[{"data":1,"prerenderedAt":14732},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-14327":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":549,"related":552},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-11-12T08:58:58.139Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-11-12T08:57:16.613Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},49,48,1,29,6,33,45,47,46,0,5071,5059,12,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":42,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2865,51,9911,63,2827,38,1097,43,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:typing-extensions","typing-extensions-87d153eb","typing-extensions",0.5918367346938775,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":39,"packageCount":99,"ecosystems":100,"aiPackageCount":42,"licenseExpressionCount":102,"unknownLicensePackageCount":103,"advisoryIds":104,"advisoryCount":547,"providers":548},"opencode:14327","opencode-14327",14327,"URBAN.KI SmartEnergie","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie","e0cca36642649a3991bd0155f1a7b17cc648b29b","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie\u002F-\u002Fcommit\u002Fe0cca36642649a3991bd0155f1a7b17cc648b29b","2026-11-11T20:40:22.808Z","2026-11-11T20:39:59.000Z",{"complete":90,"entryCount":68,"truncated":47},true,[92],{"path":56,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":85,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","b999006073eed3c4ff84d359c9b073b0b3899f18","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban.ki-smartenergie\u002F-\u002Fblob\u002Fe0cca36642649a3991bd0155f1a7b17cc648b29b\u002Fuv.lock","5bc9c3742e46d283568bac153a2117227cbb749c54f13f479c74214dc47187f6",968814,"parsed",328,[101],"pypi",23,2,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546],"GHSA-22hg-r758-rrw9","GHSA-23w6-3w8w-8484","GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-24rc-8hj2-v98c","GHSA-254f-3936-288h","GHSA-27h8-gf7j-v5hc","GHSA-27vj-qcqg-25rc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g59-m95p-pgfq","GHSA-2g87-pp6c-29x5","GHSA-2gx3-rcp4-g85q","GHSA-2jhm-w3mp-jcwr","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-332p-7hrc-92wf","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3936-cmfr-pm3m","GHSA-394h-qwmc-48pf","GHSA-39mj-jf6j-2qj3","GHSA-3cr3-8m4c-fpxw","GHSA-3crg-w4f6-42mx","GHSA-3gq4-3j92-5w49","GHSA-3gqm-fcw5-w839","GHSA-3hhw-38pf-pxj6","GHSA-3hv7-mjh2-fv65","GHSA-3j72-p6qg-6xp7","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-42gh-23hr-vphw","GHSA-42vr-xj54-vc7v","GHSA-43mp-35q3-x3fq","GHSA-4558-3h8r-v8xp","GHSA-45hq-cxwh-f6vc","GHSA-462x-pgg6-55fp","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-494j-54xm-rwp3","GHSA-494p-63j8-28p3","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4jhm-jv67-739f","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4rm8-3hmm-39fg","GHSA-4rr5-89j8-mwwm","GHSA-4vqv-7265-gm2w","GHSA-4vvm-4w3v-6mr8","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-54p9-h82j-f925","GHSA-556j-vv39-8rqv","GHSA-558c-9hv2-4prj","GHSA-55h5-xmcq-c37v","GHSA-567q-5qvw-pf92","GHSA-568f-pv23-39p4","GHSA-5849-834g-hvw5","GHSA-58r4-6rv3-gfh8","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5gh2-94qg-qppq","GHSA-5h93-6whr-6q8j","GHSA-5hgr-hg42-57jg","GHSA-5hx5-vpf9-5wcv","GHSA-5jq2-8x83-x246","GHSA-5p39-cfhj-2xmp","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5vjq-rrrf-7h2q","GHSA-5w7q-77mv-v69f","GHSA-5wp5-5229-5g6q","GHSA-5wr8-gcqf-gqf3","GHSA-5x8w-8jj5-q52h","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xm2-6676-qcp9","GHSA-5xmw-vc9v-4wf2","GHSA-62m5-6wh8-28x7","GHSA-62p4-gmf7-7g93","GHSA-63cw-57p8-fm3p","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-64vx-6h2c-rjh7","GHSA-654x-cwwv-5j9c","GHSA-65pc-fj4g-8rjx","GHSA-65qm-jvmh-6pqg","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69hj-f68j-2879","GHSA-69w3-r845-3855","GHSA-6c7f-9265-g8fw","GHSA-6cjc-53gc-5rqm","GHSA-6hm5-jgcp-p838","GHSA-6hwm-xvph-95vm","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6q48-6c7w-9gw2","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6vvc-x485-93v7","GHSA-6w3r-xr62-4xcp","GHSA-6w46-j5rx-g56g","GHSA-6ww7-3frv-cqxh","GHSA-72r2-7mfr-5xr9","GHSA-74r2-7ff9-mjj2","GHSA-752w-5fwx-jx9f","GHSA-763m-79hh-57f2","GHSA-78cv-mqj4-43f7","GHSA-78g4-xqwv-q3g8","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7mh2-4gg2-979f","GHSA-7mwm-ghpf-9vrm","GHSA-7p94-766c-hgjp","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-8423-8fgw-73vq","GHSA-848c-c2cx-j7qx","GHSA-84m7-p3x7-pcfv","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-887c-mr87-cxwp","GHSA-8988-9cw3-xx77","GHSA-8g5g-8vmr-9782","GHSA-8mgp-746c-j5xp","GHSA-8mpw-7fpc-4gqj","GHSA-8mx5-7m5m-r77g","GHSA-8qvm-5x2c-j2w7","GHSA-8rjx-v5ww-45pp","GHSA-8v84-f9pq-wr9x","GHSA-8wjv-2p76-3863","GHSA-9356-575x-2w9m","GHSA-94p9-xgh2-xp45","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-97qj-x29f-37w7","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9f4q-q82q-4359","GHSA-9h52-p55h-vw2f","GHSA-9h9j-4vrj-gf7g","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9j54-fg26-wv3r","GHSA-9jxx-vjrv-h2rq","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9mx8-4j7g-633p","GHSA-9r6g-266r-89x4","GHSA-9v7f-9g4p-ffgj","GHSA-9v9v-9qvf-h2hj","GHSA-9vhv-jxww-xfm5","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-9xw5-w5jj-pvcg","GHSA-c2m8-h5v5-343r","GHSA-c39v-8hrw-h448","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c6hw-5grf-ff96","GHSA-c947-3pg5-gm8q","GHSA-c978-59m8-c77v","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cg8m-r9f2-5wm2","GHSA-cgc7-9qp3-86m3","GHSA-cgf9-327m-v77c","GHSA-cggf-277g-3q54","GHSA-cgwc-pv48-fhj5","GHSA-chx6-46f5-w4vp","GHSA-cj93-chg6-vgv8","GHSA-cjqg-rq2h-2fvj","GHSA-cp9v-662q-vvx9","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cr42-rg2m-mq4q","GHSA-cv22-g7mw-8v73","GHSA-cw65-gx24-rc82","GHSA-cw6x-m8jw-qmrh","GHSA-cwqr-hh33-gh44","GHSA-cx28-75q4-x26q","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2g6-542v-9j58","GHSA-f2v5-7jq9-h8cg","GHSA-f4hp-rmr7-r7v8","GHSA-f54x-cmq8-qg57","GHSA-f794-5jv7-7672","GHSA-f833-7jw8-xwrv","GHSA-f96h-pmfr-66vw","GHSA-f9xw-jh8m-3mwq","GHSA-fc2g-4w5p-6whm","GHSA-fc8x-2rww-xw9m","GHSA-fc9g-5qg7-mf45","GHSA-ff5c-cp5c-9wjf","GHSA-ffc3-869f-jxw9","GHSA-ffj6-66c4-86gw","GHSA-fg7f-2386-8897","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fj7x-q9j7-g6q6","GHSA-fp3f-mc75-235c","GHSA-fp3h-c4fm-7vvf","GHSA-fpwr-67px-3qhx","GHSA-fq56-3cx3-fjxp","GHSA-fwg2-594c-jp42","GHSA-g3cq-j2xw-wf74","GHSA-g4qv-2jxx-769h","GHSA-g7cr-3p24-7wf7","GHSA-g7vv-2v7x-gj9p","GHSA-g842-9rc4-69pw","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g9cg-prrw-2r8q","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gg2r-wvfm-q9rx","GHSA-gh4c-6fx4-qh6g","GHSA-gjv8-xp57-g29c","GHSA-gm62-xv2j-4w53","GHSA-gmh7-3g9r-mjh5","GHSA-gmj6-6f8f-6699","GHSA-gphh-9q3h-jgpp","GHSA-gvp8-978c-rx2q","GHSA-gx76-c99x-2c96","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hhxq-47xx-j5xx","GHSA-hmq2-7hp6-7crh","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hvfh-5mj3-5f3j","GHSA-hw26-mmpg-fqfg","GHSA-hxm8-2xgr-2p9m","GHSA-hxxf-235m-72v3","GHSA-j456-xh4h-cpf2","GHSA-j4m9-6w36-pw47","GHSA-j543-4vmf-qm7v","GHSA-j5xp-7m2f-49jv","GHSA-j8f7-rjxc-mr56","GHSA-j934-xhv5-fg8f","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jg86-v3jv-hrpm","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jmmv-h3mp-59v8","GHSA-jp53-mhqp-8xcg","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jr96-gvgh-j3r4","GHSA-jw7q-gvrg-4vj3","GHSA-jwrc-g2q2-pq5p","GHSA-m2v9-299j-rv96","GHSA-m42h-3232-vpv3","GHSA-m449-cwjh-6pw7","GHSA-m4rf-3fr8-xwx3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m88r-rg27-5xfg","GHSA-m9gh-vj53-gvh9","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfr5-77xh-9j7h","GHSA-mfx4-hv73-q22v","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mpf4-983q-p7j4","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfp-p49p-3hf2","GHSA-mwh4-6h8g-pg8w","GHSA-p3m8-78j2-g5p3","GHSA-p4g4-x82p-q773","GHSA-p4gq-832x-fm9v","GHSA-p4rw-rvv2-7xwr","GHSA-p4wg-p73j-c528","GHSA-p58f-9548-mpm2","GHSA-p8hx-v2p6-rp84","GHSA-p944-4xh2-x776","GHSA-p998-jp59-783m","GHSA-pcg2-g6cj-q92c","GHSA-pchr-8j38-3x4p","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-php9-fj8v-98fj","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pqxq-w44r-73xw","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pw9p-v7r6-gx4p","GHSA-pwv6-vv43-88gr","GHSA-pxh4-856f-4h89","GHSA-q29v-xc37-wh5m","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q45j-58j2-45rg","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qfv9-64jg-mh7p","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qmx5-4p3x-wvqf","GHSA-qpxp-75px-xjcp","GHSA-qq3j-4f4f-9583","GHSA-qv6h-rv94-w285","GHSA-qvv7-cg9c-w4x3","GHSA-qx2g-xrx7-vfh8","GHSA-qxrp-vhvm-j765","GHSA-r3xg-rg9j-67fv","GHSA-r4j5-9xpp-3985","GHSA-r6gq-whwq-mvg9","GHSA-r6x4-923q-g947","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rfgq-q3w2-pmv2","GHSA-rfpc-qcw5-3pc4","GHSA-rgxp-2hwp-jwgg","GHSA-rhp5-r9x4-f5g2","GHSA-rrmf-rvhw-rf47","GHSA-rrv8-h7p8-rx55","GHSA-rwrf-2pqf-9j8j","GHSA-v247-6f48-mgcj","GHSA-v492-6xx2-p57g","GHSA-v4x8-3wr5-3wq8","GHSA-v9pg-7xvm-68hf","GHSA-v9pv-5gc8-w2m6","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vj7q-gjh5-988w","GHSA-vjc4-5qp5-m44j","GHSA-vp2x-qp44-57v7","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-vx6w-vv9f-6gvg","GHSA-vxj4-q4g9-crj7","GHSA-vxq7-64xx-v4gw","GHSA-w23x-9jrw-r45c","GHSA-w2cx-738m-mc7w","GHSA-w2fm-2cpv-w7v5","GHSA-w3fx-mc44-mf6j","GHSA-w3v8-gmh9-3wv7","GHSA-w4fh-qvv9-3v23","GHSA-w6j9-cwv2-h6wq","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w889-685w-c8fh","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-ww6m-cw3f-q94g","GHSA-wwv5-g3v4-889x","GHSA-x284-j5p8-9c5p","GHSA-x33g-cr3x-6449","GHSA-x3gm-94wq-g975","GHSA-x3rh-gjgm-fmqc","GHSA-x5ph-mj9p-rfr8","GHSA-x746-7m8f-x49c","GHSA-x78j-v8h9-3j2q","GHSA-x7hp-r3qg-r3cj","GHSA-x8wg-4xgc-vr54","GHSA-x99w-6fgc-pmfw","GHSA-x9r9-c232-4q39","GHSA-xcgm-r5h9-7989","GHSA-xcq7-p3pf-p88h","GHSA-xg8h-j46f-w952","GHSA-xgh8-jp6q-p5x8","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","GHSA-xmj3-9gf7-h52w","GHSA-xrqw-3rrv-vx5w","GHSA-xvh5-g6gv-559v","GHSA-xvp8-3mhv-424c","PYSEC-2025-183","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2120","PYSEC-2026-598","PYSEC-2026-99",442,[],{"files":550,"occurrenceCount":99},[551],{"path":56,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":85,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":553,"vulnerabilities":3455},[554,568,578,588,601,613,622,631,640,650,659,668,677,687,699,708,719,729,739,749,760,770,779,789,798,808,817,827,837,846,855,864,874,883,892,902,911,920,929,938,947,956,965,974,983,992,1001,1010,1019,1029,1038,1047,1056,1065,1075,1084,1094,1103,1112,1121,1130,1140,1149,1158,1167,1176,1185,1194,1203,1212,1222,1231,1240,1249,1258,1267,1276,1285,1294,1303,1312,1321,1330,1339,1348,1357,1366,1375,1384,1392,1401,1410,1419,1428,1436,1444,1453,1462,1471,1480,1489,1498,1507,1516,1525,1536,1546,1555,1563,1573,1582,1591,1599,1608,1617,1626,1635,1644,1653,1662,1671,1680,1689,1698,1707,1716,1725,1734,1743,1752,1761,1769,1777,1786,1795,1803,1812,1821,1830,1838,1847,1855,1864,1873,1882,1890,1898,1906,1914,1922,1930,1939,1948,1956,1965,1974,1983,1991,2000,2008,2017,2026,2035,2044,2054,2063,2072,2081,2089,2098,2107,2116,2125,2134,2143,2151,2160,2168,2177,2185,2194,2202,2211,2219,2227,2235,2243,2252,2261,2269,2277,2285,2293,2301,2309,2317,2325,2333,2341,2349,2357,2365,2373,2381,2389,2397,2405,2413,2421,2429,2437,2445,2453,2461,2469,2477,2485,2493,2501,2509,2517,2525,2533,2541,2549,2557,2566,2574,2584,2593,2601,2611,2620,2629,2638,2647,2655,2664,2672,2681,2690,2699,2708,2716,2725,2733,2741,2750,2759,2768,2777,2786,2795,2803,2812,2821,2830,2838,2846,2854,2862,2871,2880,2888,2897,2905,2914,2923,2932,2941,2950,2959,2968,2977,2986,2996,3004,3013,3022,3031,3040,3049,3058,3067,3076,3084,3093,3102,3110,3119,3128,3137,3146,3155,3164,3173,3182,3191,3199,3208,3217,3226,3235,3243,3252,3261,3269,3278,3286,3294,3303,3312,3321,3329,3335,3343,3351,3359,3368,3377,3385,3394,3402,3411,3420,3428,3437,3446],{"id":555,"slug":556,"identity":557,"label":558,"aiRelevant":90,"provider":559,"advisoryCount":562,"licenseExpressions":563,"versions":565,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":567},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":560,"label":561},"hugging-face","Hugging Face",27,[564],"Apache-2.0",[566],"4.57.1",[56],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":90,"provider":83,"advisoryCount":102,"licenseExpressions":573,"versions":575,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":577},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[574],"BSD-3-Clause",[576],"2.9.0",[56],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":90,"provider":83,"advisoryCount":32,"licenseExpressions":583,"versions":585,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":587},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[564,584],"non-standard",[586],"1.11.0",[56],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":90,"provider":593,"advisoryCount":39,"licenseExpressions":596,"versions":598,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":600},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":594,"label":595},"anthropic","Anthropic",[597],"MIT",[599],"0.72.0",[56],{"id":602,"slug":603,"identity":604,"label":605,"aiRelevant":90,"provider":606,"advisoryCount":39,"licenseExpressions":609,"versions":610,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":612},"package:pypi:openai","openai-0dd26ac5","pypi:openai","OpenAI SDK",{"id":607,"label":608},"openai","OpenAI",[564],[611],"1.109.1",[56],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":618,"versions":619,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":621},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[584],[620],"0.22.1",[56],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":627,"versions":628,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":630},"package:pypi:llama-index-core","llama-index-core-6f097879","pypi:llama-index-core","LlamaIndex · Core",[597],[629],"0.14.6",[56],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":636,"versions":637,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":639},"package:pypi:llama-index-llms-openai","llama-index-llms-openai-9155387e","pypi:llama-index-llms-openai","LlamaIndex · Llms OpenAI",[597],[638],"0.6.6",[56],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":645,"versions":647,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":649},"package:pypi:llama-index-readers-web","llama-index-readers-web-ef09483c","pypi:llama-index-readers-web","LlamaIndex · Readers Web",[646],"GPL-3.0-or-later",[648],"0.5.5",[56],{"id":651,"slug":652,"identity":653,"label":654,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":655,"versions":656,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":658},"package:pypi:llama-index-vector-stores-lancedb","llama-index-vector-stores-lancedb-d8d9098c","pypi:llama-index-vector-stores-lancedb","LlamaIndex · Vector Stores Lancedb",[597],[657],"0.4.1",[56],{"id":660,"slug":661,"identity":662,"label":663,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":664,"versions":665,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":667},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[564],[666],"4.11.0.86",[56],{"id":669,"slug":670,"identity":671,"label":672,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":673,"versions":674,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":676},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[597],[675],"0.12.0",[56],{"id":678,"slug":679,"identity":680,"label":681,"aiRelevant":47,"provider":83,"advisoryCount":682,"licenseExpressions":683,"versions":684,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":686},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",67,[574,584],[685],"6.1.3",[56],{"id":688,"slug":689,"identity":690,"label":691,"aiRelevant":47,"provider":83,"advisoryCount":692,"licenseExpressions":693,"versions":696,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":698},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",61,[694,695],"HPND","MIT-CMU",[697],"11.3.0",[56],{"id":700,"slug":701,"identity":702,"label":703,"aiRelevant":47,"provider":83,"advisoryCount":31,"licenseExpressions":704,"versions":705,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":707},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",[564],[706],"3.9.2",[56],{"id":709,"slug":710,"identity":711,"label":712,"aiRelevant":47,"provider":83,"advisoryCount":713,"licenseExpressions":714,"versions":716,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":718},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",41,[564,715],"Apache-2.0 AND MIT",[717],"3.13.2",[56],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":47,"provider":83,"advisoryCount":724,"licenseExpressions":725,"versions":726,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":728},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",22,[597],[727],"2.10.1",[56],{"id":730,"slug":731,"identity":732,"label":733,"aiRelevant":47,"provider":83,"advisoryCount":734,"licenseExpressions":735,"versions":736,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":738},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",20,[597],[737],"20.35.4",[56],{"id":740,"slug":741,"identity":742,"label":743,"aiRelevant":47,"provider":83,"advisoryCount":744,"licenseExpressions":745,"versions":746,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":748},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",19,[564],[747],"6.5.2",[56],{"id":750,"slug":751,"identity":752,"label":753,"aiRelevant":47,"provider":83,"advisoryCount":754,"licenseExpressions":755,"versions":757,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":759},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",11,[597,756],"Unlicense",[758],"3.20.0",[56],{"id":761,"slug":762,"identity":763,"label":764,"aiRelevant":47,"provider":83,"advisoryCount":765,"licenseExpressions":766,"versions":767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":769},"package:pypi:docling","docling-61c4e452","pypi:docling","docling",10,[597],[768],"2.58.0",[56],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":47,"provider":83,"advisoryCount":765,"licenseExpressions":775,"versions":776,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":778},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[597],[777],"2.5.0",[56],{"id":780,"slug":781,"identity":782,"label":783,"aiRelevant":47,"provider":83,"advisoryCount":784,"licenseExpressions":785,"versions":786,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":788},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[564],[787],"0.0.20",[56],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":47,"provider":83,"advisoryCount":784,"licenseExpressions":794,"versions":795,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":797},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[574],[796],"0.48.0",[56],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":47,"provider":83,"advisoryCount":803,"licenseExpressions":804,"versions":805,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":807},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",7,[597],[806],"1.19.0",[56],{"id":809,"slug":810,"identity":811,"label":812,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":813,"versions":814,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":816},"package:pypi:chainlit","chainlit-b11abd2e","pypi:chainlit","chainlit",[564],[815],"2.8.3",[56],{"id":818,"slug":819,"identity":820,"label":821,"aiRelevant":47,"provider":83,"advisoryCount":822,"licenseExpressions":823,"versions":824,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":826},"package:pypi:banks","banks-f10f5e94","pypi:banks","banks",5,[597],[825],"2.2.0",[56],{"id":828,"slug":829,"identity":830,"label":831,"aiRelevant":47,"provider":83,"advisoryCount":832,"licenseExpressions":833,"versions":834,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":836},"package:pypi:black","black-af583dd9","pypi:black","black",4,[597],[835],"25.9.0",[56],{"id":838,"slug":839,"identity":840,"label":841,"aiRelevant":47,"provider":83,"advisoryCount":832,"licenseExpressions":842,"versions":843,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":845},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[574,584],[844],"3.1.6",[56],{"id":847,"slug":848,"identity":849,"label":850,"aiRelevant":47,"provider":83,"advisoryCount":832,"licenseExpressions":851,"versions":852,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":854},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[597],[853],"80.9.0",[56],{"id":856,"slug":857,"identity":858,"label":859,"aiRelevant":47,"provider":83,"advisoryCount":832,"licenseExpressions":860,"versions":861,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":863},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[597],[862],"2.8",[56],{"id":865,"slug":866,"identity":867,"label":868,"aiRelevant":47,"provider":83,"advisoryCount":869,"licenseExpressions":870,"versions":871,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":873},"package:pypi:lxml-html-clean","lxml-html-clean-a658348a","pypi:lxml-html-clean","lxml-html-clean",3,[574],[872],"0.4.3",[56],{"id":875,"slug":876,"identity":877,"label":878,"aiRelevant":47,"provider":83,"advisoryCount":869,"licenseExpressions":879,"versions":880,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":882},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[564],[881],"2.32.5",[56],{"id":884,"slug":885,"identity":886,"label":887,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":888,"versions":889,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":891},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[597],[890],"4.11.0",[56],{"id":893,"slug":894,"identity":895,"label":896,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":897,"versions":899,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":901},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[898],"MPL-2.0",[900],"2025.10.5",[56],{"id":903,"slug":904,"identity":905,"label":906,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":907,"versions":908,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":910},"package:pypi:docling-core","docling-core-f56a60f5","pypi:docling-core","docling-core",[597],[909],"2.49.0",[56],{"id":912,"slug":913,"identity":914,"label":915,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":916,"versions":917,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":919},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[574],[918],"6.33.0",[56],{"id":921,"slug":922,"identity":923,"label":924,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":925,"versions":926,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":928},"package:pypi:python-engineio","python-engineio-a8408602","pypi:python-engineio","python-engineio",[597],[927],"4.12.3",[56],{"id":930,"slug":931,"identity":932,"label":933,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":934,"versions":935,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":937},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[574],[936],"2025.9.0",[56],{"id":939,"slug":940,"identity":941,"label":942,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":943,"versions":944,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":946},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[597],[945],"0.16.0",[56],{"id":948,"slug":949,"identity":950,"label":951,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":952,"versions":953,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":955},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[574,584],[954],"3.11",[56],{"id":957,"slug":958,"identity":959,"label":960,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":961,"versions":962,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":964},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[574],[963],"5.9.1",[56],{"id":966,"slug":967,"identity":968,"label":969,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":970,"versions":971,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":973},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[574],[972],"5.4.0",[56],{"id":975,"slug":976,"identity":977,"label":978,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":979,"versions":980,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":982},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[597],[981],"3.26.1",[56],{"id":984,"slug":985,"identity":986,"label":987,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":988,"versions":989,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":991},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[564],[990],"6.7.0",[56],{"id":993,"slug":994,"identity":995,"label":996,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":997,"versions":998,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1000},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[564],[999],"1.38.0",[56],{"id":1002,"slug":1003,"identity":1004,"label":1005,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1006,"versions":1007,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1009},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[564,584],[1008],"22.0.0",[56],{"id":1011,"slug":1012,"identity":1013,"label":1014,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1015,"versions":1016,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1018},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[597],[1017],"2.11.0",[56],{"id":1020,"slug":1021,"identity":1022,"label":1023,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1024,"versions":1026,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1028},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[1025],"BSD-2-Clause",[1027],"2.19.2",[56],{"id":1030,"slug":1031,"identity":1032,"label":1033,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1034,"versions":1035,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1037},"package:pypi:pypdf2","pypdf2-eea60a87","pypi:pypdf2","pypdf2",[584],[1036],"3.0.1",[56],{"id":1039,"slug":1040,"identity":1041,"label":1042,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1043,"versions":1044,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1046},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[597],[1045],"8.4.2",[56],{"id":1048,"slug":1049,"identity":1050,"label":1051,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1052,"versions":1053,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1055},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[574],[1054],"1.2.1",[56],{"id":1057,"slug":1058,"identity":1059,"label":1060,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1061,"versions":1062,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1064},"package:pypi:python-socketio","python-socketio-6960be7a","pypi:python-socketio","python-socketio",[597],[1063],"5.14.3",[56],{"id":1066,"slug":1067,"identity":1068,"label":1069,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":1070,"versions":1072,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1074},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[1071],"MIT AND MPL-2.0",[1073],"4.67.1",[56],{"id":1076,"slug":1077,"identity":1078,"label":1079,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1080,"versions":1081,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1083},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[564],[1082],"24.1.0",[56],{"id":1085,"slug":1086,"identity":1087,"label":1088,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1089,"versions":1091,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1093},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[1090],"PSF-2.0",[1092],"2.6.1",[56],{"id":1095,"slug":1096,"identity":1097,"label":1098,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1099,"versions":1100,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1102},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[564],[1101],"1.4.0",[56],{"id":1104,"slug":1105,"identity":1106,"label":1107,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1108,"versions":1109,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1111},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[597],[1110],"0.21.0",[56],{"id":1113,"slug":1114,"identity":1115,"label":1116,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1117,"versions":1118,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1120},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[597],[1119],"0.7.0",[56],{"id":1122,"slug":1123,"identity":1124,"label":1125,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1126,"versions":1127,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1129},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[584],[1128],"4.9.3",[56],{"id":1131,"slug":1132,"identity":1133,"label":1134,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1135,"versions":1137,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1139},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[1136],"BSD-1-Clause",[1138],"0.1.4",[56],{"id":1141,"slug":1142,"identity":1143,"label":1144,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1145,"versions":1146,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1148},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[597],[1147],"3.11.0",[56],{"id":1150,"slug":1151,"identity":1152,"label":1153,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1154,"versions":1155,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1157},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[564],[1156],"3.0.0",[56],{"id":1159,"slug":1160,"identity":1161,"label":1162,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1163,"versions":1164,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1166},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[597],[1165],"0.0.10",[56],{"id":1168,"slug":1169,"identity":1170,"label":1171,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1172,"versions":1173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1175},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[597],[1174],"25.4.0",[56],{"id":1177,"slug":1178,"identity":1179,"label":1180,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1181,"versions":1182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1184},"package:pypi:audioop-lts","audioop-lts-1da6267f","pypi:audioop-lts","audioop-lts",[1090],[1183],"0.2.2",[56],{"id":1186,"slug":1187,"identity":1188,"label":1189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1190,"versions":1191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1193},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[597],[1192],"2.2.1",[56],{"id":1195,"slug":1196,"identity":1197,"label":1198,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1199,"versions":1200,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1202},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[597],[1201],"4.14.2",[56],{"id":1204,"slug":1205,"identity":1206,"label":1207,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1208,"versions":1209,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1211},"package:pypi:bidict","bidict-d2d69f19","pypi:bidict","bidict",[898],[1210],"0.23.1",[56],{"id":1213,"slug":1214,"identity":1215,"label":1216,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1217,"versions":1219,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1221},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[597,1218],"MIT-0",[1220],"2.0.0",[56],{"id":1223,"slug":1224,"identity":1225,"label":1226,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1227,"versions":1228,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1230},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[597],[1229],"3.4.0",[56],{"id":1232,"slug":1233,"identity":1234,"label":1235,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1236,"versions":1237,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1239},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[597],[1238],"3.4.4",[56],{"id":1241,"slug":1242,"identity":1243,"label":1244,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1245,"versions":1246,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1248},"package:pypi:chevron","chevron-e2cf8dfd","pypi:chevron","chevron",[597],[1247],"0.14.0",[56],{"id":1250,"slug":1251,"identity":1252,"label":1253,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1254,"versions":1255,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1257},"package:pypi:chromedriver-autoinstaller","chromedriver-autoinstaller-c57f66e8","pypi:chromedriver-autoinstaller","chromedriver-autoinstaller",[597],[1256],"0.6.4",[56],{"id":1259,"slug":1260,"identity":1261,"label":1262,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1263,"versions":1264,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1266},"package:pypi:click","click-ef97f731","pypi:click","click",[574,584],[1265],"8.3.0",[56],{"id":1268,"slug":1269,"identity":1270,"label":1271,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1272,"versions":1273,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1275},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[584],[1274],"0.4.6",[56],{"id":1277,"slug":1278,"identity":1279,"label":1280,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1281,"versions":1282,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1284},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[597],[1283],"6.10.1",[56],{"id":1286,"slug":1287,"identity":1288,"label":1289,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1290,"versions":1291,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1293},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[574],[1292],"0.2.3",[56],{"id":1295,"slug":1296,"identity":1297,"label":1298,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1299,"versions":1300,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1302},"package:pypi:cssselect","cssselect-2437b3c5","pypi:cssselect","cssselect",[574],[1301],"1.3.0",[56],{"id":1304,"slug":1305,"identity":1306,"label":1307,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1308,"versions":1309,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1311},"package:pypi:cuid","cuid-297d1f96","pypi:cuid","cuid",[584],[1310],"0.4",[56],{"id":1313,"slug":1314,"identity":1315,"label":1316,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1317,"versions":1318,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1320},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[597],[1319],"0.6.7",[56],{"id":1322,"slug":1323,"identity":1324,"label":1325,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1326,"versions":1327,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1329},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[597],[1328],"1.8.17",[56],{"id":1331,"slug":1332,"identity":1333,"label":1334,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1335,"versions":1336,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1338},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[1025,584],[1337],"5.2.1",[56],{"id":1340,"slug":1341,"identity":1342,"label":1343,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1344,"versions":1345,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1347},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[584],[1346],"0.7.1",[56],{"id":1349,"slug":1350,"identity":1351,"label":1352,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1353,"versions":1354,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1356},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[597],[1355],"1.2.18",[56],{"id":1358,"slug":1359,"identity":1360,"label":1361,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1362,"versions":1363,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1365},"package:pypi:deprecation","deprecation-c367808e","pypi:deprecation","deprecation",[564],[1364],"2.1.0",[56],{"id":1367,"slug":1368,"identity":1369,"label":1370,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1371,"versions":1372,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1374},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[574],[1373],"0.4.0",[56],{"id":1376,"slug":1377,"identity":1378,"label":1379,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1380,"versions":1381,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1383},"package:pypi:dirtyjson","dirtyjson-e423c509","pypi:dirtyjson","dirtyjson",[597],[1382],"1.0.8",[56],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1389,"versions":1390,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1391},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[1090],[1373],[56],{"id":1393,"slug":1394,"identity":1395,"label":1396,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1397,"versions":1398,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1400},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[564],[1399],"1.9.0",[56],{"id":1402,"slug":1403,"identity":1404,"label":1405,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1406,"versions":1407,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1409},"package:pypi:docling-ibm-models","docling-ibm-models-4f15d6af","pypi:docling-ibm-models","docling-ibm-models",[597],[1408],"3.10.2",[56],{"id":1411,"slug":1412,"identity":1413,"label":1414,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1415,"versions":1416,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1418},"package:pypi:docling-parse","docling-parse-b9af4bcb","pypi:docling-parse","docling-parse",[597],[1417],"4.7.0",[56],{"id":1420,"slug":1421,"identity":1422,"label":1423,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1424,"versions":1425,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1427},"package:pypi:docstring-parser","docstring-parser-9edeecc2","pypi:docstring-parser","docstring-parser",[597],[1426],"0.17.0",[56],{"id":1429,"slug":1430,"identity":1431,"label":1432,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1433,"versions":1434,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1435},"package:pypi:et-xmlfile","et-xmlfile-634469c0","pypi:et-xmlfile","et-xmlfile",[597],[1220],[56],{"id":1437,"slug":1438,"identity":1439,"label":1440,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1441,"versions":1442,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1443},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[597],[1192],[56],{"id":1445,"slug":1446,"identity":1447,"label":1448,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1449,"versions":1450,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1452},"package:pypi:faker","faker-af8bb74a","pypi:faker","faker",[597],[1451],"37.12.0",[56],{"id":1454,"slug":1455,"identity":1456,"label":1457,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1458,"versions":1459,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1461},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[597],[1460],"0.116.2",[56],{"id":1463,"slug":1464,"identity":1465,"label":1466,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1467,"versions":1468,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1470},"package:pypi:feedfinder2","feedfinder2-a2efca90","pypi:feedfinder2","feedfinder2",[597],[1469],"0.0.4",[56],{"id":1472,"slug":1473,"identity":1474,"label":1475,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1476,"versions":1477,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1479},"package:pypi:feedparser","feedparser-7de97965","pypi:feedparser","feedparser",[1025],[1478],"6.0.12",[56],{"id":1481,"slug":1482,"identity":1483,"label":1484,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1485,"versions":1486,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1488},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[597],[1487],"1.2.0",[56],{"id":1490,"slug":1491,"identity":1492,"label":1493,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1494,"versions":1495,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1497},"package:pypi:firecrawl-py","firecrawl-py-2dd84658","pypi:firecrawl-py","firecrawl-py",[597],[1496],"4.5.0",[56],{"id":1499,"slug":1500,"identity":1501,"label":1502,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1503,"versions":1504,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1506},"package:pypi:flake8","flake8-03083a13","pypi:flake8","flake8",[597],[1505],"7.3.0",[56],{"id":1508,"slug":1509,"identity":1510,"label":1511,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1512,"versions":1513,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1515},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[564],[1514],"1.8.0",[56],{"id":1517,"slug":1518,"identity":1519,"label":1520,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1521,"versions":1522,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1524},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[564],[1523],"1.71.0",[56],{"id":1526,"slug":1527,"identity":1528,"label":1529,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1530,"versions":1533,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1535},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[597,1531,1532],"MIT AND PSF-2.0","MIT AND Python-2.0",[1534],"3.2.4",[56],{"id":1537,"slug":1538,"identity":1539,"label":1540,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1541,"versions":1543,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1545},"package:pypi:griffe","griffe-3cc58065","pypi:griffe","griffe",[1542],"ISC",[1544],"1.14.0",[56],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1551,"versions":1552,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1554},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[564],[1553],"1.76.0",[56],{"id":1556,"slug":1557,"identity":1558,"label":1559,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1560,"versions":1561,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1562},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[564],[1487],[56],{"id":1564,"slug":1565,"identity":1566,"label":1567,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1568,"versions":1570,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1572},"package:pypi:html2text","html2text-351f3aea","pypi:html2text","html2text",[1569],"GPL-3.0",[1571],"2024.2.26",[56],{"id":1574,"slug":1575,"identity":1576,"label":1577,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1578,"versions":1579,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1581},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[574],[1580],"1.0.9",[56],{"id":1583,"slug":1584,"identity":1585,"label":1586,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1587,"versions":1588,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1590},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[574],[1589],"0.28.1",[56],{"id":1592,"slug":1593,"identity":1594,"label":1595,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1596,"versions":1597,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1598},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[597],[872],[56],{"id":1600,"slug":1601,"identity":1602,"label":1603,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1604,"versions":1605,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1607},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[564],[1606],"0.36.0",[56],{"id":1609,"slug":1610,"identity":1611,"label":1612,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1613,"versions":1614,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1616},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[597],[1615],"2.6.15",[56],{"id":1618,"slug":1619,"identity":1620,"label":1621,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1622,"versions":1623,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1625},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[564,584],[1624],"8.7.0",[56],{"id":1627,"slug":1628,"identity":1629,"label":1630,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1631,"versions":1632,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1634},"package:pypi:inflection","inflection-ad66c7ec","pypi:inflection","inflection",[597],[1633],"0.5.1",[56],{"id":1636,"slug":1637,"identity":1638,"label":1639,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1640,"versions":1641,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1643},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[597],[1642],"2.3.0",[56],{"id":1645,"slug":1646,"identity":1647,"label":1648,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1649,"versions":1650,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1652},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[574],[1651],"7.1.0",[56],{"id":1654,"slug":1655,"identity":1656,"label":1657,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1658,"versions":1659,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1661},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[574],[1660],"9.6.0",[56],{"id":1663,"slug":1664,"identity":1665,"label":1666,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1667,"versions":1668,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1670},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[584],[1669],"1.1.1",[56],{"id":1672,"slug":1673,"identity":1674,"label":1675,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1676,"versions":1677,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1679},"package:pypi:isort","isort-a8397697","pypi:isort","isort",[597],[1678],"7.0.0",[56],{"id":1681,"slug":1682,"identity":1683,"label":1684,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1685,"versions":1686,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1688},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[597],[1687],"0.19.2",[56],{"id":1690,"slug":1691,"identity":1692,"label":1693,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1694,"versions":1695,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1697},"package:pypi:jieba3k","jieba3k-2ef848d4","pypi:jieba3k","jieba3k",[],[1696],"0.35.1",[56],{"id":1699,"slug":1700,"identity":1701,"label":1702,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1703,"versions":1704,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1706},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[597],[1705],"0.11.1",[56],{"id":1708,"slug":1709,"identity":1710,"label":1711,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1712,"versions":1713,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1715},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[574],[1714],"1.5.2",[56],{"id":1717,"slug":1718,"identity":1719,"label":1720,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1721,"versions":1722,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1724},"package:pypi:jsonlines","jsonlines-779d1204","pypi:jsonlines","jsonlines",[574],[1723],"4.0.0",[56],{"id":1726,"slug":1727,"identity":1728,"label":1729,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1730,"versions":1731,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1733},"package:pypi:jsonref","jsonref-181eaf53","pypi:jsonref","jsonref",[597],[1732],"1.1.0",[56],{"id":1735,"slug":1736,"identity":1737,"label":1738,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1739,"versions":1740,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1742},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[597],[1741],"4.25.1",[56],{"id":1744,"slug":1745,"identity":1746,"label":1747,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1748,"versions":1749,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1751},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[597],[1750],"2025.9.1",[56],{"id":1753,"slug":1754,"identity":1755,"label":1756,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1757,"versions":1758,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1760},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[574],[1759],"8.6.3",[56],{"id":1762,"slug":1763,"identity":1764,"label":1765,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1766,"versions":1767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1768},"package:pypi:lance-namespace","lance-namespace-70425b3b","pypi:lance-namespace","lance-namespace",[564],[787],[56],{"id":1770,"slug":1771,"identity":1772,"label":1773,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1774,"versions":1775,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1776},"package:pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client-1a0b30f8","pypi:lance-namespace-urllib3-client","lance-namespace-urllib3-client",[564],[787],[56],{"id":1778,"slug":1779,"identity":1780,"label":1781,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1782,"versions":1783,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1785},"package:pypi:lancedb","lancedb-b5c306b5","pypi:lancedb","lancedb",[584],[1784],"0.25.2",[56],{"id":1787,"slug":1788,"identity":1789,"label":1790,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1791,"versions":1792,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1794},"package:pypi:latex2mathml","latex2mathml-4b5e6391","pypi:latex2mathml","latex2mathml",[597],[1793],"3.78.1",[56],{"id":1796,"slug":1797,"identity":1798,"label":1799,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1800,"versions":1801,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1802},"package:pypi:lazify","lazify-bfb0197d","pypi:lazify","lazify",[584],[1373],[56],{"id":1804,"slug":1805,"identity":1806,"label":1807,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1808,"versions":1809,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1811},"package:pypi:literalai","literalai-7854f46d","pypi:literalai","literalai",[564],[1810],"0.1.201",[56],{"id":1813,"slug":1814,"identity":1815,"label":1816,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1817,"versions":1818,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1820},"package:pypi:llama-cloud","llama-cloud-b191f0f9","pypi:llama-cloud","llama-cloud",[597],[1819],"0.1.35",[56],{"id":1822,"slug":1823,"identity":1824,"label":1825,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1826,"versions":1827,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1829},"package:pypi:llama-cloud-services","llama-cloud-services-bef88366","pypi:llama-cloud-services","llama-cloud-services",[597],[1828],"0.6.54",[56],{"id":1831,"slug":1832,"identity":1833,"label":1834,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1835,"versions":1836,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1837},"package:pypi:llama-index","llama-index-0f867dab","pypi:llama-index","llama-index",[597],[629],[56],{"id":1839,"slug":1840,"identity":1841,"label":1842,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1843,"versions":1844,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1846},"package:pypi:llama-index-cli","llama-index-cli-03ecd5c5","pypi:llama-index-cli","llama-index-cli",[597],[1845],"0.5.3",[56],{"id":1848,"slug":1849,"identity":1850,"label":1851,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1852,"versions":1853,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1854},"package:pypi:llama-index-embeddings-openai","llama-index-embeddings-openai-b4ccbb6b","pypi:llama-index-embeddings-openai","llama-index-embeddings-openai",[597],[1633],[56],{"id":1856,"slug":1857,"identity":1858,"label":1859,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1860,"versions":1861,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1863},"package:pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud-ddf42c36","pypi:llama-index-indices-managed-llama-cloud","llama-index-indices-managed-llama-cloud",[597],[1862],"0.9.4",[56],{"id":1865,"slug":1866,"identity":1867,"label":1868,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1869,"versions":1870,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1872},"package:pypi:llama-index-instrumentation","llama-index-instrumentation-abea2496","pypi:llama-index-instrumentation","llama-index-instrumentation",[597],[1871],"0.4.2",[56],{"id":1874,"slug":1875,"identity":1876,"label":1877,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1878,"versions":1879,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1881},"package:pypi:llama-index-readers-file","llama-index-readers-file-c8a58a84","pypi:llama-index-readers-file","llama-index-readers-file",[597],[1880],"0.5.4",[56],{"id":1883,"slug":1884,"identity":1885,"label":1886,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1887,"versions":1888,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1889},"package:pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse-58739d42","pypi:llama-index-readers-llama-parse","llama-index-readers-llama-parse",[597],[1633],[56],{"id":1891,"slug":1892,"identity":1893,"label":1894,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1895,"versions":1896,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1897},"package:pypi:llama-index-workflows","llama-index-workflows-a24215fc","pypi:llama-index-workflows","llama-index-workflows",[597],[576],[56],{"id":1899,"slug":1900,"identity":1901,"label":1902,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1903,"versions":1904,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1905},"package:pypi:llama-parse","llama-parse-f89f5dbf","pypi:llama-parse","llama-parse",[597],[1828],[56],{"id":1907,"slug":1908,"identity":1909,"label":1910,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1911,"versions":1912,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1913},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[597],[1723],[56],{"id":1915,"slug":1916,"identity":1917,"label":1918,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1919,"versions":1920,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1921},"package:pypi:markdownify","markdownify-f49bbc0a","pypi:markdownify","markdownify",[597],[1487],[56],{"id":1923,"slug":1924,"identity":1925,"label":1926,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1927,"versions":1928,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1929},"package:pypi:marko","marko-cf8df36c","pypi:marko","marko",[597],[1192],[56],{"id":1931,"slug":1932,"identity":1933,"label":1934,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1935,"versions":1936,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1938},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[574],[1937],"3.0.3",[56],{"id":1940,"slug":1941,"identity":1942,"label":1943,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1944,"versions":1945,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1947},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[574],[1946],"0.2.1",[56],{"id":1949,"slug":1950,"identity":1951,"label":1952,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1953,"versions":1954,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1955},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[597],[1119],[56],{"id":1957,"slug":1958,"identity":1959,"label":1960,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1961,"versions":1962,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1964},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[597],[1963],"0.1.2",[56],{"id":1966,"slug":1967,"identity":1968,"label":1969,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1970,"versions":1971,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1973},"package:pypi:monotonic","monotonic-c3c6b23a","pypi:monotonic","monotonic",[584],[1972],"1.6",[56],{"id":1975,"slug":1976,"identity":1977,"label":1978,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1979,"versions":1980,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1982},"package:pypi:mpire","mpire-1706081d","pypi:mpire","mpire",[597],[1981],"2.10.2",[56],{"id":1984,"slug":1985,"identity":1986,"label":1987,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1988,"versions":1989,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1990},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[574],[1301],[56],{"id":1992,"slug":1993,"identity":1994,"label":1995,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":1996,"versions":1997,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1999},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[574],[1998],"0.70.18",[56],{"id":2001,"slug":2002,"identity":2003,"label":2004,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2005,"versions":2006,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2007},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[597],[1732],[56],{"id":2009,"slug":2010,"identity":2011,"label":2012,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2013,"versions":2014,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2016},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[1025],[2015],"1.6.0",[56],{"id":2018,"slug":2019,"identity":2020,"label":2021,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2022,"versions":2023,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2025},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[574,584],[2024],"3.5",[56],{"id":2027,"slug":2028,"identity":2029,"label":2030,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2031,"versions":2032,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2034},"package:pypi:newspaper3k","newspaper3k-139e17f3","pypi:newspaper3k","newspaper3k",[597],[2033],"0.2.8",[56],{"id":2036,"slug":2037,"identity":2038,"label":2039,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2040,"versions":2041,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2043},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[574,584],[2042],"1.9.1",[56],{"id":2045,"slug":2046,"identity":2047,"label":2048,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2049,"versions":2051,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2053},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[2050,584],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[2052],"2.3.4",[56],{"id":2055,"slug":2056,"identity":2057,"label":2058,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2059,"versions":2060,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2062},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[584],[2061],"12.8.4.1",[56],{"id":2064,"slug":2065,"identity":2066,"label":2067,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2068,"versions":2069,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2071},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[584],[2070],"12.8.90",[56],{"id":2073,"slug":2074,"identity":2075,"label":2076,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2077,"versions":2078,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2080},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[584],[2079],"12.8.93",[56],{"id":2082,"slug":2083,"identity":2084,"label":2085,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2086,"versions":2087,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2088},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[584],[2070],[56],{"id":2090,"slug":2091,"identity":2092,"label":2093,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2094,"versions":2095,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2097},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[584],[2096],"9.10.2.21",[56],{"id":2099,"slug":2100,"identity":2101,"label":2102,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2103,"versions":2104,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2106},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[584],[2105],"11.3.3.83",[56],{"id":2108,"slug":2109,"identity":2110,"label":2111,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2112,"versions":2113,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2115},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[584],[2114],"1.13.1.3",[56],{"id":2117,"slug":2118,"identity":2119,"label":2120,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2121,"versions":2122,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2124},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[584],[2123],"10.3.9.90",[56],{"id":2126,"slug":2127,"identity":2128,"label":2129,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2130,"versions":2131,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2133},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[584],[2132],"11.7.3.90",[56],{"id":2135,"slug":2136,"identity":2137,"label":2138,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2139,"versions":2140,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2142},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[584],[2141],"12.5.8.93",[56],{"id":2144,"slug":2145,"identity":2146,"label":2147,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2148,"versions":2149,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2150},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[584],[1346],[56],{"id":2152,"slug":2153,"identity":2154,"label":2155,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2156,"versions":2157,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2159},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[574],[2158],"2.27.5",[56],{"id":2161,"slug":2162,"identity":2163,"label":2164,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2165,"versions":2166,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2167},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[584],[2079],[56],{"id":2169,"slug":2170,"identity":2171,"label":2172,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2173,"versions":2174,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2176},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[574,584],[2175],"3.3.20",[56],{"id":2178,"slug":2179,"identity":2180,"label":2181,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2182,"versions":2183,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2184},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[564,584],[2070],[56],{"id":2186,"slug":2187,"identity":2188,"label":2189,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2190,"versions":2191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2193},"package:pypi:ocrmac","ocrmac-7acc3c55","pypi:ocrmac","ocrmac",[597],[2192],"1.0.0",[56],{"id":2195,"slug":2196,"identity":2197,"label":2198,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2199,"versions":2200,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2201},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[574],[1642],[56],{"id":2203,"slug":2204,"identity":2205,"label":2206,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2207,"versions":2208,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2210},"package:pypi:openpyxl","openpyxl-2c369bc4","pypi:openpyxl","openpyxl",[597],[2209],"3.1.5",[56],{"id":2212,"slug":2213,"identity":2214,"label":2215,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2216,"versions":2217,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2218},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[564],[999],[56],{"id":2220,"slug":2221,"identity":2222,"label":2223,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2224,"versions":2225,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2226},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[564],[999],[56],{"id":2228,"slug":2229,"identity":2230,"label":2231,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2232,"versions":2233,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2234},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[564],[999],[56],{"id":2236,"slug":2237,"identity":2238,"label":2239,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2240,"versions":2241,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2242},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[564],[999],[56],{"id":2244,"slug":2245,"identity":2246,"label":2247,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2248,"versions":2249,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2251},"package:pypi:opentelemetry-instrumentation","opentelemetry-instrumentation-9bcfbe9e","pypi:opentelemetry-instrumentation","opentelemetry-instrumentation",[564],[2250],"0.59b0",[56],{"id":2253,"slug":2254,"identity":2255,"label":2256,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2257,"versions":2258,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2260},"package:pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha-b1a8b6f5","pypi:opentelemetry-instrumentation-alephalpha","opentelemetry-instrumentation-alephalpha",[564],[2259],"0.47.5",[56],{"id":2262,"slug":2263,"identity":2264,"label":2265,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2266,"versions":2267,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2268},"package:pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic-bf5e49cb","pypi:opentelemetry-instrumentation-anthropic","opentelemetry-instrumentation-anthropic",[564],[2259],[56],{"id":2270,"slug":2271,"identity":2272,"label":2273,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2274,"versions":2275,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2276},"package:pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock-8f6fc7c9","pypi:opentelemetry-instrumentation-bedrock","opentelemetry-instrumentation-bedrock",[564],[2259],[56],{"id":2278,"slug":2279,"identity":2280,"label":2281,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2282,"versions":2283,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2284},"package:pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb-9eb598fd","pypi:opentelemetry-instrumentation-chromadb","opentelemetry-instrumentation-chromadb",[564],[2259],[56],{"id":2286,"slug":2287,"identity":2288,"label":2289,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2290,"versions":2291,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2292},"package:pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere-83896a35","pypi:opentelemetry-instrumentation-cohere","opentelemetry-instrumentation-cohere",[564],[2259],[56],{"id":2294,"slug":2295,"identity":2296,"label":2297,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2298,"versions":2299,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2300},"package:pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai-236cb6a6","pypi:opentelemetry-instrumentation-crewai","opentelemetry-instrumentation-crewai",[564],[2259],[56],{"id":2302,"slug":2303,"identity":2304,"label":2305,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2306,"versions":2307,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2308},"package:pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai-dd555f24","pypi:opentelemetry-instrumentation-google-generativeai","opentelemetry-instrumentation-google-generativeai",[564],[2259],[56],{"id":2310,"slug":2311,"identity":2312,"label":2313,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2314,"versions":2315,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2316},"package:pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq-a9bf4841","pypi:opentelemetry-instrumentation-groq","opentelemetry-instrumentation-groq",[564],[2259],[56],{"id":2318,"slug":2319,"identity":2320,"label":2321,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2322,"versions":2323,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2324},"package:pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack-92025ed0","pypi:opentelemetry-instrumentation-haystack","opentelemetry-instrumentation-haystack",[564],[2259],[56],{"id":2326,"slug":2327,"identity":2328,"label":2329,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2330,"versions":2331,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2332},"package:pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb-337c7f86","pypi:opentelemetry-instrumentation-lancedb","opentelemetry-instrumentation-lancedb",[564],[2259],[56],{"id":2334,"slug":2335,"identity":2336,"label":2337,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2338,"versions":2339,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2340},"package:pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain-f89d1133","pypi:opentelemetry-instrumentation-langchain","opentelemetry-instrumentation-langchain",[564],[2259],[56],{"id":2342,"slug":2343,"identity":2344,"label":2345,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2346,"versions":2347,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2348},"package:pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex-866eb99d","pypi:opentelemetry-instrumentation-llamaindex","opentelemetry-instrumentation-llamaindex",[564],[2259],[56],{"id":2350,"slug":2351,"identity":2352,"label":2353,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2354,"versions":2355,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2356},"package:pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging-23ee835f","pypi:opentelemetry-instrumentation-logging","opentelemetry-instrumentation-logging",[564],[2250],[56],{"id":2358,"slug":2359,"identity":2360,"label":2361,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2362,"versions":2363,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2364},"package:pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo-7fffb308","pypi:opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-marqo",[564],[2259],[56],{"id":2366,"slug":2367,"identity":2368,"label":2369,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2370,"versions":2371,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2372},"package:pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp-6fbe8e0d","pypi:opentelemetry-instrumentation-mcp","opentelemetry-instrumentation-mcp",[564],[2259],[56],{"id":2374,"slug":2375,"identity":2376,"label":2377,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2378,"versions":2379,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2380},"package:pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus-dc786c2a","pypi:opentelemetry-instrumentation-milvus","opentelemetry-instrumentation-milvus",[564],[2259],[56],{"id":2382,"slug":2383,"identity":2384,"label":2385,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2386,"versions":2387,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2388},"package:pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai-af29742c","pypi:opentelemetry-instrumentation-mistralai","opentelemetry-instrumentation-mistralai",[564],[2259],[56],{"id":2390,"slug":2391,"identity":2392,"label":2393,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2394,"versions":2395,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2396},"package:pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama-2cbe8996","pypi:opentelemetry-instrumentation-ollama","opentelemetry-instrumentation-ollama",[564],[2259],[56],{"id":2398,"slug":2399,"identity":2400,"label":2401,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2402,"versions":2403,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2404},"package:pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai-68db94bf","pypi:opentelemetry-instrumentation-openai","opentelemetry-instrumentation-openai",[564],[2259],[56],{"id":2406,"slug":2407,"identity":2408,"label":2409,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2410,"versions":2411,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2412},"package:pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents-ac759c8f","pypi:opentelemetry-instrumentation-openai-agents","opentelemetry-instrumentation-openai-agents",[564],[2259],[56],{"id":2414,"slug":2415,"identity":2416,"label":2417,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2418,"versions":2419,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2420},"package:pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone-08d2858e","pypi:opentelemetry-instrumentation-pinecone","opentelemetry-instrumentation-pinecone",[564],[2259],[56],{"id":2422,"slug":2423,"identity":2424,"label":2425,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2426,"versions":2427,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2428},"package:pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant-3cbb3bd9","pypi:opentelemetry-instrumentation-qdrant","opentelemetry-instrumentation-qdrant",[564],[2259],[56],{"id":2430,"slug":2431,"identity":2432,"label":2433,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2434,"versions":2435,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2436},"package:pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis-c10bb4c6","pypi:opentelemetry-instrumentation-redis","opentelemetry-instrumentation-redis",[564],[2250],[56],{"id":2438,"slug":2439,"identity":2440,"label":2441,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2442,"versions":2443,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2444},"package:pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate-c6f5732e","pypi:opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-replicate",[564],[2259],[56],{"id":2446,"slug":2447,"identity":2448,"label":2449,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2450,"versions":2451,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2452},"package:pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests-baaa9f76","pypi:opentelemetry-instrumentation-requests","opentelemetry-instrumentation-requests",[564],[2250],[56],{"id":2454,"slug":2455,"identity":2456,"label":2457,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2458,"versions":2459,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2460},"package:pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker-55be6260","pypi:opentelemetry-instrumentation-sagemaker","opentelemetry-instrumentation-sagemaker",[564],[2259],[56],{"id":2462,"slug":2463,"identity":2464,"label":2465,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2466,"versions":2467,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2468},"package:pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy-8d638a32","pypi:opentelemetry-instrumentation-sqlalchemy","opentelemetry-instrumentation-sqlalchemy",[564],[2250],[56],{"id":2470,"slug":2471,"identity":2472,"label":2473,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2474,"versions":2475,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2476},"package:pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading-8d47431d","pypi:opentelemetry-instrumentation-threading","opentelemetry-instrumentation-threading",[564],[2250],[56],{"id":2478,"slug":2479,"identity":2480,"label":2481,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2482,"versions":2483,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2484},"package:pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together-e40c9610","pypi:opentelemetry-instrumentation-together","opentelemetry-instrumentation-together",[564],[2259],[56],{"id":2486,"slug":2487,"identity":2488,"label":2489,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2490,"versions":2491,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2492},"package:pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers-bbb71ecf","pypi:opentelemetry-instrumentation-transformers","opentelemetry-instrumentation-transformers",[564],[2259],[56],{"id":2494,"slug":2495,"identity":2496,"label":2497,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2498,"versions":2499,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2500},"package:pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3-32a4545b","pypi:opentelemetry-instrumentation-urllib3","opentelemetry-instrumentation-urllib3",[564],[2250],[56],{"id":2502,"slug":2503,"identity":2504,"label":2505,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2506,"versions":2507,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2508},"package:pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai-6a8490d9","pypi:opentelemetry-instrumentation-vertexai","opentelemetry-instrumentation-vertexai",[564],[2259],[56],{"id":2510,"slug":2511,"identity":2512,"label":2513,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2514,"versions":2515,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2516},"package:pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx-012d35eb","pypi:opentelemetry-instrumentation-watsonx","opentelemetry-instrumentation-watsonx",[564],[2259],[56],{"id":2518,"slug":2519,"identity":2520,"label":2521,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2522,"versions":2523,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2524},"package:pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate-95b5df11","pypi:opentelemetry-instrumentation-weaviate","opentelemetry-instrumentation-weaviate",[564],[2259],[56],{"id":2526,"slug":2527,"identity":2528,"label":2529,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2530,"versions":2531,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2532},"package:pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer-62ab002f","pypi:opentelemetry-instrumentation-writer","opentelemetry-instrumentation-writer",[564],[2259],[56],{"id":2534,"slug":2535,"identity":2536,"label":2537,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2538,"versions":2539,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2540},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[564],[999],[56],{"id":2542,"slug":2543,"identity":2544,"label":2545,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2546,"versions":2547,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2548},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[564],[999],[56],{"id":2550,"slug":2551,"identity":2552,"label":2553,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2554,"versions":2555,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2556},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[564],[2250],[56],{"id":2558,"slug":2559,"identity":2560,"label":2561,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2562,"versions":2563,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2565},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[564],[2564],"0.4.13",[56],{"id":2567,"slug":2568,"identity":2569,"label":2570,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2571,"versions":2572,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2573},"package:pypi:opentelemetry-util-http","opentelemetry-util-http-03fc7f64","pypi:opentelemetry-util-http","opentelemetry-util-http",[564],[2250],[56],{"id":2575,"slug":2576,"identity":2577,"label":2578,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2579,"versions":2581,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2583},"package:pypi:outcome","outcome-807eda1a","pypi:outcome","outcome",[2580],"Apache-2.0 OR MIT",[2582],"1.3.0.post0",[56],{"id":2585,"slug":2586,"identity":2587,"label":2588,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2589,"versions":2590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2592},"package:pypi:overrides","overrides-be2d7343","pypi:overrides","overrides",[564],[2591],"7.7.0",[56],{"id":2594,"slug":2595,"identity":2596,"label":2597,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2598,"versions":2599,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2600},"package:pypi:oxylabs","oxylabs-2206b7c8","pypi:oxylabs","oxylabs",[597],[1220],[56],{"id":2602,"slug":2603,"identity":2604,"label":2605,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2606,"versions":2608,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2610},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[2607,584],"Apache-2.0 OR BSD-2-Clause",[2609],"25.0",[56],{"id":2612,"slug":2613,"identity":2614,"label":2615,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2616,"versions":2617,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2619},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[574,584],[2618],"2.2.3",[56],{"id":2621,"slug":2622,"identity":2623,"label":2624,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2625,"versions":2626,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2628},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[597],[2627],"0.8.5",[56],{"id":2630,"slug":2631,"identity":2632,"label":2633,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2634,"versions":2635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2637},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[898],[2636],"0.12.1",[56],{"id":2639,"slug":2640,"identity":2641,"label":2642,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2643,"versions":2644,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2646},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[1542],[2645],"4.9.0",[56],{"id":2648,"slug":2649,"identity":2650,"label":2651,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2652,"versions":2653,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2654},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[597],[1496],[56],{"id":2656,"slug":2657,"identity":2658,"label":2659,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2660,"versions":2661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2663},"package:pypi:playwright","playwright-33f38203","pypi:playwright","playwright",[564],[2662],"1.55.0",[56],{"id":2665,"slug":2666,"identity":2667,"label":2668,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2669,"versions":2670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2671},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[597],[2015],[56],{"id":2673,"slug":2674,"identity":2675,"label":2676,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2677,"versions":2678,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2680},"package:pypi:polyfactory","polyfactory-6f8eab4d","pypi:polyfactory","polyfactory",[597],[2679],"2.22.3",[56],{"id":2682,"slug":2683,"identity":2684,"label":2685,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2686,"versions":2687,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2689},"package:pypi:posthog","posthog-fa78df25","pypi:posthog","posthog",[597],[2688],"3.25.0",[56],{"id":2691,"slug":2692,"identity":2693,"label":2694,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2695,"versions":2696,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2698},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[597],[2697],"4.3.0",[56],{"id":2700,"slug":2701,"identity":2702,"label":2703,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2704,"versions":2705,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2707},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[574,584],[2706],"3.0.52",[56],{"id":2709,"slug":2710,"identity":2711,"label":2712,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2713,"versions":2714,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2715},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[564],[657],[56],{"id":2717,"slug":2718,"identity":2719,"label":2720,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2721,"versions":2722,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2724},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[574],[2723],"7.1.2",[56],{"id":2726,"slug":2727,"identity":2728,"label":2729,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2730,"versions":2731,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2732},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1542],[1119],[56],{"id":2734,"slug":2735,"identity":2736,"label":2737,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2738,"versions":2739,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2740},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[597],[1292],[56],{"id":2742,"slug":2743,"identity":2744,"label":2745,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2746,"versions":2747,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2749},"package:pypi:pyclipper","pyclipper-aa2323ab","pypi:pyclipper","pyclipper",[597],[2748],"1.3.0.post6",[56],{"id":2751,"slug":2752,"identity":2753,"label":2754,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2755,"versions":2756,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2758},"package:pypi:pycodestyle","pycodestyle-2b26445c","pypi:pycodestyle","pycodestyle",[597],[2757],"2.14.0",[56],{"id":2760,"slug":2761,"identity":2762,"label":2763,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2764,"versions":2765,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2767},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[574],[2766],"2.23",[56],{"id":2769,"slug":2770,"identity":2771,"label":2772,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2773,"versions":2774,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2776},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[597],[2775],"2.12.3",[56],{"id":2778,"slug":2779,"identity":2780,"label":2781,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2782,"versions":2783,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2785},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[597],[2784],"2.41.4",[56],{"id":2787,"slug":2788,"identity":2789,"label":2790,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2791,"versions":2792,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2794},"package:pypi:pyee","pyee-885d20c2","pypi:pyee","pyee",[597],[2793],"13.0.0",[56],{"id":2796,"slug":2797,"identity":2798,"label":2799,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2800,"versions":2801,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2802},"package:pypi:pyflakes","pyflakes-9bd8cac4","pypi:pyflakes","pyflakes",[597],[1229],[56],{"id":2804,"slug":2805,"identity":2806,"label":2807,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2808,"versions":2809,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2811},"package:pypi:pylance","pylance-da7c006a","pypi:pylance","pylance",[584],[2810],"0.38.3",[56],{"id":2813,"slug":2814,"identity":2815,"label":2816,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2817,"versions":2818,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2820},"package:pypi:pylatexenc","pylatexenc-e20f6acb","pypi:pylatexenc","pylatexenc",[597],[2819],"2.10",[56],{"id":2822,"slug":2823,"identity":2824,"label":2825,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2826,"versions":2827,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2829},"package:pypi:pyobjc-core","pyobjc-core-adc05bb4","pypi:pyobjc-core","pyobjc-core",[597],[2828],"12.0",[56],{"id":2831,"slug":2832,"identity":2833,"label":2834,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2835,"versions":2836,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2837},"package:pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa-8e347170","pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa",[597],[2828],[56],{"id":2839,"slug":2840,"identity":2841,"label":2842,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2843,"versions":2844,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2845},"package:pypi:pyobjc-framework-coreml","pyobjc-framework-coreml-5e7c3b2a","pypi:pyobjc-framework-coreml","pyobjc-framework-coreml",[597],[2828],[56],{"id":2847,"slug":2848,"identity":2849,"label":2850,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2851,"versions":2852,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2853},"package:pypi:pyobjc-framework-quartz","pyobjc-framework-quartz-6a98fc9b","pypi:pyobjc-framework-quartz","pyobjc-framework-quartz",[597],[2828],[56],{"id":2855,"slug":2856,"identity":2857,"label":2858,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2859,"versions":2860,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2861},"package:pypi:pyobjc-framework-vision","pyobjc-framework-vision-7145bcee","pypi:pyobjc-framework-vision","pyobjc-framework-vision",[597],[2828],[56],{"id":2863,"slug":2864,"identity":2865,"label":2866,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2867,"versions":2868,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2870},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[584],[2869],"4.30.0",[56],{"id":2872,"slug":2873,"identity":2874,"label":2875,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2876,"versions":2877,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2879},"package:pypi:pysocks","pysocks-7cd576a7","pypi:pysocks","pysocks",[584],[2878],"1.7.1",[56],{"id":2881,"slug":2882,"identity":2883,"label":2884,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2885,"versions":2886,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2887},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[564],[1487],[56],{"id":2889,"slug":2890,"identity":2891,"label":2892,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2893,"versions":2894,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2896},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[584],[2895],"2.9.0.post0",[56],{"id":2898,"slug":2899,"identity":2900,"label":2901,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2902,"versions":2903,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2904},"package:pypi:python-docx","python-docx-734c6d0d","pypi:python-docx","python-docx",[597],[1487],[56],{"id":2906,"slug":2907,"identity":2908,"label":2909,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2910,"versions":2911,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2913},"package:pypi:python-pptx","python-pptx-8826554c","pypi:python-pptx","python-pptx",[597],[2912],"1.0.2",[56],{"id":2915,"slug":2916,"identity":2917,"label":2918,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2919,"versions":2920,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2922},"package:pypi:pytokens","pytokens-4f13eeb2","pypi:pytokens","pytokens",[597],[2921],"0.2.0",[56],{"id":2924,"slug":2925,"identity":2926,"label":2927,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2928,"versions":2929,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2931},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[597],[2930],"2025.2",[56],{"id":2933,"slug":2934,"identity":2935,"label":2936,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2937,"versions":2938,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2940},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2939],"311",[56],{"id":2942,"slug":2943,"identity":2944,"label":2945,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2946,"versions":2947,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2949},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[597],[2948],"6.0.3",[56],{"id":2951,"slug":2952,"identity":2953,"label":2954,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2955,"versions":2956,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2958},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[574],[2957],"27.1.0",[56],{"id":2960,"slug":2961,"identity":2962,"label":2963,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2964,"versions":2965,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2967},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[597],[2966],"3.14.1",[56],{"id":2969,"slug":2970,"identity":2971,"label":2972,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2973,"versions":2974,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2976},"package:pypi:rapidocr","rapidocr-452b83bd","pypi:rapidocr","rapidocr",[564],[2975],"3.4.2",[56],{"id":2978,"slug":2979,"identity":2980,"label":2981,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2982,"versions":2983,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2985},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[597],[2984],"0.37.0",[56],{"id":2987,"slug":2988,"identity":2989,"label":2990,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":2991,"versions":2993,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2995},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[564,2992],"Apache-2.0 AND CNRI-Python",[2994],"2025.10.23",[56],{"id":2997,"slug":2998,"identity":2999,"label":3000,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3001,"versions":3002,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3003},"package:pypi:requests-file","requests-file-706ecfac","pypi:requests-file","requests-file",[564],[1036],[56],{"id":3005,"slug":3006,"identity":3007,"label":3008,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3009,"versions":3010,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3012},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[597],[3011],"14.2.0",[56],{"id":3014,"slug":3015,"identity":3016,"label":3017,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3018,"versions":3019,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3021},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[597],[3020],"0.28.0",[56],{"id":3023,"slug":3024,"identity":3025,"label":3026,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3027,"versions":3028,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3030},"package:pypi:rtree","rtree-0efed1c9","pypi:rtree","rtree",[597],[3029],"1.4.1",[56],{"id":3032,"slug":3033,"identity":3034,"label":3035,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3036,"versions":3037,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3039},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[597],[3038],"0.14.2",[56],{"id":3041,"slug":3042,"identity":3043,"label":3044,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3045,"versions":3046,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3048},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[584],[3047],"0.6.2",[56],{"id":3050,"slug":3051,"identity":3052,"label":3053,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3054,"versions":3055,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3057},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[584],[3056],"1.16.3",[56],{"id":3059,"slug":3060,"identity":3061,"label":3062,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3063,"versions":3064,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3066},"package:pypi:selenium","selenium-e3f15a24","pypi:selenium","selenium",[564],[3065],"4.38.0",[56],{"id":3068,"slug":3069,"identity":3070,"label":3071,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3072,"versions":3073,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3075},"package:pypi:semchunk","semchunk-c2c8e504","pypi:semchunk","semchunk",[597],[3074],"2.2.2",[56],{"id":3077,"slug":3078,"identity":3079,"label":3080,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3081,"versions":3082,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3083},"package:pypi:sgmllib3k","sgmllib3k-c3d7a6ca","pypi:sgmllib3k","sgmllib3k",[584],[2192],[56],{"id":3085,"slug":3086,"identity":3087,"label":3088,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3089,"versions":3090,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3092},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[574],[3091],"2.1.2",[56],{"id":3094,"slug":3095,"identity":3096,"label":3097,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3098,"versions":3099,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3101},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[1542],[3100],"1.5.4",[56],{"id":3103,"slug":3104,"identity":3105,"label":3106,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3107,"versions":3108,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3109},"package:pypi:simple-websocket","simple-websocket-2bc2e925","pypi:simple-websocket","simple-websocket",[597],[1732],[56],{"id":3111,"slug":3112,"identity":3113,"label":3114,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3115,"versions":3116,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3118},"package:pypi:six","six-3c3888bd","pypi:six","six",[597],[3117],"1.17.0",[56],{"id":3120,"slug":3121,"identity":3122,"label":3123,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3124,"versions":3125,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3127},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2580],[3126],"1.3.1",[56],{"id":3129,"slug":3130,"identity":3131,"label":3132,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3133,"versions":3134,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3136},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[564],[3135],"2.4.0",[56],{"id":3138,"slug":3139,"identity":3140,"label":3141,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3142,"versions":3143,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3145},"package:pypi:spider-client","spider-client-04bbfc07","pypi:spider-client","spider-client",[597],[3144],"0.0.27",[56],{"id":3147,"slug":3148,"identity":3149,"label":3150,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3151,"versions":3152,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3154},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[597],[3153],"2.0.44",[56],{"id":3156,"slug":3157,"identity":3158,"label":3159,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3160,"versions":3161,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3163},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[574],[3162],"3.0.2",[56],{"id":3165,"slug":3166,"identity":3167,"label":3168,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3169,"versions":3170,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3172},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[597],[3171],"0.6.3",[56],{"id":3174,"slug":3175,"identity":3176,"label":3177,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3178,"versions":3179,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3181},"package:pypi:striprtf","striprtf-bb61a6b5","pypi:striprtf","striprtf",[574],[3180],"0.0.26",[56],{"id":3183,"slug":3184,"identity":3185,"label":3186,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3187,"versions":3188,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3190},"package:pypi:structlog","structlog-2a5a47ec","pypi:structlog","structlog",[2580],[3189],"25.5.0",[56],{"id":3192,"slug":3193,"identity":3194,"label":3195,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3196,"versions":3197,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3198},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[574,597,584],[1544],[56],{"id":3200,"slug":3201,"identity":3202,"label":3203,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3204,"versions":3205,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3207},"package:pypi:syncer","syncer-7ac13616","pypi:syncer","syncer",[597],[3206],"2.0.3",[56],{"id":3209,"slug":3210,"identity":3211,"label":3212,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3213,"versions":3214,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3216},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[597],[3215],"0.9.0",[56],{"id":3218,"slug":3219,"identity":3220,"label":3221,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3222,"versions":3223,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3225},"package:pypi:tantivy","tantivy-b8e058c3","pypi:tantivy","tantivy",[597],[3224],"0.25.0",[56],{"id":3227,"slug":3228,"identity":3229,"label":3230,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3231,"versions":3232,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3234},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[564],[3233],"9.1.2",[56],{"id":3236,"slug":3237,"identity":3238,"label":3239,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3240,"versions":3241,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3242},"package:pypi:thefuzz","thefuzz-77e9a0e0","pypi:thefuzz","thefuzz",[597],[620],[56],{"id":3244,"slug":3245,"identity":3246,"label":3247,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3248,"versions":3249,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3251},"package:pypi:tinysegmenter","tinysegmenter-eaea99bf","pypi:tinysegmenter","tinysegmenter",[584],[3250],"0.3",[56],{"id":3253,"slug":3254,"identity":3255,"label":3256,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3257,"versions":3258,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3260},"package:pypi:tldextract","tldextract-ed3c967e","pypi:tldextract","tldextract",[574],[3259],"5.3.0",[56],{"id":3262,"slug":3263,"identity":3264,"label":3265,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3266,"versions":3267,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3268},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[597],[1642],[56],{"id":3270,"slug":3271,"identity":3272,"label":3273,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3274,"versions":3275,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3277},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[574],[3276],"0.24.0",[56],{"id":3279,"slug":3280,"identity":3281,"label":3282,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3283,"versions":3284,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3285},"package:pypi:traceloop-sdk","traceloop-sdk-64e27d1c","pypi:traceloop-sdk","traceloop-sdk",[564],[2259],[56],{"id":3287,"slug":3288,"identity":3289,"label":3290,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3291,"versions":3292,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3293},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[574],[1063],[56],{"id":3295,"slug":3296,"identity":3297,"label":3298,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3299,"versions":3300,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3302},"package:pypi:trio","trio-5952fcdf","pypi:trio","trio",[2580],[3301],"0.31.0",[56],{"id":3304,"slug":3305,"identity":3306,"label":3307,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3308,"versions":3309,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3311},"package:pypi:trio-websocket","trio-websocket-71803d22","pypi:trio-websocket","trio-websocket",[597],[3310],"0.12.2",[56],{"id":3313,"slug":3314,"identity":3315,"label":3316,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3317,"versions":3318,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3320},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[597],[3319],"3.5.0",[56],{"id":3322,"slug":3323,"identity":3324,"label":3325,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3326,"versions":3327,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3328},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[597],[1687],[56],{"id":72,"slug":73,"identity":3330,"label":74,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3331,"versions":3332,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3334},"pypi:typing-extensions",[1090,584],[3333],"4.15.0",[56],{"id":3336,"slug":3337,"identity":3338,"label":3339,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3340,"versions":3341,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3342},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[597],[3215],[56],{"id":3344,"slug":3345,"identity":3346,"label":3347,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3348,"versions":3349,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3350},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[597],[1871],[56],{"id":3352,"slug":3353,"identity":3354,"label":3355,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3356,"versions":3357,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3358},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[564],[2930],[56],{"id":3360,"slug":3361,"identity":3362,"label":3363,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3364,"versions":3365,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3367},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[597],[3366],"5.3.1",[56],{"id":3369,"slug":3370,"identity":3371,"label":3372,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3373,"versions":3374,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3376},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[574],[3375],"0.38.0",[56],{"id":3378,"slug":3379,"identity":3380,"label":3381,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3382,"versions":3383,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3384},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[597],[3276],[56],{"id":3386,"slug":3387,"identity":3388,"label":3389,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3390,"versions":3391,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3393},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[597],[3392],"0.2.14",[56],{"id":3395,"slug":3396,"identity":3397,"label":3398,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3399,"versions":3400,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3401},"package:pypi:websocket-client","websocket-client-af182b1a","pypi:websocket-client","websocket-client",[564],[1399],[56],{"id":3403,"slug":3404,"identity":3405,"label":3406,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3407,"versions":3408,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3410},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[574],[3409],"15.0.1",[56],{"id":3412,"slug":3413,"identity":3414,"label":3415,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3416,"versions":3417,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3419},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[1025,584],[3418],"1.17.3",[56],{"id":3421,"slug":3422,"identity":3423,"label":3424,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3425,"versions":3426,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3427},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[597],[1487],[56],{"id":3429,"slug":3430,"identity":3431,"label":3432,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3433,"versions":3434,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3436},"package:pypi:xlsxwriter","xlsxwriter-fab6ebdd","pypi:xlsxwriter","xlsxwriter",[1025],[3435],"3.2.9",[56],{"id":3438,"slug":3439,"identity":3440,"label":3441,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3442,"versions":3443,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3445},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[564],[3444],"1.22.0",[56],{"id":3447,"slug":3448,"identity":3449,"label":3450,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":3451,"versions":3452,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":3454},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[597],[3453],"3.23.0",[56],[3456,3494,3527,3558,3593,3617,3639,3663,3707,3741,3774,3808,3841,3884,3914,3945,3972,3998,4023,4049,4085,4107,4134,4176,4202,4228,4275,4306,4330,4358,4387,4417,4446,4479,4509,4535,4558,4580,4607,4630,4655,4679,4706,4732,4754,4790,4816,4837,4861,4888,4908,4944,4969,4987,5016,5040,5064,5086,5119,5145,5174,5198,5216,5255,5281,5307,5332,5361,5390,5413,5440,5467,5503,5526,5549,5576,5603,5626,5654,5686,5711,5735,5762,5800,5826,5863,5887,5910,5934,5974,5992,6016,6039,6066,6087,6115,6137,6167,6217,6244,6263,6287,6313,6339,6360,6392,6415,6441,6467,6488,6508,6529,6558,6581,6603,6626,6662,6688,6711,6734,6757,6794,6822,6853,6874,6896,6920,6949,6973,6998,7030,7070,7097,7126,7146,7169,7198,7225,7244,7265,7288,7322,7350,7401,7427,7464,7496,7518,7557,7585,7603,7634,7656,7679,7703,7728,7757,7781,7803,7830,7853,7880,7902,7928,7957,7995,8021,8046,8072,8099,8125,8146,8175,8199,8226,8246,8276,8296,8316,8338,8367,8392,8424,8446,8467,8490,8515,8568,8590,8614,8636,8658,8682,8707,8731,8761,8784,8816,8843,8864,8894,8917,8945,8965,8986,9010,9041,9062,9089,9122,9142,9174,9203,9228,9249,9273,9300,9320,9346,9371,9400,9421,9458,9482,9505,9533,9559,9585,9612,9634,9657,9683,9702,9727,9751,9784,9809,9834,9861,9887,9912,9939,9962,9983,10007,10033,10056,10076,10104,10127,10150,10171,10205,10238,10265,10287,10309,10332,10359,10378,10405,10433,10453,10478,10508,10530,10551,10575,10601,10623,10647,10674,10705,10726,10748,10771,10799,10826,10851,10880,10899,10922,10949,10970,11002,11023,11041,11067,11091,11114,11147,11175,11201,11225,11244,11273,11294,11315,11345,11367,11395,11416,11439,11464,11489,11512,11535,11557,11585,11609,11638,11664,11685,11713,11736,11764,11786,11809,11833,11860,11885,11909,11936,11957,11981,12002,12026,12041,12068,12094,12111,12139,12161,12187,12207,12226,12259,12277,12303,12330,12354,12379,12406,12433,12455,12487,12514,12537,12559,12590,12614,12642,12669,12694,12716,12738,12768,12798,12832,12861,12886,12912,12944,12964,12985,13009,13032,13060,13088,13115,13142,13169,13197,13223,13241,13263,13287,13313,13337,13359,13382,13410,13436,13460,13480,13510,13532,13558,13610,13635,13658,13683,13717,13742,13767,13790,13815,13838,13870,13892,13920,13939,13966,13993,14021,14046,14074,14093,14125,14152,14175,14195,14216,14241,14262,14288,14318,14338,14354,14374,14391,14410,14427,14448,14464,14479,14496,14511,14528,14545,14562,14575,14588,14601,14614,14627,14640,14653,14666,14688,14704,14719],{"id":105,"slug":3457,"dossier":90,"summary":3458,"aliases":3459,"sourceIds":3462,"published":3463,"modified":3464,"checkedAt":7,"severity":3465,"references":3469,"versionKeys":3483,"packageCount":32,"repositoryCount":744},"ghsa-22hg-r758-rrw9-14adf850","Pillow: Infinite loop in MIC n_frames when the embedded TIFF",[3460,3461],"BIT-pillow-2026-112390","CVE-2026-112390",[105],"2026-10-21T20:39:49Z","2026-10-26T08:56:03.565713059Z",[3466],{"type":3467,"score":3468},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3470,3473,3476,3478,3481],{"type":3471,"url":3472},"WEB","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-22hg-r758-rrw9",{"type":3474,"url":3475},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112390",{"type":3471,"url":3477},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F26cb3ed061173b817b9ee4b6f507cb0e1e293218",{"type":3479,"url":3480},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":3471,"url":3482},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F13.0.0",[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0","pypi:pillow@12.3.0",{"id":106,"slug":3495,"dossier":47,"summary":3496,"aliases":3497,"sourceIds":3500,"published":3501,"modified":3502,"checkedAt":7,"severity":3503,"references":3506,"versionKeys":3523,"packageCount":32,"repositoryCount":869},"ghsa-23w6-3w8w-8484-7e1b73d9","pypdf: Possible long runtimes\u002Flarge memory usage when retrieving outlines",[3498,3499],"CVE-2026-84310","PYSEC-2026-3910",[106,3499],"2026-09-01T21:28:37Z","2026-09-10T12:25:45.197931157Z",[3504],{"type":3467,"score":3505},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3507,3509,3511,3513,3515,3517,3519,3521],{"type":3471,"url":3508},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3471,"url":3510},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3966",{"type":3471,"url":3512},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fd91ab705fd81ed1a9cec175c6958600dea1a4942",{"type":3479,"url":3514},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":3471,"url":3516},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.1",{"type":3479,"url":3518},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":3474,"url":3520},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-23w6-3w8w-8484",{"type":3474,"url":3522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84310",[3524,3525,3526],"pypi:pypdf@5.1.0","pypi:pypdf@6.1.3","pypi:pypdf@6.14.2",{"id":107,"slug":3528,"dossier":47,"summary":3529,"aliases":3530,"sourceIds":3533,"published":3534,"modified":3535,"checkedAt":7,"severity":3536,"references":3542,"versionKeys":3557,"packageCount":32,"repositoryCount":103},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[3531,3532],"CVE-2026-48156","PYSEC-2026-3004",[107,3532],"2026-06-12T18:29:59Z","2026-09-10T03:51:07.304973624Z",[3537,3540],{"type":3538,"score":3539},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3467,"score":3541},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3543,3545,3547,3549,3551,3552,3554,3555],{"type":3471,"url":3544},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":3474,"url":3546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":3471,"url":3548},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":3471,"url":3550},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":3479,"url":3514},{"type":3471,"url":3553},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":3479,"url":3518},{"type":3474,"url":3556},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[3524,3525],{"id":108,"slug":3559,"dossier":47,"summary":3560,"aliases":3561,"sourceIds":3564,"published":3565,"modified":3566,"checkedAt":7,"severity":3567,"references":3570,"versionKeys":3591,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[3562,3563],"CVE-2024-39689","PYSEC-2024-230",[108,3563],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[3568],{"type":3538,"score":3569},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3571,3573,3575,3578,3580,3582,3585,3587,3589],{"type":3474,"url":3572},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":3474,"url":3574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":3576,"url":3577},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":3479,"url":3579},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":3471,"url":3581},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":3583,"url":3584},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":3471,"url":3586},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":3474,"url":3588},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":3474,"url":3590},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[3592],"pypi:certifi@2024.6.2",{"id":109,"slug":3594,"dossier":90,"summary":3595,"aliases":3596,"sourceIds":3599,"published":3600,"modified":3601,"checkedAt":7,"severity":3602,"references":3605,"versionKeys":3616,"packageCount":32,"repositoryCount":744},"ghsa-24rc-8hj2-v98c-379a2f18","Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape \u002F absolute mode",[3597,3598],"BIT-pillow-2026-96638","CVE-2026-96638",[109],"2026-10-22T15:59:35Z","2026-10-29T10:55:36.262902070Z",[3603],{"type":3538,"score":3604},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3606,3608,3610,3612,3614,3615],{"type":3471,"url":3607},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-24rc-8hj2-v98c",{"type":3474,"url":3609},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96638",{"type":3471,"url":3611},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10015",{"type":3471,"url":3613},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe7794835e323ff2691d9b3a974cade1a44301b9a",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":110,"slug":3618,"dossier":90,"summary":3619,"aliases":3620,"sourceIds":3623,"published":3624,"modified":3625,"checkedAt":7,"severity":3626,"references":3629,"versionKeys":3638,"packageCount":32,"repositoryCount":744},"ghsa-254f-3936-288h-1cc364b4","Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()",[3621,3622],"BIT-pillow-2026-112391","CVE-2026-112391",[110],"2026-10-21T21:11:07Z","2026-10-26T08:56:17.690706279Z",[3627],{"type":3467,"score":3628},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3630,3632,3634,3636,3637],{"type":3471,"url":3631},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-254f-3936-288h",{"type":3474,"url":3633},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112391",{"type":3471,"url":3635},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F94cb11c44ff7345414da17ebfea1598a529ad9cd",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":111,"slug":3640,"dossier":90,"summary":3641,"aliases":3642,"sourceIds":3646,"published":3647,"modified":3648,"checkedAt":7,"severity":3649,"references":3653,"versionKeys":3662,"packageCount":32,"repositoryCount":744},"ghsa-27h8-gf7j-v5hc-bd4ebeac","Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images",[3643,3644,3645],"BIT-pillow-2026-112392","CVE-2026-112392","PYSEC-2026-4326",[111,3645],"2026-10-19T22:17:06.587Z","2026-10-27T11:10:35.409737764Z",[3650,3651],{"type":3467,"score":3468},{"type":3538,"score":3652},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3654,3656,3658,3660,3661],{"type":3576,"url":3655},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-27h8-gf7j-v5hc",{"type":3474,"url":3657},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112392",{"type":3576,"url":3659},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F443e3130a8c11594fd0e296afad497e11e678961",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":112,"slug":3664,"dossier":47,"summary":3665,"aliases":3666,"sourceIds":3669,"published":3670,"modified":3671,"checkedAt":7,"severity":3672,"references":3675,"versionKeys":3696,"packageCount":32,"repositoryCount":3706},"ghsa-27vj-qcqg-25rc-06b922e9","fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution",[3667,3668],"CVE-2026-104851","PYSEC-2026-4217",[112,3668],"2026-10-05T22:53:22Z","2026-10-15T14:56:18.658408345Z",[3673],{"type":3538,"score":3674},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3676,3678,3680,3682,3684,3686,3688,3690,3692,3694],{"type":3471,"url":3677},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fsecurity\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",{"type":3474,"url":3679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104851",{"type":3471,"url":3681},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2029",{"type":3471,"url":3683},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2039",{"type":3471,"url":3685},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002F86438783f93b1398ef245b92f0e6063b445b611c",{"type":3471,"url":3687},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002Fa1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8",{"type":3479,"url":3689},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec",{"type":3471,"url":3691},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Freleases\u002Ftag\u002F2026.6.0",{"type":3479,"url":3693},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffsspec",{"type":3474,"url":3695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",[3697,3698,3699,3700,3701,3702,3703,3704,3705],"pypi:fsspec@2024.9.0","pypi:fsspec@2025.10.0","pypi:fsspec@2025.3.0","pypi:fsspec@2025.3.2","pypi:fsspec@2025.5.0","pypi:fsspec@2025.9.0","pypi:fsspec@2026.1.0","pypi:fsspec@2026.2.0","pypi:fsspec@2026.3.0",15,{"id":113,"slug":3708,"dossier":47,"summary":3709,"aliases":3710,"sourceIds":3713,"published":3714,"modified":3715,"checkedAt":7,"severity":3716,"references":3719,"versionKeys":3731,"packageCount":32,"repositoryCount":754},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[3711,3712],"CVE-2026-4372","PYSEC-2026-2289",[113,3712],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[3717],{"type":3538,"score":3718},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3720,3722,3724,3726,3729],{"type":3474,"url":3721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":3576,"url":3723},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":3479,"url":3725},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":3727,"url":3728},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":3474,"url":3730},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[3732,3733,3734,3735,3736,3737,3738,3739,3740],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":114,"slug":3742,"dossier":47,"summary":3743,"aliases":3744,"sourceIds":3747,"published":3748,"modified":3749,"checkedAt":7,"severity":3750,"references":3753,"versionKeys":3770,"packageCount":32,"repositoryCount":832},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[3745,3746],"CVE-2025-54121","PYSEC-2026-1941",[114,3746],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[3751],{"type":3538,"score":3752},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3754,3756,3758,3760,3762,3764,3766,3768],{"type":3471,"url":3755},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":3474,"url":3757},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":3576,"url":3759},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":3479,"url":3761},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":3471,"url":3763},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":3471,"url":3765},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":3479,"url":3767},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":3474,"url":3769},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[3771,3772,3773],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":115,"slug":3775,"dossier":47,"summary":3776,"aliases":3777,"sourceIds":3780,"published":3781,"modified":3782,"checkedAt":7,"severity":3783,"references":3787,"versionKeys":3798,"packageCount":32,"repositoryCount":754},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[3778,3779],"CVE-2026-54279","PYSEC-2026-2112",[115,3779],"2026-06-15T20:08:51Z","2026-11-03T16:45:04.163545105Z",[3784,3785],{"type":3538,"score":3652},{"type":3467,"score":3786},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",[3788,3790,3792,3794,3796],{"type":3474,"url":3789},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":3474,"url":3791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54279",{"type":3576,"url":3793},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",{"type":3479,"url":3795},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":3471,"url":3797},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2112.yaml",[3799,3800,3801,3802,3803,3804,3805,3806,3807],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":116,"slug":3809,"dossier":47,"summary":3810,"aliases":3811,"sourceIds":3814,"published":3815,"modified":3816,"checkedAt":7,"severity":3817,"references":3822,"versionKeys":3839,"packageCount":32,"repositoryCount":32},"ghsa-2g59-m95p-pgfq-b960a1a2","Chainlit contain a server-side request forgery (SSRF) vulnerability",[3812,3813],"CVE-2026-22219","PYSEC-2026-1237",[116,3813],"2026-01-20T00:30:28Z","2026-07-07T17:57:22.370684872Z",[3818,3820],{"type":3538,"score":3819},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"type":3467,"score":3821},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N",[3823,3825,3827,3829,3831,3833,3835,3837],{"type":3474,"url":3824},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22219",{"type":3471,"url":3826},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002Fffc3cce648b343b933e10e85ee5805c7e02ab3bf",{"type":3479,"url":3828},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit",{"type":3471,"url":3830},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.9.4",{"type":3471,"url":3832},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-sqlalchemy-data-layer-ssrf-via-project-element",{"type":3471,"url":3834},"https:\u002F\u002Fwww.zafran.io\u002Fresources\u002Fchainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover",{"type":3479,"url":3836},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fchainlit",{"type":3474,"url":3838},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g59-m95p-pgfq",[3840],"pypi:chainlit@2.8.3",{"id":117,"slug":3842,"dossier":47,"summary":3843,"aliases":3844,"sourceIds":3846,"published":3847,"modified":3848,"checkedAt":7,"severity":3849,"references":3852,"versionKeys":3880,"packageCount":32,"repositoryCount":3883},"ghsa-2g87-pp6c-29x5-5aaa26fd","aiohttp: Multiple instances of excessive or unbounded memory\u002FCPU use",[3845],"CVE-2026-123817",[117],"2026-10-19T17:07:23Z","2026-11-09T21:30:07.738926065Z",[3850],{"type":3467,"score":3851},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3853,3855,3857,3859,3861,3863,3865,3867,3869,3871,3873,3875,3877,3878],{"type":3471,"url":3854},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2g87-pp6c-29x5",{"type":3471,"url":3856},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F09bcaa73ff084a0c539bbf16a0a78743acb7141f",{"type":3471,"url":3858},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae507423f681161efa77d20052b4054397c7fb6",{"type":3471,"url":3860},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F3d850ee9b92573c7e913821cbcb96005beb3f4df",{"type":3471,"url":3862},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47babd8c23ca79e2bae6cc8dcb5752b61e369fc7",{"type":3471,"url":3864},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F615fec3d4f088f30d2ee72cad760152e92aa1c53",{"type":3471,"url":3866},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6963ee0befec1502b6bb7b4db6c72d044c08f4fa",{"type":3471,"url":3868},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a4f6682817839313b04b8e5cea2b39c1a88ab4f",{"type":3471,"url":3870},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8cfbe9abe5e11b84006a10f9bdf82bf607671dab",{"type":3471,"url":3872},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa555ab698e08e9baea7386d5b4c0761cb8956fdd",{"type":3471,"url":3874},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc6ac0e44c3c573ff9616f4a6a532992538b31e43",{"type":3471,"url":3876},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fd925a80539ffd227da1d93ab4a5bff123cc777db",{"type":3479,"url":3795},{"type":3471,"url":3879},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.4",[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],"pypi:aiohttp@3.14.1","pypi:aiohttp@3.14.3",13,{"id":118,"slug":3885,"dossier":47,"summary":3886,"aliases":3887,"sourceIds":3890,"published":3891,"modified":3892,"checkedAt":7,"severity":3893,"references":3895,"versionKeys":3910,"packageCount":32,"repositoryCount":832},"ghsa-2gx3-rcp4-g85q-9272f372","PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)",[3888,3889],"CVE-2026-101917","PYSEC-2026-4140",[118,3889],"2026-09-29T23:11:51Z","2026-10-01T17:56:20.150726241Z",[3894],{"type":3538,"score":3752},[3896,3898,3900,3902,3904,3906,3908],{"type":3471,"url":3897},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",{"type":3474,"url":3899},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101917",{"type":3471,"url":3901},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fba4853a75fb9676362da17f67d0f64bd18afd4e1",{"type":3479,"url":3903},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":3471,"url":3905},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.14.0",{"type":3479,"url":3907},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyjwt",{"type":3474,"url":3909},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2gx3-rcp4-g85q",[3911,3912,3913],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.13.0","pypi:pyjwt@2.9.0",{"id":119,"slug":3915,"dossier":47,"summary":3916,"aliases":3917,"sourceIds":3920,"published":3921,"modified":3922,"checkedAt":7,"severity":3923,"references":3926,"versionKeys":3942,"packageCount":32,"repositoryCount":832},"ghsa-2jhm-w3mp-jcwr-97c80e03","NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts",[3918,3919],"CVE-2026-12372","PYSEC-2026-3955",[119,3919],"2026-08-09T23:16:35.793Z","2026-10-15T14:45:08.355892144Z",[3924],{"type":3538,"score":3925},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3927,3929,3931,3933,3935,3937,3940],{"type":3474,"url":3928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12372",{"type":3471,"url":3930},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F4a820afa58810cd05049b6c6eae306694d6cfe65",{"type":3479,"url":3932},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":3471,"url":3934},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.0",{"type":3471,"url":3936},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3955.yaml",{"type":3938,"url":3939},"REPORT","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2911b643-571c-42e4-b0c2-9a1fa6f491db",{"type":3474,"url":3941},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2jhm-w3mp-jcwr",[3943,3944],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":120,"slug":3946,"dossier":47,"summary":3947,"aliases":3948,"sourceIds":3951,"published":3952,"modified":3953,"checkedAt":7,"severity":3954,"references":3956,"versionKeys":3971,"packageCount":32,"repositoryCount":103},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[3949,3950],"CVE-2026-24688","PYSEC-2026-1827",[120,3950],"2026-01-26T23:37:57Z","2026-09-10T03:50:32.300137224Z",[3955],{"type":3467,"score":3541},[3957,3959,3961,3963,3965,3966,3968,3969],{"type":3471,"url":3958},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":3474,"url":3960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":3471,"url":3962},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":3471,"url":3964},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":3479,"url":3514},{"type":3471,"url":3967},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":3479,"url":3518},{"type":3474,"url":3970},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[3524,3525],{"id":121,"slug":3973,"dossier":47,"summary":3974,"aliases":3975,"sourceIds":3978,"published":3979,"modified":3980,"checkedAt":7,"severity":3981,"references":3984,"versionKeys":3997,"packageCount":32,"repositoryCount":103},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[3976,3977],"CVE-2026-27628","PYSEC-2026-3005",[121,3977],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[3982],{"type":3467,"score":3983},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3985,3987,3989,3991,3993,3994,3995],{"type":3471,"url":3986},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":3474,"url":3988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":3471,"url":3990},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":3471,"url":3992},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":3479,"url":3514},{"type":3479,"url":3518},{"type":3474,"url":3996},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[3524,3525],{"id":122,"slug":3999,"dossier":47,"summary":4000,"aliases":4001,"sourceIds":4004,"published":4005,"modified":4006,"checkedAt":7,"severity":4007,"references":4012,"versionKeys":4022,"packageCount":32,"repositoryCount":765},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[4002,4003],"CVE-2026-34514","PYSEC-2026-2096",[122,4003],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[4008,4010],{"type":3467,"score":4009},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3538,"score":4011},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4013,4015,4017,4019,4020],{"type":3576,"url":4014},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":3474,"url":4016},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":3576,"url":4018},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":3479,"url":3795},{"type":3474,"url":4021},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[3799,3800,3801,3802,3803,3804,3805,3806],{"id":123,"slug":4024,"dossier":47,"summary":4025,"aliases":4026,"sourceIds":4029,"published":4030,"modified":4031,"checkedAt":7,"severity":4032,"references":4034,"versionKeys":4045,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[4027,4028],"CVE-2026-49476","PYSEC-2026-3071",[123,4028],"2026-07-09T13:37:40Z","2026-09-10T03:50:51.299551127Z",[4033],{"type":3538,"score":3652},[4035,4037,4039,4041,4043],{"type":3471,"url":4036},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3479,"url":4038},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":3479,"url":4040},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":3474,"url":4042},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":3474,"url":4044},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[4046,4047,4048],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":124,"slug":4050,"dossier":47,"summary":4051,"aliases":4052,"sourceIds":4055,"published":4056,"modified":4057,"checkedAt":7,"severity":4058,"references":4061,"versionKeys":4078,"packageCount":32,"repositoryCount":4084},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[4053,4054],"CVE-2025-66471","PYSEC-2026-1994",[124,4054],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[4059],{"type":3467,"score":4060},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[4062,4064,4066,4068,4070,4072,4074,4076],{"type":3471,"url":4063},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3474,"url":4065},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":3576,"url":4067},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":3471,"url":4069},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":3474,"url":4071},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":3471,"url":4073},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":3479,"url":4075},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":3479,"url":4077},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[4079,4080,4081,4082,4083],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",17,{"id":125,"slug":4086,"dossier":90,"summary":4087,"aliases":4088,"sourceIds":4091,"published":4092,"modified":4093,"checkedAt":7,"severity":4094,"references":4097,"versionKeys":4106,"packageCount":32,"repositoryCount":744},"ghsa-332p-7hrc-92wf-af7b2989","Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",[4089,4090],"BIT-pillow-2026-112393","CVE-2026-112393",[125],"2026-10-21T21:28:09Z","2026-10-26T08:56:07.886625845Z",[4095],{"type":3467,"score":4096},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4098,4100,4102,4104,4105],{"type":3471,"url":4099},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-332p-7hrc-92wf",{"type":3474,"url":4101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112393",{"type":3471,"url":4103},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F11582e5ffbdceb973d5ee593f3105af5a9852b40",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":126,"slug":4108,"dossier":47,"summary":4109,"aliases":4110,"sourceIds":4113,"published":4114,"modified":4115,"checkedAt":7,"severity":4116,"references":4119,"versionKeys":4132,"packageCount":32,"repositoryCount":103},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[4111,4112],"CVE-2025-30167","PYSEC-2026-1477",[126,4112],"2025-06-04T21:00:23Z","2026-09-10T03:50:24.754946270Z",[4117],{"type":3538,"score":4118},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4120,4122,4124,4126,4128,4130],{"type":3471,"url":4121},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":3474,"url":4123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":3471,"url":4125},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":3479,"url":4127},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":3479,"url":4129},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":3474,"url":4131},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[4133],"pypi:jupyter-core@5.7.2",{"id":127,"slug":4135,"dossier":47,"summary":4136,"aliases":4137,"sourceIds":4141,"published":4142,"modified":4143,"checkedAt":7,"severity":4144,"references":4151,"versionKeys":4172,"packageCount":32,"repositoryCount":869},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[4138,4139,4140],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[127,4140],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[4145,4147,4149],{"type":3538,"score":4146},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":3467,"score":4148},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3538,"score":4150},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4152,4154,4156,4158,4160,4162,4164,4166,4168,4170],{"type":3474,"url":4153},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":3938,"url":4155},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":3938,"url":4157},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":3471,"url":4159},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":3479,"url":4161},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":3471,"url":4163},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":3938,"url":4165},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":3474,"url":4167},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":3474,"url":4169},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":3474,"url":4171},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[4173,4174,4175],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":128,"slug":4177,"dossier":47,"summary":4178,"aliases":4179,"sourceIds":4182,"published":4183,"modified":4184,"checkedAt":7,"severity":4185,"references":4187,"versionKeys":4201,"packageCount":32,"repositoryCount":869},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[4180,4181],"CVE-2025-3933","PYSEC-2026-1977",[128,4181],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[4186],{"type":3538,"score":3752},[4188,4190,4192,4194,4195,4197,4199],{"type":3474,"url":4189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":3471,"url":4191},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":3471,"url":4193},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":3479,"url":3725},{"type":3471,"url":4196},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":3479,"url":4198},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":3474,"url":4200},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[3732,3733,3734],{"id":129,"slug":4203,"dossier":47,"summary":4204,"aliases":4205,"sourceIds":4208,"published":4209,"modified":4210,"checkedAt":7,"severity":4211,"references":4214,"versionKeys":4227,"packageCount":32,"repositoryCount":4084},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[4206,4207],"CVE-2026-21441","PYSEC-2026-1996",[129,4207],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[4212,4213],{"type":3538,"score":3652},{"type":3467,"score":4060},[4215,4217,4219,4221,4222,4224,4225],{"type":3471,"url":4216},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":3474,"url":4218},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":3576,"url":4220},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":3479,"url":4075},{"type":3471,"url":4223},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":3479,"url":4077},{"type":3474,"url":4226},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[4079,4080,4081,4082,4083],{"id":130,"slug":4229,"dossier":47,"summary":4230,"aliases":4231,"sourceIds":4234,"published":4235,"modified":4236,"checkedAt":7,"severity":4237,"references":4241,"versionKeys":4272,"packageCount":32,"repositoryCount":103},"ghsa-3936-cmfr-pm3m-b8e96095","Black: Arbitrary file writes from unsanitized user input in cache file name",[4232,4233],"CVE-2026-32274","PYSEC-2026-2121",[130,4233],"2026-03-12T18:33:10Z","2026-09-10T03:50:36.703011526Z",[4238,4239],{"type":3538,"score":3569},{"type":3467,"score":4240},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4242,4244,4246,4248,4250,4252,4254,4256,4258,4260,4262,4264,4266,4268,4270],{"type":3474,"url":4243},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-3936-cmfr-pm3m",{"type":3474,"url":4245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32274",{"type":3471,"url":4247},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F4176",{"type":3576,"url":4249},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5038",{"type":3576,"url":4251},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F4937fe6cf241139ddbfc16b0bdbb5b422798909d",{"type":3471,"url":4253},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Fed770ba4dd50c419148a0fca2b43937a7447e1f9",{"type":3474,"url":4255},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":3474,"url":4257},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":3474,"url":4259},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":3471,"url":4261},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32274",{"type":3938,"url":4263},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2447111",{"type":3479,"url":4265},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack",{"type":3474,"url":4267},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.3.1",{"type":3471,"url":4269},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2026-2121.yaml",{"type":3471,"url":4271},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32274.json",[4273,4274],"pypi:black@23.12.1","pypi:black@25.9.0",{"id":131,"slug":4276,"dossier":47,"summary":4277,"aliases":4278,"sourceIds":4281,"published":4282,"modified":4283,"checkedAt":7,"severity":4284,"references":4287,"versionKeys":4300,"packageCount":32,"repositoryCount":784},"ghsa-394h-qwmc-48pf-2e9bb5ce","virtualenv: Xonsh activation literals depend on the script decoding codec",[4279,4280],"BIT-virtualenv-2026-113718","CVE-2026-113718",[131],"2026-10-23T22:24:43Z","2026-10-29T10:55:57.228294866Z",[4285],{"type":3467,"score":4286},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4288,4290,4292,4294,4296,4298],{"type":3471,"url":4289},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-394h-qwmc-48pf",{"type":3474,"url":4291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113718",{"type":3471,"url":4293},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3432",{"type":3471,"url":4295},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe5fc2e6e189a877ff559af288919e3525d13e5e0",{"type":3479,"url":4297},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":3471,"url":4299},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.9",[4301,4302,4303,4304,4305],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.32.0","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":132,"slug":4307,"dossier":47,"summary":4308,"aliases":4309,"sourceIds":4311,"published":4312,"modified":4313,"checkedAt":7,"severity":4314,"references":4317,"versionKeys":4329,"packageCount":32,"repositoryCount":869},"ghsa-39mj-jf6j-2qj3-9b85a94b","pypdf: Possible infinite loop when hitting EOF in standard xref table",[4310],"CVE-2026-113794",[132],"2026-10-21T16:54:44Z","2026-10-21T17:00:26.618873039Z",[4315],{"type":3467,"score":4316},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4318,4320,4322,4324,4326,4327],{"type":3471,"url":4319},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-39mj-jf6j-2qj3",{"type":3471,"url":4321},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F4169",{"type":3471,"url":4323},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4170",{"type":3471,"url":4325},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F37e1cd681744bac38b159f7e1c614eee8d639c58",{"type":3479,"url":3514},{"type":3471,"url":4328},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.20.0",[3524,3525,3526],{"id":133,"slug":4331,"dossier":47,"summary":4332,"aliases":4333,"sourceIds":4337,"published":4338,"modified":4339,"checkedAt":7,"severity":4340,"references":4343,"versionKeys":4356,"packageCount":32,"repositoryCount":32},"ghsa-3cr3-8m4c-fpxw-0b16529f","Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)",[4334,4335,4336],"CVE-2026-105747","PYSEC-2026-4194","PYSEC-2026-4209",[133,4335],"2026-10-05T22:16:57.633Z","2026-10-15T14:56:00.401934996Z",[4341],{"type":3538,"score":4342},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4344,4346,4348,4350,4352,4354],{"type":3576,"url":4345},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-3cr3-8m4c-fpxw",{"type":3474,"url":4347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105747",{"type":3576,"url":4349},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4412",{"type":3576,"url":4351},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002Febae65cd71c37c88b36185b406a449b92d8f7ffa",{"type":3479,"url":4353},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling",{"type":3474,"url":4355},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.131.0",[4357],"pypi:docling@2.58.0",{"id":134,"slug":4359,"dossier":47,"summary":4360,"aliases":4361,"sourceIds":4364,"published":4365,"modified":4366,"checkedAt":7,"severity":4367,"references":4371,"versionKeys":4386,"packageCount":32,"repositoryCount":103},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[4362,4363],"CVE-2026-40260","PYSEC-2026-3006",[134,4363],"2026-04-10T20:59:36Z","2026-09-10T03:50:42.398553260Z",[4368,4369],{"type":3538,"score":3752},{"type":3467,"score":4370},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4372,4374,4376,4378,4380,4381,4383,4384],{"type":3471,"url":4373},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":3474,"url":4375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":3471,"url":4377},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":3471,"url":4379},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":3479,"url":3514},{"type":3471,"url":4382},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":3479,"url":3518},{"type":3474,"url":4385},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[3524,3525],{"id":135,"slug":4388,"dossier":47,"summary":4389,"aliases":4390,"sourceIds":4393,"published":4394,"modified":4395,"checkedAt":7,"severity":4396,"references":4401,"versionKeys":4415,"packageCount":32,"repositoryCount":822},"ghsa-3gq4-3j92-5w49-897f59b8","NLTK: Corpus Reader Sandbox Bypass",[4391,4392],"CVE-2026-79674","PYSEC-2026-3736",[135,4392],"2026-08-25T16:17:27.873Z","2026-09-08T17:15:03.431037417Z",[4397,4399],{"type":3467,"score":4398},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3467,"score":4400},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4402,4404,4406,4408,4409,4411,4413],{"type":3727,"url":4403},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gq4-3j92-5w49",{"type":3474,"url":4405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79674",{"type":3471,"url":4407},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbc007200d123c1a98d74c2eb230f5e06c53886b8",{"type":3479,"url":3932},{"type":3471,"url":4410},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.3",{"type":3471,"url":4412},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3736.yaml",{"type":3474,"url":4414},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-corpus-reader-constructors",[4416,3943,3944],"pypi:nltk@3.10.0",{"id":136,"slug":4418,"dossier":47,"summary":4419,"aliases":4420,"sourceIds":4423,"published":4424,"modified":4425,"checkedAt":7,"severity":4426,"references":4431,"versionKeys":4445,"packageCount":32,"repositoryCount":832},"ghsa-3gqm-fcw5-w839-cc39684a","NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure",[4421,4422],"CVE-2026-63311","PYSEC-2026-3723",[136,4422],"2026-08-22T15:16:19.233Z","2026-09-02T16:00:17.562331221Z",[4427,4429],{"type":3467,"score":4428},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L",{"type":3467,"score":4430},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4432,4434,4436,4438,4439,4440,4441,4443],{"type":3727,"url":4433},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3gqm-fcw5-w839",{"type":3474,"url":4435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63311",{"type":3471,"url":4437},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3582",{"type":3471,"url":3930},{"type":3479,"url":3932},{"type":3471,"url":3934},{"type":3471,"url":4442},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3723.yaml",{"type":3474,"url":4444},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-via-dns-resolution-failure",[3943,3944],{"id":137,"slug":4447,"dossier":47,"summary":4448,"aliases":4449,"sourceIds":4452,"published":4453,"modified":4454,"checkedAt":7,"severity":4455,"references":4462,"versionKeys":4478,"packageCount":32,"repositoryCount":32},"ghsa-3hhw-38pf-pxj6-71b22ab9","NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely",[4450,4451],"CVE-2026-62383","PYSEC-2026-3726",[137,4451],"2026-08-22T15:16:17.883Z","2026-09-08T16:45:03.602432270Z",[4456,4458,4460],{"type":3538,"score":4457},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3467,"score":4459},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3467,"score":4461},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4463,4465,4467,4469,4471,4472,4474,4476],{"type":3727,"url":4464},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-3hhw-38pf-pxj6",{"type":3474,"url":4466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62383",{"type":3471,"url":4468},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3727",{"type":3471,"url":4470},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fee1a42e51982c4dce6ad3ee77ff1ac43894288ab",{"type":3479,"url":3932},{"type":3471,"url":4473},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.2",{"type":3471,"url":4475},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3726.yaml",{"type":3474,"url":4477},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-ipipancorpusreader-symlink-arbitrary-file-read",[4416],{"id":138,"slug":4480,"dossier":47,"summary":4481,"aliases":4482,"sourceIds":4484,"published":4485,"modified":4486,"checkedAt":7,"severity":4487,"references":4489,"versionKeys":4502,"packageCount":32,"repositoryCount":754},"ghsa-3hv7-mjh2-fv65-5be6c7b0","Tornado: Unbounded query-string argument count allows event-loop-stalling DoS",[4483],"CVE-2026-103261",[138],"2026-09-30T23:49:25Z","2026-10-02T03:56:09.601689224Z",[4488],{"type":3538,"score":3752},[4490,4492,4494,4496,4498,4500],{"type":3471,"url":4491},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3hv7-mjh2-fv65",{"type":3471,"url":4493},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3719",{"type":3471,"url":4495},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F03945136ea9746eccf61caf88edae39642e59c93",{"type":3471,"url":4497},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8a61dd6005f42733015160f3c23a2bcffe200542",{"type":3479,"url":4499},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":3471,"url":4501},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.9",[4503,4504,4505,4506,4507,4508],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5","pypi:tornado@6.5.7",{"id":139,"slug":4510,"dossier":90,"summary":4511,"aliases":4512,"sourceIds":4516,"published":4517,"modified":4518,"checkedAt":7,"severity":4519,"references":4523,"versionKeys":4534,"packageCount":32,"repositoryCount":744},"ghsa-3j72-p6qg-6xp7-6d019684","Pillow: TarIO negative size field causes infinite CPU-spin loop",[4513,4514,4515],"BIT-pillow-2026-96642","CVE-2026-96642","PYSEC-2026-4341",[139,4515],"2026-10-21T21:20:32.650Z","2026-10-29T10:55:45.826300321Z",[4520,4522],{"type":3467,"score":4521},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":3604},[4524,4526,4528,4530,4532,4533],{"type":3474,"url":4525},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-3j72-p6qg-6xp7",{"type":3474,"url":4527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96642",{"type":3938,"url":4529},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10012",{"type":3576,"url":4531},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19b695fdcc5eddc37374e2b1645fc4185edaf71d",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":140,"slug":4536,"dossier":47,"summary":4537,"aliases":4538,"sourceIds":4541,"published":4542,"modified":4543,"checkedAt":7,"severity":4544,"references":4548,"versionKeys":4557,"packageCount":32,"repositoryCount":765},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[4539,4540],"CVE-2026-34517","PYSEC-2026-2099",[140,4540],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[4545,4547],{"type":3467,"score":4546},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3538,"score":3752},[4549,4551,4553,4555,4556],{"type":3576,"url":4550},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":3474,"url":4552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":3576,"url":4554},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":141,"slug":4559,"dossier":47,"summary":4560,"aliases":4561,"sourceIds":4564,"published":4565,"modified":4566,"checkedAt":7,"severity":4567,"references":4569,"versionKeys":4579,"packageCount":32,"repositoryCount":765},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[4562,4563],"CVE-2026-49853","PYSEC-2026-3387",[141,4563],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[4568],{"type":3538,"score":3819},[4570,4572,4573,4575,4577],{"type":3471,"url":4571},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3479,"url":4499},{"type":3479,"url":4574},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":3474,"url":4576},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":3474,"url":4578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[4503,4504,4505,4506,4507],{"id":142,"slug":4581,"dossier":47,"summary":4582,"aliases":4583,"sourceIds":4586,"published":4587,"modified":4588,"checkedAt":7,"severity":4589,"references":4591,"versionKeys":4604,"packageCount":32,"repositoryCount":869},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[4584,4585],"CVE-2025-68480","PYSEC-2026-1605",[142,4585],"2025-12-22T20:20:07Z","2026-09-10T03:50:31.208550852Z",[4590],{"type":3538,"score":3752},[4592,4594,4596,4598,4600,4602],{"type":3471,"url":4593},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":3474,"url":4595},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":3471,"url":4597},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":3479,"url":4599},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":3479,"url":4601},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":3474,"url":4603},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[4605,4606],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":143,"slug":4608,"dossier":47,"summary":4609,"aliases":4610,"sourceIds":4612,"published":4613,"modified":4614,"checkedAt":7,"severity":4615,"references":4617,"versionKeys":4629,"packageCount":32,"repositoryCount":869},"ghsa-42gh-23hr-vphw-953693c4","pypdf has possible long runtimes when retrieving page labels",[4611],"CVE-2026-119206",[143],"2026-10-30T23:08:55Z","2026-10-30T23:15:05.410552661Z",[4616],{"type":3467,"score":4521},[4618,4620,4622,4624,4626,4627],{"type":3471,"url":4619},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-42gh-23hr-vphw",{"type":3474,"url":4621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119206",{"type":3471,"url":4623},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4251",{"type":3471,"url":4625},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb891fef37000cd86baa6e9848a3387d080b3b03e",{"type":3479,"url":3514},{"type":3471,"url":4628},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.3",[3524,3525,3526],{"id":144,"slug":4631,"dossier":47,"summary":4632,"aliases":4633,"sourceIds":4636,"published":4637,"modified":4638,"checkedAt":7,"severity":4639,"references":4641,"versionKeys":4654,"packageCount":32,"repositoryCount":832},"ghsa-42vr-xj54-vc7v-bb2dfa49","PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt \u002F verify_signature=False)",[4634,4635],"CVE-2026-101918","PYSEC-2026-4141",[144,4635],"2026-09-30T15:41:05Z","2026-10-01T17:56:09.538835697Z",[4640],{"type":3538,"score":3752},[4642,4644,4646,4648,4649,4651,4652],{"type":3471,"url":4643},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",{"type":3474,"url":4645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-101918",{"type":3471,"url":4647},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F5fde08a6cf906aa7698de2d6391d88b73006b17b",{"type":3479,"url":3903},{"type":3471,"url":4650},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Freleases\u002Ftag\u002F2.15.0",{"type":3479,"url":3907},{"type":3474,"url":4653},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42vr-xj54-vc7v",[3911,3912,3913],{"id":145,"slug":4656,"dossier":47,"summary":4657,"aliases":4658,"sourceIds":4661,"published":4662,"modified":4663,"checkedAt":7,"severity":4664,"references":4667,"versionKeys":4678,"packageCount":32,"repositoryCount":784},"ghsa-43mp-35q3-x3fq-895b1d20","virtualenv: Deletion recovery can change a symlink target's mode",[4659,4660],"BIT-virtualenv-2026-113724","CVE-2026-113724",[145],"2026-10-21T21:31:34Z","2026-10-29T10:55:47.691444554Z",[4665],{"type":3538,"score":4666},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4668,4670,4672,4674,4676,4677],{"type":3471,"url":4669},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-43mp-35q3-x3fq",{"type":3474,"url":4671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113724",{"type":3471,"url":4673},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3427",{"type":3471,"url":4675},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2bfdc0230d1b2685fedfcfe66c835b9a2ec7c440",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":146,"slug":4680,"dossier":90,"summary":4681,"aliases":4682,"sourceIds":4686,"published":4687,"modified":4688,"checkedAt":7,"severity":4689,"references":4694,"versionKeys":4705,"packageCount":32,"repositoryCount":744},"ghsa-4558-3h8r-v8xp-9e09a0b2","Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size",[4683,4684,4685],"BIT-pillow-2026-112394","CVE-2026-112394","PYSEC-2026-4327",[146,4685],"2026-10-19T21:17:07.747Z","2026-10-27T11:10:34.006455299Z",[4690,4692],{"type":3467,"score":4691},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":4693},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:H",[4695,4697,4699,4701,4703,4704],{"type":3727,"url":4696},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4558-3h8r-v8xp",{"type":3474,"url":4698},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112394",{"type":3471,"url":4700},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9723",{"type":3576,"url":4702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F392ee6f0d19a4adb766a63e9a99f3c28193b8d31",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":147,"slug":4707,"dossier":47,"summary":4708,"aliases":4709,"sourceIds":4713,"published":4714,"modified":4715,"checkedAt":7,"severity":4716,"references":4718,"versionKeys":4730,"packageCount":32,"repositoryCount":4731},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[4710,4711,4712],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[147,4712],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[4717],{"type":3538,"score":3652},[4719,4721,4723,4725,4727,4728],{"type":3727,"url":4720},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":3474,"url":4722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":3576,"url":4724},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":3471,"url":4726},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":3479,"url":3480},{"type":3474,"url":4729},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[3484,3485,3486,3487,3488,3489,3490,3491,3492],18,{"id":148,"slug":4733,"dossier":90,"summary":4734,"aliases":4735,"sourceIds":4738,"published":4739,"modified":4740,"checkedAt":7,"severity":4741,"references":4744,"versionKeys":4753,"packageCount":32,"repositoryCount":744},"ghsa-462x-pgg6-55fp-29049dd8","Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)",[4736,4737],"BIT-pillow-2026-112395","CVE-2026-112395",[148],"2026-10-20T20:49:26Z","2026-10-26T08:56:01.770928143Z",[4742],{"type":3538,"score":4743},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[4745,4747,4749,4751,4752],{"type":3471,"url":4746},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-462x-pgg6-55fp",{"type":3474,"url":4748},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112395",{"type":3471,"url":4750},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F76869efdbbf2ad7dccd7536520fb61b7a00ab61e",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":149,"slug":4755,"dossier":47,"summary":4756,"aliases":4757,"sourceIds":4760,"published":4761,"modified":4762,"checkedAt":7,"severity":4763,"references":4766,"versionKeys":4789,"packageCount":32,"repositoryCount":832},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[4758,4759],"CVE-2026-33236","PYSEC-2026-2237",[149,4759],"2026-03-19T12:42:42Z","2026-11-04T03:30:49.216144352Z",[4764],{"type":3538,"score":4765},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4767,4769,4771,4773,4774,4776,4778,4780,4782,4784,4785,4787],{"type":3727,"url":4768},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":3474,"url":4770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":3576,"url":4772},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":3474,"url":4255},{"type":3474,"url":4775},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":3474,"url":4777},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3471,"url":4779},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":3471,"url":4781},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":3938,"url":4783},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",{"type":3479,"url":3932},{"type":3471,"url":4786},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2237.yaml",{"type":3471,"url":4788},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",[3943,3944],{"id":150,"slug":4791,"dossier":47,"summary":4792,"aliases":4793,"sourceIds":4796,"published":4797,"modified":4798,"checkedAt":7,"severity":4799,"references":4802,"versionKeys":4815,"packageCount":32,"repositoryCount":784},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[4794,4795],"CVE-2025-50182","PYSEC-2026-1997",[150,4795],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[4800],{"type":3538,"score":4801},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4803,4805,4807,4809,4810,4812,4813],{"type":3471,"url":4804},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":3474,"url":4806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":3576,"url":4808},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":3479,"url":4075},{"type":3471,"url":4811},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":3479,"url":4077},{"type":3474,"url":4814},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[4079,4080,4081,4082],{"id":151,"slug":4817,"dossier":47,"summary":4818,"aliases":4819,"sourceIds":4821,"published":4822,"modified":4823,"checkedAt":7,"severity":4824,"references":4827,"versionKeys":4836,"packageCount":32,"repositoryCount":3883},"ghsa-494j-54xm-rwp3-eab1773e","AIOHTTP: Secure attribute not enforced for shared cookie",[4820],"CVE-2026-111063",[151],"2026-10-19T17:07:47Z","2026-10-26T15:00:05.287728271Z",[4825],{"type":3467,"score":4826},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4828,4830,4832,4834,4835],{"type":3471,"url":4829},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-494j-54xm-rwp3",{"type":3474,"url":4831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111063",{"type":3471,"url":4833},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F999c356d61e966faffa97b06ab0d0455226d36c5",{"type":3479,"url":3795},{"type":3471,"url":3879},[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],{"id":152,"slug":4838,"dossier":47,"summary":4839,"aliases":4840,"sourceIds":4843,"published":4844,"modified":4845,"checkedAt":7,"severity":4846,"references":4849,"versionKeys":4860,"packageCount":32,"repositoryCount":784},"ghsa-494p-63j8-28p3-74531279","virtualenv: Downloaded wheel selection and caching precede verification",[4841,4842],"BIT-virtualenv-2026-113714","CVE-2026-113714",[152],"2026-10-23T22:25:22Z","2026-10-29T10:55:43.999222952Z",[4847],{"type":3467,"score":4848},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4850,4852,4854,4856,4858,4859],{"type":3471,"url":4851},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-494p-63j8-28p3",{"type":3474,"url":4853},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113714",{"type":3471,"url":4855},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3430",{"type":3471,"url":4857},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F7babec66e043e1cc8bc66869a063653898719d96",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":153,"slug":4862,"dossier":47,"summary":4863,"aliases":4864,"sourceIds":4867,"published":4868,"modified":4869,"checkedAt":7,"severity":4870,"references":4872,"versionKeys":4887,"packageCount":32,"repositoryCount":103},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[4865,4866],"CVE-2026-22691","PYSEC-2026-1828",[153,4866],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[4871],{"type":3467,"score":4546},[4873,4875,4877,4879,4881,4882,4884,4885],{"type":3471,"url":4874},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":3474,"url":4876},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":3471,"url":4878},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":3471,"url":4880},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":3479,"url":3514},{"type":3471,"url":4883},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":3479,"url":3518},{"type":3474,"url":4886},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[3524,3525],{"id":154,"slug":4889,"dossier":47,"summary":4890,"aliases":4891,"sourceIds":4894,"published":4895,"modified":4896,"checkedAt":7,"severity":4897,"references":4901,"versionKeys":4907,"packageCount":32,"repositoryCount":754},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[4892,4893],"CVE-2026-54273","PYSEC-2026-2107",[154,4893],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[4898,4900],{"type":3467,"score":4899},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3538,"score":3652},[4902,4904,4906],{"type":3474,"url":4903},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":3576,"url":4905},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":3479,"url":3795},[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":155,"slug":4909,"dossier":47,"summary":4910,"aliases":4911,"sourceIds":4914,"published":4915,"modified":4916,"checkedAt":7,"severity":4917,"references":4922,"versionKeys":4939,"packageCount":32,"repositoryCount":832},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[4912,4913],"CVE-2026-69112","PYSEC-2026-3804",[155,4913],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[4918,4920],{"type":3538,"score":4919},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":3467,"score":4921},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4923,4925,4927,4929,4931,4933,4935,4937],{"type":3474,"url":4924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":3471,"url":4926},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":3471,"url":4928},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":3471,"url":4930},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":3479,"url":4932},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":3471,"url":4934},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":3479,"url":4936},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":3474,"url":4938},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[4940,4941,4942,4943],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":156,"slug":4945,"dossier":47,"summary":4946,"aliases":4947,"sourceIds":4950,"published":4951,"modified":4952,"checkedAt":7,"severity":4953,"references":4956,"versionKeys":4967,"packageCount":32,"repositoryCount":32},"ghsa-4jhm-jv67-739f-fdb585fa","`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes",[4948,4949],"CVE-2026-49825","PYSEC-2026-2614",[156,4949],"2026-07-08T20:23:22Z","2026-07-13T16:42:41.379452174Z",[4954],{"type":3538,"score":4955},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[4957,4959,4961,4963,4965],{"type":3471,"url":4958},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3479,"url":4960},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean",{"type":3479,"url":4962},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flxml-html-clean",{"type":3474,"url":4964},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4jhm-jv67-739f",{"type":3474,"url":4966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49825",[4968],"pypi:lxml-html-clean@0.4.3",{"id":157,"slug":4970,"dossier":47,"summary":4971,"aliases":4972,"sourceIds":4975,"published":4976,"modified":4977,"checkedAt":7,"severity":4978,"references":4982,"versionKeys":4986,"packageCount":32,"repositoryCount":754},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[4973,4974],"CVE-2026-54275","PYSEC-2026-237",[157,4974],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[4979,4981],{"type":3467,"score":4980},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3538,"score":3652},[4983,4985],{"type":3474,"url":4984},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":3479,"url":3795},[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":158,"slug":4988,"dossier":47,"summary":4989,"aliases":4990,"sourceIds":4993,"published":4994,"modified":4995,"checkedAt":7,"severity":4996,"references":5000,"versionKeys":5015,"packageCount":32,"repositoryCount":103},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[4991,4992],"CVE-2026-41313","PYSEC-2026-3007",[158,4992],"2026-04-16T21:30:12Z","2026-09-10T03:50:42.729754195Z",[4997,4998],{"type":3538,"score":3604},{"type":3467,"score":4999},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5001,5003,5005,5007,5009,5010,5012,5013],{"type":3471,"url":5002},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":3474,"url":5004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":3471,"url":5006},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":3471,"url":5008},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":3479,"url":3514},{"type":3471,"url":5011},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":3479,"url":3518},{"type":3474,"url":5014},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[3524,3525],{"id":159,"slug":5017,"dossier":90,"summary":5018,"aliases":5019,"sourceIds":5023,"published":5024,"modified":5025,"checkedAt":7,"severity":5026,"references":5028,"versionKeys":5039,"packageCount":32,"repositoryCount":744},"ghsa-4rm8-3hmm-39fg-6e9ca404","Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise",[5020,5021,5022],"BIT-pillow-2026-96641","CVE-2026-96641","PYSEC-2026-4340",[159,5022],"2026-10-21T21:20:32.500Z","2026-10-29T10:56:07.449486409Z",[5027],{"type":3538,"score":3604},[5029,5031,5033,5035,5037,5038],{"type":3474,"url":5030},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rm8-3hmm-39fg",{"type":3474,"url":5032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96641",{"type":3938,"url":5034},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10010",{"type":3576,"url":5036},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F80de4be9e38d3a6148dd4d8491eb80cd12b760a4",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":160,"slug":5041,"dossier":47,"summary":5042,"aliases":5043,"sourceIds":5047,"published":5048,"modified":5049,"checkedAt":7,"severity":5050,"references":5054,"versionKeys":5063,"packageCount":32,"repositoryCount":754},"ghsa-4rr5-89j8-mwwm-f8e3c770","Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer",[5044,5045,5046],"BIT-pillow-2026-112396","CVE-2026-112396","PYSEC-2026-4328",[160,5046],"2026-10-19T22:17:06.837Z","2026-10-27T11:10:49.694224501Z",[5051,5053],{"type":3538,"score":5052},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3538,"score":3652},[5055,5057,5059,5061,5062],{"type":3727,"url":5056},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rr5-89j8-mwwm",{"type":3474,"url":5058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112396",{"type":3576,"url":5060},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fdc95da20207827a062cfbf551ee9f6031465a8bb",{"type":3479,"url":3480},{"type":3474,"url":3482},[3488,3489,3490,3491,3492,3493],{"id":161,"slug":5065,"dossier":47,"summary":5066,"aliases":5067,"sourceIds":5069,"published":5070,"modified":5071,"checkedAt":7,"severity":5072,"references":5074,"versionKeys":5085,"packageCount":32,"repositoryCount":869},"ghsa-4vqv-7265-gm2w-2b71b418","pypdf has possible large memory usage for exceptions in strict mode",[5068],"CVE-2026-119207",[161],"2026-10-30T23:08:39Z","2026-10-30T23:15:07.229853114Z",[5073],{"type":3467,"score":4521},[5075,5077,5079,5081,5083,5084],{"type":3471,"url":5076},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vqv-7265-gm2w",{"type":3474,"url":5078},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119207",{"type":3471,"url":5080},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4265",{"type":3471,"url":5082},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F64270258c0eced720f7960aecf8cef31afd39f8d",{"type":3479,"url":3514},{"type":3471,"url":4628},[3524,3525,3526],{"id":162,"slug":5087,"dossier":47,"summary":5088,"aliases":5089,"sourceIds":5093,"published":5094,"modified":5095,"checkedAt":7,"severity":5096,"references":5099,"versionKeys":5117,"packageCount":32,"repositoryCount":103},"ghsa-4vvm-4w3v-6mr8-41f51ef4","pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character",[5090,5091,5092],"CVE-2023-36464","PYSEC-2026-1835","PYSEC-2026-3008",[162,5091],"2023-06-30T20:33:57Z","2026-09-10T03:50:01.918644849Z",[5097],{"type":3538,"score":5098},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[5100,5102,5104,5106,5108,5110,5111,5113,5115],{"type":3471,"url":5101},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",{"type":3474,"url":5103},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-36464",{"type":3471,"url":5105},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F1828",{"type":3471,"url":5107},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F969",{"type":3576,"url":5109},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb0e5c689df689ab173df84dacd77b6fc3c161932",{"type":3479,"url":3514},{"type":3471,"url":5112},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F3.9.0",{"type":3479,"url":5114},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf2",{"type":3474,"url":5116},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",[5118],"pypi:pypdf2@3.0.1",{"id":163,"slug":5120,"dossier":47,"summary":5121,"aliases":5122,"sourceIds":5125,"published":5126,"modified":5127,"checkedAt":7,"severity":5128,"references":5131,"versionKeys":5144,"packageCount":32,"repositoryCount":832},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[5123,5124],"CVE-2025-6921","PYSEC-2026-1980",[163,5124],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[5129],{"type":3538,"score":5130},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5132,5134,5136,5138,5139,5141,5142],{"type":3474,"url":5133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":3471,"url":5135},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":3471,"url":5137},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":3479,"url":3725},{"type":3471,"url":5140},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":3479,"url":4198},{"type":3474,"url":5143},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[3732,3733,3734,3735],{"id":164,"slug":5146,"dossier":47,"summary":5147,"aliases":5148,"sourceIds":5152,"published":5153,"modified":5154,"checkedAt":7,"severity":5155,"references":5158,"versionKeys":5173,"packageCount":32,"repositoryCount":4731},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[5149,5150,5151],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[164,5151],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[5156],{"type":3538,"score":5157},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[5159,5161,5163,5165,5167,5169,5171,5172],{"type":3727,"url":5160},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":3474,"url":5162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":3576,"url":5164},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":3576,"url":5166},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":3576,"url":5168},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":3471,"url":5170},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":3479,"url":3480},{"type":3474,"url":4729},[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":165,"slug":5175,"dossier":47,"summary":5176,"aliases":5177,"sourceIds":5180,"published":5181,"modified":5182,"checkedAt":7,"severity":5183,"references":5185,"versionKeys":5197,"packageCount":32,"repositoryCount":103},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[5178,5179],"CVE-2026-22690","PYSEC-2026-1829",[165,5179],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[5184],{"type":3467,"score":4546},[5186,5188,5190,5191,5192,5193,5194,5195],{"type":3471,"url":5187},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":3474,"url":5189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":3471,"url":4878},{"type":3471,"url":4880},{"type":3479,"url":3514},{"type":3471,"url":4883},{"type":3479,"url":3518},{"type":3474,"url":5196},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[3524,3525],{"id":166,"slug":5199,"dossier":47,"summary":5200,"aliases":5201,"sourceIds":5203,"published":5204,"modified":5205,"checkedAt":7,"severity":5206,"references":5209,"versionKeys":5214,"packageCount":32,"repositoryCount":103},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[5202],"CVE-2026-58203",[166],"2026-06-19T22:10:42Z","2026-09-10T03:50:48.282428168Z",[5207],{"type":3538,"score":5208},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[5210,5212],{"type":3471,"url":5211},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":3479,"url":5213},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[5215],"pypi:pydantic-settings@2.12.0",{"id":167,"slug":5217,"dossier":47,"summary":5218,"aliases":5219,"sourceIds":5222,"published":5223,"modified":5224,"checkedAt":7,"severity":5225,"references":5228,"versionKeys":5251,"packageCount":32,"repositoryCount":5254},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[5220,5221],"CVE-2026-4539","PYSEC-2026-2987",[167,5221],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[5226,5227],{"type":3538,"score":4146},{"type":3467,"score":4148},[5229,5231,5233,5235,5237,5239,5241,5243,5245,5247,5249],{"type":3474,"url":5230},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":3471,"url":5232},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":3471,"url":5234},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":3471,"url":5236},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":3479,"url":5238},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":3471,"url":5240},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":3471,"url":5242},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":3471,"url":5244},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":3471,"url":5246},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":3479,"url":5248},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":3474,"url":5250},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[5252,5253],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",16,{"id":168,"slug":5256,"dossier":47,"summary":5257,"aliases":5258,"sourceIds":5261,"published":5262,"modified":5263,"checkedAt":7,"severity":5264,"references":5267,"versionKeys":5280,"packageCount":32,"repositoryCount":103},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[5259,5260],"CVE-2026-54530","PYSEC-2026-3009",[168,5260],"2026-06-16T14:05:40Z","2026-09-10T03:50:48.282377637Z",[5265],{"type":3467,"score":5266},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5268,5270,5272,5273,5275,5276,5278],{"type":3471,"url":5269},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3471,"url":5271},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":3479,"url":3514},{"type":3471,"url":5274},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":3479,"url":3518},{"type":3474,"url":5277},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":3474,"url":5279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[3524,3525],{"id":169,"slug":5282,"dossier":47,"summary":5283,"aliases":5284,"sourceIds":5288,"published":5289,"modified":5290,"checkedAt":7,"severity":5291,"references":5296,"versionKeys":5306,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[5285,5286,5287],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[169,5287],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[5292,5294],{"type":3467,"score":5293},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":5295},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5297,5299,5301,5303,5305],{"type":3474,"url":5298},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":3474,"url":5300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":3471,"url":5302},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":3471,"url":5304},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":3479,"url":4161},[4173],{"id":170,"slug":5308,"dossier":47,"summary":5309,"aliases":5310,"sourceIds":5313,"published":5314,"modified":5315,"checkedAt":7,"severity":5316,"references":5319,"versionKeys":5331,"packageCount":32,"repositoryCount":784},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[5311,5312],"CVE-2025-69226","PYSEC-2026-1097",[170,5312],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[5317],{"type":3467,"score":5318},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5320,5322,5324,5326,5327,5329],{"type":3471,"url":5321},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":3474,"url":5323},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":3576,"url":5325},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":3479,"url":3795},{"type":3479,"url":5328},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":3474,"url":5330},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[3799,3800,3801,3802,3803,3804,3805],{"id":171,"slug":5333,"dossier":47,"summary":5334,"aliases":5335,"sourceIds":5338,"published":5339,"modified":5340,"checkedAt":7,"severity":5341,"references":5343,"versionKeys":5358,"packageCount":32,"repositoryCount":784},"ghsa-54p9-h82j-f925-623d2ef6","Multidict: Reference leak in CIMultiDict\u002FMultiDict items-view union and subtraction",[5336,5337],"CVE-2026-104874","PYSEC-2026-4244",[171,5337],"2026-10-05T23:40:58Z","2026-10-15T14:56:05.601333622Z",[5342],{"type":3538,"score":3752},[5344,5346,5348,5350,5352,5354,5356],{"type":3471,"url":5345},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fsecurity\u002Fadvisories\u002FGHSA-54p9-h82j-f925",{"type":3474,"url":5347},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104874",{"type":3471,"url":5349},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fcommit\u002F350b4a07bf8ff851b6d7544e81b1c748bdc74c40",{"type":3479,"url":5351},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict",{"type":3471,"url":5353},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Freleases\u002Ftag\u002Fv6.9.1",{"type":3479,"url":5355},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmultidict",{"type":3474,"url":5357},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54p9-h82j-f925",[5359,5360],"pypi:multidict@6.7.0","pypi:multidict@6.7.1",{"id":172,"slug":5362,"dossier":47,"summary":5363,"aliases":5364,"sourceIds":5367,"published":5368,"modified":5369,"checkedAt":7,"severity":5370,"references":5371,"versionKeys":5388,"packageCount":32,"repositoryCount":103},"ghsa-556j-vv39-8rqv-cc0c446a","Banks: Symlink traversal and arbitrary file disclosure\u002Foverwrite in DirectoryPromptRegistry",[5365,5366],"CVE-2026-107716","PYSEC-2026-4201",[172,5366],"2026-10-08T22:10:07Z","2026-10-15T14:55:55.950976679Z",[],[5372,5374,5376,5378,5380,5382,5384,5386],{"type":3471,"url":5373},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-556j-vv39-8rqv",{"type":3471,"url":5375},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F79",{"type":3471,"url":5377},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002F23ed13e50b4e217693fa5f9c30943fac8a41582f",{"type":3479,"url":5379},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks",{"type":3471,"url":5381},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.5.1",{"type":3479,"url":5383},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbanks",{"type":3474,"url":5385},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-556j-vv39-8rqv",{"type":3474,"url":5387},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-107716",[5389],"pypi:banks@2.2.0",{"id":173,"slug":5391,"dossier":47,"summary":5392,"aliases":5393,"sourceIds":5396,"published":5397,"modified":5398,"checkedAt":7,"severity":5399,"references":5401,"versionKeys":5412,"packageCount":32,"repositoryCount":784},"ghsa-558c-9hv2-4prj-1ba67416","virtualenv: Generated files can follow existing destination links",[5394,5395],"BIT-virtualenv-2026-113721","CVE-2026-113721",[173],"2026-10-22T17:03:12Z","2026-10-29T10:55:51.822936662Z",[5400],{"type":3538,"score":4666},[5402,5404,5406,5408,5410,5411],{"type":3471,"url":5403},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-558c-9hv2-4prj",{"type":3474,"url":5405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113721",{"type":3471,"url":5407},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3431",{"type":3471,"url":5409},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd25f28699eefb1fc34a251e5adf2b5de844c36cd",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":174,"slug":5414,"dossier":47,"summary":5415,"aliases":5416,"sourceIds":5419,"published":5420,"modified":5421,"checkedAt":7,"severity":5422,"references":5424,"versionKeys":5439,"packageCount":32,"repositoryCount":103},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[5417,5418],"CVE-2026-59937","PYSEC-2026-3610",[174,5418],"2026-07-23T15:07:33Z","2026-09-10T03:50:12.272620075Z",[5423],{"type":3467,"score":4370},[5425,5427,5429,5431,5433,5434,5436,5437],{"type":3471,"url":5426},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":3474,"url":5428},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":3471,"url":5430},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":3471,"url":5432},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":3479,"url":3514},{"type":3471,"url":5435},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",{"type":3479,"url":3518},{"type":3474,"url":5438},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",[3524,3525],{"id":175,"slug":5441,"dossier":47,"summary":5442,"aliases":5443,"sourceIds":5445,"published":5446,"modified":5447,"checkedAt":7,"severity":5448,"references":5451,"versionKeys":5462,"packageCount":32,"repositoryCount":822},"ghsa-567q-5qvw-pf92-60527ab6","filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break",[5444],"CVE-2026-112907",[175],"2026-10-23T22:27:32Z","2026-10-23T22:45:03.452878321Z",[5449],{"type":3538,"score":5450},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5452,5454,5456,5458,5460],{"type":3471,"url":5453},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-567q-5qvw-pf92",{"type":3471,"url":5455},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F835",{"type":3471,"url":5457},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Fe1e825b1992f69fb6b346dc395d5ae4893536c0a",{"type":3479,"url":5459},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":3471,"url":5461},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.2.1",[5463,5464,5465,5466],"pypi:filelock@3.25.2","pypi:filelock@3.29.0","pypi:filelock@3.29.4","pypi:filelock@3.29.7",{"id":176,"slug":5468,"dossier":47,"summary":5469,"aliases":5470,"sourceIds":5473,"published":5474,"modified":5475,"checkedAt":7,"severity":5476,"references":5483,"versionKeys":5502,"packageCount":32,"repositoryCount":832},"ghsa-568f-pv23-39p4-570af882","NLTK: Stable FrameNet and NKJP readers parse outside-root XML",[5471,5472],"CVE-2026-62385","PYSEC-2026-3728",[176,5472],"2026-08-22T15:16:18.833Z","2026-09-08T16:45:03.600943920Z",[5477,5479,5481],{"type":3538,"score":5478},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3467,"score":5480},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":5482},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5484,5486,5488,5490,5492,5494,5496,5497,5498,5500],{"type":3727,"url":5485},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-568f-pv23-39p4",{"type":3474,"url":5487},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62385",{"type":3471,"url":5489},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3579",{"type":3471,"url":5491},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3581",{"type":3471,"url":5493},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7d1389d0789c1eca56bd0ed444089e0a3972e3ed",{"type":3471,"url":5495},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbf3bf32786791394a1008258b4917a7f2d4dbcda",{"type":3479,"url":3932},{"type":3471,"url":3934},{"type":3471,"url":5499},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3728.yaml",{"type":3474,"url":5501},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-path-traversal-via-framenet-and-nkjp-readers",[3943,3944],{"id":177,"slug":5504,"dossier":47,"summary":5505,"aliases":5506,"sourceIds":5508,"published":5509,"modified":5510,"checkedAt":7,"severity":5511,"references":5513,"versionKeys":5525,"packageCount":32,"repositoryCount":869},"ghsa-5849-834g-hvw5-69c92c16","pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search",[5507],"CVE-2026-119203",[177],"2026-10-30T23:13:16Z","2026-10-30T23:30:04.101910128Z",[5512],{"type":3467,"score":4521},[5514,5516,5518,5520,5522,5523],{"type":3471,"url":5515},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5849-834g-hvw5",{"type":3474,"url":5517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119203",{"type":3471,"url":5519},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4289",{"type":3471,"url":5521},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F06593f993789a4b573dd955730c1a7051128bb2a",{"type":3479,"url":3514},{"type":3471,"url":5524},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.4",[3524,3525,3526],{"id":178,"slug":5527,"dossier":90,"summary":5528,"aliases":5529,"sourceIds":5533,"published":5534,"modified":5535,"checkedAt":7,"severity":5536,"references":5539,"versionKeys":5548,"packageCount":32,"repositoryCount":744},"ghsa-58r4-6rv3-gfh8-17253bd5","Pillow: Out-of-bounds access in _imagingmorph on a zero-width image",[5530,5531,5532],"BIT-pillow-2026-112397","CVE-2026-112397","PYSEC-2026-4329",[178,5532],"2026-10-19T22:17:06.970Z","2026-10-28T11:10:53.627071818Z",[5537,5538],{"type":3467,"score":3851},{"type":3538,"score":3652},[5540,5542,5544,5546,5547],{"type":3727,"url":5541},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-58r4-6rv3-gfh8",{"type":3474,"url":5543},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112397",{"type":3576,"url":5545},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F18f7c0dfee93063c51db6ed0ca8c4da2999dcb64",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":179,"slug":5550,"dossier":47,"summary":5551,"aliases":5552,"sourceIds":5556,"published":5557,"modified":5558,"checkedAt":7,"severity":5559,"references":5561,"versionKeys":5575,"packageCount":32,"repositoryCount":784},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[5553,5554,5555],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[179,5555],"2026-01-13T18:45:57Z","2026-09-10T03:50:32.732715893Z",[5560],{"type":3538,"score":4666},[5562,5564,5566,5568,5570,5571,5573],{"type":3471,"url":5563},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":3474,"url":5565},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":3471,"url":5567},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":3576,"url":5569},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":3479,"url":4297},{"type":3479,"url":5572},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":3474,"url":5574},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[4301,4302,4303,4304,4305],{"id":180,"slug":5577,"dossier":47,"summary":5578,"aliases":5579,"sourceIds":5582,"published":5583,"modified":5584,"checkedAt":7,"severity":5585,"references":5588,"versionKeys":5601,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[5580,5581],"CVE-2024-53981","PYSEC-2026-1851",[180,5581],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[5586,5587],{"type":3538,"score":3652},{"type":3467,"score":3851},[5589,5591,5593,5595,5597,5599],{"type":3471,"url":5590},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":3474,"url":5592},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":3471,"url":5594},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":3479,"url":5596},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":3479,"url":5598},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":3474,"url":5600},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[5602],"pypi:python-multipart@0.0.9",{"id":181,"slug":5604,"dossier":47,"summary":5605,"aliases":5606,"sourceIds":5609,"published":5610,"modified":5611,"checkedAt":7,"severity":5612,"references":5614,"versionKeys":5625,"packageCount":32,"repositoryCount":832},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[5607,5608],"CVE-2025-6638","PYSEC-2026-1981",[181,5608],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[5613],{"type":3538,"score":5130},[5615,5617,5618,5619,5620,5622,5623],{"type":3474,"url":5616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":3471,"url":5135},{"type":3471,"url":5137},{"type":3479,"url":3725},{"type":3471,"url":5621},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":3479,"url":4198},{"type":3474,"url":5624},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[3732,3733,3734,3735],{"id":182,"slug":5627,"dossier":47,"summary":5628,"aliases":5629,"sourceIds":5632,"published":5633,"modified":5634,"checkedAt":7,"severity":5635,"references":5639,"versionKeys":5653,"packageCount":32,"repositoryCount":32},"ghsa-5gh2-94qg-qppq-247161cc","NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution",[5630,5631],"CVE-2026-71513","PYSEC-2026-3867",[182,5631],"2026-08-22T15:31:03Z","2026-09-10T12:25:33.900504877Z",[5636,5637],{"type":3538,"score":3674},{"type":3467,"score":5638},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5640,5642,5644,5645,5647,5649,5651],{"type":3474,"url":5641},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71513",{"type":3471,"url":5643},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fc3e37113742a1ebeeb4f2ca58941f320f98805ea",{"type":3479,"url":3932},{"type":3471,"url":5646},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fpicklesec.py#L119-L124",{"type":3471,"url":5648},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-remote-code-execution-via-allowlistunpickler-dotted-name-bypass",{"type":3479,"url":5650},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":3474,"url":5652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5gh2-94qg-qppq",[4416],{"id":183,"slug":5655,"dossier":47,"summary":5656,"aliases":5657,"sourceIds":5659,"published":5660,"modified":5661,"checkedAt":7,"severity":5662,"references":5664,"versionKeys":5681,"packageCount":32,"repositoryCount":832},"ghsa-5h93-6whr-6q8j-24a4ef90","Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies",[5658],"CVE-2026-116685",[183],"2026-10-27T21:05:34Z","2026-10-27T21:15:03.819223133Z",[5663],{"type":3538,"score":5478},[5665,5667,5669,5671,5673,5675,5677,5679],{"type":3471,"url":5666},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-5h93-6whr-6q8j",{"type":3471,"url":5668},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3397",{"type":3471,"url":5670},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3448",{"type":3471,"url":5672},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F2106335745563b2321b8c73fef2c12903d00aa6e",{"type":3471,"url":5674},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fc6762e821c527925f0b617db216d00fbd1d0bf99",{"type":3479,"url":5676},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":3471,"url":5678},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.30.0",{"type":3471,"url":5680},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv2.2.0",[5682,5683,5684,5685],"pypi:mcp@1.10.0","pypi:mcp@1.14.1","pypi:mcp@1.19.0","pypi:mcp@1.28.1",{"id":184,"slug":5687,"dossier":47,"summary":5688,"aliases":5689,"sourceIds":5692,"published":5693,"modified":5694,"checkedAt":7,"severity":5695,"references":5697,"versionKeys":5710,"packageCount":32,"repositoryCount":103},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[5690,5691],"CVE-2026-49460","PYSEC-2026-3010",[184,5691],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[5696],{"type":3467,"score":3541},[5698,5700,5702,5703,5705,5706,5708],{"type":3471,"url":5699},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3471,"url":5701},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":3479,"url":3514},{"type":3471,"url":5704},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":3479,"url":3518},{"type":3474,"url":5707},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":3474,"url":5709},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[3524,3525],{"id":185,"slug":5712,"dossier":47,"summary":5713,"aliases":5714,"sourceIds":5716,"published":5717,"modified":5718,"checkedAt":7,"severity":5719,"references":5722,"versionKeys":5734,"packageCount":32,"repositoryCount":869},"ghsa-5hx5-vpf9-5wcv-7c309475","pypdf: Unvalidated JPEG image data loading",[5715],"CVE-2026-113786",[185],"2026-10-21T19:58:10Z","2026-10-21T20:15:04.178781594Z",[5720],{"type":3467,"score":5721},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5723,5725,5727,5729,5731,5732],{"type":3471,"url":5724},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hx5-vpf9-5wcv",{"type":3474,"url":5726},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113786",{"type":3471,"url":5728},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4222",{"type":3471,"url":5730},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F512d8eb94eb04be1d1c90504e6da2dcef8679e07",{"type":3479,"url":3514},{"type":3471,"url":5733},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.1",[3524,3525,3526],{"id":186,"slug":5736,"dossier":47,"summary":5737,"aliases":5738,"sourceIds":5741,"published":5742,"modified":5743,"checkedAt":7,"severity":5744,"references":5746,"versionKeys":5761,"packageCount":32,"repositoryCount":869},"ghsa-5jq2-8x83-x246-3e30f00a","pypdf: Possible long runtimes\u002Flarge memory usage when parsing indirect objects",[5739,5740],"CVE-2026-102994","PYSEC-2026-4153",[186,5740],"2026-10-01T15:05:53Z","2026-10-01T17:55:50.646603075Z",[5745],{"type":3467,"score":3851},[5747,5749,5751,5753,5755,5756,5758,5759],{"type":3471,"url":5748},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5jq2-8x83-x246",{"type":3474,"url":5750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102994",{"type":3471,"url":5752},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4055",{"type":3471,"url":5754},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F82501d2993c6387833c4949d205caeb188f8bb9e",{"type":3479,"url":3514},{"type":3471,"url":5757},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.18.0",{"type":3479,"url":3518},{"type":3474,"url":5760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jq2-8x83-x246",[3524,3525,3526],{"id":187,"slug":5763,"dossier":47,"summary":5764,"aliases":5765,"sourceIds":5768,"published":5769,"modified":5770,"checkedAt":7,"severity":5771,"references":5774,"versionKeys":5791,"packageCount":32,"repositoryCount":5254},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[5766,5767],"CVE-2026-64847","PYSEC-2026-4024",[187,5767],"2026-09-18T17:17:10Z","2026-10-01T17:55:57.336188727Z",[5772],{"type":3467,"score":5773},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5775,5777,5779,5781,5783,5785,5787,5789],{"type":3471,"url":5776},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":3471,"url":5778},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":3471,"url":5780},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":3479,"url":5782},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":3471,"url":5784},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",{"type":3479,"url":5786},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fanyio",{"type":3474,"url":5788},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":3474,"url":5790},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-64847",[5792,5793,5794,5795,5796,5797,5798,5799],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":188,"slug":5801,"dossier":47,"summary":5802,"aliases":5803,"sourceIds":5806,"published":5807,"modified":5808,"checkedAt":7,"severity":5809,"references":5811,"versionKeys":5825,"packageCount":32,"repositoryCount":103},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[5804,5805],"CVE-2026-59938","PYSEC-2026-3611",[188,5805],"2026-07-23T15:06:58Z","2026-09-10T03:51:10.495417380Z",[5810],{"type":3467,"score":4370},[5812,5814,5816,5818,5820,5821,5822,5823],{"type":3471,"url":5813},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":3474,"url":5815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":3471,"url":5817},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":3471,"url":5819},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":3479,"url":3514},{"type":3471,"url":5435},{"type":3479,"url":3518},{"type":3474,"url":5824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",[3524,3525],{"id":189,"slug":5827,"dossier":47,"summary":5828,"aliases":5829,"sourceIds":5833,"published":5834,"modified":5835,"checkedAt":7,"severity":5836,"references":5841,"versionKeys":5858,"packageCount":32,"repositoryCount":832},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[5830,5831,5832],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[189,5832],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[5837,5839],{"type":3467,"score":5838},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":3538,"score":5840},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5842,5844,5846,5848,5850,5852,5854,5856],{"type":3727,"url":5843},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":3474,"url":5845},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3938,"url":5847},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":3576,"url":5849},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":3471,"url":5851},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":3479,"url":5853},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":3471,"url":5855},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":3583,"url":5857},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[5859,5860,5861,5862],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":190,"slug":5864,"dossier":47,"summary":5865,"aliases":5866,"sourceIds":5869,"published":5870,"modified":5871,"checkedAt":7,"severity":5872,"references":5874,"versionKeys":5883,"packageCount":32,"repositoryCount":803},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[5867,5868],"CVE-2026-53539","PYSEC-2026-3036",[190,5868],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[5873],{"type":3538,"score":3652},[5875,5877,5878,5879,5881],{"type":3471,"url":5876},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3479,"url":5596},{"type":3479,"url":5598},{"type":3474,"url":5880},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":3474,"url":5882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[5884,5885,5886,5602],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":191,"slug":5888,"dossier":47,"summary":5889,"aliases":5890,"sourceIds":5893,"published":5894,"modified":5895,"checkedAt":7,"severity":5896,"references":5899,"versionKeys":5909,"packageCount":32,"repositoryCount":784},"ghsa-5vjq-rrrf-7h2q-86d7b4a3","virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST",[5891,5892],"BIT-virtualenv-2026-113726","CVE-2026-113726",[191],"2026-10-21T16:46:23Z","2026-10-29T10:55:33.825448161Z",[5897],{"type":3538,"score":5898},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5900,5902,5904,5906,5907],{"type":3471,"url":5901},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-5vjq-rrrf-7h2q",{"type":3474,"url":5903},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113726",{"type":3471,"url":5905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5b915367da82bd024b2a0d28d2f98007034b4aa2",{"type":3479,"url":4297},{"type":3471,"url":5908},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.4",[4301,4302,4303,4304,4305],{"id":192,"slug":5911,"dossier":47,"summary":5912,"aliases":5913,"sourceIds":5916,"published":5917,"modified":5918,"checkedAt":7,"severity":5919,"references":5921,"versionKeys":5932,"packageCount":32,"repositoryCount":32},"ghsa-5w7q-77mv-v69f-f2198303","python-socketio: Binary attachment accumulation can cause denial of service",[5914,5915],"CVE-2026-48804","PYSEC-2026-3042",[192,5915],"2026-06-26T20:51:58Z","2026-07-13T16:43:50.745760053Z",[5920],{"type":3538,"score":3652},[5922,5924,5926,5928,5930],{"type":3471,"url":5923},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio\u002Fsecurity\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3479,"url":5925},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio",{"type":3479,"url":5927},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-socketio",{"type":3474,"url":5929},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":3474,"url":5931},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48804",[5933],"pypi:python-socketio@5.14.3",{"id":193,"slug":5935,"dossier":47,"summary":5936,"aliases":5937,"sourceIds":5943,"published":5944,"modified":5945,"checkedAt":7,"severity":5946,"references":5953,"versionKeys":5973,"packageCount":32,"repositoryCount":832},"ghsa-5wp5-5229-5g6q-fd7d105f","NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection",[5938,5939,5940,5941,5942],"CVE-2026-12259","CVE-2026-63310","GHSA-gf32-cmjh-8m9v","PYSEC-2026-3729","PYSEC-2026-4318",[193,5941,5942],"2026-08-03T08:17:17.880Z","2026-10-16T10:56:05.808390648Z",[5947,5949,5951],{"type":3538,"score":5948},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3538,"score":5950},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",{"type":3538,"score":5952},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5954,5956,5958,5960,5962,5963,5965,5967,5969,5971],{"type":3727,"url":5955},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",{"type":3474,"url":5957},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12259",{"type":3471,"url":5959},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3449",{"type":3471,"url":5961},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0e26734a61094b628d93e26dc18dd7302567ac46",{"type":3479,"url":3932},{"type":3471,"url":5964},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":3471,"url":5966},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3729.yaml",{"type":3938,"url":5968},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F659ccf6d-12d4-4d4a-84c0-078633c35a5d",{"type":3474,"url":5970},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-missing-post-download-integrity-verification",{"type":3474,"url":5972},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wp5-5229-5g6q",[3943,3944],{"id":194,"slug":5975,"dossier":47,"summary":5976,"aliases":5977,"sourceIds":5979,"published":5980,"modified":5981,"checkedAt":7,"severity":5982,"references":5984,"versionKeys":5991,"packageCount":32,"repositoryCount":3883},"ghsa-5wr8-gcqf-gqf3-8b4786ad","aiohttp server lacks an initial request\u002Fheader timeout",[5978],"CVE-2026-111064",[194],"2026-10-19T17:08:04Z","2026-10-19T17:15:04.139404381Z",[5983],{"type":3467,"score":3468},[5985,5987,5989,5990],{"type":3471,"url":5986},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-5wr8-gcqf-gqf3",{"type":3471,"url":5988},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbe846822b4b3a5a54b6163e794b42dc06fba54a3",{"type":3479,"url":3795},{"type":3471,"url":3879},[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],{"id":195,"slug":5993,"dossier":90,"summary":5994,"aliases":5995,"sourceIds":5999,"published":6000,"modified":6001,"checkedAt":7,"severity":6002,"references":6006,"versionKeys":6015,"packageCount":32,"repositoryCount":744},"ghsa-5x8w-8jj5-q52h-96fe86d3","Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution",[5996,5997,5998],"BIT-pillow-2026-112398","CVE-2026-112398","PYSEC-2026-4330",[195,5998],"2026-10-19T22:17:07.107Z","2026-10-28T11:10:48.833199086Z",[6003,6005],{"type":3467,"score":6004},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":5295},[6007,6009,6011,6013,6014],{"type":3727,"url":6008},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x8w-8jj5-q52h",{"type":3474,"url":6010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112398",{"type":3576,"url":6012},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F242a059aedc1935097d9aa1dc3f099750467ba75",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":196,"slug":6017,"dossier":47,"summary":6018,"aliases":6019,"sourceIds":6023,"published":6024,"modified":6025,"checkedAt":7,"severity":6026,"references":6028,"versionKeys":6038,"packageCount":32,"repositoryCount":4731},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[6020,6021,6022],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[196,6022],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[6027],{"type":3538,"score":3652},[6029,6031,6033,6034,6036,6037],{"type":3727,"url":6030},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":3474,"url":6032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":3576,"url":4724},{"type":3471,"url":6035},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":3479,"url":3480},{"type":3474,"url":4729},[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":197,"slug":6040,"dossier":47,"summary":6041,"aliases":6042,"sourceIds":6045,"published":6046,"modified":6047,"checkedAt":7,"severity":6048,"references":6050,"versionKeys":6065,"packageCount":32,"repositoryCount":103},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[6043,6044],"CVE-2026-59936","PYSEC-2026-3612",[197,6044],"2026-07-23T16:36:41Z","2026-09-10T03:51:10.501615101Z",[6049],{"type":3467,"score":3851},[6051,6053,6055,6057,6059,6060,6062,6063],{"type":3471,"url":6052},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":3474,"url":6054},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":3471,"url":6056},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":3471,"url":6058},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":3479,"url":3514},{"type":3471,"url":6061},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",{"type":3479,"url":3518},{"type":3474,"url":6064},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",[3524,3525],{"id":198,"slug":6067,"dossier":90,"summary":6068,"aliases":6069,"sourceIds":6072,"published":6073,"modified":6074,"checkedAt":7,"severity":6075,"references":6077,"versionKeys":6086,"packageCount":32,"repositoryCount":744},"ghsa-5xm2-6676-qcp9-1e22ee95","Pillow: APNG background disposal allocates full canvas before decompression bomb check",[6070,6071],"BIT-pillow-2026-112399","CVE-2026-112399",[198],"2026-10-21T21:17:56Z","2026-10-26T08:56:16.789537980Z",[6076],{"type":3467,"score":3851},[6078,6080,6082,6084,6085],{"type":3471,"url":6079},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xm2-6676-qcp9",{"type":3474,"url":6081},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112399",{"type":3471,"url":6083},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff1acfc54c53502948d0d14121872061df931db48",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":199,"slug":6088,"dossier":47,"summary":6089,"aliases":6090,"sourceIds":6094,"published":6095,"modified":6096,"checkedAt":7,"severity":6097,"references":6100,"versionKeys":6114,"packageCount":32,"repositoryCount":3883},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[6091,6092,6093],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[199,6093],"2026-05-04T20:18:27Z","2026-10-19T20:00:04.709097863Z",[6098,6099],{"type":3538,"score":4150},{"type":3467,"score":3541},[6101,6103,6105,6107,6109,6111,6112],{"type":3474,"url":6102},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":3474,"url":6104},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":3471,"url":6106},"https:\u002F\u002Fgithub.com\u002Fdesigncomputer\u002Fmysql_mcp_server\u002Fcommit\u002Fa96549f4a4d65443fd6e9c7f2324fba9a5c80a82",{"type":3471,"url":6108},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcf6de8ca9b23e714aa5310e1c791eda66fc0b670",{"type":3471,"url":6110},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2251.yaml",{"type":3479,"url":3480},{"type":3474,"url":6113},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3487,3488,3489,3490,3491],{"id":200,"slug":6116,"dossier":47,"summary":6117,"aliases":6118,"sourceIds":6120,"published":6121,"modified":6122,"checkedAt":7,"severity":6123,"references":6125,"versionKeys":6136,"packageCount":32,"repositoryCount":869},"ghsa-62m5-6wh8-28x7-ed6d2edf","pypdf has possible long runtimes\u002Flarge memory usage for encrypted PDF files",[6119],"CVE-2026-119208",[200],"2026-10-30T23:08:24Z","2026-10-30T23:15:05.408554649Z",[6124],{"type":3467,"score":4521},[6126,6128,6130,6132,6134,6135],{"type":3471,"url":6127},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-62m5-6wh8-28x7",{"type":3474,"url":6129},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119208",{"type":3471,"url":6131},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4270",{"type":3471,"url":6133},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F82b91951dc74496bb3efe6465434f041bb6a5e6b",{"type":3479,"url":3514},{"type":3471,"url":4628},[3524,3525,3526],{"id":201,"slug":6138,"dossier":47,"summary":6139,"aliases":6140,"sourceIds":6144,"published":6145,"modified":6146,"checkedAt":7,"severity":6147,"references":6150,"versionKeys":6166,"packageCount":32,"repositoryCount":4731},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[6141,6142,6143],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[201,6143],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[6148],{"type":3467,"score":6149},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6151,6153,6155,6157,6159,6160,6162,6164],{"type":3471,"url":6152},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":3474,"url":6154},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":3471,"url":6156},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":3471,"url":6158},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":3479,"url":3480},{"type":3471,"url":6161},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":3479,"url":6163},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":3474,"url":6165},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":202,"slug":6168,"dossier":47,"summary":6169,"aliases":6170,"sourceIds":6175,"published":6176,"modified":6177,"checkedAt":7,"severity":6178,"references":6180,"versionKeys":6208,"packageCount":32,"repositoryCount":6216},"ghsa-63cw-57p8-fm3p-01ac35c7","PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files",[6171,6172,6173,6174],"BIT-pytorch-2026-24747","CVE-2026-24747","PYSEC-2026-1856","PYSEC-2026-2286",[202,6174],"2026-01-27T20:10:54Z","2026-11-04T03:15:10.870748916Z",[6179],{"type":3538,"score":3674},[6181,6183,6185,6187,6189,6191,6193,6195,6197,6199,6200,6202,6204,6206],{"type":3474,"url":6182},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3474,"url":6184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24747",{"type":3938,"url":6186},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":3474,"url":6188},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3471,"url":6190},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":3938,"url":6192},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":3474,"url":6194},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3471,"url":6196},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpytorch\u002FPYSEC-2026-1856.yaml",{"type":3471,"url":6198},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2026-2286.yaml",{"type":3479,"url":4161},{"type":3576,"url":6201},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",{"type":3474,"url":6203},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":3471,"url":6205},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytorch",{"type":3471,"url":6207},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",[4173,4174,4175,6209,6210,6211,6212,6213,6214,6215],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu","pypi:torch@2.9.1+cu128",14,{"id":203,"slug":6218,"dossier":47,"summary":6219,"aliases":6220,"sourceIds":6223,"published":6224,"modified":6225,"checkedAt":7,"severity":6226,"references":6232,"versionKeys":6243,"packageCount":32,"repositoryCount":765},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[6221,6222],"CVE-2026-34520","PYSEC-2026-2102",[203,6222],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[6227,6229,6230],{"type":3538,"score":6228},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3467,"score":4009},{"type":3467,"score":6231},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6233,6235,6237,6239,6240,6241],{"type":3576,"url":6234},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":3474,"url":6236},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":3576,"url":6238},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":3479,"url":3795},{"type":3474,"url":4021},{"type":3471,"url":6242},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[3799,3800,3801,3802,3803,3804,3805,3806],{"id":204,"slug":6245,"dossier":47,"summary":6246,"aliases":6247,"sourceIds":6250,"published":6251,"modified":6252,"checkedAt":7,"severity":6253,"references":6256,"versionKeys":6262,"packageCount":32,"repositoryCount":754},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[6248,6249],"CVE-2026-54277","PYSEC-2026-2110",[204,6249],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[6254,6255],{"type":3467,"score":4899},{"type":3538,"score":3652},[6257,6259,6261],{"type":3474,"url":6258},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":3576,"url":6260},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":3479,"url":3795},[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":205,"slug":6264,"dossier":47,"summary":6265,"aliases":6266,"sourceIds":6268,"published":6269,"modified":6270,"checkedAt":7,"severity":6271,"references":6274,"versionKeys":6286,"packageCount":32,"repositoryCount":103},"ghsa-64vx-6h2c-rjh7-b0a1de43","Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE",[6267],"CVE-2026-61536",[205],"2026-11-05T17:51:02Z","2026-11-05T18:00:04.136442249Z",[6272],{"type":3538,"score":6273},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6275,6277,6279,6281,6283,6284],{"type":3471,"url":6276},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-64vx-6h2c-rjh7",{"type":3474,"url":6278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-61536",{"type":3471,"url":6280},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F75",{"type":3471,"url":6282},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002Fe443f112b80a20ac24438afe4eb8f8a746a8396d",{"type":3479,"url":5379},{"type":3471,"url":6285},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.4.3",[5389],{"id":206,"slug":6288,"dossier":47,"summary":6289,"aliases":6290,"sourceIds":6294,"published":6295,"modified":6296,"checkedAt":7,"severity":6297,"references":6301,"versionKeys":6312,"packageCount":32,"repositoryCount":3706},"ghsa-654x-cwwv-5j9c-54c66942","Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1",[6291,6292,6293],"BIT-pillow-2026-114501","CVE-2026-114501","PYSEC-2026-4336",[206,6293],"2026-10-21T22:16:49.410Z","2026-10-29T10:56:00.934076155Z",[6298,6299],{"type":3467,"score":4826},{"type":3538,"score":6300},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6302,6304,6306,6308,6310,6311],{"type":3474,"url":6303},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-654x-cwwv-5j9c",{"type":3474,"url":6305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114501",{"type":3938,"url":6307},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10172",{"type":3576,"url":6309},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19f64946eb247b973dd4560be7dea3bf979d2e6a",{"type":3479,"url":3480},{"type":3474,"url":3482},[3487,3488,3489,3490,3491,3492,3493],{"id":207,"slug":6314,"dossier":90,"summary":6315,"aliases":6316,"sourceIds":6319,"published":6320,"modified":6321,"checkedAt":7,"severity":6322,"references":6325,"versionKeys":6334,"packageCount":32,"repositoryCount":724},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[6317,6318],"CVE-2026-45409","PYSEC-2026-215",[207,6318],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[6323,6324],{"type":3538,"score":3752},{"type":3467,"score":4370},[6326,6328,6330,6332],{"type":3474,"url":6327},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":3474,"url":6329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":3479,"url":6331},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":3471,"url":6333},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[6335,6336,6337,6338],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",{"id":208,"slug":6340,"dossier":90,"summary":6341,"aliases":6342,"sourceIds":6345,"published":6346,"modified":6347,"checkedAt":7,"severity":6348,"references":6350,"versionKeys":6359,"packageCount":32,"repositoryCount":744},"ghsa-65qm-jvmh-6pqg-7925f039","Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS",[6343,6344],"BIT-pillow-2026-112400","CVE-2026-112400",[208],"2026-10-20T20:53:36Z","2026-10-26T08:55:49.781288748Z",[6349],{"type":3467,"score":3851},[6351,6353,6355,6357,6358],{"type":3471,"url":6352},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-65qm-jvmh-6pqg",{"type":3474,"url":6354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112400",{"type":3471,"url":6356},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6faed707cfb760a4cbd726ddc8406f576cf35bf7",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":209,"slug":6361,"dossier":47,"summary":6362,"aliases":6363,"sourceIds":6366,"published":6367,"modified":6368,"checkedAt":7,"severity":6369,"references":6373,"versionKeys":6391,"packageCount":32,"repositoryCount":832},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[6364,6365],"CVE-2026-0847","PYSEC-2026-98",[209,6365],"2026-03-04T19:16:10.683Z","2026-11-04T03:30:09.539281506Z",[6370,6372],{"type":3538,"score":6371},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3538,"score":5482},[6374,6376,6377,6378,6380,6382,6383,6385,6387,6389],{"type":3474,"url":6375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":3471,"url":4255},{"type":3471,"url":4775},{"type":3471,"url":6379},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-0847",{"type":3471,"url":6381},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444608",{"type":3479,"url":3932},{"type":3471,"url":6384},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":3727,"url":6386},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":3471,"url":6388},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-0847.json",{"type":3474,"url":6390},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3943,3944],{"id":210,"slug":6393,"dossier":47,"summary":6394,"aliases":6395,"sourceIds":6398,"published":6399,"modified":6400,"checkedAt":7,"severity":6401,"references":6403,"versionKeys":6414,"packageCount":32,"repositoryCount":784},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[6396,6397],"CVE-2025-69224","PYSEC-2026-1099",[210,6397],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[6402],{"type":3467,"score":4009},[6404,6406,6408,6410,6411,6412],{"type":3471,"url":6405},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":3474,"url":6407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":3576,"url":6409},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":6413},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[3799,3800,3801,3802,3803,3804,3805],{"id":211,"slug":6416,"dossier":90,"summary":6417,"aliases":6418,"sourceIds":6420,"published":6421,"modified":6422,"checkedAt":7,"severity":6423,"references":6426,"versionKeys":6435,"packageCount":32,"repositoryCount":744},"ghsa-69hj-f68j-2879-d34e420d","filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path",[6419],"CVE-2026-112909",[211],"2026-10-28T21:08:35Z","2026-10-28T21:15:04.974667790Z",[6424],{"type":3538,"score":6425},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[6427,6429,6431,6432,6433,6434],{"type":3471,"url":6428},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-69hj-f68j-2879",{"type":3474,"url":6430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112909",{"type":3471,"url":5455},{"type":3471,"url":5457},{"type":3479,"url":5459},{"type":3471,"url":5461},[6436,6437,6438,6439,6440,5463,5464,5465,5466],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0","pypi:filelock@3.20.3",{"id":212,"slug":6442,"dossier":47,"summary":6443,"aliases":6444,"sourceIds":6447,"published":6448,"modified":6449,"checkedAt":7,"severity":6450,"references":6454,"versionKeys":6466,"packageCount":32,"repositoryCount":754},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[6445,6446],"CVE-2026-1839","PYSEC-2026-2288",[212,6446],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[6451,6453],{"type":3538,"score":6452},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":3538,"score":5898},[6455,6457,6459,6460,6462,6464],{"type":3474,"url":6456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":3576,"url":6458},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":3479,"url":3725},{"type":3471,"url":6461},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":3727,"url":6463},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":3474,"url":6465},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[3732,3733,3734,3735,3736,3737,3738,3739,3740],{"id":213,"slug":6468,"dossier":47,"summary":6469,"aliases":6470,"sourceIds":6472,"published":6473,"modified":6474,"checkedAt":7,"severity":6475,"references":6477,"versionKeys":6487,"packageCount":32,"repositoryCount":869},"ghsa-6c7f-9265-g8fw-8ae34bdf","pypdf: Possible long runtimes for repeated references to the same missing object",[6471],"CVE-2026-115572",[213],"2026-10-23T20:55:15Z","2026-10-23T21:00:06.235957799Z",[6476],{"type":3467,"score":4521},[6478,6480,6482,6484,6485],{"type":3471,"url":6479},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-6c7f-9265-g8fw",{"type":3471,"url":6481},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4240",{"type":3471,"url":6483},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F68a0e5046cc9e14a6c24a21a713f3c7fbde18b4b",{"type":3479,"url":3514},{"type":3471,"url":6486},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.2",[3524,3525,3526],{"id":214,"slug":6489,"dossier":47,"summary":6490,"aliases":6491,"sourceIds":6493,"published":6494,"modified":6495,"checkedAt":7,"severity":6496,"references":6498,"versionKeys":6507,"packageCount":32,"repositoryCount":3883},"ghsa-6cjc-53gc-5rqm-f1beb40a","AIOHTTP: Connector pool exhaustion via Max-Age overflow",[6492],"CVE-2026-111065",[214],"2026-10-20T19:57:24Z","2026-10-20T20:15:05.286053785Z",[6497],{"type":3467,"score":4370},[6499,6501,6503,6505,6506],{"type":3471,"url":6500},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6cjc-53gc-5rqm",{"type":3474,"url":6502},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111065",{"type":3471,"url":6504},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9dd8eaf4e31f1237ef2c1574a8c82a739fca5805",{"type":3479,"url":3795},{"type":3471,"url":3879},[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],{"id":215,"slug":6509,"dossier":47,"summary":6510,"aliases":6511,"sourceIds":6514,"published":6515,"modified":6516,"checkedAt":7,"severity":6517,"references":6519,"versionKeys":6528,"packageCount":32,"repositoryCount":832},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[6512,6513],"CVE-2026-12072","PYSEC-2026-3581",[215,6513],"2026-07-31T16:50:55Z","2026-09-10T03:51:10.746883878Z",[6518],{"type":3538,"score":5482},[6520,6522,6523,6524,6526],{"type":3471,"url":6521},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3479,"url":3932},{"type":3479,"url":5650},{"type":3474,"url":6525},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":3474,"url":6527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[3943,3944],{"id":216,"slug":6530,"dossier":47,"summary":6531,"aliases":6532,"sourceIds":6535,"published":6536,"modified":6537,"checkedAt":7,"severity":6538,"references":6543,"versionKeys":6557,"packageCount":32,"repositoryCount":822},"ghsa-6hwm-xvph-95vm-a4237eb0","NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary",[6533,6534],"CVE-2026-78680","PYSEC-2026-3868",[216,6534],"2026-09-01T20:27:20Z","2026-09-10T12:25:25.368160026Z",[6539,6541],{"type":3538,"score":6540},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3467,"score":6542},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[6544,6546,6548,6550,6551,6552,6554,6555],{"type":3471,"url":6545},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",{"type":3474,"url":6547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78680",{"type":3471,"url":6549},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1a3cd1764ab3deb084fb66d0ffb4873717659538",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":6553},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-code-execution-via-graphviz-dot-binary",{"type":3479,"url":5650},{"type":3474,"url":6556},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hwm-xvph-95vm",[4416,3943,3944],{"id":217,"slug":6559,"dossier":47,"summary":6560,"aliases":6561,"sourceIds":6564,"published":6565,"modified":6566,"checkedAt":7,"severity":6567,"references":6569,"versionKeys":6580,"packageCount":32,"repositoryCount":784},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[6562,6563],"CVE-2025-69228","PYSEC-2026-1100",[217,6563],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[6568],{"type":3467,"score":4899},[6570,6572,6574,6576,6577,6578],{"type":3471,"url":6571},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":3474,"url":6573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":3576,"url":6575},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":6579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[3799,3800,3801,3802,3803,3804,3805],{"id":218,"slug":6582,"dossier":47,"summary":6583,"aliases":6584,"sourceIds":6587,"published":6588,"modified":6589,"checkedAt":7,"severity":6590,"references":6593,"versionKeys":6602,"packageCount":32,"repositoryCount":803},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[6585,6586],"CVE-2026-53538","PYSEC-2026-3037",[218,6586],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[6591],{"type":3538,"score":6592},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[6594,6596,6597,6598,6600],{"type":3471,"url":6595},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3479,"url":5596},{"type":3479,"url":5598},{"type":3474,"url":6599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":3474,"url":6601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[5884,5885,5886,5602],{"id":219,"slug":6604,"dossier":47,"summary":6605,"aliases":6606,"sourceIds":6609,"published":6610,"modified":6611,"checkedAt":7,"severity":6612,"references":6614,"versionKeys":6625,"packageCount":32,"repositoryCount":784},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[6607,6608],"CVE-2025-69223","PYSEC-2026-1101",[219,6608],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[6613],{"type":3538,"score":3652},[6615,6617,6619,6621,6622,6623],{"type":3471,"url":6616},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":3474,"url":6618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":3576,"url":6620},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":6624},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[3799,3800,3801,3802,3803,3804,3805],{"id":220,"slug":6627,"dossier":90,"summary":6628,"aliases":6629,"sourceIds":6631,"published":6632,"modified":6633,"checkedAt":7,"severity":6634,"references":6637,"versionKeys":6649,"packageCount":32,"repositoryCount":6661},"ghsa-6q48-6c7w-9gw2-05036ff0","certifi bundles emSign root CAs with compromised intermediate CA keys",[6630],"PYSEC-2026-4320",[220,6630],"2026-10-20T19:35:05Z","2026-10-30T14:00:02.590922333Z",[6635],{"type":3467,"score":6636},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6638,6640,6642,6644,6645,6647],{"type":3471,"url":6639},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",{"type":3471,"url":6641},"https:\u002F\u002Fdiscuss.python.org\u002Ft\u002Finformation-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident\u002F109576",{"type":3471,"url":6643},"https:\u002F\u002Femudhra.we-have-a-problem.com\u002F",{"type":3479,"url":3579},{"type":3479,"url":6646},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcertifi",{"type":3474,"url":6648},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",[6650,3592,6651,6652,6653,6654,6655,6656,6657,6658,6659,6660],"pypi:certifi@2024.12.14","pypi:certifi@2025.1.31","pypi:certifi@2025.10.5","pypi:certifi@2025.11.12","pypi:certifi@2025.4.26","pypi:certifi@2025.6.15","pypi:certifi@2025.8.3","pypi:certifi@2026.1.4","pypi:certifi@2026.2.25","pypi:certifi@2026.4.22","pypi:certifi@2026.6.17",21,{"id":221,"slug":6663,"dossier":47,"summary":6664,"aliases":6665,"sourceIds":6669,"published":6670,"modified":6671,"checkedAt":7,"severity":6672,"references":6674,"versionKeys":6687,"packageCount":32,"repositoryCount":4731},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[6666,6667,6668],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[221,6668],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[6673],{"type":3538,"score":3652},[6675,6677,6679,6681,6683,6685,6686],{"type":3727,"url":6676},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":3474,"url":6678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":3576,"url":6680},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":3576,"url":6682},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":3471,"url":6684},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":3479,"url":3480},{"type":3474,"url":6161},[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":222,"slug":6689,"dossier":47,"summary":6690,"aliases":6691,"sourceIds":6694,"published":6695,"modified":6696,"checkedAt":7,"severity":6697,"references":6699,"versionKeys":6710,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[6692,6693],"CVE-2024-12720","PYSEC-2026-1982",[222,6693],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[6698],{"type":3538,"score":5130},[6700,6702,6704,6705,6707,6708],{"type":3474,"url":6701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":3471,"url":6703},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":3479,"url":3725},{"type":3471,"url":6706},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":3479,"url":4198},{"type":3474,"url":6709},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[3732],{"id":223,"slug":6712,"dossier":47,"summary":6713,"aliases":6714,"sourceIds":6716,"published":6717,"modified":6718,"checkedAt":7,"severity":6719,"references":6721,"versionKeys":6733,"packageCount":32,"repositoryCount":869},"ghsa-6vvc-x485-93v7-1b4b7434","pypdf: Possible long runtimes\u002Flarge memory usage when retrieving form fields",[6715],"CVE-2026-113789",[223],"2026-10-22T16:49:56Z","2026-10-22T17:00:04.207149781Z",[6720],{"type":3467,"score":4316},[6722,6724,6726,6728,6730,6731],{"type":3471,"url":6723},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-6vvc-x485-93v7",{"type":3474,"url":6725},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113789",{"type":3471,"url":6727},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4219",{"type":3471,"url":6729},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5ef728f0e16d225c853e89f861ba0a67402fe3f2",{"type":3479,"url":3514},{"type":3471,"url":6732},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.21.0",[3524,3525,3526],{"id":224,"slug":6735,"dossier":47,"summary":6736,"aliases":6737,"sourceIds":6740,"published":6741,"modified":6742,"checkedAt":7,"severity":6743,"references":6745,"versionKeys":6756,"packageCount":32,"repositoryCount":784},"ghsa-6w3r-xr62-4xcp-69d1732a","virtualenv: Bash prompt values can change meaning under older compatibility modes",[6738,6739],"BIT-virtualenv-2026-113723","CVE-2026-113723",[224],"2026-10-23T22:21:57Z","2026-10-29T10:55:32.039209236Z",[6744],{"type":3467,"score":4286},[6746,6748,6750,6752,6754,6755],{"type":3471,"url":6747},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-6w3r-xr62-4xcp",{"type":3474,"url":6749},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113723",{"type":3471,"url":6751},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3418",{"type":3471,"url":6753},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F5f48d711731311428aebfae61d46957762155b22",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":225,"slug":6758,"dossier":47,"summary":6759,"aliases":6760,"sourceIds":6763,"published":6764,"modified":6765,"checkedAt":7,"severity":6766,"references":6769,"versionKeys":6788,"packageCount":32,"repositoryCount":784},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[6761,6762],"CVE-2025-71176","PYSEC-2026-1845",[225,6762],"2026-01-22T06:30:29Z","2026-09-10T03:50:32.768043789Z",[6767],{"type":3538,"score":6768},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[6770,6772,6774,6776,6778,6780,6782,6784,6786],{"type":3474,"url":6771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":3471,"url":6773},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":3471,"url":6775},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":3471,"url":6777},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":3479,"url":6779},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":3471,"url":6781},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":3471,"url":6783},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":3479,"url":6785},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":3474,"url":6787},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[6789,6790,6791,6792,6793],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@8.4.2","pypi:pytest@9.0.2",{"id":226,"slug":6795,"dossier":47,"summary":6796,"aliases":6797,"sourceIds":6800,"published":6801,"modified":6802,"checkedAt":7,"severity":6803,"references":6808,"versionKeys":6821,"packageCount":32,"repositoryCount":822},"ghsa-6ww7-3frv-cqxh-c6d40b97","NLTK: pathsec SSRF protection can be bypassed when a proxy is configured",[6798,6799],"CVE-2026-78682","PYSEC-2026-3733",[226,6799],"2026-08-25T02:16:52.890Z","2026-09-08T16:45:04.147588108Z",[6804,6806],{"type":3467,"score":6805},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3467,"score":6807},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6809,6811,6813,6815,6816,6817,6819],{"type":3727,"url":6810},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6ww7-3frv-cqxh",{"type":3474,"url":6812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78682",{"type":3471,"url":6814},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F767333a005a1cd3d82d2029215f2dbe66a5844d9",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":6818},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3733.yaml",{"type":3474,"url":6820},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-ssrf-protection-bypass-via-proxy",[4416,3943,3944],{"id":227,"slug":6823,"dossier":47,"summary":6824,"aliases":6825,"sourceIds":6828,"published":6829,"modified":6830,"checkedAt":7,"severity":6831,"references":6836,"versionKeys":6852,"packageCount":32,"repositoryCount":832},"ghsa-72r2-7mfr-5xr9-919ee5d0","NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:\u002F\u002F protocol",[6826,6827],"CVE-2026-65915","PYSEC-2026-3731",[227,6827],"2026-08-22T15:16:19.500Z","2026-09-08T15:46:56.329043767Z",[6832,6834],{"type":3538,"score":6833},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3467,"score":6835},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6837,6839,6841,6843,6845,6846,6848,6850],{"type":3727,"url":6838},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-72r2-7mfr-5xr9",{"type":3474,"url":6840},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-65915",{"type":3471,"url":6842},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3522",{"type":3471,"url":6844},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F69db9911fdba914ceeaca7aec6e892d1b14586a9",{"type":3479,"url":3932},{"type":3471,"url":6847},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3731.yaml",{"type":3471,"url":6849},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa510de7b-ffaf-4a83-9bf8-fa7e63f4bd2d",{"type":3474,"url":6851},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-arbitrary-file-read-via-filesystempathpointer",[3943,3944],{"id":228,"slug":6854,"dossier":90,"summary":6855,"aliases":6856,"sourceIds":6859,"published":6860,"modified":6861,"checkedAt":7,"severity":6862,"references":6864,"versionKeys":6873,"packageCount":32,"repositoryCount":744},"ghsa-74r2-7ff9-mjj2-9127f170","Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()",[6857,6858],"BIT-pillow-2026-112401","CVE-2026-112401",[228],"2026-10-21T20:42:11Z","2026-10-26T08:56:13.792431880Z",[6863],{"type":3467,"score":4370},[6865,6867,6869,6871,6872],{"type":3471,"url":6866},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-74r2-7ff9-mjj2",{"type":3474,"url":6868},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112401",{"type":3471,"url":6870},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F68a3fe957d8a4d552e8c69d96066d749f0614c7e",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":229,"slug":6875,"dossier":47,"summary":6876,"aliases":6877,"sourceIds":6880,"published":6881,"modified":6882,"checkedAt":7,"severity":6883,"references":6885,"versionKeys":6895,"packageCount":32,"repositoryCount":869},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[6878,6879],"CVE-2026-32597","PYSEC-2026-120",[229,6879],"2026-03-13T19:55:09.500Z","2026-09-10T03:50:59.993704484Z",[6884],{"type":3538,"score":3569},[6886,6888,6890,6891,6893],{"type":3727,"url":6887},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":3474,"url":6889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":3479,"url":3903},{"type":3471,"url":6892},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":3471,"url":6894},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[3911,3913],{"id":230,"slug":6897,"dossier":47,"summary":6898,"aliases":6899,"sourceIds":6902,"published":6903,"modified":6904,"checkedAt":7,"severity":6905,"references":6907,"versionKeys":6919,"packageCount":32,"repositoryCount":869},"ghsa-763m-79hh-57f2-630348b0","pypdf: Possible long runtimes\u002Flarge memory usage when extracting XForm objects",[6900,6901],"CVE-2026-84311","PYSEC-2026-3911",[230,6901],"2026-09-01T21:27:22Z","2026-09-10T12:26:04.098858222Z",[6906],{"type":3467,"score":3505},[6908,6910,6911,6912,6913,6914,6915,6917],{"type":3471,"url":6909},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3471,"url":3510},{"type":3471,"url":3512},{"type":3479,"url":3514},{"type":3471,"url":3516},{"type":3479,"url":3518},{"type":3474,"url":6916},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-763m-79hh-57f2",{"type":3474,"url":6918},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84311",[3524,3525,3526],{"id":231,"slug":6921,"dossier":47,"summary":6922,"aliases":6923,"sourceIds":6927,"published":6928,"modified":6929,"checkedAt":7,"severity":6930,"references":6936,"versionKeys":6948,"packageCount":32,"repositoryCount":765},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[6924,6925,6926],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[231,6925,6926],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[6931,6933,6935],{"type":3538,"score":6932},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3538,"score":6934},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":3538,"score":4011},[6937,6939,6941,6942,6944,6946],{"type":3474,"url":6938},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":3471,"url":6940},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":3479,"url":4499},{"type":3471,"url":6943},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":3474,"url":6945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":3474,"url":6947},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[4503,4504,4505,4506],{"id":232,"slug":6950,"dossier":47,"summary":6951,"aliases":6952,"sourceIds":6953,"published":6954,"modified":6955,"checkedAt":7,"severity":6956,"references":6959,"versionKeys":6972,"packageCount":32,"repositoryCount":4084},"ghsa-78g4-xqwv-q3g8-95d38591","Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()",[],[232],"2026-10-22T17:01:08Z","2026-10-22T17:15:04.326552524Z",[6957],{"type":3538,"score":6958},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6960,6962,6964,6966,6968,6969,6970],{"type":3471,"url":6961},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-78g4-xqwv-q3g8",{"type":3471,"url":6963},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5f8114c8096b181fae493543cd3837d9f9a971cc",{"type":3471,"url":6965},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd3470c327840f4c216a1610f30e7091dfd0b97c0",{"type":3471,"url":6967},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fcommit\u002F91d08b11a72764f6d199f32fa0c1b1abd4edc2ad",{"type":3479,"url":3480},{"type":3471,"url":3482},{"type":3471,"url":6971},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FOSV-2025-219",[3486,3487,3488,3489,3490,3491,3492,3493],{"id":233,"slug":6974,"dossier":47,"summary":6975,"aliases":6976,"sourceIds":6979,"published":6980,"modified":6981,"checkedAt":7,"severity":6982,"references":6984,"versionKeys":6997,"packageCount":32,"repositoryCount":103},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[6977,6978],"CVE-2025-47287","PYSEC-2026-1974",[233,6978],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[6983],{"type":3538,"score":3652},[6985,6987,6989,6991,6992,6994,6995],{"type":3471,"url":6986},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":3474,"url":6988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":3471,"url":6990},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":3479,"url":4499},{"type":3471,"url":6993},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":3479,"url":4574},{"type":3474,"url":6996},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[4503],{"id":234,"slug":6999,"dossier":47,"summary":7000,"aliases":7001,"sourceIds":7004,"published":7005,"modified":7006,"checkedAt":7,"severity":7007,"references":7009,"versionKeys":7026,"packageCount":32,"repositoryCount":34},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[7002,7003],"CVE-2025-62727","PYSEC-2026-1942",[234,7003],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[7008],{"type":3538,"score":3652},[7010,7012,7014,7016,7019,7021,7023,7024],{"type":3471,"url":7011},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":3474,"url":7013},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":3576,"url":7015},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":7017,"url":7018},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":3479,"url":7020},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":3471,"url":7022},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":3479,"url":3767},{"type":3474,"url":7025},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[3772,3773,7027,7028,7029],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":235,"slug":7031,"dossier":47,"summary":7032,"aliases":7033,"sourceIds":7036,"published":7037,"modified":7038,"checkedAt":7,"severity":7039,"references":7042,"versionKeys":7059,"packageCount":32,"repositoryCount":3883},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[7034,7035],"CVE-2026-0994","PYSEC-2026-1805",[235,7035],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[7040],{"type":3467,"score":7041},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[7043,7045,7047,7049,7051,7053,7055,7057],{"type":3474,"url":7044},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":3471,"url":7046},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":3471,"url":7048},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":3471,"url":7050},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":3471,"url":7052},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":3479,"url":7054},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":3479,"url":7056},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":3474,"url":7058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[7060,7061,7062,7063,7064,7065,7066,7067,7068,7069],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":236,"slug":7071,"dossier":47,"summary":7072,"aliases":7073,"sourceIds":7076,"published":7077,"modified":7078,"checkedAt":7,"severity":7079,"references":7082,"versionKeys":7096,"packageCount":32,"repositoryCount":103},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[7074,7075],"CVE-2026-41312","PYSEC-2026-3011",[236,7075],"2026-04-16T21:30:00Z","2026-09-10T03:50:43.750842855Z",[7080,7081],{"type":3538,"score":3604},{"type":3467,"score":4999},[7083,7085,7087,7089,7091,7092,7093,7094],{"type":3471,"url":7084},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":3474,"url":7086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":3471,"url":7088},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":3471,"url":7090},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":3479,"url":3514},{"type":3471,"url":5011},{"type":3479,"url":3518},{"type":3474,"url":7095},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[3524,3525],{"id":237,"slug":7098,"dossier":47,"summary":7099,"aliases":7100,"sourceIds":7103,"published":7104,"modified":7105,"checkedAt":7,"severity":7106,"references":7108,"versionKeys":7125,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[7101,7102],"CVE-2025-55197","PYSEC-2026-1830",[237,7102],"2025-08-13T19:51:24Z","2026-09-10T03:50:26.651449913Z",[7107],{"type":3467,"score":4899},[7109,7111,7113,7115,7117,7118,7120,7122,7123],{"type":3471,"url":7110},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":3474,"url":7112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":3471,"url":7114},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":3471,"url":7116},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":3479,"url":3514},{"type":3471,"url":7119},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":3471,"url":7121},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":3479,"url":3518},{"type":3474,"url":7124},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[3524],{"id":238,"slug":7127,"dossier":47,"summary":7128,"aliases":7129,"sourceIds":7131,"published":7132,"modified":7133,"checkedAt":7,"severity":7134,"references":7136,"versionKeys":7145,"packageCount":32,"repositoryCount":869},"ghsa-7mh2-4gg2-979f-931d5391","pypdf: Possible large memory usage for streams with multiple filters",[7130],"CVE-2026-113795",[238],"2026-10-21T16:48:30Z","2026-10-21T17:00:06.161656397Z",[7135],{"type":3467,"score":4316},[7137,7139,7141,7143,7144],{"type":3471,"url":7138},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7mh2-4gg2-979f",{"type":3471,"url":7140},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4173",{"type":3471,"url":7142},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F80a84d4be6022d910874ccb0d2365400f3f0e185",{"type":3479,"url":3514},{"type":3471,"url":4328},[3524,3525,3526],{"id":239,"slug":7147,"dossier":90,"summary":7148,"aliases":7149,"sourceIds":7153,"published":7154,"modified":7155,"checkedAt":7,"severity":7156,"references":7159,"versionKeys":7168,"packageCount":32,"repositoryCount":744},"ghsa-7mwm-ghpf-9vrm-446e4269","Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform",[7150,7151,7152],"BIT-pillow-2026-112402","CVE-2026-112402","PYSEC-2026-4331",[239,7152],"2026-10-19T22:17:07.633Z","2026-10-28T11:10:35.587185673Z",[7157,7158],{"type":3467,"score":3851},{"type":3538,"score":3652},[7160,7162,7164,7166,7167],{"type":3576,"url":7161},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-7mwm-ghpf-9vrm",{"type":3474,"url":7163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112402",{"type":3576,"url":7165},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faafa6c75f7cdabb9f409a8aac7c780bea31d08d9",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":240,"slug":7170,"dossier":47,"summary":7171,"aliases":7172,"sourceIds":7175,"published":7176,"modified":7177,"checkedAt":7,"severity":7178,"references":7181,"versionKeys":7197,"packageCount":32,"repositoryCount":832},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[7173,7174],"CVE-2025-14009","PYSEC-2026-96",[240,7174],"2026-02-18T18:24:19.410Z","2026-09-10T03:50:34.416389229Z",[7179],{"type":3538,"score":7180},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7182,7184,7186,7188,7189,7191,7193,7195],{"type":3474,"url":7183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":3471,"url":7185},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":3471,"url":7187},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":3479,"url":3932},{"type":3471,"url":7190},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":3471,"url":7192},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":3727,"url":7194},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":3474,"url":7196},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3943,3944],{"id":241,"slug":7199,"dossier":47,"summary":7200,"aliases":7201,"sourceIds":7204,"published":7205,"modified":7206,"checkedAt":7,"severity":7207,"references":7210,"versionKeys":7224,"packageCount":32,"repositoryCount":5254},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[7202,7203],"CVE-2026-63374","PYSEC-2026-4025",[241,7203],"2026-09-18T17:17:18Z","2026-10-01T17:56:11.058322399Z",[7208],{"type":3467,"score":7209},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7211,7213,7215,7217,7218,7219,7220,7222],{"type":3471,"url":7212},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":3471,"url":7214},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":3471,"url":7216},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":3479,"url":5782},{"type":3471,"url":5784},{"type":3479,"url":5786},{"type":3474,"url":7221},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":3474,"url":7223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63374",[5792,5793,5794,5795,5796,5797,5798,5799],{"id":242,"slug":7226,"dossier":47,"summary":7227,"aliases":7228,"sourceIds":7231,"published":7232,"modified":7233,"checkedAt":7,"severity":7234,"references":7236,"versionKeys":7240,"packageCount":32,"repositoryCount":765},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[7229,7230],"CVE-2026-54283","PYSEC-2026-249",[242,7230],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[7235],{"type":3538,"score":3652},[7237,7239],{"type":3474,"url":7238},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":3479,"url":7020},[3771,3772,3773,7027,7028,7029,7241,7242,7243],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":243,"slug":7245,"dossier":47,"summary":7246,"aliases":7247,"sourceIds":7250,"published":7251,"modified":7252,"checkedAt":7,"severity":7253,"references":7255,"versionKeys":7264,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[7248,7249],"CVE-2026-49477","PYSEC-2026-3072",[243,7249],"2026-07-09T13:37:46Z","2026-09-10T03:51:10.949295830Z",[7254],{"type":3538,"score":3652},[7256,7258,7259,7260,7262],{"type":3471,"url":7257},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3479,"url":4038},{"type":3479,"url":4040},{"type":3474,"url":7261},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":3474,"url":7263},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[4046,4047,4048],{"id":244,"slug":7266,"dossier":47,"summary":7267,"aliases":7268,"sourceIds":7270,"published":7271,"modified":7272,"checkedAt":7,"severity":7273,"references":7275,"versionKeys":7287,"packageCount":32,"repositoryCount":754},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[7269],"CVE-2026-91990",[244],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[7274],{"type":3467,"score":4370},[7276,7278,7280,7282,7284,7285],{"type":3471,"url":7277},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":3471,"url":7279},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":3471,"url":7281},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":3471,"url":7283},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":3479,"url":4499},{"type":3471,"url":7286},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[4503,4504,4505,4506,4507,4508],{"id":245,"slug":7289,"dossier":47,"summary":7290,"aliases":7291,"sourceIds":7294,"published":7295,"modified":7296,"checkedAt":7,"severity":7297,"references":7302,"versionKeys":7321,"packageCount":32,"repositoryCount":832},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[7292,7293],"CVE-2025-71408","PYSEC-2026-3657",[245,7293],"2026-07-24T22:16:50.063Z","2026-08-19T12:15:03.319052318Z",[7298,7299,7300],{"type":3538,"score":6540},{"type":3467,"score":6542},{"type":3467,"score":7301},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7303,7305,7307,7309,7311,7312,7313,7315,7317,7319],{"type":3474,"url":7304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":3576,"url":7306},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":3576,"url":7308},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":3471,"url":7310},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":3479,"url":3932},{"type":3474,"url":5964},{"type":3471,"url":7314},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":3576,"url":7316},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":3727,"url":7318},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",{"type":3474,"url":7320},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-848c-c2cx-j7qx",[3943,3944],{"id":246,"slug":7323,"dossier":47,"summary":7324,"aliases":7325,"sourceIds":7327,"published":7328,"modified":7329,"checkedAt":7,"severity":7330,"references":7333,"versionKeys":7349,"packageCount":32,"repositoryCount":832},"ghsa-84m7-p3x7-pcfv-fb980c8b","MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion",[7326],"CVE-2026-59951",[246],"2026-10-15T20:13:13Z","2026-10-15T20:30:08.565001293Z",[7331,7332],{"type":3538,"score":3652},{"type":3467,"score":4370},[7334,7336,7338,7340,7342,7344,7346,7347,7348],{"type":3471,"url":7335},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-84m7-p3x7-pcfv",{"type":3474,"url":7337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59951",{"type":3471,"url":7339},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3395",{"type":3471,"url":7341},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3426",{"type":3471,"url":7343},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F92120b4b0f50385af096592d7cee932fc1d994e7",{"type":3471,"url":7345},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd2290ca3434731b68ea3e2270bc06a6e6575931b",{"type":3479,"url":5676},{"type":3471,"url":5678},{"type":3471,"url":5680},[5682,5683,5684,5685],{"id":247,"slug":7351,"dossier":47,"summary":7352,"aliases":7353,"sourceIds":7357,"published":7358,"modified":7359,"checkedAt":7,"severity":7360,"references":7363,"versionKeys":7400,"packageCount":32,"repositoryCount":765},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[7354,7355,7356],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[247,7355],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[7361],{"type":3538,"score":7362},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7364,7366,7368,7370,7372,7374,7376,7378,7380,7382,7383,7385,7388,7390,7392,7394,7396,7398],{"type":3474,"url":7365},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":3474,"url":7367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":3576,"url":7369},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":3471,"url":7371},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":3583,"url":7373},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":3471,"url":7375},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":3471,"url":7377},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":3471,"url":7379},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":3471,"url":7381},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":3479,"url":7020},{"type":3471,"url":7384},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":7386,"url":7387},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":3471,"url":7389},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":3471,"url":7391},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":3471,"url":7393},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":3471,"url":7395},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":3583,"url":7397},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":3474,"url":7399},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[3771,3772,3773,7027,7028,7029,7241,7242,7243],{"id":248,"slug":7402,"dossier":47,"summary":7403,"aliases":7404,"sourceIds":7407,"published":7408,"modified":7409,"checkedAt":7,"severity":7410,"references":7413,"versionKeys":7426,"packageCount":32,"repositoryCount":103},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[7405,7406],"CVE-2026-33699","PYSEC-2026-3012",[248,7406],"2026-03-25T20:05:22Z","2026-09-10T03:51:00.069856672Z",[7411],{"type":3467,"score":7412},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7414,7416,7418,7420,7421,7423,7424],{"type":3471,"url":7415},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":3474,"url":7417},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":3471,"url":7419},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":3479,"url":3514},{"type":3471,"url":7422},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":3479,"url":3518},{"type":3474,"url":7425},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[3524,3525],{"id":249,"slug":7428,"dossier":47,"summary":7429,"aliases":7430,"sourceIds":7434,"published":7435,"modified":7436,"checkedAt":7,"severity":7437,"references":7441,"versionKeys":7463,"packageCount":32,"repositoryCount":784},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[7431,7432,7433],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[249,7433],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[7438,7439],{"type":3538,"score":4146},{"type":3467,"score":7440},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[7442,7444,7446,7448,7450,7452,7453,7455,7457,7459,7461],{"type":3474,"url":7443},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":3471,"url":7445},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":3471,"url":7447},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":3471,"url":7449},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":3471,"url":7451},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":3479,"url":4161},{"type":3471,"url":7454},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":3471,"url":7456},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":3471,"url":7458},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":3479,"url":7460},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":3474,"url":7462},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[4173,4174,4175,6209,6210],{"id":250,"slug":7465,"dossier":90,"summary":7466,"aliases":7467,"sourceIds":7470,"published":7471,"modified":7472,"checkedAt":7,"severity":7473,"references":7476,"versionKeys":7493,"packageCount":32,"repositoryCount":724},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[7468,7469],"CVE-2026-97687","PYSEC-2026-4175",[250,7469],"2026-09-30T14:46:04Z","2026-10-01T17:55:53.793608550Z",[7474],{"type":3467,"score":7475},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7477,7479,7481,7483,7485,7487,7488,7490,7491],{"type":3471,"url":7478},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":3474,"url":7480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":3471,"url":7482},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":3471,"url":7484},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":3471,"url":7486},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":3479,"url":4075},{"type":3471,"url":7489},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",{"type":3479,"url":4077},{"type":3474,"url":7492},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",[4079,4080,4081,4082,4083,7494,7495],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":251,"slug":7497,"dossier":47,"summary":7498,"aliases":7499,"sourceIds":7503,"published":7504,"modified":7505,"checkedAt":7,"severity":7506,"references":7509,"versionKeys":7517,"packageCount":32,"repositoryCount":744},"ghsa-8g5g-8vmr-9782-3b73f6ca","Pillow: Heap buffer overflow in ImagingJpegDecode",[7500,7501,7502],"BIT-pillow-2026-112403","CVE-2026-112403","PYSEC-2026-4332",[251,7502],"2026-10-19T22:17:07.770Z","2026-10-28T11:10:51.788355157Z",[7507,7508],{"type":3467,"score":6004},{"type":3538,"score":5295},[7510,7512,7514,7515,7516],{"type":3727,"url":7511},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8g5g-8vmr-9782",{"type":3474,"url":7513},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112403",{"type":3576,"url":6012},{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":252,"slug":7519,"dossier":47,"summary":7520,"aliases":7521,"sourceIds":7524,"published":7525,"modified":7526,"checkedAt":7,"severity":7527,"references":7534,"versionKeys":7556,"packageCount":32,"repositoryCount":822},"ghsa-8mgp-746c-j5xp-7f3a80b8","NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots",[7522,7523],"CVE-2026-81726","PYSEC-2026-3740",[252,7523],"2026-08-27T17:21:03.387Z","2026-11-02T22:15:04.414504485Z",[7528,7530,7532],{"type":3538,"score":7529},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":3467,"score":7531},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3467,"score":7533},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7535,7537,7539,7541,7543,7545,7547,7549,7551,7552,7554],{"type":3727,"url":7536},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mgp-746c-j5xp",{"type":3474,"url":7538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81726",{"type":3471,"url":7540},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3757",{"type":3471,"url":7542},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3759",{"type":3471,"url":7544},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3813",{"type":3471,"url":7546},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F2a92b71827d754ae8920261e7ed0c4bb283ab2d7",{"type":3471,"url":7548},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fa44a7af69bca87e92d9c4a701fcbbe4512e8d450",{"type":3471,"url":7550},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fcbc98458b43de5f792f0382583c16df39e5c5117",{"type":3479,"url":3932},{"type":3471,"url":7553},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3740.yaml",{"type":3474,"url":7555},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-3.10.3-path-traversal-via-model-artifact-apis",[4416,3943,3944],{"id":253,"slug":7558,"dossier":47,"summary":7559,"aliases":7560,"sourceIds":7563,"published":7564,"modified":7565,"checkedAt":7,"severity":7566,"references":7571,"versionKeys":7584,"packageCount":32,"repositoryCount":822},"ghsa-8mpw-7fpc-4gqj-e47ea3c3","NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks",[7561,7562],"CVE-2026-81725","PYSEC-2026-3752",[253,7562],"2026-08-27T17:21:03.247Z","2026-09-08T20:45:04.346016767Z",[7567,7569],{"type":3467,"score":7568},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3467,"score":7570},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7572,7574,7576,7578,7579,7580,7582],{"type":3727,"url":7573},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-8mpw-7fpc-4gqj",{"type":3474,"url":7575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81725",{"type":3471,"url":7577},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7808692d451b962711005d954859bb83aabcf8fa",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":7581},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3752.yaml",{"type":3474,"url":7583},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-regular-expression-denial-of-service-via-pl196xcorpusreader",[4416,3943,3944],{"id":254,"slug":7586,"dossier":47,"summary":7587,"aliases":7588,"sourceIds":7590,"published":7591,"modified":7592,"checkedAt":7,"severity":7593,"references":7595,"versionKeys":7602,"packageCount":32,"repositoryCount":744},"ghsa-8mx5-7m5m-r77g-03e425ff","filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL",[7589],"CVE-2026-112910",[254],"2026-10-28T21:08:55Z","2026-10-28T21:15:05.688436299Z",[7594],{"type":3538,"score":5208},[7596,7598,7599,7600,7601],{"type":3471,"url":7597},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-8mx5-7m5m-r77g",{"type":3471,"url":5455},{"type":3471,"url":5457},{"type":3479,"url":5459},{"type":3471,"url":5461},[6436,6437,6438,6439,6440,5463,5464,5465,5466],{"id":255,"slug":7604,"dossier":47,"summary":7605,"aliases":7606,"sourceIds":7609,"published":7610,"modified":7611,"checkedAt":7,"severity":7612,"references":7614,"versionKeys":7633,"packageCount":32,"repositoryCount":869},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[7607,7608],"CVE-2025-4565","PYSEC-2026-1806",[255,7608],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[7613],{"type":3467,"score":3468},[7615,7617,7619,7621,7623,7624,7626,7628,7630,7631],{"type":3471,"url":7616},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":3471,"url":7618},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":3474,"url":7620},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":3471,"url":7622},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":3479,"url":7054},{"type":3471,"url":7625},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":3471,"url":7627},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":3471,"url":7629},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":3479,"url":7056},{"type":3474,"url":7632},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[7060,7062,7063],{"id":256,"slug":7635,"dossier":47,"summary":7636,"aliases":7637,"sourceIds":7640,"published":7641,"modified":7642,"checkedAt":7,"severity":7643,"references":7645,"versionKeys":7655,"packageCount":32,"repositoryCount":784},"ghsa-8rjx-v5ww-45pp-d32996f1","virtualenv activation scripts run code from a path that contains a placeholder name",[7638,7639],"BIT-virtualenv-2026-113776","CVE-2026-113776",[256],"2026-10-21T16:39:38Z","2026-10-29T10:55:59.336337258Z",[7644],{"type":3538,"score":5898},[7646,7648,7650,7652,7653],{"type":3471,"url":7647},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-8rjx-v5ww-45pp",{"type":3474,"url":7649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113776",{"type":3471,"url":7651},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F602b26623a724827ff171bf11fef4ad186d01f74",{"type":3479,"url":4297},{"type":3471,"url":7654},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.2",[4301,4302,4303,4304,4305],{"id":257,"slug":7657,"dossier":47,"summary":7658,"aliases":7659,"sourceIds":7663,"published":7664,"modified":7665,"checkedAt":7,"severity":7666,"references":7668,"versionKeys":7678,"packageCount":32,"repositoryCount":4731},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[7660,7661,7662],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[257,7662],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[7667],{"type":3538,"score":3652},[7669,7671,7673,7674,7676,7677],{"type":3727,"url":7670},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":3474,"url":7672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":3576,"url":4724},{"type":3471,"url":7675},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":3479,"url":3480},{"type":3474,"url":4729},[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":258,"slug":7680,"dossier":47,"summary":7681,"aliases":7682,"sourceIds":7685,"published":7686,"modified":7687,"checkedAt":7,"severity":7688,"references":7690,"versionKeys":7702,"packageCount":32,"repositoryCount":32},"ghsa-8wjv-2p76-3863-60244895","PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header",[7683,7684],"CVE-2026-102265","PYSEC-2026-4142",[258,7684],"2026-09-29T23:43:06Z","2026-10-01T17:55:45.157085612Z",[7689],{"type":3538,"score":3752},[7691,7693,7695,7697,7698,7699,7700],{"type":3471,"url":7692},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",{"type":3474,"url":7694},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102265",{"type":3471,"url":7696},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F06573692ebcdec8831c3927513b3e87c31fbbb62",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":7701},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8wjv-2p76-3863",[3912],{"id":259,"slug":7704,"dossier":47,"summary":7705,"aliases":7706,"sourceIds":7709,"published":7710,"modified":7711,"checkedAt":7,"severity":7712,"references":7714,"versionKeys":7727,"packageCount":32,"repositoryCount":832},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[7707,7708],"CVE-2025-5197","PYSEC-2026-1983",[259,7708],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[7713],{"type":3538,"score":5130},[7715,7717,7719,7721,7722,7724,7725],{"type":3474,"url":7716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":3471,"url":7718},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":3471,"url":7720},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":3479,"url":3725},{"type":3471,"url":7723},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":3479,"url":4198},{"type":3474,"url":7726},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[3732,3733,3734,3735],{"id":260,"slug":7729,"dossier":47,"summary":7730,"aliases":7731,"sourceIds":7735,"published":7736,"modified":7737,"checkedAt":7,"severity":7738,"references":7741,"versionKeys":7756,"packageCount":32,"repositoryCount":784},"ghsa-94p9-xgh2-xp45-1ed45366","virtualenv: Downloaded seed wheels (pip\u002Fsetuptools) are not integrity-checked before use",[7732,7733,7734],"BIT-virtualenv-2026-102930","CVE-2026-102930","PYSEC-2026-4011",[260,7734],"2026-09-18T01:41:45Z","2026-10-06T15:26:06.490658879Z",[7739],{"type":3467,"score":7740},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7742,7744,7746,7748,7750,7752,7753,7755],{"type":3471,"url":7743},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-94p9-xgh2-xp45",{"type":3474,"url":7745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102930",{"type":3471,"url":7747},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3251",{"type":3576,"url":7749},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa01ed3e2f239d6ab1fce62c5c7664ccf268fff6d",{"type":3471,"url":7751},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4011.yaml",{"type":3479,"url":4297},{"type":3471,"url":7754},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.12",{"type":3479,"url":5572},[4301,4302,4303,4304,4305],{"id":261,"slug":7758,"dossier":47,"summary":7759,"aliases":7760,"sourceIds":7763,"published":7764,"modified":7765,"checkedAt":7,"severity":7766,"references":7769,"versionKeys":7780,"packageCount":32,"repositoryCount":832},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[7761,7762],"CVE-2025-53643","PYSEC-2026-1104",[261,7762],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[7767],{"type":3467,"score":7768},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7770,7772,7774,7776,7777,7778],{"type":3471,"url":7771},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":3474,"url":7773},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":3576,"url":7775},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":7779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[3799,3800,3801,3802],{"id":262,"slug":7782,"dossier":47,"summary":7783,"aliases":7784,"sourceIds":7787,"published":7788,"modified":7789,"checkedAt":7,"severity":7790,"references":7793,"versionKeys":7802,"packageCount":32,"repositoryCount":765},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[7785,7786],"CVE-2026-34518","PYSEC-2026-2100",[262,7786],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[7791,7792],{"type":3538,"score":6300},{"type":3467,"score":5318},[7794,7796,7798,7800,7801],{"type":3576,"url":7795},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":3474,"url":7797},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":3576,"url":7799},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":263,"slug":7804,"dossier":47,"summary":7805,"aliases":7806,"sourceIds":7809,"published":7810,"modified":7811,"checkedAt":7,"severity":7812,"references":7816,"versionKeys":7829,"packageCount":32,"repositoryCount":822},"ghsa-97qj-x29f-37w7-98509369","NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses",[7807,7808],"CVE-2026-78681","PYSEC-2026-3748",[263,7808],"2026-08-25T02:16:52.750Z","2026-09-08T16:45:04.193148017Z",[7813,7814],{"type":3467,"score":3851},{"type":3467,"score":7815},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7817,7819,7821,7823,7824,7825,7827],{"type":3727,"url":7818},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-97qj-x29f-37w7",{"type":3474,"url":7820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78681",{"type":3471,"url":7822},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe91789c9a043296ad04912ce171c22776d45963b",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":7826},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3748.yaml",{"type":3474,"url":7828},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-entity-expansion-dos-via-elementtree",[4416,3943,3944],{"id":264,"slug":7831,"dossier":47,"summary":7832,"aliases":7833,"sourceIds":7836,"published":7837,"modified":7838,"checkedAt":7,"severity":7839,"references":7842,"versionKeys":7852,"packageCount":32,"repositoryCount":869},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[7834,7835],"CVE-2026-48522","PYSEC-2026-175",[264,7835],"2026-05-28T16:16:29.150Z","2026-09-10T03:50:49.179286182Z",[7840],{"type":3538,"score":7841},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7843,7845,7847,7849,7850],{"type":3727,"url":7844},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":3474,"url":7846},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":3471,"url":7848},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":3479,"url":3903},{"type":3471,"url":7851},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[3911,3913],{"id":265,"slug":7854,"dossier":47,"summary":7855,"aliases":7856,"sourceIds":7859,"published":7860,"modified":7861,"checkedAt":7,"severity":7862,"references":7864,"versionKeys":7879,"packageCount":32,"repositoryCount":103},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[7857,7858],"CVE-2026-27024","PYSEC-2026-3013",[265,7858],"2026-02-18T22:40:49Z","2026-09-10T03:50:34.616221084Z",[7863],{"type":3467,"score":5266},[7865,7867,7869,7871,7873,7874,7876,7877],{"type":3471,"url":7866},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":3474,"url":7868},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":3471,"url":7870},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":3471,"url":7872},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":3479,"url":3514},{"type":3471,"url":7875},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":3479,"url":3518},{"type":3474,"url":7878},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[3524,3525],{"id":266,"slug":7881,"dossier":47,"summary":7882,"aliases":7883,"sourceIds":7886,"published":7887,"modified":7888,"checkedAt":7,"severity":7889,"references":7891,"versionKeys":7901,"packageCount":32,"repositoryCount":32},"ghsa-9f4q-q82q-4359-c9ca91c1","Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks",[7884,7885],"CVE-2026-31248","PYSEC-2026-2454",[266,7885],"2026-05-11T18:31:44Z","2026-07-13T16:43:41.210892318Z",[7890],{"type":3538,"score":3652},[7892,7894,7895,7897,7899],{"type":3474,"url":7893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31248",{"type":3479,"url":4353},{"type":3471,"url":7896},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31248-35d1e1393188818585b2ce3b9ce24686",{"type":3479,"url":7898},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling",{"type":3474,"url":7900},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9f4q-q82q-4359",[4357],{"id":267,"slug":7903,"dossier":47,"summary":7904,"aliases":7905,"sourceIds":7908,"published":7909,"modified":7910,"checkedAt":7,"severity":7911,"references":7913,"versionKeys":7927,"packageCount":32,"repositoryCount":869},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[7906,7907],"CVE-2025-66416","PYSEC-2026-1617",[267,7907],"2025-12-02T16:52:08Z","2026-09-10T03:50:31.741008234Z",[7912],{"type":3467,"score":7475},[7914,7916,7918,7920,7922,7923,7925],{"type":3471,"url":7915},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3474,"url":7917},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":3471,"url":7919},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":3474,"url":7921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":3479,"url":5676},{"type":3471,"url":7924},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":3479,"url":7926},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[5682,5683,5684],{"id":268,"slug":7929,"dossier":47,"summary":7930,"aliases":7931,"sourceIds":7935,"published":7936,"modified":7937,"checkedAt":7,"severity":7938,"references":7941,"versionKeys":7956,"packageCount":32,"repositoryCount":784},"ghsa-9h9j-4vrj-gf7g-c50a1cd4","virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection",[7932,7933,7934],"BIT-virtualenv-2026-102938","CVE-2026-102938","PYSEC-2026-4012",[268,7934],"2026-09-17T16:42:47Z","2026-10-06T15:25:56.172772842Z",[7939],{"type":3467,"score":7940},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[7942,7944,7946,7948,7950,7952,7953,7955],{"type":3471,"url":7943},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-9h9j-4vrj-gf7g",{"type":3474,"url":7945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102938",{"type":3471,"url":7947},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3247",{"type":3576,"url":7949},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fa30f995461043acb6cacbf3a890951563ccf7140",{"type":3471,"url":7951},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4012.yaml",{"type":3479,"url":4297},{"type":3471,"url":7954},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.11",{"type":3479,"url":5572},[4301,4302,4303,4304,4305],{"id":269,"slug":7958,"dossier":47,"summary":7959,"aliases":7960,"sourceIds":7963,"published":7964,"modified":7965,"checkedAt":7,"severity":7966,"references":7969,"versionKeys":7992,"packageCount":32,"repositoryCount":784},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[7961,7962],"CVE-2024-47081","PYSEC-2026-1872",[269,7962],"2025-06-09T19:06:08Z","2026-10-19T20:00:04.716114530Z",[7967],{"type":3538,"score":7968},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[7970,7972,7974,7976,7978,7980,7982,7984,7986,7988,7990],{"type":3471,"url":7971},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3474,"url":7973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":3471,"url":7975},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":3576,"url":7977},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":3474,"url":7979},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":3479,"url":7981},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":3471,"url":7983},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.32.4",{"type":3471,"url":7985},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Frequests\u002FPYSEC-2026-1872.yaml",{"type":3479,"url":7987},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":3471,"url":7989},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":3471,"url":7991},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",[7993,7994],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":270,"slug":7996,"dossier":47,"summary":7997,"aliases":7998,"sourceIds":8002,"published":8003,"modified":8004,"checkedAt":7,"severity":8005,"references":8007,"versionKeys":8020,"packageCount":32,"repositoryCount":4731},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[7999,8000,8001],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[270,8001],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[8006],{"type":3538,"score":3652},[8008,8010,8012,8014,8016,8018,8019],{"type":3727,"url":8009},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":3474,"url":8011},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":3576,"url":8013},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":3576,"url":8015},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":3471,"url":8017},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":3479,"url":3480},{"type":3474,"url":6161},[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":271,"slug":8022,"dossier":47,"summary":8023,"aliases":8024,"sourceIds":8027,"published":8028,"modified":8029,"checkedAt":7,"severity":8030,"references":8033,"versionKeys":8045,"packageCount":32,"repositoryCount":32},"ghsa-9j54-fg26-wv3r-7789d387","PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation",[8025,8026],"CVE-2026-102266","PYSEC-2026-4143",[271,8026],"2026-09-29T23:43:19Z","2026-10-01T17:56:01.035847258Z",[8031],{"type":3538,"score":8032},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[8034,8036,8038,8040,8041,8042,8043],{"type":3471,"url":8035},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",{"type":3474,"url":8037},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102266",{"type":3471,"url":8039},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Ff91ed44dd65baaf457f4b3353ed35e98a753934c",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":8044},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9j54-fg26-wv3r",[3912],{"id":272,"slug":8047,"dossier":47,"summary":8048,"aliases":8049,"sourceIds":8053,"published":8054,"modified":8055,"checkedAt":7,"severity":8056,"references":8060,"versionKeys":8071,"packageCount":32,"repositoryCount":32},"ghsa-9jxx-vjrv-h2rq-33761f15","Docling imports plugin entry points before the allow_external_plugins check",[8050,8051,8052],"CVE-2026-105745","PYSEC-2026-4192","PYSEC-2026-4210",[272,8051],"2026-10-05T22:16:57.330Z","2026-10-15T14:55:41.958960612Z",[8057,8059],{"type":3538,"score":8058},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3538,"score":5898},[8061,8063,8065,8067,8069,8070],{"type":3576,"url":8062},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-9jxx-vjrv-h2rq",{"type":3474,"url":8064},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105745",{"type":3576,"url":8066},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4413",{"type":3576,"url":8068},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002F0f443b3786e98688a2da3b7c8f56fe5e46af876c",{"type":3479,"url":4353},{"type":3474,"url":4355},[4357],{"id":273,"slug":8073,"dossier":47,"summary":8074,"aliases":8075,"sourceIds":8078,"published":8079,"modified":8080,"checkedAt":7,"severity":8081,"references":8083,"versionKeys":8098,"packageCount":32,"repositoryCount":103},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[8076,8077],"CVE-2026-28804","PYSEC-2026-3014",[273,8077],"2026-03-02T22:03:45Z","2026-09-10T03:50:38.603469156Z",[8082],{"type":3467,"score":4370},[8084,8086,8088,8090,8092,8093,8095,8096],{"type":3471,"url":8085},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":3474,"url":8087},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":3471,"url":8089},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":3471,"url":8091},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":3479,"url":3514},{"type":3471,"url":8094},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":3479,"url":3518},{"type":3474,"url":8097},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[3524,3525],{"id":274,"slug":8100,"dossier":47,"summary":8101,"aliases":8102,"sourceIds":8105,"published":8106,"modified":8107,"checkedAt":7,"severity":8108,"references":8110,"versionKeys":8124,"packageCount":32,"repositoryCount":103},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[8103,8104],"CVE-2026-27026","PYSEC-2026-3015",[274,8104],"2026-02-18T22:41:24Z","2026-09-10T03:50:34.680998937Z",[8109],{"type":3467,"score":5266},[8111,8113,8115,8117,8119,8120,8121,8122],{"type":3471,"url":8112},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":3474,"url":8114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":3471,"url":8116},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":3471,"url":8118},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":3479,"url":3514},{"type":3471,"url":7875},{"type":3479,"url":3518},{"type":3474,"url":8123},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[3524,3525],{"id":275,"slug":8126,"dossier":47,"summary":8127,"aliases":8128,"sourceIds":8130,"published":8131,"modified":8132,"checkedAt":7,"severity":8133,"references":8135,"versionKeys":8145,"packageCount":32,"repositoryCount":869},"ghsa-9mx8-4j7g-633p-2c309d32","pypdf: Possible infinite loop when removing tree items",[8129],"CVE-2026-113793",[275],"2026-10-21T16:55:10Z","2026-10-21T17:00:06.245541968Z",[8134],{"type":3467,"score":4316},[8136,8138,8140,8142,8143],{"type":3471,"url":8137},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mx8-4j7g-633p",{"type":3471,"url":8139},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4188",{"type":3471,"url":8141},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc9c35b4471c2eb5fe078094f6c816e69d4ed25a0",{"type":3479,"url":3514},{"type":3471,"url":8144},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.20.1",[3524,3525,3526],{"id":276,"slug":8147,"dossier":47,"summary":8148,"aliases":8149,"sourceIds":8152,"published":8153,"modified":8154,"checkedAt":7,"severity":8155,"references":8157,"versionKeys":8174,"packageCount":32,"repositoryCount":832},"ghsa-9r6g-266r-89x4-a39a43aa","NLTK Stanford wrapper classes execute untrusted JAR files without verification",[8150,8151],"CVE-2026-12252","PYSEC-2026-2085",[276,8151],"2026-07-04T02:16:23.603Z","2026-10-15T14:45:11.790616373Z",[8156],{"type":3538,"score":3718},[8158,8160,8162,8164,8166,8167,8168,8170,8172],{"type":3474,"url":8159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12252",{"type":3471,"url":8161},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3743",{"type":3471,"url":8163},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F006f4b83d430147b067b81e2cddd226d6fa405c8",{"type":3471,"url":8165},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F24777f0cb8c33ed2839d16e0f8169a3c312a6806",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":8169},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2085.yaml",{"type":3727,"url":8171},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",{"type":3474,"url":8173},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9r6g-266r-89x4",[3943,3944],{"id":277,"slug":8176,"dossier":47,"summary":8177,"aliases":8178,"sourceIds":8181,"published":8182,"modified":8183,"checkedAt":7,"severity":8184,"references":8186,"versionKeys":8198,"packageCount":32,"repositoryCount":832},"ghsa-9v7f-9g4p-ffgj-61cfc8ce","PyJWT: PyJWKClient follows redirects when fetching JWKS",[8179,8180],"CVE-2026-102267","PYSEC-2026-4144",[277,8180],"2026-09-29T23:15:00Z","2026-10-01T17:56:19.395032954Z",[8185],{"type":3538,"score":8032},[8187,8189,8191,8193,8194,8195,8196],{"type":3471,"url":8188},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",{"type":3474,"url":8190},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102267",{"type":3471,"url":8192},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":8197},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9v7f-9g4p-ffgj",[3911,3912,3913],{"id":278,"slug":8200,"dossier":47,"summary":8201,"aliases":8202,"sourceIds":8206,"published":8207,"modified":8208,"checkedAt":7,"severity":8209,"references":8214,"versionKeys":8225,"packageCount":32,"repositoryCount":744},"ghsa-9v9v-9qvf-h2hj-0344c250","Pillow: Heap over-read in WMF\u002FEMF rendering via 16-bit dimension truncation (Windows builds)",[8203,8204,8205],"BIT-pillow-2026-96644","CVE-2026-96644","PYSEC-2026-4343",[278,8205],"2026-10-21T21:20:32.943Z","2026-10-29T10:55:35.129178084Z",[8210,8212],{"type":3467,"score":8211},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":8213},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[8215,8217,8219,8221,8223,8224],{"type":3474,"url":8216},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9v9v-9qvf-h2hj",{"type":3474,"url":8218},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96644",{"type":3938,"url":8220},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10120",{"type":3576,"url":8222},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4cf46bee338304c5c8968fd7f132ba0d40c428b7",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":279,"slug":8227,"dossier":47,"summary":8228,"aliases":8229,"sourceIds":8231,"published":8232,"modified":8233,"checkedAt":7,"severity":8234,"references":8236,"versionKeys":8245,"packageCount":32,"repositoryCount":822},"ghsa-9vhv-jxww-xfm5-e19a009a","filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",[8230],"CVE-2026-112913",[279],"2026-10-23T22:28:19Z","2026-10-23T22:45:03.439584635Z",[8235],{"type":3538,"score":4146},[8237,8239,8241,8243,8244],{"type":3471,"url":8238},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-9vhv-jxww-xfm5",{"type":3471,"url":8240},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F834",{"type":3471,"url":8242},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d",{"type":3479,"url":5459},{"type":3471,"url":5461},[5463,5464,5465,5466],{"id":280,"slug":8247,"dossier":47,"summary":8248,"aliases":8249,"sourceIds":8252,"published":8253,"modified":8254,"checkedAt":7,"severity":8255,"references":8258,"versionKeys":8275,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[8250,8251],"CVE-2024-35195","PYSEC-2026-1873",[280,8251],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[8256],{"type":3538,"score":8257},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[8259,8261,8263,8265,8267,8268,8270,8272,8273],{"type":3471,"url":8260},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":3474,"url":8262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":3471,"url":8264},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":3576,"url":8266},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":3479,"url":7981},{"type":3471,"url":8269},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":3471,"url":8271},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":3479,"url":7987},{"type":3474,"url":8274},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[7993],{"id":281,"slug":8277,"dossier":47,"summary":8278,"aliases":8279,"sourceIds":8282,"published":8283,"modified":8284,"checkedAt":7,"severity":8285,"references":8289,"versionKeys":8295,"packageCount":32,"repositoryCount":754},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[8280,8281],"CVE-2026-54280","PYSEC-2026-2113",[281,8281],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[8286,8288],{"type":3467,"score":8287},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3538,"score":3652},[8290,8292,8294],{"type":3474,"url":8291},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":3576,"url":8293},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":3479,"url":3795},[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":282,"slug":8297,"dossier":47,"summary":8298,"aliases":8299,"sourceIds":8301,"published":8302,"modified":8303,"checkedAt":7,"severity":8304,"references":8306,"versionKeys":8315,"packageCount":32,"repositoryCount":3883},"ghsa-9xw5-w5jj-pvcg-5b93a500","AIOHTTP: File descriptor exhaustion in multipart requests",[8300],"CVE-2026-111066",[282],"2026-10-20T19:52:09Z","2026-10-20T20:00:04.692319554Z",[8305],{"type":3467,"score":3468},[8307,8309,8311,8313,8314],{"type":3471,"url":8308},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9xw5-w5jj-pvcg",{"type":3474,"url":8310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111066",{"type":3471,"url":8312},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2d94633b7f1b4c1ba07d647b629a8440652b2d09",{"type":3479,"url":3795},{"type":3471,"url":3879},[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],{"id":283,"slug":8317,"dossier":47,"summary":8318,"aliases":8319,"sourceIds":8321,"published":8322,"modified":8323,"checkedAt":7,"severity":8324,"references":8327,"versionKeys":8337,"packageCount":32,"repositoryCount":754},"ghsa-c2m8-h5v5-343r-dd3a7510","Tornado: StaticFileHandler follows symlinks outside static root (path traversal)",[8320],"CVE-2026-103263",[283],"2026-09-30T23:48:55Z","2026-10-02T03:56:10.964622908Z",[8325],{"type":3467,"score":8326},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8328,8330,8331,8333,8335,8336],{"type":3471,"url":8329},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c2m8-h5v5-343r",{"type":3471,"url":4493},{"type":3471,"url":8332},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F437ab5f76565403b3403438d2e555d11f8128d32",{"type":3471,"url":8334},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Ff9f50b8bab265a2abf9f2415a3d2da6264a5450b",{"type":3479,"url":4499},{"type":3471,"url":4501},[4503,4504,4505,4506,4507,4508],{"id":284,"slug":8339,"dossier":47,"summary":8340,"aliases":8341,"sourceIds":8344,"published":8345,"modified":8346,"checkedAt":7,"severity":8347,"references":8351,"versionKeys":8366,"packageCount":32,"repositoryCount":32},"ghsa-c39v-8hrw-h448-85b2a8cc","Chainlit contains a session hijacking vulnerability",[8342,8343],"CVE-2026-56104","PYSEC-2026-4028",[284,8343],"2026-06-22T18:34:16Z","2026-10-01T17:56:10.751822436Z",[8348,8349],{"type":3538,"score":8032},{"type":3467,"score":8350},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8352,8354,8356,8358,8359,8361,8363,8364],{"type":3474,"url":8353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-56104",{"type":3471,"url":8355},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2857",{"type":3471,"url":8357},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F5effb664f1e0af4a4f0a42fe63ea979676039a7f",{"type":3479,"url":3828},{"type":3471,"url":8360},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.10.1",{"type":3471,"url":8362},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-session-hijacking-via-websocket-session-restoration",{"type":3479,"url":3836},{"type":3474,"url":8365},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c39v-8hrw-h448",[3840],{"id":285,"slug":8368,"dossier":47,"summary":8369,"aliases":8370,"sourceIds":8373,"published":8374,"modified":8375,"checkedAt":7,"severity":8376,"references":8380,"versionKeys":8391,"packageCount":32,"repositoryCount":765},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[8371,8372],"CVE-2026-34525","PYSEC-2026-2103",[285,8372],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[8377,8379],{"type":3467,"score":8378},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":3538,"score":4011},[8381,8383,8385,8387,8389,8390],{"type":3576,"url":8382},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":3474,"url":8384},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":3576,"url":8386},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":3576,"url":8388},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":286,"slug":8393,"dossier":47,"summary":8394,"aliases":8395,"sourceIds":8399,"published":8400,"modified":8401,"checkedAt":7,"severity":8402,"references":8407,"versionKeys":8423,"packageCount":32,"repositoryCount":103},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[8396,8397,8398],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[286],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[8403,8405],{"type":3538,"score":8404},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":3467,"score":8406},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[8408,8410,8412,8414,8415,8417,8419,8421],{"type":3474,"url":8409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":3471,"url":8411},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":3471,"url":8413},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":3479,"url":4161},{"type":3471,"url":8416},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":3471,"url":8418},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":3471,"url":8420},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":3471,"url":8422},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[4173,4174],{"id":287,"slug":8425,"dossier":47,"summary":8426,"aliases":8427,"sourceIds":8430,"published":8431,"modified":8432,"checkedAt":7,"severity":8433,"references":8436,"versionKeys":8445,"packageCount":32,"repositoryCount":744},"ghsa-c6hw-5grf-ff96-1e7aec72","Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels",[8428,8429],"BIT-pillow-2026-112404","CVE-2026-112404",[287],"2026-10-20T20:42:00Z","2026-10-26T08:55:55.669563065Z",[8434],{"type":3467,"score":8435},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8437,8439,8441,8443,8444],{"type":3471,"url":8438},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-c6hw-5grf-ff96",{"type":3474,"url":8440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112404",{"type":3471,"url":8442},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":288,"slug":8447,"dossier":47,"summary":8448,"aliases":8449,"sourceIds":8452,"published":8453,"modified":8454,"checkedAt":7,"severity":8455,"references":8457,"versionKeys":8466,"packageCount":32,"repositoryCount":784},"ghsa-c947-3pg5-gm8q-45da7664","virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote",[8450,8451],"BIT-virtualenv-2026-113732","CVE-2026-113732",[288],"2026-10-21T16:39:58Z","2026-10-29T10:55:30.348006947Z",[8456],{"type":3538,"score":5898},[8458,8460,8462,8464,8465],{"type":3471,"url":8459},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c947-3pg5-gm8q",{"type":3474,"url":8461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113732",{"type":3471,"url":8463},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F3bddeaf8d02c3ee7f576503efb082f8f494cfcab",{"type":3479,"url":4297},{"type":3471,"url":7654},[4301,4302,4303,4304,4305],{"id":289,"slug":8468,"dossier":47,"summary":8469,"aliases":8470,"sourceIds":8473,"published":8474,"modified":8475,"checkedAt":7,"severity":8476,"references":8478,"versionKeys":8489,"packageCount":32,"repositoryCount":784},"ghsa-c978-59m8-c77v-420aeea3","virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax",[8471,8472],"BIT-virtualenv-2026-113722","CVE-2026-113722",[289],"2026-10-21T21:30:12Z","2026-10-29T10:55:46.719521464Z",[8477],{"type":3538,"score":5898},[8479,8481,8483,8485,8487,8488],{"type":3471,"url":8480},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-c978-59m8-c77v",{"type":3474,"url":8482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113722",{"type":3471,"url":8484},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3417",{"type":3471,"url":8486},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F2519941bed33ee0d3ac99277f67913e439e476a9",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":290,"slug":8491,"dossier":47,"summary":8492,"aliases":8493,"sourceIds":8496,"published":8497,"modified":8498,"checkedAt":7,"severity":8499,"references":8501,"versionKeys":8513,"packageCount":32,"repositoryCount":8514},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[8494,8495],"CVE-2025-67725","PYSEC-2025-266",[290,8495],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[8500],{"type":3538,"score":3652},[8502,8504,8506,8508,8510,8511],{"type":3474,"url":8503},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":3474,"url":8505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":3576,"url":8507},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":3471,"url":8509},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":3479,"url":4499},{"type":3474,"url":8512},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[4503,4504,4505],9,{"id":291,"slug":8516,"dossier":47,"summary":8517,"aliases":8518,"sourceIds":8522,"published":8523,"modified":8524,"checkedAt":7,"severity":8525,"references":8529,"versionKeys":8567,"packageCount":32,"repositoryCount":5254},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[8519,8520,8521],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[291,8521],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[8526,8528],{"type":3467,"score":8527},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":3652},[8530,8532,8534,8536,8538,8540,8541,8543,8545,8547,8548,8550,8552,8554,8555,8557,8559,8561,8563,8565],{"type":3471,"url":8531},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":3474,"url":8533},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":3471,"url":8535},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":3471,"url":8537},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":3471,"url":8539},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":3479,"url":3480},{"type":3471,"url":8542},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":3471,"url":8544},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":3471,"url":8546},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":3474,"url":4255},{"type":3474,"url":8549},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":3474,"url":8551},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":3474,"url":8553},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":3474,"url":4775},{"type":3474,"url":8556},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":3474,"url":8558},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":3474,"url":8560},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":3474,"url":8562},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":3474,"url":8564},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":3474,"url":8566},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[3484,3485,3486,3487,3488,3489,3490],{"id":292,"slug":8569,"dossier":47,"summary":8570,"aliases":8571,"sourceIds":8573,"published":8574,"modified":8575,"checkedAt":7,"severity":8576,"references":8579,"versionKeys":8589,"packageCount":32,"repositoryCount":103},"ghsa-cg8m-r9f2-5wm2-26f00a73","Black: GitHub Action installs unvalidated required-version from pyproject.toml",[8572],"CVE-2026-114134",[292],"2026-10-22T16:18:57Z","2026-10-22T16:30:30.132713769Z",[8577],{"type":3467,"score":8578},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8580,8582,8584,8586,8587],{"type":3471,"url":8581},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-cg8m-r9f2-5wm2",{"type":3471,"url":8583},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5510",{"type":3471,"url":8585},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Fac1f71563aeccf73cf13ece00f231d9d6c66a514",{"type":3479,"url":4265},{"type":3471,"url":8588},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.10.1",[4273,4274],{"id":293,"slug":8591,"dossier":47,"summary":8592,"aliases":8593,"sourceIds":8597,"published":8598,"modified":8599,"checkedAt":7,"severity":8600,"references":8602,"versionKeys":8613,"packageCount":32,"repositoryCount":32},"ghsa-cgc7-9qp3-86m3-24202aa4","Docling: Unbounded table rowspan\u002Fcolspan in HTML, JATS, ODS and BoxNote backends causes CPU\u002Fmemory exhaustion",[8594,8595,8596],"CVE-2026-105749","PYSEC-2026-4195","PYSEC-2026-4211",[293,8595],"2026-10-05T22:16:57.943Z","2026-10-15T14:55:59.208989812Z",[8601],{"type":3538,"score":3604},[8603,8605,8607,8609,8611,8612],{"type":3576,"url":8604},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-cgc7-9qp3-86m3",{"type":3474,"url":8606},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105749",{"type":3576,"url":8608},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4414",{"type":3576,"url":8610},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002Fc5b4429cc6500a344c13edeb22e67610c2159b09",{"type":3479,"url":4353},{"type":3474,"url":4355},[4357],{"id":294,"slug":8615,"dossier":47,"summary":8616,"aliases":8617,"sourceIds":8619,"published":8620,"modified":8621,"checkedAt":7,"severity":8622,"references":8624,"versionKeys":8635,"packageCount":32,"repositoryCount":869},"ghsa-cgf9-327m-v77c-ec8a6a91","pypdf: Possible large memory usage when parsing content streams",[8618],"CVE-2026-113791",[294],"2026-10-22T16:49:22Z","2026-10-22T17:00:04.215115256Z",[8623],{"type":3467,"score":4316},[8625,8627,8629,8631,8633,8634],{"type":3471,"url":8626},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cgf9-327m-v77c",{"type":3474,"url":8628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113791",{"type":3471,"url":8630},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4218",{"type":3471,"url":8632},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F18bd2981a74479483a0b9507602c58a63d6c9b12",{"type":3479,"url":3514},{"type":3471,"url":6732},[3524,3525,3526],{"id":295,"slug":8637,"dossier":47,"summary":8638,"aliases":8639,"sourceIds":8641,"published":8642,"modified":8643,"checkedAt":7,"severity":8644,"references":8646,"versionKeys":8657,"packageCount":32,"repositoryCount":869},"ghsa-cggf-277g-3q54-8f03fc41","pypdf has possible large memory usage when parsing page tree",[8640],"CVE-2026-119204",[295],"2026-10-30T23:13:01Z","2026-10-30T23:30:04.096691081Z",[8645],{"type":3467,"score":4521},[8647,8649,8651,8653,8655,8656],{"type":3471,"url":8648},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cggf-277g-3q54",{"type":3474,"url":8650},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119204",{"type":3471,"url":8652},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4290",{"type":3471,"url":8654},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fea4ac663133f1b3de1d7a8f2e6fa239802fde79e",{"type":3479,"url":3514},{"type":3471,"url":5524},[3524,3525,3526],{"id":296,"slug":8659,"dossier":47,"summary":8660,"aliases":8661,"sourceIds":8664,"published":8665,"modified":8666,"checkedAt":7,"severity":8667,"references":8669,"versionKeys":8680,"packageCount":32,"repositoryCount":32},"ghsa-cgwc-pv48-fhj5-6739bcab","python-engineio has unbound thread allocation that can cause denial of service",[8662,8663],"CVE-2026-48802","PYSEC-2026-3032",[296,8663],"2026-06-26T20:51:37Z","2026-07-13T16:42:35.099677221Z",[8668],{"type":3538,"score":3652},[8670,8672,8674,8676,8678],{"type":3471,"url":8671},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3479,"url":8673},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio",{"type":3479,"url":8675},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-engineio",{"type":3474,"url":8677},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":3474,"url":8679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48802",[8681],"pypi:python-engineio@4.12.3",{"id":297,"slug":8683,"dossier":47,"summary":8684,"aliases":8685,"sourceIds":8687,"published":8688,"modified":8689,"checkedAt":7,"severity":8690,"references":8692,"versionKeys":8706,"packageCount":32,"repositoryCount":754},"ghsa-chx6-46f5-w4vp-dd54bdb8","tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM",[8686],"CVE-2026-103262",[297],"2026-09-30T23:49:13Z","2026-10-02T03:56:11.819291984Z",[8691],{"type":3538,"score":3652},[8693,8695,8696,8698,8700,8702,8704,8705],{"type":3471,"url":8694},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-chx6-46f5-w4vp",{"type":3471,"url":4493},{"type":3471,"url":8697},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F15f056080d8e456f92cca8ad0c33e5a5480414ac",{"type":3471,"url":8699},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6564e0a0922c16f239d3a18adccd04736e380c89",{"type":3471,"url":8701},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Faa2eb0d989716ac00fe8d7a9919b81c1eccd6ec4",{"type":3471,"url":8703},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fe412435febba4569c552c5c9054f1bf92bd171a9",{"type":3479,"url":4499},{"type":3471,"url":4501},[4503,4504,4505,4506,4507,4508],{"id":298,"slug":8708,"dossier":47,"summary":8709,"aliases":8710,"sourceIds":8713,"published":8714,"modified":8715,"checkedAt":7,"severity":8716,"references":8718,"versionKeys":8730,"packageCount":32,"repositoryCount":103},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[8711,8712],"CVE-2026-48155","PYSEC-2026-3016",[298,8712],"2026-06-12T18:29:15Z","2026-09-10T03:51:08.468487559Z",[8717],{"type":3467,"score":3505},[8719,8721,8723,8725,8726,8727,8728],{"type":3471,"url":8720},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":3474,"url":8722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":3471,"url":8724},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":3479,"url":3514},{"type":3471,"url":3553},{"type":3479,"url":3518},{"type":3474,"url":8729},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[3524,3525],{"id":299,"slug":8732,"dossier":47,"summary":8733,"aliases":8734,"sourceIds":8737,"published":8738,"modified":8739,"checkedAt":7,"severity":8740,"references":8743,"versionKeys":8760,"packageCount":32,"repositoryCount":32},"ghsa-cjqg-rq2h-2fvj-04722096","Docling: Unsafe Zip Extraction in EasyOCR Model Download",[8735,8736],"CVE-2026-44017","PYSEC-2026-2143",[299,8736],"2026-06-03T20:02:42Z","2026-08-28T18:45:06.860507459Z",[8741],{"type":3538,"score":8742},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[8744,8746,8748,8749,8751,8753,8754,8756,8758],{"type":3576,"url":8745},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-cjqg-rq2h-2fvj",{"type":3474,"url":8747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44017",{"type":3471,"url":7391},{"type":3471,"url":8750},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44017",{"type":3938,"url":8752},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492448",{"type":3479,"url":4353},{"type":3474,"url":8755},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.91.0",{"type":3471,"url":8757},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2143.yaml",{"type":3471,"url":8759},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44017.json",[4357],{"id":300,"slug":8762,"dossier":47,"summary":8763,"aliases":8764,"sourceIds":8768,"published":8769,"modified":8770,"checkedAt":7,"severity":8771,"references":8774,"versionKeys":8783,"packageCount":32,"repositoryCount":803},"ghsa-cp9v-662q-vvx9-b0a60d48","Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0",[8765,8766,8767],"BIT-pillow-2026-112405","CVE-2026-112405","PYSEC-2026-4333",[300,8767],"2026-10-19T22:17:08.027Z","2026-10-28T11:10:36.014536437Z",[8772,8773],{"type":3467,"score":3851},{"type":3538,"score":3652},[8775,8777,8779,8781,8782],{"type":3727,"url":8776},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cp9v-662q-vvx9",{"type":3474,"url":8778},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112405",{"type":3576,"url":8780},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb6ee66e8b2c2c0932bdf65f963268d9f2927ef86",{"type":3479,"url":3480},{"type":3474,"url":3482},[3489,3490,3491,3492,3493],{"id":301,"slug":8785,"dossier":47,"summary":8786,"aliases":8787,"sourceIds":8790,"published":8791,"modified":8792,"checkedAt":7,"severity":8793,"references":8796,"versionKeys":8813,"packageCount":32,"repositoryCount":103},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[8788,8789],"CVE-2025-27516","PYSEC-2026-1471",[301,8789],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[8794],{"type":3467,"score":8795},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8797,8799,8801,8803,8805,8807,8809,8811],{"type":3471,"url":8798},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":3474,"url":8800},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":3576,"url":8802},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":3479,"url":8804},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":3471,"url":8806},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":3471,"url":8808},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":3479,"url":8810},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":3474,"url":8812},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[8814,8815],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":302,"slug":8817,"dossier":47,"summary":8818,"aliases":8819,"sourceIds":8822,"published":8823,"modified":8824,"checkedAt":7,"severity":8825,"references":8827,"versionKeys":8842,"packageCount":32,"repositoryCount":42},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[8820,8821],"CVE-2026-69244","PYSEC-2026-3545",[302,8821],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[8826],{"type":3467,"score":4521},[8828,8830,8832,8834,8835,8837,8838,8840],{"type":3471,"url":8829},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3471,"url":8831},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":3471,"url":8833},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":3479,"url":3795},{"type":3471,"url":8836},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":3479,"url":5328},{"type":3474,"url":8839},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":3474,"url":8841},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881],{"id":303,"slug":8844,"dossier":47,"summary":8845,"aliases":8846,"sourceIds":8849,"published":8850,"modified":8851,"checkedAt":7,"severity":8852,"references":8854,"versionKeys":8863,"packageCount":32,"repositoryCount":32},"ghsa-cr42-rg2m-mq4q-72336d81","Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks",[8847,8848],"CVE-2026-31247","PYSEC-2026-2455",[303,8848],"2026-05-11T18:31:43Z","2026-07-13T16:43:07.440539926Z",[8853],{"type":3538,"score":3652},[8855,8857,8858,8860,8861],{"type":3474,"url":8856},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31247",{"type":3479,"url":4353},{"type":3471,"url":8859},"https:\u002F\u002Fwww.notion.so\u002FCVE-2026-31247-35d1e1393188818fa654c116c6a470bb",{"type":3479,"url":7898},{"type":3474,"url":8862},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cr42-rg2m-mq4q",[4357],{"id":304,"slug":8865,"dossier":47,"summary":8866,"aliases":8867,"sourceIds":8870,"published":8871,"modified":8872,"checkedAt":7,"severity":8873,"references":8880,"versionKeys":8893,"packageCount":32,"repositoryCount":32},"ghsa-cv22-g7mw-8v73-34774163","NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure",[8868,8869],"CVE-2026-71514","PYSEC-2026-3790",[304,8869],"2026-08-22T14:16:33.560Z","2026-09-10T11:15:08.990306396Z",[8874,8876,8878],{"type":3538,"score":8875},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":3467,"score":8877},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":8879},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[8881,8883,8885,8886,8888,8889,8891],{"type":3474,"url":8882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71514",{"type":3576,"url":8884},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F10d34b3f4fe3fec74b76527a409eb0acbac2e8ab",{"type":3479,"url":3932},{"type":3576,"url":8887},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002Fv3.10.2\u002Fnltk\u002Fcorpus\u002Freader\u002Fcrubadan.py#L90-L98",{"type":3471,"url":4410},{"type":3474,"url":8890},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-through-path-traversal-via-crubadancorpusreader-pathsec-bypass",{"type":3474,"url":8892},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cv22-g7mw-8v73",[4416],{"id":305,"slug":8895,"dossier":47,"summary":8896,"aliases":8897,"sourceIds":8900,"published":8901,"modified":8902,"checkedAt":7,"severity":8903,"references":8905,"versionKeys":8916,"packageCount":32,"repositoryCount":784},"ghsa-cw65-gx24-rc82-d2d30a51","virtualenv: Builtin creation follows linked environment directories",[8898,8899],"BIT-virtualenv-2026-113716","CVE-2026-113716",[305],"2026-10-21T21:35:56Z","2026-10-29T10:55:59.838026441Z",[8904],{"type":3538,"score":4666},[8906,8908,8910,8912,8914,8915],{"type":3471,"url":8907},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cw65-gx24-rc82",{"type":3474,"url":8909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113716",{"type":3471,"url":8911},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3429",{"type":3471,"url":8913},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F554d9f9d4f7758f5cf53f993031e29787f1f74c5",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":306,"slug":8918,"dossier":47,"summary":8919,"aliases":8920,"sourceIds":8923,"published":8924,"modified":8925,"checkedAt":7,"severity":8926,"references":8931,"versionKeys":8944,"packageCount":32,"repositoryCount":822},"ghsa-cw6x-m8jw-qmrh-dd458a88","NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input",[8921,8922],"CVE-2026-81724","PYSEC-2026-3739",[306,8922],"2026-08-27T17:21:03.100Z","2026-09-10T03:51:15.361788366Z",[8927,8928,8929],{"type":3538,"score":3752},{"type":3467,"score":4370},{"type":3467,"score":8930},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8932,8934,8936,8938,8939,8940,8942],{"type":3727,"url":8933},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-cw6x-m8jw-qmrh",{"type":3474,"url":8935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81724",{"type":3471,"url":8937},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43c7b78cc8ea37e5cd3a129e27e32c415ea21cf1",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":8941},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3739.yaml",{"type":3474,"url":8943},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-denial-of-service-via-uncontrolled-recursion",[4416,3943,3944],{"id":307,"slug":8946,"dossier":47,"summary":8947,"aliases":8948,"sourceIds":8950,"published":8951,"modified":8952,"checkedAt":7,"severity":8953,"references":8955,"versionKeys":8964,"packageCount":32,"repositoryCount":822},"ghsa-cwqr-hh33-gh44-4ee53d3a","filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout",[8949],"CVE-2026-112915",[307],"2026-10-28T21:08:49Z","2026-10-28T21:15:04.923553251Z",[8954],{"type":3538,"score":4150},[8956,8958,8960,8961,8962,8963],{"type":3471,"url":8957},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-cwqr-hh33-gh44",{"type":3474,"url":8959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112915",{"type":3471,"url":8240},{"type":3471,"url":8242},{"type":3479,"url":5459},{"type":3471,"url":5461},[5463,5464,5465,5466],{"id":308,"slug":8966,"dossier":47,"summary":8967,"aliases":8968,"sourceIds":8971,"published":8972,"modified":8973,"checkedAt":7,"severity":8974,"references":8976,"versionKeys":8985,"packageCount":32,"repositoryCount":784},"ghsa-cx28-75q4-x26q-bb017595","virtualenv: Pip seeding with download omits wheel digest verification",[8969,8970],"BIT-virtualenv-2026-113717","CVE-2026-113717",[308],"2026-10-23T22:26:04Z","2026-10-29T10:55:56.839709622Z",[8975],{"type":3467,"score":4848},[8977,8979,8981,8982,8983,8984],{"type":3471,"url":8978},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-cx28-75q4-x26q",{"type":3474,"url":8980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113717",{"type":3471,"url":4855},{"type":3471,"url":4857},{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":309,"slug":8987,"dossier":47,"summary":8988,"aliases":8989,"sourceIds":8992,"published":8993,"modified":8994,"checkedAt":7,"severity":8995,"references":8998,"versionKeys":9009,"packageCount":32,"repositoryCount":765},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[8990,8991],"CVE-2026-49854","PYSEC-2026-3388",[309,8991],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[8996],{"type":3538,"score":8997},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[8999,9001,9002,9004,9005,9007],{"type":3471,"url":9000},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3479,"url":4499},{"type":3471,"url":9003},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":3479,"url":4574},{"type":3474,"url":9006},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":3474,"url":9008},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[4503,4504,4505,4506,4507],{"id":310,"slug":9011,"dossier":47,"summary":9012,"aliases":9013,"sourceIds":9017,"published":9018,"modified":9019,"checkedAt":7,"severity":9020,"references":9024,"versionKeys":9040,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[9014,9015,9016],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[310,9016],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[9021,9022],{"type":3538,"score":3674},{"type":3467,"score":9023},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9025,9027,9029,9031,9032,9034,9036,9038],{"type":3474,"url":9026},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":3471,"url":9028},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":3471,"url":9030},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":3479,"url":5853},{"type":3471,"url":9033},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":3471,"url":9035},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":3479,"url":9037},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":3474,"url":9039},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[5859],{"id":311,"slug":9042,"dossier":47,"summary":9043,"aliases":9044,"sourceIds":9047,"published":9048,"modified":9049,"checkedAt":7,"severity":9050,"references":9052,"versionKeys":9061,"packageCount":32,"repositoryCount":744},"ghsa-f2g6-542v-9j58-1b810101","Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle",[9045,9046],"BIT-pillow-2026-112406","CVE-2026-112406",[311],"2026-10-21T21:21:07Z","2026-10-26T08:56:13.538142549Z",[9051],{"type":3467,"score":3851},[9053,9055,9057,9059,9060],{"type":3471,"url":9054},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-f2g6-542v-9j58",{"type":3474,"url":9056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112406",{"type":3471,"url":9058},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb3ebf20c694f2f12537a629c30229a1d5a53f777",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":312,"slug":9063,"dossier":47,"summary":9064,"aliases":9065,"sourceIds":9068,"published":9069,"modified":9070,"checkedAt":7,"severity":9071,"references":9073,"versionKeys":9088,"packageCount":32,"repositoryCount":103},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[9066,9067],"CVE-2026-28351","PYSEC-2026-3017",[312,9067],"2026-02-28T02:46:10Z","2026-09-10T03:50:34.825129703Z",[9072],{"type":3467,"score":4370},[9074,9076,9078,9080,9082,9083,9085,9086],{"type":3471,"url":9075},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":3474,"url":9077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":3471,"url":9079},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":3471,"url":9081},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":3479,"url":3514},{"type":3471,"url":9084},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":3479,"url":3518},{"type":3474,"url":9087},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[3524,3525],{"id":313,"slug":9090,"dossier":47,"summary":9091,"aliases":9092,"sourceIds":9096,"published":9097,"modified":9098,"checkedAt":7,"severity":9099,"references":9103,"versionKeys":9121,"packageCount":32,"repositoryCount":103},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[9093,9094,9095],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[313],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[9100,9101],{"type":3538,"score":5208},{"type":3467,"score":9102},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[9104,9106,9108,9110,9112,9114,9115,9117,9119],{"type":3474,"url":9105},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":3471,"url":9107},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":3471,"url":9109},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":3471,"url":9111},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":3471,"url":9113},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":3479,"url":4161},{"type":3471,"url":9116},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":3471,"url":9118},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":3471,"url":9120},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[4173,4174],{"id":314,"slug":9123,"dossier":47,"summary":9124,"aliases":9125,"sourceIds":9127,"published":9128,"modified":9129,"checkedAt":7,"severity":9130,"references":9132,"versionKeys":9141,"packageCount":32,"repositoryCount":869},"ghsa-f54x-cmq8-qg57-7f4861f9","pypdf: Possible large memory usage when parsing arrays and dictionaries",[9126],"CVE-2026-113790",[314],"2026-10-22T16:49:40Z","2026-10-22T17:00:04.224392742Z",[9131],{"type":3467,"score":4316},[9133,9135,9137,9138,9139,9140],{"type":3471,"url":9134},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f54x-cmq8-qg57",{"type":3474,"url":9136},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113790",{"type":3471,"url":8630},{"type":3471,"url":8632},{"type":3479,"url":3514},{"type":3471,"url":6732},[3524,3525,3526],{"id":315,"slug":9143,"dossier":47,"summary":9144,"aliases":9145,"sourceIds":9148,"published":9149,"modified":9150,"checkedAt":7,"severity":9151,"references":9158,"versionKeys":9173,"packageCount":32,"repositoryCount":822},"ghsa-f794-5jv7-7672-f614e21f","NLTK: Downloader.download follows hardlinks and overwrites outside-root files",[9146,9147],"CVE-2026-81727","PYSEC-2026-3741",[315,9147],"2026-08-27T17:21:03.533Z","2026-09-10T03:51:15.298800760Z",[9152,9154,9156],{"type":3538,"score":9153},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":3467,"score":9155},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3467,"score":9157},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[9159,9161,9163,9165,9167,9168,9169,9171],{"type":3727,"url":9160},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f794-5jv7-7672",{"type":3474,"url":9162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81727",{"type":3471,"url":9164},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3797",{"type":3471,"url":9166},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F9e6d5f05902b9aaa1221a0a565448d17a9c9b3e8",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":9170},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3741.yaml",{"type":3474,"url":9172},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-hardlink-file-overwrite-via-downloader",[4416,3943,3944],{"id":316,"slug":9175,"dossier":47,"summary":9176,"aliases":9177,"sourceIds":9180,"published":9181,"modified":9182,"checkedAt":7,"severity":9183,"references":9187,"versionKeys":9202,"packageCount":32,"repositoryCount":32},"ghsa-f833-7jw8-xwrv-24f4d846","NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)",[9178,9179],"CVE-2026-62384","PYSEC-2026-3789",[316,9179],"2026-08-22T15:16:18.700Z","2026-09-08T16:45:03.613881599Z",[9184,9185,9186],{"type":3538,"score":5482},{"type":3467,"score":6805},{"type":3467,"score":6807},[9188,9190,9192,9194,9196,9197,9198,9200],{"type":3727,"url":9189},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-f833-7jw8-xwrv",{"type":3474,"url":9191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62384",{"type":3471,"url":9193},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3726",{"type":3471,"url":9195},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F736d3212a47de2005b85b785dde6720556d3925d",{"type":3479,"url":3932},{"type":3471,"url":4473},{"type":3471,"url":9199},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3789.yaml",{"type":3474,"url":9201},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-framenetcorpusreader-symlink-sandbox-bypass-before",[4416],{"id":317,"slug":9204,"dossier":47,"summary":9205,"aliases":9206,"sourceIds":9209,"published":9210,"modified":9211,"checkedAt":7,"severity":9212,"references":9216,"versionKeys":9227,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[9207,9208],"CVE-2024-47874","PYSEC-2026-1943",[317,9208],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[9213,9215],{"type":3538,"score":9214},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":3467,"score":3851},[9217,9219,9221,9223,9224,9225],{"type":3471,"url":9218},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":3474,"url":9220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":3576,"url":9222},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":3479,"url":3761},{"type":3479,"url":3767},{"type":3474,"url":9226},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[3771],{"id":318,"slug":9229,"dossier":47,"summary":9230,"aliases":9231,"sourceIds":9233,"published":9234,"modified":9235,"checkedAt":7,"severity":9236,"references":9239,"versionKeys":9248,"packageCount":32,"repositoryCount":3883},"ghsa-f9xw-jh8m-3mwq-43205cf6","AIOHTTP: Absolute-form request targets can spoof Request.scheme",[9232],"CVE-2026-111748",[318],"2026-10-20T20:01:40Z","2026-10-20T20:15:05.218624757Z",[9237],{"type":3467,"score":9238},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9240,9242,9244,9246,9247],{"type":3471,"url":9241},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-f9xw-jh8m-3mwq",{"type":3474,"url":9243},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111748",{"type":3471,"url":9245},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6d4e7b01f9b951aa084a75d7356e907d4ee80411",{"type":3479,"url":3795},{"type":3471,"url":3879},[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],{"id":319,"slug":9250,"dossier":47,"summary":9251,"aliases":9252,"sourceIds":9255,"published":9256,"modified":9257,"checkedAt":7,"severity":9258,"references":9261,"versionKeys":9272,"packageCount":32,"repositoryCount":784},"ghsa-fc2g-4w5p-6whm-f875e0d2","virtualenv: Seeded files retain permissions from an older cache",[9253,9254],"BIT-virtualenv-2026-113720","CVE-2026-113720",[319],"2026-10-23T22:23:11Z","2026-10-29T10:55:56.743073990Z",[9259],{"type":3467,"score":9260},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[9262,9264,9266,9268,9270,9271],{"type":3471,"url":9263},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-fc2g-4w5p-6whm",{"type":3474,"url":9265},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113720",{"type":3471,"url":9267},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3425",{"type":3471,"url":9269},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F35f0b33562790176dd186d0a3c517af3acc7a0e1",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":320,"slug":9274,"dossier":47,"summary":9275,"aliases":9276,"sourceIds":9279,"published":9280,"modified":9281,"checkedAt":7,"severity":9282,"references":9284,"versionKeys":9299,"packageCount":32,"repositoryCount":869},"ghsa-fc8x-2rww-xw9m-a14a13c8","pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace",[9277,9278],"CVE-2026-82398","PYSEC-2026-3912",[320,9278],"2026-09-02T14:38:12Z","2026-09-10T12:25:53.327187326Z",[9283],{"type":3467,"score":4370},[9285,9287,9289,9291,9293,9294,9296,9297],{"type":3471,"url":9286},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",{"type":3474,"url":9288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82398",{"type":3471,"url":9290},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3947",{"type":3471,"url":9292},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F4959848e057e37c218dccad7465259210923faaa",{"type":3479,"url":3514},{"type":3471,"url":9295},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.15.0",{"type":3479,"url":3518},{"type":3474,"url":9298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fc8x-2rww-xw9m",[3524,3525,3526],{"id":321,"slug":9301,"dossier":47,"summary":9302,"aliases":9303,"sourceIds":9306,"published":9307,"modified":9308,"checkedAt":7,"severity":9309,"references":9311,"versionKeys":9319,"packageCount":32,"repositoryCount":744},"ghsa-fc9g-5qg7-mf45-6ce92387","Pillow: Quadratic GIF comment copying during save",[9304,9305],"BIT-pillow-2026-112891","CVE-2026-112891",[321],"2026-10-21T20:38:43Z","2026-10-26T08:56:06.483214483Z",[9310],{"type":3467,"score":4370},[9312,9314,9316,9317,9318],{"type":3471,"url":9313},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fc9g-5qg7-mf45",{"type":3474,"url":9315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112891",{"type":3471,"url":6870},{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":322,"slug":9321,"dossier":47,"summary":9322,"aliases":9323,"sourceIds":9326,"published":9327,"modified":9328,"checkedAt":7,"severity":9329,"references":9331,"versionKeys":9345,"packageCount":32,"repositoryCount":822},"ghsa-ff5c-cp5c-9wjf-c6e516dd","NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars",[9324,9325],"CVE-2026-12876","PYSEC-2026-3869",[322,9325],"2026-09-02T14:33:38Z","2026-09-10T12:25:59.672261950Z",[9330],{"type":3467,"score":4370},[9332,9334,9336,9338,9339,9340,9341,9343],{"type":3471,"url":9333},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3471,"url":9335},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3649",{"type":3471,"url":9337},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F43aaca1b9024138421c97f970bf13ee19ac8129d",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3479,"url":5650},{"type":3474,"url":9342},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ff5c-cp5c-9wjf",{"type":3474,"url":9344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12876",[4416,3943,3944],{"id":323,"slug":9347,"dossier":47,"summary":9348,"aliases":9349,"sourceIds":9352,"published":9353,"modified":9354,"checkedAt":7,"severity":9355,"references":9358,"versionKeys":9370,"packageCount":32,"repositoryCount":832},"ghsa-ffc3-869f-jxw9-318ae071","PyJWT: Asymmetric-PEM detection bypass: whitespace\u002Fline-ending-mutated public keys skip the HS\u002Fasymmetric confusion guard",[9350,9351],"CVE-2026-102268","PYSEC-2026-4145",[323,9351],"2026-09-29T23:17:33Z","2026-10-01T17:55:42.096970476Z",[9356],{"type":3538,"score":9357},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9359,9361,9363,9365,9366,9367,9368],{"type":3471,"url":9360},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",{"type":3474,"url":9362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102268",{"type":3471,"url":9364},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8b4e233a22206b34ec1186e912e75c0b2396ac07",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":9369},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ffc3-869f-jxw9",[3911,3912,3913],{"id":324,"slug":9372,"dossier":47,"summary":9373,"aliases":9374,"sourceIds":9377,"published":9378,"modified":9379,"checkedAt":7,"severity":9380,"references":9384,"versionKeys":9399,"packageCount":32,"repositoryCount":832},"ghsa-ffj6-66c4-86gw-4a1cce88","NLTK downloader allows cross-package resource and model poisoning",[9375,9376],"CVE-2026-12261","PYSEC-2026-3954",[324,9376],"2026-08-07T07:16:26.377Z","2026-10-15T14:45:11.781131372Z",[9381,9383],{"type":3538,"score":9382},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3538,"score":5952},[9385,9387,9389,9391,9392,9393,9395,9397],{"type":3474,"url":9386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12261",{"type":3471,"url":9388},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3625",{"type":3471,"url":9390},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F7a5740af89feeb739193db766e11e85dfe78339c",{"type":3479,"url":3932},{"type":3471,"url":3934},{"type":3471,"url":9394},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3954.yaml",{"type":3938,"url":9396},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8b8c381e-08a8-4e4f-bb46-a320c96a364f",{"type":3474,"url":9398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-ffj6-66c4-86gw",[3943,3944],{"id":325,"slug":9401,"dossier":47,"summary":9402,"aliases":9403,"sourceIds":9406,"published":9407,"modified":9408,"checkedAt":7,"severity":9409,"references":9411,"versionKeys":9420,"packageCount":32,"repositoryCount":832},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[9404,9405],"CVE-2026-12061","PYSEC-2026-3582",[325,9405],"2026-07-31T16:51:09Z","2026-09-10T03:50:51.940502717Z",[9410],{"type":3538,"score":3652},[9412,9414,9415,9416,9418],{"type":3471,"url":9413},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3479,"url":3932},{"type":3479,"url":5650},{"type":3474,"url":9417},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":3474,"url":9419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[3943,3944],{"id":326,"slug":9422,"dossier":47,"summary":9423,"aliases":9424,"sourceIds":9427,"published":9428,"modified":9429,"checkedAt":7,"severity":9430,"references":9435,"versionKeys":9457,"packageCount":32,"repositoryCount":754},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[9425,9426],"CVE-2026-5241","PYSEC-2026-2290",[326,9426],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[9431,9433],{"type":3538,"score":9432},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":3538,"score":9434},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9436,9438,9440,9442,9443,9444,9446,9448,9449,9451,9453,9455],{"type":3474,"url":9437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":3576,"url":9439},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":3474,"url":9441},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":3474,"url":4777},{"type":3471,"url":4779},{"type":3471,"url":9445},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":3938,"url":9447},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":3479,"url":3725},{"type":3471,"url":9450},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":3727,"url":9452},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":3471,"url":9454},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":3474,"url":9456},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[3732,3733,3734,3735,3736,3737,3738,3739,3740],{"id":327,"slug":9459,"dossier":47,"summary":9460,"aliases":9461,"sourceIds":9464,"published":9465,"modified":9466,"checkedAt":7,"severity":9467,"references":9470,"versionKeys":9481,"packageCount":32,"repositoryCount":784},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[9462,9463],"CVE-2025-69230","PYSEC-2026-1105",[327,9463],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[9468],{"type":3467,"score":9469},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[9471,9473,9475,9477,9478,9479],{"type":3471,"url":9472},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":3474,"url":9474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":3576,"url":9476},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":9480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[3799,3800,3801,3802,3803,3804,3805],{"id":328,"slug":9483,"dossier":47,"summary":9484,"aliases":9485,"sourceIds":9488,"published":9489,"modified":9490,"checkedAt":7,"severity":9491,"references":9494,"versionKeys":9504,"packageCount":32,"repositoryCount":869},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[9486,9487],"CVE-2026-48524","PYSEC-2026-177",[328,9487],"2026-05-28T16:16:29.403Z","2026-09-10T03:50:49.375741307Z",[9492],{"type":3538,"score":9493},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[9495,9497,9499,9501,9502],{"type":3474,"url":9496},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":3474,"url":9498},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":3471,"url":9500},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":3479,"url":3903},{"type":3471,"url":9503},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[3911,3913],{"id":329,"slug":9506,"dossier":47,"summary":9507,"aliases":9508,"sourceIds":9512,"published":9513,"modified":9514,"checkedAt":7,"severity":9515,"references":9518,"versionKeys":9532,"packageCount":32,"repositoryCount":4731},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[9509,9510,9511],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[329,9511],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[9516],{"type":3538,"score":9517},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[9519,9521,9523,9525,9527,9528,9529,9530],{"type":3471,"url":9520},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":3474,"url":9522},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":3471,"url":9524},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":3471,"url":9526},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":3479,"url":3480},{"type":3471,"url":6161},{"type":3479,"url":6163},{"type":3474,"url":9531},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":330,"slug":9534,"dossier":47,"summary":9535,"aliases":9536,"sourceIds":9539,"published":9540,"modified":9541,"checkedAt":7,"severity":9542,"references":9544,"versionKeys":9558,"packageCount":32,"repositoryCount":32},"ghsa-fj7x-q9j7-g6q6-b2dae37d","Black vulnerable to Regular Expression Denial of Service (ReDoS)",[9537,9538],"CVE-2024-21503","PYSEC-2024-48",[330,9538],"2024-03-19T05:15:00Z","2026-09-10T03:50:10.486429507Z",[9543],{"type":3538,"score":3752},[9545,9547,9549,9550,9552,9554,9556],{"type":3474,"url":9546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-21503",{"type":3576,"url":9548},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Ff00093672628d212b8965a8993cee8bedf5fe9b8",{"type":3479,"url":4265},{"type":3471,"url":9551},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F24.3.0",{"type":3471,"url":9553},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2024-48.yaml",{"type":3471,"url":9555},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-BLACK-6256273",{"type":3474,"url":9557},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7x-q9j7-g6q6",[4273],{"id":331,"slug":9560,"dossier":47,"summary":9561,"aliases":9562,"sourceIds":9565,"published":9566,"modified":9567,"checkedAt":7,"severity":9568,"references":9570,"versionKeys":9584,"packageCount":32,"repositoryCount":869},"ghsa-fp3f-mc75-235c-03ef9ecd","pypdf: Possible large memory usage for large \u002FToUnicode streams",[9563,9564],"CVE-2026-71870","PYSEC-2026-3655",[331,9564],"2026-08-07T19:29:09Z","2026-09-10T03:51:13.982103349Z",[9569],{"type":3467,"score":3505},[9571,9573,9575,9577,9578,9579,9580,9582],{"type":3471,"url":9572},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3471,"url":9574},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3944",{"type":3471,"url":9576},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fafba8080e19d29a3c256a742b340995e695b35aa",{"type":3479,"url":3514},{"type":3471,"url":9295},{"type":3479,"url":3518},{"type":3474,"url":9581},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":3474,"url":9583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71870",[3524,3525,3526],{"id":332,"slug":9586,"dossier":47,"summary":9587,"aliases":9588,"sourceIds":9591,"published":9592,"modified":9593,"checkedAt":7,"severity":9594,"references":9596,"versionKeys":9611,"packageCount":32,"repositoryCount":869},"ghsa-fp3h-c4fm-7vvf-cd1c6049","pypdf: Possible large memory usage for large \u002FToUnicode streams (Follow-up 2)",[9589,9590],"CVE-2026-102995","PYSEC-2026-4154",[332,9590],"2026-10-01T15:06:04Z","2026-10-01T17:56:15.156271717Z",[9595],{"type":3467,"score":3851},[9597,9599,9601,9603,9605,9606,9608,9609],{"type":3471,"url":9598},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3h-c4fm-7vvf",{"type":3474,"url":9600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102995",{"type":3471,"url":9602},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4071",{"type":3471,"url":9604},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F319d0b823ce2c311a2435e9fd93c13994d32bb51",{"type":3479,"url":3514},{"type":3471,"url":9607},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.18.1",{"type":3479,"url":3518},{"type":3474,"url":9610},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3h-c4fm-7vvf",[3524,3525,3526],{"id":333,"slug":9613,"dossier":47,"summary":6690,"aliases":9614,"sourceIds":9617,"published":9618,"modified":9619,"checkedAt":7,"severity":9620,"references":9622,"versionKeys":9633,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[9615,9616],"CVE-2025-1194","PYSEC-2026-1984",[333,9616],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[9621],{"type":3538,"score":4342},[9623,9625,9627,9628,9630,9631],{"type":3474,"url":9624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":3471,"url":9626},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":3479,"url":3725},{"type":3471,"url":9629},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":3479,"url":4198},{"type":3474,"url":9632},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[3732],{"id":334,"slug":9635,"dossier":47,"summary":9636,"aliases":9637,"sourceIds":9639,"published":9640,"modified":9641,"checkedAt":7,"severity":9642,"references":9645,"versionKeys":9656,"packageCount":32,"repositoryCount":822},"ghsa-fq56-3cx3-fjxp-d2885806","filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders",[9638],"CVE-2026-112935",[334],"2026-10-28T21:08:08Z","2026-10-28T21:15:04.933315565Z",[9643],{"type":3538,"score":9644},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[9646,9648,9650,9652,9654,9655],{"type":3471,"url":9647},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-fq56-3cx3-fjxp",{"type":3474,"url":9649},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112935",{"type":3471,"url":9651},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F843",{"type":3471,"url":9653},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F740ff666b62a88496c8d7394e4e6230605e4d62b",{"type":3479,"url":5459},{"type":3471,"url":5461},[5463,5464,5465,5466],{"id":335,"slug":9658,"dossier":47,"summary":9659,"aliases":9660,"sourceIds":9663,"published":9664,"modified":9665,"checkedAt":7,"severity":9666,"references":9668,"versionKeys":9682,"packageCount":32,"repositoryCount":869},"ghsa-fwg2-594c-jp42-71ea2530","pypdf: Possible long runtimes\u002Flarge memory usage for large CID font width ranges",[9661,9662],"CVE-2026-71852","PYSEC-2026-3656",[335,9662],"2026-08-07T18:54:00Z","2026-09-10T03:51:13.932861945Z",[9667],{"type":3467,"score":3505},[9669,9671,9673,9675,9676,9677,9678,9680],{"type":3471,"url":9670},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3471,"url":9672},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3946",{"type":3471,"url":9674},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7",{"type":3479,"url":3514},{"type":3471,"url":9295},{"type":3479,"url":3518},{"type":3474,"url":9679},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":3474,"url":9681},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71852",[3524,3525,3526],{"id":336,"slug":9684,"dossier":47,"summary":9685,"aliases":9686,"sourceIds":9689,"published":9690,"modified":9691,"checkedAt":7,"severity":9692,"references":9695,"versionKeys":9701,"packageCount":32,"repositoryCount":754},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[9687,9688],"CVE-2026-54278","PYSEC-2026-2111",[336,9688],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[9693,9694],{"type":3467,"score":4899},{"type":3538,"score":3652},[9696,9698,9699],{"type":3474,"url":9697},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":3479,"url":3795},{"type":3576,"url":9700},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":337,"slug":9703,"dossier":47,"summary":9704,"aliases":9705,"sourceIds":9709,"published":9710,"modified":9711,"checkedAt":7,"severity":9712,"references":9715,"versionKeys":9726,"packageCount":32,"repositoryCount":4084},"ghsa-g4qv-2jxx-769h-01f137f2","Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time",[9706,9707,9708],"BIT-pillow-2026-96643","CVE-2026-96643","PYSEC-2026-4342",[337,9708],"2026-10-21T21:20:32.797Z","2026-10-29T10:55:44.091799759Z",[9713,9714],{"type":3467,"score":4521},{"type":3538,"score":3604},[9716,9718,9720,9722,9724,9725],{"type":3474,"url":9717},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g4qv-2jxx-769h",{"type":3474,"url":9719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96643",{"type":3938,"url":9721},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10073",{"type":3576,"url":9723},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F806e38381c781f32bbd22f4cd026678acd40fd6c",{"type":3479,"url":3480},{"type":3474,"url":3482},[3486,3487,3488,3489,3490,3491,3492,3493],{"id":338,"slug":9728,"dossier":47,"summary":9729,"aliases":9730,"sourceIds":9733,"published":9734,"modified":9735,"checkedAt":7,"severity":9736,"references":9739,"versionKeys":9750,"packageCount":32,"repositoryCount":744},"ghsa-g7cr-3p24-7wf7-568f0c0a","Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer",[9731,9732],"BIT-pillow-2026-96778","CVE-2026-96778",[338],"2026-10-22T16:05:39Z","2026-10-29T10:56:05.933422167Z",[9737],{"type":3467,"score":9738},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[9740,9742,9744,9746,9748,9749],{"type":3471,"url":9741},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g7cr-3p24-7wf7",{"type":3474,"url":9743},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96778",{"type":3471,"url":9745},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10124",{"type":3471,"url":9747},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F02561b8dc6117d5670d4b469fecdd02c70854f9b",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":339,"slug":9752,"dossier":47,"summary":9753,"aliases":9754,"sourceIds":9757,"published":9758,"modified":9759,"checkedAt":7,"severity":9760,"references":9763,"versionKeys":9782,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[9755,9756],"CVE-2024-34062","PYSEC-2026-1976",[339,9756],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[9761],{"type":3538,"score":9762},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[9764,9766,9768,9770,9772,9774,9776,9778,9780],{"type":3471,"url":9765},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":3474,"url":9767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":3471,"url":9769},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":3479,"url":9771},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":3471,"url":9773},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":3471,"url":9775},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":3471,"url":9777},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":3479,"url":9779},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":3474,"url":9781},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[9783],"pypi:tqdm@4.66.2",{"id":340,"slug":9785,"dossier":47,"summary":9786,"aliases":9787,"sourceIds":9791,"published":9792,"modified":9793,"checkedAt":7,"severity":9794,"references":9797,"versionKeys":9808,"packageCount":32,"repositoryCount":744},"ghsa-g842-9rc4-69pw-38a3cbdb","Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS",[9788,9789,9790],"BIT-pillow-2026-96637","CVE-2026-96637","PYSEC-2026-4338",[340,9790],"2026-10-21T21:20:31.927Z","2026-10-29T10:55:56.102454725Z",[9795,9796],{"type":3467,"score":4521},{"type":3538,"score":3604},[9798,9800,9802,9804,9806,9807],{"type":3474,"url":9799},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g842-9rc4-69pw",{"type":3474,"url":9801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96637",{"type":3938,"url":9803},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10076",{"type":3576,"url":9805},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F7cb0e02389d8aac2a60896a490f572db0b07b841",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":341,"slug":9810,"dossier":47,"summary":9811,"aliases":9812,"sourceIds":9815,"published":9816,"modified":9817,"checkedAt":7,"severity":9818,"references":9820,"versionKeys":9833,"packageCount":32,"repositoryCount":784},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[9813,9814],"CVE-2025-69229","PYSEC-2026-1106",[341,9814],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[9819],{"type":3467,"score":4899},[9821,9823,9825,9827,9829,9830,9831],{"type":3471,"url":9822},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":3474,"url":9824},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":3471,"url":9826},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":3471,"url":9828},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":9832},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[3799,3800,3801,3802,3803,3804,3805],{"id":342,"slug":9835,"dossier":47,"summary":9836,"aliases":9837,"sourceIds":9840,"published":9841,"modified":9842,"checkedAt":7,"severity":9843,"references":9845,"versionKeys":9860,"packageCount":32,"repositoryCount":103},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[9838,9839],"CVE-2026-59935","PYSEC-2026-3613",[342,9839],"2026-07-23T16:37:07Z","2026-09-10T03:50:51.957724392Z",[9844],{"type":3467,"score":3851},[9846,9848,9850,9852,9854,9855,9857,9858],{"type":3471,"url":9847},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":3474,"url":9849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":3471,"url":9851},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":3471,"url":9853},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":3479,"url":3514},{"type":3471,"url":9856},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",{"type":3479,"url":3518},{"type":3474,"url":9859},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g867-7843-wf8q",[3524,3525],{"id":343,"slug":9862,"dossier":47,"summary":9863,"aliases":9864,"sourceIds":9867,"published":9868,"modified":9869,"checkedAt":7,"severity":9870,"references":9872,"versionKeys":9886,"packageCount":32,"repositoryCount":869},"ghsa-g9cg-prrw-2r8q-3855e24a","pypdf: Possible large memory usage when parsing font data",[9865,9866],"CVE-2026-102996","PYSEC-2026-4155",[343,9866],"2026-10-01T15:06:13Z","2026-10-01T17:55:49.593652911Z",[9871],{"type":3467,"score":3851},[9873,9875,9877,9879,9881,9882,9883,9884],{"type":3471,"url":9874},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9cg-prrw-2r8q",{"type":3474,"url":9876},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102996",{"type":3471,"url":9878},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4072",{"type":3471,"url":9880},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5",{"type":3479,"url":3514},{"type":3471,"url":9607},{"type":3479,"url":3518},{"type":3474,"url":9885},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9cg-prrw-2r8q",[3524,3525,3526],{"id":344,"slug":9888,"dossier":47,"summary":9889,"aliases":9890,"sourceIds":9893,"published":9894,"modified":9895,"checkedAt":7,"severity":9896,"references":9898,"versionKeys":9911,"packageCount":32,"repositoryCount":103},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[9891,9892],"CVE-2026-54651","PYSEC-2026-3018",[344,9892],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[9897],{"type":3467,"score":5266},[9899,9901,9903,9905,9906,9908,9909],{"type":3471,"url":9900},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":3474,"url":9902},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":3471,"url":9904},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":3479,"url":3514},{"type":3471,"url":9907},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":3479,"url":3518},{"type":3474,"url":9910},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[3524,3525],{"id":345,"slug":9913,"dossier":47,"summary":9914,"aliases":9915,"sourceIds":9918,"published":9919,"modified":9920,"checkedAt":7,"severity":9921,"references":9926,"versionKeys":9936,"packageCount":32,"repositoryCount":744},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[9916,9917],"CVE-2026-25645","PYSEC-2026-2275",[345,9917],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[9922,9924],{"type":3538,"score":9923},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":3538,"score":9925},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[9927,9929,9931,9933,9934],{"type":3474,"url":9928},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":3474,"url":9930},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":3576,"url":9932},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":3479,"url":7981},{"type":3474,"url":9935},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[7993,7994,9937,9938],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":346,"slug":9940,"dossier":47,"summary":9941,"aliases":9942,"sourceIds":9945,"published":9946,"modified":9947,"checkedAt":7,"severity":9948,"references":9951,"versionKeys":9961,"packageCount":32,"repositoryCount":832},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[9943,9944],"CVE-2026-33230","PYSEC-2026-2235",[346,9944],"2026-03-18T20:23:33Z","2026-09-10T03:50:39.207692385Z",[9949],{"type":3538,"score":9950},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[9952,9954,9956,9958,9960],{"type":3727,"url":9953},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":3474,"url":9955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":3576,"url":9957},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":3576,"url":9959},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":3479,"url":3932},[3943,3944],{"id":347,"slug":9963,"dossier":47,"summary":9964,"aliases":9965,"sourceIds":9968,"published":9969,"modified":9970,"checkedAt":7,"severity":9971,"references":9973,"versionKeys":9982,"packageCount":32,"repositoryCount":744},"ghsa-gg2r-wvfm-q9rx-9e34ef8d","Pillow: MSP RLE decoder expands a tiny file into unbounded memory",[9966,9967],"BIT-pillow-2026-112892","CVE-2026-112892",[347],"2026-10-21T21:12:56Z","2026-10-26T08:55:54.537605973Z",[9972],{"type":3467,"score":3851},[9974,9976,9978,9980,9981],{"type":3471,"url":9975},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-gg2r-wvfm-q9rx",{"type":3474,"url":9977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112892",{"type":3471,"url":9979},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5dcb630b9798efd91929cb873d677aeee6ed0bb3",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":348,"slug":9984,"dossier":47,"summary":9985,"aliases":9986,"sourceIds":9989,"published":9990,"modified":9991,"checkedAt":7,"severity":9992,"references":9994,"versionKeys":10006,"packageCount":32,"repositoryCount":34},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[9987,9988],"CVE-2026-97688","PYSEC-2026-4176",[348,9988],"2026-09-30T15:00:38Z","2026-10-01T17:55:40.608255720Z",[9993],{"type":3467,"score":4370},[9995,9997,9999,10001,10002,10003,10004],{"type":3471,"url":9996},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":3474,"url":9998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":3471,"url":10000},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":3479,"url":4075},{"type":3471,"url":7489},{"type":3479,"url":4077},{"type":3474,"url":10005},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",[7494,7495],{"id":349,"slug":10008,"dossier":47,"summary":10009,"aliases":10010,"sourceIds":10013,"published":10014,"modified":10015,"checkedAt":7,"severity":10016,"references":10018,"versionKeys":10031,"packageCount":32,"repositoryCount":803},"ghsa-gjv8-xp57-g29c-0bfb5cb1","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` \u002F `VALUE` selector sub-patterns",[10011,10012],"CVE-2026-86000","PYSEC-2026-4170",[349,10012],"2026-09-17T20:32:58Z","2026-10-01T17:56:08.291385035Z",[10017],{"type":3538,"score":3752},[10019,10021,10023,10025,10026,10028,10029],{"type":3471,"url":10020},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",{"type":3474,"url":10022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-86000",{"type":3471,"url":10024},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fce44e4996e6632871c18cdd7a7fb641be8ef34ef",{"type":3479,"url":4038},{"type":3471,"url":10027},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Freleases\u002Ftag\u002F2.9",{"type":3479,"url":4040},{"type":3474,"url":10030},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gjv8-xp57-g29c",[4046,4047,4048,10032],"pypi:soupsieve@2.8.4",{"id":350,"slug":10034,"dossier":47,"summary":10035,"aliases":10036,"sourceIds":10039,"published":10040,"modified":10041,"checkedAt":7,"severity":10042,"references":10044,"versionKeys":10055,"packageCount":32,"repositoryCount":4084},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[10037,10038],"CVE-2025-66418","PYSEC-2026-1998",[350,10038],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[10043],{"type":3467,"score":4060},[10045,10047,10049,10051,10052,10053],{"type":3471,"url":10046},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":3474,"url":10048},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":3576,"url":10050},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":3479,"url":4075},{"type":3479,"url":4077},{"type":3474,"url":10054},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[4079,4080,4081,4082,4083],{"id":351,"slug":10057,"dossier":47,"summary":10058,"aliases":10059,"sourceIds":10061,"published":10062,"modified":10063,"checkedAt":7,"severity":10064,"references":10066,"versionKeys":10075,"packageCount":32,"repositoryCount":869},"ghsa-gmh7-3g9r-mjh5-299279ac","pypdf: Possible long runtimes for large xref table header limits",[10060],"CVE-2026-115580",[351],"2026-10-23T20:54:12Z","2026-10-23T21:00:05.293776771Z",[10065],{"type":3467,"score":4521},[10067,10069,10071,10073,10074],{"type":3471,"url":10068},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-gmh7-3g9r-mjh5",{"type":3471,"url":10070},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4239",{"type":3471,"url":10072},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fa3061e34b169d34478d520f5f049c53cfb1482b2",{"type":3479,"url":3514},{"type":3471,"url":6486},[3524,3525,3526],{"id":352,"slug":10077,"dossier":47,"summary":10078,"aliases":10079,"sourceIds":10082,"published":10083,"modified":10084,"checkedAt":7,"severity":10085,"references":10088,"versionKeys":10103,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[10080,10081],"CVE-2024-56201","PYSEC-2026-1472",[352,10081],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[10086,10087],{"type":3538,"score":5840},{"type":3467,"score":8795},[10089,10091,10093,10095,10097,10098,10100,10101],{"type":3471,"url":10090},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":3474,"url":10092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":3471,"url":10094},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":3576,"url":10096},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":3479,"url":8804},{"type":3471,"url":10099},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":3479,"url":8810},{"type":3474,"url":10102},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[8814],{"id":353,"slug":10105,"dossier":47,"summary":10106,"aliases":10107,"sourceIds":10110,"published":10111,"modified":10112,"checkedAt":7,"severity":10113,"references":10115,"versionKeys":10126,"packageCount":32,"repositoryCount":103},"ghsa-gphh-9q3h-jgpp-606af12e","banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI",[10108,10109],"CVE-2026-44209","PYSEC-2026-2390",[353,10109],"2026-05-08T20:36:22Z","2026-07-13T16:42:52.498372734Z",[10114],{"type":3538,"score":8742},[10116,10118,10120,10122,10123,10124],{"type":3471,"url":10117},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",{"type":3474,"url":10119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44209",{"type":3471,"url":10121},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F74",{"type":3479,"url":5379},{"type":3479,"url":5383},{"type":3474,"url":10125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",[5389],{"id":354,"slug":10128,"dossier":47,"summary":10129,"aliases":10130,"sourceIds":10133,"published":10134,"modified":10135,"checkedAt":7,"severity":10136,"references":10138,"versionKeys":10149,"packageCount":32,"repositoryCount":32},"ghsa-gvp8-978c-rx2q-c33a029f","PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse",[10131,10132],"CVE-2026-103001","PYSEC-2026-4146",[354,10132],"2026-09-30T23:53:17Z","2026-10-01T17:55:53.001409325Z",[10137],{"type":3538,"score":5950},[10139,10141,10143,10144,10145,10147],{"type":3471,"url":10140},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":3471,"url":10142},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F0c87c8c8b1a74cac99ad8115f3050efcb7fbed35",{"type":3479,"url":3903},{"type":3479,"url":3907},{"type":3474,"url":10146},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gvp8-978c-rx2q",{"type":3474,"url":10148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-103001",[3912],{"id":355,"slug":10151,"dossier":47,"summary":10152,"aliases":10153,"sourceIds":10155,"published":10156,"modified":10157,"checkedAt":7,"severity":10158,"references":10161,"versionKeys":10170,"packageCount":32,"repositoryCount":3883},"ghsa-gx76-c99x-2c96-30159937","AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies",[10154],"CVE-2026-111749",[355],"2026-10-20T19:58:14Z","2026-10-20T20:15:05.188135798Z",[10159],{"type":3467,"score":10160},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[10162,10164,10166,10168,10169],{"type":3471,"url":10163},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-gx76-c99x-2c96",{"type":3474,"url":10165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111749",{"type":3471,"url":10167},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a07c171ef9f3be583e2907dcd1931372efca8d6",{"type":3479,"url":3795},{"type":3471,"url":3879},[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],{"id":356,"slug":10172,"dossier":47,"summary":10173,"aliases":10174,"sourceIds":10178,"published":10179,"modified":10180,"checkedAt":7,"severity":10181,"references":10184,"versionKeys":10196,"packageCount":32,"repositoryCount":744},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[10175,10176,10177],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[356,10177],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[10182],{"type":3538,"score":10183},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[10185,10187,10189,10191,10193,10194],{"type":3727,"url":10186},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":3474,"url":10188},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":3576,"url":10190},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":3471,"url":10192},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":3479,"url":5853},{"type":3474,"url":10195},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[5859,5860,5861,5862,10197,10198,10199,10200,10201,10202,10203,10204],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":357,"slug":10206,"dossier":47,"summary":10207,"aliases":10208,"sourceIds":10211,"published":10212,"modified":10213,"checkedAt":7,"severity":10214,"references":10216,"versionKeys":10237,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[10209,10210],"CVE-2024-34064","PYSEC-2026-1474",[357,10210],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[10215],{"type":3538,"score":6932},[10217,10219,10221,10223,10224,10226,10228,10230,10232,10234,10235],{"type":3471,"url":10218},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":3474,"url":10220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":3576,"url":10222},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":3479,"url":8804},{"type":3471,"url":10225},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":3471,"url":10227},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":3471,"url":10229},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":3471,"url":10231},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":3471,"url":10233},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":3479,"url":8810},{"type":3474,"url":10236},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[8814],{"id":358,"slug":10239,"dossier":47,"summary":10240,"aliases":10241,"sourceIds":10244,"published":10245,"modified":10246,"checkedAt":7,"severity":10247,"references":10250,"versionKeys":10264,"packageCount":32,"repositoryCount":832},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[10242,10243],"CVE-2026-0846","PYSEC-2026-97",[358,10243],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[10248,10249],{"type":3538,"score":6371},{"type":3538,"score":5482},[10251,10253,10255,10257,10258,10260,10262],{"type":3474,"url":10252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":3471,"url":10254},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":3471,"url":10256},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":3479,"url":3932},{"type":3471,"url":10259},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":3727,"url":10261},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":3474,"url":10263},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3943,3944],{"id":359,"slug":10266,"dossier":47,"summary":10267,"aliases":10268,"sourceIds":10271,"published":10272,"modified":10273,"checkedAt":7,"severity":10274,"references":10277,"versionKeys":10286,"packageCount":32,"repositoryCount":765},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[10269,10270],"CVE-2026-34513","PYSEC-2026-2095",[359,10270],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[10275,10276],{"type":3467,"score":4546},{"type":3538,"score":3652},[10278,10280,10282,10284,10285],{"type":3576,"url":10279},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":3474,"url":10281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":3576,"url":10283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":360,"slug":10288,"dossier":47,"summary":10289,"aliases":10290,"sourceIds":10293,"published":10294,"modified":10295,"checkedAt":7,"severity":10296,"references":10300,"versionKeys":10308,"packageCount":32,"repositoryCount":754},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[10291,10292],"CVE-2026-47265","PYSEC-2026-2105",[360,10292],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[10297,10299],{"type":3467,"score":10298},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":3538,"score":5482},[10301,10303,10305,10307],{"type":3576,"url":10302},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":3474,"url":10304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":3576,"url":10306},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":3479,"url":3795},[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":361,"slug":10310,"dossier":47,"summary":10311,"aliases":10312,"sourceIds":10315,"published":10316,"modified":10317,"checkedAt":7,"severity":10318,"references":10320,"versionKeys":10331,"packageCount":32,"repositoryCount":784},"ghsa-hhxq-47xx-j5xx-b7469e94","virtualenv: Seed replacement does not contain metadata deletion paths",[10313,10314],"BIT-virtualenv-2026-113719","CVE-2026-113719",[361],"2026-10-23T22:19:15Z","2026-10-29T10:56:02.747342068Z",[10319],{"type":3538,"score":4666},[10321,10323,10325,10327,10329,10330],{"type":3471,"url":10322},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-hhxq-47xx-j5xx",{"type":3474,"url":10324},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113719",{"type":3471,"url":10326},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3428",{"type":3471,"url":10328},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fe3cea6fa10a50fa29cf1fdddd772458fba076d5f",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":362,"slug":10333,"dossier":47,"summary":10334,"aliases":10335,"sourceIds":10338,"published":10339,"modified":10340,"checkedAt":7,"severity":10341,"references":10343,"versionKeys":10358,"packageCount":32,"repositoryCount":103},"ghsa-hmq2-7hp6-7crh-ef370495","Banks: User-controlled prompt input can be parsed as privileged chat messages",[10336,10337],"CVE-2026-107717","PYSEC-2026-4202",[362,10337],"2026-10-08T22:10:01Z","2026-10-15T14:56:15.712699415Z",[10342],{"type":3538,"score":7362},[10344,10346,10348,10350,10351,10353,10354,10356],{"type":3471,"url":10345},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-7hp6-7crh",{"type":3471,"url":10347},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F78",{"type":3471,"url":10349},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002F02172b816fb84f6a824cc09a8aca7416f53c12cb",{"type":3479,"url":5379},{"type":3471,"url":10352},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.5.0",{"type":3479,"url":5383},{"type":3474,"url":10355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hmq2-7hp6-7crh",{"type":3474,"url":10357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-107717",[5389],{"id":363,"slug":10360,"dossier":47,"summary":10361,"aliases":10362,"sourceIds":10365,"published":10366,"modified":10367,"checkedAt":7,"severity":10368,"references":10371,"versionKeys":10377,"packageCount":32,"repositoryCount":754},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[10363,10364],"CVE-2026-54276","PYSEC-2026-2109",[363,10364],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[10369,10370],{"type":3467,"score":4826},{"type":3538,"score":9950},[10372,10374,10376],{"type":3474,"url":10373},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":3576,"url":10375},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":3479,"url":3795},[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":364,"slug":10379,"dossier":47,"summary":10380,"aliases":10381,"sourceIds":10384,"published":10385,"modified":10386,"checkedAt":7,"severity":10387,"references":10389,"versionKeys":10404,"packageCount":32,"repositoryCount":103},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[10382,10383],"CVE-2026-31826","PYSEC-2026-3019",[364,10383],"2026-03-11T00:14:02Z","2026-09-10T03:50:39.503255117Z",[10388],{"type":3467,"score":4999},[10390,10392,10394,10396,10398,10399,10401,10402],{"type":3471,"url":10391},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":3474,"url":10393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":3471,"url":10395},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":3471,"url":10397},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":3479,"url":3514},{"type":3471,"url":10400},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":3479,"url":3518},{"type":3474,"url":10403},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[3524,3525],{"id":365,"slug":10406,"dossier":47,"summary":10407,"aliases":10408,"sourceIds":10412,"published":10413,"modified":10414,"checkedAt":7,"severity":10415,"references":10417,"versionKeys":10432,"packageCount":32,"repositoryCount":32},"ghsa-hvfh-5mj3-5f3j-627daf3f","Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access",[10409,10410,10411],"CVE-2026-120492","CVE-2026-45019","PYSEC-2026-3811",[365,10411],"2026-08-25T19:21:40Z","2026-11-03T02:55:55.261817313Z",[10416],{"type":3538,"score":6934},[10418,10420,10422,10423,10425,10427,10428,10430],{"type":3471,"url":10419},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3471,"url":10421},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F0565fd0eccb915fce159929598b053ed79f6e0c9",{"type":3479,"url":3828},{"type":3471,"url":10424},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fblob\u002F2.12.0\u002Fdocs\u002Fsecurity-advisory-2026-mcp.md#spl-2026-002--ssrf-via-mcp-streamable-http--sse",{"type":3471,"url":10426},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.12.0",{"type":3479,"url":3836},{"type":3474,"url":10429},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hvfh-5mj3-5f3j",{"type":3474,"url":10431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45019",[3840],{"id":366,"slug":10434,"dossier":47,"summary":10435,"aliases":10436,"sourceIds":10439,"published":10440,"modified":10441,"checkedAt":7,"severity":10442,"references":10444,"versionKeys":10452,"packageCount":32,"repositoryCount":32},"ghsa-hw26-mmpg-fqfg-673c67e1","lxml-html-clean has CSS @import Filter Bypass via Unicode Escapes",[10437,10438],"CVE-2026-28348","PYSEC-2026-2201",[366,10438],"2026-03-02T19:19:15Z","2026-09-10T03:50:39.674211658Z",[10443],{"type":3538,"score":9950},[10445,10447,10449,10451],{"type":3727,"url":10446},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-hw26-mmpg-fqfg",{"type":3474,"url":10448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28348",{"type":3576,"url":10450},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F2ef732667ddbc74ea59847bcf24b75809aaeed3b",{"type":3479,"url":4960},[4968],{"id":367,"slug":10454,"dossier":47,"summary":10455,"aliases":10456,"sourceIds":10459,"published":10460,"modified":10461,"checkedAt":7,"severity":10462,"references":10465,"versionKeys":10477,"packageCount":32,"repositoryCount":832},"ghsa-hxm8-2xgr-2p9m-bfcf1f86","PyJWT: Non-canonical signature segments enable raw-token revocation bypass",[10457,10458],"CVE-2026-102269","PYSEC-2026-4147",[367,10458],"2026-09-29T23:17:55Z","2026-10-01T17:55:59.204638768Z",[10463],{"type":3538,"score":10464},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[10466,10468,10470,10472,10473,10474,10475],{"type":3471,"url":10467},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",{"type":3474,"url":10469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102269",{"type":3471,"url":10471},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Fe6f48401001609a8f99e71fcaf355fb895d508a8",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":10476},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxm8-2xgr-2p9m",[3911,3912,3913],{"id":368,"slug":10479,"dossier":47,"summary":10480,"aliases":10481,"sourceIds":10484,"published":10485,"modified":10486,"checkedAt":7,"severity":10487,"references":10491,"versionKeys":10507,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[10482,10483],"CVE-2024-11394","PYSEC-2024-229",[368,10483],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[10488,10490],{"type":3538,"score":10489},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3538,"score":3674},[10492,10494,10496,10498,10499,10501,10503,10505],{"type":3474,"url":10493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":3471,"url":10495},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":3471,"url":10497},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":3479,"url":3725},{"type":3471,"url":10500},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":3471,"url":10502},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":3474,"url":10504},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":3474,"url":10506},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[3732],{"id":369,"slug":10509,"dossier":47,"summary":10510,"aliases":10511,"sourceIds":10513,"published":10514,"modified":10515,"checkedAt":7,"severity":10516,"references":10519,"versionKeys":10529,"packageCount":32,"repositoryCount":822},"ghsa-j456-xh4h-cpf2-d53c5278","NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment",[10512],"CVE-2026-109956",[369],"2026-10-27T14:50:30Z","2026-10-27T15:00:05.453940749Z",[10517],{"type":3538,"score":10518},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[10520,10522,10524,10526,10527],{"type":3471,"url":10521},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-j456-xh4h-cpf2",{"type":3471,"url":10523},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3863",{"type":3471,"url":10525},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F6a17606293fe9d3ea1006f99dd3fed2e2b25d519",{"type":3479,"url":3932},{"type":3471,"url":10528},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.4",[4416,3943,3944],{"id":370,"slug":10531,"dossier":47,"summary":10532,"aliases":10533,"sourceIds":10536,"published":10537,"modified":10538,"checkedAt":7,"severity":10539,"references":10541,"versionKeys":10550,"packageCount":32,"repositoryCount":744},"ghsa-j4m9-6w36-pw47-8a42e0dd","Pillow: Invalid free in FreeType glyph rendering when a stroker is active",[10534,10535],"BIT-pillow-2026-112893","CVE-2026-112893",[370],"2026-10-21T20:06:34Z","2026-10-26T08:55:43.891551666Z",[10540],{"type":3467,"score":3468},[10542,10544,10546,10548,10549],{"type":3471,"url":10543},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-j4m9-6w36-pw47",{"type":3474,"url":10545},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112893",{"type":3471,"url":10547},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa7416de7f3a43128179d2cf68df3240ea8dafe13",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":371,"slug":10552,"dossier":47,"summary":10553,"aliases":10554,"sourceIds":10557,"published":10558,"modified":10559,"checkedAt":7,"severity":10560,"references":10562,"versionKeys":10574,"packageCount":32,"repositoryCount":103},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[10555,10556],"CVE-2026-49461","PYSEC-2026-3020",[371,10556],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[10561],{"type":3467,"score":5266},[10563,10565,10567,10568,10569,10570,10572],{"type":3471,"url":10564},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3471,"url":10566},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":3479,"url":3514},{"type":3471,"url":5704},{"type":3479,"url":3518},{"type":3474,"url":10571},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":3474,"url":10573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[3524,3525],{"id":372,"slug":10576,"dossier":47,"summary":10577,"aliases":10578,"sourceIds":10581,"published":10582,"modified":10583,"checkedAt":7,"severity":10584,"references":10586,"versionKeys":10599,"packageCount":32,"repositoryCount":32},"ghsa-j5xp-7m2f-49jv-d5b13248","Docling Core: Insufficient validation of image reference URIs",[10579,10580],"CVE-2026-44019","PYSEC-2026-2456",[372,10580],"2026-06-03T21:15:31Z","2026-07-13T16:43:49.284243969Z",[10585],{"type":3538,"score":8213},[10587,10589,10591,10593,10595,10597],{"type":3471,"url":10588},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3479,"url":10590},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core",{"type":3471,"url":10592},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Freleases\u002Ftag\u002Fv2.74.1",{"type":3479,"url":10594},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdocling-core",{"type":3474,"url":10596},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j5xp-7m2f-49jv",{"type":3474,"url":10598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44019",[10600],"pypi:docling-core@2.49.0",{"id":373,"slug":10602,"dossier":47,"summary":10603,"aliases":10604,"sourceIds":10606,"published":10607,"modified":10608,"checkedAt":7,"severity":10609,"references":10612,"versionKeys":10622,"packageCount":32,"repositoryCount":822},"ghsa-j8f7-rjxc-mr56-f1c144ea","filelock: ReadWriteLock follows a symlink at the lock path into SQLite",[10605],"CVE-2026-112936",[373],"2026-10-28T21:08:30Z","2026-10-28T21:15:04.169983430Z",[10610],{"type":3538,"score":10611},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[10613,10615,10617,10619,10620],{"type":3471,"url":10614},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-j8f7-rjxc-mr56",{"type":3474,"url":10616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112936",{"type":3471,"url":10618},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4d45e83caf7e31f9a12fb44526bdc07f70114f04",{"type":3479,"url":5459},{"type":3471,"url":10621},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.0.9",[5463,5464,5465,5466],{"id":374,"slug":10624,"dossier":47,"summary":10625,"aliases":10626,"sourceIds":10629,"published":10630,"modified":10631,"checkedAt":7,"severity":10632,"references":10634,"versionKeys":10646,"packageCount":32,"repositoryCount":803},"ghsa-j934-xhv5-fg8f-f3395fba","Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace\u002Fcomment trimming regex `RE_WS_END` (triggers on VALID selectors)",[10627,10628],"CVE-2026-85999","PYSEC-2026-4171",[374,10628],"2026-09-17T20:32:53Z","2026-10-01T17:56:03.541286563Z",[10633],{"type":3538,"score":3752},[10635,10637,10639,10641,10642,10643,10644],{"type":3471,"url":10636},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",{"type":3474,"url":10638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-85999",{"type":3471,"url":10640},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fcommit\u002Fcf198fcddc9230f06ed39f974eba0ce076b85cda",{"type":3479,"url":4038},{"type":3471,"url":10027},{"type":3479,"url":4040},{"type":3474,"url":10645},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j934-xhv5-fg8f",[4046,4047,4048,10032],{"id":375,"slug":10648,"dossier":47,"summary":10649,"aliases":10650,"sourceIds":10653,"published":10654,"modified":10655,"checkedAt":7,"severity":10656,"references":10658,"versionKeys":10673,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[10651,10652],"CVE-2025-62708","PYSEC-2026-1831",[375,10652],"2025-10-22T19:40:50Z","2026-09-10T03:50:29.885611595Z",[10657],{"type":3467,"score":4899},[10659,10661,10663,10665,10667,10668,10670,10671],{"type":3471,"url":10660},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":3474,"url":10662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":3471,"url":10664},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":3471,"url":10666},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":3479,"url":3514},{"type":3471,"url":10669},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":3479,"url":3518},{"type":3474,"url":10672},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[3524],{"id":376,"slug":10675,"dossier":47,"summary":10676,"aliases":10677,"sourceIds":10680,"published":10681,"modified":10682,"checkedAt":7,"severity":10683,"references":10687,"versionKeys":10704,"packageCount":32,"repositoryCount":754},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[10678,10679],"CVE-2026-34993","PYSEC-2026-2104",[376,10679],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[10684,10686],{"type":3538,"score":10685},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":3538,"score":4118},[10688,10690,10692,10694,10695,10697,10699,10700,10701,10702],{"type":3576,"url":10689},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":3474,"url":10691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":3576,"url":10693},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":3479,"url":3795},{"type":3471,"url":10696},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":3471,"url":10698},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":3474,"url":6188},{"type":3474,"url":9441},{"type":3474,"url":4777},{"type":3938,"url":10703},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":377,"slug":10706,"dossier":47,"summary":10707,"aliases":10708,"sourceIds":10711,"published":10712,"modified":10713,"checkedAt":7,"severity":10714,"references":10716,"versionKeys":10725,"packageCount":32,"repositoryCount":744},"ghsa-jg86-v3jv-hrpm-1380c45f","Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)",[10709,10710],"BIT-pillow-2026-112894","CVE-2026-112894",[377],"2026-10-21T21:11:44Z","2026-10-26T08:56:08.669907131Z",[10715],{"type":3467,"score":3851},[10717,10719,10721,10723,10724],{"type":3471,"url":10718},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jg86-v3jv-hrpm",{"type":3474,"url":10720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112894",{"type":3471,"url":10722},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":378,"slug":10727,"dossier":47,"summary":10728,"aliases":10729,"sourceIds":10732,"published":10733,"modified":10734,"checkedAt":7,"severity":10735,"references":10737,"versionKeys":10747,"packageCount":32,"repositoryCount":8514},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[10730,10731],"CVE-2025-67726","PYSEC-2025-267",[378,10731],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[10736],{"type":3538,"score":3652},[10738,10740,10742,10743,10745,10746],{"type":3474,"url":10739},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":3474,"url":10741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":3576,"url":8507},{"type":3471,"url":10744},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":3479,"url":4499},{"type":3474,"url":8512},[4503,4504,4505],{"id":379,"slug":10749,"dossier":47,"summary":10750,"aliases":10751,"sourceIds":10754,"published":10755,"modified":10756,"checkedAt":7,"severity":10757,"references":10759,"versionKeys":10770,"packageCount":32,"repositoryCount":784},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[10752,10753],"CVE-2025-69227","PYSEC-2026-1107",[379,10753],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[10758],{"type":3467,"score":4899},[10760,10762,10764,10766,10767,10768],{"type":3471,"url":10761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":3474,"url":10763},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":3471,"url":10765},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":10769},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[3799,3800,3801,3802,3803,3804,3805],{"id":380,"slug":10772,"dossier":47,"summary":10773,"aliases":10774,"sourceIds":10777,"published":10778,"modified":10779,"checkedAt":7,"severity":10780,"references":10783,"versionKeys":10798,"packageCount":32,"repositoryCount":103},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[10775,10776],"CVE-2026-41168","PYSEC-2026-3021",[380,10776],"2026-04-15T19:43:09Z","2026-09-10T03:50:44.569518277Z",[10781,10782],{"type":3538,"score":3752},{"type":3467,"score":3505},[10784,10786,10788,10790,10792,10793,10795,10796],{"type":3471,"url":10785},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":3474,"url":10787},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":3471,"url":10789},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":3471,"url":10791},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":3479,"url":3514},{"type":3471,"url":10794},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":3479,"url":3518},{"type":3474,"url":10797},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[3524,3525],{"id":381,"slug":10800,"dossier":47,"summary":10801,"aliases":10802,"sourceIds":10806,"published":10807,"modified":10808,"checkedAt":7,"severity":10809,"references":10811,"versionKeys":10825,"packageCount":32,"repositoryCount":4731},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[10803,10804,10805],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[381,10805],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[10810],{"type":3538,"score":3652},[10812,10814,10816,10818,10820,10821,10822,10823],{"type":3471,"url":10813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":3474,"url":10815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":3471,"url":10817},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":3471,"url":10819},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":3479,"url":3480},{"type":3471,"url":6161},{"type":3479,"url":6163},{"type":3474,"url":10824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":382,"slug":10827,"dossier":47,"summary":10828,"aliases":10829,"sourceIds":10832,"published":10833,"modified":10834,"checkedAt":7,"severity":10835,"references":10837,"versionKeys":10850,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[10830,10831],"CVE-2025-3264","PYSEC-2026-1985",[382,10831],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[10836],{"type":3538,"score":5130},[10838,10840,10842,10844,10845,10847,10848],{"type":3474,"url":10839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":3471,"url":10841},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":3471,"url":10843},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":3479,"url":3725},{"type":3471,"url":10846},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":3479,"url":4198},{"type":3474,"url":10849},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[3732],{"id":383,"slug":10852,"dossier":47,"summary":10853,"aliases":10854,"sourceIds":10857,"published":10858,"modified":10859,"checkedAt":7,"severity":10860,"references":10862,"versionKeys":10879,"packageCount":32,"repositoryCount":832},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[10855,10856],"CVE-2026-33231","PYSEC-2026-2236",[383,10856],"2026-03-19T12:42:20Z","2026-09-10T03:50:39.952342228Z",[10861],{"type":3538,"score":3652},[10863,10865,10867,10869,10870,10872,10874,10875,10876,10877],{"type":3727,"url":10864},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":3474,"url":10866},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":3576,"url":10868},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":3479,"url":3932},{"type":3471,"url":10871},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":3471,"url":10873},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":3474,"url":4775},{"type":3474,"url":6188},{"type":3474,"url":4777},{"type":3938,"url":10878},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3943,3944],{"id":384,"slug":10881,"dossier":47,"summary":10882,"aliases":10883,"sourceIds":10885,"published":10886,"modified":10887,"checkedAt":7,"severity":10888,"references":10890,"versionKeys":10898,"packageCount":32,"repositoryCount":103},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[10884],"CVE-2026-57204",[384],"2026-06-18T14:28:49Z","2026-09-10T03:51:08.790625588Z",[10889],{"type":3467,"score":5266},[10891,10893,10895,10896],{"type":3471,"url":10892},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":3471,"url":10894},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":3479,"url":3514},{"type":3471,"url":10897},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[3524,3525],{"id":385,"slug":10900,"dossier":47,"summary":10901,"aliases":10902,"sourceIds":10905,"published":10906,"modified":10907,"checkedAt":7,"severity":10908,"references":10911,"versionKeys":10921,"packageCount":32,"repositoryCount":32},"ghsa-jmmv-h3mp-59v8-f42633c7","Docling Core: Unsafe remote filename resolution",[10903,10904],"CVE-2026-44023","PYSEC-2026-2457",[385,10904],"2026-06-03T21:16:25Z","2026-07-13T16:43:42.701865915Z",[10909],{"type":3538,"score":10910},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",[10912,10914,10915,10916,10917,10919],{"type":3471,"url":10913},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling-core\u002Fsecurity\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3479,"url":10590},{"type":3471,"url":10592},{"type":3479,"url":10594},{"type":3474,"url":10918},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jmmv-h3mp-59v8",{"type":3474,"url":10920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44023",[10600],{"id":386,"slug":10923,"dossier":47,"summary":10924,"aliases":10925,"sourceIds":10928,"published":10929,"modified":10930,"checkedAt":7,"severity":10931,"references":10933,"versionKeys":10948,"packageCount":32,"repositoryCount":869},"ghsa-jp53-mhqp-8xcg-b1841e34","pypdf: Possible infinite loop for TreeObject.insert_child",[10926,10927],"CVE-2026-84309","PYSEC-2026-3913",[386,10927],"2026-09-01T21:20:20Z","2026-09-10T12:25:36.667036932Z",[10932],{"type":3467,"score":5266},[10934,10936,10938,10940,10941,10943,10944,10946],{"type":3471,"url":10935},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3471,"url":10937},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3964",{"type":3471,"url":10939},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc9ba557d565d57c53a0b3a0be06c0a4c29b0559b",{"type":3479,"url":3514},{"type":3471,"url":10942},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.16.0",{"type":3479,"url":3518},{"type":3474,"url":10945},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp53-mhqp-8xcg",{"type":3474,"url":10947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-84309",[3524,3525,3526],{"id":387,"slug":10950,"dossier":47,"summary":10951,"aliases":10952,"sourceIds":10955,"published":10956,"modified":10957,"checkedAt":7,"severity":10958,"references":10961,"versionKeys":10969,"packageCount":32,"repositoryCount":765},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[10953,10954],"CVE-2026-54282","PYSEC-2026-248",[387,10954],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[10959,10960],{"type":3538,"score":6592},{"type":3538,"score":4011},[10962,10964,10966,10967],{"type":3474,"url":10963},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":3474,"url":10965},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":3479,"url":7020},{"type":3471,"url":10968},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[3771,3772,3773,7027,7028,7029,7241,7242,7243],{"id":388,"slug":10971,"dossier":47,"summary":10972,"aliases":10973,"sourceIds":10976,"published":10977,"modified":10978,"checkedAt":7,"severity":10979,"references":10982,"versionKeys":11001,"packageCount":32,"repositoryCount":869},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[10974,10975],"CVE-2026-52869","PYSEC-2026-3482",[388,10975],"2026-07-16T19:58:53Z","2026-09-10T03:50:52.526763662Z",[10980],{"type":3538,"score":10981},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[10983,10985,10987,10989,10991,10993,10995,10996,10998,10999],{"type":3471,"url":10984},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":3474,"url":10986},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":3471,"url":10988},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":3471,"url":10990},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":3471,"url":10992},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":3471,"url":10994},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":3479,"url":5676},{"type":3471,"url":10997},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":3479,"url":7926},{"type":3474,"url":11000},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[5682,5683,5684],{"id":389,"slug":11003,"dossier":47,"summary":11004,"aliases":11005,"sourceIds":11008,"published":11009,"modified":11010,"checkedAt":7,"severity":11011,"references":11014,"versionKeys":11022,"packageCount":32,"repositoryCount":869},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[11006,11007],"CVE-2026-48523","PYSEC-2026-176",[389,11007],"2026-05-28T16:16:29.280Z","2026-09-10T03:51:08.776007275Z",[11012],{"type":3538,"score":11013},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[11015,11017,11019,11020],{"type":3727,"url":11016},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":3474,"url":11018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":3479,"url":3903},{"type":3471,"url":11021},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[3911,3913],{"id":390,"slug":11024,"dossier":47,"summary":11025,"aliases":11026,"sourceIds":11028,"published":11029,"modified":11030,"checkedAt":7,"severity":11031,"references":11033,"versionKeys":11040,"packageCount":32,"repositoryCount":869},"ghsa-jr96-gvgh-j3r4-059bd7d6","pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)",[11027],"CVE-2026-115585",[390],"2026-10-23T20:54:27Z","2026-10-23T21:00:06.090706376Z",[11032],{"type":3467,"score":4521},[11034,11036,11037,11038,11039],{"type":3471,"url":11035},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jr96-gvgh-j3r4",{"type":3471,"url":6481},{"type":3471,"url":6483},{"type":3479,"url":3514},{"type":3471,"url":6486},[3524,3525,3526],{"id":391,"slug":11042,"dossier":47,"summary":11043,"aliases":11044,"sourceIds":11047,"published":11048,"modified":11049,"checkedAt":7,"severity":11050,"references":11052,"versionKeys":11066,"packageCount":32,"repositoryCount":869},"ghsa-jw7q-gvrg-4vj3-00454a63","pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)",[11045,11046],"CVE-2026-102997","PYSEC-2026-4156",[391,11046],"2026-10-01T15:06:33Z","2026-10-01T17:56:11.608019455Z",[11051],{"type":3467,"score":3851},[11053,11055,11057,11059,11061,11062,11063,11064],{"type":3471,"url":11054},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jw7q-gvrg-4vj3",{"type":3474,"url":11056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102997",{"type":3471,"url":11058},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4073",{"type":3471,"url":11060},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fd9d38cf99b115deb562d3b68f36c33027bc04f79",{"type":3479,"url":3514},{"type":3471,"url":9607},{"type":3479,"url":3518},{"type":3474,"url":11065},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw7q-gvrg-4vj3",[3524,3525,3526],{"id":392,"slug":11068,"dossier":47,"summary":11069,"aliases":11070,"sourceIds":11073,"published":11074,"modified":11075,"checkedAt":7,"severity":11076,"references":11079,"versionKeys":11090,"packageCount":32,"repositoryCount":832},"ghsa-jwrc-g2q2-pq5p-dfb984e1","PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.",[11071,11072],"CVE-2026-102270","PYSEC-2026-4148",[392,11072],"2026-09-30T14:40:25Z","2026-10-01T17:55:44.209063147Z",[11077],{"type":3538,"score":11078},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[11080,11082,11084,11085,11086,11087,11088],{"type":3471,"url":11081},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",{"type":3474,"url":11083},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102270",{"type":3471,"url":9364},{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":11089},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwrc-g2q2-pq5p",[3911,3912,3913],{"id":393,"slug":11092,"dossier":47,"summary":11093,"aliases":11094,"sourceIds":11097,"published":11098,"modified":11099,"checkedAt":7,"severity":11100,"references":11102,"versionKeys":11113,"packageCount":32,"repositoryCount":103},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[11095,11096],"CVE-2026-54531","PYSEC-2026-3022",[393,11096],"2026-06-16T14:05:57Z","2026-09-10T03:51:08.924739649Z",[11101],{"type":3467,"score":5266},[11103,11105,11106,11107,11108,11109,11111],{"type":3471,"url":11104},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3471,"url":5271},{"type":3479,"url":3514},{"type":3471,"url":5274},{"type":3479,"url":3518},{"type":3474,"url":11110},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":3474,"url":11112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[3524,3525],{"id":394,"slug":11115,"dossier":47,"summary":11116,"aliases":11117,"sourceIds":11120,"published":11121,"modified":11122,"checkedAt":7,"severity":11123,"references":11127,"versionKeys":11146,"packageCount":32,"repositoryCount":832},"ghsa-m42h-3232-vpv3-b30ccceb","nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences",[11118,11119],"CVE-2026-12243","PYSEC-2026-597",[394,11119],"2026-06-30T01:16:29.063Z","2026-08-19T12:15:03.321869900Z",[11124,11125],{"type":3538,"score":5482},{"type":3538,"score":11126},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[11128,11130,11132,11134,11135,11137,11138,11140,11142,11144],{"type":3471,"url":11129},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",{"type":3474,"url":11131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12243",{"type":3471,"url":11133},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3504",{"type":3471,"url":6842},{"type":3471,"url":11136},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Faec4fce1b84ad725b8975f7365b23a4f626572a9",{"type":3479,"url":3932},{"type":3471,"url":11139},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-597.yaml",{"type":3727,"url":11141},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",{"type":3471,"url":11143},"https:\u002F\u002Fsecurityinfinity.com\u002Fresearch\u002Fpath-traversal-in-nltks-nltk-data-load-via-percent-encoded-sequences",{"type":3474,"url":11145},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m42h-3232-vpv3",[3943,3944],{"id":395,"slug":11148,"dossier":47,"summary":11149,"aliases":11150,"sourceIds":11153,"published":11154,"modified":11155,"checkedAt":7,"severity":11156,"references":11158,"versionKeys":11174,"packageCount":32,"repositoryCount":103},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[11151,11152],"CVE-2025-66019","PYSEC-2026-1832",[395,11152],"2025-11-24T22:42:07Z","2026-09-10T03:50:31.107367078Z",[11157],{"type":3467,"score":4899},[11159,11160,11162,11164,11166,11168,11169,11171,11172],{"type":3471,"url":10660},{"type":3471,"url":11161},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":3474,"url":11163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":3471,"url":11165},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":3471,"url":11167},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":3479,"url":3514},{"type":3471,"url":11170},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":3479,"url":3518},{"type":3474,"url":11173},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[3524,3525],{"id":396,"slug":11176,"dossier":47,"summary":11177,"aliases":11178,"sourceIds":11181,"published":11182,"modified":11183,"checkedAt":7,"severity":11184,"references":11189,"versionKeys":11200,"packageCount":32,"repositoryCount":822},"ghsa-m4rf-3fr8-xwx3-ed835593","NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)",[11179,11180],"CVE-2026-79675","PYSEC-2026-3749",[396,11180],"2026-08-25T16:17:28.013Z","2026-09-10T03:51:15.444696867Z",[11185,11186,11187],{"type":3538,"score":5295},{"type":3467,"score":5293},{"type":3467,"score":11188},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11190,11192,11194,11196,11197,11198],{"type":3727,"url":11191},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-m4rf-3fr8-xwx3",{"type":3474,"url":11193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79675",{"type":3471,"url":11195},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F8fa9650b6009aacfdebbc33d2a08d32c0858ea6c",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3474,"url":11199},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-jvm-argument-injection-via-per-call-options",[4416,3943,3944],{"id":397,"slug":11202,"dossier":47,"summary":11203,"aliases":11204,"sourceIds":11207,"published":11208,"modified":11209,"checkedAt":7,"severity":11210,"references":11215,"versionKeys":11224,"packageCount":32,"repositoryCount":765},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[11205,11206],"CVE-2026-34516","PYSEC-2026-2098",[397,11206],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[11211,11212,11213],{"type":3538,"score":3652},{"type":3467,"score":4899},{"type":3467,"score":11214},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11216,11218,11220,11222,11223],{"type":3576,"url":11217},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":3474,"url":11219},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":3576,"url":11221},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":398,"slug":11226,"dossier":47,"summary":11227,"aliases":11228,"sourceIds":11231,"published":11232,"modified":11233,"checkedAt":7,"severity":11234,"references":11237,"versionKeys":11243,"packageCount":32,"repositoryCount":754},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[11229,11230],"CVE-2026-50269","PYSEC-2026-2106",[398,11230],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[11235,11236],{"type":3467,"score":4009},{"type":3538,"score":3652},[11238,11240,11242],{"type":3474,"url":11239},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":3576,"url":11241},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":3479,"url":3795},[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":399,"slug":11245,"dossier":47,"summary":11246,"aliases":11247,"sourceIds":11250,"published":11251,"modified":11252,"checkedAt":7,"severity":11253,"references":11255,"versionKeys":11272,"packageCount":32,"repositoryCount":32},"ghsa-m88r-rg27-5xfg-642aa3a1","Docling: Unsafe XML Entity Expansion in USPTO Patent Backend",[11248,11249],"CVE-2026-44020","PYSEC-2026-240",[399,11249],"2026-06-03T21:14:15Z","2026-08-28T18:45:06.829347750Z",[11254],{"type":3538,"score":3652},[11256,11258,11260,11261,11263,11265,11266,11268,11270],{"type":3576,"url":11257},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-m88r-rg27-5xfg",{"type":3474,"url":11259},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44020",{"type":3471,"url":7391},{"type":3471,"url":11262},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-44020",{"type":3471,"url":11264},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2492456",{"type":3479,"url":4353},{"type":3471,"url":11267},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.74.0",{"type":3471,"url":11269},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-240.yaml",{"type":3471,"url":11271},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-44020.json",[4357],{"id":400,"slug":11274,"dossier":47,"summary":11275,"aliases":11276,"sourceIds":11279,"published":11280,"modified":11281,"checkedAt":7,"severity":11282,"references":11284,"versionKeys":11293,"packageCount":32,"repositoryCount":32},"ghsa-m9gh-vj53-gvh9-764ccc6a","python-engineio has possible denial of service due to maximum payload size sometimes not being enforced",[11277,11278],"CVE-2026-48809","PYSEC-2026-3033",[400,11278],"2026-06-26T20:48:18Z","2026-07-13T16:43:30.815486921Z",[11283],{"type":3538,"score":3652},[11285,11287,11288,11289,11291],{"type":3471,"url":11286},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3479,"url":8673},{"type":3479,"url":8675},{"type":3474,"url":11290},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":3474,"url":11292},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48809",[8681],{"id":401,"slug":11295,"dossier":47,"summary":11296,"aliases":11297,"sourceIds":11300,"published":11301,"modified":11302,"checkedAt":7,"severity":11303,"references":11306,"versionKeys":11314,"packageCount":32,"repositoryCount":869},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[11298,11299],"CVE-2026-44432","PYSEC-2026-142",[401,11299],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[11304,11305],{"type":3538,"score":3652},{"type":3467,"score":4060},[11307,11309,11311,11313],{"type":3474,"url":11308},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":3474,"url":11310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":3471,"url":11312},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":3479,"url":4075},[7494],{"id":402,"slug":11316,"dossier":47,"summary":11317,"aliases":11318,"sourceIds":11321,"published":11322,"modified":11323,"checkedAt":7,"severity":11324,"references":11327,"versionKeys":11340,"packageCount":32,"repositoryCount":3883},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[11319,11320],"CVE-2026-28684","PYSEC-2026-2270",[402,11320],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[11325],{"type":3538,"score":11326},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[11328,11330,11332,11334,11336,11338],{"type":3576,"url":11329},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":3474,"url":11331},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":3576,"url":11333},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":3471,"url":11335},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":3479,"url":11337},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":3474,"url":11339},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[11341,11342,11343,11344],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":403,"slug":11346,"dossier":47,"summary":11347,"aliases":11348,"sourceIds":11350,"published":11351,"modified":11352,"checkedAt":7,"severity":11353,"references":11355,"versionKeys":11366,"packageCount":32,"repositoryCount":869},"ghsa-mfr5-77xh-9j7h-62910128","pypdf has possible infinite loop when cloning dictionaries",[11349],"CVE-2026-119205",[403],"2026-10-30T23:12:20Z","2026-10-30T23:30:04.094971776Z",[11354],{"type":3467,"score":4521},[11356,11358,11360,11362,11364,11365],{"type":3471,"url":11357},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-mfr5-77xh-9j7h",{"type":3474,"url":11359},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119205",{"type":3471,"url":11361},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4288",{"type":3471,"url":11363},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff176db1a1f7f9af3e472e69a843ef1175653b044",{"type":3479,"url":3514},{"type":3471,"url":5524},[3524,3525,3526],{"id":404,"slug":11368,"dossier":47,"summary":11369,"aliases":11370,"sourceIds":11373,"published":11374,"modified":11375,"checkedAt":7,"severity":11376,"references":11379,"versionKeys":11394,"packageCount":32,"repositoryCount":42},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[11371,11372],"CVE-2026-69243","PYSEC-2026-3546",[404,11372],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[11377],{"type":3467,"score":11378},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[11380,11382,11384,11386,11387,11389,11390,11392],{"type":3471,"url":11381},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3471,"url":11383},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":3471,"url":11385},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":3479,"url":3795},{"type":3471,"url":11388},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":3479,"url":5328},{"type":3474,"url":11391},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":3474,"url":11393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881],{"id":405,"slug":11396,"dossier":47,"summary":11397,"aliases":11398,"sourceIds":11401,"published":11402,"modified":11403,"checkedAt":7,"severity":11404,"references":11406,"versionKeys":11415,"packageCount":32,"repositoryCount":765},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[11399,11400],"CVE-2026-49855","PYSEC-2026-3389",[405,11400],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[11405],{"type":3538,"score":3652},[11407,11409,11410,11411,11413],{"type":3471,"url":11408},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3479,"url":4499},{"type":3479,"url":4574},{"type":3474,"url":11412},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":3474,"url":11414},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[4503,4504,4505,4506,4507],{"id":406,"slug":11417,"dossier":47,"summary":11418,"aliases":11419,"sourceIds":11422,"published":11423,"modified":11424,"checkedAt":7,"severity":11425,"references":11427,"versionKeys":11438,"packageCount":32,"repositoryCount":34},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[11420,11421],"CVE-2026-40347","PYSEC-2026-3038",[406,11421],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[11426],{"type":3538,"score":3752},[11428,11430,11432,11433,11435,11436],{"type":3471,"url":11429},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":3474,"url":11431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":3479,"url":5596},{"type":3471,"url":11434},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":3479,"url":5598},{"type":3474,"url":11437},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[5884,5885,5602],{"id":407,"slug":11440,"dossier":47,"summary":11441,"aliases":11442,"sourceIds":11445,"published":11446,"modified":11447,"checkedAt":7,"severity":11448,"references":11450,"versionKeys":11463,"packageCount":32,"repositoryCount":754},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[11443,11444],"CVE-2026-82397","PYSEC-2026-3928",[407,11444],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[11449],{"type":3538,"score":3652},[11451,11453,11455,11456,11458,11459,11460,11461],{"type":3471,"url":11452},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":3474,"url":11454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":3471,"url":7279},{"type":3471,"url":11457},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":3479,"url":4499},{"type":3471,"url":7286},{"type":3479,"url":4574},{"type":3474,"url":11462},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[4503,4504,4505,4506,4507,4508],{"id":408,"slug":11465,"dossier":47,"summary":11466,"aliases":11467,"sourceIds":11470,"published":11471,"modified":11472,"checkedAt":7,"severity":11473,"references":11475,"versionKeys":11488,"packageCount":32,"repositoryCount":42},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[11468,11469],"CVE-2026-59881","PYSEC-2026-3547",[408,11469],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[11474],{"type":3467,"score":4370},[11476,11478,11480,11482,11484,11485,11486],{"type":3471,"url":11477},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":3474,"url":11479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":3471,"url":11481},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":3471,"url":11483},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":11487},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881],{"id":409,"slug":11490,"dossier":47,"summary":11491,"aliases":11492,"sourceIds":11495,"published":11496,"modified":11497,"checkedAt":7,"severity":11498,"references":11500,"versionKeys":11511,"packageCount":32,"repositoryCount":784},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[11493,11494],"CVE-2025-69225","PYSEC-2026-1109",[409,11494],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[11499],{"type":3467,"score":4009},[11501,11503,11505,11507,11508,11509],{"type":3471,"url":11502},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":3474,"url":11504},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":3576,"url":11506},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":3479,"url":3795},{"type":3479,"url":5328},{"type":3474,"url":11510},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[3799,3800,3801,3802,3803,3804,3805],{"id":410,"slug":11513,"dossier":47,"summary":11514,"aliases":11515,"sourceIds":11518,"published":11519,"modified":11520,"checkedAt":7,"severity":11521,"references":11523,"versionKeys":11534,"packageCount":32,"repositoryCount":744},"ghsa-mrfp-p49p-3hf2-6cfe1cba","Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion",[11516,11517],"BIT-pillow-2026-96640","CVE-2026-96640",[410],"2026-10-22T16:00:47Z","2026-10-29T10:55:39.916451864Z",[11522],{"type":3467,"score":3468},[11524,11526,11528,11530,11532,11533],{"type":3471,"url":11525},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-mrfp-p49p-3hf2",{"type":3474,"url":11527},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96640",{"type":3471,"url":11529},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10093",{"type":3471,"url":11531},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":411,"slug":11536,"dossier":47,"summary":11537,"aliases":11538,"sourceIds":11541,"published":11542,"modified":11543,"checkedAt":7,"severity":11544,"references":11547,"versionKeys":11556,"packageCount":32,"repositoryCount":765},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[11539,11540],"CVE-2026-34519","PYSEC-2026-2101",[411,11540],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[11545,11546],{"type":3467,"score":4009},{"type":3538,"score":4011},[11548,11550,11552,11554,11555],{"type":3576,"url":11549},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":3474,"url":11551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":3576,"url":11553},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":412,"slug":11558,"dossier":47,"summary":11559,"aliases":11560,"sourceIds":11563,"published":11564,"modified":11565,"checkedAt":7,"severity":11566,"references":11569,"versionKeys":11584,"packageCount":32,"repositoryCount":832},"ghsa-p3m8-78j2-g5p3-4d7419c0","NLTK: Default ENFORCE=False Disables All pathsec Security Controls",[11561,11562],"CVE-2026-62388","PYSEC-2026-3722",[412,11562],"2026-08-22T15:16:18.967Z","2026-09-02T16:00:17.572328596Z",[11567,11568],{"type":3467,"score":6805},{"type":3467,"score":6807},[11570,11572,11574,11576,11578,11579,11580,11582],{"type":3727,"url":11571},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p3m8-78j2-g5p3",{"type":3474,"url":11573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62388",{"type":3471,"url":11575},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3593",{"type":3471,"url":11577},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F155e40343cff0bf50d233e274a12e04d1428b1d9",{"type":3479,"url":3932},{"type":3471,"url":3934},{"type":3471,"url":11581},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3722.yaml",{"type":3474,"url":11583},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-insecure-default-configuration-pathsec",[3943,3944],{"id":413,"slug":11586,"dossier":47,"summary":11587,"aliases":11588,"sourceIds":11591,"published":11592,"modified":11593,"checkedAt":7,"severity":11594,"references":11596,"versionKeys":11608,"packageCount":32,"repositoryCount":832},"ghsa-p4g4-x82p-q773-9c537199","PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard",[11589,11590],"CVE-2026-102271","PYSEC-2026-4149",[413,11590],"2026-09-29T23:14:33Z","2026-10-01T17:55:49.051187883Z",[11595],{"type":3538,"score":8032},[11597,11599,11601,11603,11604,11605,11606],{"type":3471,"url":11598},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",{"type":3474,"url":11600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102271",{"type":3471,"url":11602},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F2798504fa2663364573cf2d1043d8d7fef389499",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":11607},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-p4g4-x82p-q773",[3911,3912,3913],{"id":414,"slug":11610,"dossier":47,"summary":11611,"aliases":11612,"sourceIds":11615,"published":11616,"modified":11617,"checkedAt":7,"severity":11618,"references":11620,"versionKeys":11637,"packageCount":32,"repositoryCount":832},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[11613,11614],"CVE-2026-54293","PYSEC-2026-2078",[414,11614],"2026-06-16T14:34:15Z","2026-09-10T03:51:09.128527813Z",[11619],{"type":3538,"score":5482},[11621,11623,11625,11627,11628,11630,11632,11633,11635],{"type":3727,"url":11622},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":3474,"url":11624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":3576,"url":11626},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":3471,"url":4779},{"type":3471,"url":11629},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3938,"url":11631},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":3479,"url":3932},{"type":3471,"url":11634},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":3471,"url":11636},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3943,3944],{"id":415,"slug":11639,"dossier":47,"summary":11640,"aliases":11641,"sourceIds":11644,"published":11645,"modified":11646,"checkedAt":7,"severity":11647,"references":11651,"versionKeys":11663,"packageCount":32,"repositoryCount":822},"ghsa-p4rw-rvv2-7xwr-ad10f74d","NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement",[11642,11643],"CVE-2026-79676","PYSEC-2026-3737",[415,11643],"2026-08-25T16:17:28.177Z","2026-09-08T17:00:04.101709807Z",[11648,11649],{"type":3467,"score":5480},{"type":3467,"score":11650},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[11652,11654,11656,11657,11658,11659,11661],{"type":3727,"url":11653},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4rw-rvv2-7xwr",{"type":3474,"url":11655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79676",{"type":3471,"url":8884},{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":11660},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3737.yaml",{"type":3474,"url":11662},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-path-traversal-via-symlink-bypass",[4416,3943,3944],{"id":416,"slug":11665,"dossier":47,"summary":11666,"aliases":11667,"sourceIds":11670,"published":11671,"modified":11672,"checkedAt":7,"severity":11673,"references":11675,"versionKeys":11684,"packageCount":32,"repositoryCount":744},"ghsa-p4wg-p73j-c528-fd1a8a19","Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)",[11668,11669],"BIT-pillow-2026-112895","CVE-2026-112895",[416],"2026-10-20T20:50:49Z","2026-10-26T08:55:38.434240536Z",[11674],{"type":3467,"score":3851},[11676,11678,11680,11682,11683],{"type":3471,"url":11677},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p4wg-p73j-c528",{"type":3474,"url":11679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112895",{"type":3471,"url":11681},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe2ae7eacad6de68c37eb28b633a97bebacf2c5bf",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":417,"slug":11686,"dossier":47,"summary":11687,"aliases":11688,"sourceIds":11692,"published":11693,"modified":11694,"checkedAt":7,"severity":11695,"references":11697,"versionKeys":11712,"packageCount":32,"repositoryCount":784},"ghsa-p58f-9548-mpm2-3c2c8280","virtualenv bash and fish activation scripts execute commands embedded in paths",[11689,11690,11691],"BIT-virtualenv-2026-102925","CVE-2026-102925","PYSEC-2026-4013",[417,11691],"2026-09-18T04:37:14Z","2026-10-06T15:25:40.633713827Z",[11696],{"type":3538,"score":5898},[11698,11700,11702,11704,11706,11708,11709,11711],{"type":3471,"url":11699},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-p58f-9548-mpm2",{"type":3474,"url":11701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102925",{"type":3471,"url":11703},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3252",{"type":3576,"url":11705},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002F4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6",{"type":3471,"url":11707},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4013.yaml",{"type":3479,"url":4297},{"type":3471,"url":11710},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.7.13",{"type":3479,"url":5572},[4301,4302,4303,4304,4305],{"id":418,"slug":11714,"dossier":47,"summary":11715,"aliases":11716,"sourceIds":11720,"published":11721,"modified":11722,"checkedAt":7,"severity":11723,"references":11725,"versionKeys":11735,"packageCount":32,"repositoryCount":744},"ghsa-p8hx-v2p6-rp84-525428cb","Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek \u002F DcxImageFile.seek)",[11717,11718,11719],"BIT-pillow-2026-96636","CVE-2026-96636","PYSEC-2026-4337",[418,11719],"2026-10-21T21:20:31.760Z","2026-10-29T10:55:49.521326948Z",[11724],{"type":3538,"score":3604},[11726,11728,11730,11732,11733,11734],{"type":3474,"url":11727},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p8hx-v2p6-rp84",{"type":3474,"url":11729},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96636",{"type":3938,"url":11731},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10011",{"type":3576,"url":6083},{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":419,"slug":11737,"dossier":47,"summary":11738,"aliases":11739,"sourceIds":11743,"published":11744,"modified":11745,"checkedAt":7,"severity":11746,"references":11749,"versionKeys":11763,"packageCount":32,"repositoryCount":32},"ghsa-p944-4xh2-x776-59be8a40","Docling: Crafted DoclingDocument JSON embeds local image files into converted output",[11740,11741,11742],"CVE-2026-105748","PYSEC-2026-4208","PYSEC-2026-4213",[419,11741],"2026-10-07T20:41:08Z","2026-10-15T14:55:52.070332506Z",[11747],{"type":3538,"score":11748},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[11750,11752,11754,11756,11758,11759,11760,11761],{"type":3471,"url":11751},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-p944-4xh2-x776",{"type":3474,"url":11753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-105748",{"type":3471,"url":11755},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F4417",{"type":3471,"url":11757},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fcommit\u002Fd4bb776884aba9aa3132f54773f420853cf7afe4",{"type":3479,"url":4353},{"type":3471,"url":4355},{"type":3479,"url":7898},{"type":3474,"url":11762},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-p944-4xh2-x776",[4357],{"id":420,"slug":11765,"dossier":47,"summary":11766,"aliases":11767,"sourceIds":11770,"published":11771,"modified":11772,"checkedAt":7,"severity":11773,"references":11776,"versionKeys":11785,"packageCount":32,"repositoryCount":765},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[11768,11769],"CVE-2026-34515","PYSEC-2026-2097",[420,11769],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[11774,11775],{"type":3467,"score":10298},{"type":3538,"score":5482},[11777,11779,11781,11783,11784],{"type":3576,"url":11778},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":3474,"url":11780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":3576,"url":11782},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":421,"slug":11787,"dossier":47,"summary":11788,"aliases":11789,"sourceIds":11791,"published":11792,"modified":11793,"checkedAt":7,"severity":11794,"references":11796,"versionKeys":11808,"packageCount":32,"repositoryCount":754},"ghsa-pcg2-g6cj-q92c-613600e5","Tornado: Quadratic CPU usage when parsing HTTP headers with line folding",[11790],"CVE-2026-116577",[421],"2026-10-28T22:43:41Z","2026-10-28T23:00:04.070057045Z",[11795],{"type":3538,"score":3752},[11797,11799,11801,11803,11805,11806],{"type":3471,"url":11798},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pcg2-g6cj-q92c",{"type":3474,"url":11800},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116577",{"type":3471,"url":11802},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3765",{"type":3471,"url":11804},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F1b7a1dc9f340f52de929852e8125aa12f25297c9",{"type":3479,"url":4499},{"type":3471,"url":11807},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.6.0",[4503,4504,4505,4506,4507,4508],{"id":422,"slug":11810,"dossier":47,"summary":11811,"aliases":11812,"sourceIds":11816,"published":11817,"modified":11818,"checkedAt":7,"severity":11819,"references":11823,"versionKeys":11832,"packageCount":32,"repositoryCount":744},"ghsa-pchr-8j38-3x4p-42f3b4df","Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read",[11813,11814,11815],"BIT-pillow-2026-112896","CVE-2026-112896","PYSEC-2026-4334",[422,11815],"2026-10-19T22:17:09.760Z","2026-10-28T11:10:41.233140457Z",[11820,11821],{"type":3467,"score":8435},{"type":3538,"score":11822},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[11824,11826,11828,11830,11831],{"type":3727,"url":11825},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pchr-8j38-3x4p",{"type":3474,"url":11827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112896",{"type":3576,"url":11829},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd03dc3c587a9b0bdc9e4304d70d59a635a87b742",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":423,"slug":11834,"dossier":47,"summary":11835,"aliases":11836,"sourceIds":11840,"published":11841,"modified":11842,"checkedAt":7,"severity":11843,"references":11846,"versionKeys":11859,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[11837,11838,11839],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[423,11839],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[11844,11845],{"type":3538,"score":3752},{"type":3538,"score":3652},[11847,11849,11851,11853,11855,11857,11858],{"type":3727,"url":11848},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":3474,"url":11850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":3576,"url":11852},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":3576,"url":11854},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":3471,"url":11856},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":3479,"url":3480},{"type":3474,"url":6161},[3489,3490,3491,3492],{"id":424,"slug":11861,"dossier":47,"summary":11862,"aliases":11863,"sourceIds":11866,"published":10833,"modified":11867,"checkedAt":7,"severity":11868,"references":11871,"versionKeys":11884,"packageCount":32,"repositoryCount":869},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[11864,11865],"CVE-2025-3777","PYSEC-2026-1986",[424,11865],"2026-09-10T03:50:26.198077196Z",[11869],{"type":3538,"score":11870},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[11872,11874,11876,11877,11879,11881,11882],{"type":3474,"url":11873},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":3471,"url":11875},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":3479,"url":3725},{"type":3471,"url":11878},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":3471,"url":11880},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":3479,"url":4198},{"type":3474,"url":11883},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[3732,3733,3734],{"id":425,"slug":11886,"dossier":47,"summary":11887,"aliases":11888,"sourceIds":11892,"published":11893,"modified":11894,"checkedAt":7,"severity":11895,"references":11897,"versionKeys":11908,"packageCount":32,"repositoryCount":4731},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[11889,11890,11891],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[425,11891],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[11896],{"type":3538,"score":3652},[11898,11900,11902,11904,11906,11907],{"type":3727,"url":11899},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":3474,"url":11901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":3576,"url":11903},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":3471,"url":11905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":3479,"url":3480},{"type":3474,"url":4729},[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":426,"slug":11910,"dossier":47,"summary":11911,"aliases":11912,"sourceIds":11915,"published":11916,"modified":11917,"checkedAt":7,"severity":11918,"references":11920,"versionKeys":11935,"packageCount":32,"repositoryCount":869},"ghsa-php9-fj8v-98fj-fa6380ff","pypdf: Possible long runtimes when generating appearance streams",[11913,11914],"CVE-2026-102998","PYSEC-2026-4157",[426,11914],"2026-10-01T15:07:21Z","2026-10-01T17:55:51.350316142Z",[11919],{"type":3467,"score":3851},[11921,11923,11925,11927,11929,11930,11932,11933],{"type":3471,"url":11922},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-php9-fj8v-98fj",{"type":3474,"url":11924},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102998",{"type":3471,"url":11926},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4087",{"type":3471,"url":11928},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F959467a9b95be83e2dc5ae873ece5f371263ede7",{"type":3479,"url":3514},{"type":3471,"url":11931},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.19.0",{"type":3479,"url":3518},{"type":3474,"url":11934},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-php9-fj8v-98fj",[3524,3525,3526],{"id":427,"slug":11937,"dossier":47,"summary":11938,"aliases":11939,"sourceIds":11942,"published":11943,"modified":11944,"checkedAt":7,"severity":11945,"references":11947,"versionKeys":11956,"packageCount":32,"repositoryCount":34},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[11940,11941],"CVE-2026-42561","PYSEC-2026-3039",[427,11941],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[11946],{"type":3538,"score":3652},[11948,11950,11952,11953,11954],{"type":3471,"url":11949},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":3474,"url":11951},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":3479,"url":5596},{"type":3479,"url":5598},{"type":3474,"url":11955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[5884,5885,5602],{"id":428,"slug":11958,"dossier":47,"summary":11959,"aliases":11960,"sourceIds":11963,"published":11964,"modified":11965,"checkedAt":7,"severity":11966,"references":11968,"versionKeys":11980,"packageCount":32,"repositoryCount":784},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[11961,11962],"CVE-2025-50181","PYSEC-2026-1999",[428,11962],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[11967],{"type":3538,"score":4801},[11969,11971,11973,11975,11976,11977,11978],{"type":3471,"url":11970},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":3474,"url":11972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":3576,"url":11974},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":3479,"url":4075},{"type":3471,"url":4811},{"type":3479,"url":4077},{"type":3474,"url":11979},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[4079,4080,4081,4082],{"id":429,"slug":11982,"dossier":47,"summary":11983,"aliases":11984,"sourceIds":11986,"published":11987,"modified":11988,"checkedAt":7,"severity":11989,"references":11992,"versionKeys":12001,"packageCount":32,"repositoryCount":3883},"ghsa-pqxq-w44r-73xw-f260bc82","AIOHTTP: Pure-Python parser request smuggling",[11985],"CVE-2026-111750",[429],"2026-10-20T19:52:21Z","2026-10-20T20:00:04.694820004Z",[11990],{"type":3467,"score":11991},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:L\u002FSA:L",[11993,11995,11997,11999,12000],{"type":3471,"url":11994},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-pqxq-w44r-73xw",{"type":3474,"url":11996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111750",{"type":3471,"url":11998},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9b27347e61454d9f8ca2055f4c67a37dee336e83",{"type":3479,"url":3795},{"type":3471,"url":3879},[3799,3800,3801,3802,3803,3804,3805,3806,3807,3881,3882],{"id":430,"slug":12003,"dossier":47,"summary":12004,"aliases":12005,"sourceIds":12008,"published":12009,"modified":12010,"checkedAt":7,"severity":12011,"references":12014,"versionKeys":12025,"packageCount":32,"repositoryCount":8514},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[12006,12007],"CVE-2025-67724","PYSEC-2025-265",[430,12007],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[12012,12013],{"type":3538,"score":6932},{"type":3538,"score":9950},[12015,12017,12019,12021,12023,12024],{"type":3474,"url":12016},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":3474,"url":12018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":3576,"url":12020},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":3471,"url":12022},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":3479,"url":4499},{"type":3474,"url":8512},[4503,4504,4505],{"id":431,"slug":12027,"dossier":47,"summary":12028,"aliases":12029,"sourceIds":12031,"published":12032,"modified":12033,"checkedAt":7,"severity":12034,"references":12036,"versionKeys":12040,"packageCount":32,"repositoryCount":765},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[12030],"CVE-2026-91992",[431],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[12035],{"type":3538,"score":5478},[12037,12039],{"type":3471,"url":12038},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":3479,"url":4499},[4503,4504,4505,4506,4507],{"id":432,"slug":12042,"dossier":47,"summary":12043,"aliases":12044,"sourceIds":12046,"published":12047,"modified":12048,"checkedAt":7,"severity":12049,"references":12052,"versionKeys":12067,"packageCount":32,"repositoryCount":754},"ghsa-pw9p-v7r6-gx4p-86e36276","Tornado: Open redirect in RedirectHandler via protocol-relative URLs",[12045],"CVE-2026-116578",[432],"2026-10-28T22:43:45Z","2026-10-28T23:00:04.066537287Z",[12050],{"type":3467,"score":12051},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:L\u002FSA:N",[12053,12055,12057,12059,12061,12063,12065,12066],{"type":3471,"url":12054},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw9p-v7r6-gx4p",{"type":3474,"url":12056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-116578",{"type":3471,"url":12058},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3786",{"type":3471,"url":12060},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F940ea725bdd9bc68231d68a105eef17ea6e11233",{"type":3471,"url":12062},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fcc75ab0eb3af459c714895a49f682ad354f50117",{"type":3471,"url":12064},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fccb6a2e5482f17997efd4a74b8200d5b4babc035",{"type":3479,"url":4499},{"type":3471,"url":11807},[4503,4504,4505,4506,4507,4508],{"id":433,"slug":12069,"dossier":47,"summary":12070,"aliases":12071,"sourceIds":12075,"published":12076,"modified":12077,"checkedAt":7,"severity":12078,"references":12081,"versionKeys":12093,"packageCount":32,"repositoryCount":4084},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[12072,12073,12074],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[433,12074],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[12079,12080],{"type":3467,"score":8527},{"type":3538,"score":5898},[12082,12083,12085,12087,12089,12091,12092],{"type":3471,"url":8531},{"type":3576,"url":12084},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":3474,"url":12086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":3576,"url":12088},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":3576,"url":12090},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":3479,"url":3480},{"type":3474,"url":6113},[3484,3485,3486,3487,3488,3489,3490,3491],{"id":434,"slug":12095,"dossier":47,"summary":12096,"aliases":12097,"sourceIds":12098,"published":12099,"modified":12100,"checkedAt":7,"severity":12101,"references":12103,"versionKeys":12110,"packageCount":32,"repositoryCount":832},"ghsa-pxh4-856f-4h89-682cbd7f","PyJWT: HS256\u002F384\u002F512 verify accepts empty HMAC key via oct JWK (PyJWK\u002FPyJWKClient) enabling token forgery",[],[434],"2026-10-22T15:48:04Z","2026-10-22T16:00:09.127222029Z",[12102],{"type":3538,"score":8032},[12104,12106,12108,12109],{"type":3471,"url":12105},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-pxh4-856f-4h89",{"type":3471,"url":12107},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002Faf8181ca0bec5e6b372fbba9afbe23702b787ceb",{"type":3479,"url":3903},{"type":3471,"url":3905},[3911,3912,3913],{"id":435,"slug":12112,"dossier":47,"summary":12113,"aliases":12114,"sourceIds":12117,"published":12118,"modified":12119,"checkedAt":7,"severity":12120,"references":12123,"versionKeys":12138,"packageCount":32,"repositoryCount":32},"ghsa-q29v-xc37-wh5m-9bf51ff7","Docling: Unsafe URI and Path Handling in HTML Backend",[12115,12116],"CVE-2026-47214","PYSEC-2026-2146",[435,12116],"2026-06-03T21:15:02Z","2026-10-19T20:00:04.717120532Z",[12121],{"type":3538,"score":12122},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[12124,12126,12128,12130,12132,12133,12134,12136],{"type":3576,"url":12125},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-q29v-xc37-wh5m",{"type":3474,"url":12127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47214",{"type":3471,"url":12129},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F3400",{"type":3471,"url":12131},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fpull\u002F3407",{"type":3479,"url":4353},{"type":3471,"url":8755},{"type":3576,"url":12135},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Freleases\u002Ftag\u002Fv2.94.0",{"type":3471,"url":12137},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2146.yaml",[4357],{"id":436,"slug":12140,"dossier":47,"summary":12141,"aliases":12142,"sourceIds":12145,"published":10833,"modified":12146,"checkedAt":7,"severity":12147,"references":12149,"versionKeys":12160,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[12143,12144],"CVE-2025-3263","PYSEC-2026-1987",[436,12144],"2026-07-07T17:56:57.889099913Z",[12148],{"type":3538,"score":5130},[12150,12152,12153,12154,12155,12157,12158],{"type":3474,"url":12151},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":3471,"url":10841},{"type":3471,"url":10843},{"type":3479,"url":3725},{"type":3471,"url":12156},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":3479,"url":4198},{"type":3474,"url":12159},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[3732],{"id":437,"slug":12162,"dossier":47,"summary":12163,"aliases":12164,"sourceIds":12167,"published":12168,"modified":12169,"checkedAt":7,"severity":12170,"references":12173,"versionKeys":12186,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[12165,12166],"CVE-2024-56326","PYSEC-2026-1475",[437,12166],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[12171,12172],{"type":3538,"score":6540},{"type":3467,"score":8795},[12174,12176,12178,12180,12181,12182,12183,12184],{"type":3471,"url":12175},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":3474,"url":12177},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":3576,"url":12179},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":3479,"url":8804},{"type":3471,"url":10099},{"type":3471,"url":8806},{"type":3479,"url":8810},{"type":3474,"url":12185},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[8814],{"id":438,"slug":12188,"dossier":47,"summary":12189,"aliases":12190,"sourceIds":12193,"published":12194,"modified":12195,"checkedAt":7,"severity":12196,"references":12198,"versionKeys":12206,"packageCount":32,"repositoryCount":744},"ghsa-q45j-58j2-45rg-cd238628","Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips",[12191,12192],"BIT-pillow-2026-112897","CVE-2026-112897",[438],"2026-10-20T20:52:43Z","2026-10-26T08:56:08.265781051Z",[12197],{"type":3467,"score":6805},[12199,12201,12203,12204,12205],{"type":3471,"url":12200},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-q45j-58j2-45rg",{"type":3474,"url":12202},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112897",{"type":3471,"url":8442},{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":439,"slug":12208,"dossier":47,"summary":12209,"aliases":12210,"sourceIds":12213,"published":12214,"modified":12215,"checkedAt":7,"severity":12216,"references":12219,"versionKeys":12225,"packageCount":32,"repositoryCount":744},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[12211,12212],"CVE-2026-44431","PYSEC-2026-141",[439,12212],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[12217,12218],{"type":3538,"score":6300},{"type":3467,"score":8326},[12220,12222,12224],{"type":3474,"url":12221},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":3474,"url":12223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":3479,"url":4075},[4079,4080,4081,4082,4083,7494],{"id":440,"slug":12227,"dossier":47,"summary":12228,"aliases":12229,"sourceIds":12233,"published":12234,"modified":12235,"checkedAt":7,"severity":12236,"references":12240,"versionKeys":12258,"packageCount":32,"repositoryCount":6216},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[12230,12231,12232],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[440],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[12237,12238],{"type":3538,"score":5208},{"type":3467,"score":12239},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[12241,12243,12245,12247,12249,12251,12252,12254,12256],{"type":3474,"url":12242},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":3471,"url":12244},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":3471,"url":12246},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":3471,"url":12248},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":3471,"url":12250},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":3479,"url":4161},{"type":3471,"url":12253},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":3471,"url":12255},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":3471,"url":12257},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[4173,4174,4175,6209,6210,6211,6212,6213,6214,6215],{"id":441,"slug":12260,"dossier":47,"summary":12261,"aliases":12262,"sourceIds":12264,"published":12265,"modified":12266,"checkedAt":7,"severity":12267,"references":12269,"versionKeys":12276,"packageCount":32,"repositoryCount":869},"ghsa-qfv9-64jg-mh7p-d1cf78d0","pypdf: Possible infinite loop in PdfWriter.find_outline_item",[12263],"CVE-2026-113792",[441],"2026-10-21T16:55:35Z","2026-10-21T17:00:06.238658983Z",[12268],{"type":3467,"score":4316},[12270,12272,12273,12274,12275],{"type":3471,"url":12271},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qfv9-64jg-mh7p",{"type":3471,"url":8139},{"type":3471,"url":8141},{"type":3479,"url":3514},{"type":3471,"url":8144},[3524,3525,3526],{"id":442,"slug":12278,"dossier":47,"summary":12279,"aliases":12280,"sourceIds":12283,"published":12284,"modified":12285,"checkedAt":7,"severity":12286,"references":12289,"versionKeys":12302,"packageCount":32,"repositoryCount":765},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[12281,12282],"CVE-2026-31958","PYSEC-2026-140",[442,12282],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[12287,12288],{"type":3538,"score":3652},{"type":3467,"score":3851},[12290,12292,12294,12296,12298,12299,12300],{"type":3474,"url":12291},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":3474,"url":12293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":3471,"url":12295},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":3471,"url":12297},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":3479,"url":4499},{"type":3471,"url":6943},{"type":3471,"url":12301},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[4503,4504,4505,4506],{"id":443,"slug":12304,"dossier":47,"summary":12305,"aliases":12306,"sourceIds":12309,"published":12310,"modified":12311,"checkedAt":7,"severity":12312,"references":12315,"versionKeys":12329,"packageCount":32,"repositoryCount":6216},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[12307,12308],"CVE-2026-22701","PYSEC-2026-1374",[443,12308],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[12313],{"type":3538,"score":12314},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[12316,12318,12320,12322,12324,12325,12327],{"type":3471,"url":12317},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":3474,"url":12319},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":3471,"url":12321},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":3471,"url":12323},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":3479,"url":5459},{"type":3479,"url":12326},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":3474,"url":12328},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[6436,6437,6438,6439],{"id":444,"slug":12331,"dossier":47,"summary":12332,"aliases":12333,"sourceIds":12336,"published":12337,"modified":12338,"checkedAt":7,"severity":12339,"references":12342,"versionKeys":12353,"packageCount":32,"repositoryCount":784},"ghsa-qmx5-4p3x-wvqf-aef88856","virtualenv: Venv configuration readback can reinterpret path boundaries",[12334,12335],"BIT-virtualenv-2026-113715","CVE-2026-113715",[444],"2026-10-23T22:20:43Z","2026-10-29T10:55:39.718166145Z",[12340],{"type":3467,"score":12341},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[12343,12345,12347,12349,12351,12352],{"type":3471,"url":12344},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-qmx5-4p3x-wvqf",{"type":3474,"url":12346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113715",{"type":3471,"url":12348},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3426",{"type":3471,"url":12350},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fb0008a58885ded9227faf8f910c6c402712c750a",{"type":3479,"url":4297},{"type":3471,"url":4299},[4301,4302,4303,4304,4305],{"id":445,"slug":12355,"dossier":47,"summary":12356,"aliases":12357,"sourceIds":12360,"published":12361,"modified":12362,"checkedAt":7,"severity":12363,"references":12365,"versionKeys":12378,"packageCount":32,"repositoryCount":103},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[12358,12359],"CVE-2026-33123","PYSEC-2026-3023",[445,12359],"2026-03-18T16:17:31Z","2026-09-10T03:51:00.643708515Z",[12364],{"type":3467,"score":3541},[12366,12368,12370,12372,12373,12375,12376],{"type":3471,"url":12367},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":3474,"url":12369},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":3471,"url":12371},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":3479,"url":3514},{"type":3471,"url":12374},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":3479,"url":3518},{"type":3474,"url":12377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[3524,3525],{"id":446,"slug":12380,"dossier":47,"summary":12381,"aliases":12382,"sourceIds":12385,"published":12386,"modified":12387,"checkedAt":7,"severity":12388,"references":12391,"versionKeys":12405,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[12383,12384],"CVE-2025-2099","PYSEC-2025-40",[446,12384],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[12389,12390],{"type":3538,"score":5130},{"type":3538,"score":3652},[12392,12394,12396,12398,12399,12401,12403],{"type":3474,"url":12393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":3471,"url":12395},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":3576,"url":12397},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":3479,"url":3725},{"type":3471,"url":12400},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":3471,"url":12402},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":3474,"url":12404},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[3732],{"id":447,"slug":12407,"dossier":47,"summary":12408,"aliases":12409,"sourceIds":12412,"published":12413,"modified":12414,"checkedAt":7,"severity":12415,"references":12417,"versionKeys":12432,"packageCount":32,"repositoryCount":869},"ghsa-qv6h-rv94-w285-29ac1d93","pypdf: Possible large memory usage when retrieving Roman page labels",[12410,12411],"CVE-2026-102993","PYSEC-2026-4158",[447,12411],"2026-10-01T15:03:45Z","2026-10-01T17:56:17.149212800Z",[12416],{"type":3467,"score":3851},[12418,12420,12422,12424,12426,12427,12429,12430],{"type":3471,"url":12419},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qv6h-rv94-w285",{"type":3474,"url":12421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102993",{"type":3471,"url":12423},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4047",{"type":3471,"url":12425},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F89db7c4fe9315ecc964bfdf05a4e8c4b94175163",{"type":3479,"url":3514},{"type":3471,"url":12428},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.17.0",{"type":3479,"url":3518},{"type":3474,"url":12431},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qv6h-rv94-w285",[3524,3525,3526],{"id":448,"slug":12434,"dossier":47,"summary":12435,"aliases":12436,"sourceIds":12439,"published":12440,"modified":12441,"checkedAt":7,"severity":12442,"references":12445,"versionKeys":12454,"packageCount":32,"repositoryCount":832},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[12437,12438],"CVE-2026-12075","PYSEC-2026-3583",[448,12438],"2026-07-31T16:51:29Z","2026-09-10T03:50:53.081739885Z",[12443],{"type":3538,"score":12444},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[12446,12448,12449,12450,12452],{"type":3471,"url":12447},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3479,"url":3932},{"type":3479,"url":5650},{"type":3474,"url":12451},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":3474,"url":12453},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[3943,3944],{"id":449,"slug":12456,"dossier":47,"summary":12457,"aliases":12458,"sourceIds":12461,"published":12462,"modified":12463,"checkedAt":7,"severity":12464,"references":12467,"versionKeys":12486,"packageCount":32,"repositoryCount":822},"ghsa-qx2g-xrx7-vfh8-91db951d","NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking",[12459,12460],"CVE-2026-72818","PYSEC-2026-3870",[449,12460],"2026-08-21T00:31:23Z","2026-09-10T12:25:44.300334208Z",[12465,12466],{"type":3538,"score":3652},{"type":3467,"score":3851},[12468,12470,12472,12474,12476,12477,12479,12481,12483,12484],{"type":3474,"url":12469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-72818",{"type":3471,"url":12471},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fissues\u002F3704",{"type":3471,"url":12473},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3701",{"type":3471,"url":12475},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fe092ed52eccae642304448bffc8d23cb301f85c1",{"type":3479,"url":3932},{"type":3471,"url":12478},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F3.9.4\u002Fnltk\u002Ftokenize\u002Fcasual.py",{"type":3471,"url":12480},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002Fv3.10.1",{"type":3471,"url":12482},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-tweettokenizer-url-pattern-backtracks-catastrophically-on-naked-domain-like-input",{"type":3479,"url":5650},{"type":3474,"url":12485},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qx2g-xrx7-vfh8",[4416,3943,3944],{"id":450,"slug":12488,"dossier":47,"summary":10480,"aliases":12489,"sourceIds":12492,"published":12493,"modified":12494,"checkedAt":7,"severity":12495,"references":12499,"versionKeys":12513,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[12490,12491],"CVE-2024-11392","PYSEC-2024-227",[450,12491],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[12496,12498],{"type":3538,"score":12497},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":3538,"score":3674},[12500,12502,12503,12504,12505,12507,12509,12511],{"type":3474,"url":12501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":3471,"url":10495},{"type":3471,"url":10497},{"type":3479,"url":3725},{"type":3471,"url":12506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":3471,"url":12508},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":3474,"url":12510},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":3474,"url":12512},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[3732],{"id":451,"slug":12515,"dossier":47,"summary":12516,"aliases":12517,"sourceIds":12520,"published":12521,"modified":12522,"checkedAt":7,"severity":12523,"references":12527,"versionKeys":12536,"packageCount":32,"repositoryCount":32},"ghsa-r3xg-rg9j-67fv-878d1feb","Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend",[12518,12519],"CVE-2026-44018","PYSEC-2026-2144",[451,12519],"2026-06-03T21:13:32Z","2026-07-21T15:15:50.260072276Z",[12524,12526],{"type":3538,"score":12525},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":3538,"score":4919},[12528,12530,12532,12533,12534],{"type":3576,"url":12529},"https:\u002F\u002Fgithub.com\u002Fdocling-project\u002Fdocling\u002Fsecurity\u002Fadvisories\u002FGHSA-r3xg-rg9j-67fv",{"type":3474,"url":12531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44018",{"type":3479,"url":4353},{"type":3474,"url":8755},{"type":3471,"url":12535},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fdocling\u002FPYSEC-2026-2144.yaml",[4357],{"id":452,"slug":12538,"dossier":47,"summary":12539,"aliases":12540,"sourceIds":12542,"published":12543,"modified":12544,"checkedAt":7,"severity":12545,"references":12547,"versionKeys":12558,"packageCount":32,"repositoryCount":754},"ghsa-r4j5-9xpp-3985-880dec7e","Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks",[12541],"CVE-2026-115927",[452],"2026-10-28T22:43:50Z","2026-10-28T23:00:04.082411607Z",[12546],{"type":3538,"score":3752},[12548,12550,12552,12554,12556,12557],{"type":3471,"url":12549},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-r4j5-9xpp-3985",{"type":3474,"url":12551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-115927",{"type":3471,"url":12553},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3773",{"type":3471,"url":12555},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fceab33581489751a66fba8566ad6d5960d4b01c8",{"type":3479,"url":4499},{"type":3471,"url":11807},[4503,4504,4505,4506,4507,4508],{"id":453,"slug":12560,"dossier":47,"summary":12561,"aliases":12562,"sourceIds":12565,"published":12566,"modified":12567,"checkedAt":7,"severity":12568,"references":12574,"versionKeys":12589,"packageCount":32,"repositoryCount":832},"ghsa-r6gq-whwq-mvg9-34c83a12","NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root",[12563,12564],"CVE-2026-70626","PYSEC-2026-3732",[453,12564],"2026-08-22T15:16:21.100Z","2026-09-08T15:30:07.726015360Z",[12569,12571,12572],{"type":3538,"score":12570},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":3467,"score":8527},{"type":3467,"score":12573},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[12575,12577,12579,12580,12582,12583,12585,12587],{"type":3727,"url":12576},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-r6gq-whwq-mvg9",{"type":3474,"url":12578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-70626",{"type":3471,"url":6842},{"type":3471,"url":12581},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1b0e519e2324bc1a273d56edee63e44d0ad85b48",{"type":3479,"url":3932},{"type":3471,"url":12584},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.4",{"type":3471,"url":12586},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3732.yaml",{"type":3474,"url":12588},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-symlink-escape-via-corpusreader",[3943,3944],{"id":454,"slug":12591,"dossier":47,"summary":12592,"aliases":12593,"sourceIds":12596,"published":12597,"modified":12598,"checkedAt":7,"severity":12599,"references":12601,"versionKeys":12613,"packageCount":32,"repositoryCount":32},"ghsa-r6x4-923q-g947-b796420c","PyJWT BOM Bypass",[12594,12595],"CVE-2026-102272","PYSEC-2026-4150",[454,12595],"2026-09-29T23:14:00Z","2026-10-01T17:56:05.452379838Z",[12600],{"type":3538,"score":8032},[12602,12604,12606,12608,12609,12610,12611],{"type":3471,"url":12603},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-r6x4-923q-g947",{"type":3474,"url":12605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102272",{"type":3471,"url":12607},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F180783930de91876bc0d601f826a1f2956057291",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":12612},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r6x4-923q-g947",[3912],{"id":455,"slug":12615,"dossier":47,"summary":12616,"aliases":12617,"sourceIds":12621,"published":12622,"modified":12623,"checkedAt":7,"severity":12624,"references":12627,"versionKeys":12641,"packageCount":32,"repositoryCount":4084},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[12618,12619,12620],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[455,12620],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[12625,12626],{"type":3538,"score":4150},{"type":3467,"score":3541},[12628,12630,12632,12634,12636,12637,12638,12639],{"type":3471,"url":12629},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":3474,"url":12631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":3471,"url":12633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":3471,"url":12635},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":3479,"url":3480},{"type":3471,"url":6113},{"type":3479,"url":6163},{"type":3474,"url":12640},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[3484,3485,3486,3487,3488,3489,3490,3491],{"id":456,"slug":12643,"dossier":47,"summary":12644,"aliases":12645,"sourceIds":12648,"published":12649,"modified":12650,"checkedAt":7,"severity":12651,"references":12653,"versionKeys":12668,"packageCount":32,"repositoryCount":832},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[12646,12647],"CVE-2025-6051","PYSEC-2026-1988",[456,12647],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[12652],{"type":3538,"score":5130},[12654,12656,12658,12660,12662,12663,12665,12666],{"type":3474,"url":12655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":3471,"url":12657},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":3471,"url":12659},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":3471,"url":12661},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":3479,"url":3725},{"type":3471,"url":12664},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":3479,"url":4198},{"type":3474,"url":12667},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[3732,3733,3734,3735],{"id":457,"slug":12670,"dossier":47,"summary":12671,"aliases":12672,"sourceIds":12675,"published":12676,"modified":12677,"checkedAt":7,"severity":12678,"references":12681,"versionKeys":12693,"packageCount":32,"repositoryCount":832},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[12673,12674],"CVE-2026-66393","PYSEC-2026-3724",[457,12674],"2026-03-18T20:17:43Z","2026-09-10T03:50:40.818763364Z",[12679,12680],{"type":3467,"score":3541},{"type":3467,"score":7815},[12682,12684,12686,12688,12689,12691],{"type":3727,"url":12683},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":3474,"url":12685},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-66393",{"type":3471,"url":12687},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F00cdcd392142e6c745e7120c8d50a24127df5fad",{"type":3479,"url":3932},{"type":3471,"url":12690},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3724.yaml",{"type":3474,"url":12692},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-denial-of-service-via-jsontaggeddecoder",[3943,3944],{"id":458,"slug":12695,"dossier":47,"summary":12696,"aliases":12697,"sourceIds":12700,"published":12701,"modified":12702,"checkedAt":7,"severity":12703,"references":12706,"versionKeys":12715,"packageCount":32,"repositoryCount":744},"ghsa-rfgq-q3w2-pmv2-908c42cd","Pillow: Image.quantize() with empty palette leaks uninitialized stack memory",[12698,12699],"BIT-pillow-2026-112898","CVE-2026-112898",[458],"2026-10-21T20:44:07Z","2026-10-26T08:55:50.383984569Z",[12704],{"type":3467,"score":12705},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[12707,12709,12711,12713,12714],{"type":3471,"url":12708},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgq-q3w2-pmv2",{"type":3474,"url":12710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112898",{"type":3471,"url":12712},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13943c8f857b22f073d30f0ef9b725a0d255f1a4",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":459,"slug":12717,"dossier":47,"summary":12718,"aliases":12719,"sourceIds":12721,"published":12722,"modified":12723,"checkedAt":7,"severity":12724,"references":12726,"versionKeys":12737,"packageCount":32,"repositoryCount":822},"ghsa-rfpc-qcw5-3pc4-0d3cdd9c","filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker",[12720],"CVE-2026-112939",[459],"2026-10-28T21:08:45Z","2026-10-28T21:15:05.584943666Z",[12725],{"type":3538,"score":9644},[12727,12729,12731,12733,12735,12736],{"type":3471,"url":12728},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-rfpc-qcw5-3pc4",{"type":3474,"url":12730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112939",{"type":3471,"url":12732},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F836",{"type":3471,"url":12734},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Feeceaa846cbe4df72718d94c8371ca1ab8f5b3cc",{"type":3479,"url":5459},{"type":3471,"url":5461},[5463,5464,5465,5466],{"id":460,"slug":12739,"dossier":47,"summary":12740,"aliases":12741,"sourceIds":12744,"published":12745,"modified":12746,"checkedAt":7,"severity":12747,"references":12750,"versionKeys":12763,"packageCount":32,"repositoryCount":3883},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[12742,12743],"CVE-2026-25087","PYSEC-2026-113",[460,12743],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[12748],{"type":3538,"score":12749},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[12751,12753,12755,12757,12759,12761],{"type":3474,"url":12752},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":3576,"url":12754},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":3479,"url":12756},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":3471,"url":12758},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":3474,"url":12760},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":3474,"url":12762},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[12764,12765,12766,12767],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":461,"slug":12769,"dossier":47,"summary":12770,"aliases":12771,"sourceIds":12774,"published":12775,"modified":12776,"checkedAt":7,"severity":12777,"references":12782,"versionKeys":12797,"packageCount":32,"repositoryCount":832},"ghsa-rhp5-r9x4-f5g2-737c7e67","NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution",[12772,12773],"CVE-2026-78683","PYSEC-2026-3734",[461,12773],"2026-08-25T02:16:53.033Z","2026-09-08T16:45:04.193165862Z",[12778,12780],{"type":3467,"score":12779},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":3467,"score":12781},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[12783,12785,12787,12789,12791,12792,12793,12795],{"type":3727,"url":12784},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rhp5-r9x4-f5g2",{"type":3474,"url":12786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78683",{"type":3471,"url":12788},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3631",{"type":3471,"url":12790},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Ff26b3753038d937b68145daf15e9636f8451053c",{"type":3479,"url":3932},{"type":3471,"url":3934},{"type":3471,"url":12794},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3734.yaml",{"type":3474,"url":12796},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-remote-code-execution-via-unsafe-pickle-deserialization",[3943,3944],{"id":462,"slug":12799,"dossier":47,"summary":12800,"aliases":12801,"sourceIds":12805,"published":9097,"modified":12806,"checkedAt":7,"severity":12807,"references":12810,"versionKeys":12828,"packageCount":32,"repositoryCount":4084},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[12802,12803,12804],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[462],"2026-09-10T03:49:48.419046410Z",[12808,12809],{"type":3538,"score":5208},{"type":3467,"score":12239},[12811,12813,12815,12817,12819,12821,12822,12824,12826],{"type":3474,"url":12812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":3471,"url":12814},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":3471,"url":12816},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":3471,"url":12818},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":3471,"url":12820},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":3479,"url":4161},{"type":3471,"url":12823},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":3471,"url":12825},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":3471,"url":12827},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[12829,12830,12831,4173,4174,4175,6209,6210,6211,6212,6213,6214,6215],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":463,"slug":12833,"dossier":47,"summary":12834,"aliases":12835,"sourceIds":12838,"published":12839,"modified":12840,"checkedAt":7,"severity":12841,"references":12845,"versionKeys":12860,"packageCount":32,"repositoryCount":832},"ghsa-rrv8-h7p8-rx55-b07785af","NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions",[12836,12837],"CVE-2026-80205","PYSEC-2026-3750",[463,12837],"2026-08-26T11:16:39.950Z","2026-09-08T20:45:04.338061792Z",[12842,12843,12844],{"type":3538,"score":3652},{"type":3467,"score":3851},{"type":3467,"score":7815},[12846,12848,12850,12852,12854,12855,12856,12858],{"type":3727,"url":12847},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rrv8-h7p8-rx55",{"type":3474,"url":12849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80205",{"type":3471,"url":12851},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3674",{"type":3471,"url":12853},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fd8e47539317b571ab1422981f5b9653d5eae1249",{"type":3479,"url":3932},{"type":3471,"url":3934},{"type":3471,"url":12857},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3750.yaml",{"type":3474,"url":12859},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.0-redos-via-text-findall-unvalidated-regex",[3943,3944],{"id":464,"slug":12862,"dossier":47,"summary":12863,"aliases":12864,"sourceIds":12866,"published":12867,"modified":12868,"checkedAt":7,"severity":12869,"references":12871,"versionKeys":12885,"packageCount":32,"repositoryCount":832},"ghsa-rwrf-2pqf-9j8j-e3036e5e","Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas",[12865],"CVE-2026-116686",[464],"2026-10-27T21:05:29Z","2026-10-27T21:15:03.830660129Z",[12870],{"type":3538,"score":3604},[12872,12874,12876,12878,12880,12882,12883,12884],{"type":3471,"url":12873},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-rwrf-2pqf-9j8j",{"type":3471,"url":12875},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3394",{"type":3471,"url":12877},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3396",{"type":3471,"url":12879},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F5ebdfed4060d8e5b11b8e2348f86bad4d1fb8836",{"type":3471,"url":12881},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F6705402e246dc4eb1fcdf4d9902b78d3c9c36e1b",{"type":3479,"url":5676},{"type":3471,"url":5678},{"type":3471,"url":5680},[5682,5683,5684,5685],{"id":465,"slug":12887,"dossier":47,"summary":12888,"aliases":12889,"sourceIds":12892,"published":12893,"modified":12894,"checkedAt":7,"severity":12895,"references":12897,"versionKeys":12911,"packageCount":32,"repositoryCount":869},"ghsa-v247-6f48-mgcj-e78635c0","pypdf: Possible long runtimes with large amount of embedded files",[12890,12891],"CVE-2026-102999","PYSEC-2026-4159",[465,12891],"2026-10-01T15:07:35Z","2026-10-01T17:55:57.901958888Z",[12896],{"type":3467,"score":3851},[12898,12900,12902,12904,12906,12907,12908,12909],{"type":3471,"url":12899},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-v247-6f48-mgcj",{"type":3474,"url":12901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102999",{"type":3471,"url":12903},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4081",{"type":3471,"url":12905},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F6b10556d13609a68f9ed18bb29fdd8bba88eb2c3",{"type":3479,"url":3514},{"type":3471,"url":11931},{"type":3479,"url":3518},{"type":3474,"url":12910},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v247-6f48-mgcj",[3524,3525,3526],{"id":466,"slug":12913,"dossier":47,"summary":12914,"aliases":12915,"sourceIds":12918,"published":12919,"modified":12920,"checkedAt":7,"severity":12921,"references":12926,"versionKeys":12943,"packageCount":32,"repositoryCount":32},"ghsa-v492-6xx2-p57g-b1729313","Chainlit contains an authorization bypass vulnerability",[12916,12917],"CVE-2025-68492","PYSEC-2026-1238",[466,12917],"2026-01-14T09:31:21Z","2026-07-07T17:56:13.167928474Z",[12922,12924],{"type":3538,"score":12923},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":3467,"score":12925},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[12927,12929,12931,12933,12934,12936,12938,12940,12941],{"type":3474,"url":12928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68492",{"type":3471,"url":12930},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fpull\u002F2637",{"type":3471,"url":12932},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fcommit\u002F8f1153db439eca58ae5c50c8276ba6fdd311448e",{"type":3479,"url":3828},{"type":3471,"url":12935},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases",{"type":3471,"url":12937},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Freleases\u002Ftag\u002F2.8.5",{"type":3471,"url":12939},"https:\u002F\u002Fjvn.jp\u002Fen\u002Fjp\u002FJVN34964581",{"type":3479,"url":3836},{"type":3474,"url":12942},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v492-6xx2-p57g",[3840],{"id":467,"slug":12945,"dossier":47,"summary":12946,"aliases":12947,"sourceIds":12949,"published":12950,"modified":12951,"checkedAt":7,"severity":12952,"references":12954,"versionKeys":12963,"packageCount":32,"repositoryCount":822},"ghsa-v4x8-3wr5-3wq8-fa48bf99","filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files",[12948],"CVE-2026-112940",[467],"2026-10-23T21:59:08Z","2026-10-23T22:15:04.432475030Z",[12953],{"type":3538,"score":9153},[12955,12957,12959,12960,12961,12962],{"type":3471,"url":12956},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-v4x8-3wr5-3wq8",{"type":3474,"url":12958},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112940",{"type":3471,"url":8240},{"type":3471,"url":8242},{"type":3479,"url":5459},{"type":3471,"url":5461},[5463,5464,5465,5466],{"id":468,"slug":12965,"dossier":47,"summary":12966,"aliases":12967,"sourceIds":12970,"published":12971,"modified":12972,"checkedAt":7,"severity":12973,"references":12975,"versionKeys":12984,"packageCount":32,"repositoryCount":803},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[12968,12969],"CVE-2026-53540","PYSEC-2026-3040",[468,12969],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[12974],{"type":3538,"score":9493},[12976,12978,12979,12980,12982],{"type":3471,"url":12977},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3479,"url":5596},{"type":3479,"url":5598},{"type":3474,"url":12981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":3474,"url":12983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[5884,5885,5886,5602],{"id":469,"slug":12986,"dossier":47,"summary":12987,"aliases":12988,"sourceIds":12992,"published":12993,"modified":12994,"checkedAt":7,"severity":12995,"references":12997,"versionKeys":13008,"packageCount":32,"repositoryCount":4084},"ghsa-v9pv-5gc8-w2m6-ece1573e","Pillow multi-frame loaders can reuse stale native image storage after mode transitions",[12989,12990,12991],"BIT-pillow-2026-96639","CVE-2026-96639","PYSEC-2026-4339",[469,12991],"2026-10-21T21:20:32.217Z","2026-10-29T10:55:37.663049285Z",[12996],{"type":3538,"score":5295},[12998,13000,13002,13004,13006,13007],{"type":3474,"url":12999},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pv-5gc8-w2m6",{"type":3474,"url":13001},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96639",{"type":3938,"url":13003},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10105",{"type":3576,"url":13005},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F78d97d994579aef81aafe123773d525f40f2522a",{"type":3479,"url":3480},{"type":3474,"url":3482},[3486,3487,3488,3489,3490,3491,3492,3493],{"id":470,"slug":13010,"dossier":47,"summary":13011,"aliases":13012,"sourceIds":13015,"published":13016,"modified":13017,"checkedAt":7,"severity":13018,"references":13020,"versionKeys":13031,"packageCount":32,"repositoryCount":803},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[13013,13014],"CVE-2026-53537","PYSEC-2026-3041",[470,13014],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[13019],{"type":3538,"score":6592},[13021,13023,13025,13026,13028,13030],{"type":3471,"url":13022},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3474,"url":13024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":3479,"url":5596},{"type":3474,"url":13027},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":3471,"url":13029},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":3479,"url":5598},[5884,5885,5886,5602],{"id":471,"slug":13033,"dossier":47,"summary":13034,"aliases":13035,"sourceIds":13038,"published":13039,"modified":13040,"checkedAt":7,"severity":13041,"references":13043,"versionKeys":13056,"packageCount":32,"repositoryCount":34},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[13036,13037],"CVE-2026-41066","PYSEC-2026-87",[471,13037],"2026-04-21T20:38:44Z","2026-09-10T03:51:03.302383702Z",[13042],{"type":3538,"score":5482},[13044,13046,13048,13050,13052,13054],{"type":3474,"url":13045},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":3474,"url":13047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3938,"url":13049},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":3479,"url":13051},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":3471,"url":13053},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":3471,"url":13055},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[13057,13058,13059],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":472,"slug":13061,"dossier":47,"summary":13062,"aliases":13063,"sourceIds":13067,"published":9097,"modified":13068,"checkedAt":7,"severity":13069,"references":13072,"versionKeys":13087,"packageCount":32,"repositoryCount":754},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[13064,13065,13066],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[472],"2026-06-10T17:41:15.774477397Z",[13070,13071],{"type":3538,"score":5208},{"type":3467,"score":9102},[13073,13075,13076,13077,13078,13080,13081,13083,13085],{"type":3474,"url":13074},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":3471,"url":9107},{"type":3471,"url":9109},{"type":3471,"url":9111},{"type":3471,"url":13079},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":3479,"url":4161},{"type":3471,"url":13082},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":3471,"url":13084},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":3471,"url":13086},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[4173,4174,4175,6209,6210,6211,6212],{"id":473,"slug":13089,"dossier":47,"summary":13090,"aliases":13091,"sourceIds":13094,"published":13095,"modified":13096,"checkedAt":7,"severity":13097,"references":13099,"versionKeys":13114,"packageCount":32,"repositoryCount":869},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[13092,13093],"CVE-2026-59950","PYSEC-2026-3483",[473,13093],"2026-07-16T20:14:34Z","2026-09-10T03:50:53.083568399Z",[13098],{"type":3467,"score":7475},[13100,13102,13104,13106,13108,13109,13111,13112],{"type":3471,"url":13101},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":3474,"url":13103},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":3471,"url":13105},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":3471,"url":13107},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":3479,"url":5676},{"type":3471,"url":13110},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":3479,"url":7926},{"type":3474,"url":13113},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[5682,5683,5684],{"id":474,"slug":13116,"dossier":47,"summary":13117,"aliases":13118,"sourceIds":13122,"published":13123,"modified":13124,"checkedAt":7,"severity":13125,"references":13127,"versionKeys":13141,"packageCount":32,"repositoryCount":4731},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[13119,13120,13121],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[474,13121],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[13126],{"type":3467,"score":3851},[13128,13130,13132,13134,13136,13137,13138,13139],{"type":3471,"url":13129},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":3474,"url":13131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":3471,"url":13133},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":3471,"url":13135},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":3479,"url":3480},{"type":3471,"url":6161},{"type":3479,"url":6163},{"type":3474,"url":13140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":475,"slug":13143,"dossier":47,"summary":13144,"aliases":13145,"sourceIds":13148,"published":13149,"modified":13150,"checkedAt":7,"severity":13151,"references":13155,"versionKeys":13168,"packageCount":32,"repositoryCount":822},"ghsa-vp2x-qp44-57v7-6098fc6a","NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`",[13146,13147],"CVE-2026-81723","PYSEC-2026-3871",[475,13147],"2026-09-02T14:34:11Z","2026-09-10T12:25:42.010688905Z",[13152,13153],{"type":3538,"score":9493},{"type":3467,"score":13154},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[13156,13158,13160,13161,13162,13163,13165,13166],{"type":3471,"url":13157},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",{"type":3474,"url":13159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81723",{"type":3471,"url":7577},{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":13164},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-quadratic-cpu-exhaustion-via-xmlcorpusview",{"type":3479,"url":5650},{"type":3474,"url":13167},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vp2x-qp44-57v7",[4416,3943,3944],{"id":476,"slug":13170,"dossier":47,"summary":13171,"aliases":13172,"sourceIds":13175,"published":13176,"modified":13177,"checkedAt":7,"severity":13178,"references":13180,"versionKeys":13195,"packageCount":32,"repositoryCount":869},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[13173,13174],"CVE-2025-43859","PYSEC-2026-348",[476,13174],"2025-04-24T16:07:56Z","2026-10-27T16:45:03.535584040Z",[13179],{"type":3538,"score":9357},[13181,13183,13185,13187,13189,13191,13193],{"type":3471,"url":13182},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":3474,"url":13184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":3471,"url":13186},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":3471,"url":13188},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fh11\u002FPYSEC-2026-348.yaml",{"type":3479,"url":13190},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":3479,"url":13192},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":3474,"url":13194},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[13196],"pypi:h11@0.14.0",{"id":477,"slug":13198,"dossier":47,"summary":13199,"aliases":13200,"sourceIds":13203,"published":13204,"modified":13205,"checkedAt":7,"severity":13206,"references":13208,"versionKeys":13222,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[13201,13202],"CVE-2025-62707","PYSEC-2026-1833",[477,13202],"2025-10-22T19:40:47Z","2026-09-10T03:50:58.424138377Z",[13207],{"type":3467,"score":4899},[13209,13211,13213,13215,13217,13218,13219,13220],{"type":3471,"url":13210},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":3474,"url":13212},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":3471,"url":13214},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":3471,"url":13216},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":3479,"url":3514},{"type":3471,"url":10669},{"type":3479,"url":3518},{"type":3474,"url":13221},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[3524],{"id":478,"slug":13224,"dossier":47,"summary":13225,"aliases":13226,"sourceIds":13228,"published":13229,"modified":13230,"checkedAt":7,"severity":13231,"references":13233,"versionKeys":13240,"packageCount":32,"repositoryCount":744},"ghsa-vx6w-vv9f-6gvg-f0d0a86e","Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit",[13227],"CVE-2026-112899",[478],"2026-10-20T20:53:21Z","2026-10-20T21:00:04.428653055Z",[13232],{"type":3467,"score":4370},[13234,13236,13238,13239],{"type":3471,"url":13235},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vx6w-vv9f-6gvg",{"type":3471,"url":13237},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3e8cc105588d1dfe062fcada0b6058c1b5f14b65",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":479,"slug":13242,"dossier":47,"summary":13243,"aliases":13244,"sourceIds":13247,"published":13248,"modified":13249,"checkedAt":7,"severity":13250,"references":13252,"versionKeys":13262,"packageCount":32,"repositoryCount":784},"ghsa-vxj4-q4g9-crj7-3e25d39d","virtualenv bash activate runs commands from an environment name with a backslash before $",[13245,13246],"BIT-virtualenv-2026-113725","CVE-2026-113725",[479],"2026-10-21T16:49:01Z","2026-10-29T10:55:53.696944055Z",[13251],{"type":3538,"score":5898},[13253,13255,13257,13259,13260],{"type":3471,"url":13254},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-vxj4-q4g9-crj7",{"type":3474,"url":13256},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-113725",{"type":3471,"url":13258},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fc3104e02474b652832a9bbaae79f6e1696296932",{"type":3479,"url":4297},{"type":3471,"url":13261},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Freleases\u002Ftag\u002F21.14.7",[4301,4302,4303,4304,4305],{"id":480,"slug":13264,"dossier":90,"summary":13265,"aliases":13266,"sourceIds":13269,"published":13270,"modified":13271,"checkedAt":7,"severity":13272,"references":13274,"versionKeys":13286,"packageCount":32,"repositoryCount":724},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[13267,13268],"CVE-2026-97689","PYSEC-2026-4177",[480,13268],"2026-09-30T14:46:18Z","2026-10-01T17:55:57.514829071Z",[13273],{"type":3467,"score":4060},[13275,13277,13279,13281,13282,13283,13284],{"type":3471,"url":13276},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":3474,"url":13278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":3471,"url":13280},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":3479,"url":4075},{"type":3471,"url":7489},{"type":3479,"url":4077},{"type":3474,"url":13285},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",[4079,4080,4081,4082,4083,7494,7495],{"id":481,"slug":13288,"dossier":47,"summary":13289,"aliases":13290,"sourceIds":13293,"published":13294,"modified":13295,"checkedAt":7,"severity":13296,"references":13298,"versionKeys":13312,"packageCount":32,"repositoryCount":869},"ghsa-w23x-9jrw-r45c-f75c043b","pypdf: Possible large memory usage when retrieving alphabetical page labels",[13291,13292],"CVE-2026-103000","PYSEC-2026-4160",[481,13292],"2026-10-01T15:07:08Z","2026-10-01T17:56:15.557598717Z",[13297],{"type":3467,"score":3851},[13299,13301,13303,13305,13307,13308,13309,13310],{"type":3471,"url":13300},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-w23x-9jrw-r45c",{"type":3474,"url":13302},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-103000",{"type":3471,"url":13304},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4096",{"type":3471,"url":13306},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F0d8b5a8832cde1ba308b5c27567b879b7b7eed4a",{"type":3479,"url":3514},{"type":3471,"url":11931},{"type":3479,"url":3518},{"type":3474,"url":13311},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w23x-9jrw-r45c",[3524,3525,3526],{"id":482,"slug":13314,"dossier":47,"summary":13315,"aliases":13316,"sourceIds":13319,"published":13320,"modified":13321,"checkedAt":7,"severity":13322,"references":13324,"versionKeys":13336,"packageCount":32,"repositoryCount":32},"ghsa-w2cx-738m-mc7w-6741b272","PyJWT accepts public JWK containers as HMAC secrets",[13317,13318],"CVE-2026-102273","PYSEC-2026-4151",[482,13318],"2026-09-29T23:16:55Z","2026-10-01T17:56:17.439454528Z",[13323],{"type":3538,"score":8032},[13325,13327,13329,13331,13332,13333,13334],{"type":3471,"url":13326},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",{"type":3474,"url":13328},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102273",{"type":3471,"url":13330},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F801cd128528c62d9b23fcd161d1a2e1c17982f95",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":13335},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w2cx-738m-mc7w",[3912],{"id":483,"slug":13338,"dossier":47,"summary":13339,"aliases":13340,"sourceIds":13343,"published":13344,"modified":13345,"checkedAt":7,"severity":13346,"references":13349,"versionKeys":13358,"packageCount":32,"repositoryCount":765},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[13341,13342],"CVE-2026-22815","PYSEC-2026-2094",[483,13342],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[13347,13348],{"type":3467,"score":4370},{"type":3467,"score":8930},[13350,13352,13354,13356,13357],{"type":3576,"url":13351},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":3474,"url":13353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":3576,"url":13355},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":3479,"url":3795},{"type":3474,"url":4021},[3799,3800,3801,3802,3803,3804,3805,3806],{"id":484,"slug":13360,"dossier":47,"summary":13361,"aliases":13362,"sourceIds":13365,"published":13366,"modified":13367,"checkedAt":7,"severity":13368,"references":13370,"versionKeys":13381,"packageCount":32,"repositoryCount":32},"ghsa-w3fx-mc44-mf6j-8eb1f0ed","Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution",[13363,13364],"CVE-2026-45018","PYSEC-2026-3812",[484,13364],"2026-08-25T19:19:28Z","2026-09-10T12:26:01.565580392Z",[13369],{"type":3538,"score":5295},[13371,13373,13374,13375,13376,13377,13379],{"type":3471,"url":13372},"https:\u002F\u002Fgithub.com\u002FChainlit\u002Fchainlit\u002Fsecurity\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3471,"url":10421},{"type":3479,"url":3828},{"type":3471,"url":10426},{"type":3479,"url":3836},{"type":3474,"url":13378},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w3fx-mc44-mf6j",{"type":3474,"url":13380},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45018",[3840],{"id":485,"slug":13383,"dossier":47,"summary":13384,"aliases":13385,"sourceIds":13388,"published":13389,"modified":13390,"checkedAt":7,"severity":13391,"references":13396,"versionKeys":13409,"packageCount":32,"repositoryCount":822},"ghsa-w3v8-gmh9-3wv7-b77729c9","NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions",[13386,13387],"CVE-2026-80206","PYSEC-2026-3751",[485,13387],"2026-08-26T11:16:40.103Z","2026-09-08T20:45:04.333988177Z",[13392,13394],{"type":3467,"score":13393},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3467,"score":13395},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[13397,13399,13401,13403,13404,13405,13407],{"type":3727,"url":13398},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-w3v8-gmh9-3wv7",{"type":3474,"url":13400},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80206",{"type":3471,"url":13402},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F0072ea2fb8be22e038a36e887b7061bb6b9339d9",{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":13406},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3751.yaml",{"type":3474,"url":13408},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-3.10.2-regular-expression-denial-of-service-via-tgrep",[4416,3943,3944],{"id":486,"slug":13411,"dossier":47,"summary":13412,"aliases":13413,"sourceIds":13415,"published":13416,"modified":13417,"checkedAt":7,"severity":13418,"references":13421,"versionKeys":13435,"packageCount":32,"repositoryCount":832},"ghsa-w4fh-qvv9-3v23-5d99e159","Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server",[13414],"CVE-2026-116684",[486],"2026-10-27T21:06:59Z","2026-10-27T21:15:03.825987077Z",[13419],{"type":3538,"score":13420},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[13422,13424,13426,13428,13430,13432,13433,13434],{"type":3471,"url":13423},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-w4fh-qvv9-3v23",{"type":3471,"url":13425},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3447",{"type":3471,"url":13427},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F3451",{"type":3471,"url":13429},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F0c9136841ff092987a20700ff9c2c9789bda2f40",{"type":3471,"url":13431},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F8c2fa6eabacde869d75568e33b9d466b58c2f512",{"type":3479,"url":5676},{"type":3471,"url":5678},{"type":3471,"url":5680},[5682,5683,5684,5685],{"id":487,"slug":13437,"dossier":47,"summary":13438,"aliases":13439,"sourceIds":13442,"published":13443,"modified":13444,"checkedAt":7,"severity":13445,"references":13447,"versionKeys":13459,"packageCount":32,"repositoryCount":832},"ghsa-w6j9-cwv2-h6wq-1e6b5139","PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set",[13440,13441],"CVE-2026-102274","PYSEC-2026-4152",[487,13441],"2026-09-29T18:23:01Z","2026-10-01T17:55:45.889604470Z",[13446],{"type":3538,"score":5052},[13448,13450,13452,13454,13455,13456,13457],{"type":3471,"url":13449},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",{"type":3474,"url":13451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102274",{"type":3471,"url":13453},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf",{"type":3479,"url":3903},{"type":3471,"url":3905},{"type":3479,"url":3907},{"type":3474,"url":13458},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6j9-cwv2-h6wq",[3911,3912,3913],{"id":488,"slug":13461,"dossier":47,"summary":13462,"aliases":13463,"sourceIds":13466,"published":13467,"modified":13468,"checkedAt":7,"severity":13469,"references":13471,"versionKeys":13479,"packageCount":32,"repositoryCount":869},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[13464,13465],"CVE-2026-48525","PYSEC-2026-178",[488,13465],"2026-05-28T16:16:29.533Z","2026-09-10T03:50:50.801195449Z",[13470],{"type":3538,"score":3752},[13472,13474,13476,13477],{"type":3727,"url":13473},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":3474,"url":13475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":3479,"url":3903},{"type":3471,"url":13478},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[3911,3913],{"id":489,"slug":13481,"dossier":47,"summary":13482,"aliases":13483,"sourceIds":13486,"published":13487,"modified":13488,"checkedAt":7,"severity":13489,"references":13492,"versionKeys":13509,"packageCount":32,"repositoryCount":6216},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[13484,13485],"CVE-2025-68146","PYSEC-2026-1375",[489,13485],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[13490],{"type":3538,"score":13491},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[13493,13495,13497,13498,13500,13502,13504,13505,13507],{"type":3471,"url":13494},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3471,"url":13496},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":3479,"url":5459},{"type":3471,"url":13499},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":3471,"url":13501},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":3471,"url":13503},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":3479,"url":12326},{"type":3474,"url":13506},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":3474,"url":13508},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[6436,6437,6438,6439],{"id":490,"slug":13511,"dossier":47,"summary":13512,"aliases":13513,"sourceIds":13516,"published":13517,"modified":13518,"checkedAt":7,"severity":13519,"references":13522,"versionKeys":13531,"packageCount":32,"repositoryCount":744},"ghsa-w889-685w-c8fh-9dd63a47","Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",[13514,13515],"BIT-pillow-2026-112900","CVE-2026-112900",[490],"2026-10-21T19:58:44Z","2026-10-26T08:55:37.091976147Z",[13520],{"type":3467,"score":13521},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13523,13525,13527,13529,13530],{"type":3471,"url":13524},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-w889-685w-c8fh",{"type":3474,"url":13526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112900",{"type":3471,"url":13528},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa2c363141da31a265dd536c945677db4b64f3ec9",{"type":3479,"url":3480},{"type":3471,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":491,"slug":13533,"dossier":47,"summary":13534,"aliases":13535,"sourceIds":13538,"published":13539,"modified":13540,"checkedAt":7,"severity":13541,"references":13543,"versionKeys":13557,"packageCount":32,"repositoryCount":103},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[13536,13537],"CVE-2026-27025","PYSEC-2026-3024",[491,13537],"2026-02-18T22:41:13Z","2026-09-10T03:50:36.045929384Z",[13542],{"type":3467,"score":5266},[13544,13546,13548,13550,13552,13553,13554,13555],{"type":3471,"url":13545},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":3474,"url":13547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":3471,"url":13549},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":3471,"url":13551},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":3479,"url":3514},{"type":3471,"url":7875},{"type":3479,"url":3518},{"type":3474,"url":13556},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[3524,3525],{"id":492,"slug":13559,"dossier":47,"summary":13560,"aliases":13561,"sourceIds":13565,"published":13566,"modified":13567,"checkedAt":7,"severity":13568,"references":13571,"versionKeys":13609,"packageCount":32,"repositoryCount":4084},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[13562,13563,13564],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[492,13564],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[13569,13570],{"type":3538,"score":3652},{"type":3467,"score":3851},[13572,13574,13576,13578,13580,13581,13583,13585,13587,13589,13591,13593,13594,13596,13598,13600,13601,13603,13605,13607],{"type":3471,"url":13573},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":3474,"url":13575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":3471,"url":13577},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":3471,"url":13579},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":3479,"url":3480},{"type":3471,"url":13582},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":3471,"url":13584},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":3471,"url":13586},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":3474,"url":13588},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":3474,"url":13590},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":3474,"url":13592},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":3474,"url":8553},{"type":3474,"url":13595},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":3474,"url":13597},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":3474,"url":13599},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":3474,"url":4775},{"type":3474,"url":13602},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":3474,"url":13604},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":3474,"url":13606},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":3474,"url":13608},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[3484,3485,3486,3487,3488,3489,3490,3491],{"id":493,"slug":13611,"dossier":47,"summary":13612,"aliases":13613,"sourceIds":13616,"published":13617,"modified":13618,"checkedAt":7,"severity":13619,"references":13621,"versionKeys":13634,"packageCount":32,"repositoryCount":103},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[13614,13615],"CVE-2026-48735","PYSEC-2026-3025",[493,13615],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[13620],{"type":3467,"score":5266},[13622,13624,13626,13628,13629,13631,13632],{"type":3471,"url":13623},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":3474,"url":13625},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":3471,"url":13627},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":3479,"url":3514},{"type":3471,"url":13630},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":3479,"url":3518},{"type":3474,"url":13633},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[3524,3525],{"id":494,"slug":13636,"dossier":47,"summary":13637,"aliases":13638,"sourceIds":13642,"published":13643,"modified":13644,"checkedAt":7,"severity":13645,"references":13648,"versionKeys":13657,"packageCount":32,"repositoryCount":4084},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[13639,13640,13641],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[494,13641],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[13646,13647],{"type":3538,"score":4150},{"type":3467,"score":3541},[13649,13651,13653,13655,13656],{"type":3474,"url":13650},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":3474,"url":13652},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":3471,"url":13654},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":3479,"url":3480},{"type":3474,"url":6113},[3484,3485,3486,3487,3488,3489,3490,3491],{"id":495,"slug":13659,"dossier":47,"summary":13660,"aliases":13661,"sourceIds":13664,"published":13665,"modified":13666,"checkedAt":7,"severity":13667,"references":13669,"versionKeys":13682,"packageCount":32,"repositoryCount":34},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[13662,13663],"CVE-2026-24486","PYSEC-2026-1852",[495,13663],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[13668],{"type":3538,"score":10518},[13670,13672,13674,13676,13677,13679,13680],{"type":3471,"url":13671},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":3474,"url":13673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":3471,"url":13675},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":3479,"url":5596},{"type":3471,"url":13678},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":3479,"url":5598},{"type":3474,"url":13681},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[5884,5885,5602],{"id":496,"slug":13684,"dossier":47,"summary":13685,"aliases":13686,"sourceIds":13689,"published":13690,"modified":13691,"checkedAt":7,"severity":13692,"references":13694,"versionKeys":13716,"packageCount":32,"repositoryCount":765},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[13687,13688],"CVE-2026-48818","PYSEC-2026-2281",[496,13688],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[13693],{"type":3538,"score":5482},[13695,13697,13698,13700,13702,13704,13706,13708,13710,13712,13714],{"type":3474,"url":13696},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":3479,"url":7020},{"type":3471,"url":13699},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":3471,"url":13701},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":3474,"url":13703},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":3474,"url":13705},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":3474,"url":13707},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":3474,"url":13709},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3938,"url":13711},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":3576,"url":13713},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":3576,"url":13715},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[3771,3772,3773,7027,7028,7029,7241,7242,7243],{"id":497,"slug":13718,"dossier":47,"summary":10480,"aliases":13719,"sourceIds":13722,"published":10485,"modified":13723,"checkedAt":7,"severity":13724,"references":13727,"versionKeys":13741,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[13720,13721],"CVE-2024-11393","PYSEC-2024-228",[497,13721],"2026-09-10T03:50:55.987633957Z",[13725,13726],{"type":3538,"score":10489},{"type":3538,"score":3674},[13728,13730,13731,13732,13733,13735,13737,13739],{"type":3474,"url":13729},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":3471,"url":10495},{"type":3471,"url":10497},{"type":3479,"url":3725},{"type":3471,"url":13734},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":3471,"url":13736},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":3474,"url":13738},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":3474,"url":13740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[3732],{"id":498,"slug":13743,"dossier":47,"summary":13744,"aliases":13745,"sourceIds":13748,"published":13749,"modified":13750,"checkedAt":7,"severity":13751,"references":13754,"versionKeys":13766,"packageCount":32,"repositoryCount":822},"ghsa-ww6m-cw3f-q94g-c2ac9639","NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'",[13746,13747],"CVE-2026-81722","PYSEC-2026-3738",[498,13747],"2026-08-27T17:21:02.800Z","2026-09-10T03:50:54.572733114Z",[13752,13753],{"type":3467,"score":4370},{"type":3467,"score":7815},[13755,13757,13759,13760,13761,13762,13764],{"type":3727,"url":13756},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-ww6m-cw3f-q94g",{"type":3474,"url":13758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-81722",{"type":3471,"url":7577},{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":13763},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3738.yaml",{"type":3474,"url":13765},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-porterstemmer-before-3.10.3-quadratic-time-dos",[4416,3943,3944],{"id":499,"slug":13768,"dossier":47,"summary":13769,"aliases":13770,"sourceIds":13772,"published":13773,"modified":13774,"checkedAt":7,"severity":13775,"references":13777,"versionKeys":13789,"packageCount":32,"repositoryCount":103},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[13771],"CVE-2026-91991",[499],"2026-09-01T20:17:23Z","2026-09-16T03:56:00.367681644Z",[13776],{"type":3467,"score":10160},[13778,13780,13781,13783,13785,13787,13788],{"type":3471,"url":13779},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":3471,"url":7279},{"type":3471,"url":13782},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":3471,"url":13784},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":3471,"url":13786},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":3479,"url":4499},{"type":3471,"url":7286},[4507,4508],{"id":500,"slug":13791,"dossier":47,"summary":13792,"aliases":13793,"sourceIds":13796,"published":13797,"modified":13798,"checkedAt":7,"severity":13799,"references":13802,"versionKeys":13814,"packageCount":32,"repositoryCount":103},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[13794,13795],"CVE-2026-41314","PYSEC-2026-3026",[500,13795],"2026-04-16T21:30:25Z","2026-09-10T03:51:03.926113177Z",[13800,13801],{"type":3538,"score":3604},{"type":3467,"score":4999},[13803,13805,13807,13808,13809,13810,13811,13812],{"type":3471,"url":13804},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":3474,"url":13806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":3471,"url":7088},{"type":3471,"url":7090},{"type":3479,"url":3514},{"type":3471,"url":5011},{"type":3479,"url":3518},{"type":3474,"url":13813},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[3524,3525],{"id":501,"slug":13816,"dossier":47,"summary":13817,"aliases":13818,"sourceIds":13821,"published":13822,"modified":13823,"checkedAt":7,"severity":13824,"references":13828,"versionKeys":13837,"packageCount":32,"repositoryCount":832},"ghsa-x33g-cr3x-6449-e42d7ec6","PyJWT accepts inconsistent OKP x\u002Fd JWKs, causing public\u002Fprivate key identity confusion",[13819,13820],"CVE-2026-102275","PYSEC-2026-4183",[501,13820],"2026-09-28T21:17:15.857Z","2026-10-07T10:11:04.862065390Z",[13825,13826],{"type":3538,"score":5950},{"type":3538,"score":13827},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[13829,13831,13833,13835,13836],{"type":3727,"url":13830},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-x33g-cr3x-6449",{"type":3474,"url":13832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102275",{"type":3576,"url":13834},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fcommit\u002F3cd9ceec33ced359decbad75b413ad668ae6332c",{"type":3479,"url":3903},{"type":3474,"url":4650},[3911,3912,3913],{"id":502,"slug":13839,"dossier":47,"summary":13840,"aliases":13841,"sourceIds":13845,"published":13846,"modified":13847,"checkedAt":7,"severity":13848,"references":13853,"versionKeys":13869,"packageCount":32,"repositoryCount":103},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[13842,13843,13844],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[502],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[13849,13851],{"type":3538,"score":13850},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":3467,"score":13852},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[13854,13856,13858,13860,13862,13863,13865,13867],{"type":3474,"url":13855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":3471,"url":13857},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":3471,"url":13859},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":3471,"url":13861},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":3479,"url":4161},{"type":3471,"url":13864},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":3471,"url":13866},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":3471,"url":13868},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[4173,4174],{"id":503,"slug":13871,"dossier":47,"summary":13872,"aliases":13873,"sourceIds":13875,"published":13876,"modified":13877,"checkedAt":7,"severity":13878,"references":13880,"versionKeys":13891,"packageCount":32,"repositoryCount":869},"ghsa-x3rh-gjgm-fmqc-67404c6c","pypdf has possible large memory usage when parsing cross-reference streams",[13874],"CVE-2026-119209",[503],"2026-10-30T23:07:28Z","2026-10-30T23:15:04.529631202Z",[13879],{"type":3467,"score":4521},[13881,13883,13885,13887,13889,13890],{"type":3471,"url":13882},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x3rh-gjgm-fmqc",{"type":3474,"url":13884},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-119209",{"type":3471,"url":13886},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F4269",{"type":3471,"url":13888},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fa93fe3a901fd00af38f0a105c3ba7175fa72dcb4",{"type":3479,"url":3514},{"type":3471,"url":4628},[3524,3525,3526],{"id":504,"slug":13893,"dossier":47,"summary":13894,"aliases":13895,"sourceIds":13898,"published":13899,"modified":13900,"checkedAt":7,"severity":13901,"references":13904,"versionKeys":13919,"packageCount":32,"repositoryCount":832},"ghsa-x5ph-mj9p-rfr8-05f43684","NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read",[13896,13897],"CVE-2026-63312","PYSEC-2026-3730",[504,13897],"2026-08-22T15:16:19.367Z","2026-09-08T15:46:56.600781081Z",[13902,13903],{"type":3467,"score":6805},{"type":3467,"score":6807},[13905,13907,13909,13911,13913,13914,13915,13917],{"type":3727,"url":13906},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x5ph-mj9p-rfr8",{"type":3474,"url":13908},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63312",{"type":3471,"url":13910},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3588",{"type":3471,"url":13912},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F674ea75accdf08eca3782dee0a9c4ed7e0d0025b",{"type":3479,"url":3932},{"type":3471,"url":3934},{"type":3471,"url":13916},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3730.yaml",{"type":3474,"url":13918},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-streambackedcorpusview-bypasses-pathsec-enforce-arbitrary-file-read",[3943,3944],{"id":505,"slug":13921,"dossier":47,"summary":13922,"aliases":13923,"sourceIds":13926,"published":13927,"modified":13928,"checkedAt":7,"severity":13929,"references":13931,"versionKeys":13938,"packageCount":32,"repositoryCount":765},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[13924,13925],"CVE-2026-48817","PYSEC-2026-2280",[505,13925],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[13930],{"type":3538,"score":4011},[13932,13934,13936,13937],{"type":3474,"url":13933},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":3474,"url":13935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":3479,"url":7020},{"type":3474,"url":13709},[3771,3772,3773,7027,7028,7029,7241,7242,7243],{"id":506,"slug":13940,"dossier":47,"summary":13941,"aliases":13942,"sourceIds":13946,"published":7736,"modified":13947,"checkedAt":7,"severity":13948,"references":13951,"versionKeys":13965,"packageCount":32,"repositoryCount":784},"ghsa-x78j-v8h9-3j2q-0741325d","virtualenv: Command injection via --prompt in activate.bat (batch activator)",[13943,13944,13945],"BIT-virtualenv-2026-102937","CVE-2026-102937","PYSEC-2026-4014",[506,13945],"2026-10-06T15:26:00.196757436Z",[13949],{"type":3467,"score":13950},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[13952,13954,13956,13958,13960,13962,13963,13964],{"type":3471,"url":13953},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-x78j-v8h9-3j2q",{"type":3474,"url":13955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102937",{"type":3471,"url":13957},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3250",{"type":3576,"url":13959},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fd721ff140ce4afdc2a9b76751e4584e25d9fbea6",{"type":3471,"url":13961},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvirtualenv\u002FPYSEC-2026-4014.yaml",{"type":3479,"url":4297},{"type":3471,"url":7754},{"type":3479,"url":5572},[4301,4302,4303,4304,4305],{"id":507,"slug":13967,"dossier":47,"summary":13968,"aliases":13969,"sourceIds":13972,"published":13973,"modified":13974,"checkedAt":7,"severity":13975,"references":13977,"versionKeys":13992,"packageCount":32,"repositoryCount":103},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[13970,13971],"CVE-2026-27888","PYSEC-2026-3027",[507,13971],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[13976],{"type":3467,"score":4899},[13978,13980,13982,13984,13986,13987,13989,13990],{"type":3471,"url":13979},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":3474,"url":13981},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":3471,"url":13983},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":3471,"url":13985},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":3479,"url":3514},{"type":3471,"url":13988},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":3479,"url":3518},{"type":3474,"url":13991},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[3524,3525],{"id":508,"slug":13994,"dossier":47,"summary":13995,"aliases":13996,"sourceIds":13999,"published":14000,"modified":14001,"checkedAt":7,"severity":14002,"references":14005,"versionKeys":14020,"packageCount":32,"repositoryCount":103},"ghsa-x8wg-4xgc-vr54-f9dfa3b4","Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root",[13997,13998],"CVE-2026-71492","PYSEC-2026-3810",[508,13998],"2026-09-02T14:38:24Z","2026-09-10T12:25:29.001076918Z",[14003],{"type":3467,"score":14004},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[14006,14008,14010,14012,14014,14015,14017,14018],{"type":3471,"url":14007},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",{"type":3474,"url":14009},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71492",{"type":3471,"url":14011},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F77",{"type":3471,"url":14013},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fcommit\u002Fa215f6d779966945c56e0af5abed1ae5916fd9d3",{"type":3479,"url":5379},{"type":3471,"url":14016},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Freleases\u002Ftag\u002Fv2.4.5",{"type":3479,"url":5383},{"type":3474,"url":14019},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x8wg-4xgc-vr54",[5389],{"id":509,"slug":14022,"dossier":47,"summary":14023,"aliases":14024,"sourceIds":14027,"published":14028,"modified":14029,"checkedAt":7,"severity":14030,"references":14033,"versionKeys":14045,"packageCount":32,"repositoryCount":822},"ghsa-x99w-6fgc-pmfw-512b3e4e","NLTK: Allowlisted pickle loaders still permit code execution in current source",[14025,14026],"CVE-2026-79657","PYSEC-2026-3735",[509,14026],"2026-08-25T12:16:28.870Z","2026-09-08T17:00:04.111203038Z",[14031,14032],{"type":3467,"score":5293},{"type":3467,"score":11188},[14034,14036,14038,14039,14040,14041,14043],{"type":3727,"url":14035},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-x99w-6fgc-pmfw",{"type":3474,"url":14037},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-79657",{"type":3471,"url":5643},{"type":3479,"url":3932},{"type":3471,"url":4410},{"type":3471,"url":14042},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3735.yaml",{"type":3474,"url":14044},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-before-3.10.3-remote-code-execution-via-unsafe-pickle-deserialization",[4416,3943,3944],{"id":510,"slug":14047,"dossier":47,"summary":14048,"aliases":14049,"sourceIds":14052,"published":14053,"modified":14054,"checkedAt":7,"severity":14055,"references":14057,"versionKeys":14072,"packageCount":32,"repositoryCount":754},"ghsa-x9r9-c232-4q39-1586e326","Hugging Face Transformers downloads custom generation code before trust consent",[14050,14051],"CVE-2026-80047","PYSEC-2026-4174",[510,14051],"2026-09-01T15:31:13Z","2026-10-01T17:55:55.397425521Z",[14056],{"type":3538,"score":6540},[14058,14060,14062,14064,14065,14067,14069,14070],{"type":3474,"url":14059},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80047",{"type":3471,"url":14061},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F48620",{"type":3471,"url":14063},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fcbc1651a032b923da7f4b44b3d0e6f68e6ba6b55",{"type":3479,"url":3725},{"type":3471,"url":14066},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":3471,"url":14068},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":3479,"url":4198},{"type":3474,"url":14071},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x9r9-c232-4q39",[3733,3734,3735,3736,3737,3738,3739,3740,14073],"pypi:transformers@5.8.0",{"id":511,"slug":14075,"dossier":47,"summary":14076,"aliases":14077,"sourceIds":14080,"published":14081,"modified":14082,"checkedAt":7,"severity":14083,"references":14086,"versionKeys":14092,"packageCount":32,"repositoryCount":754},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[14078,14079],"CVE-2026-54274","PYSEC-2026-2108",[511,14079],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[14084,14085],{"type":3467,"score":4899},{"type":3538,"score":3652},[14087,14089,14090],{"type":3474,"url":14088},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":3479,"url":3795},{"type":3576,"url":14091},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[3799,3800,3801,3802,3803,3804,3805,3806,3807],{"id":512,"slug":14094,"dossier":47,"summary":14095,"aliases":14096,"sourceIds":14098,"published":14099,"modified":14100,"checkedAt":7,"severity":14101,"references":14103,"versionKeys":14116,"packageCount":32,"repositoryCount":784},"ghsa-xcq7-p3pf-p88h-7e00dc8e","OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api",[14097],"CVE-2026-114603",[512],"2026-10-22T16:22:07Z","2026-10-22T16:30:40.999595074Z",[14102],{"type":3538,"score":3752},[14104,14106,14108,14110,14112,14114],{"type":3471,"url":14105},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-xcq7-p3pf-p88h",{"type":3471,"url":14107},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5749",{"type":3471,"url":14109},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Fd5224bf4ffdf2aee1b592ad238dcc32ca957f26b",{"type":3479,"url":14111},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python",{"type":3471,"url":14113},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fblob\u002Fmain\u002FCHANGELOG.md#version-1451066b1-2026-10-06",{"type":3471,"url":14115},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.1",[14117,14118,14119,14120,14121,14122,14123,14124],"pypi:opentelemetry-api@1.25.0","pypi:opentelemetry-api@1.26.0","pypi:opentelemetry-api@1.28.2","pypi:opentelemetry-api@1.34.1","pypi:opentelemetry-api@1.36.0","pypi:opentelemetry-api@1.38.0","pypi:opentelemetry-api@1.39.1","pypi:opentelemetry-api@1.43.0",{"id":513,"slug":14126,"dossier":47,"summary":14127,"aliases":14128,"sourceIds":14132,"published":14133,"modified":14134,"checkedAt":7,"severity":14135,"references":14137,"versionKeys":14151,"packageCount":32,"repositoryCount":832},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[14129,14130,14131],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[513,14131],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[14136],{"type":3538,"score":9153},[14138,14140,14142,14144,14146,14148,14149],{"type":3474,"url":14139},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":3474,"url":14141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":3471,"url":14143},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":3576,"url":14145},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":3471,"url":14147},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":3479,"url":3480},{"type":3471,"url":14150},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3487],{"id":514,"slug":14153,"dossier":47,"summary":14154,"aliases":14155,"sourceIds":14159,"published":14160,"modified":14161,"checkedAt":7,"severity":14162,"references":14165,"versionKeys":14174,"packageCount":32,"repositoryCount":744},"ghsa-xgh8-jp6q-p5x8-0a8d4f1f","Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes",[14156,14157,14158],"BIT-pillow-2026-112901","CVE-2026-112901","PYSEC-2026-4335",[514,14158],"2026-10-19T22:17:10.293Z","2026-10-28T11:10:55.647541842Z",[14163,14164],{"type":3467,"score":4370},{"type":3538,"score":3652},[14166,14168,14170,14172,14173],{"type":3576,"url":14167},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xgh8-jp6q-p5x8",{"type":3474,"url":14169},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112901",{"type":3576,"url":14171},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F2852a3e3d568997ddec745fc800991f138878f4b",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":515,"slug":14176,"dossier":47,"summary":14177,"aliases":14178,"sourceIds":14181,"published":14182,"modified":14183,"checkedAt":7,"severity":14184,"references":14186,"versionKeys":14194,"packageCount":32,"repositoryCount":869},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[14179,14180],"CVE-2026-48526","PYSEC-2026-179",[515,14180],"2026-05-28T16:16:29.657Z","2026-09-10T03:51:09.678127621Z",[14185],{"type":3538,"score":8032},[14187,14189,14191,14192],{"type":3727,"url":14188},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":3474,"url":14190},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":3479,"url":3903},{"type":3471,"url":14193},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[3911,3913],{"id":516,"slug":14196,"dossier":47,"summary":14197,"aliases":14198,"sourceIds":14201,"published":14202,"modified":14203,"checkedAt":7,"severity":14204,"references":14206,"versionKeys":14215,"packageCount":32,"repositoryCount":832},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[14199,14200],"CVE-2026-12074","PYSEC-2026-3584",[516,14200],"2026-07-31T16:50:41Z","2026-09-10T03:50:53.172593126Z",[14205],{"type":3538,"score":5482},[14207,14209,14210,14211,14213],{"type":3471,"url":14208},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3479,"url":3932},{"type":3479,"url":5650},{"type":3474,"url":14212},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":3474,"url":14214},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[3943,3944],{"id":517,"slug":14217,"dossier":47,"summary":14218,"aliases":14219,"sourceIds":14223,"published":14224,"modified":14225,"checkedAt":7,"severity":14226,"references":14229,"versionKeys":14240,"packageCount":32,"repositoryCount":4731},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[14220,14221,14222],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[517,14222],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[14227],{"type":3538,"score":14228},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[14230,14232,14234,14236,14238,14239],{"type":3727,"url":14231},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":3474,"url":14233},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":3576,"url":14235},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":3576,"url":14237},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":3479,"url":3480},{"type":3474,"url":6161},[3484,3485,3486,3487,3488,3489,3490,3491,3492],{"id":518,"slug":14242,"dossier":47,"summary":14243,"aliases":14244,"sourceIds":14245,"published":14246,"modified":14247,"checkedAt":7,"severity":14248,"references":14251,"versionKeys":14261,"packageCount":32,"repositoryCount":744},"ghsa-xmj3-9gf7-h52w-d99c0028","setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation  Description",[],[518],"2026-10-23T21:44:11Z","2026-10-23T22:00:03.739009766Z",[14249],{"type":3467,"score":14250},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[14252,14254,14256,14258,14259],{"type":3471,"url":14253},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-xmj3-9gf7-h52w",{"type":3471,"url":14255},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F5329",{"type":3471,"url":14257},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F6d07b8d17890dda58d944ac51e58f54af92d52af",{"type":3479,"url":5853},{"type":3471,"url":14260},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv84.1.0",[5859,5860,5861,5862,10197,10198,10199,10200,10201,10202,10203,10204],{"id":519,"slug":14263,"dossier":47,"summary":14264,"aliases":14265,"sourceIds":14268,"published":14269,"modified":14270,"checkedAt":7,"severity":14271,"references":14274,"versionKeys":14287,"packageCount":32,"repositoryCount":42},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[14266,14267],"CVE-2026-9856","PYSEC-2026-3929",[519,14267],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[14272],{"type":3538,"score":14273},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[14275,14277,14279,14281,14282,14284,14285],{"type":3474,"url":14276},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":3471,"url":14278},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":3471,"url":14280},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":3479,"url":3725},{"type":3471,"url":14283},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":3479,"url":4198},{"type":3474,"url":14286},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[3732,3733,3734,3735,3736,3737,3738,3739,3740,14073],{"id":520,"slug":14289,"dossier":47,"summary":14290,"aliases":14291,"sourceIds":14294,"published":14295,"modified":14296,"checkedAt":7,"severity":14297,"references":14302,"versionKeys":14317,"packageCount":32,"repositoryCount":744},"ghsa-xvh5-g6gv-559v-e12340aa","Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags",[14292,14293],"CVE-2026-112902","PYSEC-2026-4363",[520,14293],"2026-10-21T21:29:16Z","2026-11-11T10:20:03.066593346Z",[14298,14300],{"type":3467,"score":14299},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":3538,"score":14301},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[14303,14305,14307,14309,14311,14313,14315,14316],{"type":3576,"url":14304},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xvh5-g6gv-559v",{"type":3474,"url":14306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112902",{"type":3471,"url":14308},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F10903",{"type":3576,"url":14310},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10227",{"type":3576,"url":14312},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F570df030c0d30c2bf5336b2ab59f3902d8ab0b6d",{"type":3471,"url":14314},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faf56ace297b0991d02988fcc2ea933e4824b4fb3",{"type":3479,"url":3480},{"type":3474,"url":3482},[3484,3485,3486,3487,3488,3489,3490,3491,3492,3493],{"id":521,"slug":14319,"dossier":47,"summary":14320,"aliases":14321,"sourceIds":14324,"published":14325,"modified":14326,"checkedAt":7,"severity":14327,"references":14329,"versionKeys":14337,"packageCount":32,"repositoryCount":32},"ghsa-xvp8-3mhv-424c-5f064018","lxml-html-clean has \u003Cbase> tag injection through default Cleaner configuration",[14322,14323],"CVE-2026-28350","PYSEC-2026-2202",[521,14323],"2026-03-02T19:35:52Z","2026-09-10T03:50:41.927155700Z",[14328],{"type":3538,"score":9950},[14330,14332,14334,14336],{"type":3727,"url":14331},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fsecurity\u002Fadvisories\u002FGHSA-xvp8-3mhv-424c",{"type":3474,"url":14333},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28350",{"type":3576,"url":14335},"https:\u002F\u002Fgithub.com\u002Ffedora-python\u002Flxml_html_clean\u002Fcommit\u002F9c5612ca33b941eec4178abf8a5294b103403f34",{"type":3479,"url":4960},[4968],{"id":522,"slug":14339,"dossier":47,"summary":83,"aliases":14340,"sourceIds":14342,"published":14343,"modified":14344,"checkedAt":7,"severity":14345,"references":14347,"versionKeys":14353,"packageCount":32,"repositoryCount":869},"pysec-2025-183-08217171",[14341],"CVE-2025-45768",[522],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[14346],{"type":3538,"score":12749},[14348,14350,14352],{"type":3471,"url":14349},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3938,"url":14351},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":3479,"url":3903},[3911,3913],{"id":523,"slug":14355,"dossier":47,"summary":83,"aliases":14356,"sourceIds":14359,"published":14360,"modified":14361,"checkedAt":7,"severity":14362,"references":14364,"versionKeys":14373,"packageCount":32,"repositoryCount":103},"pysec-2025-198-62b25ed4",[14357,14358],"BIT-pytorch-2025-46148","CVE-2025-46148",[523],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[14363],{"type":3538,"score":6300},[14365,14367,14369,14371],{"type":3474,"url":14366},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":3474,"url":14368},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":3938,"url":14370},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":3576,"url":14372},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[4173,4174],{"id":524,"slug":14375,"dossier":47,"summary":83,"aliases":14376,"sourceIds":14379,"published":14380,"modified":14381,"checkedAt":7,"severity":14382,"references":14384,"versionKeys":14390,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[14377,14378],"BIT-pytorch-2025-46149","CVE-2025-46149",[524],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[14383],{"type":3538,"score":6300},[14385,14386,14388],{"type":3474,"url":14366},{"type":3938,"url":14387},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":3576,"url":14389},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[4174],{"id":525,"slug":14392,"dossier":47,"summary":83,"aliases":14393,"sourceIds":14396,"published":14397,"modified":14398,"checkedAt":7,"severity":14399,"references":14401,"versionKeys":14409,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[14394,14395],"BIT-pytorch-2025-46150","CVE-2025-46150",[525],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[14400],{"type":3538,"score":6300},[14402,14403,14405,14407],{"type":3474,"url":14366},{"type":3938,"url":14404},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":3938,"url":14406},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":3576,"url":14408},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[4174],{"id":526,"slug":14411,"dossier":47,"summary":83,"aliases":14412,"sourceIds":14415,"published":14416,"modified":14417,"checkedAt":7,"severity":14418,"references":14420,"versionKeys":14426,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[14413,14414],"BIT-pytorch-2025-46152","CVE-2025-46152",[526],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[14419],{"type":3538,"score":3752},[14421,14422,14424],{"type":3474,"url":14366},{"type":3938,"url":14423},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":3576,"url":14425},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[4174],{"id":527,"slug":14428,"dossier":47,"summary":83,"aliases":14429,"sourceIds":14432,"published":14433,"modified":14434,"checkedAt":7,"severity":14435,"references":14437,"versionKeys":14447,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[14430,14431],"BIT-pytorch-2025-46153","CVE-2025-46153",[527],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[14436],{"type":3538,"score":6300},[14438,14440,14441,14443,14445],{"type":3471,"url":14439},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":3474,"url":14366},{"type":3474,"url":14442},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":3938,"url":14444},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":3576,"url":14446},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[4174],{"id":528,"slug":14449,"dossier":47,"summary":83,"aliases":14450,"sourceIds":14453,"published":14454,"modified":14455,"checkedAt":7,"severity":14456,"references":14458,"versionKeys":14463,"packageCount":32,"repositoryCount":8514},"pysec-2025-203-2febb201",[14451,14452],"BIT-pytorch-2025-55551","CVE-2025-55551",[528],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[14457],{"type":3538,"score":3652},[14459,14461],{"type":3474,"url":14460},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":3938,"url":14462},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[4173,4174,4175,6209,6210,6211],{"id":529,"slug":14465,"dossier":47,"summary":83,"aliases":14466,"sourceIds":14469,"published":14470,"modified":14471,"checkedAt":7,"severity":14472,"references":14474,"versionKeys":14478,"packageCount":32,"repositoryCount":8514},"pysec-2025-204-cdae47da",[14467,14468],"BIT-pytorch-2025-55552","CVE-2025-55552",[529],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[14473],{"type":3538,"score":3652},[14475,14476],{"type":3474,"url":14460},{"type":3938,"url":14477},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[4173,4174,4175,6209,6210,6211],{"id":530,"slug":14480,"dossier":47,"summary":83,"aliases":14481,"sourceIds":14484,"published":14485,"modified":14486,"checkedAt":7,"severity":14487,"references":14489,"versionKeys":14495,"packageCount":32,"repositoryCount":869},"pysec-2025-205-fd5e58fd",[14482,14483],"BIT-pytorch-2025-55553","CVE-2025-55553",[530],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[14488],{"type":3538,"score":3652},[14490,14491,14493],{"type":3474,"url":14460},{"type":3938,"url":14492},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":3576,"url":14494},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[4173,4174,4175],{"id":531,"slug":14497,"dossier":47,"summary":83,"aliases":14498,"sourceIds":14501,"published":14502,"modified":14503,"checkedAt":7,"severity":14504,"references":14506,"versionKeys":14510,"packageCount":32,"repositoryCount":8514},"pysec-2025-206-58322476",[14499,14500],"BIT-pytorch-2025-55554","CVE-2025-55554",[531],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[14505],{"type":3538,"score":3752},[14507,14508],{"type":3474,"url":14460},{"type":3938,"url":14509},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[4173,4174,4175,6209,6210,6211],{"id":532,"slug":14512,"dossier":47,"summary":83,"aliases":14513,"sourceIds":14516,"published":14517,"modified":14518,"checkedAt":7,"severity":14519,"references":14521,"versionKeys":14527,"packageCount":32,"repositoryCount":869},"pysec-2025-207-2abef3fc",[14514,14515],"BIT-pytorch-2025-55557","CVE-2025-55557",[532],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[14520],{"type":3538,"score":3652},[14522,14523,14525],{"type":3474,"url":14460},{"type":3938,"url":14524},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":3576,"url":14526},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[4173,4174,4175],{"id":533,"slug":14529,"dossier":47,"summary":83,"aliases":14530,"sourceIds":14533,"published":14534,"modified":14535,"checkedAt":7,"severity":14536,"references":14538,"versionKeys":14544,"packageCount":32,"repositoryCount":869},"pysec-2025-208-6e93fe9d",[14531,14532],"BIT-pytorch-2025-55558","CVE-2025-55558",[533],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[14537],{"type":3538,"score":3652},[14539,14540,14542],{"type":3474,"url":14460},{"type":3938,"url":14541},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":3576,"url":14543},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[4173,4174,4175],{"id":534,"slug":14546,"dossier":47,"summary":83,"aliases":14547,"sourceIds":14550,"published":14551,"modified":14552,"checkedAt":7,"severity":14553,"references":14555,"versionKeys":14561,"packageCount":32,"repositoryCount":869},"pysec-2025-209-e6f352b0",[14548,14549],"BIT-pytorch-2025-55560","CVE-2025-55560",[534],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[14554],{"type":3538,"score":3652},[14556,14557,14559],{"type":3474,"url":14460},{"type":3938,"url":14558},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":3576,"url":14560},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[4173,4174,4175],{"id":535,"slug":14563,"dossier":47,"summary":83,"aliases":14564,"sourceIds":14566,"published":14567,"modified":14568,"checkedAt":7,"severity":14569,"references":14571,"versionKeys":14574,"packageCount":32,"repositoryCount":822},"pysec-2025-211-d8bd15de",[14565],"CVE-2025-14920",[535],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[14570],{"type":3538,"score":3718},[14572],{"type":3474,"url":14573},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[3732,3733,3734,3735,3736],{"id":536,"slug":14576,"dossier":47,"summary":83,"aliases":14577,"sourceIds":14579,"published":14580,"modified":14581,"checkedAt":7,"severity":14582,"references":14584,"versionKeys":14587,"packageCount":32,"repositoryCount":822},"pysec-2025-212-a011b97d",[14578],"CVE-2025-14921",[536],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[14583],{"type":3538,"score":3718},[14585],{"type":3474,"url":14586},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[3732,3733,3734,3735,3736],{"id":537,"slug":14589,"dossier":47,"summary":83,"aliases":14590,"sourceIds":14592,"published":14593,"modified":14594,"checkedAt":7,"severity":14595,"references":14597,"versionKeys":14600,"packageCount":32,"repositoryCount":822},"pysec-2025-213-9043dc9b",[14591],"CVE-2025-14924",[537],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[14596],{"type":3538,"score":3718},[14598],{"type":3474,"url":14599},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[3732,3733,3734,3735,3736],{"id":538,"slug":14602,"dossier":47,"summary":83,"aliases":14603,"sourceIds":14605,"published":14606,"modified":14607,"checkedAt":7,"severity":14608,"references":14610,"versionKeys":14613,"packageCount":32,"repositoryCount":822},"pysec-2025-214-eb241255",[14604],"CVE-2025-14926",[538],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[14609],{"type":3538,"score":3718},[14611],{"type":3474,"url":14612},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[3732,3733,3734,3735,3736],{"id":539,"slug":14615,"dossier":47,"summary":83,"aliases":14616,"sourceIds":14618,"published":14619,"modified":14620,"checkedAt":7,"severity":14621,"references":14623,"versionKeys":14626,"packageCount":32,"repositoryCount":822},"pysec-2025-215-6064f491",[14617],"CVE-2025-14927",[539],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[14622],{"type":3538,"score":3718},[14624],{"type":3474,"url":14625},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[3732,3733,3734,3735,3736],{"id":540,"slug":14628,"dossier":47,"summary":83,"aliases":14629,"sourceIds":14631,"published":14632,"modified":14633,"checkedAt":7,"severity":14634,"references":14636,"versionKeys":14639,"packageCount":32,"repositoryCount":822},"pysec-2025-216-5708ed01",[14630],"CVE-2025-14928",[540],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[14635],{"type":3538,"score":3718},[14637],{"type":3474,"url":14638},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[3732,3733,3734,3735,3736],{"id":541,"slug":14641,"dossier":47,"summary":83,"aliases":14642,"sourceIds":14644,"published":14645,"modified":14646,"checkedAt":7,"severity":14647,"references":14649,"versionKeys":14652,"packageCount":32,"repositoryCount":754},"pysec-2025-217-2c1ad388",[14643],"CVE-2025-14929",[541],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[14648],{"type":3538,"score":3718},[14650],{"type":3474,"url":14651},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[3732,3733,3734,3735,3736,3737,3738,3739,3740],{"id":542,"slug":14654,"dossier":47,"summary":83,"aliases":14655,"sourceIds":14657,"published":14658,"modified":14659,"checkedAt":7,"severity":14660,"references":14662,"versionKeys":14665,"packageCount":32,"repositoryCount":784},"pysec-2025-218-39811fc3",[14656],"CVE-2025-14930",[542],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[14661],{"type":3538,"score":3718},[14663],{"type":3474,"url":14664},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[3732,3733,3734,3735,3736,3737],{"id":543,"slug":14667,"dossier":47,"summary":83,"aliases":14668,"sourceIds":14671,"published":14672,"modified":14673,"checkedAt":7,"severity":14674,"references":14676,"versionKeys":14687,"packageCount":32,"repositoryCount":3706},"pysec-2026-139-96951ff6",[14669,14670],"BIT-pytorch-2026-4538","CVE-2026-4538",[543],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[14675],{"type":3538,"score":6540},[14677,14679,14681,14683,14685],{"type":3471,"url":14678},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":3474,"url":14680},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":3474,"url":14682},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":3938,"url":14684},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":3576,"url":14686},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[12829,4173,4174,4175,6209,6210,6211,6212,6213,6214,6215],{"id":544,"slug":14689,"dossier":47,"summary":83,"aliases":14690,"sourceIds":14693,"published":14694,"modified":14695,"checkedAt":7,"severity":14696,"references":14698,"versionKeys":14703,"packageCount":32,"repositoryCount":103},"pysec-2026-2120-174938a3",[14691,14692],"CVE-2026-31900","GHSA-v53h-f6m7-xcgm",[544],"2026-03-11T20:16:15.960Z","2026-07-13T07:15:15.712525536Z",[14697],{"type":3538,"score":5295},[14699,14701],{"type":3474,"url":14700},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-v53h-f6m7-xcgm",{"type":3576,"url":14702},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F0a2560b981364dde4c8cf8ce9d164c40669a8611",[4273,4274],{"id":545,"slug":14705,"dossier":47,"summary":83,"aliases":14706,"sourceIds":14708,"published":14709,"modified":14710,"checkedAt":7,"severity":14711,"references":14713,"versionKeys":14718,"packageCount":32,"repositoryCount":32},"pysec-2026-598-ff2a157b",[14707],"CVE-2026-22218",[545],"2026-01-20T00:15:48.910Z","2026-07-02T08:45:06.090293533Z",[14712],{"type":3538,"score":6833},[14714,14715,14717],{"type":3474,"url":3830},{"type":3474,"url":14716},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fchainlit-arbitrary-file-read-via-project-element",{"type":3727,"url":3834},[3840],{"id":546,"slug":14720,"dossier":47,"summary":83,"aliases":14721,"sourceIds":14723,"published":14724,"modified":14725,"checkedAt":7,"severity":14726,"references":14728,"versionKeys":14731,"packageCount":32,"repositoryCount":832},"pysec-2026-99-2c63e84f",[14722],"CVE-2026-0848",[546],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[14727],{"type":3538,"score":7180},[14729],{"type":3727,"url":14730},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3943,3944],1794474418602]