279},{"type":8500,"url":15134},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-pathspec-from-file",{"type":8508,"url":8919},{"type":8503,"url":15137},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",[8558,8559,8560],{"id":381,"slug":15140,"dossier":47,"summary":15141,"aliases":15142,"sourceIds":15145,"published":15146,"modified":15147,"checkedAt":7,"severity":15148,"references":15150,"versionKeys":15161,"packageCount":32,"repositoryCount":686},"ghsa-hhxq-47xx-j5xx-b7469e94","virtualenv: Seed replacement does not contain metadata deletion paths",[15143,15144],"BIT-virtualenv-2026-113719","CVE-2026-113719",[381],"2026-10-23T22:19:15Z","2026-10-29T10:56:02.747342068Z",[15149],{"type":8535,"score":9990},[15151,15153,15155,15157,15159,15160],{"type":8500,"url":15152},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-hhxq-47xx-j5xx",{"type":8503,"url":15154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113719",{"type":8500,"url":15156},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3428",{"type":8500,"url":15158},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe3cea6fa10a50fa29cf1fdddd772458fba076d5f",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":382,"slug":15163,"dossier":47,"summary":15164,"aliases":15165,"sourceIds":15168,"published":15169,"modified":15170,"checkedAt":7,"severity":15171,"references":15176,"versionKeys":15193,"packageCount":32,"repositoryCount":34},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[15166,15167],"CVE-2026-76222","PYSEC-2026-3784",[382,15167],"2026-08-07T15:45:39Z","2026-09-08T21:00:05.149418166Z",[15172,15174],{"type":8535,"score":15173},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",{"type":8496,"score":15175},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:H\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[15177,15179,15181,15183,15185,15187,15188,15189,15191],{"type":8541,"url":15178},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":8503,"url":15180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76222",{"type":8500,"url":15182},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":8500,"url":15184},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":8500,"url":15186},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":8508,"url":8550},{"type":8500,"url":10279},{"type":8500,"url":15190},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3784.yaml",{"type":8503,"url":15192},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-gitmodules-submodule-name",[8558,8559,8560],{"id":383,"slug":15195,"dossier":47,"summary":15196,"aliases":15197,"sourceIds":15199,"published":15200,"modified":15201,"checkedAt":7,"severity":15202,"references":15206,"versionKeys":15223,"packageCount":32,"repositoryCount":32},"ghsa-hmw2-7cc7-3qxx-52e715a7","form-data: CRLF injection in form-data via unescaped multipart field names and filenames",[15198],"CVE-2026-12143",[383],"2026-06-15T17:26:26Z","2026-09-10T03:50:49.785679067Z",[15203,15204],{"type":8535,"score":8619},{"type":8496,"score":15205},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[15207,15209,15211,15213,15215,15217,15219,15221],{"type":8500,"url":15208},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fsecurity\u002Fadvisories\u002FGHSA-hmw2-7cc7-3qxx",{"type":8503,"url":15210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12143",{"type":8500,"url":15212},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fcommit\u002F64190db548c0179e37206858e39f27cf513e9435",{"type":8500,"url":15214},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fcommit\u002Fbe3f3cf553978bac15a5182f1f3c3d2d38ccf229",{"type":8500,"url":15216},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data\u002Fcommit\u002Fc7133499c2ee1b80c678e411244f4442bf902045",{"type":8508,"url":15218},"https:\u002F\u002Fgithub.com\u002Fform-data\u002Fform-data",{"type":8500,"url":15220},"https:\u002F\u002Fhtml.spec.whatwg.org\u002Fmultipage\u002Fform-control-infrastructure.html#multipart-form-data",{"type":8500,"url":15222},"https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002Fform-data",[15224,15225],"npm:form-data@4.0.4","npm:form-data@4.0.5",{"id":384,"slug":15227,"dossier":47,"summary":15228,"aliases":15229,"sourceIds":15232,"published":15233,"modified":15234,"checkedAt":7,"severity":15235,"references":15239,"versionKeys":15245,"packageCount":32,"repositoryCount":654},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[15230,15231],"CVE-2026-54276","PYSEC-2026-2109",[384,15231],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[15236,15237],{"type":8496,"score":10131},{"type":8535,"score":15238},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[15240,15242,15244],{"type":8503,"url":15241},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":8626,"url":15243},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":8508,"url":8944},[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":385,"slug":15247,"dossier":47,"summary":15248,"aliases":15249,"sourceIds":15252,"published":15253,"modified":15254,"checkedAt":7,"severity":15255,"references":15257,"versionKeys":15269,"packageCount":32,"repositoryCount":752},"ghsa-hxm8-2xgr-2p9m-bfcf1f86","PyJWT: Non-canonical signature segments enable raw-token revocation bypass",[15250,15251],"CVE-2026-102269","PYSEC-2026-4147",[385,15251],"2026-09-29T23:17:55Z","2026-10-01T17:55:59.204638768Z",[15256],{"type":8535,"score":9677},[15258,15260,15262,15264,15265,15266,15267],{"type":8500,"url":15259},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",{"type":8503,"url":15261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102269",{"type":8500,"url":15263},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fe6f48401001609a8f99e71fcaf355fb895d508a8",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":15268},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",[9093,9094,9095],{"id":386,"slug":15271,"dossier":47,"summary":15272,"aliases":15273,"sourceIds":15276,"published":15277,"modified":15278,"checkedAt":7,"severity":15279,"references":15281,"versionKeys":15290,"packageCount":32,"repositoryCount":8523},"ghsa-j4m9-6w36-pw47-8a42e0dd","Pillow: Invalid free in FreeType glyph rendering when a stroker is active",[15274,15275],"BIT-pillow-2026-112893","CVE-2026-112893",[386],"2026-10-21T20:06:34Z","2026-10-26T08:55:43.891551666Z",[15280],{"type":8496,"score":8497},[15282,15284,15286,15288,15289],{"type":8500,"url":15283},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-j4m9-6w36-pw47",{"type":8503,"url":15285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112893",{"type":8500,"url":15287},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa7416de7f3a43128179d2cf68df3240ea8dafe13",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":387,"slug":15292,"dossier":47,"summary":15293,"aliases":15294,"sourceIds":15296,"published":15297,"modified":15298,"checkedAt":7,"severity":15299,"references":15301,"versionKeys":15313,"packageCount":32,"repositoryCount":32},"ghsa-j5f8-grm9-p9fc-10eaf767","Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection",[15295],"CVE-2026-44486",[387],"2026-06-04T14:15:01Z","2026-09-10T03:50:50.017253448Z",[15300],{"type":8535,"score":11654},[15302,15304,15306,15308,15310,15311,15312],{"type":8500,"url":15303},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-j5f8-grm9-p9fc",{"type":8503,"url":15305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44486",{"type":8500,"url":15307},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10794",{"type":8500,"url":15309},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002Fafca61a070728e717203c2bc21e7b589b59b858b",{"type":8508,"url":9438},{"type":8500,"url":15087},{"type":8500,"url":12150},[9440,9441],{"id":388,"slug":15315,"dossier":47,"summary":15316,"aliases":15317,"sourceIds":15319,"published":15320,"modified":15321,"checkedAt":7,"severity":15322,"references":15325,"versionKeys":15335,"packageCount":32,"repositoryCount":724},"ghsa-j8f7-rjxc-mr56-f1c144ea","filelock: ReadWriteLock follows a symlink at the lock path into SQLite",[15318],"CVE-2026-112936",[388],"2026-10-28T21:08:30Z","2026-10-28T21:15:04.169983430Z",[15323],{"type":8535,"score":15324},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[15326,15328,15330,15332,15333],{"type":8500,"url":15327},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-j8f7-rjxc-mr56",{"type":8503,"url":15329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112936",{"type":8500,"url":15331},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4d45e83caf7e31f9a12fb44526bdc07f70114f04",{"type":8508,"url":10858},{"type":8500,"url":15334},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.0.9",[10862,10863,10864,10865],{"id":389,"slug":15337,"dossier":47,"summary":15338,"aliases":15339,"sourceIds":15341,"published":15342,"modified":15343,"checkedAt":7,"severity":15344,"references":15346,"versionKeys":15355,"packageCount":32,"repositoryCount":32},"ghsa-j8rh-479h-cp32-7ee21635","Axios: Header Injection via Inherited headers After Minimal Interceptor",[15340],"CVE-2026-101904",[389],"2026-09-30T15:35:14Z","2026-09-30T15:46:18.108444439Z",[15345],{"type":8496,"score":10327},[15347,15349,15351,15352,15353,15354],{"type":8500,"url":15348},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-j8rh-479h-cp32",{"type":8503,"url":15350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101904",{"type":8500,"url":9739},{"type":8500,"url":9741},{"type":8508,"url":9438},{"type":8500,"url":9744},[9440,9441],{"id":390,"slug":15357,"dossier":47,"summary":15358,"aliases":15359,"sourceIds":15362,"published":15363,"modified":15364,"checkedAt":7,"severity":15365,"references":15367,"versionKeys":15379,"packageCount":32,"repositoryCount":705},"ghsa-j934-xhv5-fg8f-f3395fba","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace\u002Fcomment trimming regex `RE_WS_END` (triggers on VALID selectors)",[15360,15361],"CVE-2026-85999","PYSEC-2026-4171",[390,15361],"2026-09-17T20:32:53Z","2026-10-01T17:56:03.541286563Z",[15366],{"type":8535,"score":8870},[15368,15370,15372,15374,15375,15376,15377],{"type":8500,"url":15369},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",{"type":8503,"url":15371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85999",{"type":8500,"url":15373},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fcf198fcddc9230f06ed39f974eba0ce076b85cda",{"type":8508,"url":9320},{"type":8500,"url":14841},{"type":8508,"url":9322},{"type":8503,"url":15378},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",[9328,9329,9330,14846],{"id":391,"slug":15381,"dossier":47,"summary":15382,"aliases":15383,"sourceIds":15386,"published":15387,"modified":15388,"checkedAt":7,"severity":15389,"references":15392,"versionKeys":15403,"packageCount":32,"repositoryCount":32},"ghsa-jf6q-chmf-3h3v-4ec82825","weasyprint Has Server-Side Request Forgery (SSRF)",[15384,15385],"CVE-2026-55073","PYSEC-2026-3940",[391,15385],"2026-09-09T18:06:38Z","2026-09-10T12:26:05.802944622Z",[15390],{"type":8535,"score":15391},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[15393,15395,15396,15398,15399,15401],{"type":8500,"url":15394},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-jf6q-chmf-3h3v",{"type":8508,"url":13109},{"type":8500,"url":15397},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Freleases\u002Ftag\u002Fv70.0",{"type":8508,"url":13113},{"type":8503,"url":15400},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jf6q-chmf-3h3v",{"type":8503,"url":15402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55073",[13117],{"id":392,"slug":15405,"dossier":47,"summary":15406,"aliases":15407,"sourceIds":15410,"published":15411,"modified":15412,"checkedAt":7,"severity":15413,"references":15417,"versionKeys":15437,"packageCount":32,"repositoryCount":654},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[15408,15409],"CVE-2026-34993","PYSEC-2026-2104",[392,15409],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[15414,15416],{"type":8535,"score":15415},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":8535,"score":9759},[15418,15420,15422,15424,15425,15427,15429,15431,15433,15435],{"type":8626,"url":15419},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":8503,"url":15421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":8626,"url":15423},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":8508,"url":8944},{"type":8500,"url":15426},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":8500,"url":15428},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":8503,"url":15430},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":8503,"url":15432},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":8503,"url":15434},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":9620,"url":15436},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":393,"slug":15439,"dossier":47,"summary":15440,"aliases":15441,"sourceIds":15444,"published":15445,"modified":15446,"checkedAt":7,"severity":15447,"references":15449,"versionKeys":15458,"packageCount":32,"repositoryCount":8523},"ghsa-jg86-v3jv-hrpm-1380c45f","Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)",[15442,15443],"BIT-pillow-2026-112894","CVE-2026-112894",[393],"2026-10-21T21:11:44Z","2026-10-26T08:56:08.669907131Z",[15448],{"type":8496,"score":9003},[15450,15452,15454,15456,15457],{"type":8500,"url":15451},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jg86-v3jv-hrpm",{"type":8503,"url":15453},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112894",{"type":8500,"url":15455},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":394,"slug":15460,"dossier":47,"summary":15461,"aliases":15462,"sourceIds":15465,"published":15466,"modified":15467,"checkedAt":7,"severity":15468,"references":15470,"versionKeys":15479,"packageCount":32,"repositoryCount":32},"ghsa-jhhc-3hcp-qhm5-310e06ea","WeasyPrint has CSS Injection via Presentational Hints",[15463,15464],"CVE-2026-49452","PYSEC-2026-3412",[394,15464],"2026-07-06T17:29:53Z","2026-07-13T16:42:26.449768536Z",[15469],{"type":8535,"score":12585},[15471,15473,15474,15475,15477],{"type":8500,"url":15472},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-jhhc-3hcp-qhm5",{"type":8508,"url":13109},{"type":8508,"url":13113},{"type":8503,"url":15476},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jhhc-3hcp-qhm5",{"type":8503,"url":15478},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49452",[13117],{"id":395,"slug":15481,"dossier":47,"summary":15482,"aliases":15483,"sourceIds":15486,"published":15487,"modified":15488,"checkedAt":7,"severity":15489,"references":15491,"versionKeys":15502,"packageCount":32,"repositoryCount":686},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[15484,15485],"CVE-2025-69227","PYSEC-2026-1107",[395,15485],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[15490],{"type":8496,"score":10248},[15492,15494,15496,15498,15499,15500],{"type":8500,"url":15493},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":8503,"url":15495},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":8500,"url":15497},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":15501},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[8948,8949,8950,8951,8952,8953,8954],{"id":396,"slug":15504,"dossier":47,"summary":15505,"aliases":15506,"sourceIds":15510,"published":15511,"modified":15512,"checkedAt":7,"severity":15513,"references":15515,"versionKeys":15529,"packageCount":32,"repositoryCount":10072},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[15507,15508,15509],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[396,15509],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[15514],{"type":8535,"score":8571},[15516,15518,15520,15522,15524,15525,15526,15527],{"type":8500,"url":15517},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":8503,"url":15519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":8500,"url":15521},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":8500,"url":15523},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":8508,"url":8509},{"type":8500,"url":11352},{"type":8508,"url":11354},{"type":8503,"url":15528},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":397,"slug":15531,"dossier":47,"summary":15532,"aliases":15533,"sourceIds":15536,"published":15537,"modified":15538,"checkedAt":7,"severity":15539,"references":15541,"versionKeys":15554,"packageCount":32,"repositoryCount":32},"ghsa-jm66-cg57-jjv5-ddb86d58","Azure Core is vulnerable to deserialization of untrusted data",[15534,15535],"CVE-2026-21226","PYSEC-2026-1208",[397,15535],"2026-01-13T21:31:44Z","2026-09-10T03:50:33.330380695Z",[15540],{"type":8535,"score":11801},[15542,15544,15546,15548,15550,15552],{"type":8503,"url":15543},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21226",{"type":8508,"url":15545},"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-sdk-for-python",{"type":8500,"url":15547},"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-sdk-for-python\u002Fblob\u002F6d2e6431ea0991861640e449e51e894247a7771a\u002Fsdk\u002Fcore\u002Fazure-core\u002FCHANGELOG.md#1380-2026-01-12",{"type":8500,"url":15549},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-21226",{"type":8508,"url":15551},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fazure-core",{"type":8503,"url":15553},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jm66-cg57-jjv5",[15555],"pypi:azure-core@1.33.0",{"id":398,"slug":15557,"dossier":47,"summary":15558,"aliases":15559,"sourceIds":15562,"published":15563,"modified":15564,"checkedAt":7,"severity":15565,"references":15569,"versionKeys":15579,"packageCount":32,"repositoryCount":34},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[15560,15561],"CVE-2026-76221","PYSEC-2026-3783",[398,15561],"2026-08-07T15:46:35Z","2026-09-10T03:51:14.296736368Z",[15566,15567],{"type":8535,"score":8903},{"type":8496,"score":15568},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[15570,15572,15573,15575,15576,15577],{"type":8541,"url":15571},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":8500,"url":10274},{"type":8500,"url":15574},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":8508,"url":8550},{"type":8500,"url":10279},{"type":8503,"url":15578},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-option-name",[8558,8559,8560],{"id":399,"slug":15581,"dossier":47,"summary":15582,"aliases":15583,"sourceIds":15586,"published":15587,"modified":15588,"checkedAt":7,"severity":15589,"references":15592,"versionKeys":15600,"packageCount":32,"repositoryCount":665},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[15584,15585],"CVE-2026-54282","PYSEC-2026-248",[399,15585],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[15590,15591],{"type":8535,"score":9046},{"type":8535,"score":9293},[15593,15595,15597,15598],{"type":8503,"url":15594},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":8503,"url":15596},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":8508,"url":12258},{"type":8500,"url":15599},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[8889,8890,8891,12265,12266,12267,12447,12448,12449],{"id":400,"slug":15602,"dossier":47,"summary":15603,"aliases":15604,"sourceIds":15607,"published":15608,"modified":15609,"checkedAt":7,"severity":15610,"references":15613,"versionKeys":15632,"packageCount":32,"repositoryCount":810},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[15605,15606],"CVE-2026-52869","PYSEC-2026-3482",[400,15606],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[15611],{"type":8535,"score":15612},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[15614,15616,15618,15620,15622,15624,15626,15627,15629,15630],{"type":8500,"url":15615},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":8503,"url":15617},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":8500,"url":15619},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":8500,"url":15621},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":8500,"url":15623},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":8500,"url":15625},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":8508,"url":11028},{"type":8500,"url":15628},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":8508,"url":13215},{"type":8503,"url":15631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[11034,11035,11036],{"id":401,"slug":15634,"dossier":47,"summary":15635,"aliases":15636,"sourceIds":15639,"published":15640,"modified":15641,"checkedAt":7,"severity":15642,"references":15645,"versionKeys":15653,"packageCount":32,"repositoryCount":810},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[15637,15638],"CVE-2026-48523","PYSEC-2026-176",[401,15638],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[15643],{"type":8535,"score":15644},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[15646,15648,15650,15651],{"type":8541,"url":15647},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":8503,"url":15649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":8508,"url":9085},{"type":8500,"url":15652},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[9093,9095],{"id":402,"slug":15655,"dossier":47,"summary":15656,"aliases":15657,"sourceIds":15659,"published":15660,"modified":15661,"checkedAt":7,"severity":15662,"references":15664,"versionKeys":15676,"packageCount":32,"repositoryCount":32},"ghsa-jqcg-44mw-7w3h-470fbe53","proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet",[15658],"CVE-2026-90711",[402],"2026-10-05T23:30:26Z","2026-10-05T23:45:07.322157228Z",[15663],{"type":8535,"score":14210},[15665,15667,15669,15671,15672,15674],{"type":8500,"url":15666},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr\u002Fsecurity\u002Fadvisories\u002FGHSA-jqcg-44mw-7w3h",{"type":8503,"url":15668},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-90711",{"type":8500,"url":15670},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr\u002Fcommit\u002F780911d84d18e2c5fa008ed0c0d387631ec11965",{"type":8500,"url":8755},{"type":8508,"url":15673},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr",{"type":8500,"url":15675},"https:\u002F\u002Fgithub.com\u002Fjshttp\u002Fproxy-addr\u002Freleases\u002Ftag\u002Fv2.0.8",[15677],"npm:proxy-addr@2.0.7",{"id":403,"slug":15679,"dossier":47,"summary":15680,"aliases":15681,"sourceIds":15683,"published":15684,"modified":15685,"checkedAt":7,"severity":15686,"references":15688,"versionKeys":15704,"packageCount":32,"repositoryCount":32},"ghsa-jqfw-vq24-v9c3-2de51aa4","Vite's `server.fs` settings were not applied to HTML files",[15682],"CVE-2025-58752",[403],"2025-09-09T20:54:42Z","2026-09-10T03:50:28.597734404Z",[15687],{"type":8496,"score":14487},[15689,15691,15693,15695,15697,15699,15701,15702],{"type":8500,"url":15690},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-jqfw-vq24-v9c3",{"type":8503,"url":15692},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-58752",{"type":8500,"url":15694},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F0ab19ea9fcb66f544328f442cf6e70f7c0528d5f",{"type":8500,"url":15696},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F14015d794f69accba68798bd0e15135bc51c9c1e",{"type":8500,"url":15698},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F482000f57f56fe6ff2e905305100cfe03043ddea",{"type":8500,"url":15700},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F6f01ff4fe072bcfcd4e2a84811772b818cd51fe6",{"type":8508,"url":10497},{"type":8500,"url":15703},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fblob\u002Fv7.1.5\u002Fpackages\u002Fvite\u002FCHANGELOG.md",[10506],{"id":404,"slug":15706,"dossier":47,"summary":15707,"aliases":15708,"sourceIds":15710,"published":15711,"modified":15712,"checkedAt":7,"severity":15713,"references":15715,"versionKeys":15728,"packageCount":32,"repositoryCount":32},"ghsa-jqh4-m9w3-8hp9-bdf7a3b1","Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`",[15709],"CVE-2026-67317",[404],"2026-07-20T22:27:12Z","2026-09-10T03:50:52.448472902Z",[15714],{"type":8496,"score":11913},[15716,15718,15720,15722,15723,15724,15725,15726],{"type":8500,"url":15717},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-jqh4-m9w3-8hp9",{"type":8503,"url":15719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67317",{"type":8503,"url":15721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68947",{"type":8500,"url":9910},{"type":8500,"url":9916},{"type":8508,"url":9438},{"type":8500,"url":9921},{"type":8500,"url":15727},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-maxbodylength-bypass-via-readablestream",[9440,9441],{"id":405,"slug":15730,"dossier":47,"summary":15731,"aliases":15732,"sourceIds":15734,"published":15735,"modified":15736,"checkedAt":7,"severity":15737,"references":15739,"versionKeys":15752,"packageCount":32,"repositoryCount":32},"ghsa-jr45-8vmc-qm54-bee699ea","undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives",[15733],"CVE-2026-14643",[405],"2026-08-03T19:32:12Z","2026-09-10T03:51:14.245060345Z",[15738],{"type":8535,"score":11015},[15740,15742,15744,15746,15748,15749,15750,15751],{"type":8500,"url":15741},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-jr45-8vmc-qm54",{"type":8503,"url":15743},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-14643",{"type":8500,"url":15745},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F85a240551c9feb8b8a0ecc56c84b2b3015add8a9",{"type":8500,"url":15747},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcb105d7c79069150982fa11acada0dd94a60dbbc",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":10208},{"type":8500,"url":10210},[9064,9065],{"id":406,"slug":15754,"dossier":47,"summary":15755,"aliases":15756,"sourceIds":15759,"published":15760,"modified":15761,"checkedAt":7,"severity":15762,"references":15765,"versionKeys":15776,"packageCount":32,"repositoryCount":752},"ghsa-jwrc-g2q2-pq5p-dfb984e1","PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.",[15757,15758],"CVE-2026-102270","PYSEC-2026-4148",[406,15758],"2026-09-30T14:40:25Z","2026-10-01T17:55:44.209063147Z",[15763],{"type":8535,"score":15764},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[15766,15768,15770,15771,15772,15773,15774],{"type":8500,"url":15767},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",{"type":8503,"url":15769},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102270",{"type":8500,"url":14217},{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":15775},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",[9093,9094,9095],{"id":407,"slug":15778,"dossier":47,"summary":15779,"aliases":15780,"sourceIds":15783,"published":15784,"modified":15785,"checkedAt":7,"severity":15786,"references":15788,"versionKeys":15805,"packageCount":32,"repositoryCount":705},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[15781,15782],"CVE-2026-69249","PYSEC-2026-3553",[407,15782],"2026-08-03T21:26:50Z","2026-09-24T14:45:10.238420831Z",[15787],{"type":8496,"score":9003},[15789,15791,15793,15795,15797,15799,15800,15802,15803],{"type":8500,"url":15790},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":8503,"url":15792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",{"type":8500,"url":15794},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":8500,"url":15796},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F3763aa79b",{"type":8500,"url":15798},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":8508,"url":10656},{"type":8500,"url":15801},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-3553.yaml",{"type":8508,"url":12232},{"type":8503,"url":15804},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",[10660,10661,10662,10663,10664,10665],{"id":408,"slug":15807,"dossier":47,"summary":15808,"aliases":15809,"sourceIds":15812,"published":15813,"modified":15814,"checkedAt":7,"severity":15815,"references":15818,"versionKeys":15835,"packageCount":32,"repositoryCount":705},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[15810,15811],"CVE-2026-69248","PYSEC-2026-3554",[408,15811],"2026-08-03T21:26:57Z","2026-09-24T15:00:04.719975807Z",[15816],{"type":8496,"score":15817},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[15819,15821,15823,15825,15827,15829,15830,15832,15833],{"type":8500,"url":15820},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":8503,"url":15822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",{"type":8500,"url":15824},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":8500,"url":15826},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F286c89128",{"type":8500,"url":15828},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":8508,"url":10656},{"type":8500,"url":15831},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-3554.yaml",{"type":8508,"url":12232},{"type":8503,"url":15834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",[10660,10661,10662,10663,10664,10665],{"id":409,"slug":15837,"dossier":47,"summary":15838,"aliases":15839,"sourceIds":15842,"published":15843,"modified":15844,"checkedAt":7,"severity":15845,"references":15850,"versionKeys":15859,"packageCount":32,"repositoryCount":665},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[15840,15841],"CVE-2026-34516","PYSEC-2026-2098",[409,15841],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[15846,15847,15848],{"type":8535,"score":8571},{"type":8496,"score":10248},{"type":8496,"score":15849},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[15851,15853,15855,15857,15858],{"type":8626,"url":15852},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":8503,"url":15854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":8626,"url":15856},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":410,"slug":15861,"dossier":47,"summary":15862,"aliases":15863,"sourceIds":15865,"published":15866,"modified":15867,"checkedAt":7,"severity":15868,"references":15870,"versionKeys":15879,"packageCount":32,"repositoryCount":34},"ghsa-m64x-33q8-m5h7-491ad59c","GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines",[15864],"CVE-2026-110856",[410],"2026-10-27T15:26:24Z","2026-10-27T15:47:24.576766638Z",[15869],{"type":8496,"score":9003},[15871,15873,15875,15877,15878],{"type":8500,"url":15872},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-m64x-33q8-m5h7",{"type":8500,"url":15874},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2253",{"type":8500,"url":15876},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8290c98d35465a38090cdcc1b17be69967092a15",{"type":8508,"url":8550},{"type":8500,"url":8606},[8558,8559,8560],{"id":411,"slug":15881,"dossier":47,"summary":15882,"aliases":15883,"sourceIds":15886,"published":15887,"modified":15888,"checkedAt":7,"severity":15889,"references":15892,"versionKeys":15898,"packageCount":32,"repositoryCount":654},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[15884,15885],"CVE-2026-50269","PYSEC-2026-2106",[411,15885],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[15890,15891],{"type":8496,"score":9291},{"type":8535,"score":8571},[15893,15895,15897],{"type":8503,"url":15894},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":8626,"url":15896},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":8508,"url":8944},[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":412,"slug":15900,"dossier":47,"summary":15901,"aliases":15902,"sourceIds":15904,"published":15905,"modified":15906,"checkedAt":7,"severity":15907,"references":15910,"versionKeys":15916,"packageCount":32,"repositoryCount":32},"ghsa-m7pr-hjqh-92cm-bddd7aa6","Axios: no_proxy bypass via IP alias allows SSRF",[15903],"CVE-2026-42038",[412],"2026-05-05T00:40:17Z","2026-09-10T03:51:06.293033204Z",[15908],{"type":8535,"score":15909},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[15911,15913,15915],{"type":8500,"url":15912},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-m7pr-hjqh-92cm",{"type":8503,"url":15914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42038",{"type":8508,"url":9438},[9440,9441],{"id":413,"slug":15918,"dossier":47,"summary":15919,"aliases":15920,"sourceIds":15922,"published":15923,"modified":15924,"checkedAt":7,"severity":15925,"references":15927,"versionKeys":15943,"packageCount":32,"repositoryCount":32},"ghsa-m8rv-5g2x-5cg5-5c5846d7","undici vulnerable to CRLF Injection via blob-like body 'type' property",[15921],"CVE-2026-15157",[413],"2026-08-03T19:33:53Z","2026-09-10T03:51:14.281925419Z",[15926],{"type":8535,"score":13129},[15928,15930,15932,15934,15936,15938,15939,15940,15941,15942],{"type":8500,"url":15929},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-m8rv-5g2x-5cg5",{"type":8503,"url":15931},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-15157",{"type":8500,"url":15933},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F33928bc24f742ea8422ed90d17f2e0cc83e4d09d",{"type":8500,"url":15935},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F740a0b7c173cb4a83a5b693e96e8f3a116cfc400",{"type":8500,"url":15937},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F7d3cf924c262c486bc77f951348f4e5c847b7b42",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":12910},{"type":8500,"url":10208},{"type":8500,"url":10210},[9064,9065],{"id":414,"slug":15945,"dossier":47,"summary":15946,"aliases":15947,"sourceIds":15950,"published":15951,"modified":15952,"checkedAt":7,"severity":15953,"references":15957,"versionKeys":15965,"packageCount":32,"repositoryCount":705},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[15948,15949],"CVE-2026-34073","PYSEC-2026-35",[414,15949],"2026-03-27T19:56:21Z","2026-09-10T03:51:00.592317622Z",[15954,15955],{"type":8535,"score":9293},{"type":8496,"score":15956},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[15958,15960,15962,15963],{"type":8503,"url":15959},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":8503,"url":15961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":8508,"url":10656},{"type":8500,"url":15964},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[10660,10661,10662,10663,10664,10665],{"id":415,"slug":15967,"dossier":47,"summary":15968,"aliases":15969,"sourceIds":15972,"published":15973,"modified":15974,"checkedAt":7,"severity":15975,"references":15978,"versionKeys":15986,"packageCount":32,"repositoryCount":810},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[15970,15971],"CVE-2026-44432","PYSEC-2026-142",[415,15971],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[15976,15977],{"type":8535,"score":8571},{"type":8496,"score":9342},[15979,15981,15983,15985],{"type":8503,"url":15980},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":8503,"url":15982},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":8500,"url":15984},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":8508,"url":9357},[12654],{"id":416,"slug":15988,"dossier":47,"summary":15989,"aliases":15990,"sourceIds":15993,"published":15994,"modified":15995,"checkedAt":7,"severity":15996,"references":15999,"versionKeys":16012,"packageCount":32,"repositoryCount":9035},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[15991,15992],"CVE-2026-28684","PYSEC-2026-2270",[416,15992],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[15997],{"type":8535,"score":15998},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[16000,16002,16004,16006,16008,16010],{"type":8626,"url":16001},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":8503,"url":16003},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":8626,"url":16005},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":8500,"url":16007},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":8508,"url":16009},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":8503,"url":16011},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[16013,16014,16015,16016],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":417,"slug":16018,"dossier":47,"summary":16019,"aliases":16020,"sourceIds":16023,"published":16024,"modified":16025,"checkedAt":7,"severity":16026,"references":16029,"versionKeys":16044,"packageCount":32,"repositoryCount":42},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[16021,16022],"CVE-2026-69243","PYSEC-2026-3546",[417,16022],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[16027],{"type":8496,"score":16028},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16030,16032,16034,16036,16037,16039,16040,16042],{"type":8500,"url":16031},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":8500,"url":16033},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":8500,"url":16035},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":8508,"url":8944},{"type":8500,"url":16038},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":8508,"url":10731},{"type":8503,"url":16041},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":8503,"url":16043},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033],{"id":418,"slug":16046,"dossier":47,"summary":16047,"aliases":16048,"sourceIds":16050,"published":16051,"modified":16052,"checkedAt":7,"severity":16053,"references":16055,"versionKeys":16069,"packageCount":32,"repositoryCount":564},"ghsa-mh29-5h37-fv8m-16304e4f","js-yaml has prototype pollution in merge (\u003C\u003C)",[16049],"CVE-2025-64718",[418],"2025-11-14T14:29:48Z","2026-09-10T03:50:58.469126910Z",[16054],{"type":8535,"score":9293},[16056,16058,16060,16062,16064,16066,16068],{"type":8500,"url":16057},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fsecurity\u002Fadvisories\u002FGHSA-mh29-5h37-fv8m",{"type":8503,"url":16059},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64718",{"type":8500,"url":16061},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fissues\u002F730#issuecomment-3549635876",{"type":8500,"url":16063},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F383665ff4248ec2192d1274e934462bb30426879",{"type":8500,"url":16065},"https:\u002F\u002Fgithub.com\u002Fnodeca\u002Fjs-yaml\u002Fcommit\u002F5278870a17454fe8621dbd8c445c412529525266",{"type":8503,"url":16067},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mh29-5h37-fv8m",{"type":8508,"url":8817},[8823,8825],{"id":419,"slug":16071,"dossier":47,"summary":16072,"aliases":16073,"sourceIds":16075,"published":16076,"modified":16077,"checkedAt":7,"severity":16078,"references":16080,"versionKeys":16101,"packageCount":32,"repositoryCount":810},"ghsa-mh99-v99m-4gvg-c377fa63","brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",[16074],"CVE-2026-14257",[419],"2026-07-24T21:53:14Z","2026-09-10T03:50:12.282849322Z",[16079],{"type":8535,"score":8571},[16081,16083,16085,16087,16089,16091,16093,16095,16097,16099,16100],{"type":8500,"url":16082},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-mh99-v99m-4gvg",{"type":8503,"url":16084},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-14257",{"type":8500,"url":16086},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F129",{"type":8500,"url":16088},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F130",{"type":8500,"url":16090},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fpull\u002F136",{"type":8500,"url":16092},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F139d015104e71433ad52a41d19467c48ecbb2c7d",{"type":8500,"url":16094},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fa1bd33999ea75262c4749fff3bbb0d1372bd07b5",{"type":8500,"url":16096},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fcb4b9e47cc2ec777c14b2b4492fb431a56f6a031",{"type":8500,"url":16098},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fd13ff455a58b0d56704f0111e3c2a0b16ceb06eb",{"type":8508,"url":9655},{"type":8500,"url":9663},[9665,11721,9666],{"id":420,"slug":16103,"dossier":47,"summary":16104,"aliases":16105,"sourceIds":16108,"published":16109,"modified":16110,"checkedAt":7,"severity":16111,"references":16113,"versionKeys":16124,"packageCount":32,"repositoryCount":34},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[16106,16107],"CVE-2026-40347","PYSEC-2026-3038",[420,16107],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[16112],{"type":8535,"score":8870},[16114,16116,16118,16119,16121,16122],{"type":8500,"url":16115},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":8503,"url":16117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":8508,"url":10981},{"type":8500,"url":16120},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":8508,"url":10983},{"type":8503,"url":16123},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[11111,11112,10987],{"id":421,"slug":16126,"dossier":47,"summary":16127,"aliases":16128,"sourceIds":16130,"published":16131,"modified":16132,"checkedAt":7,"severity":16133,"references":16136,"versionKeys":16152,"packageCount":32,"repositoryCount":32},"ghsa-mmx7-hfxf-jppx-5a5fa72c","Axios: Prototype pollution gadgets can alter axios request construction",[16129],"CVE-2026-67316",[421],"2026-07-20T22:25:07Z","2026-09-10T03:50:52.753640421Z",[16134],{"type":8496,"score":16135},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16137,16139,16141,16143,16144,16145,16146,16147,16148,16149,16150],{"type":8500,"url":16138},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-mmx7-hfxf-jppx",{"type":8503,"url":16140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67316",{"type":8503,"url":16142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68944",{"type":8500,"url":9910},{"type":8500,"url":9912},{"type":8500,"url":9914},{"type":8500,"url":9916},{"type":8508,"url":9438},{"type":8500,"url":9919},{"type":8500,"url":9921},{"type":8500,"url":16151},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-prototype-pollution-via-bodyless-methods",[9440,9441],{"id":422,"slug":16154,"dossier":47,"summary":16155,"aliases":16156,"sourceIds":16159,"published":16160,"modified":16161,"checkedAt":7,"severity":16162,"references":16164,"versionKeys":16177,"packageCount":32,"repositoryCount":42},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[16157,16158],"CVE-2026-59881","PYSEC-2026-3547",[422,16158],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[16163],{"type":8496,"score":11316},[16165,16167,16169,16171,16173,16174,16175],{"type":8500,"url":16166},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":8503,"url":16168},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":8500,"url":16170},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":8500,"url":16172},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":16176},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033],{"id":423,"slug":16179,"dossier":47,"summary":16180,"aliases":16181,"sourceIds":16184,"published":16185,"modified":16186,"checkedAt":7,"severity":16187,"references":16189,"versionKeys":16200,"packageCount":32,"repositoryCount":686},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[16182,16183],"CVE-2025-69225","PYSEC-2026-1109",[423,16183],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[16188],{"type":8496,"score":9291},[16190,16192,16194,16196,16197,16198],{"type":8500,"url":16191},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":8503,"url":16193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":8626,"url":16195},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":8508,"url":8944},{"type":8508,"url":10731},{"type":8503,"url":16199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[8948,8949,8950,8951,8952,8953,8954],{"id":424,"slug":16202,"dossier":47,"summary":16203,"aliases":16204,"sourceIds":16207,"published":16208,"modified":16209,"checkedAt":7,"severity":16210,"references":16212,"versionKeys":16223,"packageCount":32,"repositoryCount":8523},"ghsa-mrfp-p49p-3hf2-6cfe1cba","Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion",[16205,16206],"BIT-pillow-2026-96640","CVE-2026-96640",[424],"2026-10-22T16:00:47Z","2026-10-29T10:55:39.916451864Z",[16211],{"type":8496,"score":8497},[16213,16215,16217,16219,16221,16222],{"type":8500,"url":16214},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-mrfp-p49p-3hf2",{"type":8503,"url":16216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96640",{"type":8500,"url":16218},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10093",{"type":8500,"url":16220},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":425,"slug":16225,"dossier":47,"summary":16226,"aliases":16227,"sourceIds":16229,"published":16230,"modified":16231,"checkedAt":7,"severity":16232,"references":16235,"versionKeys":16250,"packageCount":32,"repositoryCount":564},"ghsa-mrhx-c7xc-m3w5-08924c2f","Zod can exhaust memory while validating oversized constrained collections",[16228],"CVE-2023-54404",[425],"2026-10-01T18:32:46Z","2026-10-23T18:30:09.376405885Z",[16233,16234],{"type":8535,"score":8571},{"type":8496,"score":8497},[16236,16238,16240,16242,16244,16246,16248],{"type":8503,"url":16237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-54404",{"type":8500,"url":16239},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fissues\u002F1872",{"type":8500,"url":16241},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fpull\u002F6475",{"type":8500,"url":16243},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fpull\u002F6652",{"type":8500,"url":16245},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod\u002Fcommit\u002Fa0ebf970f2d752e5f58527cd2942ff48be4f46bd",{"type":8508,"url":16247},"https:\u002F\u002Fgithub.com\u002Fcolinhacks\u002Fzod",{"type":8500,"url":16249},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fzod-uncontrolled-resource-consumption-via-array-validation",[16251,16252],"npm:zod@3.25.76","npm:zod@4.6.5",{"id":426,"slug":16254,"dossier":47,"summary":16255,"aliases":16256,"sourceIds":16258,"published":16259,"modified":16260,"checkedAt":7,"severity":16261,"references":16265,"versionKeys":16276,"packageCount":32,"repositoryCount":32},"ghsa-mrwp-f3q8-3g9p-0e2f9363","follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects",[16257],"CVE-2026-116689",[426],"2026-10-30T22:59:33Z","2026-10-30T23:15:06.315251750Z",[16262,16263],{"type":8535,"score":11015},{"type":8496,"score":16264},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16266,16268,16270,16272,16274],{"type":8500,"url":16267},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fsecurity\u002Fadvisories\u002FGHSA-mrwp-f3q8-3g9p",{"type":8503,"url":16269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116689",{"type":8500,"url":16271},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fcommit\u002Fb0a7751e9cd64cd8eeb6ec67d2f206a9cc88d3f8",{"type":8508,"url":16273},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects",{"type":8500,"url":16275},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Freleases\u002Ftag\u002Fv1.16.2",[16277],"npm:follow-redirects@1.16.1",{"id":427,"slug":16279,"dossier":47,"summary":16280,"aliases":16281,"sourceIds":16284,"published":16285,"modified":16286,"checkedAt":7,"severity":16287,"references":16290,"versionKeys":16298,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[16282,16283],"CVE-2026-67326","PYSEC-2026-3980",[427,16283],"2026-05-08T23:19:02Z","2026-09-17T09:10:55.928803360Z",[16288,16289],{"type":8535,"score":9757},{"type":8535,"score":12167},[16291,16293,16295,16296],{"type":8541,"url":16292},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":8503,"url":16294},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":8508,"url":8550},{"type":8503,"url":16297},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-newline-injection-via-config-writer-section",[8558,8559,8560],{"id":428,"slug":16300,"dossier":47,"summary":16301,"aliases":16302,"sourceIds":16304,"published":16305,"modified":16306,"checkedAt":7,"severity":16307,"references":16309,"versionKeys":16320,"packageCount":32,"repositoryCount":32},"ghsa-mwf2-3pr3-8698-6b8bfc0a","Axios: HTTP\u002F2 streamed uploads bypass `maxBodyLength`",[16303],"CVE-2026-67318",[428],"2026-07-20T22:37:03Z","2026-09-10T03:50:12.260991190Z",[16308],{"type":8496,"score":11913},[16310,16312,16314,16316,16317,16318,16319],{"type":8500,"url":16311},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-mwf2-3pr3-8698",{"type":8503,"url":16313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67318",{"type":8503,"url":16315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68948",{"type":8500,"url":9910},{"type":8500,"url":9916},{"type":8508,"url":9438},{"type":8500,"url":9921},[9441],{"id":429,"slug":16322,"dossier":47,"summary":16323,"aliases":16324,"sourceIds":16327,"published":16328,"modified":16329,"checkedAt":7,"severity":16330,"references":16333,"versionKeys":16342,"packageCount":32,"repositoryCount":665},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[16325,16326],"CVE-2026-34519","PYSEC-2026-2101",[429,16326],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[16331,16332],{"type":8496,"score":9291},{"type":8535,"score":9293},[16334,16336,16338,16340,16341],{"type":8626,"url":16335},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":8503,"url":16337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":8626,"url":16339},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":430,"slug":16344,"dossier":47,"summary":16345,"aliases":16346,"sourceIds":16349,"published":16350,"modified":16351,"checkedAt":7,"severity":16352,"references":16355,"versionKeys":16387,"packageCount":32,"repositoryCount":810},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[16347,16348],"CVE-2026-39892","PYSEC-2026-36",[430,16348],"2026-04-08T19:23:08Z","2026-11-04T03:30:50.401534783Z",[16353,16354],{"type":8535,"score":8777},{"type":8496,"score":11316},[16356,16358,16360,16362,16364,16366,16368,16370,16372,16374,16376,16378,16380,16382,16384,16385],{"type":8503,"url":16357},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":8503,"url":16359},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":8500,"url":16361},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002Fc09d38ae52de7d95fe683b7a7c496f5751616f27",{"type":8500,"url":16363},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F622d672e429a7cff836a23c5903683dbec1901f5",{"type":8500,"url":16365},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43651",{"type":8500,"url":16367},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43670",{"type":8500,"url":16369},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43851",{"type":8500,"url":16371},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43853",{"type":8500,"url":16373},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43854",{"type":8500,"url":16375},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43855",{"type":8500,"url":16377},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:46956",{"type":8500,"url":16379},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:7295",{"type":8500,"url":16381},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-39892",{"type":8500,"url":16383},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2456735",{"type":8508,"url":10656},{"type":8500,"url":16386},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[10664,10665],{"id":431,"slug":16389,"dossier":47,"summary":16390,"aliases":16391,"sourceIds":16392,"published":16393,"modified":16394,"checkedAt":7,"severity":16395,"references":16398,"versionKeys":16407,"packageCount":32,"repositoryCount":32},"ghsa-p498-v437-472g-007a67ac","humanfs: Recursive copy follows symlinked files and copies data from outside the source tree",[],[431],"2026-09-02T14:27:16Z","2026-09-10T03:50:54.516902811Z",[16396],{"type":8496,"score":16397},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[16399,16401,16403,16405],{"type":8500,"url":16400},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs\u002Fsecurity\u002Fadvisories\u002FGHSA-p498-v437-472g",{"type":8500,"url":16402},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs\u002Fcommit\u002F22bbaa4487a3e6c1197ca619840de4615d0c3404",{"type":8508,"url":16404},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs",{"type":8500,"url":16406},"https:\u002F\u002Fgithub.com\u002Fhumanwhocodes\u002Fhumanfs\u002Freleases\u002Ftag\u002Fnode-v0.16.8",[16408],"npm:@humanfs\u002Fnode@0.16.6",{"id":432,"slug":16410,"dossier":47,"summary":16411,"aliases":16412,"sourceIds":16415,"published":16416,"modified":16417,"checkedAt":7,"severity":16418,"references":16420,"versionKeys":16432,"packageCount":32,"repositoryCount":752},"ghsa-p4g4-x82p-q773-9c537199","PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard",[16413,16414],"CVE-2026-102271","PYSEC-2026-4149",[432,16414],"2026-09-29T23:14:33Z","2026-10-01T17:55:49.051187883Z",[16419],{"type":8535,"score":9163},[16421,16423,16425,16427,16428,16429,16430],{"type":8500,"url":16422},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",{"type":8503,"url":16424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102271",{"type":8500,"url":16426},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F2798504fa2663364573cf2d1043d8d7fef389499",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":16431},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",[9093,9094,9095],{"id":433,"slug":16434,"dossier":47,"summary":16435,"aliases":16436,"sourceIds":16439,"published":16440,"modified":16441,"checkedAt":7,"severity":16442,"references":16444,"versionKeys":16453,"packageCount":32,"repositoryCount":8523},"ghsa-p4wg-p73j-c528-fd1a8a19","Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)",[16437,16438],"BIT-pillow-2026-112895","CVE-2026-112895",[433],"2026-10-20T20:50:49Z","2026-10-26T08:55:38.434240536Z",[16443],{"type":8496,"score":9003},[16445,16447,16449,16451,16452],{"type":8500,"url":16446},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p4wg-p73j-c528",{"type":8503,"url":16448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112895",{"type":8500,"url":16450},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe2ae7eacad6de68c37eb28b633a97bebacf2c5bf",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":434,"slug":16455,"dossier":47,"summary":16456,"aliases":16457,"sourceIds":16460,"published":16461,"modified":16462,"checkedAt":7,"severity":16463,"references":16468,"versionKeys":16480,"packageCount":32,"repositoryCount":34},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[16458,16459],"CVE-2026-73621","PYSEC-2026-3950",[434,16459],"2026-08-03T20:23:17Z","2026-09-10T13:10:55.177009469Z",[16464,16466],{"type":8535,"score":16465},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":8496,"score":16467},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[16469,16471,16473,16475,16476,16478],{"type":8541,"url":16470},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":8500,"url":16472},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":8500,"url":16474},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":8508,"url":8550},{"type":8500,"url":16477},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",{"type":8503,"url":16479},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-truncation-via-commit-count",[8558,8559,8560],{"id":435,"slug":16482,"dossier":47,"summary":16483,"aliases":16484,"sourceIds":16488,"published":16489,"modified":16490,"checkedAt":7,"severity":16491,"references":16493,"versionKeys":16508,"packageCount":32,"repositoryCount":686},"ghsa-p58f-9548-mpm2-3c2c8280","virtualenv bash and fish activation scripts execute commands embedded in paths",[16485,16486,16487],"BIT-virtualenv-2026-102925","CVE-2026-102925","PYSEC-2026-4013",[435,16487],"2026-09-18T04:37:14Z","2026-10-06T15:25:40.633713827Z",[16492],{"type":8535,"score":11125},[16494,16496,16498,16500,16502,16504,16505,16507],{"type":8500,"url":16495},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-p58f-9548-mpm2",{"type":8503,"url":16497},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102925",{"type":8500,"url":16499},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3252",{"type":8626,"url":16501},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",{"type":8500,"url":16503},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4013.yaml",{"type":8508,"url":9546},{"type":8500,"url":16506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.13",{"type":8508,"url":10935},[9550,9551,9552,9553,9554],{"id":436,"slug":16510,"dossier":47,"summary":16511,"aliases":16512,"sourceIds":16514,"published":16515,"modified":16516,"checkedAt":7,"severity":16517,"references":16519,"versionKeys":16526,"packageCount":32,"repositoryCount":32},"ghsa-p88m-4jfj-68fv-1bddddbb","undici vulnerable to HTTP header injection via Set-Cookie percent-decoding",[16513],"CVE-2026-9679",[436],"2026-06-19T14:21:30Z","2026-09-10T03:51:09.228344843Z",[16518],{"type":8535,"score":14017},[16520,16522,16524,16525],{"type":8500,"url":16521},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-p88m-4jfj-68fv",{"type":8503,"url":16523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9679",{"type":8500,"url":8755},{"type":8508,"url":9058},[9064,9065],{"id":437,"slug":16528,"dossier":47,"summary":16529,"aliases":16530,"sourceIds":16534,"published":16535,"modified":16536,"checkedAt":7,"severity":16537,"references":16539,"versionKeys":16549,"packageCount":32,"repositoryCount":8523},"ghsa-p8hx-v2p6-rp84-525428cb","Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek \u002F DcxImageFile.seek)",[16531,16532,16533],"BIT-pillow-2026-96636","CVE-2026-96636","PYSEC-2026-4337",[437,16533],"2026-10-21T21:20:31.760Z","2026-10-29T10:55:49.521326948Z",[16538],{"type":8535,"score":8654},[16540,16542,16544,16546,16547,16548],{"type":8503,"url":16541},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p8hx-v2p6-rp84",{"type":8503,"url":16543},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96636",{"type":9620,"url":16545},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10011",{"type":8626,"url":11248},{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":438,"slug":16551,"dossier":47,"summary":16552,"aliases":16553,"sourceIds":16555,"published":16556,"modified":16557,"checkedAt":7,"severity":16558,"references":16560,"versionKeys":16568,"packageCount":32,"repositoryCount":32},"ghsa-p92q-9vqr-4j8v-02bcef7f","Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter",[16554],"CVE-2026-44487",[438],"2026-06-04T14:19:53Z","2026-09-10T03:51:09.218790313Z",[16559],{"type":8496,"score":16264},[16561,16563,16565,16566,16567],{"type":8500,"url":16562},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-p92q-9vqr-4j8v",{"type":8503,"url":16564},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44487",{"type":8508,"url":9438},{"type":8500,"url":15087},{"type":8500,"url":12150},[9440,9441],{"id":439,"slug":16570,"dossier":47,"summary":16571,"aliases":16572,"sourceIds":16575,"published":16576,"modified":16577,"checkedAt":7,"severity":16578,"references":16581,"versionKeys":16590,"packageCount":32,"repositoryCount":665},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[16573,16574],"CVE-2026-34515","PYSEC-2026-2097",[439,16574],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[16579,16580],{"type":8496,"score":15101},{"type":8535,"score":11654},[16582,16584,16586,16588,16589],{"type":8626,"url":16583},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":8503,"url":16585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":8626,"url":16587},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":440,"slug":16592,"dossier":47,"summary":16593,"aliases":16594,"sourceIds":16596,"published":16597,"modified":16598,"checkedAt":7,"severity":16599,"references":16601,"versionKeys":16614,"packageCount":32,"repositoryCount":564},"ghsa-p9ff-h696-f583-155b7820","Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket",[16595],"CVE-2026-39363",[440],"2026-04-06T18:03:24Z","2026-09-10T03:51:02.521776335Z",[16600],{"type":8496,"score":16264},[16602,16604,16606,16608,16610,16611,16612,16613],{"type":8500,"url":16603},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-p9ff-h696-f583",{"type":8503,"url":16605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39363",{"type":8500,"url":16607},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F22159",{"type":8500,"url":16609},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff02d9fde0b195afe3ea2944414186962fbbe41e0",{"type":8508,"url":10497},{"type":8500,"url":10499},{"type":8500,"url":10501},{"type":8500,"url":10503},[10506,10507],{"id":441,"slug":16616,"dossier":47,"summary":16617,"aliases":16618,"sourceIds":16622,"published":16623,"modified":16624,"checkedAt":7,"severity":16625,"references":16629,"versionKeys":16638,"packageCount":32,"repositoryCount":8523},"ghsa-pchr-8j38-3x4p-42f3b4df","Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read",[16619,16620,16621],"BIT-pillow-2026-112896","CVE-2026-112896","PYSEC-2026-4334",[441,16621],"2026-10-19T22:17:09.760Z","2026-10-28T11:10:41.233140457Z",[16626,16627],{"type":8496,"score":13691},{"type":8535,"score":16628},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[16630,16632,16634,16636,16637],{"type":8541,"url":16631},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pchr-8j38-3x4p",{"type":8503,"url":16633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112896",{"type":8626,"url":16635},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd03dc3c587a9b0bdc9e4304d70d59a635a87b742",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":442,"slug":16640,"dossier":47,"summary":16641,"aliases":16642,"sourceIds":16644,"published":16645,"modified":16646,"checkedAt":7,"severity":16647,"references":16649,"versionKeys":16655,"packageCount":32,"repositoryCount":32},"ghsa-pf86-5x62-jrwf-32e5be84","Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking",[16643],"CVE-2026-42033",[442],"2026-05-05T00:26:29Z","2026-09-10T03:51:06.658921258Z",[16648],{"type":8535,"score":9163},[16650,16652,16654],{"type":8500,"url":16651},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-pf86-5x62-jrwf",{"type":8503,"url":16653},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42033",{"type":8508,"url":9438},[9440,9441],{"id":443,"slug":16657,"dossier":47,"summary":16658,"aliases":16659,"sourceIds":16663,"published":16664,"modified":16665,"checkedAt":7,"severity":16666,"references":16669,"versionKeys":16682,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[16660,16661,16662],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[443,16662],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[16667,16668],{"type":8535,"score":8870},{"type":8535,"score":8571},[16670,16672,16674,16676,16678,16680,16681],{"type":8541,"url":16671},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":8503,"url":16673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":8626,"url":16675},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":8626,"url":16677},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":8500,"url":16679},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":8508,"url":8509},{"type":8503,"url":11352},[8518,8519,8520,8521],{"id":444,"slug":16684,"dossier":47,"summary":16685,"aliases":16686,"sourceIds":16688,"published":16689,"modified":16690,"checkedAt":7,"severity":16691,"references":16693,"versionKeys":16702,"packageCount":32,"repositoryCount":32},"ghsa-phc3-fgpg-7m6h-96f66464","Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS",[16687],"CVE-2026-2581",[444],"2026-03-13T20:37:58Z","2026-09-10T03:50:40.209102192Z",[16692],{"type":8535,"score":8838},[16694,16696,16698,16700,16701],{"type":8500,"url":16695},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-phc3-fgpg-7m6h",{"type":8503,"url":16697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2581",{"type":8500,"url":16699},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3513473",{"type":8500,"url":8755},{"type":8508,"url":9058},[9065],{"id":445,"slug":16704,"dossier":47,"summary":16705,"aliases":16706,"sourceIds":16710,"published":16711,"modified":16712,"checkedAt":7,"severity":16713,"references":16715,"versionKeys":16726,"packageCount":32,"repositoryCount":10072},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[16707,16708,16709],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[445,16709],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[16714],{"type":8535,"score":8571},[16716,16718,16720,16722,16724,16725],{"type":8541,"url":16717},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":8503,"url":16719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":8626,"url":16721},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":8500,"url":16723},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":8508,"url":8509},{"type":8503,"url":10070},[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":446,"slug":16728,"dossier":47,"summary":16729,"aliases":16730,"sourceIds":16732,"published":16733,"modified":16734,"checkedAt":7,"severity":16735,"references":16737,"versionKeys":16752,"packageCount":32,"repositoryCount":32},"ghsa-pmjh-fq2x-6v4x-39901fe8","undici vulnerable to Denial of Service via orphaned RetryHandler response body",[16731],"CVE-2026-18149",[446],"2026-09-29T18:22:34Z","2026-09-29T18:30:41.164240105Z",[16736],{"type":8535,"score":8838},[16738,16740,16742,16744,16746,16748,16749,16750,16751],{"type":8500,"url":16739},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-pmjh-fq2x-6v4x",{"type":8503,"url":16741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-18149",{"type":8500,"url":16743},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F3c6726599cea8646384dde846c97d630da472a74",{"type":8500,"url":16745},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fe905b5b87e6953bcc542af90557b2fee5b7b5974",{"type":8500,"url":16747},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3892751",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9060},{"type":8500,"url":9062},[9064,9065],{"id":447,"slug":16754,"dossier":47,"summary":16755,"aliases":16756,"sourceIds":16758,"published":16759,"modified":16760,"checkedAt":7,"severity":16761,"references":16763,"versionKeys":16779,"packageCount":32,"repositoryCount":32},"ghsa-pmv8-rq9r-6j72-24188f6f","Axios: Deep formToJSON Key Recursion Can Cause Denial of Service",[16757],"CVE-2026-67312",[447],"2026-07-20T17:48:18Z","2026-09-10T03:51:11.689184227Z",[16762],{"type":8496,"score":8678},[16764,16766,16768,16770,16771,16772,16773,16774,16775,16776,16777],{"type":8500,"url":16765},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-pmv8-rq9r-6j72",{"type":8503,"url":16767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67312",{"type":8503,"url":16769},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-68941",{"type":8500,"url":9910},{"type":8500,"url":9912},{"type":8500,"url":9914},{"type":8500,"url":9916},{"type":8508,"url":9438},{"type":8500,"url":9919},{"type":8500,"url":9921},{"type":8500,"url":16778},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Faxios-before-denial-of-service-via-formtojson",[9440,9441],{"id":448,"slug":16781,"dossier":47,"summary":16782,"aliases":16783,"sourceIds":16785,"published":16786,"modified":16787,"checkedAt":7,"severity":16788,"references":16791,"versionKeys":16797,"packageCount":32,"repositoryCount":32},"ghsa-pmwg-cvhr-8vh7-f0462413","Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0\u002F8) in Axios 1.15.0",[16784],"CVE-2026-42043",[448],"2026-05-05T00:20:58Z","2026-09-10T03:51:06.691311805Z",[16789],{"type":8535,"score":16790},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[16792,16794,16796],{"type":8500,"url":16793},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-pmwg-cvhr-8vh7",{"type":8503,"url":16795},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42043",{"type":8508,"url":9438},[9440,9441],{"id":449,"slug":16799,"dossier":47,"summary":16800,"aliases":16801,"sourceIds":16804,"published":16805,"modified":16806,"checkedAt":7,"severity":16807,"references":16809,"versionKeys":16818,"packageCount":32,"repositoryCount":34},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[16802,16803],"CVE-2026-42561","PYSEC-2026-3039",[449,16803],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[16808],{"type":8535,"score":8571},[16810,16812,16814,16815,16816],{"type":8500,"url":16811},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":8503,"url":16813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":8508,"url":10981},{"type":8508,"url":10983},{"type":8503,"url":16817},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[11111,11112,10987],{"id":450,"slug":16820,"dossier":47,"summary":16821,"aliases":16822,"sourceIds":16825,"published":16826,"modified":16827,"checkedAt":7,"severity":16828,"references":16830,"versionKeys":16842,"packageCount":32,"repositoryCount":686},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[16823,16824],"CVE-2025-50181","PYSEC-2026-1999",[450,16824],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[16829],{"type":8535,"score":10106},[16831,16833,16835,16837,16838,16839,16840],{"type":8500,"url":16832},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":8503,"url":16834},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":8626,"url":16836},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":8508,"url":9357},{"type":8500,"url":10116},{"type":8508,"url":9359},{"type":8503,"url":16841},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[9361,9362,9363,9364],{"id":451,"slug":16844,"dossier":47,"summary":16845,"aliases":16846,"sourceIds":16848,"published":16849,"modified":16850,"checkedAt":7,"severity":16851,"references":16854,"versionKeys":16863,"packageCount":32,"repositoryCount":9035},"ghsa-pqxq-w44r-73xw-f260bc82","AIOHTTP: Pure-Python parser request smuggling",[16847],"CVE-2026-111750",[451],"2026-10-20T19:52:21Z","2026-10-20T20:00:04.694820004Z",[16852],{"type":8496,"score":16853},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:L\u002FSA:L",[16855,16857,16859,16861,16862],{"type":8500,"url":16856},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-pqxq-w44r-73xw",{"type":8503,"url":16858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111750",{"type":8500,"url":16860},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9b27347e61454d9f8ca2055f4c67a37dee336e83",{"type":8508,"url":8944},{"type":8500,"url":9031},[8948,8949,8950,8951,8952,8953,8954,8955,8956,9033,9034],{"id":452,"slug":16865,"dossier":47,"summary":16866,"aliases":16867,"sourceIds":16869,"published":16870,"modified":16871,"checkedAt":7,"severity":16872,"references":16874,"versionKeys":16881,"packageCount":32,"repositoryCount":32},"ghsa-pr7r-676h-xcf6-7103c229","undici vulnerable to cross-user information disclosure via shared cache whitespace bypass",[16868],"CVE-2026-9678",[452],"2026-06-18T14:28:13Z","2026-09-10T03:51:09.340567236Z",[16873],{"type":8535,"score":11015},[16875,16877,16879,16880],{"type":8500,"url":16876},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-pr7r-676h-xcf6",{"type":8503,"url":16878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9678",{"type":8500,"url":8755},{"type":8508,"url":9058},[9064,9065],{"id":453,"slug":16883,"dossier":47,"summary":16884,"aliases":16885,"sourceIds":16889,"published":16890,"modified":16891,"checkedAt":7,"severity":16892,"references":16895,"versionKeys":16907,"packageCount":32,"repositoryCount":9366},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[16886,16887,16888],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[453,16888],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[16893,16894],{"type":8496,"score":12165},{"type":8535,"score":11125},[16896,16897,16899,16901,16903,16905,16906],{"type":8500,"url":13781},{"type":8626,"url":16898},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":8503,"url":16900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":8626,"url":16902},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":8626,"url":16904},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":8508,"url":8509},{"type":8503,"url":11280},[8513,8514,8515,8516,8517,8518,8519,8520],{"id":454,"slug":16909,"dossier":47,"summary":16910,"aliases":16911,"sourceIds":16912,"published":16913,"modified":16914,"checkedAt":7,"severity":16915,"references":16917,"versionKeys":16924,"packageCount":32,"repositoryCount":752},"ghsa-pxh4-856f-4h89-682cbd7f","PyJWT: HS256\u002F384\u002F512 verify accepts empty HMAC key via oct JWK (PyJWK\u002FPyJWKClient) enabling token forgery",[],[454],"2026-10-22T15:48:04Z","2026-10-22T16:00:09.127222029Z",[16916],{"type":8535,"score":9163},[16918,16920,16922,16923],{"type":8500,"url":16919},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-pxh4-856f-4h89",{"type":8500,"url":16921},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Faf8181ca0bec5e6b372fbba9afbe23702b787ceb",{"type":8508,"url":9085},{"type":8500,"url":9087},[9093,9094,9095],{"id":455,"slug":16926,"dossier":47,"summary":16927,"aliases":16928,"sourceIds":16930,"published":16931,"modified":16932,"checkedAt":7,"severity":16933,"references":16935,"versionKeys":16949,"packageCount":32,"repositoryCount":810},"ghsa-q2hr-2g5m-vwhr-67a18b1f","brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service",[16929],"CVE-2026-102277",[455],"2026-09-29T23:45:39Z","2026-09-30T00:00:03.849541183Z",[16934],{"type":8535,"score":8870},[16936,16938,16940,16942,16944,16946,16948],{"type":8500,"url":16937},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-q2hr-2g5m-vwhr",{"type":8503,"url":16939},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102277",{"type":8500,"url":16941},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F33a5ef17b8d800bbfa8c52b14c39043b6aac1a96",{"type":8500,"url":16943},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fbdff773f98e5988616b7039cc9b508df5d640b22",{"type":8500,"url":16945},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fc55e67d8d8b1c56a2474afff15c2891166b2d364",{"type":8500,"url":16947},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fffdfa3e3806bed17c0874b8f1439b084de354a7e",{"type":8508,"url":9655},[9665,11721,9666,11722],{"id":456,"slug":16951,"dossier":47,"summary":16952,"aliases":16953,"sourceIds":16956,"published":16957,"modified":16958,"checkedAt":7,"severity":16959,"references":16962,"versionKeys":16975,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[16954,16955],"CVE-2024-56326","PYSEC-2026-1475",[456,16955],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[16960,16961],{"type":8535,"score":12167},{"type":8496,"score":13854},[16963,16965,16967,16969,16970,16971,16972,16973],{"type":8500,"url":16964},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":8503,"url":16966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":8626,"url":16968},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":8508,"url":13863},{"type":8500,"url":14916},{"type":8500,"url":13865},{"type":8508,"url":13869},{"type":8503,"url":16974},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[13873],{"id":457,"slug":16977,"dossier":47,"summary":16978,"aliases":16979,"sourceIds":16982,"published":16983,"modified":16984,"checkedAt":7,"severity":16985,"references":16987,"versionKeys":16995,"packageCount":32,"repositoryCount":8523},"ghsa-q45j-58j2-45rg-cd238628","Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips",[16980,16981],"BIT-pillow-2026-112897","CVE-2026-112897",[457],"2026-10-20T20:52:43Z","2026-10-26T08:56:08.265781051Z",[16986],{"type":8496,"score":9107},[16988,16990,16992,16993,16994],{"type":8500,"url":16989},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-q45j-58j2-45rg",{"type":8503,"url":16991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112897",{"type":8500,"url":13698},{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":458,"slug":16997,"dossier":47,"summary":16998,"aliases":16999,"sourceIds":17001,"published":17002,"modified":17003,"checkedAt":7,"severity":17004,"references":17007,"versionKeys":17015,"packageCount":32,"repositoryCount":32},"ghsa-q8mj-m7cp-5q26-f97ac731","qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null\u002Fundefined entries in comma-format arrays when encodeValuesOnly is set",[17000],"CVE-2026-8723",[458],"2026-05-22T17:27:19Z","2026-09-10T03:50:55.285123128Z",[17005,17006],{"type":8535,"score":8870},{"type":8496,"score":8678},[17008,17010,17012,17014],{"type":8500,"url":17009},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-q8mj-m7cp-5q26",{"type":8503,"url":17011},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8723",{"type":8500,"url":17013},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002F21f80b33e5c8b3f7eba1034fff0da4a4a37a1d41",{"type":8508,"url":10375},[10377,10378],{"id":459,"slug":17017,"dossier":47,"summary":17018,"aliases":17019,"sourceIds":17021,"published":17022,"modified":17023,"checkedAt":7,"severity":17024,"references":17026,"versionKeys":17038,"packageCount":32,"repositoryCount":32},"ghsa-q8qp-cvcw-x6jj-6d29e5dc","Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking",[17020],"CVE-2026-42264",[459],"2026-05-05T00:18:38Z","2026-09-10T03:50:55.280623838Z",[17025],{"type":8535,"score":9163},[17027,17029,17031,17033,17035,17036],{"type":8500,"url":17028},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-q8qp-cvcw-x6jj",{"type":8503,"url":17030},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42264",{"type":8500,"url":17032},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fpull\u002F10779",{"type":8500,"url":17034},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F47915144662f2733e6c051bdcb895a8c8f0586aa",{"type":8508,"url":9438},{"type":8500,"url":17037},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Freleases\u002Ftag\u002Fv1.15.2",[9440,9441],{"id":460,"slug":17040,"dossier":47,"summary":17041,"aliases":17042,"sourceIds":17045,"published":17046,"modified":17047,"checkedAt":7,"severity":17048,"references":17051,"versionKeys":17057,"packageCount":32,"repositoryCount":8523},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[17043,17044],"CVE-2026-44431","PYSEC-2026-141",[460,17044],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[17049,17050],{"type":8535,"score":11444},{"type":8496,"score":14566},[17052,17054,17056],{"type":8503,"url":17053},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":8503,"url":17055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":8508,"url":9357},[9361,9362,9363,9364,9365,12654],{"id":461,"slug":17059,"dossier":47,"summary":17060,"aliases":17061,"sourceIds":17063,"published":17064,"modified":17065,"checkedAt":7,"severity":17066,"references":17068,"versionKeys":17080,"packageCount":32,"repositoryCount":810},"ghsa-qhr7-859c-m2p7-bdea2658","brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion",[17062],"CVE-2026-102278",[461],"2026-09-29T23:45:17Z","2026-09-30T00:00:04.402763332Z",[17067],{"type":8535,"score":8571},[17069,17071,17073,17075,17077,17079],{"type":8500,"url":17070},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-qhr7-859c-m2p7",{"type":8503,"url":17072},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102278",{"type":8500,"url":17074},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F1efee7c397c191da6287a78ec19512476a966a7b",{"type":8500,"url":17076},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F935d78f32f335b2ff76578e5c5e877d31ae9888c",{"type":8500,"url":17078},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002Fde84f144e9816f30e25fc8179e2e1249ab6df0db",{"type":8508,"url":9655},[9665,11721,9666,11722],{"id":462,"slug":17082,"dossier":47,"summary":17083,"aliases":17084,"sourceIds":17087,"published":17088,"modified":17089,"checkedAt":7,"severity":17090,"references":17093,"versionKeys":17107,"packageCount":32,"repositoryCount":17108},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[17085,17086],"CVE-2026-22701","PYSEC-2026-1374",[462,17086],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[17091],{"type":8535,"score":17092},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[17094,17096,17098,17100,17102,17103,17105],{"type":8500,"url":17095},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":8503,"url":17097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":8500,"url":17099},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":8500,"url":17101},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":8508,"url":10858},{"type":8508,"url":17104},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":8503,"url":17106},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[11602,11603,11604,11605],14,{"id":463,"slug":17110,"dossier":47,"summary":17111,"aliases":17112,"sourceIds":17115,"published":17116,"modified":17117,"checkedAt":7,"severity":17118,"references":17121,"versionKeys":17132,"packageCount":32,"repositoryCount":686},"ghsa-qmx5-4p3x-wvqf-aef88856","virtualenv: Venv configuration readback can reinterpret path boundaries",[17113,17114],"BIT-virtualenv-2026-113715","CVE-2026-113715",[463],"2026-10-23T22:20:43Z","2026-10-29T10:55:39.718166145Z",[17119],{"type":8496,"score":17120},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[17122,17124,17126,17128,17130,17131],{"type":8500,"url":17123},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-qmx5-4p3x-wvqf",{"type":8503,"url":17125},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113715",{"type":8500,"url":17127},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3426",{"type":8500,"url":17129},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fb0008a58885ded9227faf8f910c6c402712c750a",{"type":8508,"url":9546},{"type":8500,"url":9548},[9550,9551,9552,9553,9554],{"id":464,"slug":17134,"dossier":47,"summary":17135,"aliases":17136,"sourceIds":17138,"published":17139,"modified":17140,"checkedAt":7,"severity":17141,"references":17143,"versionKeys":17159,"packageCount":32,"repositoryCount":564},"ghsa-qrxm-fqhp-jwvm-ac20ce75","undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation",[17137],"CVE-2026-87018",[464],"2026-10-27T19:02:21Z","2026-10-27T19:15:22.403573595Z",[17142],{"type":8535,"score":8571},[17144,17146,17148,17150,17152,17154,17155,17156,17157,17158],{"type":8500,"url":17145},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-qrxm-fqhp-jwvm",{"type":8503,"url":17147},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-87018",{"type":8500,"url":17149},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F12cfd96c3f430897656e3edc1c5e02be8c1cd309",{"type":8500,"url":17151},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb40fbfc0651703cf9fa9f6ced68b679f28d8bb28",{"type":8500,"url":17153},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fe257e9f8fb42eedd50727b9cf65e548c8925e4a8",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9178},{"type":8500,"url":9180},{"type":8500,"url":9182},[9064,9065,9184],{"id":465,"slug":17161,"dossier":47,"summary":17162,"aliases":17163,"sourceIds":17165,"published":17166,"modified":17167,"checkedAt":7,"severity":17168,"references":17170,"versionKeys":17178,"packageCount":32,"repositoryCount":810},"ghsa-qx2v-qp2m-jg93-0a55e142","PostCSS has XSS via Unescaped \u003C\u002Fstyle> in its CSS Stringify Output",[17164],"CVE-2026-41305",[465],"2026-04-24T15:31:42Z","2026-09-10T03:51:02.916463871Z",[17169],{"type":8535,"score":15238},[17171,17173,17175,17176],{"type":8500,"url":17172},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-qx2v-qp2m-jg93",{"type":8503,"url":17174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41305",{"type":8508,"url":11663},{"type":8500,"url":17177},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.10",[11667,11668,11669],{"id":466,"slug":17180,"dossier":47,"summary":17181,"aliases":17182,"sourceIds":17184,"published":17185,"modified":17186,"checkedAt":7,"severity":17187,"references":17189,"versionKeys":17197,"packageCount":32,"repositoryCount":810},"ghsa-r28c-9q8g-f849-c8b68fa5","PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",[17183],"CVE-2026-73646",[466],"2026-07-24T16:24:55Z","2026-09-10T03:50:52.854537677Z",[17188],{"type":8535,"score":11654},[17190,17192,17194,17195],{"type":8500,"url":17191},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fsecurity\u002Fadvisories\u002FGHSA-r28c-9q8g-f849",{"type":8500,"url":17193},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Fcommit\u002F95663d3eb7ba26f4854dd19d3b4f4425760cf56c",{"type":8508,"url":11663},{"type":8500,"url":17196},"https:\u002F\u002Fgithub.com\u002Fpostcss\u002Fpostcss\u002Freleases\u002Ftag\u002F8.5.18",[11667,11668,11669],{"id":467,"slug":17199,"dossier":47,"summary":17200,"aliases":17201,"sourceIds":17203,"published":17204,"modified":17205,"checkedAt":7,"severity":17206,"references":17209,"versionKeys":17217,"packageCount":32,"repositoryCount":32},"ghsa-r4q5-vmmm-2653-87ff1faa","follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",[17202],"CVE-2026-40895",[467],"2026-04-14T01:11:11Z","2026-11-02T23:30:04.262099247Z",[17207],{"type":8496,"score":17208},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[17210,17212,17214,17216],{"type":8500,"url":17211},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fsecurity\u002Fadvisories\u002FGHSA-r4q5-vmmm-2653",{"type":8503,"url":17213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40895",{"type":8500,"url":17215},"https:\u002F\u002Fgithub.com\u002Ffollow-redirects\u002Ffollow-redirects\u002Fcommit\u002F844c4d302ac963d29bdb5dc1754ec7df3d70d7f9",{"type":8508,"url":16273},[17218],"npm:follow-redirects@1.15.11",{"id":468,"slug":17220,"dossier":47,"summary":17221,"aliases":17222,"sourceIds":17224,"published":17225,"modified":17226,"checkedAt":7,"severity":17227,"references":17229,"versionKeys":17250,"packageCount":32,"repositoryCount":32},"ghsa-r53p-7pc4-xj5r-a9aaae9b","undici vulnerable to downstream response splitting via retry interceptor",[17223],"CVE-2026-18540",[468],"2026-09-29T18:22:07Z","2026-09-29T18:30:41.154532067Z",[17228],{"type":8535,"score":9046},[17230,17232,17234,17236,17238,17240,17242,17244,17245,17246,17248,17249],{"type":8500,"url":17231},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-r53p-7pc4-xj5r",{"type":8503,"url":17233},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-18540",{"type":8500,"url":17235},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F0160a719063fb0a77f4fdf9500b9166b91e14329",{"type":8500,"url":17237},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fcd8af90b38ae33c2838d54a2d629774122effe95",{"type":8500,"url":17239},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fce31bc824b578008faae5d3350da66c1b5f71548",{"type":8500,"url":17241},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3900104",{"type":8500,"url":17243},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3900615",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":17247},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv6.28.1",{"type":8500,"url":9060},{"type":8500,"url":9062},[9064,9065],{"id":469,"slug":17252,"dossier":47,"summary":17253,"aliases":17254,"sourceIds":17257,"published":17258,"modified":17259,"checkedAt":7,"severity":17260,"references":17262,"versionKeys":17274,"packageCount":32,"repositoryCount":32},"ghsa-r543-q48m-4c9j-6471b319","WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE",[17255,17256],"CVE-2026-106443","PYSEC-2026-4311",[469,17256],"2026-10-07T18:05:49Z","2026-10-15T14:56:08.607638818Z",[17261],{"type":8535,"score":8903},[17263,17265,17267,17269,17270,17271,17272],{"type":8500,"url":17264},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fsecurity\u002Fadvisories\u002FGHSA-r543-q48m-4c9j",{"type":8503,"url":17266},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-106443",{"type":8500,"url":17268},"https:\u002F\u002Fgithub.com\u002FKozea\u002FWeasyPrint\u002Fcommit\u002F39cd37ce1610bd890388e26591c569db1cbab542",{"type":8508,"url":13109},{"type":8500,"url":15397},{"type":8508,"url":13113},{"type":8503,"url":17273},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r543-q48m-4c9j",[13117],{"id":470,"slug":17276,"dossier":47,"summary":17277,"aliases":17278,"sourceIds":17281,"published":17282,"modified":17283,"checkedAt":7,"severity":17284,"references":17288,"versionKeys":17326,"packageCount":32,"repositoryCount":705},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[17279,17280],"CVE-2026-26007","PYSEC-2026-2141",[470,17280],"2026-02-10T21:27:06Z","2026-09-10T03:50:59.750965345Z",[17285,17287],{"type":8496,"score":17286},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":8535,"score":14401},[17289,17291,17293,17295,17296,17298,17300,17302,17303,17305,17307,17309,17311,17313,17315,17317,17319,17321,17323,17325],{"type":8500,"url":17290},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":8503,"url":17292},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":8500,"url":17294},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":8508,"url":10656},{"type":8500,"url":17297},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":8500,"url":17299},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":8500,"url":17301},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":8503,"url":13798},{"type":8503,"url":17304},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":8503,"url":17306},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":8503,"url":17308},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":8503,"url":17310},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":8503,"url":17312},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":8503,"url":17314},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":8503,"url":17316},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":8503,"url":17318},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":8503,"url":17320},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":8503,"url":17322},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":8503,"url":17324},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":8503,"url":13818},[10660,10661,10662,10663,10664,10665],{"id":471,"slug":17328,"dossier":47,"summary":17329,"aliases":17330,"sourceIds":17333,"published":17334,"modified":17335,"checkedAt":7,"severity":17336,"references":17338,"versionKeys":17350,"packageCount":32,"repositoryCount":32},"ghsa-r6x4-923q-g947-b796420c","PyJWT BOM Bypass",[17331,17332],"CVE-2026-102272","PYSEC-2026-4150",[471,17332],"2026-09-29T23:14:00Z","2026-10-01T17:56:05.452379838Z",[17337],{"type":8535,"score":9163},[17339,17341,17343,17345,17346,17347,17348],{"type":8500,"url":17340},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-r6x4-923q-g947",{"type":8503,"url":17342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102272",{"type":8500,"url":17344},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F180783930de91876bc0d601f826a1f2956057291",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":17349},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r6x4-923q-g947",[9094],{"id":472,"slug":17352,"dossier":47,"summary":17353,"aliases":17354,"sourceIds":17358,"published":17359,"modified":17360,"checkedAt":7,"severity":17361,"references":17364,"versionKeys":17378,"packageCount":32,"repositoryCount":9366},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[17355,17356,17357],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[472,17357],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[17362,17363],{"type":8535,"score":11264},{"type":8496,"score":11266},[17365,17367,17369,17371,17373,17374,17375,17376],{"type":8500,"url":17366},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":8503,"url":17368},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":8500,"url":17370},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":8500,"url":17372},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":8508,"url":8509},{"type":8500,"url":11280},{"type":8508,"url":11354},{"type":8503,"url":17377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[8513,8514,8515,8516,8517,8518,8519,8520],{"id":473,"slug":17380,"dossier":47,"summary":17381,"aliases":17382,"sourceIds":17384,"published":17385,"modified":17386,"checkedAt":7,"severity":17387,"references":17389,"versionKeys":17400,"packageCount":32,"repositoryCount":810},"ghsa-r825-w8mm-5pxw-2a8236ea","launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors",[17383],"CVE-2026-112944",[473],"2026-10-20T19:51:52Z","2026-10-20T20:00:04.608907013Z",[17388],{"type":8496,"score":11545},[17390,17392,17394,17396,17398,17399],{"type":8500,"url":17391},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-r825-w8mm-5pxw",{"type":8503,"url":17393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112944",{"type":8500,"url":17395},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fpull\u002F156",{"type":8500,"url":17397},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fcommit\u002Ff6e6701bb1f16f2dd242b321374f1b6cca6eb6d4",{"type":8508,"url":10885},{"type":8500,"url":10887},[10505,10506,10507],{"id":474,"slug":17402,"dossier":47,"summary":17403,"aliases":17404,"sourceIds":17407,"published":17408,"modified":17409,"checkedAt":7,"severity":17410,"references":17413,"versionKeys":17423,"packageCount":32,"repositoryCount":34},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[17405,17406],"CVE-2026-73625","PYSEC-2026-3953",[474,17406],"2026-07-24T16:42:57Z","2026-09-10T13:10:47.448946391Z",[17411,17412],{"type":8535,"score":8903},{"type":8496,"score":15568},[17414,17416,17417,17419,17420,17421],{"type":8541,"url":17415},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":8500,"url":11807},{"type":8500,"url":17418},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":8508,"url":8550},{"type":8500,"url":11812},{"type":8503,"url":17422},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-kwarg-value-smuggling",[8558,8559,8560],{"id":475,"slug":17425,"dossier":47,"summary":17426,"aliases":17427,"sourceIds":17429,"published":17430,"modified":17431,"checkedAt":7,"severity":17432,"references":17435,"versionKeys":17455,"packageCount":32,"repositoryCount":564},"ghsa-rf6f-7fwh-wjgh-21853d08","Prototype Pollution via parse() in NodeJS flatted",[17428],"CVE-2026-33228",[475],"2026-03-19T17:43:54Z","2026-10-05T16:00:04.586755982Z",[17433],{"type":8496,"score":17434},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[17436,17438,17440,17442,17444,17446,17448,17450,17452,17453],{"type":8500,"url":17437},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fsecurity\u002Fadvisories\u002FGHSA-rf6f-7fwh-wjgh",{"type":8503,"url":17439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33228",{"type":8500,"url":17441},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Fcommit\u002F885ddcc33cf9657caf38c57c7be45ae1c5272802",{"type":8500,"url":17443},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13826",{"type":8500,"url":17445},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34342",{"type":8500,"url":17447},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:9742",{"type":8500,"url":17449},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33228",{"type":8500,"url":17451},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449872",{"type":8508,"url":8709},{"type":8500,"url":17454},"https:\u002F\u002Fgithub.com\u002FWebReflection\u002Fflatted\u002Freleases\u002Ftag\u002Fv3.4.2",[8711],{"id":476,"slug":17457,"dossier":47,"summary":17458,"aliases":17459,"sourceIds":17462,"published":17463,"modified":17464,"checkedAt":7,"severity":17465,"references":17467,"versionKeys":17476,"packageCount":32,"repositoryCount":8523},"ghsa-rfgq-q3w2-pmv2-908c42cd","Pillow: Image.quantize() with empty palette leaks uninitialized stack memory",[17460,17461],"BIT-pillow-2026-112898","CVE-2026-112898",[476],"2026-10-21T20:44:07Z","2026-10-26T08:55:50.383984569Z",[17466],{"type":8496,"score":17208},[17468,17470,17472,17474,17475],{"type":8500,"url":17469},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgq-q3w2-pmv2",{"type":8503,"url":17471},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112898",{"type":8500,"url":17473},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13943c8f857b22f073d30f0ef9b725a0d255f1a4",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":477,"slug":17478,"dossier":47,"summary":17479,"aliases":17480,"sourceIds":17482,"published":17483,"modified":17484,"checkedAt":7,"severity":17485,"references":17487,"versionKeys":17503,"packageCount":32,"repositoryCount":32},"ghsa-rfgv-xxqx-mfg5-2b1e2f6b","undici vulnerable to Denial of Service via unrequested WebSocket subprotocol",[17481],"CVE-2026-19534",[477],"2026-09-29T18:21:33Z","2026-09-29T18:30:41.167602268Z",[17486],{"type":8535,"score":8571},[17488,17490,17492,17494,17496,17498,17499,17500,17501,17502],{"type":8500,"url":17489},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgv-xxqx-mfg5",{"type":8503,"url":17491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-19534",{"type":8500,"url":17493},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F2af0faf88b906d3127a360c3ac75164c0f95e5a5",{"type":8500,"url":17495},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F6615e0175e9b635bcd2e3e87a47daa82f6f5b728",{"type":8500,"url":17497},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F66e12816064cf3068f63bd134748b7fc4e779bad",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":17247},{"type":8500,"url":9060},{"type":8500,"url":9062},[9064,9065],{"id":478,"slug":17505,"dossier":47,"summary":17506,"aliases":17507,"sourceIds":17509,"published":17510,"modified":17511,"checkedAt":7,"severity":17512,"references":17514,"versionKeys":17525,"packageCount":32,"repositoryCount":724},"ghsa-rfpc-qcw5-3pc4-0d3cdd9c","filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker",[17508],"CVE-2026-112939",[478],"2026-10-28T21:08:45Z","2026-10-28T21:15:05.584943666Z",[17513],{"type":8535,"score":14331},[17515,17517,17519,17521,17523,17524],{"type":8500,"url":17516},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-rfpc-qcw5-3pc4",{"type":8503,"url":17518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112939",{"type":8500,"url":17520},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F836",{"type":8500,"url":17522},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Feeceaa846cbe4df72718d94c8371ca1ab8f5b3cc",{"type":8508,"url":10858},{"type":8500,"url":10860},[10862,10863,10864,10865],{"id":479,"slug":17527,"dossier":47,"summary":17528,"aliases":17529,"sourceIds":17531,"published":17532,"modified":17533,"checkedAt":7,"severity":17534,"references":17536,"versionKeys":17548,"packageCount":32,"repositoryCount":810},"ghsa-rgw5-rvv9-x895-7800c7f2","brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",[17530],"CVE-2026-69152",[479],"2026-08-03T16:35:32Z","2026-09-10T03:51:14.535270857Z",[17535],{"type":8535,"score":8571},[17537,17539,17541,17542,17544,17546,17547],{"type":8500,"url":17538},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fsecurity\u002Fadvisories\u002FGHSA-rgw5-rvv9-x895",{"type":8503,"url":17540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69152",{"type":8500,"url":16092},{"type":8500,"url":17543},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F1e30c930238d7162802d88a94189182def178dac",{"type":8500,"url":17545},"https:\u002F\u002Fgithub.com\u002Fjuliangruber\u002Fbrace-expansion\u002Fcommit\u002F688a99eeaab02627c2b89ba8ba4821fecfa659cf",{"type":8500,"url":16096},{"type":8508,"url":9655},[9665,11721,9666,11722],{"id":480,"slug":17550,"dossier":47,"summary":17551,"aliases":17552,"sourceIds":17554,"published":17555,"modified":17556,"checkedAt":7,"severity":17557,"references":17559,"versionKeys":17568,"packageCount":32,"repositoryCount":32},"ghsa-rmxm-3fg6-px4f-eb1ad711","@hono\u002Fnode-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths",[17553],"CVE-2026-118663",[480],"2026-10-28T21:05:00Z","2026-10-28T21:15:04.153052864Z",[17558],{"type":8535,"score":11444},[17560,17562,17564,17566],{"type":8500,"url":17561},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Fsecurity\u002Fadvisories\u002FGHSA-rmxm-3fg6-px4f",{"type":8500,"url":17563},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Fcommit\u002F982179278529d5673812116b042829f27794966f",{"type":8508,"url":17565},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server",{"type":8500,"url":17567},"https:\u002F\u002Fgithub.com\u002Fhonojs\u002Fnode-server\u002Freleases\u002Ftag\u002Fv2.1.3",[17569],"npm:@hono\u002Fnode-server@1.19.17",{"id":481,"slug":17571,"dossier":47,"summary":17572,"aliases":17573,"sourceIds":17576,"published":17577,"modified":17578,"checkedAt":7,"severity":17579,"references":17581,"versionKeys":17589,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[17574,17575],"CVE-2026-42215","PYSEC-2026-2160",[481,17575],"2026-04-25T23:42:16Z","2026-09-10T03:51:03.167884784Z",[17580],{"type":8535,"score":8903},[17582,17584,17586,17587],{"type":8541,"url":17583},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":8503,"url":17585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":8508,"url":8550},{"type":8626,"url":17588},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[8558,8559,8560],{"id":482,"slug":17591,"dossier":47,"summary":17592,"aliases":17593,"sourceIds":17595,"published":17596,"modified":17597,"checkedAt":7,"severity":17598,"references":17600,"versionKeys":17618,"packageCount":32,"repositoryCount":810},"ghsa-rq7h-c2jc-7f22-e139dfcc","Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine",[17594],"CVE-2026-112946",[482],"2026-10-21T16:47:42Z","2026-10-21T17:00:06.336868869Z",[17599],{"type":8496,"score":10131},[17601,17603,17605,17607,17609,17611,17613,17615,17617],{"type":8500,"url":17602},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fsecurity\u002Fadvisories\u002FGHSA-rq7h-c2jc-7f22",{"type":8503,"url":17604},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112946",{"type":8500,"url":17606},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fpull\u002F23656",{"type":8500,"url":17608},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F170b92791421bcd484f7325936d989a82d6bd4aa",{"type":8500,"url":17610},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002F45c0e3392a298626955a0ab93a8e51232daac721",{"type":8500,"url":17612},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Fc3e06f92e969952466b4e2f5801e85e1e00cd905",{"type":8500,"url":17614},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Fe570d8d016096b5f8f6f09808376ca6cf73f27d0",{"type":8500,"url":17616},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Fvite\u002Fcommit\u002Ff0d76c7da13d5e794807b82f0b86c1931a8438e3",{"type":8508,"url":10497},[10505,10506,10507],{"id":483,"slug":17620,"dossier":47,"summary":17621,"aliases":17622,"sourceIds":17625,"published":17626,"modified":17627,"checkedAt":7,"severity":17628,"references":17630,"versionKeys":17648,"packageCount":32,"repositoryCount":34},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[17623,17624],"CVE-2026-67322","PYSEC-2026-3842",[483,17624],"2026-07-21T22:06:09Z","2026-09-24T18:28:17.149390188Z",[17629],{"type":8535,"score":11654},[17631,17633,17635,17637,17638,17640,17641,17643,17645,17646],{"type":8500,"url":17632},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":8503,"url":17634},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67322",{"type":8500,"url":17636},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":8500,"url":12952},{"type":8503,"url":17639},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":8508,"url":8550},{"type":8500,"url":17642},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",{"type":8500,"url":17644},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3842.yaml",{"type":8508,"url":8919},{"type":8500,"url":17647},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-clone-from",[8558,8559,8560],{"id":484,"slug":17650,"dossier":47,"summary":17651,"aliases":17652,"sourceIds":17654,"published":17655,"modified":17656,"checkedAt":7,"severity":17657,"references":17659,"versionKeys":17673,"packageCount":32,"repositoryCount":752},"ghsa-rwrf-2pqf-9j8j-e3036e5e","Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas",[17653],"CVE-2026-116686",[484],"2026-10-27T21:05:29Z","2026-10-27T21:15:03.830660129Z",[17658],{"type":8535,"score":8654},[17660,17662,17664,17666,17668,17670,17671,17672],{"type":8500,"url":17661},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rwrf-2pqf-9j8j",{"type":8500,"url":17663},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3394",{"type":8500,"url":17665},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3396",{"type":8500,"url":17667},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F5ebdfed4060d8e5b11b8e2348f86bad4d1fb8836",{"type":8500,"url":17669},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F6705402e246dc4eb1fcdf4d9902b78d3c9c36e1b",{"type":8508,"url":11028},{"type":8500,"url":11030},{"type":8500,"url":11032},[11034,11035,11036,11037],{"id":485,"slug":17675,"dossier":47,"summary":17676,"aliases":17677,"sourceIds":17679,"published":17680,"modified":17681,"checkedAt":7,"severity":17682,"references":17684,"versionKeys":17697,"packageCount":32,"repositoryCount":32},"ghsa-rx4f-c7p8-82vq-f334add1","undici vulnerable to Denial of Service via WebSocketStream unclean close",[17678],"CVE-2026-85014",[485],"2026-09-29T18:10:32Z","2026-09-29T18:15:04.711653428Z",[17683],{"type":8535,"score":8838},[17685,17687,17689,17691,17693,17694,17695,17696],{"type":8500,"url":17686},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-rx4f-c7p8-82vq",{"type":8503,"url":17688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85014",{"type":8500,"url":17690},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F1858656ebb1e919311c1f31613dfd581b7214349",{"type":8500,"url":17692},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F662d0ea671fe64139e79533c913fce412765e1d7",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9060},{"type":8500,"url":9062},[9064,9065],{"id":486,"slug":17699,"dossier":47,"summary":17700,"aliases":17701,"sourceIds":17703,"published":17704,"modified":17705,"checkedAt":7,"severity":17706,"references":17708,"versionKeys":17719,"packageCount":32,"repositoryCount":32},"ghsa-rxp7-6hxx-x8q5-afd81b2a","ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process",[17702],"CVE-2026-111997",[486],"2026-10-22T16:19:39Z","2026-10-22T16:30:30.129356757Z",[17707],{"type":8496,"score":8678},[17709,17711,17713,17715,17717],{"type":8500,"url":17710},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address\u002Fsecurity\u002Fadvisories\u002FGHSA-rxp7-6hxx-x8q5",{"type":8503,"url":17712},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111997",{"type":8500,"url":17714},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address\u002Fcommit\u002Fec80fcd5d7b97defecfd39717d782a9f9f8b89dd",{"type":8508,"url":17716},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address",{"type":8500,"url":17718},"https:\u002F\u002Fgithub.com\u002Fbeaugunderson\u002Fip-address\u002Freleases\u002Ftag\u002Fv10.7.4",[17720],"npm:ip-address@10.7.2",{"id":487,"slug":17722,"dossier":47,"summary":17723,"aliases":17724,"sourceIds":17726,"published":17727,"modified":17728,"checkedAt":7,"severity":17729,"references":17731,"versionKeys":17747,"packageCount":32,"repositoryCount":32},"ghsa-v3r7-h72x-cjcm-ff28b499","undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields",[17725],"CVE-2026-16729",[487],"2026-08-03T19:30:52Z","2026-09-10T03:51:14.535204629Z",[17730],{"type":8535,"score":9677},[17732,17734,17736,17738,17740,17742,17743,17744,17745,17746],{"type":8500,"url":17733},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-v3r7-h72x-cjcm",{"type":8503,"url":17735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-16729",{"type":8500,"url":17737},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F10d93fc332f2c8c161982dec3833201de29891b5",{"type":8500,"url":17739},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F3bf91ddb493e853957f3a58e155326a668ab8aef",{"type":8500,"url":17741},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Faf7484043ee075a6f216da0ad77e1dac55199235",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":12910},{"type":8500,"url":10208},{"type":8500,"url":10210},[9064,9065],{"id":488,"slug":17749,"dossier":47,"summary":17750,"aliases":17751,"sourceIds":17753,"published":17754,"modified":17755,"checkedAt":7,"severity":17756,"references":17758,"versionKeys":17777,"packageCount":32,"repositoryCount":32},"ghsa-v422-hmwv-36x6-3d8c5fa3","body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement",[17752],"CVE-2026-12590",[488],"2026-07-20T23:23:26Z","2026-09-10T03:50:53.014509971Z",[17757],{"type":8535,"score":11911},[17759,17761,17763,17765,17767,17769,17771,17772,17773,17775],{"type":8500,"url":17760},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fsecurity\u002Fadvisories\u002FGHSA-v422-hmwv-36x6",{"type":8503,"url":17762},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12590",{"type":8500,"url":17764},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fpull\u002F698",{"type":8500,"url":17766},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fpull\u002F741",{"type":8500,"url":17768},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002F2322e111cc321413ec2b7b76d01be533d3de9d7d",{"type":8500,"url":17770},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Fcommit\u002F3492672eee593d5c158f239b6e9115498a5dbeac",{"type":8500,"url":8755},{"type":8508,"url":8757},{"type":8500,"url":17774},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002F1.20.6",{"type":8500,"url":17776},"https:\u002F\u002Fgithub.com\u002Fexpressjs\u002Fbody-parser\u002Freleases\u002Ftag\u002Fv2.3.0",[8763,8764],{"id":489,"slug":17779,"dossier":47,"summary":17780,"aliases":17781,"sourceIds":17783,"published":17784,"modified":17785,"checkedAt":7,"severity":17786,"references":17788,"versionKeys":17797,"packageCount":32,"repositoryCount":724},"ghsa-v4x8-3wr5-3wq8-fa48bf99","filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files",[17782],"CVE-2026-112940",[489],"2026-10-23T21:59:08Z","2026-10-23T22:15:04.432475030Z",[17787],{"type":8535,"score":12085},[17789,17791,17793,17794,17795,17796],{"type":8500,"url":17790},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-v4x8-3wr5-3wq8",{"type":8503,"url":17792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112940",{"type":8500,"url":13513},{"type":8500,"url":13515},{"type":8508,"url":10858},{"type":8500,"url":10860},[10862,10863,10864,10865],{"id":490,"slug":17799,"dossier":47,"summary":17800,"aliases":17801,"sourceIds":17803,"published":17804,"modified":17805,"checkedAt":7,"severity":17806,"references":17809,"versionKeys":17813,"packageCount":32,"repositoryCount":810},"ghsa-v6wh-96g9-6wx3-0e881d08","launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows",[17802],"CVE-2026-53632",[490],"2026-06-15T17:18:31Z","2026-09-10T03:50:50.705036566Z",[17807],{"type":8496,"score":17808},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:H",[17810,17812],{"type":8500,"url":17811},"https:\u002F\u002Fgithub.com\u002Fvitejs\u002Flaunch-editor\u002Fsecurity\u002Fadvisories\u002FGHSA-v6wh-96g9-6wx3",{"type":8508,"url":10885},[10505,10506,10507],{"id":491,"slug":17815,"dossier":47,"summary":17816,"aliases":17817,"sourceIds":17820,"published":17821,"modified":17822,"checkedAt":7,"severity":17823,"references":17825,"versionKeys":17833,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[17818,17819],"CVE-2026-44244","PYSEC-2026-2163",[491,17819],"2026-05-06T21:58:00Z","2026-09-10T03:50:47.691444343Z",[17824],{"type":8535,"score":12167},[17826,17828,17830,17831],{"type":8541,"url":17827},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":8503,"url":17829},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":8508,"url":8550},{"type":8626,"url":17832},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[8558,8559,8560],{"id":492,"slug":17835,"dossier":47,"summary":17836,"aliases":17837,"sourceIds":17840,"published":17841,"modified":17842,"checkedAt":7,"severity":17843,"references":17847,"versionKeys":17859,"packageCount":32,"repositoryCount":724},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[17838,17839],"CVE-2026-41205","PYSEC-2026-88",[492,17839],"2026-04-16T21:16:40Z","2026-09-10T03:51:03.377000392Z",[17844,17845],{"type":8535,"score":11654},{"type":8496,"score":17846},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[17848,17850,17852,17854,17856,17857],{"type":8503,"url":17849},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":8503,"url":17851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":8500,"url":17853},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":8500,"url":17855},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":8508,"url":9118},{"type":8500,"url":17858},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[9126,9127],{"id":493,"slug":17861,"dossier":47,"summary":17862,"aliases":17863,"sourceIds":17865,"published":17866,"modified":17867,"checkedAt":7,"severity":17868,"references":17870,"versionKeys":17883,"packageCount":32,"repositoryCount":32},"ghsa-v9p9-hfj2-hcw8-f7515df3","Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation",[17864],"CVE-2026-2229",[493],"2026-03-13T20:41:41Z","2026-09-10T03:50:41.228925580Z",[17869],{"type":8535,"score":8571},[17871,17873,17875,17877,17878,17880,17881],{"type":8500,"url":17872},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-v9p9-hfj2-hcw8",{"type":8503,"url":17874},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2229",{"type":8500,"url":17876},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3487486",{"type":8500,"url":8755},{"type":8500,"url":17879},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc7692",{"type":8508,"url":9058},{"type":8500,"url":17882},"https:\u002F\u002Fnodejs.org\u002Fapi\u002Fzlib.html#class-zlibinflateraw",[9064,9065],{"id":494,"slug":17885,"dossier":47,"summary":17886,"aliases":17887,"sourceIds":17890,"published":17891,"modified":17892,"checkedAt":7,"severity":17893,"references":17895,"versionKeys":17904,"packageCount":32,"repositoryCount":705},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[17888,17889],"CVE-2026-53540","PYSEC-2026-3040",[494,17889],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[17894],{"type":8535,"score":11911},[17896,17898,17899,17900,17902],{"type":8500,"url":17897},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":8508,"url":10981},{"type":8508,"url":10983},{"type":8503,"url":17901},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":8503,"url":17903},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[11111,11112,11113,10987],{"id":495,"slug":17906,"dossier":47,"summary":17907,"aliases":17908,"sourceIds":17912,"published":17913,"modified":17914,"checkedAt":7,"severity":17915,"references":17917,"versionKeys":17928,"packageCount":32,"repositoryCount":9366},"ghsa-v9pv-5gc8-w2m6-ece1573e","Pillow multi-frame loaders can reuse stale native image storage after mode transitions",[17909,17910,17911],"BIT-pillow-2026-96639","CVE-2026-96639","PYSEC-2026-4339",[495,17911],"2026-10-21T21:20:32.217Z","2026-10-29T10:55:37.663049285Z",[17916],{"type":8535,"score":8777},[17918,17920,17922,17924,17926,17927],{"type":8503,"url":17919},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pv-5gc8-w2m6",{"type":8503,"url":17921},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96639",{"type":9620,"url":17923},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10105",{"type":8626,"url":17925},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F78d97d994579aef81aafe123773d525f40f2522a",{"type":8508,"url":8509},{"type":8503,"url":8511},[8515,8516,8517,8518,8519,8520,8521,8522],{"id":496,"slug":17930,"dossier":47,"summary":17931,"aliases":17932,"sourceIds":17934,"published":17935,"modified":17936,"checkedAt":7,"severity":17937,"references":17939,"versionKeys":17945,"packageCount":32,"repositoryCount":32},"ghsa-vf2m-468p-8v99-2cc482e8","Axios: HTTP adapter streamed responses bypass maxContentLength",[17933],"CVE-2026-42036",[496],"2026-05-05T00:26:57Z","2026-09-10T03:50:47.671121168Z",[17938],{"type":8535,"score":8870},[17940,17942,17944],{"type":8500,"url":17941},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-vf2m-468p-8v99",{"type":8503,"url":17943},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42036",{"type":8508,"url":9438},[9440,9441],{"id":497,"slug":17947,"dossier":47,"summary":17948,"aliases":17949,"sourceIds":17952,"published":17953,"modified":17954,"checkedAt":7,"severity":17955,"references":17957,"versionKeys":17968,"packageCount":32,"repositoryCount":705},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[17950,17951],"CVE-2026-53537","PYSEC-2026-3041",[497,17951],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[17956],{"type":8535,"score":9046},[17958,17960,17962,17963,17965,17967],{"type":8500,"url":17959},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":8503,"url":17961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":8508,"url":10981},{"type":8503,"url":17964},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":8500,"url":17966},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":8508,"url":10983},[11111,11112,11113,10987],{"id":498,"slug":17970,"dossier":47,"summary":17971,"aliases":17972,"sourceIds":17974,"published":17975,"modified":17976,"checkedAt":7,"severity":17977,"references":17979,"versionKeys":17988,"packageCount":32,"repositoryCount":32},"ghsa-vh66-26gq-q6x8-7005b54d","Axios: Prototype pollution gadget in fetch adapter can alter outbound requests",[17973],"CVE-2026-101908",[498],"2026-09-30T15:13:16Z","2026-09-30T15:30:04.438497820Z",[17978],{"type":8496,"score":10327},[17980,17982,17984,17985,17986,17987],{"type":8500,"url":17981},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-vh66-26gq-q6x8",{"type":8503,"url":17983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101908",{"type":8500,"url":9739},{"type":8500,"url":9741},{"type":8508,"url":9438},{"type":8500,"url":9744},[9440,9441],{"id":499,"slug":17990,"dossier":47,"summary":17991,"aliases":17992,"sourceIds":17995,"published":17996,"modified":17997,"checkedAt":7,"severity":17998,"references":18000,"versionKeys":18015,"packageCount":32,"repositoryCount":810},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[17993,17994],"CVE-2026-59950","PYSEC-2026-3483",[499,17994],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[17999],{"type":8496,"score":12635},[18001,18003,18005,18007,18009,18010,18012,18013],{"type":8500,"url":18002},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":8503,"url":18004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":8500,"url":18006},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":8500,"url":18008},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":8508,"url":11028},{"type":8500,"url":18011},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":8508,"url":13215},{"type":8503,"url":18014},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[11034,11035,11036],{"id":500,"slug":18017,"dossier":47,"summary":18018,"aliases":18019,"sourceIds":18023,"published":18024,"modified":18025,"checkedAt":7,"severity":18026,"references":18028,"versionKeys":18042,"packageCount":32,"repositoryCount":10072},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[18020,18021,18022],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[500,18022],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[18027],{"type":8496,"score":9003},[18029,18031,18033,18035,18037,18038,18039,18040],{"type":8500,"url":18030},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":8503,"url":18032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":8500,"url":18034},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":8500,"url":18036},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":8508,"url":8509},{"type":8500,"url":11352},{"type":8508,"url":11354},{"type":8503,"url":18041},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":501,"slug":18044,"dossier":47,"summary":18045,"aliases":18046,"sourceIds":18049,"published":18050,"modified":18051,"checkedAt":7,"severity":18052,"references":18054,"versionKeys":18069,"packageCount":32,"repositoryCount":810},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[18047,18048],"CVE-2025-43859","PYSEC-2026-348",[501,18048],"2025-04-24T16:07:56Z","2026-10-27T16:45:03.535584040Z",[18053],{"type":8535,"score":14210},[18055,18057,18059,18061,18063,18065,18067],{"type":8500,"url":18056},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":8503,"url":18058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":8500,"url":18060},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":8500,"url":18062},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fh11\u002FPYSEC-2026-348.yaml",{"type":8508,"url":18064},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":8508,"url":18066},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":8503,"url":18068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[18070],"pypi:h11@0.14.0",{"id":502,"slug":18072,"dossier":47,"summary":18073,"aliases":18074,"sourceIds":18076,"published":18077,"modified":18078,"checkedAt":7,"severity":18079,"references":18081,"versionKeys":18093,"packageCount":32,"repositoryCount":32},"ghsa-vrm6-8vpv-qv8q-6d6340eb","Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression",[18075],"CVE-2026-1526",[502],"2026-03-13T20:41:56Z","2026-09-10T03:50:41.264792574Z",[18080],{"type":8535,"score":8571},[18082,18084,18086,18088,18089,18090,18091],{"type":8500,"url":18083},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-vrm6-8vpv-qv8q",{"type":8503,"url":18085},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1526",{"type":8500,"url":18087},"https:\u002F\u002Fhackerone.com\u002Freports\u002F3481206",{"type":8500,"url":8755},{"type":8500,"url":17879},{"type":8508,"url":9058},{"type":8500,"url":18092},"https:\u002F\u002Fowasp.org\u002Fwww-community\u002Fattacks\u002FDenial_of_Service",[9064,9065],{"id":503,"slug":18095,"dossier":47,"summary":18096,"aliases":18097,"sourceIds":18099,"published":18100,"modified":18101,"checkedAt":7,"severity":18102,"references":18104,"versionKeys":18111,"packageCount":32,"repositoryCount":8523},"ghsa-vx6w-vv9f-6gvg-f0d0a86e","Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit",[18098],"CVE-2026-112899",[503],"2026-10-20T20:53:21Z","2026-10-20T21:00:04.428653055Z",[18103],{"type":8496,"score":11316},[18105,18107,18109,18110],{"type":8500,"url":18106},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vx6w-vv9f-6gvg",{"type":8500,"url":18108},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3e8cc105588d1dfe062fcada0b6058c1b5f14b65",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":504,"slug":18113,"dossier":47,"summary":18114,"aliases":18115,"sourceIds":18118,"published":18119,"modified":18120,"checkedAt":7,"severity":18121,"references":18123,"versionKeys":18133,"packageCount":32,"repositoryCount":686},"ghsa-vxj4-q4g9-crj7-3e25d39d","virtualenv bash activate runs commands from an environment name with a backslash before $",[18116,18117],"BIT-virtualenv-2026-113725","CVE-2026-113725",[504],"2026-10-21T16:49:01Z","2026-10-29T10:55:53.696944055Z",[18122],{"type":8535,"score":11125},[18124,18126,18128,18130,18131],{"type":8500,"url":18125},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-vxj4-q4g9-crj7",{"type":8503,"url":18127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113725",{"type":8500,"url":18129},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fc3104e02474b652832a9bbaae79f6e1696296932",{"type":8508,"url":9546},{"type":8500,"url":18132},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.7",[9550,9551,9552,9553,9554],{"id":505,"slug":18135,"dossier":47,"summary":18136,"aliases":18137,"sourceIds":18139,"published":18140,"modified":18141,"checkedAt":7,"severity":18142,"references":18144,"versionKeys":18172,"packageCount":32,"repositoryCount":32},"ghsa-vxpw-j846-p89q-aec4e427","undici WebSocket client vulnerable to denial of service via fragment count bypass",[18138],"CVE-2026-12151",[505],"2026-06-19T14:22:01Z","2026-11-04T03:45:10.197249081Z",[18143],{"type":8535,"score":8571},[18145,18147,18149,18151,18152,18154,18156,18157,18159,18161,18163,18165,18167,18169,18170,18171],{"type":8500,"url":18146},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-vxpw-j846-p89q",{"type":8503,"url":18148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12151",{"type":8500,"url":18150},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F32dbf0b3dd93daf6d87badf506d52e89f2e20e78",{"type":8500,"url":17445},{"type":8500,"url":18153},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:56431",{"type":8500,"url":18155},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:57013",{"type":8500,"url":12614},{"type":8500,"url":18158},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:62260",{"type":8500,"url":18160},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:65126",{"type":8500,"url":18162},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:66488",{"type":8500,"url":18164},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:66545",{"type":8500,"url":18166},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12151",{"type":8500,"url":18168},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489980",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9464},[9064,9065],{"id":506,"slug":18174,"dossier":90,"summary":18175,"aliases":18176,"sourceIds":18179,"published":18180,"modified":18181,"checkedAt":7,"severity":18182,"references":18184,"versionKeys":18196,"packageCount":32,"repositoryCount":625},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[18177,18178],"CVE-2026-97689","PYSEC-2026-4177",[506,18178],"2026-09-30T14:46:18Z","2026-10-01T17:55:57.514829071Z",[18183],{"type":8496,"score":9342},[18185,18187,18189,18191,18192,18193,18194],{"type":8500,"url":18186},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":8503,"url":18188},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":8500,"url":18190},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":8508,"url":9357},{"type":8500,"url":12649},{"type":8508,"url":9359},{"type":8503,"url":18195},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",[9361,9362,9363,9364,9365,12654,12655],{"id":507,"slug":18198,"dossier":47,"summary":18199,"aliases":18200,"sourceIds":18203,"published":18204,"modified":18205,"checkedAt":7,"severity":18206,"references":18208,"versionKeys":18220,"packageCount":32,"repositoryCount":32},"ghsa-w2cx-738m-mc7w-6741b272","PyJWT accepts public JWK containers as HMAC secrets",[18201,18202],"CVE-2026-102273","PYSEC-2026-4151",[507,18202],"2026-09-29T23:16:55Z","2026-10-01T17:56:17.439454528Z",[18207],{"type":8535,"score":9163},[18209,18211,18213,18215,18216,18217,18218],{"type":8500,"url":18210},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",{"type":8503,"url":18212},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102273",{"type":8500,"url":18214},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F801cd128528c62d9b23fcd161d1a2e1c17982f95",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":18219},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",[9094],{"id":508,"slug":18222,"dossier":47,"summary":18223,"aliases":18224,"sourceIds":18227,"published":18228,"modified":18229,"checkedAt":7,"severity":18230,"references":18234,"versionKeys":18243,"packageCount":32,"repositoryCount":665},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[18225,18226],"CVE-2026-22815","PYSEC-2026-2094",[508,18226],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[18231,18232],{"type":8496,"score":11316},{"type":8496,"score":18233},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[18235,18237,18239,18241,18242],{"type":8626,"url":18236},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":8503,"url":18238},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":8626,"url":18240},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":8508,"url":8944},{"type":8503,"url":9303},[8948,8949,8950,8951,8952,8953,8954,8955],{"id":509,"slug":18245,"dossier":47,"summary":18246,"aliases":18247,"sourceIds":18249,"published":18250,"modified":18251,"checkedAt":7,"severity":18252,"references":18255,"versionKeys":18269,"packageCount":32,"repositoryCount":752},"ghsa-w4fh-qvv9-3v23-5d99e159","Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server",[18248],"CVE-2026-116684",[509],"2026-10-27T21:06:59Z","2026-10-27T21:15:03.825987077Z",[18253],{"type":8535,"score":18254},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[18256,18258,18260,18262,18264,18266,18267,18268],{"type":8500,"url":18257},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-w4fh-qvv9-3v23",{"type":8500,"url":18259},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3447",{"type":8500,"url":18261},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3451",{"type":8500,"url":18263},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F0c9136841ff092987a20700ff9c2c9789bda2f40",{"type":8500,"url":18265},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F8c2fa6eabacde869d75568e33b9d466b58c2f512",{"type":8508,"url":11028},{"type":8500,"url":11030},{"type":8500,"url":11032},[11034,11035,11036,11037],{"id":510,"slug":18271,"dossier":47,"summary":18272,"aliases":18273,"sourceIds":18276,"published":18277,"modified":18278,"checkedAt":7,"severity":18279,"references":18281,"versionKeys":18293,"packageCount":32,"repositoryCount":752},"ghsa-w6j9-cwv2-h6wq-1e6b5139","PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set",[18274,18275],"CVE-2026-102274","PYSEC-2026-4152",[510,18275],"2026-09-29T18:23:01Z","2026-10-01T17:55:45.889604470Z",[18280],{"type":8535,"score":8838},[18282,18284,18286,18288,18289,18290,18291],{"type":8500,"url":18283},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",{"type":8503,"url":18285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102274",{"type":8500,"url":18287},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",{"type":8508,"url":9085},{"type":8500,"url":9087},{"type":8508,"url":9089},{"type":8503,"url":18292},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",[9093,9094,9095],{"id":511,"slug":18295,"dossier":47,"summary":18296,"aliases":18297,"sourceIds":18299,"published":18300,"modified":18301,"checkedAt":7,"severity":18302,"references":18304,"versionKeys":18320,"packageCount":32,"repositoryCount":32},"ghsa-w74x-v6f9-j3xg-294b9b29","fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding",[18298],"CVE-2026-110306",[511],"2026-10-23T21:41:36Z","2026-10-23T21:45:04.896137439Z",[18303],{"type":8535,"score":15238},[18305,18307,18309,18311,18313,18315,18316,18317,18318,18319],{"type":8500,"url":18306},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-w74x-v6f9-j3xg",{"type":8503,"url":18308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110306",{"type":8500,"url":18310},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F39933a1f1422986f14e2d844f552238feb40f5d4",{"type":8500,"url":18312},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F597f254c86d151568511eeb9a1df761fd12520b3",{"type":8500,"url":18314},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fe60e716f41d1d73717e2d803d20b68d2c6d20a0f",{"type":8500,"url":8755},{"type":8508,"url":9410},{"type":8500,"url":9412},{"type":8500,"url":9414},{"type":8500,"url":9416},[9418],{"id":512,"slug":18322,"dossier":47,"summary":18323,"aliases":18324,"sourceIds":18326,"published":18327,"modified":18328,"checkedAt":7,"severity":18329,"references":18331,"versionKeys":18339,"packageCount":32,"repositoryCount":32},"ghsa-w7fw-mjwx-w883-ad60beb3","qs's arrayLimit bypass in comma parsing allows denial of service",[18325],"CVE-2026-2391",[512],"2026-02-12T17:04:39Z","2026-09-10T03:50:35.973235487Z",[18330],{"type":8535,"score":11911},[18332,18334,18336,18338],{"type":8500,"url":18333},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fsecurity\u002Fadvisories\u002FGHSA-w7fw-mjwx-w883",{"type":8503,"url":18335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2391",{"type":8500,"url":18337},"https:\u002F\u002Fgithub.com\u002Fljharb\u002Fqs\u002Fcommit\u002Ff6a7abff1f13d644db9b05fe4f2c98ada6bf8482",{"type":8508,"url":10375},[10377,10378],{"id":513,"slug":18341,"dossier":47,"summary":18342,"aliases":18343,"sourceIds":18346,"published":18347,"modified":18348,"checkedAt":7,"severity":18349,"references":18351,"versionKeys":18359,"packageCount":32,"repositoryCount":810},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[18344,18345],"CVE-2026-48525","PYSEC-2026-178",[513,18345],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[18350],{"type":8535,"score":8870},[18352,18354,18356,18357],{"type":8541,"url":18353},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":8503,"url":18355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":8508,"url":9085},{"type":8500,"url":18358},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[9093,9095],{"id":514,"slug":18361,"dossier":47,"summary":18362,"aliases":18363,"sourceIds":18366,"published":18367,"modified":18368,"checkedAt":7,"severity":18369,"references":18372,"versionKeys":18389,"packageCount":32,"repositoryCount":17108},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[18364,18365],"CVE-2025-68146","PYSEC-2026-1375",[514,18365],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[18370],{"type":8535,"score":18371},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[18373,18375,18377,18378,18380,18382,18384,18385,18387],{"type":8500,"url":18374},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":8500,"url":18376},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":8508,"url":10858},{"type":8500,"url":18379},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":8500,"url":18381},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":8500,"url":18383},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":8508,"url":17104},{"type":8503,"url":18386},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":8503,"url":18388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[11602,11603,11604,11605],{"id":515,"slug":18391,"dossier":47,"summary":18392,"aliases":18393,"sourceIds":18396,"published":18397,"modified":18398,"checkedAt":7,"severity":18399,"references":18401,"versionKeys":18410,"packageCount":32,"repositoryCount":8523},"ghsa-w889-685w-c8fh-9dd63a47","Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",[18394,18395],"BIT-pillow-2026-112900","CVE-2026-112900",[515],"2026-10-21T19:58:44Z","2026-10-26T08:55:37.091976147Z",[18400],{"type":8496,"score":13428},[18402,18404,18406,18408,18409],{"type":8500,"url":18403},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-w889-685w-c8fh",{"type":8503,"url":18405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112900",{"type":8500,"url":18407},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa2c363141da31a265dd536c945677db4b64f3ec9",{"type":8508,"url":8509},{"type":8500,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":516,"slug":18412,"dossier":47,"summary":18413,"aliases":18414,"sourceIds":18416,"published":18417,"modified":18418,"checkedAt":7,"severity":18419,"references":18421,"versionKeys":18430,"packageCount":32,"repositoryCount":34},"ghsa-w8jc-g24h-crhw-5553514f","GitPython command wrappers omit unsafe protocol and option checks",[18415],"CVE-2026-110857",[516],"2026-10-27T15:26:43Z","2026-10-27T15:47:24.947223105Z",[18420],{"type":8535,"score":12481},[18422,18424,18426,18428,18429],{"type":8500,"url":18423},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-w8jc-g24h-crhw",{"type":8500,"url":18425},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2251",{"type":8500,"url":18427},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9ad28cc4c7176d22cd6181d69805058a719dd03b",{"type":8508,"url":8550},{"type":8500,"url":8606},[8558,8559,8560],{"id":517,"slug":18432,"dossier":47,"summary":18433,"aliases":18434,"sourceIds":18436,"published":18437,"modified":18438,"checkedAt":7,"severity":18439,"references":18441,"versionKeys":18447,"packageCount":32,"repositoryCount":32},"ghsa-w9j2-pvgh-6h63-6eec34b1","Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy",[18435],"CVE-2026-42041",[517],"2026-05-05T00:21:39Z","2026-09-10T03:50:47.772907977Z",[18440],{"type":8535,"score":9677},[18442,18444,18446],{"type":8500,"url":18443},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-w9j2-pvgh-6h63",{"type":8503,"url":18445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42041",{"type":8508,"url":9438},[9440,9441],{"id":518,"slug":18449,"dossier":47,"summary":18450,"aliases":18451,"sourceIds":18455,"published":18456,"modified":18457,"checkedAt":7,"severity":18458,"references":18461,"versionKeys":18499,"packageCount":32,"repositoryCount":9366},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[18452,18453,18454],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[518,18454],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[18459,18460],{"type":8535,"score":8571},{"type":8496,"score":9003},[18462,18464,18466,18468,18470,18471,18473,18475,18477,18479,18481,18483,18484,18486,18488,18490,18491,18493,18495,18497],{"type":8500,"url":18463},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":8503,"url":18465},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":8500,"url":18467},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":8500,"url":18469},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":8508,"url":8509},{"type":8500,"url":18472},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":8500,"url":18474},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":8500,"url":18476},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":8503,"url":18478},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":8503,"url":18480},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":8503,"url":18482},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":8503,"url":13804},{"type":8503,"url":18485},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":8503,"url":18487},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":8503,"url":18489},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":8503,"url":13806},{"type":8503,"url":18492},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":8503,"url":18494},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":8503,"url":18496},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":8503,"url":18498},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[8513,8514,8515,8516,8517,8518,8519,8520],{"id":519,"slug":18501,"dossier":47,"summary":18502,"aliases":18503,"sourceIds":18505,"published":18506,"modified":18507,"checkedAt":7,"severity":18508,"references":18510,"versionKeys":18526,"packageCount":32,"repositoryCount":32},"ghsa-wjr9-j795-jxcr-36e44760","fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization",[18504],"CVE-2026-110180",[519],"2026-10-23T21:37:59Z","2026-10-23T21:45:04.892054666Z",[18509],{"type":8535,"score":9677},[18511,18513,18515,18517,18519,18521,18522,18523,18524,18525],{"type":8500,"url":18512},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-wjr9-j795-jxcr",{"type":8503,"url":18514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110180",{"type":8500,"url":18516},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F58c183d0b168ad87f98773266444ce1f6375803a",{"type":8500,"url":18518},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fddfc6a51122dfce0365655f04479fc3adb7f6b3c",{"type":8500,"url":18520},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Ff6d46dfeab025d0c440485f4ae29fa4f14707646",{"type":8500,"url":8755},{"type":8508,"url":9410},{"type":8500,"url":9412},{"type":8500,"url":9414},{"type":8500,"url":9416},[9418],{"id":520,"slug":18528,"dossier":47,"summary":18529,"aliases":18530,"sourceIds":18534,"published":18535,"modified":18536,"checkedAt":7,"severity":18537,"references":18540,"versionKeys":18549,"packageCount":32,"repositoryCount":9366},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[18531,18532,18533],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[520,18533],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[18538,18539],{"type":8535,"score":11264},{"type":8496,"score":11266},[18541,18543,18545,18547,18548],{"type":8503,"url":18542},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":8503,"url":18544},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":8500,"url":18546},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":8508,"url":8509},{"type":8503,"url":11280},[8513,8514,8515,8516,8517,8518,8519,8520],{"id":521,"slug":18551,"dossier":47,"summary":18552,"aliases":18553,"sourceIds":18556,"published":18557,"modified":18558,"checkedAt":7,"severity":18559,"references":18562,"versionKeys":18575,"packageCount":32,"repositoryCount":34},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[18554,18555],"CVE-2026-24486","PYSEC-2026-1852",[521,18555],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[18560],{"type":8535,"score":18561},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[18563,18565,18567,18569,18570,18572,18573],{"type":8500,"url":18564},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":8503,"url":18566},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":8500,"url":18568},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":8508,"url":10981},{"type":8500,"url":18571},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":8508,"url":10983},{"type":8503,"url":18574},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[11111,11112,10987],{"id":522,"slug":18577,"dossier":47,"summary":18578,"aliases":18579,"sourceIds":18581,"published":18582,"modified":18583,"checkedAt":7,"severity":18584,"references":18586,"versionKeys":18594,"packageCount":32,"repositoryCount":32},"ghsa-wp97-x4hv-qvhp-4b75019d","Seroval `fromJSON`\u002F`fromCrossJSON` denial of service via unvalidated array node length",[18580],"CVE-2026-116584",[522],"2026-10-28T21:17:20Z","2026-10-28T21:30:05.906685921Z",[18585],{"type":8535,"score":8571},[18587,18589,18591,18592,18593],{"type":8500,"url":18588},"https:\u002F\u002Fgithub.com\u002Flxsmnsyc\u002Fseroval\u002Fsecurity\u002Fadvisories\u002FGHSA-wp97-x4hv-qvhp",{"type":8503,"url":18590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116584",{"type":8500,"url":13080},{"type":8508,"url":12399},{"type":8500,"url":12401},[12403],{"id":523,"slug":18596,"dossier":47,"summary":18597,"aliases":18598,"sourceIds":18601,"published":18602,"modified":18603,"checkedAt":7,"severity":18604,"references":18606,"versionKeys":18628,"packageCount":32,"repositoryCount":665},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[18599,18600],"CVE-2026-48818","PYSEC-2026-2281",[523,18600],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[18605],{"type":8535,"score":11654},[18607,18609,18610,18612,18614,18616,18618,18620,18622,18624,18626],{"type":8503,"url":18608},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":8508,"url":12258},{"type":8500,"url":18611},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":8500,"url":18613},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":8503,"url":18615},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":8503,"url":18617},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":8503,"url":18619},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":8503,"url":18621},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":9620,"url":18623},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":8626,"url":18625},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":8626,"url":18627},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[8889,8890,8891,12265,12266,12267,12447,12448,12449],{"id":524,"slug":18630,"dossier":47,"summary":18631,"aliases":18632,"sourceIds":18635,"published":18636,"modified":18637,"checkedAt":7,"severity":18638,"references":18640,"versionKeys":18655,"packageCount":32,"repositoryCount":34},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[18633,18634],"CVE-2026-76220","PYSEC-2026-3843",[524,18634],"2026-08-07T15:49:07Z","2026-09-10T12:26:01.792035310Z",[18639],{"type":8535,"score":8903},[18641,18643,18645,18646,18648,18649,18650,18652,18653],{"type":8500,"url":18642},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":8503,"url":18644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76220",{"type":8500,"url":10274},{"type":8500,"url":18647},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":8508,"url":8550},{"type":8500,"url":10279},{"type":8500,"url":18651},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-execution-via-split-single-char-options",{"type":8508,"url":8919},{"type":8503,"url":18654},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",[8558,8559,8560],{"id":525,"slug":18657,"dossier":47,"summary":18658,"aliases":18659,"sourceIds":18662,"published":18663,"modified":18664,"checkedAt":7,"severity":18665,"references":18668,"versionKeys":18677,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[18660,18661],"CVE-2026-42284","PYSEC-2026-2161",[525,18661],"2026-04-25T23:41:49Z","2026-09-10T03:51:03.787491179Z",[18666,18667],{"type":8535,"score":12193},{"type":8535,"score":8777},[18669,18671,18673,18674,18675],{"type":8541,"url":18670},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":8503,"url":18672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":8508,"url":8550},{"type":8626,"url":17588},{"type":8500,"url":18676},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[8558,8559,8560],{"id":526,"slug":18679,"dossier":47,"summary":18680,"aliases":18681,"sourceIds":18684,"published":18685,"modified":18686,"checkedAt":7,"severity":18687,"references":18691,"versionKeys":18700,"packageCount":32,"repositoryCount":752},"ghsa-x33g-cr3x-6449-e42d7ec6","PyJWT accepts inconsistent OKP x\u002Fd JWKs, causing public\u002Fprivate key identity confusion",[18682,18683],"CVE-2026-102275","PYSEC-2026-4183",[526,18683],"2026-09-28T21:17:15.857Z","2026-10-07T10:11:04.862065390Z",[18688,18689],{"type":8535,"score":9807},{"type":8535,"score":18690},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[18692,18694,18696,18698,18699],{"type":8541,"url":18693},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-x33g-cr3x-6449",{"type":8503,"url":18695},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102275",{"type":8626,"url":18697},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F3cd9ceec33ced359decbad75b413ad668ae6332c",{"type":8508,"url":9085},{"type":8503,"url":9945},[9093,9094,9095],{"id":527,"slug":18702,"dossier":47,"summary":18703,"aliases":18704,"sourceIds":18707,"published":18708,"modified":18709,"checkedAt":7,"severity":18710,"references":18712,"versionKeys":18719,"packageCount":32,"repositoryCount":665},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[18705,18706],"CVE-2026-48817","PYSEC-2026-2280",[527,18706],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[18711],{"type":8535,"score":9293},[18713,18715,18717,18718],{"type":8503,"url":18714},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":8503,"url":18716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":8508,"url":12258},{"type":8503,"url":18621},[8889,8890,8891,12265,12266,12267,12447,12448,12449],{"id":528,"slug":18721,"dossier":47,"summary":18722,"aliases":18723,"sourceIds":18727,"published":12969,"modified":18728,"checkedAt":7,"severity":18729,"references":18732,"versionKeys":18746,"packageCount":32,"repositoryCount":686},"ghsa-x78j-v8h9-3j2q-0741325d","virtualenv: Command injection via --prompt in activate.bat (batch activator)",[18724,18725,18726],"BIT-virtualenv-2026-102937","CVE-2026-102937","PYSEC-2026-4014",[528,18726],"2026-10-06T15:26:00.196757436Z",[18730],{"type":8496,"score":18731},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[18733,18735,18737,18739,18741,18743,18744,18745],{"type":8500,"url":18734},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-x78j-v8h9-3j2q",{"type":8503,"url":18736},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102937",{"type":8500,"url":18738},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3250",{"type":8626,"url":18740},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd721ff140ce4afdc2a9b76751e4584e25d9fbea6",{"type":8500,"url":18742},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4014.yaml",{"type":8508,"url":9546},{"type":8500,"url":12987},{"type":8508,"url":10935},[9550,9551,9552,9553,9554],{"id":529,"slug":18748,"dossier":47,"summary":18749,"aliases":18750,"sourceIds":18753,"published":18754,"modified":18755,"checkedAt":7,"severity":18756,"references":18759,"versionKeys":18765,"packageCount":32,"repositoryCount":654},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[18751,18752],"CVE-2026-54274","PYSEC-2026-2108",[529,18752],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[18757,18758],{"type":8496,"score":10248},{"type":8535,"score":8571},[18760,18762,18763],{"type":8503,"url":18761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":8508,"url":8944},{"type":8626,"url":18764},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[8948,8949,8950,8951,8952,8953,8954,8955,8956],{"id":530,"slug":18767,"dossier":47,"summary":18768,"aliases":18769,"sourceIds":18771,"published":18772,"modified":18773,"checkedAt":7,"severity":18774,"references":18776,"versionKeys":18789,"packageCount":32,"repositoryCount":686},"ghsa-xcq7-p3pf-p88h-7e00dc8e","OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api",[18770],"CVE-2026-114603",[530],"2026-10-22T16:22:07Z","2026-10-22T16:30:40.999595074Z",[18775],{"type":8535,"score":8870},[18777,18779,18781,18783,18785,18787],{"type":8500,"url":18778},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-xcq7-p3pf-p88h",{"type":8500,"url":18780},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5749",{"type":8500,"url":18782},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Fd5224bf4ffdf2aee1b592ad238dcc32ca957f26b",{"type":8508,"url":18784},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python",{"type":8500,"url":18786},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fblob\u002Fmain\u002FCHANGELOG.md#version-1451066b1-2026-10-06",{"type":8500,"url":18788},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.1",[18790,18791,18792,18793,18794,18795,18796,18797],"pypi:opentelemetry-api@1.25.0","pypi:opentelemetry-api@1.26.0","pypi:opentelemetry-api@1.28.2","pypi:opentelemetry-api@1.34.1","pypi:opentelemetry-api@1.36.0","pypi:opentelemetry-api@1.38.0","pypi:opentelemetry-api@1.39.1","pypi:opentelemetry-api@1.43.0",{"id":531,"slug":18799,"dossier":47,"summary":18800,"aliases":18801,"sourceIds":18805,"published":18806,"modified":18807,"checkedAt":7,"severity":18808,"references":18810,"versionKeys":18824,"packageCount":32,"repositoryCount":752},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[18802,18803,18804],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[531,18804],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[18809],{"type":8535,"score":12085},[18811,18813,18815,18817,18819,18821,18822],{"type":8503,"url":18812},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":8503,"url":18814},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":8500,"url":18816},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":8626,"url":18818},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":8500,"url":18820},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":8508,"url":8509},{"type":8500,"url":18823},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[8516],{"id":532,"slug":18826,"dossier":47,"summary":18827,"aliases":18828,"sourceIds":18832,"published":18833,"modified":18834,"checkedAt":7,"severity":18835,"references":18838,"versionKeys":18847,"packageCount":32,"repositoryCount":8523},"ghsa-xgh8-jp6q-p5x8-0a8d4f1f","Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes",[18829,18830,18831],"BIT-pillow-2026-112901","CVE-2026-112901","PYSEC-2026-4335",[532,18831],"2026-10-19T22:17:10.293Z","2026-10-28T11:10:55.647541842Z",[18836,18837],{"type":8496,"score":11316},{"type":8535,"score":8571},[18839,18841,18843,18845,18846],{"type":8626,"url":18840},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xgh8-jp6q-p5x8",{"type":8503,"url":18842},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112901",{"type":8626,"url":18844},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F2852a3e3d568997ddec745fc800991f138878f4b",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":533,"slug":18849,"dossier":47,"summary":18850,"aliases":18851,"sourceIds":18854,"published":18855,"modified":18856,"checkedAt":7,"severity":18857,"references":18859,"versionKeys":18867,"packageCount":32,"repositoryCount":810},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[18852,18853],"CVE-2026-48526","PYSEC-2026-179",[533,18853],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[18858],{"type":8535,"score":9163},[18860,18862,18864,18865],{"type":8541,"url":18861},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":8503,"url":18863},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":8508,"url":9085},{"type":8500,"url":18866},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[9093,9095],{"id":534,"slug":18869,"dossier":47,"summary":18870,"aliases":18871,"sourceIds":18873,"published":18874,"modified":18875,"checkedAt":7,"severity":18876,"references":18878,"versionKeys":18884,"packageCount":32,"repositoryCount":32},"ghsa-xhjh-pmcv-23jw-575003a0","Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams",[18872],"CVE-2026-42040",[534],"2026-05-05T00:18:03Z","2026-09-10T03:50:48.032269033Z",[18877],{"type":8535,"score":9046},[18879,18881,18883],{"type":8500,"url":18880},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-xhjh-pmcv-23jw",{"type":8503,"url":18882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42040",{"type":8508,"url":9438},[9440,9441],{"id":535,"slug":18886,"dossier":47,"summary":18887,"aliases":18888,"sourceIds":18890,"published":18891,"modified":18892,"checkedAt":7,"severity":18893,"references":18895,"versionKeys":18917,"packageCount":32,"repositoryCount":32},"ghsa-xhq7-xmqj-769h-0a50f1d8","fast-uri vulnerable to improper path equivalence in relative reference normalization",[18889],"CVE-2026-110095",[535],"2026-10-23T21:39:34Z","2026-10-23T21:45:04.902389903Z",[18894],{"type":8535,"score":9046},[18896,18898,18900,18902,18904,18906,18908,18910,18912,18913,18914,18915,18916],{"type":8500,"url":18897},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fsecurity\u002Fadvisories\u002FGHSA-xhq7-xmqj-769h",{"type":8503,"url":18899},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-110095",{"type":8500,"url":18901},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F048bbd0a252971be86d6579f0dfc87f8de5b9c47",{"type":8500,"url":18903},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F52774a5c35df36b0bbe439cd4c12c3dc0e50e3b9",{"type":8500,"url":18905},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F7c19f8b97ec51f1f20b4e3d9d5820cb8d5176058",{"type":8500,"url":18907},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002F9eb8759a9825c046f57f7f695f1944bc39b88abd",{"type":8500,"url":18909},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Facc5c5d60c4209571789496e1732468911c7e12a",{"type":8500,"url":18911},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffast-uri\u002Fcommit\u002Fb110a3571c37dfcf9d1c72ce2e2e178c78d1a424",{"type":8500,"url":8755},{"type":8508,"url":9410},{"type":8500,"url":9412},{"type":8500,"url":9414},{"type":8500,"url":9416},[9418],{"id":536,"slug":18919,"dossier":47,"summary":18920,"aliases":18921,"sourceIds":18925,"published":18926,"modified":18927,"checkedAt":7,"severity":18928,"references":18931,"versionKeys":18942,"packageCount":32,"repositoryCount":10072},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[18922,18923,18924],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[536,18924],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[18929],{"type":8535,"score":18930},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[18932,18934,18936,18938,18940,18941],{"type":8541,"url":18933},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":8503,"url":18935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":8626,"url":18937},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":8626,"url":18939},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":8508,"url":8509},{"type":8503,"url":11352},[8513,8514,8515,8516,8517,8518,8519,8520,8521],{"id":537,"slug":18944,"dossier":47,"summary":18945,"aliases":18946,"sourceIds":18948,"published":18949,"modified":18950,"checkedAt":7,"severity":18951,"references":18953,"versionKeys":18969,"packageCount":32,"repositoryCount":564},"ghsa-xjj6-f33q-929c-e46b746e","undici vulnerable to Denial of Service via unhandled error on excessive content-encodings",[18947],"CVE-2026-109869",[537],"2026-10-23T22:14:31Z","2026-10-23T22:30:05.007687918Z",[18952],{"type":8535,"score":8571},[18954,18956,18958,18960,18962,18964,18965,18966,18967,18968],{"type":8500,"url":18955},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-xjj6-f33q-929c",{"type":8503,"url":18957},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-109869",{"type":8500,"url":18959},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F07ded4941b1e72afec862958c3b8ddf468f3b429",{"type":8500,"url":18961},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002F1325a87dfb3492f8e87e6b0a84b3bda4e82e3436",{"type":8500,"url":18963},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fcommit\u002Fb5084c7dc239172d75c336b1cd51ddac023938a5",{"type":8500,"url":8755},{"type":8508,"url":9058},{"type":8500,"url":9178},{"type":8500,"url":9180},{"type":8500,"url":9182},[9065,9184],{"id":538,"slug":18971,"dossier":47,"summary":18972,"aliases":18973,"sourceIds":18976,"published":18977,"modified":18978,"checkedAt":7,"severity":18979,"references":18984,"versionKeys":18999,"packageCount":32,"repositoryCount":8523},"ghsa-xvh5-g6gv-559v-e12340aa","Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags",[18974,18975],"CVE-2026-112902","PYSEC-2026-4363",[538,18975],"2026-10-21T21:29:16Z","2026-11-11T10:20:03.066593346Z",[18980,18982],{"type":8496,"score":18981},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":8535,"score":18983},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[18985,18987,18989,18991,18993,18995,18997,18998],{"type":8626,"url":18986},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xvh5-g6gv-559v",{"type":8503,"url":18988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112902",{"type":8500,"url":18990},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F10903",{"type":8626,"url":18992},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10227",{"type":8626,"url":18994},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F570df030c0d30c2bf5336b2ab59f3902d8ab0b6d",{"type":8500,"url":18996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faf56ace297b0991d02988fcc2ea933e4824b4fb3",{"type":8508,"url":8509},{"type":8503,"url":8511},[8513,8514,8515,8516,8517,8518,8519,8520,8521,8522],{"id":539,"slug":19001,"dossier":47,"summary":19002,"aliases":19003,"sourceIds":19005,"published":19006,"modified":19007,"checkedAt":7,"severity":19008,"references":19010,"versionKeys":19026,"packageCount":32,"repositoryCount":810},"ghsa-xwg4-73v4-xw9w-e114930d","nanoid: Integer Overflow or Wraparound",[19004],"CVE-2026-73086",[539],"2026-09-01T19:23:45Z","2026-09-01T19:30:08.615560716Z",[19009],{"type":8535,"score":9163},[19011,19013,19015,19017,19019,19021,19022,19024],{"type":8500,"url":19012},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fsecurity\u002Fadvisories\u002FGHSA-xwg4-73v4-xw9w",{"type":8503,"url":19014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-73086",{"type":8500,"url":19016},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002F7087969281cab8ba8ae3babf1894e819068b3bb4",{"type":8500,"url":19018},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002F821dfed7b5db7f88e92f56c60eef32c8135077c3",{"type":8500,"url":19020},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Fcommit\u002Fb0036ed60dc9facd7f1191a50dfb3076500202ac",{"type":8508,"url":8852},{"type":8500,"url":19023},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F3.3.12",{"type":8500,"url":19025},"https:\u002F\u002Fgithub.com\u002Fai\u002Fnanoid\u002Freleases\u002Ftag\u002F5.1.11",[8858],{"id":540,"slug":19028,"dossier":47,"summary":19029,"aliases":19030,"sourceIds":19032,"published":19033,"modified":19034,"checkedAt":7,"severity":19035,"references":19037,"versionKeys":19043,"packageCount":32,"repositoryCount":32},"ghsa-xx6v-rp6x-q39c-44625a35","Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion",[19031],"CVE-2026-42042",[540],"2026-05-05T00:25:22Z","2026-09-10T03:51:07.425895085Z",[19036],{"type":8535,"score":15027},[19038,19040,19042],{"type":8500,"url":19039},"https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fsecurity\u002Fadvisories\u002FGHSA-xx6v-rp6x-q39c",{"type":8503,"url":19041},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42042",{"type":8508,"url":9438},[9440,9441],{"id":541,"slug":19045,"dossier":47,"summary":83,"aliases":19046,"sourceIds":19048,"published":19049,"modified":19050,"checkedAt":7,"severity":19051,"references":19054,"versionKeys":19060,"packageCount":32,"repositoryCount":810},"pysec-2025-183-08217171",[19047],"CVE-2025-45768",[541],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[19052],{"type":8535,"score":19053},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[19055,19057,19059],{"type":8500,"url":19056},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":9620,"url":19058},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":8508,"url":9085},[9093,9095],1794474417845]