[{"data":1,"prerenderedAt":4287},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-13749":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":78,"entity":79,"evidence":213,"related":221},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-10-16T06:23:21.916Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-10-16T06:20:06.191Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},45,44,1,24,5,28,41,40,39,0,4164,4153,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":71,"topPackage":72},2481,50,7382,9,55,2447,34,905,38,{"id":73,"slug":74,"label":75,"repositoryCount":76,"repositoryShare":77},"package:pypi:typing-extensions","typing-extensions-87d153eb","typing-extensions",25,0.5555555555555556,"repository",{"id":80,"slug":81,"gitlabProjectId":82,"name":83,"pathWithNamespace":84,"description":85,"webUrl":86,"commitSha":87,"commitUrl":88,"lastActivityAt":89,"headCommittedAt":90,"tree":91,"files":93,"resolvedComponentCount":103,"artifactResolvedComponentCount":102,"exactManifestPinCount":32,"packageCount":102,"ecosystems":104,"aiPackageCount":32,"licenseExpressionCount":106,"unknownLicensePackageCount":39,"advisoryIds":107,"advisoryCount":211,"providers":212},"opencode:13749","opencode-13749",13749,"data_quality_in_wastewater_surveillance","uba-ki-lab\u002Fdata_quality_in_wastewater_surveillance","In this project, the data quality of wastewater treatment plants (WWTPs) and laboratories is evaluated based on different data quality indicators. This can be used to rank WWTPs and laboratories and to select the most suitable ones for future probing. Pathogen data of SARS-Cov-2, Influenza A & B and RSV A, B & AB were evaluated, alongside with other parameters (e.g. water temperature, pH, inflow to the WWTPs).","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdata_quality_in_wastewater_surveillance","3726e4f9a4e0df2e41634c26ad4f3c00e35a347a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdata_quality_in_wastewater_surveillance\u002F-\u002Fcommit\u002F3726e4f9a4e0df2e41634c26ad4f3c00e35a347a","2026-10-15T11:28:22.668Z","2026-10-15T11:19:13.000Z",{"complete":92,"entryCount":71,"truncated":47},true,[94],{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":87,"contentSha256":99,"byteCount":100,"state":101,"componentCount":102},"sbom.json","sbom-json","5ad0fbc6b08df4722ff5bb79571cb77c8f34a900","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdata_quality_in_wastewater_surveillance\u002F-\u002Fblob\u002F3726e4f9a4e0df2e41634c26ad4f3c00e35a347a\u002Fsbom.json","806793e1fdd922d089f51c76029c4a3673d05a0267c358bc3042808a343982e1",199673,"parsed",136,137,[105],"pypi",17,[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210],"GHSA-248v-346w-9cwc","GHSA-2hm2-hc3v-44h9","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-38jv-5279-wg99","GHSA-3hv7-mjh2-fv65","GHSA-3x9g-8vmp-wqvf","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4c99-qj7h-p3vg","GHSA-4j32-57v6-6g45","GHSA-4x4j-2g7c-83w6","GHSA-4xh5-x5gv-qwph","GHSA-5239-wwwm-4pmq","GHSA-58cw-g322-p94v","GHSA-58qw-9mgm-455v","GHSA-597g-3phw-6986","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-6497-prx7-gpmq","GHSA-65pc-fj4g-8rjx","GHSA-6r8x-57c9-28j4","GHSA-6vgw-5pg2-w6jp","GHSA-6w46-j5rx-g56g","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7jqv-fw35-gmx9","GHSA-836r-79rf-4m37","GHSA-8423-8fgw-73vq","GHSA-8988-9cw3-xx77","GHSA-8c25-4j27-2rv3","GHSA-8g87-j6q8-g93x","GHSA-8mp2-v27r-99xp","GHSA-8mpj-m6qm-5qr8","GHSA-8rfp-98v4-mmr6","GHSA-8v84-f9pq-wr9x","GHSA-94p9-xgh2-xp45","GHSA-9h9j-4vrj-gf7g","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9wx4-h78v-vm56","GHSA-c2m8-h5v5-343r","GHSA-c8j7-8cv4-2xmq","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-chx6-46f5-w4vp","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-ffq3-xpv3-j92q","GHSA-fj7v-r99m-22gq","GHSA-g7vv-2v7x-gj9p","GHSA-g97x-gvcm-x72h","GHSA-gc5v-m9x4-r6x2","GHSA-gh4c-6fx4-qh6g","GHSA-gj48-438w-jh9v","GHSA-gjv8-xp57-g29c","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h75v-3vvj-5mfj","GHSA-j934-xhv5-fg8f","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jp4c-xjxw-mgf9","GHSA-jw8x-6495-233v","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgf9-4vpg-hj56","GHSA-mpf4-983q-p7j4","GHSA-mq26-g339-26xf","GHSA-p58f-9548-mpm2","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qcq2-496w-v96p","GHSA-qfrw-5rxm-mhh2","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qwm4-qh6w-59xr","GHSA-r4rv-85jg-w4mf","GHSA-r73j-pqj5-w3x7","GHSA-v87v-83h2-53w7","GHSA-vfmq-68hx-4jfw","GHSA-vjc4-5qp5-m44j","GHSA-vxq7-64xx-v4gw","GHSA-w853-jp5j-5j7f","GHSA-wf93-45jw-7689","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wwv5-g3v4-889x","GHSA-x78j-v8h9-3j2q","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","GHSA-xm59-rqc7-hhvf","PYSEC-2026-2208","PYSEC-2026-2209",103,[],{"files":214,"occurrenceCount":103},[215,220],{"path":216,"kind":217,"sourceUrl":218,"commitSha":87,"blobSha":219,"state":101,"componentCount":32},"requirements.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fdata_quality_in_wastewater_surveillance\u002F-\u002Fblob\u002F3726e4f9a4e0df2e41634c26ad4f3c00e35a347a\u002Frequirements.txt","fcff200e19c80173c9a06dd18369836885f00eef",{"path":95,"kind":96,"blobSha":97,"sourceUrl":98,"commitSha":87,"contentSha256":99,"byteCount":100,"state":101,"componentCount":102},{"packages":222,"vulnerabilities":1459},[223,236,248,258,268,279,289,298,308,317,327,336,345,355,365,374,383,392,401,410,420,429,438,448,457,466,475,484,493,502,511,521,530,539,548,557,566,575,584,593,602,611,621,630,639,648,657,666,675,684,695,704,713,722,731,739,748,758,767,776,784,793,802,811,820,829,838,847,856,865,874,883,892,901,910,919,928,936,945,954,964,973,982,992,1001,1010,1019,1028,1037,1046,1055,1064,1073,1082,1090,1098,1107,1116,1125,1134,1143,1151,1159,1167,1176,1185,1194,1203,1212,1221,1230,1239,1248,1257,1266,1275,1284,1293,1302,1311,1320,1329,1338,1347,1356,1365,1374,1382,1391,1397,1405,1414,1423,1432,1441,1450],{"id":224,"slug":225,"identity":226,"label":227,"aiRelevant":92,"provider":228,"advisoryCount":32,"licenseExpressions":229,"versions":232,"dossier":92,"occurrenceCount":234,"directOccurrenceCount":32,"evidenceFiles":235},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",null,[230,231],"BSD-3-Clause","non-standard",[233],"1.7.2",2,[216,95],{"id":237,"slug":238,"identity":239,"label":240,"aiRelevant":47,"provider":228,"advisoryCount":241,"licenseExpressions":242,"versions":245,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":247},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[243,244],"HPND","MIT-CMU",[246],"11.3.0",[95],{"id":249,"slug":250,"identity":251,"label":252,"aiRelevant":47,"provider":228,"advisoryCount":253,"licenseExpressions":254,"versions":255,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":257},"package:pypi:mistune","mistune-883ae9a9","pypi:mistune","mistune",16,[230],[256],"3.1.4",[95],{"id":259,"slug":260,"identity":261,"label":262,"aiRelevant":47,"provider":228,"advisoryCount":253,"licenseExpressions":263,"versions":265,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":267},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[264],"Apache-2.0",[266],"6.5.2",[95],{"id":269,"slug":270,"identity":271,"label":272,"aiRelevant":47,"provider":228,"advisoryCount":273,"licenseExpressions":274,"versions":276,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":278},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[275],"MIT",[277],"2.5.0",[95],{"id":280,"slug":281,"identity":282,"label":283,"aiRelevant":47,"provider":228,"advisoryCount":284,"licenseExpressions":285,"versions":286,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":288},"package:pypi:pip","pip-2911c768","pypi:pip","pip",7,[275],[287],"26.2.1",[95],{"id":290,"slug":291,"identity":292,"label":293,"aiRelevant":47,"provider":228,"advisoryCount":34,"licenseExpressions":294,"versions":295,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":297},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[275],[296],"20.32.0",[95],{"id":299,"slug":300,"identity":301,"label":302,"aiRelevant":47,"provider":228,"advisoryCount":303,"licenseExpressions":304,"versions":305,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":307},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",4,[230,231],[306],"3.1.6",[95],{"id":309,"slug":310,"identity":311,"label":312,"aiRelevant":47,"provider":228,"advisoryCount":303,"licenseExpressions":313,"versions":314,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":316},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[275],[315],"2.8",[95],{"id":318,"slug":319,"identity":320,"label":321,"aiRelevant":47,"provider":228,"advisoryCount":322,"licenseExpressions":323,"versions":324,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":326},"package:pypi:nbconvert","nbconvert-a72151db","pypi:nbconvert","nbconvert",3,[231],[325],"7.16.6",[95],{"id":328,"slug":329,"identity":330,"label":331,"aiRelevant":47,"provider":228,"advisoryCount":322,"licenseExpressions":332,"versions":333,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":335},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[264],[334],"2.32.5",[95],{"id":337,"slug":338,"identity":339,"label":340,"aiRelevant":47,"provider":228,"advisoryCount":234,"licenseExpressions":341,"versions":342,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":344},"package:pypi:bleach","bleach-b1747264","pypi:bleach","bleach",[231],[343],"6.2.0",[95],{"id":346,"slug":347,"identity":348,"label":349,"aiRelevant":47,"provider":228,"advisoryCount":234,"licenseExpressions":350,"versions":352,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":354},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[275,351],"Unlicense",[353],"3.18.0",[95],{"id":356,"slug":357,"identity":358,"label":359,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":360,"versions":362,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":364},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[361],"MPL-2.0",[363],"2025.8.3",[95],{"id":366,"slug":367,"identity":368,"label":369,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":370,"versions":371,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":373},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[275],[372],"4.59.2",[95],{"id":375,"slug":376,"identity":377,"label":378,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":379,"versions":380,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":382},"package:pypi:geopandas","geopandas-968b51b0","pypi:geopandas","geopandas",[230],[381],"1.1.3",[95],{"id":384,"slug":385,"identity":386,"label":387,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":388,"versions":389,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":391},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[230,231],[390],"3.10",[95],{"id":393,"slug":394,"identity":395,"label":396,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":397,"versions":398,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":400},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[230,231],[399],"5.8.1",[95],{"id":402,"slug":403,"identity":404,"label":405,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":406,"versions":407,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":409},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[230],[408],"6.1.3",[95],{"id":411,"slug":412,"identity":413,"label":414,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":415,"versions":417,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":419},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[416],"BSD-2-Clause",[418],"2.19.2",[95],{"id":421,"slug":422,"identity":423,"label":424,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":425,"versions":426,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":428},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[275],[427],"8.4.2",[95],{"id":430,"slug":431,"identity":432,"label":433,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":434,"versions":435,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":437},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[230],[436],"1.1.1",[95],{"id":439,"slug":440,"identity":441,"label":442,"aiRelevant":47,"provider":228,"advisoryCount":32,"licenseExpressions":443,"versions":445,"dossier":92,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":447},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[444],"MIT AND MPL-2.0",[446],"4.67.1",[95],{"id":449,"slug":450,"identity":451,"label":452,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":453,"versions":454,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":456},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[231],[455],"1.4.0",[95],{"id":458,"slug":459,"identity":460,"label":461,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":462,"versions":463,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":465},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[264],[464],"3.0.0",[95],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":471,"versions":472,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":474},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[275],[473],"25.3.0",[95],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":480,"versions":481,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":483},"package:pypi:backcall","backcall-641b907e","pypi:backcall","backcall",[231],[482],"0.2.0",[95],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":489,"versions":490,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":492},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[275],[491],"4.13.5",[95],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":498,"versions":499,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":501},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[416],[500],"5.0",[95],{"id":503,"slug":504,"identity":505,"label":506,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":507,"versions":508,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":510},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[275],[509],"3.4.0",[95],{"id":512,"slug":513,"identity":514,"label":515,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":516,"versions":518,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":520},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[517,231],"0BSD",[519],"7.6.0",[95],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":526,"versions":527,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":529},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[275],[528],"3.4.3",[95],{"id":531,"slug":532,"identity":533,"label":534,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":535,"versions":536,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":538},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[230],[537],"3.1.1",[95],{"id":540,"slug":541,"identity":542,"label":543,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":544,"versions":545,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":547},"package:pypi:colour","colour-22bcf9f9","pypi:colour","colour",[230],[546],"0.1.5",[95],{"id":549,"slug":550,"identity":551,"label":552,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":553,"versions":554,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":556},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[231],[555],"0.2.3",[95],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":562,"versions":563,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":565},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[231],[564],"1.3.3",[95],{"id":567,"slug":568,"identity":569,"label":570,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":571,"versions":572,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":574},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[231],[573],"0.12.1",[95],{"id":576,"slug":577,"identity":578,"label":579,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":580,"versions":581,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":583},"package:pypi:cyclonedx-python-lib","cyclonedx-python-lib-af6d232b","pypi:cyclonedx-python-lib","cyclonedx-python-lib",[264],[582],"11.12.0",[95],{"id":585,"slug":586,"identity":587,"label":588,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":589,"versions":590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":592},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[275],[591],"1.8.16",[95],{"id":594,"slug":595,"identity":596,"label":597,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":598,"versions":599,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":601},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[416,231],[600],"5.2.1",[95],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":607,"versions":608,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":610},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[231],[609],"0.7.1",[95],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":616,"versions":618,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":620},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[617],"PSF-2.0",[619],"0.4.0",[95],{"id":622,"slug":623,"identity":624,"label":625,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":626,"versions":627,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":629},"package:pypi:docopt","docopt-a034efe2","pypi:docopt","docopt",[275],[628],"0.6.2",[95],{"id":631,"slug":632,"identity":633,"label":634,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":635,"versions":636,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":638},"package:pypi:dtreeviz","dtreeviz-cf6aef0c","pypi:dtreeviz","dtreeviz",[275],[637],"2.2.2",[95],{"id":640,"slug":641,"identity":642,"label":643,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":644,"versions":645,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":647},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[275],[646],"2.0.0",[95],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":653,"versions":654,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":656},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[275],[655],"2.2.1",[95],{"id":658,"slug":659,"identity":660,"label":661,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":662,"versions":663,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":665},"package:pypi:fastjsonschema","fastjsonschema-8288c29a","pypi:fastjsonschema","fastjsonschema",[231],[664],"2.21.2",[95],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":671,"versions":672,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":674},"package:pypi:fqdn","fqdn-2616214a","pypi:fqdn","fqdn",[361,231],[673],"1.6.0",[95],{"id":676,"slug":677,"identity":678,"label":679,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":680,"versions":681,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":683},"package:pypi:graphviz","graphviz-e85b83de","pypi:graphviz","graphviz",[275],[682],"0.21",[95],{"id":685,"slug":686,"identity":687,"label":688,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":689,"versions":692,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":694},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[275,690,691],"MIT AND PSF-2.0","MIT AND Python-2.0",[693],"3.2.4",[95],{"id":696,"slug":697,"identity":698,"label":699,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":700,"versions":701,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":703},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[275],[702],"2.6.12",[95],{"id":705,"slug":706,"identity":707,"label":708,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":709,"versions":710,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":712},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[275],[711],"2.1.0",[95],{"id":714,"slug":715,"identity":716,"label":717,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":718,"versions":719,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":721},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[230,231],[720],"6.30.1",[95],{"id":723,"slug":724,"identity":725,"label":726,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":727,"versions":728,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":730},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[230],[729],"8.12.3",[95],{"id":732,"slug":733,"identity":734,"label":735,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":736,"versions":737,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":738},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[231],[436],[95],{"id":740,"slug":741,"identity":742,"label":743,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":744,"versions":745,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":747},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[230],[746],"8.1.8",[95],{"id":749,"slug":750,"identity":751,"label":752,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":753,"versions":755,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":757},"package:pypi:isoduration","isoduration-e8f86ac8","pypi:isoduration","isoduration",[754],"ISC",[756],"20.11.0",[95],{"id":759,"slug":760,"identity":761,"label":762,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":763,"versions":764,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":766},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[275],[765],"0.19.2",[95],{"id":768,"slug":769,"identity":770,"label":771,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":772,"versions":773,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":775},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[230],[774],"1.5.2",[95],{"id":777,"slug":778,"identity":779,"label":780,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":781,"versions":782,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":783},"package:pypi:jsonpointer","jsonpointer-a61b5f8f","pypi:jsonpointer","jsonpointer",[231],[537],[95],{"id":785,"slug":786,"identity":787,"label":788,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":789,"versions":790,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":792},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[275],[791],"4.25.1",[95],{"id":794,"slug":795,"identity":796,"label":797,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":798,"versions":799,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":801},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[275],[800],"2025.9.1",[95],{"id":803,"slug":804,"identity":805,"label":806,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":807,"versions":808,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":810},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[231],[809],"8.6.3",[95],{"id":812,"slug":813,"identity":814,"label":815,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":816,"versions":817,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":819},"package:pypi:jupyterlab-pygments","jupyterlab-pygments-f3159f9e","pypi:jupyterlab-pygments","jupyterlab-pygments",[231],[818],"0.3.0",[95],{"id":821,"slug":822,"identity":823,"label":824,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":825,"versions":826,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":828},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[230,231],[827],"3.0.16",[95],{"id":830,"slug":831,"identity":832,"label":833,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":834,"versions":835,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":837},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[231],[836],"1.4.9",[95],{"id":839,"slug":840,"identity":841,"label":842,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":843,"versions":844,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":846},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[275],[845],"1.3.1",[95],{"id":848,"slug":849,"identity":850,"label":851,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":852,"versions":853,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":855},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[264],[854],"30.4.4",[95],{"id":857,"slug":858,"identity":859,"label":860,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":861,"versions":862,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":864},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[231],[863],"0.45.1",[95],{"id":866,"slug":867,"identity":868,"label":869,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":870,"versions":871,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":873},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[230,231],[872],"3.0.2",[95],{"id":875,"slug":876,"identity":877,"label":878,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":879,"versions":880,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":882},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[231],[881],"3.10.6",[95],{"id":884,"slug":885,"identity":886,"label":887,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":888,"versions":889,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":891},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[230,231],[890],"0.1.7",[95],{"id":893,"slug":894,"identity":895,"label":896,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":897,"versions":898,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":900},"package:pypi:matplotlib-venn","matplotlib-venn-92ce9398","pypi:matplotlib-venn","matplotlib-venn",[275],[899],"1.1.2",[95],{"id":902,"slug":903,"identity":904,"label":905,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":906,"versions":907,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":909},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[275,231],[908],"2.16.0",[95],{"id":911,"slug":912,"identity":913,"label":914,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":915,"versions":916,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":918},"package:pypi:nbclient","nbclient-e201d8f1","pypi:nbclient","nbclient",[231],[917],"0.10.2",[95],{"id":920,"slug":921,"identity":922,"label":923,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":924,"versions":925,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":927},"package:pypi:nbformat","nbformat-2d86904f","pypi:nbformat","nbformat",[231],[926],"5.10.4",[95],{"id":929,"slug":930,"identity":931,"label":932,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":933,"versions":934,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":935},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[231],[673],[95],{"id":937,"slug":938,"identity":939,"label":940,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":941,"versions":942,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":944},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[231],[943],"1.9.1",[95],{"id":946,"slug":947,"identity":948,"label":949,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":950,"versions":951,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":953},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[231],[952],"0.62.1",[95],{"id":955,"slug":956,"identity":957,"label":958,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":959,"versions":961,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":963},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[960,231],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[962],"2.1.3",[95],{"id":965,"slug":966,"identity":967,"label":968,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":969,"versions":970,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":972},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[275],[971],"3.1.5",[95],{"id":974,"slug":975,"identity":976,"label":977,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":978,"versions":979,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":981},"package:pypi:packageurl-python","packageurl-python-dc3afccd","pypi:packageurl-python","packageurl-python",[275],[980],"0.17.6",[95],{"id":983,"slug":984,"identity":985,"label":986,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":987,"versions":989,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":991},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[988,231],"Apache-2.0 OR BSD-2-Clause",[990],"25.0",[95],{"id":993,"slug":994,"identity":995,"label":996,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":997,"versions":998,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1000},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[231],[999],"2.2.3",[95],{"id":1002,"slug":1003,"identity":1004,"label":1005,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1006,"versions":1007,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1009},"package:pypi:pandocfilters","pandocfilters-f452098e","pypi:pandocfilters","pandocfilters",[230],[1008],"1.5.1",[95],{"id":1011,"slug":1012,"identity":1013,"label":1014,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1015,"versions":1016,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1018},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[275],[1017],"0.8.5",[95],{"id":1020,"slug":1021,"identity":1022,"label":1023,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1024,"versions":1025,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1027},"package:pypi:patsy","patsy-d46c513b","pypi:patsy","patsy",[231],[1026],"1.0.2",[95],{"id":1029,"slug":1030,"identity":1031,"label":1032,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1033,"versions":1034,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1036},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[231],[1035],"4.9.0",[95],{"id":1038,"slug":1039,"identity":1040,"label":1041,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1042,"versions":1043,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1045},"package:pypi:pickleshare","pickleshare-5fcce33d","pypi:pickleshare","pickleshare",[275],[1044],"0.7.5",[95],{"id":1047,"slug":1048,"identity":1049,"label":1050,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1051,"versions":1052,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1054},"package:pypi:pip-requirements-parser","pip-requirements-parser-3a4c3c44","pypi:pip-requirements-parser","pip-requirements-parser",[275],[1053],"32.0.1",[95],{"id":1056,"slug":1057,"identity":1058,"label":1059,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1060,"versions":1061,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1063},"package:pypi:pipfreeze","pipfreeze-c02d60ee","pypi:pipfreeze","pipfreeze",[275],[1062],"2.0.3",[95],{"id":1065,"slug":1066,"identity":1067,"label":1068,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1069,"versions":1070,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1072},"package:pypi:pipreqs","pipreqs-44f88249","pypi:pipreqs","pipreqs",[264],[1071],"0.5.0",[95],{"id":1074,"slug":1075,"identity":1076,"label":1077,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1078,"versions":1079,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1081},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[275],[1080],"4.3.8",[95],{"id":1083,"slug":1084,"identity":1085,"label":1086,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1087,"versions":1088,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1089},"package:pypi:plotly","plotly-036ddabb","pypi:plotly","plotly",[231],[266],[95],{"id":1091,"slug":1092,"identity":1093,"label":1094,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1095,"versions":1096,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1097},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[275],[673],[95],{"id":1099,"slug":1100,"identity":1101,"label":1102,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1103,"versions":1104,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1106},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[275],[1105],"4.2.0",[95],{"id":1108,"slug":1109,"identity":1110,"label":1111,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1112,"versions":1113,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1115},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[230,231],[1114],"3.0.52",[95],{"id":1117,"slug":1118,"identity":1119,"label":1120,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1121,"versions":1122,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1124},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[230],[1123],"7.0.0",[95],{"id":1126,"slug":1127,"identity":1128,"label":1129,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1130,"versions":1131,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1133},"package:pypi:psycopg2-binary","psycopg2-binary-128ab534","pypi:psycopg2-binary","psycopg2-binary",[231],[1132],"2.9.10",[95],{"id":1135,"slug":1136,"identity":1137,"label":1138,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1139,"versions":1140,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1142},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[754],[1141],"0.7.0",[95],{"id":1144,"slug":1145,"identity":1146,"label":1147,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1148,"versions":1149,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1150},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[275],[555],[95],{"id":1152,"slug":1153,"identity":1154,"label":1155,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1156,"versions":1157,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1158},"package:pypi:py-serializable","py-serializable-cebfca90","pypi:py-serializable","py-serializable",[264],[711],[95],{"id":1160,"slug":1161,"identity":1162,"label":1163,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1164,"versions":1165,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1166},"package:pypi:pyogrio","pyogrio-ff34272a","pypi:pyogrio","pyogrio",[231],[573],[95],{"id":1168,"slug":1169,"identity":1170,"label":1171,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1172,"versions":1173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1175},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[275],[1174],"3.2.3",[95],{"id":1177,"slug":1178,"identity":1179,"label":1180,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1181,"versions":1182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1184},"package:pypi:pyproj","pyproj-cd69d38f","pypi:pyproj","pyproj",[275],[1183],"3.7.2",[95],{"id":1186,"slug":1187,"identity":1188,"label":1189,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1190,"versions":1191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1193},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[231],[1192],"2.9.0.post0",[95],{"id":1195,"slug":1196,"identity":1197,"label":1198,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1199,"versions":1200,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1202},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[275],[1201],"2025.2",[95],{"id":1204,"slug":1205,"identity":1206,"label":1207,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1208,"versions":1209,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1211},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[275],[1210],"6.0.2",[95],{"id":1213,"slug":1214,"identity":1215,"label":1216,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1217,"versions":1218,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1220},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[231],[1219],"27.1.0",[95],{"id":1222,"slug":1223,"identity":1224,"label":1225,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1226,"versions":1227,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1229},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[275],[1228],"0.36.2",[95],{"id":1231,"slug":1232,"identity":1233,"label":1234,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1235,"versions":1236,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1238},"package:pypi:rfc3339-validator","rfc3339-validator-433f6951","pypi:rfc3339-validator","rfc3339-validator",[275],[1237],"0.1.4",[95],{"id":1240,"slug":1241,"identity":1242,"label":1243,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1244,"versions":1245,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1247},"package:pypi:rfc3986-validator","rfc3986-validator-723c00af","pypi:rfc3986-validator","rfc3986-validator",[275],[1246],"0.1.1",[95],{"id":1249,"slug":1250,"identity":1251,"label":1252,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1253,"versions":1254,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1256},"package:pypi:rfc3987-syntax","rfc3987-syntax-1f7c3c6b","pypi:rfc3987-syntax","rfc3987-syntax",[275],[1255],"1.1.0",[95],{"id":1258,"slug":1259,"identity":1260,"label":1261,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1262,"versions":1263,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1265},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[275],[1264],"0.27.1",[95],{"id":1267,"slug":1268,"identity":1269,"label":1270,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1271,"versions":1272,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1274},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[275],[1273],"0.12.12",[95],{"id":1276,"slug":1277,"identity":1278,"label":1279,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1280,"versions":1281,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1283},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[231],[1282],"1.16.2",[95],{"id":1285,"slug":1286,"identity":1287,"label":1288,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1289,"versions":1290,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1292},"package:pypi:seaborn","seaborn-1018de9a","pypi:seaborn","seaborn",[231],[1291],"0.13.2",[95],{"id":1294,"slug":1295,"identity":1296,"label":1297,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1298,"versions":1299,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1301},"package:pypi:shap","shap-e70c5c55","pypi:shap","shap",[275],[1300],"0.49.1",[95],{"id":1303,"slug":1304,"identity":1305,"label":1306,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1307,"versions":1308,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1310},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[230],[1309],"2.1.2",[95],{"id":1312,"slug":1313,"identity":1314,"label":1315,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1316,"versions":1317,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1319},"package:pypi:six","six-3c3888bd","pypi:six","six",[275],[1318],"1.17.0",[95],{"id":1321,"slug":1322,"identity":1323,"label":1324,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1325,"versions":1326,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1328},"package:pypi:slicer","slicer-e58694d1","pypi:slicer","slicer",[275],[1327],"0.0.8",[95],{"id":1330,"slug":1331,"identity":1332,"label":1333,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1334,"versions":1335,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1337},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[264],[1336],"2.4.0",[95],{"id":1339,"slug":1340,"identity":1341,"label":1342,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1343,"versions":1344,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1346},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[275],[1345],"2.0.43",[95],{"id":1348,"slug":1349,"identity":1350,"label":1351,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1352,"versions":1353,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1355},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[275],[1354],"0.6.3",[95],{"id":1357,"slug":1358,"identity":1359,"label":1360,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1361,"versions":1362,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1364},"package:pypi:statsmodels","statsmodels-e1c76ae8","pypi:statsmodels","statsmodels",[231],[1363],"0.14.6",[95],{"id":1366,"slug":1367,"identity":1368,"label":1369,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1370,"versions":1371,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1373},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[230],[1372],"3.6.0",[95],{"id":1375,"slug":1376,"identity":1377,"label":1378,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1379,"versions":1380,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1381},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[231],[455],[95],{"id":1383,"slug":1384,"identity":1385,"label":1386,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1387,"versions":1388,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1390},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[231],[1389],"5.14.3",[95],{"id":73,"slug":74,"identity":1392,"label":75,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1393,"versions":1394,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1396},"pypi:typing-extensions",[617,231],[1395],"4.15.0",[95],{"id":1398,"slug":1399,"identity":1400,"label":1401,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1402,"versions":1403,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1404},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[264],[1201],[95],{"id":1406,"slug":1407,"identity":1408,"label":1409,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1410,"versions":1411,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1413},"package:pypi:uri-template","uri-template-04c43560","pypi:uri-template","uri-template",[275],[1412],"1.3.0",[95],{"id":1415,"slug":1416,"identity":1417,"label":1418,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1419,"versions":1420,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1422},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[275],[1421],"0.2.13",[95],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1428,"versions":1429,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1431},"package:pypi:webcolors","webcolors-380e4f6b","pypi:webcolors","webcolors",[230],[1430],"25.10.0",[95],{"id":1433,"slug":1434,"identity":1435,"label":1436,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1437,"versions":1438,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1440},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[231],[1439],"0.5.1",[95],{"id":1442,"slug":1443,"identity":1444,"label":1445,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1446,"versions":1447,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1449},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[230],[1448],"4.0.15",[95],{"id":1451,"slug":1452,"identity":1453,"label":1454,"aiRelevant":47,"provider":228,"advisoryCount":39,"licenseExpressions":1455,"versions":1456,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1458},"package:pypi:yarg","yarg-5de2410d","pypi:yarg","yarg",[275],[1457],"0.1.9",[95],[1460,1499,1528,1556,1592,1619,1645,1678,1701,1737,1764,1787,1810,1839,1873,1913,1938,1964,1998,2021,2046,2076,2113,2141,2167,2193,2230,2262,2292,2317,2337,2358,2381,2413,2436,2456,2481,2504,2523,2546,2578,2607,2641,2667,2697,2719,2742,2766,2821,2846,2878,2902,2925,2953,2986,3010,3038,3062,3078,3104,3127,3156,3189,3213,3235,3262,3288,3317,3338,3368,3389,3414,3457,3486,3513,3537,3561,3585,3601,3627,3654,3674,3702,3724,3750,3783,3813,3835,3863,3882,3912,3939,3963,3993,4045,4097,4120,4144,4171,4199,4224,4257,4272],{"id":108,"slug":1461,"dossier":47,"summary":1462,"aliases":1463,"sourceIds":1466,"published":1467,"modified":1468,"checkedAt":7,"severity":1469,"references":1473,"versionKeys":1497,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1464,1465],"CVE-2024-39689","PYSEC-2024-230",[108,1465],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[1470],{"type":1471,"score":1472},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1474,1477,1479,1482,1485,1488,1491,1493,1495],{"type":1475,"url":1476},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1475,"url":1478},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1480,"url":1481},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1483,"url":1484},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1486,"url":1487},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1489,"url":1490},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1486,"url":1492},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1475,"url":1494},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1475,"url":1496},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1498],"pypi:certifi@2024.6.2",{"id":109,"slug":1500,"dossier":47,"summary":1501,"aliases":1502,"sourceIds":1505,"published":1506,"modified":1507,"checkedAt":7,"severity":1508,"references":1511,"versionKeys":1525,"packageCount":32,"repositoryCount":234},"ghsa-2hm2-hc3v-44h9-93b1e859","Mistune toc \u002F TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id=\"toc_N\"` content",[1503,1504],"CVE-2026-59930","PYSEC-2026-2218",[109,1504],"2026-07-08T17:17:28.867Z","2026-07-20T21:46:43.352385519Z",[1509],{"type":1471,"score":1510},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1512,1515,1517,1519,1521,1523],{"type":1513,"url":1514},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-2hm2-hc3v-44h9",{"type":1475,"url":1516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59930",{"type":1480,"url":1518},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc4093c4742ed0d10d9332fb8edb455869b7b581b",{"type":1483,"url":1520},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune",{"type":1475,"url":1522},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.3.0",{"type":1486,"url":1524},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2218.yaml",[1526,1527],"pypi:mistune@3.1.3","pypi:mistune@3.1.4",{"id":110,"slug":1529,"dossier":47,"summary":1530,"aliases":1531,"sourceIds":1534,"published":1535,"modified":1536,"checkedAt":7,"severity":1537,"references":1540,"versionKeys":1551,"packageCount":32,"repositoryCount":1555},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[1532,1533],"CVE-2026-49476","PYSEC-2026-3071",[110,1533],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[1538],{"type":1471,"score":1539},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1541,1543,1545,1547,1549],{"type":1486,"url":1542},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1483,"url":1544},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":1483,"url":1546},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":1475,"url":1548},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1475,"url":1550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[1552,1553,1554],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",6,{"id":111,"slug":1557,"dossier":92,"summary":1558,"aliases":1559,"sourceIds":1562,"published":1563,"modified":1564,"checkedAt":7,"severity":1565,"references":1569,"versionKeys":1586,"packageCount":32,"repositoryCount":106},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1560,1561],"CVE-2025-66471","PYSEC-2026-1994",[111,1561],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[1566],{"type":1567,"score":1568},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1570,1572,1574,1576,1578,1580,1582,1584],{"type":1486,"url":1571},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1475,"url":1573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1480,"url":1575},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1486,"url":1577},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":1475,"url":1579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1486,"url":1581},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":1483,"url":1583},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1483,"url":1585},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[1587,1588,1589,1590,1591],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":112,"slug":1593,"dossier":47,"summary":1594,"aliases":1595,"sourceIds":1598,"published":1599,"modified":1600,"checkedAt":7,"severity":1601,"references":1604,"versionKeys":1617,"packageCount":32,"repositoryCount":234},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[1596,1597],"CVE-2025-30167","PYSEC-2026-1477",[112,1597],"2025-06-04T21:00:23Z","2026-09-10T03:50:24.754946270Z",[1602],{"type":1471,"score":1603},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1605,1607,1609,1611,1613,1615],{"type":1486,"url":1606},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":1475,"url":1608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":1486,"url":1610},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":1483,"url":1612},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":1483,"url":1614},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":1475,"url":1616},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[1618],"pypi:jupyter-core@5.7.2",{"id":113,"slug":1620,"dossier":92,"summary":1621,"aliases":1622,"sourceIds":1625,"published":1626,"modified":1627,"checkedAt":7,"severity":1628,"references":1631,"versionKeys":1644,"packageCount":32,"repositoryCount":106},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1623,1624],"CVE-2026-21441","PYSEC-2026-1996",[113,1624],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1629,1630],{"type":1471,"score":1539},{"type":1567,"score":1568},[1632,1634,1636,1638,1639,1641,1642],{"type":1486,"url":1633},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1475,"url":1635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1480,"url":1637},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1483,"url":1583},{"type":1486,"url":1640},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1483,"url":1585},{"type":1475,"url":1643},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1587,1588,1589,1590,1591],{"id":114,"slug":1646,"dossier":47,"summary":1647,"aliases":1648,"sourceIds":1650,"published":1651,"modified":1652,"checkedAt":7,"severity":1653,"references":1656,"versionKeys":1669,"packageCount":32,"repositoryCount":1677},"ghsa-3hv7-mjh2-fv65-5be6c7b0","Tornado: Unbounded query-string argument count allows event-loop-stalling DoS",[1649],"CVE-2026-103261",[114],"2026-09-30T23:49:25Z","2026-10-02T03:56:09.601689224Z",[1654],{"type":1471,"score":1655},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1657,1659,1661,1663,1665,1667],{"type":1486,"url":1658},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3hv7-mjh2-fv65",{"type":1486,"url":1660},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3719",{"type":1486,"url":1662},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F03945136ea9746eccf61caf88edae39642e59c93",{"type":1486,"url":1664},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8a61dd6005f42733015160f3c23a2bcffe200542",{"type":1483,"url":1666},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":1486,"url":1668},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.9",[1670,1671,1672,1673,1674,1675,1676],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5","pypi:tornado@6.5.7","pypi:tornado@6.5.8",12,{"id":115,"slug":1679,"dossier":47,"summary":1680,"aliases":1681,"sourceIds":1684,"published":1685,"modified":1686,"checkedAt":7,"severity":1687,"references":1690,"versionKeys":1700,"packageCount":32,"repositoryCount":273},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[1682,1683],"CVE-2026-49853","PYSEC-2026-3387",[115,1683],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[1688],{"type":1471,"score":1689},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1691,1693,1694,1696,1698],{"type":1486,"url":1692},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":1483,"url":1666},{"type":1483,"url":1695},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":1475,"url":1697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":1475,"url":1699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[1670,1671,1672,1673,1674],{"id":116,"slug":1702,"dossier":92,"summary":1703,"aliases":1704,"sourceIds":1708,"published":1709,"modified":1710,"checkedAt":7,"severity":1711,"references":1713,"versionKeys":1726,"packageCount":32,"repositoryCount":1736},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1705,1706,1707],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[116,1707],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[1712],{"type":1471,"score":1539},[1714,1716,1718,1720,1722,1724],{"type":1513,"url":1715},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1475,"url":1717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1480,"url":1719},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1486,"url":1721},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1483,"url":1723},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1475,"url":1725},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1727,1728,1729,1730,1731,1732,1733,1734,1735],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",18,{"id":117,"slug":1738,"dossier":47,"summary":1739,"aliases":1740,"sourceIds":1743,"published":1744,"modified":1745,"checkedAt":7,"severity":1746,"references":1749,"versionKeys":1762,"packageCount":32,"repositoryCount":1763},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1741,1742],"CVE-2025-50182","PYSEC-2026-1997",[117,1742],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1747],{"type":1471,"score":1748},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1750,1752,1754,1756,1757,1759,1760],{"type":1486,"url":1751},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1475,"url":1753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1480,"url":1755},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1483,"url":1583},{"type":1486,"url":1758},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1483,"url":1585},{"type":1475,"url":1761},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1587,1588,1589,1590],8,{"id":118,"slug":1765,"dossier":47,"summary":1766,"aliases":1767,"sourceIds":1770,"published":1771,"modified":1772,"checkedAt":7,"severity":1773,"references":1776,"versionKeys":1785,"packageCount":32,"repositoryCount":234},"ghsa-4c99-qj7h-p3vg-9bb362f6","nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames",[1768,1769],"CVE-2026-39377","PYSEC-2026-2229",[118,1769],"2026-04-21T01:16:05.937Z","2026-09-10T03:51:00.940697146Z",[1774],{"type":1471,"score":1775},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1777,1779,1781,1783],{"type":1475,"url":1778},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-4c99-qj7h-p3vg",{"type":1475,"url":1780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39377",{"type":1483,"url":1782},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert",{"type":1486,"url":1784},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.1",[1786],"pypi:nbconvert@7.16.6",{"id":119,"slug":1788,"dossier":47,"summary":1789,"aliases":1790,"sourceIds":1793,"published":1794,"modified":1795,"checkedAt":7,"severity":1796,"references":1798,"versionKeys":1809,"packageCount":32,"repositoryCount":234},"ghsa-4j32-57v6-6g45-cd8913d1","Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs",[1791,1792],"CVE-2026-59925","PYSEC-2026-2213",[119,1792],"2026-07-08T17:17:28.183Z","2026-07-20T21:46:43.348949802Z",[1797],{"type":1471,"score":1539},[1799,1801,1803,1805,1806,1807],{"type":1513,"url":1800},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-4j32-57v6-6g45",{"type":1475,"url":1802},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59925",{"type":1480,"url":1804},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F5de41fb8e527004dbc363e047a3c380c9288c74f",{"type":1483,"url":1520},{"type":1475,"url":1522},{"type":1486,"url":1808},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2213.yaml",[1526,1527],{"id":120,"slug":1811,"dossier":92,"summary":1812,"aliases":1813,"sourceIds":1817,"published":1818,"modified":1819,"checkedAt":7,"severity":1820,"references":1823,"versionKeys":1838,"packageCount":32,"repositoryCount":1736},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1814,1815,1816],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[120,1816],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[1821],{"type":1471,"score":1822},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1824,1826,1828,1830,1832,1834,1836,1837],{"type":1513,"url":1825},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1475,"url":1827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1480,"url":1829},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1480,"url":1831},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1480,"url":1833},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1486,"url":1835},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1483,"url":1723},{"type":1475,"url":1725},[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":121,"slug":1840,"dossier":47,"summary":1841,"aliases":1842,"sourceIds":1845,"published":1846,"modified":1847,"checkedAt":7,"severity":1848,"references":1851,"versionKeys":1870,"packageCount":32,"repositoryCount":322},"ghsa-4xh5-x5gv-qwph-bdb101cb","pip's fallback tar extraction doesn't check symbolic links point to extraction directory",[1843,1844],"CVE-2025-8869","PYSEC-2026-1795",[121,1844],"2025-09-24T15:31:14Z","2026-09-10T03:50:27.949321787Z",[1849],{"type":1567,"score":1850},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1852,1854,1856,1858,1860,1862,1864,1866,1868],{"type":1475,"url":1853},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8869",{"type":1486,"url":1855},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13550",{"type":1480,"url":1857},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Ff2b92314da012b9fffa36b3f3e67748a37ef464a",{"type":1483,"url":1859},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip",{"type":1486,"url":1861},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00028.html",{"type":1486,"url":1863},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FIF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN",{"type":1486,"url":1865},"https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Fnews\u002F#v25-2",{"type":1483,"url":1867},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpip",{"type":1475,"url":1869},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xh5-x5gv-qwph",[1871,1872],"pypi:pip@22.0.2","pypi:pip@25.1.1",{"id":122,"slug":1874,"dossier":47,"summary":1875,"aliases":1876,"sourceIds":1879,"published":1880,"modified":1881,"checkedAt":7,"severity":1882,"references":1887,"versionKeys":1910,"packageCount":32,"repositoryCount":253},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1877,1878],"CVE-2026-4539","PYSEC-2026-2987",[122,1878],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[1883,1885],{"type":1471,"score":1884},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1567,"score":1886},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1888,1890,1892,1894,1896,1898,1900,1902,1904,1906,1908],{"type":1475,"url":1889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1486,"url":1891},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1486,"url":1893},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1486,"url":1895},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1483,"url":1897},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1486,"url":1899},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1486,"url":1901},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1486,"url":1903},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1486,"url":1905},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1483,"url":1907},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1475,"url":1909},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1911,1912],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":123,"slug":1914,"dossier":47,"summary":1915,"aliases":1916,"sourceIds":1919,"published":1920,"modified":1921,"checkedAt":7,"severity":1922,"references":1927,"versionKeys":1937,"packageCount":32,"repositoryCount":234},"ghsa-58cw-g322-p94v-a1eee673","Mistune has XSS via unescaped figclass\u002Ffigwidth in Figure directive",[1917,1918],"CVE-2026-44896","PYSEC-2026-168",[123,1918],"2026-05-08T23:43:12Z","2026-09-10T03:51:04.581184293Z",[1923,1925],{"type":1471,"score":1924},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":1567,"score":1926},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[1928,1930,1932,1934,1935],{"type":1475,"url":1929},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-58cw-g322-p94v",{"type":1475,"url":1931},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44896",{"type":1486,"url":1933},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fa3cb6e5655308797e8be021d6c7b5bab13cbace2",{"type":1483,"url":1520},{"type":1486,"url":1936},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-168.yaml",[1526,1527],{"id":124,"slug":1939,"dossier":47,"summary":1940,"aliases":1941,"sourceIds":1944,"published":1945,"modified":1946,"checkedAt":7,"severity":1947,"references":1950,"versionKeys":1963,"packageCount":32,"repositoryCount":322},"ghsa-58qw-9mgm-455v-d690efaf","pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files",[1942,1943],"CVE-2026-3219","PYSEC-2026-2875",[124,1943],"2026-04-20T18:31:48Z","2026-09-10T03:50:42.838011658Z",[1948],{"type":1567,"score":1949},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1951,1953,1955,1957,1958,1960,1961],{"type":1475,"url":1952},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3219",{"type":1486,"url":1954},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F13867",{"type":1486,"url":1956},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13870",{"type":1483,"url":1859},{"type":1486,"url":1959},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FQAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ",{"type":1483,"url":1867},{"type":1475,"url":1962},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58qw-9mgm-455v",[1871,1872],{"id":125,"slug":1965,"dossier":47,"summary":1966,"aliases":1967,"sourceIds":1971,"published":1972,"modified":1973,"checkedAt":7,"severity":1974,"references":1977,"versionKeys":1992,"packageCount":32,"repositoryCount":1763},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[1968,1969,1970],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[125,1970],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[1975],{"type":1471,"score":1976},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1978,1980,1982,1984,1986,1988,1990],{"type":1486,"url":1979},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":1475,"url":1981},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":1486,"url":1983},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":1480,"url":1985},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":1483,"url":1987},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":1483,"url":1989},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":1475,"url":1991},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[1993,1994,1995,1996,1997],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.32.0","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":126,"slug":1999,"dossier":92,"summary":2000,"aliases":2001,"sourceIds":2005,"published":2006,"modified":2007,"checkedAt":7,"severity":2008,"references":2010,"versionKeys":2020,"packageCount":32,"repositoryCount":1736},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[2002,2003,2004],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[126,2004],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[2009],{"type":1471,"score":1539},[2011,2013,2015,2016,2018,2019],{"type":1513,"url":2012},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1475,"url":2014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1480,"url":1719},{"type":1486,"url":2017},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1483,"url":1723},{"type":1475,"url":1725},[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":127,"slug":2022,"dossier":47,"summary":2023,"aliases":2024,"sourceIds":2028,"published":2029,"modified":2030,"checkedAt":7,"severity":2031,"references":2036,"versionKeys":2044,"packageCount":32,"repositoryCount":2045},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[2025,2026,2027],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[127,2027],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[2032,2034],{"type":1471,"score":2033},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":1567,"score":2035},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2037,2039,2041,2042],{"type":1475,"url":2038},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1475,"url":2040},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1483,"url":1723},{"type":1475,"url":2043},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1730,1731,1732,1733,1734],13,{"id":128,"slug":2047,"dossier":92,"summary":2048,"aliases":2049,"sourceIds":2053,"published":2054,"modified":2055,"checkedAt":7,"severity":2056,"references":2059,"versionKeys":2075,"packageCount":32,"repositoryCount":1736},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[2050,2051,2052],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[128,2052],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[2057],{"type":1567,"score":2058},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2060,2062,2064,2066,2068,2069,2071,2073],{"type":1486,"url":2061},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1475,"url":2063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1486,"url":2065},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1486,"url":2067},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1483,"url":1723},{"type":1486,"url":2070},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1483,"url":2072},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1475,"url":2074},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":129,"slug":2077,"dossier":47,"summary":2078,"aliases":2079,"sourceIds":2082,"published":2083,"modified":2084,"checkedAt":7,"severity":2085,"references":2088,"versionKeys":2111,"packageCount":32,"repositoryCount":234},"ghsa-6497-prx7-gpmq-2b8ee85d","geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure",[2080,2081],"CVE-2025-69662","PYSEC-2026-62",[129,2081],"2026-01-30T19:16:11.967Z","2026-06-10T17:01:18.172032507Z",[2086],{"type":1471,"score":2087},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2089,2091,2093,2095,2097,2099,2101,2103,2105,2107,2109],{"type":1475,"url":2090},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69662",{"type":1486,"url":2092},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fissues\u002F3679",{"type":1480,"url":2094},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fpull\u002F3681",{"type":1486,"url":2096},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Fcommit\u002F6aa8ef14ffdee4ba1044349ab948e1a1fbfaf419",{"type":1486,"url":2098},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas",{"type":1483,"url":2100},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas",{"type":1486,"url":2102},"https:\u002F\u002Fgithub.com\u002Fgeopandas\u002Fgeopandas\u002Freleases\u002Ftag\u002Fv1.1.2",{"type":1486,"url":2104},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgeopandas\u002FPYSEC-2026-62.yaml",{"type":1486,"url":2106},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00025.html",{"type":1513,"url":2108},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F27\u002Fsql-injection-geopandas\u002F",{"type":1475,"url":2110},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6497-prx7-gpmq",[2112],"pypi:geopandas@1.0.1",{"id":130,"slug":2114,"dossier":92,"summary":2115,"aliases":2116,"sourceIds":2119,"published":2120,"modified":2121,"checkedAt":7,"severity":2122,"references":2126,"versionKeys":2135,"packageCount":32,"repositoryCount":2140},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2117,2118],"CVE-2026-45409","PYSEC-2026-215",[130,2118],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[2123,2124],{"type":1471,"score":1655},{"type":1567,"score":2125},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2127,2129,2131,2133],{"type":1475,"url":2128},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1475,"url":2130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1483,"url":2132},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1486,"url":2134},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2136,2137,2138,2139],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",22,{"id":131,"slug":2142,"dossier":92,"summary":2143,"aliases":2144,"sourceIds":2148,"published":2149,"modified":2150,"checkedAt":7,"severity":2151,"references":2153,"versionKeys":2166,"packageCount":32,"repositoryCount":1736},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[2145,2146,2147],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[131,2147],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[2152],{"type":1471,"score":1539},[2154,2156,2158,2160,2162,2164,2165],{"type":1513,"url":2155},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1475,"url":2157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1480,"url":2159},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1480,"url":2161},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1486,"url":2163},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1483,"url":1723},{"type":1475,"url":2070},[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":132,"slug":2168,"dossier":47,"summary":2169,"aliases":2170,"sourceIds":2173,"published":2174,"modified":2175,"checkedAt":7,"severity":2176,"references":2179,"versionKeys":2192,"packageCount":32,"repositoryCount":322},"ghsa-6vgw-5pg2-w6jp-57c7d3f5","pip Path Traversal vulnerability",[2171,2172],"CVE-2026-1703","PYSEC-2026-1796",[132,2172],"2026-02-02T15:30:34Z","2026-09-10T03:50:34.266257578Z",[2177],{"type":1567,"score":2178},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2180,2182,2184,2186,2187,2189,2190],{"type":1475,"url":2181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1703",{"type":1486,"url":2183},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13777",{"type":1486,"url":2185},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F8e227a9be4faa9594e05d02ca05a413a2a4e7735",{"type":1483,"url":1859},{"type":1486,"url":2188},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FWIEA34D4TABF2UNQJAOMXKCICSPBE2DJ",{"type":1483,"url":1867},{"type":1475,"url":2191},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6vgw-5pg2-w6jp",[1871,1872],{"id":133,"slug":2194,"dossier":47,"summary":2195,"aliases":2196,"sourceIds":2199,"published":2200,"modified":2201,"checkedAt":7,"severity":2202,"references":2205,"versionKeys":2224,"packageCount":32,"repositoryCount":1763},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[2197,2198],"CVE-2025-71176","PYSEC-2026-1845",[133,2198],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[2203],{"type":1471,"score":2204},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[2206,2208,2210,2212,2214,2216,2218,2220,2222],{"type":1475,"url":2207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":1486,"url":2209},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":1486,"url":2211},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":1486,"url":2213},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":1483,"url":2215},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":1486,"url":2217},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":1486,"url":2219},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":1483,"url":2221},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":1475,"url":2223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[2225,2226,2227,2228,2229],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":134,"slug":2231,"dossier":47,"summary":2232,"aliases":2233,"sourceIds":2236,"published":2237,"modified":2238,"checkedAt":7,"severity":2239,"references":2242,"versionKeys":2255,"packageCount":32,"repositoryCount":1763},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[2234,2235],"CVE-2025-66034","PYSEC-2026-1389",[134,2235],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[2240],{"type":1471,"score":2241},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[2243,2245,2247,2249,2251,2253],{"type":1486,"url":2244},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":1475,"url":2246},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":1486,"url":2248},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":1483,"url":2250},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":1483,"url":2252},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":1475,"url":2254},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[2256,2257,2258,2259,2260,2261],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":135,"slug":2263,"dossier":47,"summary":2264,"aliases":2265,"sourceIds":2269,"published":2270,"modified":2271,"checkedAt":7,"severity":2272,"references":2279,"versionKeys":2291,"packageCount":32,"repositoryCount":273},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[2266,2267,2268],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[135,2267,2268],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[2273,2275,2277],{"type":1471,"score":2274},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":1471,"score":2276},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":1471,"score":2278},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2280,2282,2284,2285,2287,2289],{"type":1475,"url":2281},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":1486,"url":2283},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":1483,"url":1666},{"type":1486,"url":2286},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":1475,"url":2288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":1475,"url":2290},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[1670,1671,1672,1673],{"id":136,"slug":2293,"dossier":47,"summary":2294,"aliases":2295,"sourceIds":2298,"published":2299,"modified":2300,"checkedAt":7,"severity":2301,"references":2303,"versionKeys":2316,"packageCount":32,"repositoryCount":234},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[2296,2297],"CVE-2025-47287","PYSEC-2026-1974",[136,2297],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[2302],{"type":1471,"score":1539},[2304,2306,2308,2310,2311,2313,2314],{"type":1486,"url":2305},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":1475,"url":2307},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":1486,"url":2309},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":1483,"url":1666},{"type":1486,"url":2312},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":1483,"url":1695},{"type":1475,"url":2315},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[1670],{"id":137,"slug":2318,"dossier":47,"summary":2319,"aliases":2320,"sourceIds":2323,"published":2324,"modified":2325,"checkedAt":7,"severity":2326,"references":2329,"versionKeys":2336,"packageCount":32,"repositoryCount":234},"ghsa-7jqv-fw35-gmx9-d6bf4abd","nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding",[2321,2322],"CVE-2026-39378","PYSEC-2026-2230",[137,2322],"2026-04-21T01:16:06.073Z","2026-09-10T03:50:43.685983757Z",[2327],{"type":1471,"score":2328},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2330,2332,2334,2335],{"type":1475,"url":2331},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-7jqv-fw35-gmx9",{"type":1475,"url":2333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39378",{"type":1483,"url":1782},{"type":1486,"url":1784},[1786],{"id":138,"slug":2338,"dossier":47,"summary":2339,"aliases":2340,"sourceIds":2343,"published":2344,"modified":2345,"checkedAt":7,"severity":2346,"references":2348,"versionKeys":2357,"packageCount":32,"repositoryCount":1555},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[2341,2342],"CVE-2026-49477","PYSEC-2026-3072",[138,2342],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[2347],{"type":1471,"score":1539},[2349,2351,2352,2353,2355],{"type":1486,"url":2350},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1483,"url":1544},{"type":1483,"url":1546},{"type":1475,"url":2354},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1475,"url":2356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[1552,1553,1554],{"id":139,"slug":2359,"dossier":47,"summary":2360,"aliases":2361,"sourceIds":2363,"published":2364,"modified":2365,"checkedAt":7,"severity":2366,"references":2368,"versionKeys":2380,"packageCount":32,"repositoryCount":42},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[2362],"CVE-2026-91990",[139],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[2367],{"type":1567,"score":2125},[2369,2371,2373,2375,2377,2378],{"type":1486,"url":2370},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":1486,"url":2372},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":1486,"url":2374},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":1486,"url":2376},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":1483,"url":1666},{"type":1486,"url":2379},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[1670,1671,1672,1673,1674,1675],{"id":140,"slug":2382,"dossier":92,"summary":2383,"aliases":2384,"sourceIds":2387,"published":2388,"modified":2389,"checkedAt":7,"severity":2390,"references":2393,"versionKeys":2410,"packageCount":32,"repositoryCount":2140},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[2385,2386],"CVE-2026-97687","PYSEC-2026-4175",[140,2386],"2026-09-30T14:46:04Z","2026-10-01T17:55:53.793608550Z",[2391],{"type":1567,"score":2392},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2394,2396,2398,2400,2402,2404,2405,2407,2408],{"type":1486,"url":2395},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":1475,"url":2397},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":1486,"url":2399},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":1486,"url":2401},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":1486,"url":2403},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":1483,"url":1583},{"type":1486,"url":2406},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",{"type":1483,"url":1585},{"type":1475,"url":2409},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",[1587,1588,1589,1590,1591,2411,2412],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":141,"slug":2414,"dossier":47,"summary":2415,"aliases":2416,"sourceIds":2419,"published":2420,"modified":2421,"checkedAt":7,"severity":2422,"references":2424,"versionKeys":2435,"packageCount":32,"repositoryCount":234},"ghsa-8c25-4j27-2rv3-4e2c246a","Mistune: XSS via percent-encoded javascript URI bypass in safe_url()",[2417,2418],"CVE-2026-59923","PYSEC-2026-2211",[141,2418],"2026-07-08T17:17:27.910Z","2026-07-20T21:46:43.351006286Z",[2423],{"type":1471,"score":1924},[2425,2427,2429,2431,2432,2433],{"type":1513,"url":2426},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8c25-4j27-2rv3",{"type":1475,"url":2428},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59923",{"type":1480,"url":2430},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002Fc7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc",{"type":1483,"url":1520},{"type":1475,"url":1522},{"type":1486,"url":2434},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2211.yaml",[1526,1527],{"id":142,"slug":2437,"dossier":47,"summary":2438,"aliases":2439,"sourceIds":2442,"published":2443,"modified":2444,"checkedAt":7,"severity":2445,"references":2447,"versionKeys":2455,"packageCount":32,"repositoryCount":234},"ghsa-8g87-j6q8-g93x-2e837b39","Mistune Math Plugin has an XSS Escape Bypass",[2440,2441],"CVE-2026-44708","PYSEC-2026-2206",[142,2441],"2026-05-08T23:40:04Z","2026-09-10T03:51:04.993819302Z",[2446],{"type":1471,"score":1924},[2448,2450,2452,2453],{"type":1513,"url":2449},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8g87-j6q8-g93x",{"type":1475,"url":2451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44708",{"type":1483,"url":1520},{"type":1475,"url":2454},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Freleases\u002Ftag\u002Fv3.2.1",[1526,1527],{"id":143,"slug":2457,"dossier":47,"summary":2458,"aliases":2459,"sourceIds":2462,"published":2463,"modified":2464,"checkedAt":7,"severity":2465,"references":2468,"versionKeys":2480,"packageCount":32,"repositoryCount":234},"ghsa-8mp2-v27r-99xp-3e3baa33","Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input",[2460,2461],"CVE-2026-33079","PYSEC-2026-2651",[143,2461],"2026-05-06T16:52:43Z","2026-09-10T03:51:05.039110483Z",[2466],{"type":1567,"score":2467},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2469,2471,2473,2474,2476,2478],{"type":1486,"url":2470},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",{"type":1475,"url":2472},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33079",{"type":1483,"url":1520},{"type":1486,"url":2475},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fblob\u002Fdf23edd60b43b639d2e6760ef9dd3d618aa11c21\u002Fsrc\u002Fmistune\u002Fhelpers.py#L20-L25",{"type":1483,"url":2477},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmistune",{"type":1475,"url":2479},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8mp2-v27r-99xp",[1526,1527],{"id":144,"slug":2482,"dossier":47,"summary":2483,"aliases":2484,"sourceIds":2487,"published":2488,"modified":2489,"checkedAt":7,"severity":2490,"references":2492,"versionKeys":2503,"packageCount":32,"repositoryCount":234},"ghsa-8mpj-m6qm-5qr8-24abd1d9","Mistune directives\u002Finclude: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files",[2485,2486],"CVE-2026-59927","PYSEC-2026-2215",[144,2486],"2026-07-08T17:17:28.450Z","2026-07-20T21:30:45.969881443Z",[2491],{"type":1471,"score":1655},[2493,2495,2497,2499,2500,2501],{"type":1513,"url":2494},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpj-m6qm-5qr8",{"type":1475,"url":2496},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59927",{"type":1480,"url":2498},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F1bef343ade163fc3bb95572b15be720084cdb993",{"type":1483,"url":1520},{"type":1475,"url":1522},{"type":1486,"url":2502},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2215.yaml",[1526,1527],{"id":145,"slug":2505,"dossier":47,"summary":2506,"aliases":2507,"sourceIds":2508,"published":2509,"modified":2510,"checkedAt":7,"severity":2511,"references":2514,"versionKeys":2521,"packageCount":32,"repositoryCount":234},"ghsa-8rfp-98v4-mmr6-7ea7e5dd","Bleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output",[],[145],"2026-06-16T14:06:29Z","2026-09-10T03:50:49.026722271Z",[2512],{"type":1471,"score":2513},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:N",[2515,2517,2519],{"type":1486,"url":2516},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-8rfp-98v4-mmr6",{"type":1486,"url":2518},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=2023812",{"type":1483,"url":2520},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach",[2522],"pypi:bleach@6.2.0",{"id":146,"slug":2524,"dossier":92,"summary":2525,"aliases":2526,"sourceIds":2530,"published":2531,"modified":2532,"checkedAt":7,"severity":2533,"references":2535,"versionKeys":2545,"packageCount":32,"repositoryCount":1736},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[2527,2528,2529],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[146,2529],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[2534],{"type":1471,"score":1539},[2536,2538,2540,2541,2543,2544],{"type":1513,"url":2537},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1475,"url":2539},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1480,"url":1719},{"type":1486,"url":2542},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1483,"url":1723},{"type":1475,"url":1725},[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":147,"slug":2547,"dossier":47,"summary":2548,"aliases":2549,"sourceIds":2553,"published":2554,"modified":2555,"checkedAt":7,"severity":2556,"references":2559,"versionKeys":2574,"packageCount":32,"repositoryCount":273},"ghsa-94p9-xgh2-xp45-1ed45366","virtualenv: Downloaded seed wheels (pip\u002Fsetuptools) are not integrity-checked before use",[2550,2551,2552],"BIT-virtualenv-2026-102930","CVE-2026-102930","PYSEC-2026-4011",[147,2552],"2026-09-18T01:41:45Z","2026-10-06T15:26:06.490658879Z",[2557],{"type":1567,"score":2558},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2560,2562,2564,2566,2568,2570,2571,2573],{"type":1486,"url":2561},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-94p9-xgh2-xp45",{"type":1475,"url":2563},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102930",{"type":1486,"url":2565},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3251",{"type":1480,"url":2567},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa01ed3e2f239d6ab1fce62c5c7664ccf268fff6d",{"type":1486,"url":2569},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4011.yaml",{"type":1483,"url":1987},{"type":1486,"url":2572},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.12",{"type":1483,"url":1989},[1993,1994,1995,1996,1997,2575,2576,2577],"pypi:virtualenv@21.2.4","pypi:virtualenv@21.3.1","pypi:virtualenv@21.7.1",{"id":148,"slug":2579,"dossier":47,"summary":2580,"aliases":2581,"sourceIds":2585,"published":2586,"modified":2587,"checkedAt":7,"severity":2588,"references":2591,"versionKeys":2606,"packageCount":32,"repositoryCount":273},"ghsa-9h9j-4vrj-gf7g-c50a1cd4","virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection",[2582,2583,2584],"BIT-virtualenv-2026-102938","CVE-2026-102938","PYSEC-2026-4012",[148,2584],"2026-09-17T16:42:47Z","2026-10-06T15:25:56.172772842Z",[2589],{"type":1567,"score":2590},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2592,2594,2596,2598,2600,2602,2603,2605],{"type":1486,"url":2593},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-9h9j-4vrj-gf7g",{"type":1475,"url":2595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102938",{"type":1486,"url":2597},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3247",{"type":1480,"url":2599},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa30f995461043acb6cacbf3a890951563ccf7140",{"type":1486,"url":2601},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4012.yaml",{"type":1483,"url":1987},{"type":1486,"url":2604},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.11",{"type":1483,"url":1989},[1993,1994,1995,1996,1997,2575,2576,2577],{"id":149,"slug":2608,"dossier":47,"summary":2609,"aliases":2610,"sourceIds":2613,"published":2614,"modified":2615,"checkedAt":7,"severity":2616,"references":2619,"versionKeys":2638,"packageCount":32,"repositoryCount":1763},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2611,2612],"CVE-2024-47081","PYSEC-2026-1872",[149,2612],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2617],{"type":1471,"score":2618},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2620,2622,2624,2626,2628,2630,2632,2634,2636],{"type":1486,"url":2621},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1475,"url":2623},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1486,"url":2625},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1480,"url":2627},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1483,"url":2629},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1486,"url":2631},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1486,"url":2633},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1483,"url":2635},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1475,"url":2637},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2639,2640],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":150,"slug":2642,"dossier":92,"summary":2643,"aliases":2644,"sourceIds":2648,"published":2649,"modified":2650,"checkedAt":7,"severity":2651,"references":2653,"versionKeys":2666,"packageCount":32,"repositoryCount":1736},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[2645,2646,2647],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[150,2647],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[2652],{"type":1471,"score":1539},[2654,2656,2658,2660,2662,2664,2665],{"type":1513,"url":2655},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1475,"url":2657},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1480,"url":2659},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1480,"url":2661},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1486,"url":2663},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1483,"url":1723},{"type":1475,"url":2070},[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":151,"slug":2668,"dossier":47,"summary":2669,"aliases":2670,"sourceIds":2673,"published":2674,"modified":2675,"checkedAt":7,"severity":2676,"references":2679,"versionKeys":2696,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2671,2672],"CVE-2024-35195","PYSEC-2026-1873",[151,2672],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2677],{"type":1471,"score":2678},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2680,2682,2684,2686,2688,2689,2691,2693,2694],{"type":1486,"url":2681},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1475,"url":2683},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1486,"url":2685},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1480,"url":2687},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1483,"url":2629},{"type":1486,"url":2690},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1486,"url":2692},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1483,"url":2635},{"type":1475,"url":2695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2639],{"id":152,"slug":2698,"dossier":47,"summary":2699,"aliases":2700,"sourceIds":2702,"published":2703,"modified":2704,"checkedAt":7,"severity":2705,"references":2708,"versionKeys":2718,"packageCount":32,"repositoryCount":1677},"ghsa-c2m8-h5v5-343r-dd3a7510","Tornado: StaticFileHandler follows symlinks outside static root (path traversal)",[2701],"CVE-2026-103263",[152],"2026-09-30T23:48:55Z","2026-10-02T03:56:10.964622908Z",[2706],{"type":1567,"score":2707},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2709,2711,2712,2714,2716,2717],{"type":1486,"url":2710},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c2m8-h5v5-343r",{"type":1486,"url":1660},{"type":1486,"url":2713},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F437ab5f76565403b3403438d2e555d11f8128d32",{"type":1486,"url":2715},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Ff9f50b8bab265a2abf9f2415a3d2da6264a5450b",{"type":1483,"url":1666},{"type":1486,"url":1668},[1670,1671,1672,1673,1674,1675,1676],{"id":153,"slug":2720,"dossier":47,"summary":2721,"aliases":2722,"sourceIds":2725,"published":2726,"modified":2727,"checkedAt":7,"severity":2728,"references":2730,"versionKeys":2741,"packageCount":32,"repositoryCount":234},"ghsa-c8j7-8cv4-2xmq-1ef013c3","Mistune plugins\u002Fformatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough \u002F mark \u002F insert)",[2723,2724],"CVE-2026-59922","PYSEC-2026-2210",[153,2724],"2026-07-08T17:17:27.770Z","2026-07-20T21:46:39.999565306Z",[2729],{"type":1471,"score":1539},[2731,2733,2735,2737,2738,2739],{"type":1513,"url":2732},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-c8j7-8cv4-2xmq",{"type":1475,"url":2734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59922",{"type":1480,"url":2736},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F96d0f57f8fe9eeb06bb4cff521962a27d7c402e7",{"type":1483,"url":1520},{"type":1475,"url":1522},{"type":1486,"url":2740},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2210.yaml",[1526,1527],{"id":154,"slug":2743,"dossier":47,"summary":2744,"aliases":2745,"sourceIds":2748,"published":2749,"modified":2750,"checkedAt":7,"severity":2751,"references":2753,"versionKeys":2765,"packageCount":32,"repositoryCount":66},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[2746,2747],"CVE-2025-67725","PYSEC-2025-266",[154,2747],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[2752],{"type":1471,"score":1539},[2754,2756,2758,2760,2762,2763],{"type":1475,"url":2755},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":1475,"url":2757},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":1480,"url":2759},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":1486,"url":2761},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":1483,"url":1666},{"type":1475,"url":2764},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[1670,1671,1672],{"id":155,"slug":2767,"dossier":47,"summary":2768,"aliases":2769,"sourceIds":2773,"published":2774,"modified":2775,"checkedAt":7,"severity":2776,"references":2780,"versionKeys":2820,"packageCount":32,"repositoryCount":253},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2770,2771,2772],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[155,2772],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[2777,2779],{"type":1567,"score":2778},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1471,"score":1539},[2781,2783,2785,2787,2789,2791,2792,2794,2796,2798,2800,2802,2804,2806,2808,2810,2812,2814,2816,2818],{"type":1486,"url":2782},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1475,"url":2784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1486,"url":2786},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1486,"url":2788},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1486,"url":2790},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1483,"url":1723},{"type":1486,"url":2793},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1486,"url":2795},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1486,"url":2797},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1475,"url":2799},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1475,"url":2801},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1475,"url":2803},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1475,"url":2805},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1475,"url":2807},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1475,"url":2809},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1475,"url":2811},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1475,"url":2813},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1475,"url":2815},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1475,"url":2817},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1475,"url":2819},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1727,1728,1729,1730,1731,1732,1733],{"id":156,"slug":2822,"dossier":47,"summary":2823,"aliases":2824,"sourceIds":2826,"published":2827,"modified":2828,"checkedAt":7,"severity":2829,"references":2831,"versionKeys":2845,"packageCount":32,"repositoryCount":1677},"ghsa-chx6-46f5-w4vp-dd54bdb8","tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM",[2825],"CVE-2026-103262",[156],"2026-09-30T23:49:13Z","2026-10-02T03:56:11.819291984Z",[2830],{"type":1471,"score":1539},[2832,2834,2835,2837,2839,2841,2843,2844],{"type":1486,"url":2833},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-chx6-46f5-w4vp",{"type":1486,"url":1660},{"type":1486,"url":2836},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F15f056080d8e456f92cca8ad0c33e5a5480414ac",{"type":1486,"url":2838},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6564e0a0922c16f239d3a18adccd04736e380c89",{"type":1486,"url":2840},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Faa2eb0d989716ac00fe8d7a9919b81c1eccd6ec4",{"type":1486,"url":2842},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fe412435febba4569c552c5c9054f1bf92bd171a9",{"type":1483,"url":1666},{"type":1486,"url":1668},[1670,1671,1672,1673,1674,1675,1676],{"id":157,"slug":2847,"dossier":47,"summary":2848,"aliases":2849,"sourceIds":2852,"published":2853,"modified":2854,"checkedAt":7,"severity":2855,"references":2858,"versionKeys":2875,"packageCount":32,"repositoryCount":234},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2850,2851],"CVE-2025-27516","PYSEC-2026-1471",[157,2851],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2856],{"type":1567,"score":2857},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2859,2861,2863,2865,2867,2869,2871,2873],{"type":1486,"url":2860},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1475,"url":2862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1480,"url":2864},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1483,"url":2866},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1486,"url":2868},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1486,"url":2870},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1483,"url":2872},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1475,"url":2874},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2876,2877],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":158,"slug":2879,"dossier":47,"summary":2880,"aliases":2881,"sourceIds":2884,"published":2885,"modified":2886,"checkedAt":7,"severity":2887,"references":2890,"versionKeys":2901,"packageCount":32,"repositoryCount":273},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[2882,2883],"CVE-2026-49854","PYSEC-2026-3388",[158,2883],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[2888],{"type":1471,"score":2889},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2891,2893,2894,2896,2897,2899],{"type":1486,"url":2892},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":1483,"url":1666},{"type":1486,"url":2895},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":1483,"url":1695},{"type":1475,"url":2898},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":1475,"url":2900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[1670,1671,1672,1673,1674],{"id":159,"slug":2903,"dossier":47,"summary":2904,"aliases":2905,"sourceIds":2908,"published":2909,"modified":2910,"checkedAt":7,"severity":2911,"references":2913,"versionKeys":2924,"packageCount":32,"repositoryCount":234},"ghsa-ffq3-xpv3-j92q-22580948","Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions",[2906,2907],"CVE-2026-59928","PYSEC-2026-2216",[159,2907],"2026-07-08T17:17:28.600Z","2026-07-20T21:30:38.320453360Z",[2912],{"type":1471,"score":1539},[2914,2916,2918,2920,2921,2922],{"type":1513,"url":2915},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ffq3-xpv3-j92q",{"type":1475,"url":2917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59928",{"type":1480,"url":2919},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fcommit\u002F2b04d7ba341c16ac78fe82d3076bdd5c3de87c69",{"type":1483,"url":1520},{"type":1475,"url":1522},{"type":1486,"url":2923},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2216.yaml",[1526,1527],{"id":160,"slug":2926,"dossier":92,"summary":2927,"aliases":2928,"sourceIds":2932,"published":2933,"modified":2934,"checkedAt":7,"severity":2935,"references":2938,"versionKeys":2952,"packageCount":32,"repositoryCount":1736},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[2929,2930,2931],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[160,2931],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[2936],{"type":1471,"score":2937},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[2939,2941,2943,2945,2947,2948,2949,2950],{"type":1486,"url":2940},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1475,"url":2942},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1486,"url":2944},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1486,"url":2946},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1483,"url":1723},{"type":1486,"url":2070},{"type":1483,"url":2072},{"type":1475,"url":2951},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":161,"slug":2954,"dossier":47,"summary":2955,"aliases":2956,"sourceIds":2959,"published":2960,"modified":2961,"checkedAt":7,"severity":2962,"references":2965,"versionKeys":2984,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[2957,2958],"CVE-2024-34062","PYSEC-2026-1976",[161,2958],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[2963],{"type":1471,"score":2964},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2966,2968,2970,2972,2974,2976,2978,2980,2982],{"type":1486,"url":2967},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1475,"url":2969},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1486,"url":2971},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1483,"url":2973},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1486,"url":2975},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1486,"url":2977},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1486,"url":2979},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1483,"url":2981},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1475,"url":2983},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[2985],"pypi:tqdm@4.66.2",{"id":162,"slug":2987,"dossier":47,"summary":2988,"aliases":2989,"sourceIds":2992,"published":2993,"modified":2994,"checkedAt":7,"severity":2995,"references":2999,"versionKeys":3009,"packageCount":32,"repositoryCount":234},"ghsa-g97x-gvcm-x72h-ff087202","Mistune: XSS via unescaped class option in Admonition directive",[2990,2991],"CVE-2026-59926","PYSEC-2026-2214",[162,2991],"2026-07-08T17:17:28.323Z","2026-07-20T21:46:40.083797845Z",[2996,2998],{"type":1567,"score":2997},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1471,"score":1924},[3000,3002,3004,3005,3006,3007],{"type":1475,"url":3001},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-g97x-gvcm-x72h",{"type":1475,"url":3003},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59926",{"type":1480,"url":1933},{"type":1483,"url":1520},{"type":1475,"url":2454},{"type":1486,"url":3008},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2214.yaml",[1526,1527],{"id":163,"slug":3011,"dossier":92,"summary":3012,"aliases":3013,"sourceIds":3016,"published":3017,"modified":3018,"checkedAt":7,"severity":3019,"references":3024,"versionKeys":3034,"packageCount":32,"repositoryCount":3037},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3014,3015],"CVE-2026-25645","PYSEC-2026-2275",[163,3015],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[3020,3022],{"type":1471,"score":3021},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1471,"score":3023},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3025,3027,3029,3031,3032],{"type":1475,"url":3026},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1475,"url":3028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1480,"url":3030},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1483,"url":2629},{"type":1475,"url":3033},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2639,2640,3035,3036],"pypi:requests@2.32.4","pypi:requests@2.32.5",19,{"id":164,"slug":3039,"dossier":47,"summary":3040,"aliases":3041,"sourceIds":3044,"published":3045,"modified":3046,"checkedAt":7,"severity":3047,"references":3049,"versionKeys":3061,"packageCount":32,"repositoryCount":1555},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[3042,3043],"CVE-2026-97688","PYSEC-2026-4176",[164,3043],"2026-09-30T15:00:38Z","2026-10-01T17:55:40.608255720Z",[3048],{"type":1567,"score":2125},[3050,3052,3054,3056,3057,3058,3059],{"type":1486,"url":3051},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":1475,"url":3053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":1486,"url":3055},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":1483,"url":1583},{"type":1486,"url":2406},{"type":1483,"url":1585},{"type":1475,"url":3060},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",[2411,2412],{"id":165,"slug":3063,"dossier":47,"summary":3064,"aliases":3065,"sourceIds":3066,"published":3067,"modified":3068,"checkedAt":7,"severity":3069,"references":3071,"versionKeys":3077,"packageCount":32,"repositoryCount":234},"ghsa-gj48-438w-jh9v-02216692","Bleach clean() \u002F Cleaner() fails to sanitize dangerous URI schemes in allowed formaction attributes",[],[165],"2026-06-16T14:07:49Z","2026-09-10T03:50:49.646625202Z",[3070],{"type":1471,"score":1924},[3072,3074,3075],{"type":1486,"url":3073},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Fsecurity\u002Fadvisories\u002FGHSA-gj48-438w-jh9v",{"type":1483,"url":2520},{"type":1486,"url":3076},"https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fbleach\u002Freleases\u002Ftag\u002Fv6.4.0",[2522],{"id":166,"slug":3079,"dossier":47,"summary":3080,"aliases":3081,"sourceIds":3084,"published":3085,"modified":3086,"checkedAt":7,"severity":3087,"references":3089,"versionKeys":3102,"packageCount":32,"repositoryCount":284},"ghsa-gjv8-xp57-g29c-0bfb5cb1","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` \u002F `VALUE` selector sub-patterns",[3082,3083],"CVE-2026-86000","PYSEC-2026-4170",[166,3083],"2026-09-17T20:32:58Z","2026-10-01T17:56:08.291385035Z",[3088],{"type":1471,"score":1655},[3090,3092,3094,3096,3097,3099,3100],{"type":1486,"url":3091},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",{"type":1475,"url":3093},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-86000",{"type":1486,"url":3095},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fce44e4996e6632871c18cdd7a7fb641be8ef34ef",{"type":1483,"url":1544},{"type":1486,"url":3098},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.9",{"type":1483,"url":1546},{"type":1475,"url":3101},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",[1552,1553,1554,3103],"pypi:soupsieve@2.8.4",{"id":167,"slug":3105,"dossier":47,"summary":3106,"aliases":3107,"sourceIds":3110,"published":3111,"modified":3112,"checkedAt":7,"severity":3113,"references":3115,"versionKeys":3126,"packageCount":32,"repositoryCount":106},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3108,3109],"CVE-2025-66418","PYSEC-2026-1998",[167,3109],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[3114],{"type":1567,"score":1568},[3116,3118,3120,3122,3123,3124],{"type":1486,"url":3117},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1475,"url":3119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1480,"url":3121},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1483,"url":1583},{"type":1483,"url":1585},{"type":1475,"url":3125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1587,1588,1589,1590,1591],{"id":168,"slug":3128,"dossier":47,"summary":3129,"aliases":3130,"sourceIds":3133,"published":3134,"modified":3135,"checkedAt":7,"severity":3136,"references":3140,"versionKeys":3155,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3131,3132],"CVE-2024-56201","PYSEC-2026-1472",[168,3132],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[3137,3139],{"type":1471,"score":3138},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1567,"score":2857},[3141,3143,3145,3147,3149,3150,3152,3153],{"type":1486,"url":3142},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1475,"url":3144},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1486,"url":3146},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1480,"url":3148},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1483,"url":2866},{"type":1486,"url":3151},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1483,"url":2872},{"type":1475,"url":3154},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2876],{"id":169,"slug":3157,"dossier":47,"summary":3158,"aliases":3159,"sourceIds":3162,"published":3163,"modified":3164,"checkedAt":7,"severity":3165,"references":3167,"versionKeys":3188,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3160,3161],"CVE-2024-34064","PYSEC-2026-1474",[169,3161],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[3166],{"type":1471,"score":2274},[3168,3170,3172,3174,3175,3177,3179,3181,3183,3185,3186],{"type":1486,"url":3169},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1475,"url":3171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1480,"url":3173},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1483,"url":2866},{"type":1486,"url":3176},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1486,"url":3178},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1486,"url":3180},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1486,"url":3182},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1486,"url":3184},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1483,"url":2872},{"type":1475,"url":3187},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2876],{"id":170,"slug":3190,"dossier":47,"summary":3191,"aliases":3192,"sourceIds":3195,"published":3196,"modified":3197,"checkedAt":7,"severity":3198,"references":3200,"versionKeys":3212,"packageCount":32,"repositoryCount":284},"ghsa-j934-xhv5-fg8f-f3395fba","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace\u002Fcomment trimming regex `RE_WS_END` (triggers on VALID selectors)",[3193,3194],"CVE-2026-85999","PYSEC-2026-4171",[170,3194],"2026-09-17T20:32:53Z","2026-10-01T17:56:03.541286563Z",[3199],{"type":1471,"score":1655},[3201,3203,3205,3207,3208,3209,3210],{"type":1486,"url":3202},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",{"type":1475,"url":3204},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85999",{"type":1486,"url":3206},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fcf198fcddc9230f06ed39f974eba0ce076b85cda",{"type":1483,"url":1544},{"type":1486,"url":3098},{"type":1483,"url":1546},{"type":1475,"url":3211},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",[1552,1553,1554,3103],{"id":171,"slug":3214,"dossier":47,"summary":3215,"aliases":3216,"sourceIds":3219,"published":3220,"modified":3221,"checkedAt":7,"severity":3222,"references":3224,"versionKeys":3234,"packageCount":32,"repositoryCount":66},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[3217,3218],"CVE-2025-67726","PYSEC-2025-267",[171,3218],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[3223],{"type":1471,"score":1539},[3225,3227,3229,3230,3232,3233],{"type":1475,"url":3226},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":1475,"url":3228},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":1480,"url":2759},{"type":1486,"url":3231},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":1483,"url":1666},{"type":1475,"url":2764},[1670,1671,1672],{"id":172,"slug":3236,"dossier":92,"summary":3237,"aliases":3238,"sourceIds":3242,"published":3243,"modified":3244,"checkedAt":7,"severity":3245,"references":3247,"versionKeys":3261,"packageCount":32,"repositoryCount":1736},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[3239,3240,3241],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[172,3241],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[3246],{"type":1471,"score":1539},[3248,3250,3252,3254,3256,3257,3258,3259],{"type":1486,"url":3249},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1475,"url":3251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1486,"url":3253},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1486,"url":3255},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1483,"url":1723},{"type":1486,"url":2070},{"type":1483,"url":2072},{"type":1475,"url":3260},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":173,"slug":3263,"dossier":47,"summary":3264,"aliases":3265,"sourceIds":3268,"published":3269,"modified":3270,"checkedAt":7,"severity":3271,"references":3274,"versionKeys":3287,"packageCount":32,"repositoryCount":322},"ghsa-jp4c-xjxw-mgf9-e780c8d6","pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere",[3266,3267],"CVE-2026-6357","PYSEC-2026-2876",[173,3267],"2026-04-27T15:30:52Z","2026-09-10T03:50:44.656580653Z",[3272],{"type":1567,"score":3273},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3275,3277,3279,3281,3282,3284,3285],{"type":1475,"url":3276},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6357",{"type":1486,"url":3278},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13923",{"type":1486,"url":3280},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Fb369bfc96cc524e00c267e1693290e6599c36bad",{"type":1483,"url":1859},{"type":1486,"url":3283},"https:\u002F\u002Fichard26.github.io\u002Fblog\u002F2026\u002F04\u002Fwhats-new-in-pip-26.1\u002F#security-fixes",{"type":1483,"url":1867},{"type":1475,"url":3286},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp4c-xjxw-mgf9",[1871,1872],{"id":174,"slug":3289,"dossier":47,"summary":3290,"aliases":3291,"sourceIds":3294,"published":3295,"modified":3296,"checkedAt":7,"severity":3297,"references":3302,"versionKeys":3315,"packageCount":32,"repositoryCount":32},"ghsa-jw8x-6495-233v-cb32b711","scikit-learn sensitive data leakage vulnerability",[3292,3293],"CVE-2024-5206","PYSEC-2024-110",[174,3293],"2024-06-06T19:16:00Z","2026-09-10T03:50:15.628224747Z",[3298,3300],{"type":1471,"score":3299},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1471,"score":3301},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3303,3305,3307,3309,3311,3313],{"type":1475,"url":3304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5206",{"type":1480,"url":3306},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn\u002Fcommit\u002F70ca21f106b603b611da73012c9ade7cd8e438b8",{"type":1486,"url":3308},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fscikit-learn\u002FPYSEC-2024-110.yaml",{"type":1483,"url":3310},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn",{"type":1486,"url":3312},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F14bc0917-a85b-4106-a170-d09d5191517c",{"type":1475,"url":3314},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw8x-6495-233v",[3316],"pypi:scikit-learn@1.3.2",{"id":175,"slug":3318,"dossier":47,"summary":3319,"aliases":3320,"sourceIds":3323,"published":3324,"modified":3325,"checkedAt":7,"severity":3326,"references":3329,"versionKeys":3337,"packageCount":32,"repositoryCount":322},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[3321,3322],"CVE-2026-44432","PYSEC-2026-142",[175,3322],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[3327,3328],{"type":1471,"score":1539},{"type":1567,"score":1568},[3330,3332,3334,3336],{"type":1475,"url":3331},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1475,"url":3333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1486,"url":3335},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1483,"url":1583},[2411],{"id":176,"slug":3339,"dossier":47,"summary":3340,"aliases":3341,"sourceIds":3344,"published":3345,"modified":3346,"checkedAt":7,"severity":3347,"references":3350,"versionKeys":3363,"packageCount":32,"repositoryCount":2045},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[3342,3343],"CVE-2026-28684","PYSEC-2026-2270",[176,3343],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[3348],{"type":1471,"score":3349},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3351,3353,3355,3357,3359,3361],{"type":1480,"url":3352},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1475,"url":3354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1480,"url":3356},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1486,"url":3358},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1483,"url":3360},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1475,"url":3362},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[3364,3365,3366,3367],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":177,"slug":3369,"dossier":47,"summary":3370,"aliases":3371,"sourceIds":3374,"published":3375,"modified":3376,"checkedAt":7,"severity":3377,"references":3379,"versionKeys":3388,"packageCount":32,"repositoryCount":273},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[3372,3373],"CVE-2026-49855","PYSEC-2026-3389",[177,3373],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[3378],{"type":1471,"score":1539},[3380,3382,3383,3384,3386],{"type":1486,"url":3381},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":1483,"url":1666},{"type":1483,"url":1695},{"type":1475,"url":3385},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":1475,"url":3387},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[1670,1671,1672,1673,1674],{"id":178,"slug":3390,"dossier":47,"summary":3391,"aliases":3392,"sourceIds":3395,"published":3396,"modified":3397,"checkedAt":7,"severity":3398,"references":3400,"versionKeys":3413,"packageCount":32,"repositoryCount":42},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[3393,3394],"CVE-2026-82397","PYSEC-2026-3928",[178,3394],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[3399],{"type":1471,"score":1539},[3401,3403,3405,3406,3408,3409,3410,3411],{"type":1486,"url":3402},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":1475,"url":3404},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":1486,"url":2372},{"type":1486,"url":3407},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":1483,"url":1666},{"type":1486,"url":2379},{"type":1483,"url":1695},{"type":1475,"url":3412},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[1670,1671,1672,1673,1674,1675],{"id":179,"slug":3415,"dossier":47,"summary":3416,"aliases":3417,"sourceIds":3420,"published":3421,"modified":3422,"checkedAt":7,"severity":3423,"references":3429,"versionKeys":3456,"packageCount":32,"repositoryCount":32},"ghsa-mq26-g339-26xf-ed024c7e","Command Injection in pip when used with Mercurial",[3418,3419],"CVE-2023-5752","PYSEC-2023-228",[179,3419],"2023-10-25T18:17:00Z","2026-09-10T03:50:03.949904915Z",[3424,3425,3427],{"type":1471,"score":3023},{"type":1567,"score":3426},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1471,"score":3428},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3430,3432,3434,3436,3438,3439,3440,3442,3444,3446,3448,3450,3452,3454],{"type":1475,"url":3431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-5752",{"type":1480,"url":3433},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F12306",{"type":1486,"url":3435},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F389cb799d0da9a840749fcd14878928467ed49b4",{"type":1486,"url":3437},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2023-228.yaml",{"type":1483,"url":1859},{"type":1486,"url":1861},{"type":1486,"url":3441},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F622OZXWG72ISQPLM5Y57YCVIMWHD4C3U",{"type":1486,"url":3443},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH",{"type":1486,"url":3445},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFXUVMJM25PUAZRQZBF54OFVKTY3MINPW",{"type":1486,"url":3447},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E",{"type":1486,"url":3449},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ",{"type":1486,"url":3451},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL",{"type":1475,"url":3453},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL\u002F",{"type":1475,"url":3455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq26-g339-26xf",[1871],{"id":180,"slug":3458,"dossier":47,"summary":3459,"aliases":3460,"sourceIds":3464,"published":3465,"modified":3466,"checkedAt":7,"severity":3467,"references":3470,"versionKeys":3485,"packageCount":32,"repositoryCount":273},"ghsa-p58f-9548-mpm2-3c2c8280","virtualenv bash and fish activation scripts execute commands embedded in paths",[3461,3462,3463],"BIT-virtualenv-2026-102925","CVE-2026-102925","PYSEC-2026-4013",[180,3463],"2026-09-18T04:37:14Z","2026-10-06T15:25:40.633713827Z",[3468],{"type":1471,"score":3469},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3471,3473,3475,3477,3479,3481,3482,3484],{"type":1486,"url":3472},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-p58f-9548-mpm2",{"type":1475,"url":3474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102925",{"type":1486,"url":3476},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3252",{"type":1480,"url":3478},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",{"type":1486,"url":3480},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4013.yaml",{"type":1483,"url":1987},{"type":1486,"url":3483},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.13",{"type":1483,"url":1989},[1993,1994,1995,1996,1997,2575,2576,2577],{"id":181,"slug":3487,"dossier":47,"summary":3488,"aliases":3489,"sourceIds":3493,"published":3494,"modified":3495,"checkedAt":7,"severity":3496,"references":3499,"versionKeys":3512,"packageCount":32,"repositoryCount":1555},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[3490,3491,3492],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[181,3492],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[3497,3498],{"type":1471,"score":1655},{"type":1471,"score":1539},[3500,3502,3504,3506,3508,3510,3511],{"type":1513,"url":3501},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1475,"url":3503},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1480,"url":3505},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1480,"url":3507},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1486,"url":3509},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1483,"url":1723},{"type":1475,"url":2070},[1732,1733,1734,1735],{"id":182,"slug":3514,"dossier":92,"summary":3515,"aliases":3516,"sourceIds":3520,"published":3521,"modified":3522,"checkedAt":7,"severity":3523,"references":3525,"versionKeys":3536,"packageCount":32,"repositoryCount":1736},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[3517,3518,3519],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[182,3519],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[3524],{"type":1471,"score":1539},[3526,3528,3530,3532,3534,3535],{"type":1513,"url":3527},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1475,"url":3529},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1480,"url":3531},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1486,"url":3533},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1483,"url":1723},{"type":1475,"url":1725},[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":183,"slug":3538,"dossier":47,"summary":3539,"aliases":3540,"sourceIds":3543,"published":3544,"modified":3545,"checkedAt":7,"severity":3546,"references":3548,"versionKeys":3560,"packageCount":32,"repositoryCount":1763},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3541,3542],"CVE-2025-50181","PYSEC-2026-1999",[183,3542],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[3547],{"type":1471,"score":1748},[3549,3551,3553,3555,3556,3557,3558],{"type":1486,"url":3550},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1475,"url":3552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1480,"url":3554},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1483,"url":1583},{"type":1486,"url":1758},{"type":1483,"url":1585},{"type":1475,"url":3559},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1587,1588,1589,1590],{"id":184,"slug":3562,"dossier":47,"summary":3563,"aliases":3564,"sourceIds":3567,"published":3568,"modified":3569,"checkedAt":7,"severity":3570,"references":3573,"versionKeys":3584,"packageCount":32,"repositoryCount":66},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[3565,3566],"CVE-2025-67724","PYSEC-2025-265",[184,3566],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[3571,3572],{"type":1471,"score":2274},{"type":1471,"score":1924},[3574,3576,3578,3580,3582,3583],{"type":1475,"url":3575},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":1475,"url":3577},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":1480,"url":3579},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":1486,"url":3581},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":1483,"url":1666},{"type":1475,"url":2764},[1670,1671,1672],{"id":185,"slug":3586,"dossier":47,"summary":3587,"aliases":3588,"sourceIds":3590,"published":3591,"modified":3592,"checkedAt":7,"severity":3593,"references":3596,"versionKeys":3600,"packageCount":32,"repositoryCount":273},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[3589],"CVE-2026-91992",[185],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[3594],{"type":1471,"score":3595},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3597,3599],{"type":1486,"url":3598},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":1483,"url":1666},[1670,1671,1672,1673,1674],{"id":186,"slug":3602,"dossier":47,"summary":3603,"aliases":3604,"sourceIds":3608,"published":3609,"modified":3610,"checkedAt":7,"severity":3611,"references":3614,"versionKeys":3626,"packageCount":32,"repositoryCount":106},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[3605,3606,3607],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[186,3607],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[3612,3613],{"type":1567,"score":2778},{"type":1471,"score":3469},[3615,3616,3618,3620,3622,3624,3625],{"type":1486,"url":2782},{"type":1480,"url":3617},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1475,"url":3619},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1480,"url":3621},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1480,"url":3623},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1483,"url":1723},{"type":1475,"url":2043},[1727,1728,1729,1730,1731,1732,1733,1734],{"id":187,"slug":3628,"dossier":47,"summary":3629,"aliases":3630,"sourceIds":3633,"published":3634,"modified":3635,"checkedAt":7,"severity":3636,"references":3640,"versionKeys":3653,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[3631,3632],"CVE-2024-56326","PYSEC-2026-1475",[187,3632],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[3637,3639],{"type":1471,"score":3638},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1567,"score":2857},[3641,3643,3645,3647,3648,3649,3650,3651],{"type":1486,"url":3642},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1475,"url":3644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1480,"url":3646},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1483,"url":2866},{"type":1486,"url":3151},{"type":1486,"url":2868},{"type":1483,"url":2872},{"type":1475,"url":3652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2876],{"id":188,"slug":3655,"dossier":92,"summary":3656,"aliases":3657,"sourceIds":3660,"published":3661,"modified":3662,"checkedAt":7,"severity":3663,"references":3667,"versionKeys":3673,"packageCount":32,"repositoryCount":3037},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[3658,3659],"CVE-2026-44431","PYSEC-2026-141",[188,3659],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[3664,3666],{"type":1471,"score":3665},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1567,"score":2707},[3668,3670,3672],{"type":1475,"url":3669},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1475,"url":3671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1483,"url":1583},[1587,1588,1589,1590,1591,2411],{"id":189,"slug":3675,"dossier":47,"summary":3676,"aliases":3677,"sourceIds":3680,"published":3681,"modified":3682,"checkedAt":7,"severity":3683,"references":3686,"versionKeys":3701,"packageCount":32,"repositoryCount":234},"ghsa-qcq2-496w-v96p-f873dd58","Mistune: Potential DoS via quadratic-time parsing in parse_link_text",[3678,3679],"CVE-2026-49851","PYSEC-2026-2652",[189,3679],"2026-07-09T23:52:27Z","2026-09-10T03:51:11.807497442Z",[3684,3685],{"type":1471,"score":1539},{"type":1567,"score":2467},[3687,3689,3691,3693,3695,3696,3698,3699],{"type":1486,"url":3688},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",{"type":1475,"url":3690},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49851",{"type":1486,"url":3692},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49851",{"type":1486,"url":3694},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492304",{"type":1483,"url":1520},{"type":1486,"url":3697},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49851.json",{"type":1483,"url":2477},{"type":1475,"url":3700},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qcq2-496w-v96p",[1526,1527],{"id":190,"slug":3703,"dossier":47,"summary":3704,"aliases":3705,"sourceIds":3708,"published":3709,"modified":3710,"checkedAt":7,"severity":3711,"references":3713,"versionKeys":3723,"packageCount":32,"repositoryCount":234},"ghsa-qfrw-5rxm-mhh2-586619d0","Mistune renderers\u002Fhtml.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution",[3706,3707],"CVE-2026-59929","PYSEC-2026-2217",[190,3707],"2026-07-08T17:17:28.737Z","2026-07-20T21:46:41.246867209Z",[3712],{"type":1471,"score":1924},[3714,3716,3718,3719,3720,3721],{"type":1513,"url":3715},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-qfrw-5rxm-mhh2",{"type":1475,"url":3717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59929",{"type":1480,"url":2430},{"type":1483,"url":1520},{"type":1475,"url":1522},{"type":1486,"url":3722},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2217.yaml",[1526,1527],{"id":191,"slug":3725,"dossier":47,"summary":3726,"aliases":3727,"sourceIds":3730,"published":3731,"modified":3732,"checkedAt":7,"severity":3733,"references":3736,"versionKeys":3749,"packageCount":32,"repositoryCount":273},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[3728,3729],"CVE-2026-31958","PYSEC-2026-140",[191,3729],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[3734,3735],{"type":1471,"score":1539},{"type":1567,"score":2467},[3737,3739,3741,3743,3745,3746,3747],{"type":1475,"url":3738},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":1475,"url":3740},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":1486,"url":3742},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":1486,"url":3744},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":1483,"url":1666},{"type":1486,"url":2286},{"type":1486,"url":3748},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[1670,1671,1672,1673],{"id":192,"slug":3751,"dossier":47,"summary":3752,"aliases":3753,"sourceIds":3756,"published":3757,"modified":3758,"checkedAt":7,"severity":3759,"references":3762,"versionKeys":3777,"packageCount":32,"repositoryCount":3782},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[3754,3755],"CVE-2026-22701","PYSEC-2026-1374",[192,3755],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[3760],{"type":1471,"score":3761},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3763,3765,3767,3769,3771,3773,3775],{"type":1486,"url":3764},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1475,"url":3766},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1486,"url":3768},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1486,"url":3770},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1483,"url":3772},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1483,"url":3774},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1475,"url":3776},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[3778,3779,3780,3781],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",14,{"id":193,"slug":3784,"dossier":47,"summary":3785,"aliases":3786,"sourceIds":3789,"published":3790,"modified":3791,"checkedAt":7,"severity":3792,"references":3796,"versionKeys":3812,"packageCount":32,"repositoryCount":322},"ghsa-qwm4-qh6w-59xr-db792663","pip would incorrectly handle doubly-encoded package URLs from indexes",[3787,3788],"CVE-2026-13346","PYSEC-2026-3721",[193,3788],"2026-07-29T19:16:44.267Z","2026-09-10T11:15:08.939447160Z",[3793,3795],{"type":1567,"score":3794},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1471,"score":1775},[3797,3799,3801,3803,3805,3806,3808,3810],{"type":1475,"url":3798},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-13346",{"type":1480,"url":3800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14110",{"type":1486,"url":3802},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F10dfb6b9005484578b386f64b9f36982e3dc6679",{"type":1486,"url":3804},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-3721.yaml",{"type":1483,"url":1859},{"type":1486,"url":3807},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FL2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX",{"type":1475,"url":3809},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FL2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX\u002F",{"type":1475,"url":3811},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qwm4-qh6w-59xr",[1871,1872],{"id":194,"slug":3814,"dossier":47,"summary":3815,"aliases":3816,"sourceIds":3819,"published":3820,"modified":3821,"checkedAt":7,"severity":3822,"references":3824,"versionKeys":3834,"packageCount":32,"repositoryCount":234},"ghsa-r4rv-85jg-w4mf-c97959dd","Mistune: Arbitrary File Read via Include directive path traversal",[3817,3818],"CVE-2026-59924","PYSEC-2026-2212",[194,3818],"2026-07-08T17:17:28.050Z","2026-07-20T21:46:41.298212805Z",[3823],{"type":1471,"score":3595},[3825,3827,3829,3830,3831,3832],{"type":1513,"url":3826},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-r4rv-85jg-w4mf",{"type":1475,"url":3828},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59924",{"type":1480,"url":2498},{"type":1483,"url":1520},{"type":1475,"url":1522},{"type":1486,"url":3833},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmistune\u002FPYSEC-2026-2212.yaml",[1526,1527],{"id":195,"slug":3836,"dossier":47,"summary":3837,"aliases":3838,"sourceIds":3842,"published":3843,"modified":3844,"checkedAt":7,"severity":3845,"references":3848,"versionKeys":3862,"packageCount":32,"repositoryCount":106},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[3839,3840,3841],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[195,3841],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[3846,3847],{"type":1471,"score":2033},{"type":1567,"score":2035},[3849,3851,3853,3855,3857,3858,3859,3860],{"type":1486,"url":3850},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1475,"url":3852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1486,"url":3854},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1486,"url":3856},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1483,"url":1723},{"type":1486,"url":2043},{"type":1483,"url":2072},{"type":1475,"url":3861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1727,1728,1729,1730,1731,1732,1733,1734],{"id":196,"slug":3864,"dossier":47,"summary":3865,"aliases":3866,"sourceIds":3869,"published":3870,"modified":3871,"checkedAt":7,"severity":3872,"references":3874,"versionKeys":3881,"packageCount":32,"repositoryCount":234},"ghsa-v87v-83h2-53w7-36afb5ef","Mistune Heading ID Attribute has Injection XSS",[3867,3868],"CVE-2026-44897","PYSEC-2026-2207",[196,3868],"2026-05-09T00:13:12Z","2026-09-10T03:50:47.725920177Z",[3873],{"type":1471,"score":1924},[3875,3877,3879,3880],{"type":1513,"url":3876},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-v87v-83h2-53w7",{"type":1475,"url":3878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44897",{"type":1483,"url":1520},{"type":1475,"url":2454},[1526,1527],{"id":197,"slug":3883,"dossier":47,"summary":3884,"aliases":3885,"sourceIds":3888,"published":3889,"modified":3890,"checkedAt":7,"severity":3891,"references":3894,"versionKeys":3908,"packageCount":32,"repositoryCount":1555},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[3886,3887],"CVE-2026-41066","PYSEC-2026-87",[197,3887],"2026-04-21T20:38:44Z","2026-09-10T03:51:03.302383702Z",[3892],{"type":1471,"score":3893},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3895,3897,3899,3902,3904,3906],{"type":1475,"url":3896},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":1475,"url":3898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3900,"url":3901},"REPORT","https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":1483,"url":3903},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":1486,"url":3905},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":1486,"url":3907},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[3909,3910,3911],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":198,"slug":3913,"dossier":92,"summary":3914,"aliases":3915,"sourceIds":3919,"published":3920,"modified":3921,"checkedAt":7,"severity":3922,"references":3924,"versionKeys":3938,"packageCount":32,"repositoryCount":1736},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[3916,3917,3918],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[198,3918],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[3923],{"type":1567,"score":2467},[3925,3927,3929,3931,3933,3934,3935,3936],{"type":1486,"url":3926},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1475,"url":3928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1486,"url":3930},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1486,"url":3932},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1483,"url":1723},{"type":1486,"url":2070},{"type":1483,"url":2072},{"type":1475,"url":3937},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":199,"slug":3940,"dossier":92,"summary":3941,"aliases":3942,"sourceIds":3945,"published":3946,"modified":3947,"checkedAt":7,"severity":3948,"references":3950,"versionKeys":3962,"packageCount":32,"repositoryCount":2140},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[3943,3944],"CVE-2026-97689","PYSEC-2026-4177",[199,3944],"2026-09-30T14:46:18Z","2026-10-01T17:55:57.514829071Z",[3949],{"type":1567,"score":1568},[3951,3953,3955,3957,3958,3959,3960],{"type":1486,"url":3952},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":1475,"url":3954},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":1486,"url":3956},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":1483,"url":1583},{"type":1486,"url":2406},{"type":1483,"url":1585},{"type":1475,"url":3961},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",[1587,1588,1589,1590,1591,2411,2412],{"id":200,"slug":3964,"dossier":47,"summary":3965,"aliases":3966,"sourceIds":3969,"published":3970,"modified":3971,"checkedAt":7,"severity":3972,"references":3975,"versionKeys":3992,"packageCount":32,"repositoryCount":3782},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[3967,3968],"CVE-2025-68146","PYSEC-2026-1375",[200,3968],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[3973],{"type":1471,"score":3974},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3976,3978,3980,3981,3983,3985,3987,3988,3990],{"type":1486,"url":3977},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1486,"url":3979},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1483,"url":3772},{"type":1486,"url":3982},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1486,"url":3984},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1486,"url":3986},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1483,"url":3774},{"type":1475,"url":3989},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1475,"url":3991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[3778,3779,3780,3781],{"id":201,"slug":3994,"dossier":47,"summary":3995,"aliases":3996,"sourceIds":3999,"published":4000,"modified":4001,"checkedAt":7,"severity":4002,"references":4008,"versionKeys":4044,"packageCount":32,"repositoryCount":322},"ghsa-wf93-45jw-7689-98dc514d","pip: Path traversal in console_scripts\u002Fgui_scripts entry point names allows installing scripts outside of target directory",[3997,3998],"CVE-2026-8643","PYSEC-2026-196",[201,3998],"2026-06-01T17:17:35.770Z","2026-09-10T03:51:09.636289073Z",[4003,4005,4007],{"type":1471,"score":4004},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1567,"score":4006},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1471,"score":3023},[4009,4011,4013,4015,4017,4019,4021,4023,4025,4027,4029,4031,4033,4035,4037,4039,4040,4042],{"type":1475,"url":4010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8643",{"type":1480,"url":4012},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14000",{"type":1486,"url":4014},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:33313",{"type":1486,"url":4016},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34776",{"type":1486,"url":4018},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34777",{"type":1486,"url":4020},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34778",{"type":1486,"url":4022},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34780",{"type":1486,"url":4024},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34891",{"type":1486,"url":4026},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36193",{"type":1486,"url":4028},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36315",{"type":1486,"url":4030},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1486,"url":4032},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37283",{"type":1486,"url":4034},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8643",{"type":1486,"url":4036},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2460927",{"type":1486,"url":4038},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-196.yaml",{"type":1483,"url":1859},{"type":1475,"url":4041},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FYV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ\u002F",{"type":1475,"url":4043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf93-45jw-7689",[1871,1872],{"id":202,"slug":4046,"dossier":47,"summary":4047,"aliases":4048,"sourceIds":4052,"published":4053,"modified":4054,"checkedAt":7,"severity":4055,"references":4058,"versionKeys":4096,"packageCount":32,"repositoryCount":106},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[4049,4050,4051],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[202,4051],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[4056,4057],{"type":1471,"score":1539},{"type":1567,"score":2467},[4059,4061,4063,4065,4067,4068,4070,4072,4074,4076,4078,4080,4081,4083,4085,4087,4088,4090,4092,4094],{"type":1486,"url":4060},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1475,"url":4062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1486,"url":4064},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1486,"url":4066},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1483,"url":1723},{"type":1486,"url":4069},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1486,"url":4071},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1486,"url":4073},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1475,"url":4075},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1475,"url":4077},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1475,"url":4079},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1475,"url":2805},{"type":1475,"url":4082},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1475,"url":4084},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1475,"url":4086},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1475,"url":2807},{"type":1475,"url":4089},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1475,"url":4091},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1475,"url":4093},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1475,"url":4095},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1727,1728,1729,1730,1731,1732,1733,1734],{"id":203,"slug":4098,"dossier":47,"summary":4099,"aliases":4100,"sourceIds":4104,"published":4105,"modified":4106,"checkedAt":7,"severity":4107,"references":4110,"versionKeys":4119,"packageCount":32,"repositoryCount":106},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[4101,4102,4103],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[203,4103],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[4108,4109],{"type":1471,"score":2033},{"type":1567,"score":2035},[4111,4113,4115,4117,4118],{"type":1475,"url":4112},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1475,"url":4114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1486,"url":4116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1483,"url":1723},{"type":1475,"url":2043},[1727,1728,1729,1730,1731,1732,1733,1734],{"id":204,"slug":4121,"dossier":47,"summary":4122,"aliases":4123,"sourceIds":4125,"published":4126,"modified":4127,"checkedAt":7,"severity":4128,"references":4131,"versionKeys":4143,"packageCount":32,"repositoryCount":234},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[4124],"CVE-2026-91991",[204],"2026-09-01T20:17:23Z","2026-09-16T03:56:00.367681644Z",[4129],{"type":1567,"score":4130},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4132,4134,4135,4137,4139,4141,4142],{"type":1486,"url":4133},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":1486,"url":2372},{"type":1486,"url":4136},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":1486,"url":4138},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":1486,"url":4140},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":1483,"url":1666},{"type":1486,"url":2379},[1674,1675],{"id":205,"slug":4145,"dossier":47,"summary":4146,"aliases":4147,"sourceIds":4151,"published":2554,"modified":4152,"checkedAt":7,"severity":4153,"references":4156,"versionKeys":4170,"packageCount":32,"repositoryCount":273},"ghsa-x78j-v8h9-3j2q-0741325d","virtualenv: Command injection via --prompt in activate.bat (batch activator)",[4148,4149,4150],"BIT-virtualenv-2026-102937","CVE-2026-102937","PYSEC-2026-4014",[205,4150],"2026-10-06T15:26:00.196757436Z",[4154],{"type":1567,"score":4155},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4157,4159,4161,4163,4165,4167,4168,4169],{"type":1486,"url":4158},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-x78j-v8h9-3j2q",{"type":1475,"url":4160},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102937",{"type":1486,"url":4162},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3250",{"type":1480,"url":4164},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd721ff140ce4afdc2a9b76751e4584e25d9fbea6",{"type":1486,"url":4166},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4014.yaml",{"type":1483,"url":1987},{"type":1486,"url":2572},{"type":1483,"url":1989},[1993,1994,1995,1996,1997,2575,2576,2577],{"id":206,"slug":4172,"dossier":47,"summary":4173,"aliases":4174,"sourceIds":4178,"published":4179,"modified":4180,"checkedAt":7,"severity":4181,"references":4184,"versionKeys":4198,"packageCount":32,"repositoryCount":303},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[4175,4176,4177],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[206,4177],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[4182],{"type":1471,"score":4183},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4185,4187,4189,4191,4193,4195,4196],{"type":1475,"url":4186},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1475,"url":4188},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1486,"url":4190},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1480,"url":4192},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1486,"url":4194},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1483,"url":1723},{"type":1486,"url":4197},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1730],{"id":207,"slug":4200,"dossier":92,"summary":4201,"aliases":4202,"sourceIds":4206,"published":4207,"modified":4208,"checkedAt":7,"severity":4209,"references":4212,"versionKeys":4223,"packageCount":32,"repositoryCount":1736},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[4203,4204,4205],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[207,4205],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[4210],{"type":1471,"score":4211},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4213,4215,4217,4219,4221,4222],{"type":1513,"url":4214},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1475,"url":4216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1480,"url":4218},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1480,"url":4220},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1483,"url":1723},{"type":1475,"url":2070},[1727,1728,1729,1730,1731,1732,1733,1734,1735],{"id":208,"slug":4225,"dossier":47,"summary":4226,"aliases":4227,"sourceIds":4230,"published":4231,"modified":4232,"checkedAt":7,"severity":4233,"references":4236,"versionKeys":4256,"packageCount":32,"repositoryCount":234},"ghsa-xm59-rqc7-hhvf-9413791b","nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows",[4228,4229],"CVE-2025-53000","PYSEC-2026-1691",[208,4229],"2025-12-18T22:03:08Z","2026-09-10T03:50:32.307876772Z",[4234],{"type":1567,"score":4235},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4237,4239,4241,4243,4245,4246,4248,4250,4252,4254],{"type":1486,"url":4238},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fsecurity\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",{"type":1475,"url":4240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53000",{"type":1486,"url":4242},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fissues\u002F2258",{"type":1486,"url":4244},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fcommit\u002Fc9ac1d1040459ed1ff9eb34e9918ce5a87cf9d71",{"type":1483,"url":1782},{"type":1486,"url":4247},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Fblob\u002F4f61702f5c7524d8a3c4ac0d5fc33a6ac2fa36a7\u002Fnbconvert\u002Fpreprocessors\u002Fsvg2pdf.py#L104",{"type":1486,"url":4249},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fnbconvert\u002Freleases\u002Ftag\u002Fv7.17.0",{"type":1486,"url":4251},"https:\u002F\u002Fwww.imperva.com\u002Fblog\u002Fcode-execution-in-jupyter-notebook-exports",{"type":1483,"url":4253},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnbconvert",{"type":1475,"url":4255},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xm59-rqc7-hhvf",[1786],{"id":209,"slug":4258,"dossier":47,"summary":228,"aliases":4259,"sourceIds":4262,"published":4263,"modified":4264,"checkedAt":7,"severity":4265,"references":4267,"versionKeys":4271,"packageCount":32,"repositoryCount":234},"pysec-2026-2208-4dad303d",[4260,4261],"CVE-2026-44898","GHSA-6269-cqxg-mhhv",[209],"2026-05-26T21:16:39.810Z","2026-07-13T07:15:28.986856174Z",[4266],{"type":1471,"score":1924},[4268,4269],{"type":1475,"url":2454},{"type":1513,"url":4270},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-6269-cqxg-mhhv",[1526,1527],{"id":210,"slug":4273,"dossier":47,"summary":228,"aliases":4274,"sourceIds":4277,"published":4278,"modified":4279,"checkedAt":7,"severity":4280,"references":4282,"versionKeys":4286,"packageCount":32,"repositoryCount":234},"pysec-2026-2209-f89c37e9",[4275,4276],"CVE-2026-44899","GHSA-ccfx-mfmx-2fx9",[210],"2026-05-26T21:16:39.953Z","2026-07-13T07:15:29.089597285Z",[4281],{"type":1471,"score":1924},[4283,4284],{"type":1475,"url":2454},{"type":1513,"url":4285},"https:\u002F\u002Fgithub.com\u002Flepture\u002Fmistune\u002Fsecurity\u002Fadvisories\u002FGHSA-ccfx-mfmx-2fx9",[1526,1527],1792132415063]