[{"data":1,"prerenderedAt":9016},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-4112":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":356,"related":359},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":70,"unknownLicensePackageCount":105,"advisoryIds":106,"advisoryCount":354,"providers":355},"opencode:4112","opencode-4112",4112,"Objection management","uba-ki-lab\u002Fobjection-management","automatic processing of objections; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, FKTG, Endlagersuche","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management","5c1425bf9990cf12c5ae8ada47d249710703af18","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fcommit\u002F5c1425bf9990cf12c5ae8ada47d249710703af18","2025-01-13T11:14:51.399Z","2025-01-13T11:49:00.000Z",{"complete":91,"entryCount":92,"truncated":46},true,31,[94],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","b084b72cc0723df0070f68ab42b2cd9c5447aa6df20204916c3de53c04f4c363",829617,"parsed",261,[103],"pypi",13,2,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353],"GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2h4p-vjrc-8xpq","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3crg-w4f6-42mx","GHSA-3j69-69wj-xqx2","GHSA-3r9x-f23j-gc73","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4vvm-4w3v-6mr8","GHSA-4w7r-h757-3r74","GHSA-4xc4-762w-m6cg","GHSA-4xpc-pv4p-pm3w","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-537c-gmf6-5ccf","GHSA-538c-55jv-c5g9","GHSA-53mr-6c8q-9789","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5hgr-hg42-57jg","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-6528-wvf6-f6qg","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-69x8-hrgq-fjj8","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6rvg-6v2m-4j46","GHSA-752w-5fwx-jx9f","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7p94-766c-hgjp","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-887c-mr87-cxwp","GHSA-8qvm-5x2c-j2w7","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9hjg-9r4m-mvj7","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c38f-wx89-p2xg","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c8rr-9gxc-jprv","GHSA-cfh3-3jmp-rvhc","GHSA-cj93-chg6-vgv8","GHSA-cmw6-hcpp-c6jp","GHSA-cpwx-vrp4-4pq7","GHSA-cq27-v7xp-c356","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2v5-7jq9-h8cg","GHSA-f4hp-rmr7-r7v8","GHSA-f83h-ghpp-7wcc","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh2c-86xm-pm2x","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fjcf-3j3r-78rp","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gm62-xv2j-4w53","GHSA-gm8q-m8mv-jj5m","GHSA-gmj6-6f8f-6699","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hp6r-r9vc-q8wx","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hqmj-h5c6-369m","GHSA-hwpq-hmq9-wj77","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-j225-cvw7-qrx7","GHSA-j543-4vmf-qm7v","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jjhc-v7c2-5hh6","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jp82-jpqv-5vv3","GHSA-jq35-7prp-9v3f","GHSA-jr27-m4p2-rc6r","GHSA-m2v9-299j-rv96","GHSA-m449-cwjh-6pw7","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mqqc-3gqh-h2x8","GHSA-mrfv-m5wm-5w6w","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p433-9wv8-28xj","GHSA-p4gq-832x-fm9v","GHSA-p998-jp59-783m","GHSA-phhr-52qp-3mj4","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q56x-g2fj-4rj6","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qpxp-75px-xjcp","GHSA-qq3j-4f4f-9583","GHSA-qrc4-49gv-mv9m","GHSA-qxrp-vhvm-j765","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-vvw2-h478-xwr3","GHSA-w2fm-2cpv-w7v5","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wf5f-4jwr-ppcp","GHSA-wgvc-ghv9-3pmm","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wpfp-gwwc-vwq6","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x284-j5p8-9c5p","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-x7hp-r3qg-r3cj","GHSA-xcgm-r5h9-7989","GHSA-xf7x-x43h-rpqh","GHSA-xg8h-j46f-w952","GHSA-xgmm-8j9v-c9wx","PYSEC-2025-148","PYSEC-2025-183","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-265","PYSEC-2025-266","PYSEC-2025-267","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2132","PYSEC-2026-2248","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-2286","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453","PYSEC-2026-597","PYSEC-2026-99",247,[],{"files":357,"occurrenceCount":101},[358],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":360,"vulnerabilities":2719},[361,374,386,397,406,416,425,435,445,454,463,472,481,490,499,509,521,531,541,550,559,568,577,586,597,606,617,627,636,646,655,664,673,683,692,701,711,720,729,738,747,756,765,774,783,792,801,812,820,829,838,847,856,865,874,884,893,902,912,921,930,939,948,957,966,975,984,993,1002,1011,1020,1029,1038,1047,1056,1065,1074,1084,1093,1102,1111,1120,1129,1138,1147,1156,1165,1174,1182,1191,1200,1209,1218,1227,1236,1246,1255,1264,1273,1281,1290,1299,1308,1317,1326,1335,1344,1352,1361,1370,1379,1388,1397,1408,1417,1425,1434,1443,1452,1461,1470,1479,1488,1497,1506,1515,1524,1533,1542,1551,1560,1569,1578,1587,1596,1605,1614,1623,1632,1641,1650,1659,1668,1676,1684,1693,1702,1711,1720,1728,1737,1746,1755,1764,1774,1783,1792,1802,1811,1820,1828,1836,1845,1854,1863,1872,1881,1890,1898,1906,1915,1924,1932,1941,1950,1960,1969,1978,1986,1995,2004,2013,2022,2030,2039,2048,2057,2066,2075,2083,2092,2100,2109,2118,2127,2136,2145,2154,2163,2172,2181,2190,2199,2208,2217,2226,2234,2243,2252,2262,2270,2279,2288,2297,2305,2314,2323,2332,2341,2350,2359,2367,2376,2385,2393,2402,2411,2420,2429,2438,2447,2456,2465,2474,2482,2491,2500,2509,2517,2526,2535,2544,2552,2561,2570,2579,2588,2597,2606,2614,2623,2632,2641,2650,2658,2667,2676,2685,2693,2701,2710],{"id":362,"slug":363,"identity":364,"label":365,"aiRelevant":91,"provider":366,"advisoryCount":70,"licenseExpressions":369,"versions":371,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":373},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":367,"label":368},"hugging-face","Hugging Face",[370],"Apache-2.0",[372],"4.47.1",[55],{"id":375,"slug":376,"identity":377,"label":378,"aiRelevant":91,"provider":379,"advisoryCount":380,"licenseExpressions":381,"versions":383,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":385},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[382],"BSD-3-Clause",[384],"2.5.1",[55],{"id":387,"slug":388,"identity":389,"label":390,"aiRelevant":91,"provider":379,"advisoryCount":391,"licenseExpressions":392,"versions":394,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":396},"package:pypi:litellm","litellm-e00b5c8b","pypi:litellm","LiteLLM",8,[393],"MIT",[395],"1.53.7",[55],{"id":398,"slug":399,"identity":400,"label":401,"aiRelevant":91,"provider":379,"advisoryCount":32,"licenseExpressions":402,"versions":403,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":405},"package:pypi:dspy","dspy-70e56922","pypi:dspy","DSPy",[393],[404],"2.5.43",[55],{"id":407,"slug":408,"identity":409,"label":410,"aiRelevant":91,"provider":411,"advisoryCount":38,"licenseExpressions":412,"versions":413,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":415},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":367,"label":368},[370],[414],"3.2.0",[55],{"id":72,"slug":73,"identity":417,"label":74,"aiRelevant":91,"provider":418,"advisoryCount":38,"licenseExpressions":421,"versions":422,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":424},"pypi:openai",{"id":419,"label":420},"openai","OpenAI",[370],[423],"1.59.6",[55],{"id":426,"slug":427,"identity":428,"label":429,"aiRelevant":91,"provider":430,"advisoryCount":38,"licenseExpressions":431,"versions":432,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":434},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":367,"label":368},[370],[433],"3.3.1",[55],{"id":436,"slug":437,"identity":438,"label":439,"aiRelevant":91,"provider":379,"advisoryCount":38,"licenseExpressions":440,"versions":442,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":444},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[441],"non-standard",[443],"1.2.1",[55],{"id":446,"slug":447,"identity":448,"label":449,"aiRelevant":91,"provider":379,"advisoryCount":38,"licenseExpressions":450,"versions":451,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":453},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[441],[452],"0.21.0",[55],{"id":455,"slug":456,"identity":457,"label":458,"aiRelevant":91,"provider":379,"advisoryCount":38,"licenseExpressions":459,"versions":460,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":462},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[370],[461],"4.10.0.84",[55],{"id":464,"slug":465,"identity":466,"label":467,"aiRelevant":91,"provider":379,"advisoryCount":38,"licenseExpressions":468,"versions":469,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":471},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[382,441],[470],"1.6.1",[55],{"id":473,"slug":474,"identity":475,"label":476,"aiRelevant":91,"provider":379,"advisoryCount":38,"licenseExpressions":477,"versions":478,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":480},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[441],[479],"0.8.0",[55],{"id":482,"slug":483,"identity":484,"label":485,"aiRelevant":91,"provider":379,"advisoryCount":38,"licenseExpressions":486,"versions":487,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":489},"package:pypi:xgboost","xgboost-5a870b45","pypi:xgboost","XGBoost",[370],[488],"2.1.3",[55],{"id":491,"slug":492,"identity":493,"label":494,"aiRelevant":46,"provider":379,"advisoryCount":92,"licenseExpressions":495,"versions":496,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":498},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",[441],[497],"5.1.0",[55],{"id":500,"slug":501,"identity":502,"label":503,"aiRelevant":46,"provider":379,"advisoryCount":30,"licenseExpressions":504,"versions":506,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":508},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[370,505],"Apache-2.0 AND MIT",[507],"3.11.11",[55],{"id":510,"slug":511,"identity":512,"label":513,"aiRelevant":46,"provider":379,"advisoryCount":514,"licenseExpressions":515,"versions":518,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":520},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[516,517],"HPND","MIT-CMU",[519],"11.1.0",[55],{"id":522,"slug":523,"identity":524,"label":525,"aiRelevant":46,"provider":379,"advisoryCount":526,"licenseExpressions":527,"versions":528,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":530},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",11,[370],[529],"3.9.1",[55],{"id":532,"slug":533,"identity":534,"label":535,"aiRelevant":46,"provider":379,"advisoryCount":536,"licenseExpressions":537,"versions":538,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":540},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",10,[370],[539],"6.4.2",[55],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":46,"provider":379,"advisoryCount":391,"licenseExpressions":546,"versions":547,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":549},"package:pypi:onnx","onnx-d9802411","pypi:onnx","onnx",[370],[548],"1.17.0",[55],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":46,"provider":379,"advisoryCount":391,"licenseExpressions":555,"versions":556,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":558},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",[370],[557],"0.0.9",[55],{"id":560,"slug":561,"identity":562,"label":563,"aiRelevant":46,"provider":379,"advisoryCount":391,"licenseExpressions":564,"versions":565,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":567},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[382],[566],"0.37.2",[55],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":46,"provider":379,"advisoryCount":65,"licenseExpressions":573,"versions":574,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":576},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",[393],[575],"2.10.1",[55],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":46,"provider":379,"advisoryCount":65,"licenseExpressions":582,"versions":583,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":585},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[393],[584],"2.3.0",[55],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":46,"provider":379,"advisoryCount":591,"licenseExpressions":592,"versions":594,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":596},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",6,[593],"Apache-2.0 OR BSD-3-Clause",[595],"42.0.8",[55],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":46,"provider":379,"advisoryCount":34,"licenseExpressions":602,"versions":603,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":605},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[382,441],[604],"3.1.5",[55],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":46,"provider":379,"advisoryCount":34,"licenseExpressions":611,"versions":614,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":616},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[382,612,613],"BSD-3-Clause AND TCL","TCL",[615],"5.10.0",[55],{"id":618,"slug":619,"identity":620,"label":621,"aiRelevant":46,"provider":379,"advisoryCount":622,"licenseExpressions":623,"versions":624,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":626},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[370],[625],"2.32.3",[55],{"id":628,"slug":629,"identity":630,"label":631,"aiRelevant":46,"provider":379,"advisoryCount":622,"licenseExpressions":632,"versions":633,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":635},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[393],[634],"75.8.0",[55],{"id":637,"slug":638,"identity":639,"label":640,"aiRelevant":46,"provider":379,"advisoryCount":105,"licenseExpressions":641,"versions":643,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":645},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[393,642],"Unlicense",[644],"3.16.1",[55],{"id":647,"slug":648,"identity":649,"label":650,"aiRelevant":46,"provider":379,"advisoryCount":105,"licenseExpressions":651,"versions":652,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":654},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[393],[653],"1.3.8",[55],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":46,"provider":379,"advisoryCount":105,"licenseExpressions":660,"versions":661,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":663},"package:pypi:pdfminer-six","pdfminer-six-53ae17a4","pypi:pdfminer-six","pdfminer-six",[393],[662],"20240706",[55],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":46,"provider":379,"advisoryCount":105,"licenseExpressions":669,"versions":670,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":672},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[382],[671],"5.29.3",[55],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":46,"provider":379,"advisoryCount":105,"licenseExpressions":678,"versions":680,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":682},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",[679],"BSD-2-Clause",[681],"0.6.1",[55],{"id":684,"slug":685,"identity":686,"label":687,"aiRelevant":46,"provider":379,"advisoryCount":105,"licenseExpressions":688,"versions":689,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":691},"package:pypi:pycrypto","pycrypto-0df8b923","pypi:pycrypto","pycrypto",[441],[690],"2.6.1",[55],{"id":693,"slug":694,"identity":695,"label":696,"aiRelevant":46,"provider":379,"advisoryCount":105,"licenseExpressions":697,"versions":698,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":700},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[393],[699],"2.6",[55],{"id":702,"slug":703,"identity":704,"label":705,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":706,"versions":708,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":710},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[707],"MPL-2.0",[709],"2024.12.14",[55],{"id":712,"slug":713,"identity":714,"label":715,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":716,"versions":717,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":719},"package:pypi:click","click-ef97f731","pypi:click","click",[382,441],[718],"8.1.8",[55],{"id":721,"slug":722,"identity":723,"label":724,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":725,"versions":726,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":728},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[370],[727],"5.6.3",[55],{"id":730,"slug":731,"identity":732,"label":733,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":734,"versions":735,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":737},"package:pypi:fastapi-sso","fastapi-sso-0ed97bae","pypi:fastapi-sso","fastapi-sso",[393],[736],"0.10.0",[55],{"id":739,"slug":740,"identity":741,"label":742,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":743,"versions":744,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":746},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[393],[745],"4.55.3",[55],{"id":748,"slug":749,"identity":750,"label":751,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":752,"versions":753,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":755},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[393],[754],"0.14.0",[55],{"id":757,"slug":758,"identity":759,"label":760,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":761,"versions":762,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":764},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[382,441],[763],"3.10",[55],{"id":766,"slug":767,"identity":768,"label":769,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":770,"versions":771,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":773},"package:pypi:json-repair","json-repair-3bbcd372","pypi:json-repair","json-repair",[441],[772],"0.35.0",[55],{"id":775,"slug":776,"identity":777,"label":778,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":779,"versions":780,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":782},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[382,441],[781],"5.7.2",[55],{"id":784,"slug":785,"identity":786,"label":787,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":788,"versions":789,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":791},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[382],[790],"5.3.0",[55],{"id":793,"slug":794,"identity":795,"label":796,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":797,"versions":798,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":800},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[393],[799],"3.24.2",[55],{"id":802,"slug":803,"identity":804,"label":805,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":806,"versions":809,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":811},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[807,808],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[810],"3.10.14",[55],{"id":813,"slug":814,"identity":815,"label":816,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":817,"versions":818,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":819},"package:pypi:pi-heif","pi-heif-b188197b","pypi:pi-heif","pi-heif",[382],[452],[55],{"id":821,"slug":822,"identity":823,"label":824,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":825,"versions":826,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":828},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[370,441],[827],"18.1.0",[55],{"id":830,"slug":831,"identity":832,"label":833,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":834,"versions":835,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":837},"package:pypi:pycryptodome","pycryptodome-44737a20","pypi:pycryptodome","pycryptodome",[441],[836],"3.10.1",[55],{"id":839,"slug":840,"identity":841,"label":842,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":843,"versions":844,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":846},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[679],[845],"2.19.1",[55],{"id":848,"slug":849,"identity":850,"label":851,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":852,"versions":853,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":855},"package:pypi:pynacl","pynacl-0a554710","pypi:pynacl","pynacl",[370],[854],"1.5.0",[55],{"id":857,"slug":858,"identity":859,"label":860,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":861,"versions":862,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":864},"package:pypi:pypdf2","pypdf2-eea60a87","pypi:pypdf2","pypdf2",[441],[863],"3.0.1",[55],{"id":866,"slug":867,"identity":868,"label":869,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":870,"versions":871,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":873},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[382],[872],"1.0.1",[55],{"id":875,"slug":876,"identity":877,"label":878,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":879,"versions":881,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":883},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[880],"MIT AND MPL-2.0",[882],"4.67.1",[55],{"id":885,"slug":886,"identity":887,"label":888,"aiRelevant":46,"provider":379,"advisoryCount":32,"licenseExpressions":889,"versions":890,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":892},"package:pypi:unstructured","unstructured-9ec9bd94","pypi:unstructured","unstructured",[370],[891],"0.16.12",[55],{"id":894,"slug":895,"identity":896,"label":897,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":898,"versions":899,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":901},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[370],[900],"24.1.0",[55],{"id":903,"slug":904,"identity":905,"label":906,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":907,"versions":909,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":911},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[908],"PSF-2.0",[910],"2.4.4",[55],{"id":913,"slug":914,"identity":915,"label":916,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":917,"versions":918,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":920},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[370],[919],"1.3.2",[55],{"id":922,"slug":923,"identity":924,"label":925,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":926,"versions":927,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":929},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[393],[928],"1.14.0",[55],{"id":931,"slug":932,"identity":933,"label":934,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":935,"versions":936,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":938},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[393],[937],"0.7.0",[55],{"id":940,"slug":941,"identity":942,"label":943,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":944,"versions":945,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":947},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[441],[946],"4.9.3",[55],{"id":949,"slug":950,"identity":951,"label":952,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":953,"versions":954,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":956},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[393],[955],"4.8.0",[55],{"id":958,"slug":959,"identity":960,"label":961,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":962,"versions":963,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":965},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[441],[964],"0.1.4",[55],{"id":967,"slug":968,"identity":969,"label":970,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":971,"versions":972,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":974},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[393],[973],"3.11.0",[55],{"id":976,"slug":977,"identity":978,"label":979,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":980,"versions":981,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":983},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[370],[982],"3.0.0",[55],{"id":985,"slug":986,"identity":987,"label":988,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":989,"versions":990,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":992},"package:pypi:async-timeout","async-timeout-218334ed","pypi:async-timeout","async-timeout",[370],[991],"5.0.1",[55],{"id":994,"slug":995,"identity":996,"label":997,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":998,"versions":999,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1001},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[393],[1000],"0.0.8",[55],{"id":1003,"slug":1004,"identity":1005,"label":1006,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1007,"versions":1008,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1010},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[393],[1009],"24.3.0",[55],{"id":1012,"slug":1013,"identity":1014,"label":1015,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1016,"versions":1017,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1019},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[393],[1018],"2.2.1",[55],{"id":1021,"slug":1022,"identity":1023,"label":1024,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1025,"versions":1026,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1028},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[393],[1027],"4.12.3",[55],{"id":1030,"slug":1031,"identity":1032,"label":1033,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1034,"versions":1035,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1037},"package:pypi:blis","blis-b338dbfd","pypi:blis","blis",[382],[1036],"1.1.0",[55],{"id":1039,"slug":1040,"identity":1041,"label":1042,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1043,"versions":1044,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1046},"package:pypi:bs4","bs4-8083bff2","pypi:bs4","bs4",[393],[1045],"0.0.2",[55],{"id":1048,"slug":1049,"identity":1050,"label":1051,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1052,"versions":1053,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1055},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[393],[1054],"5.5.0",[55],{"id":1057,"slug":1058,"identity":1059,"label":1060,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1061,"versions":1062,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1064},"package:pypi:catalogue","catalogue-fc77ee14","pypi:catalogue","catalogue",[393],[1063],"2.0.10",[55],{"id":1066,"slug":1067,"identity":1068,"label":1069,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1070,"versions":1071,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1073},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[393],[1072],"1.17.1",[55],{"id":1075,"slug":1076,"identity":1077,"label":1078,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1079,"versions":1081,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1083},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[1080,441],"0BSD",[1082],"5.2.0",[55],{"id":1085,"slug":1086,"identity":1087,"label":1088,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1089,"versions":1090,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1092},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[393],[1091],"3.4.1",[55],{"id":1094,"slug":1095,"identity":1096,"label":1097,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1098,"versions":1099,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1101},"package:pypi:cloudpathlib","cloudpathlib-2ee84451","pypi:cloudpathlib","cloudpathlib",[393],[1100],"0.20.0",[55],{"id":1103,"slug":1104,"identity":1105,"label":1106,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1107,"versions":1108,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1110},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[382],[1109],"3.1.0",[55],{"id":1112,"slug":1113,"identity":1114,"label":1115,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1116,"versions":1117,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1119},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[441],[1118],"0.4.6",[55],{"id":1121,"slug":1122,"identity":1123,"label":1124,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1125,"versions":1126,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1128},"package:pypi:coloredlogs","coloredlogs-941daca5","pypi:coloredlogs","coloredlogs",[393],[1127],"15.0.1",[55],{"id":1130,"slug":1131,"identity":1132,"label":1133,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1134,"versions":1135,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1137},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[393],[1136],"6.9.0",[55],{"id":1139,"slug":1140,"identity":1141,"label":1142,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1143,"versions":1144,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1146},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[441],[1145],"0.2.2",[55],{"id":1148,"slug":1149,"identity":1150,"label":1151,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1152,"versions":1153,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1155},"package:pypi:confection","confection-f28e9d5d","pypi:confection","confection",[393],[1154],"0.1.5",[55],{"id":1157,"slug":1158,"identity":1159,"label":1160,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1161,"versions":1162,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1164},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[441],[1163],"1.3.1",[55],{"id":1166,"slug":1167,"identity":1168,"label":1169,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1170,"versions":1171,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1173},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[441],[1172],"0.12.1",[55],{"id":1175,"slug":1176,"identity":1177,"label":1178,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1179,"versions":1180,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1181},"package:pypi:cymem","cymem-9e21fc01","pypi:cymem","cymem",[393],[1063],[55],{"id":1183,"slug":1184,"identity":1185,"label":1186,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1187,"versions":1188,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1190},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[393],[1189],"0.6.7",[55],{"id":1192,"slug":1193,"identity":1194,"label":1195,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1196,"versions":1197,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1199},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[393],[1198],"1.8.11",[55],{"id":1201,"slug":1202,"identity":1203,"label":1204,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1205,"versions":1206,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1208},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[679,441],[1207],"5.1.1",[55],{"id":1210,"slug":1211,"identity":1212,"label":1213,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1214,"versions":1215,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1217},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[393],[1216],"1.2.15",[55],{"id":1219,"slug":1220,"identity":1221,"label":1222,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1223,"versions":1224,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1226},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[382],[1225],"0.3.8",[55],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1232,"versions":1233,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1235},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[370],[1234],"1.9.0",[55],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1241,"versions":1243,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1245},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[1242],"ISC",[1244],"2.7.0",[55],{"id":1247,"slug":1248,"identity":1249,"label":1250,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1251,"versions":1252,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1254},"package:pypi:effdet","effdet-fa41b694","pypi:effdet","effdet",[370],[1253],"0.4.1",[55],{"id":1256,"slug":1257,"identity":1258,"label":1259,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1260,"versions":1261,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1263},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[642],[1262],"2.2.0",[55],{"id":1265,"slug":1266,"identity":1267,"label":1268,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1269,"versions":1270,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1272},"package:pypi:emoji","emoji-b8402ff3","pypi:emoji","emoji",[382],[1271],"2.14.0",[55],{"id":1274,"slug":1275,"identity":1276,"label":1277,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1278,"versions":1279,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1280},"package:pypi:eval-type-backport","eval-type-backport-a648ef5a","pypi:eval-type-backport","eval-type-backport",[393],[1145],[55],{"id":1282,"slug":1283,"identity":1284,"label":1285,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1286,"versions":1287,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1289},"package:pypi:evaluate","evaluate-18162fdd","pypi:evaluate","evaluate",[370],[1288],"0.4.3",[55],{"id":1291,"slug":1292,"identity":1293,"label":1294,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1295,"versions":1296,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1298},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[393],[1297],"1.2.2",[55],{"id":1300,"slug":1301,"identity":1302,"label":1303,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1304,"versions":1305,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1307},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[393],[1306],"2.1.0",[55],{"id":1309,"slug":1310,"identity":1311,"label":1312,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1313,"versions":1314,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1316},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[393],[1315],"0.111.1",[55],{"id":1318,"slug":1319,"identity":1320,"label":1321,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1322,"versions":1323,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1325},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[393],[1324],"0.0.7",[55],{"id":1327,"slug":1328,"identity":1329,"label":1330,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1331,"versions":1332,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1334},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[393],[1333],"1.2.0",[55],{"id":1336,"slug":1337,"identity":1338,"label":1339,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1340,"versions":1341,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1343},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[370],[1342],"24.12.23",[55],{"id":1345,"slug":1346,"identity":1347,"label":1348,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1349,"versions":1350,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1351},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[370],[854],[55],{"id":1353,"slug":1354,"identity":1355,"label":1356,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1357,"versions":1358,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1360},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[382,441],[1359],"2024.9.0",[55],{"id":1362,"slug":1363,"identity":1364,"label":1365,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1366,"versions":1367,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1369},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[370],[1368],"2.24.0",[55],{"id":1371,"slug":1372,"identity":1373,"label":1374,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1375,"versions":1376,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1378},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[370],[1377],"2.37.0",[55],{"id":1380,"slug":1381,"identity":1382,"label":1383,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1384,"versions":1385,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1387},"package:pypi:google-cloud-vision","google-cloud-vision-53fabd8a","pypi:google-cloud-vision","google-cloud-vision",[370],[1386],"3.9.0",[55],{"id":1389,"slug":1390,"identity":1391,"label":1392,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1393,"versions":1394,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1396},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[370],[1395],"1.66.0",[55],{"id":1398,"slug":1399,"identity":1400,"label":1401,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1402,"versions":1405,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1407},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[393,1403,1404],"MIT AND PSF-2.0","MIT AND Python-2.0",[1406],"3.1.1",[55],{"id":1409,"slug":1410,"identity":1411,"label":1412,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1413,"versions":1414,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1416},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[370],[1415],"1.69.0",[55],{"id":1418,"slug":1419,"identity":1420,"label":1421,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1422,"versions":1423,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1424},"package:pypi:grpcio-status","grpcio-status-f4c90de4","pypi:grpcio-status","grpcio-status",[370],[1415],[55],{"id":1426,"slug":1427,"identity":1428,"label":1429,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1430,"versions":1431,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1433},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[393],[1432],"22.0.0",[55],{"id":1435,"slug":1436,"identity":1437,"label":1438,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1439,"versions":1440,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1442},"package:pypi:html5lib","html5lib-0ea30fe2","pypi:html5lib","html5lib",[393],[1441],"1.1",[55],{"id":1444,"slug":1445,"identity":1446,"label":1447,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1448,"versions":1449,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1451},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[382],[1450],"1.0.7",[55],{"id":1453,"slug":1454,"identity":1455,"label":1456,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1457,"versions":1458,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1460},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[393],[1459],"0.6.4",[55],{"id":1462,"slug":1463,"identity":1464,"label":1465,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1466,"versions":1467,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1469},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[382],[1468],"0.27.2",[55],{"id":1471,"slug":1472,"identity":1473,"label":1474,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1475,"versions":1476,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1478},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[370,441],[1477],"0.27.1",[55],{"id":1480,"slug":1481,"identity":1482,"label":1483,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1484,"versions":1485,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1487},"package:pypi:humanfriendly","humanfriendly-8694dbe5","pypi:humanfriendly","humanfriendly",[393],[1486],"10.0",[55],{"id":1489,"slug":1490,"identity":1491,"label":1492,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1493,"versions":1494,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1496},"package:pypi:imbalanced-learn","imbalanced-learn-efacef92","pypi:imbalanced-learn","imbalanced-learn",[393],[1495],"0.13.0",[55],{"id":1498,"slug":1499,"identity":1500,"label":1501,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1502,"versions":1503,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1505},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[370,441],[1504],"8.5.0",[55],{"id":1507,"slug":1508,"identity":1509,"label":1510,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1511,"versions":1512,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1514},"package:pypi:iopath","iopath-9dbbc2b2","pypi:iopath","iopath",[441],[1513],"0.1.10",[55],{"id":1516,"slug":1517,"identity":1518,"label":1519,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1520,"versions":1521,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1523},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[382,441],[1522],"6.29.5",[55],{"id":1525,"slug":1526,"identity":1527,"label":1528,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1529,"versions":1530,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1532},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[382],[1531],"8.31.0",[55],{"id":1534,"slug":1535,"identity":1536,"label":1537,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1538,"versions":1539,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1541},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[382],[1540],"8.1.5",[55],{"id":1543,"slug":1544,"identity":1545,"label":1546,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1547,"versions":1548,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1550},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[393],[1549],"0.19.2",[55],{"id":1552,"slug":1553,"identity":1554,"label":1555,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1556,"versions":1557,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1559},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[393],[1558],"0.8.2",[55],{"id":1561,"slug":1562,"identity":1563,"label":1564,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1565,"versions":1566,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1568},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[382],[1567],"1.4.2",[55],{"id":1570,"slug":1571,"identity":1572,"label":1573,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1574,"versions":1575,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1577},"package:pypi:jsonpath-python","jsonpath-python-54762115","pypi:jsonpath-python","jsonpath-python",[393],[1576],"1.0.6",[55],{"id":1579,"slug":1580,"identity":1581,"label":1582,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1583,"versions":1584,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1586},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[393],[1585],"4.23.0",[55],{"id":1588,"slug":1589,"identity":1590,"label":1591,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1592,"versions":1593,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1595},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[393],[1594],"2024.10.1",[55],{"id":1597,"slug":1598,"identity":1599,"label":1600,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1601,"versions":1602,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1604},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[441],[1603],"8.6.3",[55],{"id":1606,"slug":1607,"identity":1608,"label":1609,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1610,"versions":1611,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1613},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[382,441],[1612],"3.0.13",[55],{"id":1615,"slug":1616,"identity":1617,"label":1618,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1619,"versions":1620,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1622},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[441],[1621],"1.4.8",[55],{"id":1624,"slug":1625,"identity":1626,"label":1627,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1628,"versions":1629,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1631},"package:pypi:langcodes","langcodes-237af017","pypi:langcodes","langcodes",[393],[1630],"3.5.0",[55],{"id":1633,"slug":1634,"identity":1635,"label":1636,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1637,"versions":1638,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1640},"package:pypi:langdetect","langdetect-3c0edcca","pypi:langdetect","langdetect",[393],[1639],"1.0.9",[55],{"id":1642,"slug":1643,"identity":1644,"label":1645,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1646,"versions":1647,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1649},"package:pypi:language-data","language-data-9194e1a5","pypi:language-data","language-data",[393],[1648],"1.3.0",[55],{"id":1651,"slug":1652,"identity":1653,"label":1654,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1655,"versions":1656,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1658},"package:pypi:layoutparser","layoutparser-db3aa325","pypi:layoutparser","layoutparser",[370],[1657],"0.3.4",[55],{"id":1660,"slug":1661,"identity":1662,"label":1663,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1664,"versions":1665,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1667},"package:pypi:magicattr","magicattr-40bff089","pypi:magicattr","magicattr",[393],[1666],"0.1.6",[55],{"id":1669,"slug":1670,"identity":1671,"label":1672,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1673,"versions":1674,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1675},"package:pypi:marisa-trie","marisa-trie-06f80e2d","pypi:marisa-trie","marisa-trie",[393],[443],[55],{"id":1677,"slug":1678,"identity":1679,"label":1680,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1681,"versions":1682,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1683},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[393],[982],[55],{"id":1685,"slug":1686,"identity":1687,"label":1688,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1689,"versions":1690,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1692},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[382,441],[1691],"3.0.2",[55],{"id":1694,"slug":1695,"identity":1696,"label":1697,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1698,"versions":1699,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1701},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[441],[1700],"3.10.0",[55],{"id":1703,"slug":1704,"identity":1705,"label":1706,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1707,"versions":1708,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1710},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[441],[1709],"0.1.7",[55],{"id":1712,"slug":1713,"identity":1714,"label":1715,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1716,"versions":1717,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1719},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[393],[1718],"0.1.2",[55],{"id":1721,"slug":1722,"identity":1723,"label":1724,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1725,"versions":1726,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1727},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[441],[1648],[55],{"id":1729,"slug":1730,"identity":1731,"label":1732,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1733,"versions":1734,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1736},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[370],[1735],"6.1.0",[55],{"id":1738,"slug":1739,"identity":1740,"label":1741,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1742,"versions":1743,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1745},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[382],[1744],"0.70.16",[55],{"id":1747,"slug":1748,"identity":1749,"label":1750,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1751,"versions":1752,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1754},"package:pypi:murmurhash","murmurhash-576fddb8","pypi:murmurhash","murmurhash",[393],[1753],"1.0.11",[55],{"id":1756,"slug":1757,"identity":1758,"label":1759,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1760,"versions":1761,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1763},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[393],[1762],"1.0.0",[55],{"id":1765,"slug":1766,"identity":1767,"label":1768,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1769,"versions":1771,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1773},"package:pypi:ndjson","ndjson-64ad2467","pypi:ndjson","ndjson",[1770],"GPL-3.0",[1772],"0.3.1",[55],{"id":1775,"slug":1776,"identity":1777,"label":1778,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1779,"versions":1780,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1782},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[441],[1781],"1.6.0",[55],{"id":1784,"slug":1785,"identity":1786,"label":1787,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1788,"versions":1789,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1791},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[382,441],[1790],"3.4.2",[55],{"id":1793,"slug":1794,"identity":1795,"label":1796,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1797,"versions":1799,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1801},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1798,441],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1800],"1.26.4",[55],{"id":1803,"slug":1804,"identity":1805,"label":1806,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1807,"versions":1808,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1810},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[441],[1809],"12.4.5.8",[55],{"id":1812,"slug":1813,"identity":1814,"label":1815,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1816,"versions":1817,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1819},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[441],[1818],"12.4.127",[55],{"id":1821,"slug":1822,"identity":1823,"label":1824,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1825,"versions":1826,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1827},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[441],[1818],[55],{"id":1829,"slug":1830,"identity":1831,"label":1832,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1833,"versions":1834,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1835},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[441],[1818],[55],{"id":1837,"slug":1838,"identity":1839,"label":1840,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1841,"versions":1842,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1844},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[441],[1843],"9.1.0.70",[55],{"id":1846,"slug":1847,"identity":1848,"label":1849,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1850,"versions":1851,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1853},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[441],[1852],"11.2.1.3",[55],{"id":1855,"slug":1856,"identity":1857,"label":1858,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1859,"versions":1860,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1862},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[441],[1861],"10.3.5.147",[55],{"id":1864,"slug":1865,"identity":1866,"label":1867,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1868,"versions":1869,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1871},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[441],[1870],"11.6.1.9",[55],{"id":1873,"slug":1874,"identity":1875,"label":1876,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1877,"versions":1878,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1880},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[441],[1879],"12.3.1.170",[55],{"id":1882,"slug":1883,"identity":1884,"label":1885,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1886,"versions":1887,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1889},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[382,441],[1888],"2.21.5",[55],{"id":1891,"slug":1892,"identity":1893,"label":1894,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1895,"versions":1896,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1897},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[441],[1818],[55],{"id":1899,"slug":1900,"identity":1901,"label":1902,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1903,"versions":1904,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1905},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[370,441],[1818],[55],{"id":1907,"slug":1908,"identity":1909,"label":1910,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1911,"versions":1912,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1914},"package:pypi:oauthlib","oauthlib-5d97cdbc","pypi:oauthlib","oauthlib",[382,441],[1913],"3.2.2",[55],{"id":1916,"slug":1917,"identity":1918,"label":1919,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1920,"versions":1921,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1923},"package:pypi:olefile","olefile-c842b5c6","pypi:olefile","olefile",[441],[1922],"0.47",[55],{"id":1925,"slug":1926,"identity":1927,"label":1928,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1929,"versions":1930,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1931},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[382],[584],[55],{"id":1933,"slug":1934,"identity":1935,"label":1936,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1937,"versions":1938,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1940},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[393],[1939],"1.20.1",[55],{"id":1942,"slug":1943,"identity":1944,"label":1945,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1946,"versions":1947,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1949},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[382,393],[1948],"4.1.0",[55],{"id":1951,"slug":1952,"identity":1953,"label":1954,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1955,"versions":1957,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1959},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1956,441],"Apache-2.0 OR BSD-2-Clause",[1958],"24.2",[55],{"id":1961,"slug":1962,"identity":1963,"label":1964,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1965,"versions":1966,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1968},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[441],[1967],"2.2.3",[55],{"id":1970,"slug":1971,"identity":1972,"label":1973,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1974,"versions":1975,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1977},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[393],[1976],"0.8.4",[55],{"id":1979,"slug":1980,"identity":1981,"label":1982,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1983,"versions":1984,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1985},"package:pypi:pdf2image","pdf2image-0ecc86ea","pypi:pdf2image","pdf2image",[393],[548],[55],{"id":1987,"slug":1988,"identity":1989,"label":1990,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":1991,"versions":1992,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1994},"package:pypi:pdfplumber","pdfplumber-ba8dca54","pypi:pdfplumber","pdfplumber",[],[1993],"0.5.3",[55],{"id":1996,"slug":1997,"identity":1998,"label":1999,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2000,"versions":2001,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2003},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[441],[2002],"4.9.0",[55],{"id":2005,"slug":2006,"identity":2007,"label":2008,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2009,"versions":2010,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2012},"package:pypi:pikepdf","pikepdf-9b0a0b6c","pypi:pikepdf","pikepdf",[707],[2011],"9.5.1",[55],{"id":2014,"slug":2015,"identity":2016,"label":2017,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2018,"versions":2019,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2021},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[393],[2020],"4.3.6",[55],{"id":2023,"slug":2024,"identity":2025,"label":2026,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2027,"versions":2028,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2029},"package:pypi:portalocker","portalocker-889424fa","pypi:portalocker","portalocker",[382],[1406],[55],{"id":2031,"slug":2032,"identity":2033,"label":2034,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2035,"versions":2036,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2038},"package:pypi:preshed","preshed-ccc69f08","pypi:preshed","preshed",[393],[2037],"3.0.9",[55],{"id":2040,"slug":2041,"identity":2042,"label":2043,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2044,"versions":2045,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2047},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[382,441],[2046],"3.0.48",[55],{"id":2049,"slug":2050,"identity":2051,"label":2052,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2053,"versions":2054,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2056},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[370],[2055],"0.2.1",[55],{"id":2058,"slug":2059,"identity":2060,"label":2061,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2062,"versions":2063,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2065},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[370],[2064],"1.25.0",[55],{"id":2067,"slug":2068,"identity":2069,"label":2070,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2071,"versions":2072,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2074},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[382],[2073],"6.1.1",[55],{"id":2076,"slug":2077,"identity":2078,"label":2079,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2080,"versions":2081,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2082},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1242],[937],[55],{"id":2084,"slug":2085,"identity":2086,"label":2087,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2088,"versions":2089,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2091},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[393],[2090],"0.2.3",[55],{"id":2093,"slug":2094,"identity":2095,"label":2096,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2097,"versions":2098,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2099},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[441],[1253],[55],{"id":2101,"slug":2102,"identity":2103,"label":2104,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2105,"versions":2106,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2108},"package:pypi:pycocotools","pycocotools-65bdc5df","pypi:pycocotools","pycocotools",[441],[2107],"2.0.8",[55],{"id":2110,"slug":2111,"identity":2112,"label":2113,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2114,"versions":2115,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2117},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[382],[2116],"2.22",[55],{"id":2119,"slug":2120,"identity":2121,"label":2122,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2123,"versions":2124,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2126},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[393],[2125],"2.9.2",[55],{"id":2128,"slug":2129,"identity":2130,"label":2131,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2132,"versions":2133,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2135},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[393],[2134],"2.23.4",[55],{"id":2137,"slug":2138,"identity":2139,"label":2140,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2141,"versions":2142,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2144},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[393],[2143],"3.2.1",[55],{"id":2146,"slug":2147,"identity":2148,"label":2149,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2150,"versions":2151,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2153},"package:pypi:pyreadline3","pyreadline3-e43706a5","pypi:pyreadline3","pyreadline3",[441],[2152],"3.5.4",[55],{"id":2155,"slug":2156,"identity":2157,"label":2158,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2159,"versions":2160,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2162},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[441],[2161],"2.9.0.post0",[55],{"id":2164,"slug":2165,"identity":2166,"label":2167,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2168,"versions":2169,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2171},"package:pypi:python-iso639","python-iso639-ccd49637","pypi:python-iso639","python-iso639",[370],[2170],"2024.10.22",[55],{"id":2173,"slug":2174,"identity":2175,"label":2176,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2177,"versions":2178,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2180},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[393],[2179],"0.4.27",[55],{"id":2182,"slug":2183,"identity":2184,"label":2185,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2186,"versions":2187,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2189},"package:pypi:python-oxmsg","python-oxmsg-1cecb37a","pypi:python-oxmsg","python-oxmsg",[393],[2188],"0.0.1",[55],{"id":2191,"slug":2192,"identity":2193,"label":2194,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2195,"versions":2196,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2198},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[393],[2197],"2024.2",[55],{"id":2200,"slug":2201,"identity":2202,"label":2203,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2204,"versions":2205,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2207},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2206],"308",[55],{"id":2209,"slug":2210,"identity":2211,"label":2212,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2213,"versions":2214,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2216},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[393],[2215],"6.0.2",[55],{"id":2218,"slug":2219,"identity":2220,"label":2221,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2222,"versions":2223,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2225},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[441],[2224],"26.2.0",[55],{"id":2227,"slug":2228,"identity":2229,"label":2230,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2231,"versions":2232,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2233},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[393],[973],[55],{"id":2235,"slug":2236,"identity":2237,"label":2238,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2239,"versions":2240,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2242},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[393],[2241],"5.2.1",[55],{"id":2244,"slug":2245,"identity":2246,"label":2247,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2248,"versions":2249,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2251},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[393],[2250],"0.35.1",[55],{"id":2253,"slug":2254,"identity":2255,"label":2256,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2257,"versions":2259,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2261},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2258,441],"Apache-2.0 AND CNRI-Python",[2260],"2024.11.6",[55],{"id":2263,"slug":2264,"identity":2265,"label":2266,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2267,"versions":2268,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2269},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[370],[1762],[55],{"id":2271,"slug":2272,"identity":2273,"label":2274,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2275,"versions":2276,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2278},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[393],[2277],"13.9.4",[55],{"id":2280,"slug":2281,"identity":2282,"label":2283,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2284,"versions":2285,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2287},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[393],[2286],"0.12.0",[55],{"id":2289,"slug":2290,"identity":2291,"label":2292,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2293,"versions":2294,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2296},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[393],[2295],"0.22.3",[55],{"id":2298,"slug":2299,"identity":2300,"label":2301,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2302,"versions":2303,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2304},"package:pypi:rq","rq-30f38331","pypi:rq","rq",[679],[1306],[55],{"id":2306,"slug":2307,"identity":2308,"label":2309,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2310,"versions":2311,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2313},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[370],[2312],"4.9",[55],{"id":2315,"slug":2316,"identity":2317,"label":2318,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2319,"versions":2320,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2322},"package:pypi:ruamel-yaml","ruamel-yaml-4c58c99d","pypi:ruamel-yaml","ruamel-yaml",[393],[2321],"0.18.10",[55],{"id":2324,"slug":2325,"identity":2326,"label":2327,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2328,"versions":2329,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2331},"package:pypi:ruamel-yaml-clib","ruamel-yaml-clib-56105e16","pypi:ruamel-yaml-clib","ruamel-yaml-clib",[393],[2330],"0.2.12",[55],{"id":2333,"slug":2334,"identity":2335,"label":2336,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2337,"versions":2338,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2340},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[441],[2339],"0.5.2",[55],{"id":2342,"slug":2343,"identity":2344,"label":2345,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2346,"versions":2347,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2349},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[441],[2348],"1.15.0",[55],{"id":2351,"slug":2352,"identity":2353,"label":2354,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2355,"versions":2356,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2358},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[441],[2357],"1.5.4",[55],{"id":2360,"slug":2361,"identity":2362,"label":2363,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2364,"versions":2365,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2366},"package:pypi:six","six-3c3888bd","pypi:six","six",[393],[548],[55],{"id":2368,"slug":2369,"identity":2370,"label":2371,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2372,"versions":2373,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2375},"package:pypi:sklearn-compat","sklearn-compat-4332ec33","pypi:sklearn-compat","sklearn-compat",[441],[2374],"0.1.3",[55],{"id":2377,"slug":2378,"identity":2379,"label":2380,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2381,"versions":2382,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2384},"package:pypi:smart-open","smart-open-6f8d7c36","pypi:smart-open","smart-open",[393],[2383],"7.1.0",[55],{"id":2386,"slug":2387,"identity":2388,"label":2389,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2390,"versions":2391,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2392},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[807],[1163],[55],{"id":2394,"slug":2395,"identity":2396,"label":2397,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2398,"versions":2399,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2401},"package:pypi:spacy","spacy-c452aae3","pypi:spacy","spacy",[393],[2400],"3.8.3",[55],{"id":2403,"slug":2404,"identity":2405,"label":2406,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2407,"versions":2408,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2410},"package:pypi:spacy-legacy","spacy-legacy-9520d7df","pypi:spacy-legacy","spacy-legacy",[393],[2409],"3.0.12",[55],{"id":2412,"slug":2413,"identity":2414,"label":2415,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2416,"versions":2417,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2419},"package:pypi:spacy-loggers","spacy-loggers-6508f34b","pypi:spacy-loggers","spacy-loggers",[393],[2418],"1.0.5",[55],{"id":2421,"slug":2422,"identity":2423,"label":2424,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2425,"versions":2426,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2428},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[393],[2427],"2.0.37",[55],{"id":2430,"slug":2431,"identity":2432,"label":2433,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2434,"versions":2435,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2437},"package:pypi:srsly","srsly-ea9d0184","pypi:srsly","srsly",[393],[2436],"2.5.0",[55],{"id":2439,"slug":2440,"identity":2441,"label":2442,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2443,"versions":2444,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2446},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[393],[2445],"0.6.3",[55],{"id":2448,"slug":2449,"identity":2450,"label":2451,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2452,"versions":2453,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2455},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[441],[2454],"1.13.1",[55],{"id":2457,"slug":2458,"identity":2459,"label":2460,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2461,"versions":2462,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2464},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[370],[2463],"9.0.0",[55],{"id":2466,"slug":2467,"identity":2468,"label":2469,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2470,"versions":2471,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2473},"package:pypi:thinc","thinc-32b2f7f5","pypi:thinc","thinc",[393],[2472],"8.3.3",[55],{"id":2475,"slug":2476,"identity":2477,"label":2478,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2479,"versions":2480,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2481},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[382],[1630],[55],{"id":2483,"slug":2484,"identity":2485,"label":2486,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2487,"versions":2488,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2490},"package:pypi:timm","timm-4594fb75","pypi:timm","timm",[370],[2489],"1.0.12",[55],{"id":2492,"slug":2493,"identity":2494,"label":2495,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2496,"versions":2497,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2499},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[441],[2498],"0.20.1",[55],{"id":2501,"slug":2502,"identity":2503,"label":2504,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2505,"versions":2506,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2508},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[441],[2507],"5.14.3",[55],{"id":2510,"slug":2511,"identity":2512,"label":2513,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2514,"versions":2515,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2516},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[393],[1109],[55],{"id":2518,"slug":2519,"identity":2520,"label":2521,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2522,"versions":2523,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2525},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[393],[2524],"0.15.1",[55],{"id":2527,"slug":2528,"identity":2529,"label":2530,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2531,"versions":2532,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2534},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[908,441],[2533],"4.12.2",[55],{"id":2536,"slug":2537,"identity":2538,"label":2539,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2540,"versions":2541,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2543},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[393],[2542],"0.9.0",[55],{"id":2545,"slug":2546,"identity":2547,"label":2548,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2549,"versions":2550,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2551},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[370],[2197],[55],{"id":2553,"slug":2554,"identity":2555,"label":2556,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2557,"versions":2558,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2560},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[393],[2559],"5.2",[55],{"id":2562,"slug":2563,"identity":2564,"label":2565,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2566,"versions":2567,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2569},"package:pypi:unicodecsv","unicodecsv-c6739579","pypi:unicodecsv","unicodecsv",[441],[2568],"0.14.1",[55],{"id":2571,"slug":2572,"identity":2573,"label":2574,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2575,"versions":2576,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2578},"package:pypi:unstructured-client","unstructured-client-182f0adb","pypi:unstructured-client","unstructured-client",[393],[2577],"0.28.1",[55],{"id":2580,"slug":2581,"identity":2582,"label":2583,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2584,"versions":2585,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2587},"package:pypi:unstructured-inference","unstructured-inference-293d0374","pypi:unstructured-inference","unstructured-inference",[370],[2586],"0.8.1",[55],{"id":2589,"slug":2590,"identity":2591,"label":2592,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2593,"versions":2594,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2596},"package:pypi:unstructured-pytesseract","unstructured-pytesseract-f5c4acd3","pypi:unstructured-pytesseract","unstructured-pytesseract",[370],[2595],"0.3.13",[55],{"id":2598,"slug":2599,"identity":2600,"label":2601,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2602,"versions":2603,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2605},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[382],[2604],"0.22.0",[55],{"id":2607,"slug":2608,"identity":2609,"label":2610,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2611,"versions":2612,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2613},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[393],[452],[55],{"id":2615,"slug":2616,"identity":2617,"label":2618,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2619,"versions":2620,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2622},"package:pypi:wand","wand-19b125a5","pypi:wand","wand",[393],[2621],"0.6.13",[55],{"id":2624,"slug":2625,"identity":2626,"label":2627,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2628,"versions":2629,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2631},"package:pypi:wasabi","wasabi-568fa465","pypi:wasabi","wasabi",[393],[2630],"1.1.3",[55],{"id":2633,"slug":2634,"identity":2635,"label":2636,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2637,"versions":2638,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2640},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[393],[2639],"1.0.3",[55],{"id":2642,"slug":2643,"identity":2644,"label":2645,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2646,"versions":2647,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2649},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[393],[2648],"0.2.13",[55],{"id":2651,"slug":2652,"identity":2653,"label":2654,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2655,"versions":2656,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2657},"package:pypi:weasel","weasel-b884b5dc","pypi:weasel","weasel",[393],[1253],[55],{"id":2659,"slug":2660,"identity":2661,"label":2662,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2663,"versions":2664,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2666},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[441],[2665],"0.5.1",[55],{"id":2668,"slug":2669,"identity":2670,"label":2671,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2672,"versions":2673,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2675},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[382],[2674],"14.1",[55],{"id":2677,"slug":2678,"identity":2679,"label":2680,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2681,"versions":2682,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2684},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[382],[2683],"4.0.13",[55],{"id":2686,"slug":2687,"identity":2688,"label":2689,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2690,"versions":2691,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2692},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[441],[548],[55],{"id":2694,"slug":2695,"identity":2696,"label":2697,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2698,"versions":2699,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2700},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[441],[1630],[55],{"id":2702,"slug":2703,"identity":2704,"label":2705,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2706,"versions":2707,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2709},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[370],[2708],"1.18.3",[55],{"id":2711,"slug":2712,"identity":2713,"label":2714,"aiRelevant":46,"provider":379,"advisoryCount":38,"licenseExpressions":2715,"versions":2716,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2718},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[393],[2717],"3.21.0",[55],[2720,2758,2793,2825,2858,2889,2922,2949,2975,3000,3026,3057,3084,3127,3153,3179,3208,3236,3268,3291,3320,3347,3383,3409,3436,3456,3474,3504,3537,3563,3587,3627,3665,3691,3714,3737,3759,3784,3809,3837,3860,3885,3920,3943,3971,3998,4017,4051,4091,4116,4140,4163,4190,4205,4228,4250,4273,4296,4321,4352,4381,4409,4434,4465,4504,4531,4560,4589,4607,4628,4677,4703,4742,4774,4799,4823,4846,4867,4894,4928,4955,4981,5011,5031,5054,5079,5111,5139,5196,5221,5243,5275,5315,5339,5371,5398,5432,5459,5484,5518,5544,5568,5589,5613,5636,5655,5688,5713,5738,5765,5788,5811,5837,5865,5880,5913,5940,5962,5984,6016,6036,6063,6088,6115,6150,6180,6213,6237,6264,6295,6318,6346,6368,6393,6422,6441,6462,6483,6510,6533,6561,6585,6604,6626,6648,6678,6699,6722,6745,6793,6815,6836,6856,6884,6906,6931,6952,6976,6991,7017,7039,7065,7080,7100,7136,7162,7194,7219,7246,7283,7310,7363,7392,7419,7433,7463,7495,7521,7542,7565,7593,7621,7647,7673,7699,7722,7742,7772,7797,7826,7854,7880,7932,7957,7980,8006,8039,8073,8098,8123,8155,8174,8201,8220,8240,8268,8289,8311,8327,8347,8364,8383,8400,8421,8437,8452,8469,8484,8501,8518,8535,8548,8561,8574,8587,8600,8613,8626,8639,8657,8674,8690,8712,8725,8758,8779,8798,8815,8832,8850,8873,8902,8929,8950,8970,8990,9003],{"id":107,"slug":2721,"dossier":46,"summary":2722,"aliases":2723,"sourceIds":2726,"published":2727,"modified":2728,"checkedAt":7,"severity":2729,"references":2736,"versionKeys":2756,"packageCount":32,"repositoryCount":32},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[2724,2725],"CVE-2026-48156","PYSEC-2026-3004",[107,2725],"2026-06-12T18:29:59Z","2026-07-13T16:43:52.833287270Z",[2730,2733],{"type":2731,"score":2732},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2734,"score":2735},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2737,2740,2743,2745,2747,2750,2752,2754],{"type":2738,"url":2739},"WEB","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":2741,"url":2742},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":2738,"url":2744},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":2738,"url":2746},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":2748,"url":2749},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":2738,"url":2751},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":2748,"url":2753},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":2741,"url":2755},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[2757],"pypi:pypdf@5.1.0",{"id":108,"slug":2759,"dossier":46,"summary":2760,"aliases":2761,"sourceIds":2764,"published":2765,"modified":2766,"checkedAt":7,"severity":2767,"references":2770,"versionKeys":2791,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2762,2763],"CVE-2024-39689","PYSEC-2024-230",[108,2763],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2768],{"type":2731,"score":2769},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2771,2773,2775,2778,2780,2782,2785,2787,2789],{"type":2741,"url":2772},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2741,"url":2774},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2776,"url":2777},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2748,"url":2779},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2738,"url":2781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2783,"url":2784},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2738,"url":2786},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2741,"url":2788},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2741,"url":2790},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2792],"pypi:certifi@2024.6.2",{"id":109,"slug":2794,"dossier":46,"summary":2795,"aliases":2796,"sourceIds":2799,"published":2800,"modified":2801,"checkedAt":7,"severity":2802,"references":2805,"versionKeys":2817,"packageCount":32,"repositoryCount":391},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2797,2798],"CVE-2026-4372","PYSEC-2026-2289",[109,2798],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2803],{"type":2731,"score":2804},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2806,2808,2810,2812,2815],{"type":2741,"url":2807},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2776,"url":2809},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2748,"url":2811},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2813,"url":2814},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2741,"url":2816},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2818,2819,2820,2821,2822,2823,2824],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":110,"slug":2826,"dossier":46,"summary":2827,"aliases":2828,"sourceIds":2831,"published":2832,"modified":2833,"checkedAt":7,"severity":2834,"references":2837,"versionKeys":2854,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2829,2830],"CVE-2025-54121","PYSEC-2026-1941",[110,2830],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2835],{"type":2731,"score":2836},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2838,2840,2842,2844,2846,2848,2850,2852],{"type":2738,"url":2839},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2741,"url":2841},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2776,"url":2843},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2748,"url":2845},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2738,"url":2847},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2738,"url":2849},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2748,"url":2851},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2741,"url":2853},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2855,2856,2857],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":111,"slug":2859,"dossier":46,"summary":2860,"aliases":2861,"sourceIds":2864,"published":2865,"modified":2866,"checkedAt":7,"severity":2867,"references":2872,"versionKeys":2879,"packageCount":32,"repositoryCount":2888},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2862,2863],"CVE-2026-54279","PYSEC-2026-2112",[111,2863],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2868,2870],{"type":2734,"score":2869},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2731,"score":2871},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2873,2875,2877],{"type":2741,"url":2874},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2748,"url":2876},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2776,"url":2878},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2880,2881,2882,2883,2884,2885,2886,2887],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":112,"slug":2890,"dossier":46,"summary":2891,"aliases":2892,"sourceIds":2895,"published":2896,"modified":2897,"checkedAt":7,"severity":2898,"references":2901,"versionKeys":2918,"packageCount":32,"repositoryCount":2921},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2893,2894],"CVE-2026-44307","PYSEC-2026-2617",[112,2894],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2899],{"type":2734,"score":2900},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2902,2904,2906,2908,2910,2912,2914,2916],{"type":2738,"url":2903},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2741,"url":2905},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2738,"url":2907},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2738,"url":2909},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2748,"url":2911},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2738,"url":2913},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2748,"url":2915},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2741,"url":2917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2919,2920],"pypi:mako@1.3.10","pypi:mako@1.3.8",5,{"id":113,"slug":2923,"dossier":46,"summary":2924,"aliases":2925,"sourceIds":2928,"published":2929,"modified":2930,"checkedAt":7,"severity":2931,"references":2933,"versionKeys":2948,"packageCount":32,"repositoryCount":32},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[2926,2927],"CVE-2026-24688","PYSEC-2026-1827",[113,2927],"2026-01-26T23:37:57Z","2026-07-07T17:56:12.815561375Z",[2932],{"type":2734,"score":2735},[2934,2936,2938,2940,2942,2943,2945,2946],{"type":2738,"url":2935},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":2741,"url":2937},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":2738,"url":2939},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":2738,"url":2941},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":2748,"url":2749},{"type":2738,"url":2944},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":2748,"url":2753},{"type":2741,"url":2947},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[2757],{"id":114,"slug":2950,"dossier":46,"summary":2951,"aliases":2952,"sourceIds":2955,"published":2956,"modified":2957,"checkedAt":7,"severity":2958,"references":2961,"versionKeys":2974,"packageCount":32,"repositoryCount":32},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[2953,2954],"CVE-2026-27628","PYSEC-2026-3005",[114,2954],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[2959],{"type":2734,"score":2960},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2962,2964,2966,2968,2970,2971,2972],{"type":2738,"url":2963},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":2741,"url":2965},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":2738,"url":2967},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":2738,"url":2969},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":2748,"url":2749},{"type":2748,"url":2753},{"type":2741,"url":2973},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[2757],{"id":115,"slug":2976,"dossier":46,"summary":2977,"aliases":2978,"sourceIds":2981,"published":2982,"modified":2983,"checkedAt":7,"severity":2984,"references":2989,"versionKeys":2999,"packageCount":32,"repositoryCount":2888},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2979,2980],"CVE-2026-34514","PYSEC-2026-2096",[115,2980],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2985,2987],{"type":2734,"score":2986},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2731,"score":2988},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2990,2992,2994,2996,2997],{"type":2776,"url":2991},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2741,"url":2993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2776,"url":2995},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2748,"url":2876},{"type":2741,"url":2998},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2880,2881,2882,2883,2884,2885,2886,2887],{"id":116,"slug":3001,"dossier":46,"summary":3002,"aliases":3003,"sourceIds":3006,"published":3007,"modified":3008,"checkedAt":7,"severity":3009,"references":3011,"versionKeys":3022,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[3004,3005],"CVE-2026-49476","PYSEC-2026-3071",[116,3005],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[3010],{"type":2731,"score":2871},[3012,3014,3016,3018,3020],{"type":2738,"url":3013},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":2748,"url":3015},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":2748,"url":3017},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":2741,"url":3019},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":2741,"url":3021},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[3023,3024,3025],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":117,"slug":3027,"dossier":91,"summary":3028,"aliases":3029,"sourceIds":3032,"published":3033,"modified":3034,"checkedAt":7,"severity":3035,"references":3038,"versionKeys":3051,"packageCount":32,"repositoryCount":104},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[3030,3031],"CVE-2025-66471","PYSEC-2026-1994",[117,3031],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[3036],{"type":2734,"score":3037},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[3039,3041,3043,3045,3047,3049],{"type":2738,"url":3040},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2741,"url":3042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2776,"url":3044},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2748,"url":3046},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2748,"url":3048},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2741,"url":3050},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[3052,3053,3054,3055,3056],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":118,"slug":3058,"dossier":46,"summary":3059,"aliases":3060,"sourceIds":3063,"published":3064,"modified":3065,"checkedAt":7,"severity":3066,"references":3069,"versionKeys":3082,"packageCount":32,"repositoryCount":105},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[3061,3062],"CVE-2025-30167","PYSEC-2026-1477",[118,3062],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[3067],{"type":2731,"score":3068},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3070,3072,3074,3076,3078,3080],{"type":2738,"url":3071},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":2741,"url":3073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":2738,"url":3075},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":2748,"url":3077},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":2748,"url":3079},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":2741,"url":3081},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[3083],"pypi:jupyter-core@5.7.2",{"id":119,"slug":3085,"dossier":46,"summary":3086,"aliases":3087,"sourceIds":3091,"published":3092,"modified":3093,"checkedAt":7,"severity":3094,"references":3101,"versionKeys":3123,"packageCount":32,"repositoryCount":622},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[3088,3089,3090],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[119,3090],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[3095,3097,3099],{"type":2731,"score":3096},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2734,"score":3098},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2731,"score":3100},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3102,3104,3107,3109,3111,3113,3115,3117,3119,3121],{"type":2741,"url":3103},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":3105,"url":3106},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":3105,"url":3108},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2738,"url":3110},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2748,"url":3112},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2738,"url":3114},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":3105,"url":3116},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2741,"url":3118},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2741,"url":3120},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2741,"url":3122},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[3124,3125,3126],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":120,"slug":3128,"dossier":46,"summary":3129,"aliases":3130,"sourceIds":3133,"published":3134,"modified":3135,"checkedAt":7,"severity":3136,"references":3138,"versionKeys":3152,"packageCount":32,"repositoryCount":105},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[3131,3132],"CVE-2025-3933","PYSEC-2026-1977",[120,3132],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[3137],{"type":2731,"score":2836},[3139,3141,3143,3145,3146,3148,3150],{"type":2741,"url":3140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2738,"url":3142},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2738,"url":3144},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2748,"url":2811},{"type":2738,"url":3147},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2748,"url":3149},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2741,"url":3151},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2818,2819],{"id":121,"slug":3154,"dossier":91,"summary":3155,"aliases":3156,"sourceIds":3159,"published":3160,"modified":3161,"checkedAt":7,"severity":3162,"references":3165,"versionKeys":3178,"packageCount":32,"repositoryCount":104},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3157,3158],"CVE-2026-21441","PYSEC-2026-1996",[121,3158],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[3163,3164],{"type":2731,"score":2871},{"type":2734,"score":3037},[3166,3168,3170,3172,3173,3175,3176],{"type":2738,"url":3167},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2741,"url":3169},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2776,"url":3171},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2748,"url":3046},{"type":2738,"url":3174},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2748,"url":3048},{"type":2741,"url":3177},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[3052,3053,3054,3055,3056],{"id":122,"slug":3180,"dossier":46,"summary":3181,"aliases":3182,"sourceIds":3185,"published":3186,"modified":3187,"checkedAt":7,"severity":3188,"references":3192,"versionKeys":3207,"packageCount":32,"repositoryCount":32},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[3183,3184],"CVE-2026-40260","PYSEC-2026-3006",[122,3184],"2026-04-10T20:59:36Z","2026-07-13T16:42:24.793622978Z",[3189,3190],{"type":2731,"score":2836},{"type":2734,"score":3191},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3193,3195,3197,3199,3201,3202,3204,3205],{"type":2738,"url":3194},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":2741,"url":3196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":2738,"url":3198},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":2738,"url":3200},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":2748,"url":2749},{"type":2738,"url":3203},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":2748,"url":2753},{"type":2741,"url":3206},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[2757],{"id":123,"slug":3209,"dossier":46,"summary":3210,"aliases":3211,"sourceIds":3214,"published":3215,"modified":3216,"checkedAt":7,"severity":3217,"references":3220,"versionKeys":3233,"packageCount":32,"repositoryCount":2921},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[3212,3213],"CVE-2026-54911","PYSEC-2026-2294",[123,3213],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[3218],{"type":2731,"score":3219},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3221,3223,3225,3227,3229,3231],{"type":2776,"url":3222},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":2741,"url":3224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":2776,"url":3226},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":2738,"url":3228},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":2748,"url":3230},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":2741,"url":3232},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[3234,3235],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",{"id":124,"slug":3237,"dossier":46,"summary":3238,"aliases":3239,"sourceIds":3242,"published":3243,"modified":3244,"checkedAt":7,"severity":3245,"references":3249,"versionKeys":3266,"packageCount":32,"repositoryCount":32},"ghsa-3r9x-f23j-gc73-540cef2a","onnx Vulnerable to Path Traversal via Symlink",[3240,3241],"CVE-2026-27489","PYSEC-2026-2239",[124,3241],"2026-03-31T22:34:25Z","2026-07-13T07:26:40.732136112Z",[3246,3247],{"type":2734,"score":2900},{"type":2731,"score":3248},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3250,3252,3254,3256,3258,3260,3262,3264],{"type":2776,"url":3251},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-3r9x-f23j-gc73",{"type":2741,"url":3253},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27489",{"type":2776,"url":3255},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fcommit\u002F4755f8053928dce18a61db8fec71b69c74f786cb",{"type":2748,"url":3257},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx",{"type":2738,"url":3259},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27489",{"type":2738,"url":3261},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27489.json",{"type":2741,"url":3263},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3105,"url":3265},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453929",[3267],"pypi:onnx@1.17.0",{"id":125,"slug":3269,"dossier":46,"summary":3270,"aliases":3271,"sourceIds":3274,"published":3275,"modified":3276,"checkedAt":7,"severity":3277,"references":3281,"versionKeys":3290,"packageCount":32,"repositoryCount":2888},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[3272,3273],"CVE-2026-34517","PYSEC-2026-2099",[125,3273],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[3278,3280],{"type":2734,"score":3279},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2731,"score":2836},[3282,3284,3286,3288,3289],{"type":2776,"url":3283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2741,"url":3285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2776,"url":3287},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":126,"slug":3292,"dossier":46,"summary":3293,"aliases":3294,"sourceIds":3297,"published":3298,"modified":3299,"checkedAt":7,"severity":3300,"references":3303,"versionKeys":3314,"packageCount":32,"repositoryCount":591},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[3295,3296],"CVE-2026-49853","PYSEC-2026-3387",[126,3296],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[3301],{"type":2731,"score":3302},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[3304,3306,3308,3310,3312],{"type":2738,"url":3305},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2748,"url":3307},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":2748,"url":3309},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":2741,"url":3311},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2741,"url":3313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[3315,3316,3317,3318,3319],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":127,"slug":3321,"dossier":46,"summary":3322,"aliases":3323,"sourceIds":3326,"published":3327,"modified":3328,"checkedAt":7,"severity":3329,"references":3331,"versionKeys":3344,"packageCount":32,"repositoryCount":105},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[3324,3325],"CVE-2025-68480","PYSEC-2026-1605",[127,3325],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[3330],{"type":2731,"score":2836},[3332,3334,3336,3338,3340,3342],{"type":2738,"url":3333},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":2741,"url":3335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":2738,"url":3337},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":2748,"url":3339},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":2748,"url":3341},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":2741,"url":3343},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[3345,3346],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":128,"slug":3348,"dossier":46,"summary":3349,"aliases":3350,"sourceIds":3353,"published":3354,"modified":3355,"checkedAt":7,"severity":3356,"references":3359,"versionKeys":3380,"packageCount":32,"repositoryCount":622},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[3351,3352],"CVE-2026-33236","PYSEC-2026-2237",[128,3352],"2026-03-19T12:42:42Z","2026-07-13T07:26:54.270611709Z",[3357],{"type":2731,"score":3358},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3360,3362,3364,3366,3368,3370,3372,3374,3376,3378],{"type":2813,"url":3361},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":2741,"url":3363},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":2776,"url":3365},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":2748,"url":3367},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":2738,"url":3369},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":2738,"url":3371},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":2741,"url":3373},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2741,"url":3375},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2741,"url":3377},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3105,"url":3379},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[3381,3382],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":129,"slug":3384,"dossier":46,"summary":3385,"aliases":3386,"sourceIds":3389,"published":3390,"modified":3391,"checkedAt":7,"severity":3392,"references":3395,"versionKeys":3408,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[3387,3388],"CVE-2025-50182","PYSEC-2026-1997",[129,3388],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[3393],{"type":2731,"score":3394},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3396,3398,3400,3402,3403,3405,3406],{"type":2738,"url":3397},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2741,"url":3399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2776,"url":3401},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2748,"url":3046},{"type":2738,"url":3404},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2748,"url":3048},{"type":2741,"url":3407},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[3052,3053,3054,3055],{"id":130,"slug":3410,"dossier":46,"summary":3411,"aliases":3412,"sourceIds":3415,"published":3416,"modified":3417,"checkedAt":7,"severity":3418,"references":3420,"versionKeys":3435,"packageCount":32,"repositoryCount":32},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[3413,3414],"CVE-2026-22691","PYSEC-2026-1828",[130,3414],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[3419],{"type":2734,"score":3279},[3421,3423,3425,3427,3429,3430,3432,3433],{"type":2738,"url":3422},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":2741,"url":3424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":2738,"url":3426},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":2738,"url":3428},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":2748,"url":2749},{"type":2738,"url":3431},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":2748,"url":2753},{"type":2741,"url":3434},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[2757],{"id":131,"slug":3437,"dossier":46,"summary":3438,"aliases":3439,"sourceIds":3442,"published":3443,"modified":3444,"checkedAt":7,"severity":3445,"references":3449,"versionKeys":3455,"packageCount":32,"repositoryCount":2888},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[3440,3441],"CVE-2026-54273","PYSEC-2026-2107",[131,3441],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[3446,3448],{"type":2734,"score":3447},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2731,"score":2871},[3450,3452,3454],{"type":2741,"url":3451},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2776,"url":3453},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2748,"url":2876},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":132,"slug":3457,"dossier":46,"summary":3458,"aliases":3459,"sourceIds":3462,"published":3463,"modified":3464,"checkedAt":7,"severity":3465,"references":3469,"versionKeys":3473,"packageCount":32,"repositoryCount":2888},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3460,3461],"CVE-2026-54275","PYSEC-2026-237",[132,3461],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[3466,3468],{"type":2734,"score":3467},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2731,"score":2871},[3470,3472],{"type":2741,"url":3471},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2748,"url":2876},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":133,"slug":3475,"dossier":46,"summary":3476,"aliases":3477,"sourceIds":3480,"published":3481,"modified":3482,"checkedAt":7,"severity":3483,"references":3488,"versionKeys":3503,"packageCount":32,"repositoryCount":32},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[3478,3479],"CVE-2026-41313","PYSEC-2026-3007",[133,3479],"2026-04-16T21:30:12Z","2026-07-13T16:43:42.160859361Z",[3484,3486],{"type":2731,"score":3485},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2734,"score":3487},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3489,3491,3493,3495,3497,3498,3500,3501],{"type":2738,"url":3490},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":2741,"url":3492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":2738,"url":3494},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":2738,"url":3496},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":2748,"url":2749},{"type":2738,"url":3499},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":2748,"url":2753},{"type":2741,"url":3502},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[2757],{"id":134,"slug":3505,"dossier":46,"summary":3506,"aliases":3507,"sourceIds":3511,"published":3512,"modified":3513,"checkedAt":7,"severity":3514,"references":3517,"versionKeys":3535,"packageCount":32,"repositoryCount":32},"ghsa-4vvm-4w3v-6mr8-41f51ef4","pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character",[3508,3509,3510],"CVE-2023-36464","PYSEC-2026-1835","PYSEC-2026-3008",[134,3509],"2023-06-30T20:33:57Z","2026-07-13T16:42:55.319975462Z",[3515],{"type":2731,"score":3516},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3518,3520,3522,3524,3526,3528,3529,3531,3533],{"type":2738,"url":3519},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",{"type":2741,"url":3521},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-36464",{"type":2738,"url":3523},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F1828",{"type":2738,"url":3525},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F969",{"type":2776,"url":3527},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb0e5c689df689ab173df84dacd77b6fc3c161932",{"type":2748,"url":2749},{"type":2738,"url":3530},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F3.9.0",{"type":2748,"url":3532},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf2",{"type":2741,"url":3534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",[3536],"pypi:pypdf2@3.0.1",{"id":135,"slug":3538,"dossier":46,"summary":3539,"aliases":3540,"sourceIds":3543,"published":3544,"modified":3545,"checkedAt":7,"severity":3546,"references":3549,"versionKeys":3562,"packageCount":32,"repositoryCount":105},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[3541,3542],"CVE-2025-6921","PYSEC-2026-1980",[135,3542],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[3547],{"type":2731,"score":3548},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3550,3552,3554,3556,3557,3559,3560],{"type":2741,"url":3551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2738,"url":3553},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2738,"url":3555},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2748,"url":2811},{"type":2738,"url":3558},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2748,"url":3149},{"type":2741,"url":3561},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2818,2819],{"id":136,"slug":3564,"dossier":46,"summary":3565,"aliases":3566,"sourceIds":3569,"published":3570,"modified":3571,"checkedAt":7,"severity":3572,"references":3574,"versionKeys":3586,"packageCount":32,"repositoryCount":32},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[3567,3568],"CVE-2026-22690","PYSEC-2026-1829",[136,3568],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[3573],{"type":2734,"score":3279},[3575,3577,3579,3580,3581,3582,3583,3584],{"type":2738,"url":3576},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":2741,"url":3578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":2738,"url":3426},{"type":2738,"url":3428},{"type":2748,"url":2749},{"type":2738,"url":3431},{"type":2748,"url":2753},{"type":2741,"url":3585},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[2757],{"id":137,"slug":3588,"dossier":46,"summary":3589,"aliases":3590,"sourceIds":3593,"published":3594,"modified":3595,"checkedAt":7,"severity":3596,"references":3601,"versionKeys":3622,"packageCount":32,"repositoryCount":34},"ghsa-4xpc-pv4p-pm3w-c72dbf83","LiteLLM: Authentication Bypass via Host Header Injection",[3591,3592],"CVE-2026-49468","PYSEC-2026-388",[137,3592],"2026-06-16T23:38:26Z","2026-07-18T17:30:30.617013067Z",[3597,3599],{"type":2731,"score":3598},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2734,"score":3600},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[3602,3604,3606,3608,3610,3612,3614,3616,3618,3620],{"type":2738,"url":3603},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2741,"url":3605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49468",{"type":2738,"url":3607},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49468",{"type":2738,"url":3609},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491520",{"type":2748,"url":3611},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm",{"type":2738,"url":3613},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.84.0",{"type":2741,"url":3615},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2738,"url":3617},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flitellm\u002FPYSEC-2026-388.yaml",{"type":2748,"url":3619},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flitellm",{"type":2738,"url":3621},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49468.json",[3623,3624,3625,3626],"pypi:litellm@1.53.7","pypi:litellm@1.67.4.dev1","pypi:litellm@1.68.0","pypi:litellm@1.73.6.post1",{"id":138,"slug":3628,"dossier":91,"summary":3629,"aliases":3630,"sourceIds":3633,"published":3634,"modified":3635,"checkedAt":7,"severity":3636,"references":3639,"versionKeys":3662,"packageCount":32,"repositoryCount":104},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3631,3632],"CVE-2026-4539","PYSEC-2026-2987",[138,3632],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3637,3638],{"type":2731,"score":3096},{"type":2734,"score":3098},[3640,3642,3644,3646,3648,3650,3652,3654,3656,3658,3660],{"type":2741,"url":3641},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2738,"url":3643},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2738,"url":3645},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2738,"url":3647},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2748,"url":3649},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2738,"url":3651},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2738,"url":3653},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2738,"url":3655},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2738,"url":3657},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2748,"url":3659},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2741,"url":3661},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3663,3664],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":139,"slug":3666,"dossier":46,"summary":3667,"aliases":3668,"sourceIds":3671,"published":3672,"modified":3673,"checkedAt":7,"severity":3674,"references":3677,"versionKeys":3690,"packageCount":32,"repositoryCount":32},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[3669,3670],"CVE-2026-54530","PYSEC-2026-3009",[139,3670],"2026-06-16T14:05:40Z","2026-07-13T16:43:09.668829202Z",[3675],{"type":2734,"score":3676},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3678,3680,3682,3683,3685,3686,3688],{"type":2738,"url":3679},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":2738,"url":3681},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":2748,"url":2749},{"type":2738,"url":3684},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":2748,"url":2753},{"type":2741,"url":3687},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":2741,"url":3689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[2757],{"id":140,"slug":3692,"dossier":46,"summary":3693,"aliases":3694,"sourceIds":3695,"published":3696,"modified":3697,"checkedAt":7,"severity":3698,"references":3700,"versionKeys":3707,"packageCount":32,"repositoryCount":65},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[140],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[3699],{"type":2731,"score":2871},[3701,3703,3705],{"type":2738,"url":3702},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2748,"url":3704},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2738,"url":3706},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[3708,3709,3710,3711,3712,3713],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":141,"slug":3715,"dossier":46,"summary":3716,"aliases":3717,"sourceIds":3720,"published":3721,"modified":3722,"checkedAt":7,"severity":3723,"references":3726,"versionKeys":3736,"packageCount":32,"repositoryCount":32},"ghsa-538c-55jv-c5g9-0ca5dbee","ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.",[3718,3719],"CVE-2026-34445","PYSEC-2026-2240",[141,3719],"2026-04-01T18:16:30.500Z","2026-07-13T07:26:50.433584489Z",[3724],{"type":2731,"score":3725},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[3727,3729,3731,3733,3735],{"type":2776,"url":3728},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-538c-55jv-c5g9",{"type":2741,"url":3730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34445",{"type":2776,"url":3732},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F7751",{"type":2776,"url":3734},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fcommit\u002Fe30c6935d67cc3eca2fa284e37248e7c0036c46b",{"type":2748,"url":3257},[3267],{"id":142,"slug":3738,"dossier":46,"summary":3739,"aliases":3740,"sourceIds":3743,"published":3744,"modified":3745,"checkedAt":7,"severity":3746,"references":3749,"versionKeys":3758,"packageCount":32,"repositoryCount":34},"ghsa-53mr-6c8q-9789-034179e7","LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint",[3741,3742],"CVE-2026-35029","PYSEC-2026-2597",[142,3742],"2026-04-03T21:59:31Z","2026-07-13T16:43:01.087747831Z",[3747],{"type":2734,"score":3748},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:L\u002FSI:L\u002FSA:N",[3750,3752,3754,3755,3756],{"type":2738,"url":3751},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",{"type":2741,"url":3753},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35029",{"type":2748,"url":3611},{"type":2748,"url":3619},{"type":2741,"url":3757},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",[3623,3624,3625,3626],{"id":143,"slug":3760,"dossier":46,"summary":3761,"aliases":3762,"sourceIds":3766,"published":3767,"modified":3768,"checkedAt":7,"severity":3769,"references":3773,"versionKeys":3783,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3763,3764,3765],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[143,3765],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[3770,3772],{"type":2734,"score":3771},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2731,"score":3598},[3774,3776,3778,3780,3782],{"type":2741,"url":3775},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2741,"url":3777},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2738,"url":3779},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2738,"url":3781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2748,"url":3112},[3124],{"id":144,"slug":3785,"dossier":46,"summary":3786,"aliases":3787,"sourceIds":3790,"published":3791,"modified":3792,"checkedAt":7,"severity":3793,"references":3796,"versionKeys":3808,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3788,3789],"CVE-2025-69226","PYSEC-2026-1097",[144,3789],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[3794],{"type":2734,"score":3795},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3797,3799,3801,3803,3804,3806],{"type":2738,"url":3798},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2741,"url":3800},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2776,"url":3802},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2748,"url":2876},{"type":2748,"url":3805},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2741,"url":3807},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2880,2881,2882,2883,2884,2885,2886],{"id":145,"slug":3810,"dossier":46,"summary":3811,"aliases":3812,"sourceIds":3815,"published":3816,"modified":3817,"checkedAt":7,"severity":3818,"references":3822,"versionKeys":3835,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3813,3814],"CVE-2024-53981","PYSEC-2026-1851",[145,3814],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[3819,3820],{"type":2731,"score":2871},{"type":2734,"score":3821},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3823,3825,3827,3829,3831,3833],{"type":2738,"url":3824},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2741,"url":3826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2738,"url":3828},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2748,"url":3830},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2748,"url":3832},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2741,"url":3834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3836],"pypi:python-multipart@0.0.9",{"id":146,"slug":3838,"dossier":46,"summary":3839,"aliases":3840,"sourceIds":3843,"published":3844,"modified":3845,"checkedAt":7,"severity":3846,"references":3848,"versionKeys":3859,"packageCount":32,"repositoryCount":105},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3841,3842],"CVE-2025-6638","PYSEC-2026-1981",[146,3842],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3847],{"type":2731,"score":3548},[3849,3851,3852,3853,3854,3856,3857],{"type":2741,"url":3850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2738,"url":3553},{"type":2738,"url":3555},{"type":2748,"url":2811},{"type":2738,"url":3855},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2748,"url":3149},{"type":2741,"url":3858},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2818,2819],{"id":147,"slug":3861,"dossier":46,"summary":3862,"aliases":3863,"sourceIds":3866,"published":3867,"modified":3868,"checkedAt":7,"severity":3869,"references":3871,"versionKeys":3884,"packageCount":32,"repositoryCount":32},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[3864,3865],"CVE-2026-49460","PYSEC-2026-3010",[147,3865],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[3870],{"type":2734,"score":2735},[3872,3874,3876,3877,3879,3880,3882],{"type":2738,"url":3873},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":2738,"url":3875},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":2748,"url":2749},{"type":2738,"url":3878},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":2748,"url":2753},{"type":2741,"url":3881},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":2741,"url":3883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[2757],{"id":148,"slug":3886,"dossier":46,"summary":3887,"aliases":3888,"sourceIds":3892,"published":3893,"modified":3894,"checkedAt":7,"severity":3895,"references":3900,"versionKeys":3917,"packageCount":32,"repositoryCount":105},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3889,3890,3891],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[148,3891],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3896,3898],{"type":2734,"score":3897},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2731,"score":3899},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3901,3903,3905,3907,3909,3911,3913,3915],{"type":2813,"url":3902},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2741,"url":3904},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3105,"url":3906},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2776,"url":3908},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2738,"url":3910},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2748,"url":3912},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2738,"url":3914},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2783,"url":3916},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3918,3919],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":149,"slug":3921,"dossier":46,"summary":3922,"aliases":3923,"sourceIds":3926,"published":3927,"modified":3928,"checkedAt":7,"severity":3929,"references":3931,"versionKeys":3940,"packageCount":32,"repositoryCount":2921},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[3924,3925],"CVE-2026-53539","PYSEC-2026-3036",[149,3925],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[3930],{"type":2731,"score":2871},[3932,3934,3935,3936,3938],{"type":2738,"url":3933},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2748,"url":3830},{"type":2748,"url":3832},{"type":2741,"url":3937},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2741,"url":3939},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[3941,3942,3836],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":150,"slug":3944,"dossier":46,"summary":3945,"aliases":3946,"sourceIds":3950,"published":3951,"modified":3952,"checkedAt":7,"severity":3953,"references":3956,"versionKeys":3965,"packageCount":32,"repositoryCount":536},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3947,3948,3949],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[150,3949],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3954,3955],{"type":2731,"score":3100},{"type":2734,"score":2735},[3957,3959,3961,3963],{"type":2741,"url":3958},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2741,"url":3960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2748,"url":3962},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2741,"url":3964},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3966,3967,3968,3969,3970],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":151,"slug":3972,"dossier":46,"summary":3973,"aliases":3974,"sourceIds":3977,"published":3978,"modified":3979,"checkedAt":7,"severity":3980,"references":3986,"versionKeys":3997,"packageCount":32,"repositoryCount":2888},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[3975,3976],"CVE-2026-34520","PYSEC-2026-2102",[151,3976],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[3981,3983,3984],{"type":2731,"score":3982},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2734,"score":2986},{"type":2734,"score":3985},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3987,3989,3991,3993,3994,3995],{"type":2776,"url":3988},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2741,"url":3990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2776,"url":3992},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2748,"url":2876},{"type":2741,"url":2998},{"type":2738,"url":3996},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2880,2881,2882,2883,2884,2885,2886,2887],{"id":152,"slug":3999,"dossier":46,"summary":4000,"aliases":4001,"sourceIds":4004,"published":4005,"modified":4006,"checkedAt":7,"severity":4007,"references":4010,"versionKeys":4016,"packageCount":32,"repositoryCount":2888},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[4002,4003],"CVE-2026-54277","PYSEC-2026-2110",[152,4003],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[4008,4009],{"type":2734,"score":3447},{"type":2731,"score":2871},[4011,4013,4015],{"type":2741,"url":4012},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2776,"url":4014},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2748,"url":2876},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":153,"slug":4018,"dossier":46,"summary":4019,"aliases":4020,"sourceIds":4023,"published":4024,"modified":4025,"checkedAt":7,"severity":4026,"references":4028,"versionKeys":4049,"packageCount":32,"repositoryCount":65},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[4021,4022],"CVE-2026-23490","PYSEC-2026-1810",[153,4022],"2026-01-16T19:19:25Z","2026-07-07T17:56:27.705413895Z",[4027],{"type":2731,"score":2871},[4029,4031,4033,4035,4037,4039,4041,4043,4045,4047],{"type":2738,"url":4030},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2741,"url":4032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2738,"url":4034},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2738,"url":4036},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2748,"url":4038},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2738,"url":4040},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2738,"url":4042},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2738,"url":4044},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",{"type":2748,"url":4046},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyasn1",{"type":2741,"url":4048},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",[4050],"pypi:pyasn1@0.6.1",{"id":154,"slug":4052,"dossier":46,"summary":4053,"aliases":4054,"sourceIds":4057,"published":4058,"modified":4059,"checkedAt":7,"severity":4060,"references":4064,"versionKeys":4089,"packageCount":32,"repositoryCount":32},"ghsa-6528-wvf6-f6qg-ecd99388","Pycrypto generates weak key parameters",[4055,4056],"CVE-2018-6594","PYSEC-2018-97",[154,4056],"2018-02-03T15:29:00Z","2024-10-18T22:22:56.958480Z",[4061,4063],{"type":2731,"score":4062},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2734,"score":2900},[4065,4067,4069,4071,4073,4075,4077,4079,4081,4083,4085,4087],{"type":2741,"url":4066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2018-6594",{"type":3105,"url":4068},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto\u002Fissues\u002F253",{"type":2738,"url":4070},"https:\u002F\u002Fgithub.com\u002FTElgamal\u002Fattack-on-pycrypto-elgamal",{"type":2741,"url":4072},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6528-wvf6-f6qg",{"type":2748,"url":4074},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto",{"type":2738,"url":4076},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpycrypto\u002FPYSEC-2018-97.yaml",{"type":2738,"url":4078},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F02\u002Fmsg00018.html",{"type":2741,"url":4080},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202007-62",{"type":2738,"url":4082},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-1",{"type":2738,"url":4084},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-2",{"type":2738,"url":4086},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-1\u002F",{"type":2738,"url":4088},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-2\u002F",[4090],"pypi:pycrypto@2.6.1",{"id":155,"slug":4092,"dossier":91,"summary":4093,"aliases":4094,"sourceIds":4097,"published":4098,"modified":4099,"checkedAt":7,"severity":4100,"references":4103,"versionKeys":4112,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[4095,4096],"CVE-2026-45409","PYSEC-2026-215",[155,4096],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[4101,4102],{"type":2731,"score":2836},{"type":2734,"score":3191},[4104,4106,4108,4110],{"type":2741,"url":4105},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2741,"url":4107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2748,"url":4109},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2738,"url":4111},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[4113,4114,4115],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":156,"slug":4117,"dossier":46,"summary":4118,"aliases":4119,"sourceIds":4122,"published":4123,"modified":4124,"checkedAt":7,"severity":4125,"references":4129,"versionKeys":4139,"packageCount":32,"repositoryCount":622},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[4120,4121],"CVE-2026-0847","PYSEC-2026-98",[156,4121],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[4126,4128],{"type":2731,"score":4127},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":2731,"score":3248},[4130,4132,4133,4135,4137],{"type":2741,"url":4131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":2748,"url":3367},{"type":2738,"url":4134},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":2813,"url":4136},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":2741,"url":4138},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3381,3382],{"id":157,"slug":4141,"dossier":46,"summary":4142,"aliases":4143,"sourceIds":4146,"published":4147,"modified":4148,"checkedAt":7,"severity":4149,"references":4151,"versionKeys":4162,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[4144,4145],"CVE-2025-69224","PYSEC-2026-1099",[157,4145],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[4150],{"type":2734,"score":2986},[4152,4154,4156,4158,4159,4160],{"type":2738,"url":4153},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2741,"url":4155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2776,"url":4157},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":4161},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2880,2881,2882,2883,2884,2885,2886],{"id":158,"slug":4164,"dossier":46,"summary":4165,"aliases":4166,"sourceIds":4169,"published":4170,"modified":4171,"checkedAt":7,"severity":4172,"references":4177,"versionKeys":4189,"packageCount":32,"repositoryCount":391},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[4167,4168],"CVE-2026-1839","PYSEC-2026-2288",[158,4168],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[4173,4175],{"type":2731,"score":4174},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2731,"score":4176},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4178,4180,4182,4183,4185,4187],{"type":2741,"url":4179},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2776,"url":4181},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2748,"url":2811},{"type":2738,"url":4184},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2813,"url":4186},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2741,"url":4188},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2818,2819,2820,2821,2822,2823,2824],{"id":159,"slug":4191,"dossier":46,"summary":4192,"aliases":4193,"sourceIds":4194,"published":4195,"modified":4196,"checkedAt":7,"severity":4197,"references":4200,"versionKeys":4204,"packageCount":32,"repositoryCount":34},"ghsa-69x8-hrgq-fjj8-13befa28","LiteLLM: Password hash exposure and pass-the-hash authentication bypass",[],[159],"2026-04-08T00:04:12Z","2026-04-17T01:29:14.845270912Z",[4198],{"type":2734,"score":4199},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4201,4203],{"type":2738,"url":4202},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-69x8-hrgq-fjj8",{"type":2748,"url":3611},[3623,3624,3625,3626],{"id":160,"slug":4206,"dossier":46,"summary":4207,"aliases":4208,"sourceIds":4211,"published":4212,"modified":4213,"checkedAt":7,"severity":4214,"references":4216,"versionKeys":4227,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[4209,4210],"CVE-2025-69228","PYSEC-2026-1100",[160,4210],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[4215],{"type":2734,"score":3447},[4217,4219,4221,4223,4224,4225],{"type":2738,"url":4218},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2741,"url":4220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2776,"url":4222},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":4226},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2880,2881,2882,2883,2884,2885,2886],{"id":161,"slug":4229,"dossier":46,"summary":4230,"aliases":4231,"sourceIds":4234,"published":4235,"modified":4236,"checkedAt":7,"severity":4237,"references":4240,"versionKeys":4249,"packageCount":32,"repositoryCount":2921},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4232,4233],"CVE-2026-53538","PYSEC-2026-3037",[161,4233],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[4238],{"type":2731,"score":4239},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4241,4243,4244,4245,4247],{"type":2738,"url":4242},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2748,"url":3830},{"type":2748,"url":3832},{"type":2741,"url":4246},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2741,"url":4248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[3941,3942,3836],{"id":162,"slug":4251,"dossier":46,"summary":4252,"aliases":4253,"sourceIds":4256,"published":4257,"modified":4258,"checkedAt":7,"severity":4259,"references":4261,"versionKeys":4272,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4254,4255],"CVE-2025-69223","PYSEC-2026-1101",[162,4255],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[4260],{"type":2731,"score":2871},[4262,4264,4266,4268,4269,4270],{"type":2738,"url":4263},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2741,"url":4265},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2776,"url":4267},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":4271},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2880,2881,2882,2883,2884,2885,2886],{"id":163,"slug":4274,"dossier":46,"summary":4275,"aliases":4276,"sourceIds":4279,"published":4280,"modified":4281,"checkedAt":7,"severity":4282,"references":4284,"versionKeys":4295,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4277,4278],"CVE-2024-12720","PYSEC-2026-1982",[163,4278],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[4283],{"type":2731,"score":3548},[4285,4287,4289,4290,4292,4293],{"type":2741,"url":4286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2738,"url":4288},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2748,"url":2811},{"type":2738,"url":4291},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2748,"url":3149},{"type":2741,"url":4294},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2818],{"id":164,"slug":4297,"dossier":46,"summary":4298,"aliases":4299,"sourceIds":4302,"published":4303,"modified":4304,"checkedAt":7,"severity":4305,"references":4307,"versionKeys":4318,"packageCount":32,"repositoryCount":105},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[4300,4301],"CVE-2026-32597","PYSEC-2026-120",[164,4301],"2026-03-13T19:55:09.500Z","2026-06-08T19:15:12.447890578Z",[4306],{"type":2731,"score":2769},[4308,4310,4312,4314,4316],{"type":2813,"url":4309},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":2741,"url":4311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":2748,"url":4313},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":2738,"url":4315},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":2738,"url":4317},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[4319,4320],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.9.0",{"id":165,"slug":4322,"dossier":46,"summary":4323,"aliases":4324,"sourceIds":4327,"published":4328,"modified":4329,"checkedAt":7,"severity":4330,"references":4333,"versionKeys":4346,"packageCount":32,"repositoryCount":591},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[4325,4326],"CVE-2025-66034","PYSEC-2026-1389",[165,4326],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[4331],{"type":2731,"score":4332},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[4334,4336,4338,4340,4342,4344],{"type":2738,"url":4335},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2741,"url":4337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2738,"url":4339},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2748,"url":4341},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2748,"url":4343},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2741,"url":4345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[4347,4348,4349,4350,4351],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":166,"slug":4353,"dossier":46,"summary":4354,"aliases":4355,"sourceIds":4359,"published":4360,"modified":4361,"checkedAt":7,"severity":4362,"references":4368,"versionKeys":4380,"packageCount":32,"repositoryCount":591},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[4356,4357,4358],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[166,4357,4358],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[4363,4365,4367],{"type":2731,"score":4364},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":2731,"score":4366},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2731,"score":2988},[4369,4371,4373,4374,4376,4378],{"type":2741,"url":4370},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":2738,"url":4372},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":2748,"url":3307},{"type":2738,"url":4375},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":2741,"url":4377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":2741,"url":4379},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[3315,3316,3317,3318],{"id":167,"slug":4382,"dossier":46,"summary":3693,"aliases":4383,"sourceIds":4386,"published":4387,"modified":4388,"checkedAt":7,"severity":4389,"references":4390,"versionKeys":4408,"packageCount":32,"repositoryCount":622},"ghsa-79v4-65xg-pq4g-b911b371",[4384,4385],"CVE-2024-12797","PYSEC-2026-1284",[167,4385],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[4391,4393,4395,4397,4399,4401,4402,4404,4406],{"type":2738,"url":4392},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2741,"url":4394},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2738,"url":4396},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2738,"url":4398},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2738,"url":4400},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2748,"url":3704},{"type":2738,"url":4403},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2748,"url":4405},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2741,"url":4407},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[3708,3709,3710],{"id":168,"slug":4410,"dossier":46,"summary":4411,"aliases":4412,"sourceIds":4415,"published":4416,"modified":4417,"checkedAt":7,"severity":4418,"references":4420,"versionKeys":4433,"packageCount":32,"repositoryCount":105},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[4413,4414],"CVE-2025-47287","PYSEC-2026-1974",[168,4414],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[4419],{"type":2731,"score":2871},[4421,4423,4425,4427,4428,4430,4431],{"type":2738,"url":4422},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":2741,"url":4424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":2738,"url":4426},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":2748,"url":3307},{"type":2738,"url":4429},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":2748,"url":3309},{"type":2741,"url":4432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[3315],{"id":169,"slug":4435,"dossier":46,"summary":4436,"aliases":4437,"sourceIds":4440,"published":4441,"modified":4442,"checkedAt":7,"severity":4443,"references":4445,"versionKeys":4462,"packageCount":32,"repositoryCount":2921},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4438,4439],"CVE-2025-62727","PYSEC-2026-1942",[169,4439],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[4444],{"type":2731,"score":2871},[4446,4448,4450,4452,4455,4457,4459,4460],{"type":2738,"url":4447},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2741,"url":4449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2776,"url":4451},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4453,"url":4454},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2748,"url":4456},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2738,"url":4458},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2748,"url":2851},{"type":2741,"url":4461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2856,2857,4463,4464],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":170,"slug":4466,"dossier":46,"summary":4467,"aliases":4468,"sourceIds":4471,"published":4472,"modified":4473,"checkedAt":7,"severity":4474,"references":4477,"versionKeys":4494,"packageCount":32,"repositoryCount":536},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4469,4470],"CVE-2026-0994","PYSEC-2026-1805",[170,4470],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[4475],{"type":2734,"score":4476},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4478,4480,4482,4484,4486,4488,4490,4492],{"type":2741,"url":4479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2738,"url":4481},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2738,"url":4483},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2738,"url":4485},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2738,"url":4487},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2748,"url":4489},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2748,"url":4491},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2741,"url":4493},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4495,4496,4497,4498,4499,4500,4501,4502,4503],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":171,"slug":4505,"dossier":46,"summary":4506,"aliases":4507,"sourceIds":4510,"published":4511,"modified":4512,"checkedAt":7,"severity":4513,"references":4516,"versionKeys":4530,"packageCount":32,"repositoryCount":32},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[4508,4509],"CVE-2026-41312","PYSEC-2026-3011",[171,4509],"2026-04-16T21:30:00Z","2026-07-13T16:42:36.454088588Z",[4514,4515],{"type":2731,"score":3485},{"type":2734,"score":3487},[4517,4519,4521,4523,4525,4526,4527,4528],{"type":2738,"url":4518},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":2741,"url":4520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":2738,"url":4522},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":2738,"url":4524},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":2748,"url":2749},{"type":2738,"url":3499},{"type":2748,"url":2753},{"type":2741,"url":4529},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[2757],{"id":172,"slug":4532,"dossier":46,"summary":4533,"aliases":4534,"sourceIds":4537,"published":4538,"modified":4539,"checkedAt":7,"severity":4540,"references":4542,"versionKeys":4559,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[4535,4536],"CVE-2025-55197","PYSEC-2026-1830",[172,4536],"2025-08-13T19:51:24Z","2026-07-07T17:57:06.843769097Z",[4541],{"type":2734,"score":3447},[4543,4545,4547,4549,4551,4552,4554,4556,4557],{"type":2738,"url":4544},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":2741,"url":4546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":2738,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":2738,"url":4550},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":2748,"url":2749},{"type":2738,"url":4553},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":2738,"url":4555},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":2748,"url":2753},{"type":2741,"url":4558},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[2757],{"id":173,"slug":4561,"dossier":46,"summary":4562,"aliases":4563,"sourceIds":4566,"published":4567,"modified":4568,"checkedAt":7,"severity":4569,"references":4572,"versionKeys":4588,"packageCount":32,"repositoryCount":622},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[4564,4565],"CVE-2025-14009","PYSEC-2026-96",[173,4565],"2026-02-18T18:24:19.410Z","2026-06-10T17:02:23.646726882Z",[4570],{"type":2731,"score":4571},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4573,4575,4577,4579,4580,4582,4584,4586],{"type":2741,"url":4574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":2738,"url":4576},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":2738,"url":4578},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":2748,"url":3367},{"type":2738,"url":4581},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":2738,"url":4583},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":2813,"url":4585},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":2741,"url":4587},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3381,3382],{"id":174,"slug":4590,"dossier":46,"summary":4591,"aliases":4592,"sourceIds":4595,"published":4596,"modified":4597,"checkedAt":7,"severity":4598,"references":4600,"versionKeys":4604,"packageCount":32,"repositoryCount":391},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[4593,4594],"CVE-2026-54283","PYSEC-2026-249",[174,4594],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[4599],{"type":2731,"score":2871},[4601,4603],{"type":2741,"url":4602},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2748,"url":4456},[2855,2856,2857,4463,4464,4605,4606],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":175,"slug":4608,"dossier":46,"summary":4609,"aliases":4610,"sourceIds":4613,"published":4614,"modified":4615,"checkedAt":7,"severity":4616,"references":4618,"versionKeys":4627,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[4611,4612],"CVE-2026-49477","PYSEC-2026-3072",[175,4612],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[4617],{"type":2731,"score":2871},[4619,4621,4622,4623,4625],{"type":2738,"url":4620},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":2748,"url":3015},{"type":2748,"url":3017},{"type":2741,"url":4624},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":2741,"url":4626},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[3023,3024,3025],{"id":176,"slug":4629,"dossier":46,"summary":4630,"aliases":4631,"sourceIds":4635,"published":4636,"modified":4637,"checkedAt":7,"severity":4638,"references":4640,"versionKeys":4676,"packageCount":32,"repositoryCount":391},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[4632,4633,4634],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[176,4633],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[4639],{"type":2731,"score":3219},[4641,4643,4645,4647,4649,4651,4653,4655,4657,4659,4660,4662,4665,4667,4668,4670,4672,4674],{"type":2741,"url":4642},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2741,"url":4644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2776,"url":4646},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2738,"url":4648},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2783,"url":4650},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2738,"url":4652},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2738,"url":4654},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2738,"url":4656},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2738,"url":4658},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2748,"url":4456},{"type":2738,"url":4661},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":4663,"url":4664},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2738,"url":4666},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2738,"url":3377},{"type":2738,"url":4669},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":2738,"url":4671},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":2783,"url":4673},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2741,"url":4675},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2855,2856,2857,4463,4464,4605,4606],{"id":177,"slug":4678,"dossier":46,"summary":4679,"aliases":4680,"sourceIds":4683,"published":4684,"modified":4685,"checkedAt":7,"severity":4686,"references":4689,"versionKeys":4702,"packageCount":32,"repositoryCount":32},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[4681,4682],"CVE-2026-33699","PYSEC-2026-3012",[177,4682],"2026-03-25T20:05:22Z","2026-07-13T16:42:35.293920191Z",[4687],{"type":2734,"score":4688},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4690,4692,4694,4696,4697,4699,4700],{"type":2738,"url":4691},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":2741,"url":4693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":2738,"url":4695},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":2748,"url":2749},{"type":2738,"url":4698},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":2748,"url":2753},{"type":2741,"url":4701},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[2757],{"id":178,"slug":4704,"dossier":46,"summary":4705,"aliases":4706,"sourceIds":4710,"published":4711,"modified":4712,"checkedAt":7,"severity":4713,"references":4717,"versionKeys":4739,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[4707,4708,4709],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[178,4709],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[4714,4715],{"type":2731,"score":3096},{"type":2734,"score":4716},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4718,4720,4722,4724,4726,4728,4729,4731,4733,4735,4737],{"type":2741,"url":4719},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2738,"url":4721},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2738,"url":4723},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2738,"url":4725},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2738,"url":4727},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2748,"url":3112},{"type":2738,"url":4730},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2738,"url":4732},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2738,"url":4734},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2748,"url":4736},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2741,"url":4738},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[3124,3125,3126,4740,4741],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":179,"slug":4743,"dossier":46,"summary":4744,"aliases":4745,"sourceIds":4748,"published":4749,"modified":4750,"checkedAt":7,"severity":4751,"references":4754,"versionKeys":4773,"packageCount":32,"repositoryCount":622},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[4746,4747],"CVE-2025-4565","PYSEC-2026-1806",[179,4747],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[4752],{"type":2734,"score":4753},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4755,4757,4759,4761,4763,4764,4766,4768,4770,4771],{"type":2738,"url":4756},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2738,"url":4758},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2741,"url":4760},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2738,"url":4762},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2748,"url":4489},{"type":2738,"url":4765},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2738,"url":4767},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2738,"url":4769},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2748,"url":4491},{"type":2741,"url":4772},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4495,4497,4498],{"id":180,"slug":4775,"dossier":46,"summary":4776,"aliases":4777,"sourceIds":4780,"published":4781,"modified":4782,"checkedAt":7,"severity":4783,"references":4785,"versionKeys":4798,"packageCount":32,"repositoryCount":105},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4778,4779],"CVE-2025-5197","PYSEC-2026-1983",[180,4779],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[4784],{"type":2731,"score":3548},[4786,4788,4790,4792,4793,4795,4796],{"type":2741,"url":4787},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2738,"url":4789},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2738,"url":4791},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2748,"url":2811},{"type":2738,"url":4794},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2748,"url":3149},{"type":2741,"url":4797},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2818,2819],{"id":181,"slug":4800,"dossier":46,"summary":4801,"aliases":4802,"sourceIds":4805,"published":4806,"modified":4807,"checkedAt":7,"severity":4808,"references":4811,"versionKeys":4822,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[4803,4804],"CVE-2025-53643","PYSEC-2026-1104",[181,4804],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[4809],{"type":2734,"score":4810},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4812,4814,4816,4818,4819,4820],{"type":2738,"url":4813},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2741,"url":4815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2776,"url":4817},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":4821},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2880,2881,2882,2883],{"id":182,"slug":4824,"dossier":46,"summary":4825,"aliases":4826,"sourceIds":4829,"published":4830,"modified":4831,"checkedAt":7,"severity":4832,"references":4836,"versionKeys":4845,"packageCount":32,"repositoryCount":2888},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[4827,4828],"CVE-2026-34518","PYSEC-2026-2100",[182,4828],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[4833,4835],{"type":2731,"score":4834},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2734,"score":3795},[4837,4839,4841,4843,4844],{"type":2776,"url":4838},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2741,"url":4840},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2776,"url":4842},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":183,"slug":4847,"dossier":46,"summary":4848,"aliases":4849,"sourceIds":4852,"published":4853,"modified":4854,"checkedAt":7,"severity":4855,"references":4858,"versionKeys":4866,"packageCount":32,"repositoryCount":105},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[4850,4851],"CVE-2026-48522","PYSEC-2026-175",[183,4851],"2026-05-28T16:16:29.150Z","2026-06-16T14:44:20.882510824Z",[4856],{"type":2731,"score":4857},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4859,4861,4863,4864],{"type":2813,"url":4860},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":2741,"url":4862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":2748,"url":4313},{"type":2738,"url":4865},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[4319,4320],{"id":184,"slug":4868,"dossier":46,"summary":4869,"aliases":4870,"sourceIds":4873,"published":4874,"modified":4875,"checkedAt":7,"severity":4876,"references":4878,"versionKeys":4893,"packageCount":32,"repositoryCount":32},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[4871,4872],"CVE-2026-27024","PYSEC-2026-3013",[184,4872],"2026-02-18T22:40:49Z","2026-07-13T16:43:40.532306824Z",[4877],{"type":2734,"score":3676},[4879,4881,4883,4885,4887,4888,4890,4891],{"type":2738,"url":4880},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":2741,"url":4882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":2738,"url":4884},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":2738,"url":4886},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":2748,"url":2749},{"type":2738,"url":4889},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":2748,"url":2753},{"type":2741,"url":4892},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[2757],{"id":185,"slug":4895,"dossier":46,"summary":4896,"aliases":4897,"sourceIds":4900,"published":4901,"modified":4902,"checkedAt":7,"severity":4903,"references":4906,"versionKeys":4925,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4898,4899],"CVE-2024-47081","PYSEC-2026-1872",[185,4899],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[4904],{"type":2731,"score":4905},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4907,4909,4911,4913,4915,4917,4919,4921,4923],{"type":2738,"url":4908},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2741,"url":4910},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2738,"url":4912},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2776,"url":4914},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2748,"url":4916},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2738,"url":4918},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2738,"url":4920},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2748,"url":4922},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2741,"url":4924},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[4926,4927],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":186,"slug":4929,"dossier":46,"summary":4930,"aliases":4931,"sourceIds":4934,"published":4935,"modified":4936,"checkedAt":7,"severity":4937,"references":4939,"versionKeys":4954,"packageCount":32,"repositoryCount":32},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[4932,4933],"CVE-2026-28804","PYSEC-2026-3014",[186,4933],"2026-03-02T22:03:45Z","2026-07-13T16:42:53.625666226Z",[4938],{"type":2734,"score":3191},[4940,4942,4944,4946,4948,4949,4951,4952],{"type":2738,"url":4941},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":2741,"url":4943},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":2738,"url":4945},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":2738,"url":4947},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":2748,"url":2749},{"type":2738,"url":4950},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":2748,"url":2753},{"type":2741,"url":4953},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[2757],{"id":187,"slug":4956,"dossier":46,"summary":4957,"aliases":4958,"sourceIds":4961,"published":4962,"modified":4963,"checkedAt":7,"severity":4964,"references":4966,"versionKeys":4980,"packageCount":32,"repositoryCount":32},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[4959,4960],"CVE-2026-27026","PYSEC-2026-3015",[187,4960],"2026-02-18T22:41:24Z","2026-07-13T16:42:59.576223829Z",[4965],{"type":2734,"score":3676},[4967,4969,4971,4973,4975,4976,4977,4978],{"type":2738,"url":4968},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":2741,"url":4970},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":2738,"url":4972},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":2738,"url":4974},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":2748,"url":2749},{"type":2738,"url":4889},{"type":2748,"url":2753},{"type":2741,"url":4979},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[2757],{"id":188,"slug":4982,"dossier":46,"summary":4983,"aliases":4984,"sourceIds":4987,"published":4988,"modified":4989,"checkedAt":7,"severity":4990,"references":4993,"versionKeys":5010,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4985,4986],"CVE-2024-35195","PYSEC-2026-1873",[188,4986],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[4991],{"type":2731,"score":4992},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4994,4996,4998,5000,5002,5003,5005,5007,5008],{"type":2738,"url":4995},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2741,"url":4997},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2738,"url":4999},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2776,"url":5001},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2748,"url":4916},{"type":2738,"url":5004},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2738,"url":5006},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2748,"url":4922},{"type":2741,"url":5009},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4926],{"id":189,"slug":5012,"dossier":46,"summary":5013,"aliases":5014,"sourceIds":5017,"published":5018,"modified":5019,"checkedAt":7,"severity":5020,"references":5024,"versionKeys":5030,"packageCount":32,"repositoryCount":2888},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[5015,5016],"CVE-2026-54280","PYSEC-2026-2113",[189,5016],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[5021,5023],{"type":2734,"score":5022},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2731,"score":2871},[5025,5027,5029],{"type":2741,"url":5026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2776,"url":5028},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2748,"url":2876},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":190,"slug":5032,"dossier":46,"summary":5033,"aliases":5034,"sourceIds":5037,"published":5038,"modified":5039,"checkedAt":7,"severity":5040,"references":5043,"versionKeys":5053,"packageCount":32,"repositoryCount":2921},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[5035,5036],"CVE-2026-44660","PYSEC-2026-2293",[190,5036],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[5041,5042],{"type":2731,"score":2871},{"type":2734,"score":3821},[5044,5046,5048,5050,5051],{"type":2776,"url":5045},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":2741,"url":5047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":2776,"url":5049},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":2748,"url":3230},{"type":2741,"url":5052},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[3234,3235],{"id":191,"slug":5055,"dossier":46,"summary":5056,"aliases":5057,"sourceIds":5060,"published":5061,"modified":5062,"checkedAt":7,"severity":5063,"references":5067,"versionKeys":5078,"packageCount":32,"repositoryCount":2888},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[5058,5059],"CVE-2026-34525","PYSEC-2026-2103",[191,5059],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[5064,5066],{"type":2734,"score":5065},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2731,"score":2988},[5068,5070,5072,5074,5076,5077],{"type":2776,"url":5069},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2741,"url":5071},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2776,"url":5073},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2776,"url":5075},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":192,"slug":5080,"dossier":46,"summary":5081,"aliases":5082,"sourceIds":5086,"published":5087,"modified":5088,"checkedAt":7,"severity":5089,"references":5094,"versionKeys":5110,"packageCount":32,"repositoryCount":105},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[5083,5084,5085],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[192],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[5090,5092],{"type":2731,"score":5091},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2734,"score":5093},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5095,5097,5099,5101,5102,5104,5106,5108],{"type":2741,"url":5096},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2738,"url":5098},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2738,"url":5100},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2748,"url":3112},{"type":2738,"url":5103},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2738,"url":5105},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2738,"url":5107},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2738,"url":5109},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[3124,3125],{"id":193,"slug":5112,"dossier":46,"summary":5113,"aliases":5114,"sourceIds":5117,"published":5118,"modified":5119,"checkedAt":7,"severity":5120,"references":5122,"versionKeys":5138,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[5115,5116],"CVE-2026-32875","PYSEC-2026-2292",[193,5116],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[5121],{"type":2731,"score":2871},[5123,5125,5127,5129,5131,5132,5134,5136],{"type":2813,"url":5124},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":2741,"url":5126},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":3105,"url":5128},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":2776,"url":5130},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":2748,"url":3230},{"type":2738,"url":5133},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":2738,"url":5135},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":3105,"url":5137},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[3234],{"id":194,"slug":5140,"dossier":46,"summary":5141,"aliases":5142,"sourceIds":5146,"published":5147,"modified":5148,"checkedAt":7,"severity":5149,"references":5153,"versionKeys":5191,"packageCount":32,"repositoryCount":5195},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[5143,5144,5145],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[194,5145],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[5150,5152],{"type":2734,"score":5151},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2731,"score":2871},[5154,5156,5158,5160,5162,5164,5165,5167,5169,5171,5172,5174,5176,5178,5179,5181,5183,5185,5187,5189],{"type":2738,"url":5155},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2741,"url":5157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2738,"url":5159},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2738,"url":5161},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2738,"url":5163},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2748,"url":3962},{"type":2738,"url":5166},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2738,"url":5168},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2738,"url":5170},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2741,"url":3373},{"type":2741,"url":5173},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2741,"url":5175},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2741,"url":5177},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2741,"url":3375},{"type":2741,"url":5180},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2741,"url":5182},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2741,"url":5184},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2741,"url":5186},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2741,"url":5188},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2741,"url":5190},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[5192,5193,5194,3966,3967,3968,3969],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":195,"slug":5197,"dossier":46,"summary":5198,"aliases":5199,"sourceIds":5202,"published":5203,"modified":5204,"checkedAt":7,"severity":5205,"references":5208,"versionKeys":5220,"packageCount":32,"repositoryCount":32},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[5200,5201],"CVE-2026-48155","PYSEC-2026-3016",[195,5201],"2026-06-12T18:29:15Z","2026-07-13T16:43:35.317206583Z",[5206],{"type":2734,"score":5207},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5209,5211,5213,5215,5216,5217,5218],{"type":2738,"url":5210},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":2741,"url":5212},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":2738,"url":5214},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":2748,"url":2749},{"type":2738,"url":2751},{"type":2748,"url":2753},{"type":2741,"url":5219},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[2757],{"id":196,"slug":5222,"dossier":46,"summary":5223,"aliases":5224,"sourceIds":5227,"published":5228,"modified":5229,"checkedAt":7,"severity":5230,"references":5235,"versionKeys":5242,"packageCount":32,"repositoryCount":32},"ghsa-cmw6-hcpp-c6jp-09e640f2","ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load",[5225,5226],"CVE-2026-34446","PYSEC-2026-2241",[196,5226],"2026-04-01T18:16:30.660Z","2026-07-13T07:26:29.841410544Z",[5231,5233],{"type":2731,"score":5232},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2731,"score":5234},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5236,5238,5240,5241],{"type":2741,"url":5237},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-cmw6-hcpp-c6jp",{"type":2741,"url":5239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34446",{"type":2776,"url":3255},{"type":2748,"url":3257},[3267],{"id":197,"slug":5244,"dossier":46,"summary":5245,"aliases":5246,"sourceIds":5249,"published":5250,"modified":5251,"checkedAt":7,"severity":5252,"references":5255,"versionKeys":5272,"packageCount":32,"repositoryCount":105},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5247,5248],"CVE-2025-27516","PYSEC-2026-1471",[197,5248],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[5253],{"type":2734,"score":5254},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5256,5258,5260,5262,5264,5266,5268,5270],{"type":2738,"url":5257},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2741,"url":5259},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2776,"url":5261},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2748,"url":5263},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2738,"url":5265},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2738,"url":5267},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2748,"url":5269},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2741,"url":5271},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[5273,5274],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":198,"slug":5276,"dossier":46,"summary":5277,"aliases":5278,"sourceIds":5281,"published":5282,"modified":5283,"checkedAt":7,"severity":5284,"references":5288,"versionKeys":5314,"packageCount":32,"repositoryCount":32},"ghsa-cq27-v7xp-c356-7e0c8261","Buffer Overflow in pycrypto",[5279,5280],"CVE-2013-7459","PYSEC-2017-94",[198,5280],"2017-02-15T15:59:00Z","2024-10-18T22:23:12.251504Z",[5285,5287],{"type":2731,"score":5286},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2734,"score":3771},[5289,5291,5293,5295,5297,5299,5300,5302,5304,5306,5308,5310,5312],{"type":2741,"url":5290},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2013-7459",{"type":3105,"url":5292},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto\u002Fissues\u002F176",{"type":2776,"url":5294},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto\u002Fcommit\u002F8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4",{"type":3105,"url":5296},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1409754",{"type":2741,"url":5298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq27-v7xp-c356",{"type":2748,"url":4074},{"type":2738,"url":5301},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpycrypto\u002FPYSEC-2017-94.yaml",{"type":2738,"url":5303},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FC6BWNADPLKDBBQBUT3P75W7HAJCE7M3B",{"type":2738,"url":5305},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FRJ37R2YLX56YZABFNAOWV4VTHTGYREAE",{"type":2741,"url":5307},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201702-14",{"type":2738,"url":5309},"https:\u002F\u002Fpony7.fr\u002Fctf:public:32c3:cryptmsg",{"type":2738,"url":5311},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FRJ37R2YLX56YZABFNAOWV4VTHTGYREAE\u002F",{"type":2738,"url":5313},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FC6BWNADPLKDBBQBUT3P75W7HAJCE7M3B\u002F",[4090],{"id":199,"slug":5316,"dossier":46,"summary":5317,"aliases":5318,"sourceIds":5321,"published":5322,"modified":5323,"checkedAt":7,"severity":5324,"references":5327,"versionKeys":5338,"packageCount":32,"repositoryCount":591},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[5319,5320],"CVE-2026-49854","PYSEC-2026-3388",[199,5320],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[5325],{"type":2731,"score":5326},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5328,5330,5331,5333,5334,5336],{"type":2738,"url":5329},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2748,"url":3307},{"type":2738,"url":5332},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":2748,"url":3309},{"type":2741,"url":5335},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2741,"url":5337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[3315,3316,3317,3318,3319],{"id":200,"slug":5340,"dossier":46,"summary":5341,"aliases":5342,"sourceIds":5346,"published":5347,"modified":5348,"checkedAt":7,"severity":5349,"references":5354,"versionKeys":5370,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[5343,5344,5345],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[200,5345],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[5350,5352],{"type":2731,"score":5351},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2734,"score":5353},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5355,5357,5359,5361,5362,5364,5366,5368],{"type":2741,"url":5356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2738,"url":5358},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2738,"url":5360},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2748,"url":3912},{"type":2738,"url":5363},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2738,"url":5365},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2748,"url":5367},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2741,"url":5369},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3918],{"id":201,"slug":5372,"dossier":46,"summary":5373,"aliases":5374,"sourceIds":5377,"published":5378,"modified":5379,"checkedAt":7,"severity":5380,"references":5382,"versionKeys":5397,"packageCount":32,"repositoryCount":32},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[5375,5376],"CVE-2026-28351","PYSEC-2026-3017",[201,5376],"2026-02-28T02:46:10Z","2026-07-13T16:43:26.452272481Z",[5381],{"type":2734,"score":3191},[5383,5385,5387,5389,5391,5392,5394,5395],{"type":2738,"url":5384},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":2741,"url":5386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":2738,"url":5388},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":2738,"url":5390},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":2748,"url":2749},{"type":2738,"url":5393},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":2748,"url":2753},{"type":2741,"url":5396},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[2757],{"id":202,"slug":5399,"dossier":46,"summary":5400,"aliases":5401,"sourceIds":5405,"published":5406,"modified":5407,"checkedAt":7,"severity":5408,"references":5413,"versionKeys":5431,"packageCount":32,"repositoryCount":105},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[5402,5403,5404],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[202],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[5409,5411],{"type":2731,"score":5410},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2734,"score":5412},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5414,5416,5418,5420,5422,5424,5425,5427,5429],{"type":2741,"url":5415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2738,"url":5417},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2738,"url":5419},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2738,"url":5421},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2738,"url":5423},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2748,"url":3112},{"type":2738,"url":5426},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2738,"url":5428},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2738,"url":5430},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[3124,3125],{"id":203,"slug":5433,"dossier":46,"summary":5434,"aliases":5435,"sourceIds":5438,"published":5439,"modified":5440,"checkedAt":7,"severity":5441,"references":5444,"versionKeys":5457,"packageCount":32,"repositoryCount":32},"ghsa-f83h-ghpp-7wcc-fde96eee","Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc",[5436,5437],"CVE-2025-70559","PYSEC-2026-1761",[203,5437],"2025-11-07T23:17:05Z","2026-07-08T07:38:27.593871221Z",[5442],{"type":2731,"score":5443},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5445,5447,5449,5451,5453,5455],{"type":2738,"url":5446},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",{"type":2741,"url":5448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-70559",{"type":2738,"url":5450},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fcommit\u002Fb808ee05dd7f0c8ea8ec34bdf394d40e63501086",{"type":2748,"url":5452},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six",{"type":2748,"url":5454},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpdfminer-six",{"type":2741,"url":5456},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",[5458],"pypi:pdfminer-six@20240706",{"id":204,"slug":5460,"dossier":46,"summary":5461,"aliases":5462,"sourceIds":5465,"published":5466,"modified":5467,"checkedAt":7,"severity":5468,"references":5472,"versionKeys":5483,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[5463,5464],"CVE-2024-47874","PYSEC-2026-1943",[204,5464],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[5469,5471],{"type":2731,"score":5470},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2734,"score":3821},[5473,5475,5477,5479,5480,5481],{"type":2738,"url":5474},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2741,"url":5476},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2776,"url":5478},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2748,"url":2845},{"type":2748,"url":2851},{"type":2741,"url":5482},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2855],{"id":205,"slug":5485,"dossier":46,"summary":5486,"aliases":5487,"sourceIds":5490,"published":5491,"modified":5492,"checkedAt":7,"severity":5493,"references":5498,"versionKeys":5517,"packageCount":32,"repositoryCount":391},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[5488,5489],"CVE-2026-5241","PYSEC-2026-2290",[205,5489],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[5494,5496],{"type":2731,"score":5495},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2731,"score":5497},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5499,5501,5503,5505,5506,5508,5510,5511,5513,5515],{"type":2741,"url":5500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2776,"url":5502},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2741,"url":5504},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2741,"url":3377},{"type":2738,"url":5507},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":3105,"url":5509},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2748,"url":2811},{"type":2738,"url":5512},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2813,"url":5514},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2738,"url":5516},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[2818,2819,2820,2821,2822,2823,2824],{"id":206,"slug":5519,"dossier":46,"summary":5520,"aliases":5521,"sourceIds":5524,"published":5525,"modified":5526,"checkedAt":7,"severity":5527,"references":5530,"versionKeys":5543,"packageCount":32,"repositoryCount":32},"ghsa-fh2c-86xm-pm2x-ff1ac9ef","LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request",[5522,5523],"CVE-2024-8984","PYSEC-2026-1545",[206,5523],"2025-03-20T12:32:49Z","2026-07-07T17:56:56.562714379Z",[5528],{"type":2731,"score":5529},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[5531,5533,5535,5536,5538,5540,5541],{"type":2741,"url":5532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8984",{"type":2738,"url":5534},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61",{"type":2748,"url":3611},{"type":2738,"url":5537},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fblob\u002F8c5ff150f6142608ffe968e4e68429f978fda187\u002Flitellm\u002Ftests\u002Ftest_spend_logs.py#L242",{"type":2738,"url":5539},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F554fc76b-3097-4223-b4cf-110b853e9355",{"type":2748,"url":3619},{"type":2741,"url":5542},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh2c-86xm-pm2x",[3623],{"id":207,"slug":5545,"dossier":46,"summary":5546,"aliases":5547,"sourceIds":5550,"published":5551,"modified":5552,"checkedAt":7,"severity":5553,"references":5556,"versionKeys":5567,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[5548,5549],"CVE-2025-69230","PYSEC-2026-1105",[207,5549],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[5554],{"type":2734,"score":5555},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5557,5559,5561,5563,5564,5565],{"type":2738,"url":5558},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2741,"url":5560},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2776,"url":5562},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":5566},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2880,2881,2882,2883,2884,2885,2886],{"id":208,"slug":5569,"dossier":46,"summary":5570,"aliases":5571,"sourceIds":5574,"published":5575,"modified":5576,"checkedAt":7,"severity":5577,"references":5580,"versionKeys":5588,"packageCount":32,"repositoryCount":105},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[5572,5573],"CVE-2026-48524","PYSEC-2026-177",[208,5573],"2026-05-28T16:16:29.403Z","2026-06-16T15:44:20.804330301Z",[5578],{"type":2731,"score":5579},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5581,5583,5585,5586],{"type":2741,"url":5582},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":2741,"url":5584},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":2748,"url":4313},{"type":2738,"url":5587},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[4319,4320],{"id":209,"slug":5590,"dossier":46,"summary":5591,"aliases":5592,"sourceIds":5595,"published":5596,"modified":5597,"checkedAt":7,"severity":5598,"references":5601,"versionKeys":5612,"packageCount":32,"repositoryCount":32},"ghsa-fjcf-3j3r-78rp-3506a50a","LiteLLM Has an Improper Authorization Vulnerability",[5593,5594],"CVE-2025-0628","PYSEC-2026-1546",[209,5594],"2025-03-20T12:32:52Z","2026-07-07T17:56:36.033233141Z",[5599],{"type":2731,"score":5600},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5602,5604,5606,5607,5609,5610],{"type":2741,"url":5603},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-0628",{"type":2738,"url":5605},"https:\u002F\u002Fgithub.com\u002Fberriai\u002Flitellm\u002Fcommit\u002F566d9354aab4215091b2e51ad0333e948125fa1b",{"type":2748,"url":3611},{"type":2738,"url":5608},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6c0e2f75-2d03-42f9-9530-e16a973317fc",{"type":2748,"url":3619},{"type":2741,"url":5611},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjcf-3j3r-78rp",[3623],{"id":210,"slug":5614,"dossier":46,"summary":4275,"aliases":5615,"sourceIds":5618,"published":5619,"modified":5620,"checkedAt":7,"severity":5621,"references":5624,"versionKeys":5635,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[5616,5617],"CVE-2025-1194","PYSEC-2026-1984",[210,5617],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[5622],{"type":2731,"score":5623},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5625,5627,5629,5630,5632,5633],{"type":2741,"url":5626},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2738,"url":5628},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2748,"url":2811},{"type":2738,"url":5631},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2748,"url":3149},{"type":2741,"url":5634},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2818],{"id":211,"slug":5637,"dossier":46,"summary":5638,"aliases":5639,"sourceIds":5642,"published":5643,"modified":5644,"checkedAt":7,"severity":5645,"references":5648,"versionKeys":5654,"packageCount":32,"repositoryCount":2888},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[5640,5641],"CVE-2026-54278","PYSEC-2026-2111",[211,5641],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[5646,5647],{"type":2734,"score":3447},{"type":2731,"score":2871},[5649,5651,5652],{"type":2741,"url":5650},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2748,"url":2876},{"type":2776,"url":5653},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2880,2881,2882,2883,2884,2885,2886,2887],{"id":212,"slug":5656,"dossier":46,"summary":5657,"aliases":5658,"sourceIds":5661,"published":5662,"modified":5663,"checkedAt":7,"severity":5664,"references":5667,"versionKeys":5686,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[5659,5660],"CVE-2024-34062","PYSEC-2026-1976",[212,5660],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[5665],{"type":2731,"score":5666},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5668,5670,5672,5674,5676,5678,5680,5682,5684],{"type":2738,"url":5669},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2741,"url":5671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2738,"url":5673},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2748,"url":5675},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2738,"url":5677},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2738,"url":5679},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2738,"url":5681},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2748,"url":5683},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2741,"url":5685},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[5687],"pypi:tqdm@4.66.2",{"id":213,"slug":5689,"dossier":46,"summary":5690,"aliases":5691,"sourceIds":5694,"published":5695,"modified":5696,"checkedAt":7,"severity":5697,"references":5699,"versionKeys":5712,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[5692,5693],"CVE-2025-69229","PYSEC-2026-1106",[213,5693],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[5698],{"type":2734,"score":3447},[5700,5702,5704,5706,5708,5709,5710],{"type":2738,"url":5701},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2741,"url":5703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2738,"url":5705},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2738,"url":5707},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":5711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2880,2881,2882,2883,2884,2885,2886],{"id":214,"slug":5714,"dossier":46,"summary":5715,"aliases":5716,"sourceIds":5719,"published":5720,"modified":5721,"checkedAt":7,"severity":5722,"references":5724,"versionKeys":5737,"packageCount":32,"repositoryCount":32},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[5717,5718],"CVE-2026-54651","PYSEC-2026-3018",[214,5718],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[5723],{"type":2734,"score":3676},[5725,5727,5729,5731,5732,5734,5735],{"type":2738,"url":5726},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":2741,"url":5728},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":2738,"url":5730},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":2748,"url":2749},{"type":2738,"url":5733},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":2748,"url":2753},{"type":2741,"url":5736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[2757],{"id":215,"slug":5739,"dossier":91,"summary":5740,"aliases":5741,"sourceIds":5744,"published":5745,"modified":5746,"checkedAt":7,"severity":5747,"references":5752,"versionKeys":5762,"packageCount":32,"repositoryCount":514},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[5742,5743],"CVE-2026-25645","PYSEC-2026-2275",[215,5743],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[5748,5750],{"type":2731,"score":5749},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2731,"score":5751},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5753,5755,5757,5759,5760],{"type":2741,"url":5754},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2741,"url":5756},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2776,"url":5758},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2748,"url":4916},{"type":2741,"url":5761},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4926,4927,5763,5764],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":216,"slug":5766,"dossier":46,"summary":5767,"aliases":5768,"sourceIds":5771,"published":5772,"modified":5773,"checkedAt":7,"severity":5774,"references":5777,"versionKeys":5787,"packageCount":32,"repositoryCount":622},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[5769,5770],"CVE-2026-33230","PYSEC-2026-2235",[216,5770],"2026-03-18T20:23:33Z","2026-07-13T07:26:40.492720011Z",[5775],{"type":2731,"score":5776},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[5778,5780,5782,5784,5786],{"type":2813,"url":5779},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":2741,"url":5781},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":2776,"url":5783},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":2776,"url":5785},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":2748,"url":3367},[3381,3382],{"id":217,"slug":5789,"dossier":91,"summary":5790,"aliases":5791,"sourceIds":5794,"published":5795,"modified":5796,"checkedAt":7,"severity":5797,"references":5799,"versionKeys":5810,"packageCount":32,"repositoryCount":104},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[5792,5793],"CVE-2025-66418","PYSEC-2026-1998",[217,5793],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[5798],{"type":2734,"score":3037},[5800,5802,5804,5806,5807,5808],{"type":2738,"url":5801},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2741,"url":5803},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2776,"url":5805},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2748,"url":3046},{"type":2748,"url":3048},{"type":2741,"url":5809},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[3052,3053,3054,3055,3056],{"id":218,"slug":5812,"dossier":46,"summary":5813,"aliases":5814,"sourceIds":5817,"published":5818,"modified":5819,"checkedAt":7,"severity":5820,"references":5822,"versionKeys":5835,"packageCount":32,"repositoryCount":32},"ghsa-gm8q-m8mv-jj5m-f488c667","Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write",[5815,5816],"CVE-2025-64712","PYSEC-2026-558",[218,5816],"2026-02-03T17:43:56Z","2026-07-13T16:15:34.752594062Z",[5821],{"type":2731,"score":3598},[5823,5825,5827,5829,5831,5833],{"type":2738,"url":5824},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fsecurity\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",{"type":2741,"url":5826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64712",{"type":2738,"url":5828},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fcommit\u002Fb01d35b2373fd087d2e15162b9c021663c97155d",{"type":2748,"url":5830},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured",{"type":2748,"url":5832},"https:\u002F\u002Fpypi.org\u002Fproject\u002Funstructured",{"type":2741,"url":5834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",[5836],"pypi:unstructured@0.16.12",{"id":219,"slug":5838,"dossier":46,"summary":5839,"aliases":5840,"sourceIds":5843,"published":5844,"modified":5845,"checkedAt":7,"severity":5846,"references":5849,"versionKeys":5864,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[5841,5842],"CVE-2024-56201","PYSEC-2026-1472",[219,5842],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[5847,5848],{"type":2731,"score":3899},{"type":2734,"score":5254},[5850,5852,5854,5856,5858,5859,5861,5862],{"type":2738,"url":5851},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2741,"url":5853},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2738,"url":5855},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2776,"url":5857},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2748,"url":5263},{"type":2738,"url":5860},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2748,"url":5269},{"type":2741,"url":5863},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[5273],{"id":220,"slug":5866,"dossier":46,"summary":5867,"aliases":5868,"sourceIds":5869,"published":5870,"modified":5871,"checkedAt":7,"severity":5872,"references":5873,"versionKeys":5879,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[220],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[5874,5876,5877],{"type":2738,"url":5875},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2748,"url":3704},{"type":2738,"url":5878},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[3708],{"id":221,"slug":5881,"dossier":46,"summary":5882,"aliases":5883,"sourceIds":5886,"published":5887,"modified":5888,"checkedAt":7,"severity":5889,"references":5891,"versionKeys":5912,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[5884,5885],"CVE-2024-34064","PYSEC-2026-1474",[221,5885],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[5890],{"type":2731,"score":4364},[5892,5894,5896,5898,5899,5901,5903,5905,5907,5909,5910],{"type":2738,"url":5893},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2741,"url":5895},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2776,"url":5897},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2748,"url":5263},{"type":2738,"url":5900},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2738,"url":5902},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2738,"url":5904},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2738,"url":5906},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2738,"url":5908},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2748,"url":5269},{"type":2741,"url":5911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[5273],{"id":222,"slug":5914,"dossier":46,"summary":5915,"aliases":5916,"sourceIds":5919,"published":5920,"modified":5921,"checkedAt":7,"severity":5922,"references":5925,"versionKeys":5939,"packageCount":32,"repositoryCount":622},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[5917,5918],"CVE-2026-0846","PYSEC-2026-97",[222,5918],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[5923,5924],{"type":2731,"score":4127},{"type":2731,"score":3248},[5926,5928,5930,5932,5933,5935,5937],{"type":2741,"url":5927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":2738,"url":5929},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":2738,"url":5931},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":2748,"url":3367},{"type":2738,"url":5934},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":2813,"url":5936},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":2741,"url":5938},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3381,3382],{"id":223,"slug":5941,"dossier":46,"summary":5942,"aliases":5943,"sourceIds":5946,"published":5947,"modified":5948,"checkedAt":7,"severity":5949,"references":5952,"versionKeys":5961,"packageCount":32,"repositoryCount":2888},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[5944,5945],"CVE-2026-34513","PYSEC-2026-2095",[223,5945],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[5950,5951],{"type":2734,"score":3279},{"type":2731,"score":2871},[5953,5955,5957,5959,5960],{"type":2776,"url":5954},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2741,"url":5956},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2776,"url":5958},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":224,"slug":5963,"dossier":46,"summary":5964,"aliases":5965,"sourceIds":5968,"published":5969,"modified":5970,"checkedAt":7,"severity":5971,"references":5975,"versionKeys":5983,"packageCount":32,"repositoryCount":2888},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[5966,5967],"CVE-2026-47265","PYSEC-2026-2105",[224,5967],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[5972,5974],{"type":2734,"score":5973},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2731,"score":3248},[5976,5978,5980,5982],{"type":2776,"url":5977},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2741,"url":5979},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2776,"url":5981},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2748,"url":2876},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":225,"slug":5985,"dossier":46,"summary":5986,"aliases":5987,"sourceIds":5990,"published":5991,"modified":5992,"checkedAt":7,"severity":5993,"references":5998,"versionKeys":6013,"packageCount":32,"repositoryCount":105},"ghsa-hp6r-r9vc-q8wx-ba7ba143","FastAPI SSP is vulnerable to Cross-site Request Forgery (CSRF) through improper OAuth parameter validation",[5988,5989],"CVE-2025-14546","PYSEC-2026-1362",[225,5989],"2025-12-19T06:30:27Z","2026-07-07T17:56:29.184155368Z",[5994,5996],{"type":2731,"score":5995},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",{"type":2734,"score":5997},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5999,6001,6003,6005,6007,6009,6011],{"type":2741,"url":6000},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14546",{"type":2738,"url":6002},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso\u002Fissues\u002F266",{"type":2738,"url":6004},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso\u002Fcommit\u002F6117d1a5ad498ba57d671e8a059ebe20db5abe02",{"type":2748,"url":6006},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso",{"type":2738,"url":6008},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-FASTAPISSO-14386403",{"type":2748,"url":6010},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffastapi-sso",{"type":2741,"url":6012},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hp6r-r9vc-q8wx",[6014,6015],"pypi:fastapi-sso@0.10.0","pypi:fastapi-sso@0.16.0",{"id":226,"slug":6017,"dossier":46,"summary":6018,"aliases":6019,"sourceIds":6022,"published":6023,"modified":6024,"checkedAt":7,"severity":6025,"references":6029,"versionKeys":6035,"packageCount":32,"repositoryCount":2888},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[6020,6021],"CVE-2026-54276","PYSEC-2026-2109",[226,6021],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[6026,6028],{"type":2734,"score":6027},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2731,"score":5776},[6030,6032,6034],{"type":2741,"url":6031},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2776,"url":6033},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2748,"url":2876},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":227,"slug":6037,"dossier":46,"summary":6038,"aliases":6039,"sourceIds":6042,"published":6043,"modified":6044,"checkedAt":7,"severity":6045,"references":6047,"versionKeys":6062,"packageCount":32,"repositoryCount":32},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[6040,6041],"CVE-2026-31826","PYSEC-2026-3019",[227,6041],"2026-03-11T00:14:02Z","2026-07-13T16:43:52.358788786Z",[6046],{"type":2734,"score":3487},[6048,6050,6052,6054,6056,6057,6059,6060],{"type":2738,"url":6049},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":2741,"url":6051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":2738,"url":6053},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":2738,"url":6055},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":2748,"url":2749},{"type":2738,"url":6058},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":2748,"url":2753},{"type":2741,"url":6061},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[2757],{"id":228,"slug":6064,"dossier":46,"summary":6065,"aliases":6066,"sourceIds":6069,"published":6070,"modified":6071,"checkedAt":7,"severity":6072,"references":6077,"versionKeys":6087,"packageCount":32,"repositoryCount":32},"ghsa-hqmj-h5c6-369m-5a4fc63e","ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack",[6067,6068],"CVE-2026-28500","PYSEC-2026-103",[228,6068],"2026-03-16T16:23:28Z","2026-06-08T18:45:17.801162264Z",[6073,6075],{"type":2731,"score":6074},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"type":2731,"score":6076},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6078,6080,6082,6084,6085],{"type":2741,"url":6079},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmj-h5c6-369m",{"type":2741,"url":6081},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28500",{"type":2776,"url":6083},"https:\u002F\u002Fgithub.com\u002FZeroXJacks\u002FCVEs\u002Fblob\u002Fmain\u002F2026\u002FCVE-2026-28500.md",{"type":2748,"url":3257},{"type":2738,"url":6086},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fonnx\u002FPYSEC-2026-103.yaml",[3267],{"id":229,"slug":6089,"dossier":46,"summary":6090,"aliases":6091,"sourceIds":6094,"published":6095,"modified":6096,"checkedAt":7,"severity":6097,"references":6100,"versionKeys":6114,"packageCount":32,"repositoryCount":32},"ghsa-hwpq-hmq9-wj77-25fc26b7","ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)",[6092,6093],"CVE-2026-44512","PYSEC-2026-2689",[229,6093],"2026-07-07T13:02:10Z","2026-07-16T23:59:26.167399764Z",[6098],{"type":2731,"score":6099},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[6101,6103,6105,6106,6108,6110,6112],{"type":2738,"url":6102},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-hwpq-hmq9-wj77",{"type":2738,"url":6104},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F7916",{"type":2748,"url":3257},{"type":2738,"url":6107},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Freleases\u002Ftag\u002Fv1.22.0",{"type":2748,"url":6109},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fonnx",{"type":2741,"url":6111},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hwpq-hmq9-wj77",{"type":2741,"url":6113},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44512",[3267],{"id":230,"slug":6116,"dossier":46,"summary":6117,"aliases":6118,"sourceIds":6121,"published":6122,"modified":6123,"checkedAt":7,"severity":6124,"references":6128,"versionKeys":6145,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[6119,6120],"CVE-2025-67221","PYSEC-2026-107",[230,6120],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[6125,6127],{"type":2734,"score":6126},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2731,"score":2871},[6129,6131,6133,6135,6137,6139,6141,6143],{"type":2741,"url":6130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":2738,"url":6132},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":2738,"url":6134},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":2738,"url":6136},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":2748,"url":6138},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":2813,"url":6140},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":2738,"url":6142},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":2741,"url":6144},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[6146,6147,6148,6149],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":231,"slug":6151,"dossier":46,"summary":6152,"aliases":6153,"sourceIds":6156,"published":6157,"modified":6158,"checkedAt":7,"severity":6159,"references":6163,"versionKeys":6179,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[6154,6155],"CVE-2024-11394","PYSEC-2024-229",[231,6155],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[6160,6162],{"type":2731,"score":6161},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2731,"score":5351},[6164,6166,6168,6170,6171,6173,6175,6177],{"type":2741,"url":6165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2738,"url":6167},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2738,"url":6169},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2748,"url":2811},{"type":2738,"url":6172},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2738,"url":6174},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2741,"url":6176},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2741,"url":6178},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2818],{"id":232,"slug":6181,"dossier":46,"summary":6182,"aliases":6183,"sourceIds":6187,"published":6188,"modified":6189,"checkedAt":7,"severity":6190,"references":6194,"versionKeys":6211,"packageCount":32,"repositoryCount":32},"ghsa-j225-cvw7-qrx7-11bb0227","PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption",[6184,6185,6186],"CVE-2023-52323","PYSEC-2024-3","PYSEC-2026-1811",[232,6186],"2024-01-05T06:30:19Z","2026-07-07T17:56:21.566071405Z",[6191,6192],{"type":2731,"score":3394},{"type":2734,"score":6193},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6195,6197,6199,6201,6203,6205,6207,6209],{"type":2741,"url":6196},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-52323",{"type":2738,"url":6198},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome\u002Fcommit\u002F0deea1bfe1489e8c80d2053bbb06a1aa0b181ebd",{"type":2748,"url":6200},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome",{"type":2738,"url":6202},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome\u002Fblob\u002Fmaster\u002FChangelog.rst",{"type":2738,"url":6204},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpycryptodomex\u002FPYSEC-2024-3.yaml",{"type":2738,"url":6206},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpycryptodomex\u002F#history",{"type":2748,"url":6208},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpycryptodome",{"type":2741,"url":6210},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j225-cvw7-qrx7",[6212],"pypi:pycryptodome@3.10.1",{"id":233,"slug":6214,"dossier":46,"summary":6215,"aliases":6216,"sourceIds":6219,"published":6220,"modified":6221,"checkedAt":7,"severity":6222,"references":6224,"versionKeys":6236,"packageCount":32,"repositoryCount":32},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[6217,6218],"CVE-2026-49461","PYSEC-2026-3020",[233,6218],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[6223],{"type":2734,"score":3676},[6225,6227,6229,6230,6231,6232,6234],{"type":2738,"url":6226},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":2738,"url":6228},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":2748,"url":2749},{"type":2738,"url":3878},{"type":2748,"url":2753},{"type":2741,"url":6233},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":2741,"url":6235},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[2757],{"id":234,"slug":6238,"dossier":46,"summary":6239,"aliases":6240,"sourceIds":6243,"published":6244,"modified":6245,"checkedAt":7,"severity":6246,"references":6248,"versionKeys":6263,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[6241,6242],"CVE-2025-62708","PYSEC-2026-1831",[234,6242],"2025-10-22T19:40:50Z","2026-07-07T17:56:05.697066629Z",[6247],{"type":2734,"score":3447},[6249,6251,6253,6255,6257,6258,6260,6261],{"type":2738,"url":6250},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":2741,"url":6252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":2738,"url":6254},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":2738,"url":6256},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":2748,"url":2749},{"type":2738,"url":6259},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":2748,"url":2753},{"type":2741,"url":6262},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[2757],{"id":235,"slug":6265,"dossier":46,"summary":6266,"aliases":6267,"sourceIds":6270,"published":6271,"modified":6272,"checkedAt":7,"severity":6273,"references":6277,"versionKeys":6294,"packageCount":32,"repositoryCount":2888},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[6268,6269],"CVE-2026-34993","PYSEC-2026-2104",[235,6269],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[6274,6276],{"type":2731,"score":6275},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2731,"score":3068},[6278,6280,6282,6284,6285,6287,6289,6290,6291,6292],{"type":2776,"url":6279},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2741,"url":6281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2776,"url":6283},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2748,"url":2876},{"type":2738,"url":6286},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2738,"url":6288},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2741,"url":3263},{"type":2741,"url":5504},{"type":2741,"url":3377},{"type":3105,"url":6293},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2880,2881,2882,2883,2884,2885,2886,2887],{"id":236,"slug":6296,"dossier":46,"summary":6297,"aliases":6298,"sourceIds":6301,"published":6302,"modified":6303,"checkedAt":7,"severity":6304,"references":6306,"versionKeys":6317,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[6299,6300],"CVE-2025-69227","PYSEC-2026-1107",[236,6300],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[6305],{"type":2734,"score":3447},[6307,6309,6311,6313,6314,6315],{"type":2738,"url":6308},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2741,"url":6310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2738,"url":6312},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":6316},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2880,2881,2882,2883,2884,2885,2886],{"id":237,"slug":6319,"dossier":46,"summary":6320,"aliases":6321,"sourceIds":6324,"published":6325,"modified":6326,"checkedAt":7,"severity":6327,"references":6330,"versionKeys":6345,"packageCount":32,"repositoryCount":32},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[6322,6323],"CVE-2026-41168","PYSEC-2026-3021",[237,6323],"2026-04-15T19:43:09Z","2026-07-13T16:43:07.020121646Z",[6328,6329],{"type":2731,"score":2836},{"type":2734,"score":5207},[6331,6333,6335,6337,6339,6340,6342,6343],{"type":2738,"url":6332},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":2741,"url":6334},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":2738,"url":6336},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":2738,"url":6338},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":2748,"url":2749},{"type":2738,"url":6341},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":2748,"url":2753},{"type":2741,"url":6344},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[2757],{"id":238,"slug":6347,"dossier":46,"summary":6348,"aliases":6349,"sourceIds":6352,"published":6353,"modified":6354,"checkedAt":7,"severity":6355,"references":6358,"versionKeys":6367,"packageCount":32,"repositoryCount":34},"ghsa-jjhc-v7c2-5hh6-5d2c89e6","LiteLLM: Authentication bypass via OIDC userinfo cache key collision",[6350,6351],"CVE-2026-35030","PYSEC-2026-390",[238,6351],"2026-04-03T21:59:50Z","2026-07-01T20:22:56.400828Z",[6356],{"type":2734,"score":6357},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[6359,6361,6363,6364,6365],{"type":2738,"url":6360},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",{"type":2741,"url":6362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35030",{"type":2748,"url":3611},{"type":2748,"url":3619},{"type":2741,"url":6366},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",[3623,3624,3625,3626],{"id":239,"slug":6369,"dossier":46,"summary":6370,"aliases":6371,"sourceIds":6374,"published":6375,"modified":6376,"checkedAt":7,"severity":6377,"references":6379,"versionKeys":6392,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[6372,6373],"CVE-2025-3264","PYSEC-2026-1985",[239,6373],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[6378],{"type":2731,"score":3548},[6380,6382,6384,6386,6387,6389,6390],{"type":2741,"url":6381},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2738,"url":6383},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2738,"url":6385},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2748,"url":2811},{"type":2738,"url":6388},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2748,"url":3149},{"type":2741,"url":6391},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2818],{"id":240,"slug":6394,"dossier":46,"summary":6395,"aliases":6396,"sourceIds":6399,"published":6400,"modified":6401,"checkedAt":7,"severity":6402,"references":6404,"versionKeys":6421,"packageCount":32,"repositoryCount":622},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[6397,6398],"CVE-2026-33231","PYSEC-2026-2236",[240,6398],"2026-03-19T12:42:20Z","2026-07-13T07:26:55.331693381Z",[6403],{"type":2731,"score":2871},[6405,6407,6409,6411,6412,6414,6416,6417,6418,6419],{"type":2813,"url":6406},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":2741,"url":6408},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":2776,"url":6410},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":2748,"url":3367},{"type":2738,"url":6413},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":2738,"url":6415},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":2741,"url":3375},{"type":2741,"url":3263},{"type":2741,"url":3377},{"type":3105,"url":6420},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3381,3382],{"id":241,"slug":6423,"dossier":46,"summary":6424,"aliases":6425,"sourceIds":6427,"published":6428,"modified":6429,"checkedAt":7,"severity":6430,"references":6432,"versionKeys":6440,"packageCount":32,"repositoryCount":32},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[6426],"CVE-2026-57204",[241],"2026-06-18T14:28:49Z","2026-07-08T08:27:12.200342088Z",[6431],{"type":2734,"score":3676},[6433,6435,6437,6438],{"type":2738,"url":6434},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":2738,"url":6436},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":2748,"url":2749},{"type":2738,"url":6439},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[2757],{"id":242,"slug":6442,"dossier":46,"summary":6443,"aliases":6444,"sourceIds":6447,"published":6448,"modified":6449,"checkedAt":7,"severity":6450,"references":6453,"versionKeys":6461,"packageCount":32,"repositoryCount":391},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[6445,6446],"CVE-2026-54282","PYSEC-2026-248",[242,6446],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[6451,6452],{"type":2731,"score":4239},{"type":2731,"score":2988},[6454,6456,6458,6459],{"type":2741,"url":6455},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2741,"url":6457},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2748,"url":4456},{"type":2738,"url":6460},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2855,2856,2857,4463,4464,4605,4606],{"id":243,"slug":6463,"dossier":46,"summary":6464,"aliases":6465,"sourceIds":6468,"published":6469,"modified":6470,"checkedAt":7,"severity":6471,"references":6474,"versionKeys":6482,"packageCount":32,"repositoryCount":105},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[6466,6467],"CVE-2026-48523","PYSEC-2026-176",[243,6467],"2026-05-28T16:16:29.280Z","2026-06-16T15:44:20.868973576Z",[6472],{"type":2731,"score":6473},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6475,6477,6479,6480],{"type":2813,"url":6476},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":2741,"url":6478},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":2748,"url":4313},{"type":2738,"url":6481},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[4319,4320],{"id":244,"slug":6484,"dossier":46,"summary":6485,"aliases":6486,"sourceIds":6489,"published":6490,"modified":6491,"checkedAt":7,"severity":6492,"references":6495,"versionKeys":6509,"packageCount":32,"repositoryCount":65},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[6487,6488],"CVE-2026-30922","PYSEC-2026-2263",[244,6488],"2026-03-17T16:17:33Z","2026-07-13T07:26:46.403932690Z",[6493,6494],{"type":2731,"score":5529},{"type":2731,"score":2871},[6496,6498,6500,6502,6504,6505,6507],{"type":2813,"url":6497},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2741,"url":6499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2776,"url":6501},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2738,"url":6503},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2748,"url":4038},{"type":2738,"url":6506},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.3",{"type":2738,"url":6508},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[4050],{"id":245,"slug":6511,"dossier":46,"summary":6512,"aliases":6513,"sourceIds":6516,"published":6517,"modified":6518,"checkedAt":7,"severity":6519,"references":6521,"versionKeys":6532,"packageCount":32,"repositoryCount":32},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[6514,6515],"CVE-2026-54531","PYSEC-2026-3022",[245,6515],"2026-06-16T14:05:57Z","2026-07-13T16:43:49.403109632Z",[6520],{"type":2734,"score":3676},[6522,6524,6525,6526,6527,6528,6530],{"type":2738,"url":6523},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":2738,"url":3681},{"type":2748,"url":2749},{"type":2738,"url":3684},{"type":2748,"url":2753},{"type":2741,"url":6529},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":2741,"url":6531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[2757],{"id":246,"slug":6534,"dossier":46,"summary":6535,"aliases":6536,"sourceIds":6539,"published":6540,"modified":6541,"checkedAt":7,"severity":6542,"references":6544,"versionKeys":6560,"packageCount":32,"repositoryCount":32},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[6537,6538],"CVE-2025-66019","PYSEC-2026-1832",[246,6538],"2025-11-24T22:42:07Z","2026-07-07T17:56:14.246224195Z",[6543],{"type":2734,"score":3447},[6545,6546,6548,6550,6552,6554,6555,6557,6558],{"type":2738,"url":6250},{"type":2738,"url":6547},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":2741,"url":6549},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":2738,"url":6551},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":2738,"url":6553},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":2748,"url":2749},{"type":2738,"url":6556},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":2748,"url":2753},{"type":2741,"url":6559},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[2757],{"id":247,"slug":6562,"dossier":46,"summary":6563,"aliases":6564,"sourceIds":6567,"published":6568,"modified":6569,"checkedAt":7,"severity":6570,"references":6575,"versionKeys":6584,"packageCount":32,"repositoryCount":2888},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[6565,6566],"CVE-2026-34516","PYSEC-2026-2098",[247,6566],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[6571,6572,6573],{"type":2731,"score":2871},{"type":2734,"score":3447},{"type":2734,"score":6574},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6576,6578,6580,6582,6583],{"type":2776,"url":6577},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2741,"url":6579},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2776,"url":6581},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":248,"slug":6586,"dossier":46,"summary":6587,"aliases":6588,"sourceIds":6591,"published":6592,"modified":6593,"checkedAt":7,"severity":6594,"references":6597,"versionKeys":6603,"packageCount":32,"repositoryCount":2888},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[6589,6590],"CVE-2026-50269","PYSEC-2026-2106",[248,6590],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[6595,6596],{"type":2734,"score":2986},{"type":2731,"score":2871},[6598,6600,6602],{"type":2741,"url":6599},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2776,"url":6601},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2748,"url":2876},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":249,"slug":6605,"dossier":46,"summary":6606,"aliases":6607,"sourceIds":6610,"published":6611,"modified":6612,"checkedAt":7,"severity":6613,"references":6617,"versionKeys":6625,"packageCount":32,"repositoryCount":65},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[6608,6609],"CVE-2026-34073","PYSEC-2026-35",[249,6609],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[6614,6615],{"type":2731,"score":2988},{"type":2734,"score":6616},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6618,6620,6622,6623],{"type":2741,"url":6619},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2741,"url":6621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2748,"url":3704},{"type":2738,"url":6624},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[3708,3709,3710,3711,3712,3713],{"id":250,"slug":6627,"dossier":46,"summary":6628,"aliases":6629,"sourceIds":6632,"published":6633,"modified":6634,"checkedAt":7,"severity":6635,"references":6638,"versionKeys":6646,"packageCount":32,"repositoryCount":622},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[6630,6631],"CVE-2026-44432","PYSEC-2026-142",[250,6631],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[6636,6637],{"type":2731,"score":2871},{"type":2734,"score":3037},[6639,6641,6643,6645],{"type":2741,"url":6640},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2741,"url":6642},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2738,"url":6644},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2748,"url":3046},[6647],"pypi:urllib3@2.6.3",{"id":251,"slug":6649,"dossier":46,"summary":6650,"aliases":6651,"sourceIds":6654,"published":6655,"modified":6656,"checkedAt":7,"severity":6657,"references":6660,"versionKeys":6673,"packageCount":32,"repositoryCount":526},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[6652,6653],"CVE-2026-28684","PYSEC-2026-2270",[251,6653],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[6658],{"type":2731,"score":6659},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6661,6663,6665,6667,6669,6671],{"type":2776,"url":6662},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2741,"url":6664},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2776,"url":6666},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2738,"url":6668},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2748,"url":6670},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2741,"url":6672},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[6674,6675,6676,6677],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":252,"slug":6679,"dossier":46,"summary":6680,"aliases":6681,"sourceIds":6684,"published":6685,"modified":6686,"checkedAt":7,"severity":6687,"references":6689,"versionKeys":6698,"packageCount":32,"repositoryCount":591},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[6682,6683],"CVE-2026-49855","PYSEC-2026-3389",[252,6683],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[6688],{"type":2731,"score":2871},[6690,6692,6693,6694,6696],{"type":2738,"url":6691},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2748,"url":3307},{"type":2748,"url":3309},{"type":2741,"url":6695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2741,"url":6697},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[3315,3316,3317,3318,3319],{"id":253,"slug":6700,"dossier":46,"summary":6701,"aliases":6702,"sourceIds":6705,"published":6706,"modified":6707,"checkedAt":7,"severity":6708,"references":6710,"versionKeys":6721,"packageCount":32,"repositoryCount":2921},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[6703,6704],"CVE-2026-40347","PYSEC-2026-3038",[253,6704],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[6709],{"type":2731,"score":2836},[6711,6713,6715,6716,6718,6719],{"type":2738,"url":6712},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2741,"url":6714},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2748,"url":3830},{"type":2738,"url":6717},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2748,"url":3832},{"type":2741,"url":6720},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[3941,3942,3836],{"id":254,"slug":6723,"dossier":46,"summary":6724,"aliases":6725,"sourceIds":6728,"published":6729,"modified":6730,"checkedAt":7,"severity":6731,"references":6733,"versionKeys":6744,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[6726,6727],"CVE-2025-69225","PYSEC-2026-1109",[254,6727],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[6732],{"type":2734,"score":2986},[6734,6736,6738,6740,6741,6742],{"type":2738,"url":6735},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2741,"url":6737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2776,"url":6739},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2748,"url":2876},{"type":2748,"url":3805},{"type":2741,"url":6743},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2880,2881,2882,2883,2884,2885,2886],{"id":255,"slug":6746,"dossier":46,"summary":6747,"aliases":6748,"sourceIds":6752,"published":6753,"modified":6754,"checkedAt":7,"severity":6755,"references":6758,"versionKeys":6791,"packageCount":32,"repositoryCount":105},"ghsa-mrfv-m5wm-5w6w-824b9281","libsodium has Incomplete List of Disallowed Inputs",[6749,6750,6751],"CVE-2025-69277","PYSEC-2026-1448","PYSEC-2026-3002",[255,6751],"2025-12-31T06:30:18Z","2026-07-13T16:43:23.604670369Z",[6756],{"type":2731,"score":6757},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[6759,6761,6763,6765,6767,6769,6771,6773,6775,6777,6779,6781,6783,6785,6787,6789],{"type":2741,"url":6760},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69277",{"type":2738,"url":6762},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fissues\u002F920",{"type":2738,"url":6764},"https:\u002F\u002Fgithub.com\u002Fhdwallet-io\u002Fpython-hdwallet\u002Fpull\u002F124",{"type":2738,"url":6766},"https:\u002F\u002Fgithub.com\u002Fjedisct1\u002Flibsodium\u002Fcommit\u002Fad3004ec8731730e93fcfbbc824e67eadc1c1bae",{"type":2738,"url":6768},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat\u002Fcommit\u002F2cb48f26130919f92f30650bdcc30e6f4ebe45ac",{"type":2738,"url":6770},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat\u002Fcommit\u002F4714da6efdc782c06690bc72ce34fae7941c2d9f",{"type":2738,"url":6772},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fcommit\u002F96314884d88d1089ff5f336dba61d7abbcddbbf7",{"type":2738,"url":6774},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fcommit\u002Fecf41f55a3d8f1e10ce89c61c4b4d67f3f4467cf",{"type":2738,"url":6776},"https:\u002F\u002F00f.net\u002F2025\u002F12\u002F30\u002Flibsodium-vulnerability",{"type":2738,"url":6778},"https:\u002F\u002Fgithub.com\u002FFriendsOfPHP\u002Fsecurity-advisories\u002Fblob\u002Fmaster\u002Fparagonie\u002Fsodium_compat\u002F2025-12-30.yaml",{"type":2748,"url":6780},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat",{"type":2738,"url":6782},"https:\u002F\u002Fianix.com\u002Fpub\u002Fed25519-deployment.html",{"type":2738,"url":6784},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00004.html",{"type":2738,"url":6786},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=46435614",{"type":2748,"url":6788},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpynacl",{"type":2741,"url":6790},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrfv-m5wm-5w6w",[6792],"pypi:pynacl@1.5.0",{"id":256,"slug":6794,"dossier":46,"summary":6795,"aliases":6796,"sourceIds":6799,"published":6800,"modified":6801,"checkedAt":7,"severity":6802,"references":6805,"versionKeys":6814,"packageCount":32,"repositoryCount":2888},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[6797,6798],"CVE-2026-34519","PYSEC-2026-2101",[256,6798],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[6803,6804],{"type":2734,"score":2986},{"type":2731,"score":2988},[6806,6808,6810,6812,6813],{"type":2776,"url":6807},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2741,"url":6809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2776,"url":6811},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":257,"slug":6816,"dossier":46,"summary":6817,"aliases":6818,"sourceIds":6821,"published":6822,"modified":6823,"checkedAt":7,"severity":6824,"references":6827,"versionKeys":6835,"packageCount":32,"repositoryCount":622},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[6819,6820],"CVE-2026-39892","PYSEC-2026-36",[257,6820],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[6825,6826],{"type":2734,"score":3191},{"type":2731,"score":3598},[6828,6830,6832,6833],{"type":2741,"url":6829},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2741,"url":6831},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2748,"url":3704},{"type":2738,"url":6834},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[3712,3713],{"id":258,"slug":6837,"dossier":46,"summary":6838,"aliases":6839,"sourceIds":6842,"published":6843,"modified":6844,"checkedAt":7,"severity":6845,"references":6847,"versionKeys":6855,"packageCount":32,"repositoryCount":32},"ghsa-p433-9wv8-28xj-b2293c7c","ONNX: External Data Symlink Traversal",[6840,6841],"CVE-2026-34447","PYSEC-2026-104",[258,6841],"2026-04-01T18:16:30.810Z","2026-06-08T18:45:17.783158448Z",[6846],{"type":2731,"score":5234},[6848,6850,6852,6853],{"type":2813,"url":6849},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-p433-9wv8-28xj",{"type":2741,"url":6851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34447",{"type":2748,"url":3257},{"type":2738,"url":6854},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fonnx\u002FPYSEC-2026-104.yaml",[3267],{"id":259,"slug":6857,"dossier":46,"summary":6858,"aliases":6859,"sourceIds":6862,"published":6863,"modified":6864,"checkedAt":7,"severity":6865,"references":6867,"versionKeys":6883,"packageCount":32,"repositoryCount":622},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[6860,6861],"CVE-2026-54293","PYSEC-2026-2078",[259,6861],"2026-06-16T14:34:15Z","2026-07-16T21:46:12.649844268Z",[6866],{"type":2731,"score":3248},[6868,6870,6872,6874,6876,6878,6879,6881],{"type":2813,"url":6869},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":2741,"url":6871},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":2776,"url":6873},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":2738,"url":6875},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3105,"url":6877},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":2748,"url":3367},{"type":2738,"url":6880},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":2738,"url":6882},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3381,3382],{"id":260,"slug":6885,"dossier":46,"summary":6886,"aliases":6887,"sourceIds":6890,"published":6891,"modified":6892,"checkedAt":7,"severity":6893,"references":6896,"versionKeys":6905,"packageCount":32,"repositoryCount":2888},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[6888,6889],"CVE-2026-34515","PYSEC-2026-2097",[260,6889],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[6894,6895],{"type":2734,"score":5973},{"type":2731,"score":3248},[6897,6899,6901,6903,6904],{"type":2776,"url":6898},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2741,"url":6900},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2776,"url":6902},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":261,"slug":6907,"dossier":46,"summary":6908,"aliases":6909,"sourceIds":6912,"published":6375,"modified":6913,"checkedAt":7,"severity":6914,"references":6917,"versionKeys":6930,"packageCount":32,"repositoryCount":105},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[6910,6911],"CVE-2025-3777","PYSEC-2026-1986",[261,6911],"2026-07-07T17:56:47.225461188Z",[6915],{"type":2731,"score":6916},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6918,6920,6922,6923,6925,6927,6928],{"type":2741,"url":6919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2738,"url":6921},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2748,"url":2811},{"type":2738,"url":6924},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2738,"url":6926},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2748,"url":3149},{"type":2741,"url":6929},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2818,2819],{"id":262,"slug":6932,"dossier":46,"summary":6933,"aliases":6934,"sourceIds":6937,"published":6938,"modified":6939,"checkedAt":7,"severity":6940,"references":6942,"versionKeys":6951,"packageCount":32,"repositoryCount":2921},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[6935,6936],"CVE-2026-42561","PYSEC-2026-3039",[262,6936],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[6941],{"type":2731,"score":2871},[6943,6945,6947,6948,6949],{"type":2738,"url":6944},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2741,"url":6946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2748,"url":3830},{"type":2748,"url":3832},{"type":2741,"url":6950},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[3941,3942,3836],{"id":263,"slug":6953,"dossier":46,"summary":6954,"aliases":6955,"sourceIds":6958,"published":6959,"modified":6960,"checkedAt":7,"severity":6961,"references":6963,"versionKeys":6975,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[6956,6957],"CVE-2025-50181","PYSEC-2026-1999",[263,6957],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[6962],{"type":2731,"score":3394},[6964,6966,6968,6970,6971,6972,6973],{"type":2738,"url":6965},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2741,"url":6967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2776,"url":6969},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2748,"url":3046},{"type":2738,"url":3404},{"type":2748,"url":3048},{"type":2741,"url":6974},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[3052,3053,3054,3055],{"id":264,"slug":6977,"dossier":46,"summary":6978,"aliases":6979,"sourceIds":6980,"published":6981,"modified":6982,"checkedAt":7,"severity":6983,"references":6986,"versionKeys":6990,"packageCount":32,"repositoryCount":591},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[264],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[6984],{"type":2731,"score":6985},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6987,6989],{"type":2738,"url":6988},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":2748,"url":3307},[3315,3316,3317,3318,3319],{"id":265,"slug":6992,"dossier":91,"summary":6993,"aliases":6994,"sourceIds":6998,"published":6999,"modified":7000,"checkedAt":7,"severity":7001,"references":7004,"versionKeys":7016,"packageCount":32,"repositoryCount":104},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[6995,6996,6997],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[265,6997],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[7002,7003],{"type":2734,"score":5151},{"type":2731,"score":4176},[7005,7006,7008,7010,7012,7014,7015],{"type":2738,"url":5155},{"type":2776,"url":7007},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2741,"url":7009},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2776,"url":7011},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2776,"url":7013},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2748,"url":3962},{"type":2741,"url":3964},[5192,5193,5194,3966,3967,3968,3969,3970],{"id":266,"slug":7018,"dossier":46,"summary":7019,"aliases":7020,"sourceIds":7023,"published":6375,"modified":7024,"checkedAt":7,"severity":7025,"references":7027,"versionKeys":7038,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[7021,7022],"CVE-2025-3263","PYSEC-2026-1987",[266,7022],"2026-07-07T17:56:57.889099913Z",[7026],{"type":2731,"score":3548},[7028,7030,7031,7032,7033,7035,7036],{"type":2741,"url":7029},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2738,"url":6383},{"type":2738,"url":6385},{"type":2748,"url":2811},{"type":2738,"url":7034},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2748,"url":3149},{"type":2741,"url":7037},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2818],{"id":267,"slug":7040,"dossier":46,"summary":7041,"aliases":7042,"sourceIds":7045,"published":7046,"modified":7047,"checkedAt":7,"severity":7048,"references":7051,"versionKeys":7064,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[7043,7044],"CVE-2024-56326","PYSEC-2026-1475",[267,7044],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[7049,7050],{"type":2731,"score":5443},{"type":2734,"score":5254},[7052,7054,7056,7058,7059,7060,7061,7062],{"type":2738,"url":7053},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2741,"url":7055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2776,"url":7057},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2748,"url":5263},{"type":2738,"url":5860},{"type":2738,"url":5265},{"type":2748,"url":5269},{"type":2741,"url":7063},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[5273],{"id":268,"slug":7066,"dossier":46,"summary":7067,"aliases":7068,"sourceIds":7069,"published":7070,"modified":7071,"checkedAt":7,"severity":7072,"references":7075,"versionKeys":7079,"packageCount":32,"repositoryCount":32},"ghsa-q56x-g2fj-4rj6-34b89728","ONNX: TOCTOU arbitrary file read\u002Fwrite in save_external_dat",[],[268],"2026-04-01T23:40:58Z","2026-06-08T20:30:58.841136466Z",[7073],{"type":2731,"score":7074},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7076,7078],{"type":2738,"url":7077},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-q56x-g2fj-4rj6",{"type":2748,"url":3257},[3267],{"id":269,"slug":7081,"dossier":91,"summary":7082,"aliases":7083,"sourceIds":7086,"published":7087,"modified":7088,"checkedAt":7,"severity":7089,"references":7093,"versionKeys":7099,"packageCount":32,"repositoryCount":514},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[7084,7085],"CVE-2026-44431","PYSEC-2026-141",[269,7085],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[7090,7091],{"type":2731,"score":4834},{"type":2734,"score":7092},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7094,7096,7098],{"type":2741,"url":7095},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2741,"url":7097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2748,"url":3046},[3052,3053,3054,3055,3056,6647],{"id":270,"slug":7101,"dossier":46,"summary":7102,"aliases":7103,"sourceIds":7107,"published":7108,"modified":7109,"checkedAt":7,"severity":7110,"references":7114,"versionKeys":7132,"packageCount":32,"repositoryCount":2888},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[7104,7105,7106],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[270],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[7111,7112],{"type":2731,"score":5410},{"type":2734,"score":7113},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7115,7117,7119,7121,7123,7125,7126,7128,7130],{"type":2741,"url":7116},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2738,"url":7118},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2738,"url":7120},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2738,"url":7122},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2738,"url":7124},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2748,"url":3112},{"type":2738,"url":7127},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2738,"url":7129},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2738,"url":7131},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[3124,3125,3126,4740,4741,7133,7134,7135],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":271,"slug":7137,"dossier":46,"summary":7138,"aliases":7139,"sourceIds":7142,"published":7143,"modified":7144,"checkedAt":7,"severity":7145,"references":7148,"versionKeys":7161,"packageCount":32,"repositoryCount":591},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[7140,7141],"CVE-2026-31958","PYSEC-2026-140",[271,7141],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[7146,7147],{"type":2731,"score":2871},{"type":2734,"score":3821},[7149,7151,7153,7155,7157,7158,7159],{"type":2741,"url":7150},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":2741,"url":7152},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":2738,"url":7154},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":2738,"url":7156},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":2748,"url":3307},{"type":2738,"url":4375},{"type":2738,"url":7160},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[3315,3316,3317,3318],{"id":272,"slug":7163,"dossier":46,"summary":7164,"aliases":7165,"sourceIds":7168,"published":7169,"modified":7170,"checkedAt":7,"severity":7171,"references":7174,"versionKeys":7189,"packageCount":32,"repositoryCount":536},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[7166,7167],"CVE-2026-22701","PYSEC-2026-1374",[272,7167],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[7172],{"type":2731,"score":7173},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[7175,7177,7179,7181,7183,7185,7187],{"type":2738,"url":7176},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2741,"url":7178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2738,"url":7180},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2738,"url":7182},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2748,"url":7184},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2748,"url":7186},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2741,"url":7188},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[7190,7191,7192,7193],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":273,"slug":7195,"dossier":46,"summary":7196,"aliases":7197,"sourceIds":7200,"published":7201,"modified":7202,"checkedAt":7,"severity":7203,"references":7205,"versionKeys":7218,"packageCount":32,"repositoryCount":32},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[7198,7199],"CVE-2026-33123","PYSEC-2026-3023",[273,7199],"2026-03-18T16:17:31Z","2026-07-13T16:43:25.259140299Z",[7204],{"type":2734,"score":2735},[7206,7208,7210,7212,7213,7215,7216],{"type":2738,"url":7207},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":2741,"url":7209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":2738,"url":7211},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":2748,"url":2749},{"type":2738,"url":7214},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":2748,"url":2753},{"type":2741,"url":7217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[2757],{"id":274,"slug":7220,"dossier":46,"summary":7221,"aliases":7222,"sourceIds":7225,"published":7226,"modified":7227,"checkedAt":7,"severity":7228,"references":7231,"versionKeys":7245,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[7223,7224],"CVE-2025-2099","PYSEC-2025-40",[274,7224],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[7229,7230],{"type":2731,"score":3548},{"type":2731,"score":2871},[7232,7234,7236,7238,7239,7241,7243],{"type":2741,"url":7233},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2738,"url":7235},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2776,"url":7237},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2748,"url":2811},{"type":2738,"url":7240},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2738,"url":7242},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2741,"url":7244},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2818],{"id":275,"slug":7247,"dossier":46,"summary":7248,"aliases":7249,"sourceIds":7252,"published":7253,"modified":7254,"checkedAt":7,"severity":7255,"references":7259,"versionKeys":7282,"packageCount":32,"repositoryCount":34},"ghsa-qrc4-49gv-mv9m-c7358be2","LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit",[7250,7251],"CVE-2026-47101","PYSEC-2026-2598",[275,7251],"2026-05-21T21:30:36Z","2026-07-13T16:42:56.741599701Z",[7256,7257],{"type":2731,"score":3899},{"type":2734,"score":7258},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7260,7262,7264,7266,7268,7270,7271,7273,7275,7277,7279,7280],{"type":2741,"url":7261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47101",{"type":2738,"url":7263},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F2220f3076ac89bd2a2e3439acf57dcfbec2434c9",{"type":2738,"url":7265},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F5190bd07eb23a037745d86328096f54378f1614a",{"type":2738,"url":7267},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fd910a95661fce3cdd36f3b06c03ecf9c46c6457c",{"type":2738,"url":7269},"https:\u002F\u002Fgist.github.com\u002F13ph03nix\u002F9ec616e1fdc77b3673509c60206e827f",{"type":2748,"url":3611},{"type":2738,"url":7272},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.14-stable",{"type":2738,"url":7274},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8e75edfb-ff05-4e63-bfca-2d93d03fb3b9",{"type":2738,"url":7276},"https:\u002F\u002Fwww.obsidiansecurity.com\u002Fblog\u002Flitellm-privilege-escalation-rce",{"type":2738,"url":7278},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-api-key-generation",{"type":2748,"url":3619},{"type":2741,"url":7281},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qrc4-49gv-mv9m",[3623,3624,3625,3626],{"id":276,"slug":7284,"dossier":46,"summary":6152,"aliases":7285,"sourceIds":7288,"published":7289,"modified":7290,"checkedAt":7,"severity":7291,"references":7295,"versionKeys":7309,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[7286,7287],"CVE-2024-11392","PYSEC-2024-227",[276,7287],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[7292,7294],{"type":2731,"score":7293},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2731,"score":5351},[7296,7298,7299,7300,7301,7303,7305,7307],{"type":2741,"url":7297},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2738,"url":6167},{"type":2738,"url":6169},{"type":2748,"url":2811},{"type":2738,"url":7302},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2738,"url":7304},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2741,"url":7306},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2741,"url":7308},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2818],{"id":277,"slug":7311,"dossier":46,"summary":7312,"aliases":7313,"sourceIds":7316,"published":7317,"modified":7318,"checkedAt":7,"severity":7319,"references":7324,"versionKeys":7362,"packageCount":32,"repositoryCount":65},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[7314,7315],"CVE-2026-26007","PYSEC-2026-2141",[277,7315],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[7320,7322],{"type":2734,"score":7321},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2731,"score":7323},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[7325,7327,7329,7331,7332,7334,7336,7338,7339,7341,7343,7345,7347,7349,7351,7353,7355,7357,7359,7361],{"type":2738,"url":7326},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2741,"url":7328},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2738,"url":7330},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2748,"url":3704},{"type":2738,"url":7333},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2738,"url":7335},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2738,"url":7337},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2741,"url":3373},{"type":2741,"url":7340},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2741,"url":7342},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2741,"url":7344},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2741,"url":7346},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2741,"url":7348},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2741,"url":7350},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2741,"url":7352},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2741,"url":7354},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2741,"url":7356},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2741,"url":7358},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2741,"url":7360},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2741,"url":5190},[3708,3709,3710,3711,3712,3713],{"id":278,"slug":7364,"dossier":91,"summary":7365,"aliases":7366,"sourceIds":7370,"published":7371,"modified":7372,"checkedAt":7,"severity":7373,"references":7376,"versionKeys":7391,"packageCount":32,"repositoryCount":104},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[7367,7368,7369],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[278,7369],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[7374,7375],{"type":2731,"score":3100},{"type":2734,"score":2735},[7377,7379,7381,7383,7385,7386,7387,7389],{"type":2738,"url":7378},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2741,"url":7380},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2738,"url":7382},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2738,"url":7384},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2748,"url":3962},{"type":2738,"url":3964},{"type":2748,"url":7388},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2741,"url":7390},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":279,"slug":7393,"dossier":46,"summary":7394,"aliases":7395,"sourceIds":7398,"published":7399,"modified":7400,"checkedAt":7,"severity":7401,"references":7403,"versionKeys":7418,"packageCount":32,"repositoryCount":105},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[7396,7397],"CVE-2025-6051","PYSEC-2026-1988",[279,7397],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[7402],{"type":2731,"score":3548},[7404,7406,7408,7410,7412,7413,7415,7416],{"type":2741,"url":7405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2738,"url":7407},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2738,"url":7409},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2738,"url":7411},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2748,"url":2811},{"type":2738,"url":7414},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2748,"url":3149},{"type":2741,"url":7417},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2818,2819],{"id":280,"slug":7420,"dossier":46,"summary":7421,"aliases":7422,"sourceIds":7423,"published":7424,"modified":7425,"checkedAt":7,"severity":7426,"references":7428,"versionKeys":7432,"packageCount":32,"repositoryCount":622},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[],[280],"2026-03-18T20:17:43Z","2026-03-25T23:29:13.324989Z",[7427],{"type":2734,"score":2735},[7429,7431],{"type":2738,"url":7430},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":2748,"url":3367},[3381,3382],{"id":281,"slug":7434,"dossier":46,"summary":7435,"aliases":7436,"sourceIds":7439,"published":7440,"modified":7441,"checkedAt":7,"severity":7442,"references":7445,"versionKeys":7458,"packageCount":32,"repositoryCount":536},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[7437,7438],"CVE-2026-25087","PYSEC-2026-113",[281,7438],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[7443],{"type":2731,"score":7444},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[7446,7448,7450,7452,7454,7456],{"type":2741,"url":7447},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2776,"url":7449},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2748,"url":7451},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2738,"url":7453},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2741,"url":7455},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2741,"url":7457},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[7459,7460,7461,7462],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":282,"slug":7464,"dossier":46,"summary":7465,"aliases":7466,"sourceIds":7470,"published":5406,"modified":7471,"checkedAt":7,"severity":7472,"references":7475,"versionKeys":7493,"packageCount":32,"repositoryCount":536},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[7467,7468,7469],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[282],"2026-07-17T17:15:51.452848951Z",[7473,7474],{"type":2731,"score":5410},{"type":2734,"score":7113},[7476,7478,7480,7482,7484,7486,7487,7489,7491],{"type":2741,"url":7477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2738,"url":7479},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2738,"url":7481},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2738,"url":7483},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2738,"url":7485},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2748,"url":3112},{"type":2738,"url":7488},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2738,"url":7490},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2738,"url":7492},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[7494,3124,3125,3126,4740,4741,7133,7134,7135],"pypi:torch@2.10.0",{"id":283,"slug":7496,"dossier":46,"summary":7497,"aliases":7498,"sourceIds":7501,"published":7502,"modified":7503,"checkedAt":7,"severity":7504,"references":7508,"versionKeys":7520,"packageCount":32,"repositoryCount":2921},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[7499,7500],"CVE-2026-41205","PYSEC-2026-88",[283,7500],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[7505,7506],{"type":2731,"score":3248},{"type":2734,"score":7507},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7509,7511,7513,7515,7517,7518],{"type":2741,"url":7510},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2741,"url":7512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2738,"url":7514},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2738,"url":7516},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2748,"url":2911},{"type":2738,"url":7519},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2919,2920],{"id":284,"slug":7522,"dossier":46,"summary":7523,"aliases":7524,"sourceIds":7527,"published":7528,"modified":7529,"checkedAt":7,"severity":7530,"references":7532,"versionKeys":7541,"packageCount":32,"repositoryCount":2921},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[7525,7526],"CVE-2026-53540","PYSEC-2026-3040",[284,7526],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[7531],{"type":2731,"score":5579},[7533,7535,7536,7537,7539],{"type":2738,"url":7534},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2748,"url":3830},{"type":2748,"url":3832},{"type":2741,"url":7538},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2741,"url":7540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[3941,3942,3836],{"id":285,"slug":7543,"dossier":46,"summary":7544,"aliases":7545,"sourceIds":7548,"published":7549,"modified":7550,"checkedAt":7,"severity":7551,"references":7553,"versionKeys":7564,"packageCount":32,"repositoryCount":2921},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[7546,7547],"CVE-2026-53537","PYSEC-2026-3041",[285,7547],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[7552],{"type":2731,"score":4239},[7554,7556,7558,7559,7561,7563],{"type":2738,"url":7555},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2741,"url":7557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2748,"url":3830},{"type":2741,"url":7560},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2738,"url":7562},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2748,"url":3832},[3941,3942,3836],{"id":286,"slug":7566,"dossier":46,"summary":7567,"aliases":7568,"sourceIds":7571,"published":7572,"modified":7573,"checkedAt":7,"severity":7574,"references":7576,"versionKeys":7589,"packageCount":32,"repositoryCount":2921},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[7569,7570],"CVE-2026-41066","PYSEC-2026-87",[286,7570],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[7575],{"type":2731,"score":3248},[7577,7579,7581,7583,7585,7587],{"type":2741,"url":7578},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":2741,"url":7580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3105,"url":7582},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":2748,"url":7584},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":2738,"url":7586},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":2738,"url":7588},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[7590,7591,7592],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":287,"slug":7594,"dossier":46,"summary":7595,"aliases":7596,"sourceIds":7600,"published":5406,"modified":7601,"checkedAt":7,"severity":7602,"references":7605,"versionKeys":7620,"packageCount":32,"repositoryCount":391},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[7597,7598,7599],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[287],"2026-06-10T17:41:15.774477397Z",[7603,7604],{"type":2731,"score":5410},{"type":2734,"score":5412},[7606,7608,7609,7610,7611,7613,7614,7616,7618],{"type":2741,"url":7607},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2738,"url":5417},{"type":2738,"url":5419},{"type":2738,"url":5421},{"type":2738,"url":7612},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2748,"url":3112},{"type":2738,"url":7615},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2738,"url":7617},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2738,"url":7619},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[3124,3125,3126,4740,4741,7133],{"id":288,"slug":7622,"dossier":46,"summary":7623,"aliases":7624,"sourceIds":7627,"published":7628,"modified":7629,"checkedAt":7,"severity":7630,"references":7632,"versionKeys":7645,"packageCount":32,"repositoryCount":622},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[7625,7626],"CVE-2025-43859","PYSEC-2026-348",[288,7626],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[7631],{"type":2731,"score":6076},[7633,7635,7637,7639,7641,7643],{"type":2738,"url":7634},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2741,"url":7636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2738,"url":7638},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2748,"url":7640},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2748,"url":7642},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2741,"url":7644},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[7646],"pypi:h11@0.14.0",{"id":289,"slug":7648,"dossier":46,"summary":7649,"aliases":7650,"sourceIds":7653,"published":7654,"modified":7655,"checkedAt":7,"severity":7656,"references":7658,"versionKeys":7672,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[7651,7652],"CVE-2025-62707","PYSEC-2026-1833",[289,7652],"2025-10-22T19:40:47Z","2026-07-07T17:56:08.279731969Z",[7657],{"type":2734,"score":3447},[7659,7661,7663,7665,7667,7668,7669,7670],{"type":2738,"url":7660},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":2741,"url":7662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":2738,"url":7664},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":2738,"url":7666},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":2748,"url":2749},{"type":2738,"url":6259},{"type":2748,"url":2753},{"type":2741,"url":7671},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[2757],{"id":290,"slug":7674,"dossier":46,"summary":7675,"aliases":7676,"sourceIds":7679,"published":7680,"modified":7681,"checkedAt":7,"severity":7682,"references":7684,"versionKeys":7695,"packageCount":32,"repositoryCount":622},"ghsa-vvw2-h478-xwr3-e8568ce6","DSPy does not properly restrict file reads",[7677,7678],"CVE-2025-12695","PYSEC-2026-1318",[290,7678],"2025-11-04T15:31:35Z","2026-07-07T17:57:24.503135806Z",[7683],{"type":2731,"score":6985},[7685,7687,7689,7691,7693],{"type":2741,"url":7686},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12695",{"type":2748,"url":7688},"https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdspy",{"type":2738,"url":7690},"https:\u002F\u002Fresearch.jfrog.com\u002Fvulnerabilities\u002Fdspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652",{"type":2748,"url":7692},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdspy",{"type":2741,"url":7694},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvw2-h478-xwr3",[7696,7697,7698],"pypi:dspy@2.5.43","pypi:dspy@2.6.23","pypi:dspy@2.6.27",{"id":291,"slug":7700,"dossier":46,"summary":7701,"aliases":7702,"sourceIds":7705,"published":7706,"modified":7707,"checkedAt":7,"severity":7708,"references":7712,"versionKeys":7721,"packageCount":32,"repositoryCount":2888},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[7703,7704],"CVE-2026-22815","PYSEC-2026-2094",[291,7704],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[7709,7710],{"type":2734,"score":3191},{"type":2734,"score":7711},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7713,7715,7717,7719,7720],{"type":2776,"url":7714},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2741,"url":7716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2776,"url":7718},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2748,"url":2876},{"type":2741,"url":2998},[2880,2881,2882,2883,2884,2885,2886,2887],{"id":292,"slug":7723,"dossier":46,"summary":7724,"aliases":7725,"sourceIds":7728,"published":7729,"modified":7730,"checkedAt":7,"severity":7731,"references":7733,"versionKeys":7741,"packageCount":32,"repositoryCount":105},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[7726,7727],"CVE-2026-48525","PYSEC-2026-178",[292,7727],"2026-05-28T16:16:29.533Z","2026-06-16T15:44:21.139278330Z",[7732],{"type":2731,"score":2836},[7734,7736,7738,7739],{"type":2813,"url":7735},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":2741,"url":7737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":2748,"url":4313},{"type":2738,"url":7740},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[4319,4320],{"id":293,"slug":7743,"dossier":46,"summary":7744,"aliases":7745,"sourceIds":7748,"published":7749,"modified":7750,"checkedAt":7,"severity":7751,"references":7754,"versionKeys":7771,"packageCount":32,"repositoryCount":536},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[7746,7747],"CVE-2025-68146","PYSEC-2026-1375",[293,7747],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[7752],{"type":2731,"score":7753},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7755,7757,7759,7760,7762,7764,7766,7767,7769],{"type":2738,"url":7756},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2738,"url":7758},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2748,"url":7184},{"type":2738,"url":7761},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2738,"url":7763},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2738,"url":7765},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2748,"url":7186},{"type":2741,"url":7768},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2741,"url":7770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[7190,7191,7192,7193],{"id":294,"slug":7773,"dossier":46,"summary":7774,"aliases":7775,"sourceIds":7778,"published":7779,"modified":7780,"checkedAt":7,"severity":7781,"references":7784,"versionKeys":7795,"packageCount":32,"repositoryCount":591},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[7776,7777],"CVE-2025-69872","PYSEC-2026-2447",[294,7777],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[7782],{"type":2734,"score":7783},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7785,7787,7789,7791,7793],{"type":2741,"url":7786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2738,"url":7788},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2748,"url":7790},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2748,"url":7792},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2741,"url":7794},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[7796],"pypi:diskcache@5.6.3",{"id":295,"slug":7798,"dossier":46,"summary":7799,"aliases":7800,"sourceIds":7803,"published":7804,"modified":7805,"checkedAt":7,"severity":7806,"references":7809,"versionKeys":7825,"packageCount":32,"repositoryCount":32},"ghsa-wf5f-4jwr-ppcp-6aafc086","Arbitrary Code Execution in pdfminer.six via Crafted PDF Input",[7801,7802],"CVE-2025-64512","PYSEC-2026-1762",[295,7802],"2025-11-07T20:52:24Z","2026-07-07T17:56:32.052583560Z",[7807],{"type":2731,"score":7808},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7810,7812,7814,7815,7816,7818,7820,7822,7823],{"type":2738,"url":7811},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",{"type":2741,"url":7813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64512",{"type":2738,"url":5450},{"type":2748,"url":5452},{"type":2738,"url":7817},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Freleases\u002Ftag\u002F20251107",{"type":2738,"url":7819},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F11\u002Fmsg00017.html",{"type":2738,"url":7821},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00005.html",{"type":2748,"url":5454},{"type":2741,"url":7824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",[5458],{"id":296,"slug":7827,"dossier":46,"summary":7828,"aliases":7829,"sourceIds":7832,"published":7833,"modified":7834,"checkedAt":7,"severity":7835,"references":7837,"versionKeys":7853,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[7830,7831],"CVE-2026-32874","PYSEC-2026-2291",[296,7831],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[7836],{"type":2731,"score":2871},[7838,7840,7842,7844,7845,7847,7849,7851],{"type":2741,"url":7839},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":2741,"url":7841},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":2776,"url":7843},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":2748,"url":3230},{"type":2741,"url":7846},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":2738,"url":7848},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":2738,"url":7850},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":3105,"url":7852},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[3234],{"id":297,"slug":7855,"dossier":46,"summary":7856,"aliases":7857,"sourceIds":7860,"published":7861,"modified":7862,"checkedAt":7,"severity":7863,"references":7865,"versionKeys":7879,"packageCount":32,"repositoryCount":32},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[7858,7859],"CVE-2026-27025","PYSEC-2026-3024",[297,7859],"2026-02-18T22:41:13Z","2026-07-13T16:43:04.734501329Z",[7864],{"type":2734,"score":3676},[7866,7868,7870,7872,7874,7875,7876,7877],{"type":2738,"url":7867},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":2741,"url":7869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":2738,"url":7871},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":2738,"url":7873},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":2748,"url":2749},{"type":2738,"url":4889},{"type":2748,"url":2753},{"type":2741,"url":7878},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[2757],{"id":298,"slug":7881,"dossier":91,"summary":7882,"aliases":7883,"sourceIds":7887,"published":7888,"modified":7889,"checkedAt":7,"severity":7890,"references":7893,"versionKeys":7931,"packageCount":32,"repositoryCount":104},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[7884,7885,7886],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[298,7886],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[7891,7892],{"type":2731,"score":2871},{"type":2734,"score":3821},[7894,7896,7898,7900,7902,7903,7905,7907,7909,7911,7913,7915,7916,7918,7920,7922,7923,7925,7927,7929],{"type":2738,"url":7895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2741,"url":7897},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2738,"url":7899},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2738,"url":7901},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2748,"url":3962},{"type":2738,"url":7904},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2738,"url":7906},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2738,"url":7908},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2741,"url":7910},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2741,"url":7912},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2741,"url":7914},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2741,"url":5177},{"type":2741,"url":7917},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2741,"url":7919},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2741,"url":7921},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2741,"url":3375},{"type":2741,"url":7924},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2741,"url":7926},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2741,"url":7928},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2741,"url":7930},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":299,"slug":7933,"dossier":46,"summary":7934,"aliases":7935,"sourceIds":7938,"published":7939,"modified":7940,"checkedAt":7,"severity":7941,"references":7943,"versionKeys":7956,"packageCount":32,"repositoryCount":32},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[7936,7937],"CVE-2026-48735","PYSEC-2026-3025",[299,7937],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[7942],{"type":2734,"score":3676},[7944,7946,7948,7950,7951,7953,7954],{"type":2738,"url":7945},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":2741,"url":7947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":2738,"url":7949},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":2748,"url":2749},{"type":2738,"url":7952},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":2748,"url":2753},{"type":2741,"url":7955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[2757],{"id":300,"slug":7958,"dossier":91,"summary":7959,"aliases":7960,"sourceIds":7964,"published":7965,"modified":7966,"checkedAt":7,"severity":7967,"references":7970,"versionKeys":7979,"packageCount":32,"repositoryCount":104},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[7961,7962,7963],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[300,7963],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[7968,7969],{"type":2731,"score":3100},{"type":2734,"score":2735},[7971,7973,7975,7977,7978],{"type":2741,"url":7972},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2741,"url":7974},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2738,"url":7976},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2748,"url":3962},{"type":2741,"url":3964},[5192,5193,5194,3966,3967,3968,3969,3970],{"id":301,"slug":7981,"dossier":46,"summary":7982,"aliases":7983,"sourceIds":7986,"published":7987,"modified":7988,"checkedAt":7,"severity":7989,"references":7992,"versionKeys":8005,"packageCount":32,"repositoryCount":2921},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[7984,7985],"CVE-2026-24486","PYSEC-2026-1852",[301,7985],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[7990],{"type":2731,"score":7991},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[7993,7995,7997,7999,8000,8002,8003],{"type":2738,"url":7994},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2741,"url":7996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2738,"url":7998},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2748,"url":3830},{"type":2738,"url":8001},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2748,"url":3832},{"type":2741,"url":8004},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[3941,3942,3836],{"id":302,"slug":8007,"dossier":46,"summary":8008,"aliases":8009,"sourceIds":8012,"published":8013,"modified":8014,"checkedAt":7,"severity":8015,"references":8018,"versionKeys":8038,"packageCount":32,"repositoryCount":34},"ghsa-wpfp-gwwc-vwq6-53d5ec36","LiteLLM allows a user to modify their own user_role via the \u002Fuser\u002Fupdate endpoint",[8010,8011],"CVE-2026-47102","PYSEC-2026-2600",[302,8011],"2026-05-21T21:30:37Z","2026-07-13T16:43:25.135559552Z",[8016,8017],{"type":2731,"score":3899},{"type":2734,"score":7258},[8019,8021,8023,8025,8027,8028,8029,8031,8032,8033,8035,8036],{"type":2741,"url":8020},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47102",{"type":2738,"url":8022},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25541",{"type":2738,"url":8024},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F128d32d2494b759c5d15da3452452af4c6a34c01",{"type":2738,"url":8026},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe6f18ce75b111c9b93dc15c72894cbdeb53177ce",{"type":2738,"url":7269},{"type":2748,"url":3611},{"type":2738,"url":8030},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.10-stable",{"type":2738,"url":7274},{"type":2738,"url":7276},{"type":2738,"url":8034},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-user-update",{"type":2748,"url":3619},{"type":2741,"url":8037},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wpfp-gwwc-vwq6",[3623,3624,3625,3626],{"id":303,"slug":8040,"dossier":46,"summary":8041,"aliases":8042,"sourceIds":8045,"published":8046,"modified":8047,"checkedAt":7,"severity":8048,"references":8050,"versionKeys":8072,"packageCount":32,"repositoryCount":391},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[8043,8044],"CVE-2026-48818","PYSEC-2026-2281",[303,8044],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[8049],{"type":2731,"score":3248},[8051,8053,8054,8056,8058,8060,8062,8064,8066,8068,8070],{"type":2741,"url":8052},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2748,"url":4456},{"type":2738,"url":8055},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2738,"url":8057},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2741,"url":8059},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2741,"url":8061},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2741,"url":8063},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2741,"url":8065},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3105,"url":8067},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2776,"url":8069},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2776,"url":8071},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2855,2856,2857,4463,4464,4605,4606],{"id":304,"slug":8074,"dossier":46,"summary":6152,"aliases":8075,"sourceIds":8078,"published":6157,"modified":8079,"checkedAt":7,"severity":8080,"references":8083,"versionKeys":8097,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[8076,8077],"CVE-2024-11393","PYSEC-2024-228",[304,8077],"2026-06-10T17:00:13.252500033Z",[8081,8082],{"type":2731,"score":6161},{"type":2731,"score":5351},[8084,8086,8087,8088,8089,8091,8093,8095],{"type":2741,"url":8085},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2738,"url":6167},{"type":2738,"url":6169},{"type":2748,"url":2811},{"type":2738,"url":8090},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2738,"url":8092},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2741,"url":8094},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2741,"url":8096},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2818],{"id":305,"slug":8099,"dossier":46,"summary":8100,"aliases":8101,"sourceIds":8104,"published":8105,"modified":8106,"checkedAt":7,"severity":8107,"references":8110,"versionKeys":8122,"packageCount":32,"repositoryCount":32},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[8102,8103],"CVE-2026-41314","PYSEC-2026-3026",[305,8103],"2026-04-16T21:30:25Z","2026-07-13T16:43:30.190503912Z",[8108,8109],{"type":2731,"score":3485},{"type":2734,"score":3487},[8111,8113,8115,8116,8117,8118,8119,8120],{"type":2738,"url":8112},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":2741,"url":8114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":2738,"url":4522},{"type":2738,"url":4524},{"type":2748,"url":2749},{"type":2738,"url":3499},{"type":2748,"url":2753},{"type":2741,"url":8121},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[2757],{"id":306,"slug":8124,"dossier":46,"summary":8125,"aliases":8126,"sourceIds":8130,"published":8131,"modified":8132,"checkedAt":7,"severity":8133,"references":8138,"versionKeys":8154,"packageCount":32,"repositoryCount":105},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[8127,8128,8129],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[306],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[8134,8136],{"type":2731,"score":8135},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2734,"score":8137},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[8139,8141,8143,8145,8147,8148,8150,8152],{"type":2741,"url":8140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2738,"url":8142},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2738,"url":8144},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2738,"url":8146},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2748,"url":3112},{"type":2738,"url":8149},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2738,"url":8151},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2738,"url":8153},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[3124,3125],{"id":307,"slug":8156,"dossier":46,"summary":8157,"aliases":8158,"sourceIds":8161,"published":8162,"modified":8163,"checkedAt":7,"severity":8164,"references":8166,"versionKeys":8173,"packageCount":32,"repositoryCount":391},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[8159,8160],"CVE-2026-48817","PYSEC-2026-2280",[307,8160],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[8165],{"type":2731,"score":2988},[8167,8169,8171,8172],{"type":2741,"url":8168},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2741,"url":8170},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2748,"url":4456},{"type":2741,"url":8065},[2855,2856,2857,4463,4464,4605,4606],{"id":308,"slug":8175,"dossier":46,"summary":8176,"aliases":8177,"sourceIds":8180,"published":8181,"modified":8182,"checkedAt":7,"severity":8183,"references":8185,"versionKeys":8200,"packageCount":32,"repositoryCount":32},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[8178,8179],"CVE-2026-27888","PYSEC-2026-3027",[308,8179],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[8184],{"type":2734,"score":3447},[8186,8188,8190,8192,8194,8195,8197,8198],{"type":2738,"url":8187},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":2741,"url":8189},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":2738,"url":8191},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":2738,"url":8193},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":2748,"url":2749},{"type":2738,"url":8196},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":2748,"url":2753},{"type":2741,"url":8199},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[2757],{"id":309,"slug":8202,"dossier":46,"summary":8203,"aliases":8204,"sourceIds":8207,"published":8208,"modified":8209,"checkedAt":7,"severity":8210,"references":8213,"versionKeys":8219,"packageCount":32,"repositoryCount":2888},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[8205,8206],"CVE-2026-54274","PYSEC-2026-2108",[309,8206],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[8211,8212],{"type":2734,"score":3447},{"type":2731,"score":2871},[8214,8216,8217],{"type":2741,"url":8215},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2748,"url":2876},{"type":2776,"url":8218},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2880,2881,2882,2883,2884,2885,2886,2887],{"id":310,"slug":8221,"dossier":46,"summary":8222,"aliases":8223,"sourceIds":8224,"published":8225,"modified":8226,"checkedAt":7,"severity":8227,"references":8229,"versionKeys":8236,"packageCount":32,"repositoryCount":622},"ghsa-xf7x-x43h-rpqh-c5648b04","json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS",[],[310],"2026-07-13T23:41:39Z","2026-07-13T23:45:11.773964507Z",[8228],{"type":2731,"score":2871},[8230,8232,8234],{"type":2738,"url":8231},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Fsecurity\u002Fadvisories\u002FGHSA-xf7x-x43h-rpqh",{"type":2748,"url":8233},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair",{"type":2738,"url":8235},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Freleases\u002Ftag\u002Fv0.60.1",[8237,8238,8239],"pypi:json-repair@0.35.0","pypi:json-repair@0.44.1","pypi:json-repair@0.47.6",{"id":311,"slug":8241,"dossier":46,"summary":8242,"aliases":8243,"sourceIds":8247,"published":8248,"modified":8249,"checkedAt":7,"severity":8250,"references":8253,"versionKeys":8267,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[8244,8245,8246],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[311,8246],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[8251],{"type":2731,"score":8252},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8254,8256,8258,8260,8262,8264,8265],{"type":2741,"url":8255},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2741,"url":8257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2738,"url":8259},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2776,"url":8261},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2738,"url":8263},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2748,"url":3962},{"type":2738,"url":8266},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3966],{"id":312,"slug":8269,"dossier":46,"summary":8270,"aliases":8271,"sourceIds":8274,"published":8275,"modified":8276,"checkedAt":7,"severity":8277,"references":8280,"versionKeys":8288,"packageCount":32,"repositoryCount":105},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[8272,8273],"CVE-2026-48526","PYSEC-2026-179",[312,8273],"2026-05-28T16:16:29.657Z","2026-06-16T15:44:21.766942950Z",[8278],{"type":2731,"score":8279},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[8281,8283,8285,8286],{"type":2813,"url":8282},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":2741,"url":8284},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":2748,"url":4313},{"type":2738,"url":8287},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[4319,4320],{"id":313,"slug":8290,"dossier":46,"summary":379,"aliases":8291,"sourceIds":8295,"published":8296,"modified":8297,"checkedAt":7,"severity":8298,"references":8300,"versionKeys":8310,"packageCount":32,"repositoryCount":32},"pysec-2025-148-96224d85",[8292,8293,8294],"CVE-2024-5187","CVE-2025-51480","GHSA-6rq9-53c3-f7vj",[313],"2025-07-22T16:15:30.660Z","2026-05-21T15:00:22.504009793Z",[8299],{"type":2731,"score":5351},[8301,8303,8305,8307,8308],{"type":2741,"url":8302},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rq9-53c3-f7vj",{"type":2776,"url":8304},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F6959",{"type":2776,"url":8306},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F7040",{"type":2748,"url":3257},{"type":2813,"url":8309},"https:\u002F\u002Fwww.gecko.security\u002Fblog\u002Fcve-2025-51480",[3267],{"id":314,"slug":8312,"dossier":46,"summary":379,"aliases":8313,"sourceIds":8315,"published":8316,"modified":8317,"checkedAt":7,"severity":8318,"references":8320,"versionKeys":8326,"packageCount":32,"repositoryCount":105},"pysec-2025-183-08217171",[8314],"CVE-2025-45768",[314],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[8319],{"type":2731,"score":7444},[8321,8323,8325],{"type":2738,"url":8322},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3105,"url":8324},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":2748,"url":4313},[4319,4320],{"id":315,"slug":8328,"dossier":46,"summary":379,"aliases":8329,"sourceIds":8332,"published":8333,"modified":8334,"checkedAt":7,"severity":8335,"references":8337,"versionKeys":8346,"packageCount":32,"repositoryCount":105},"pysec-2025-198-62b25ed4",[8330,8331],"BIT-pytorch-2025-46148","CVE-2025-46148",[315],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[8336],{"type":2731,"score":4834},[8338,8340,8342,8344],{"type":2741,"url":8339},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2741,"url":8341},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":3105,"url":8343},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2776,"url":8345},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[3124,3125],{"id":316,"slug":8348,"dossier":46,"summary":379,"aliases":8349,"sourceIds":8352,"published":8353,"modified":8354,"checkedAt":7,"severity":8355,"references":8357,"versionKeys":8363,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[8350,8351],"BIT-pytorch-2025-46149","CVE-2025-46149",[316],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[8356],{"type":2731,"score":4834},[8358,8359,8361],{"type":2741,"url":8339},{"type":3105,"url":8360},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2776,"url":8362},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[3125],{"id":317,"slug":8365,"dossier":46,"summary":379,"aliases":8366,"sourceIds":8369,"published":8370,"modified":8371,"checkedAt":7,"severity":8372,"references":8374,"versionKeys":8382,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[8367,8368],"BIT-pytorch-2025-46150","CVE-2025-46150",[317],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[8373],{"type":2731,"score":4834},[8375,8376,8378,8380],{"type":2741,"url":8339},{"type":3105,"url":8377},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":3105,"url":8379},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2776,"url":8381},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[3125],{"id":318,"slug":8384,"dossier":46,"summary":379,"aliases":8385,"sourceIds":8388,"published":8389,"modified":8390,"checkedAt":7,"severity":8391,"references":8393,"versionKeys":8399,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[8386,8387],"BIT-pytorch-2025-46152","CVE-2025-46152",[318],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[8392],{"type":2731,"score":2836},[8394,8395,8397],{"type":2741,"url":8339},{"type":3105,"url":8396},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2776,"url":8398},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[3125],{"id":319,"slug":8401,"dossier":46,"summary":379,"aliases":8402,"sourceIds":8405,"published":8406,"modified":8407,"checkedAt":7,"severity":8408,"references":8410,"versionKeys":8420,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[8403,8404],"BIT-pytorch-2025-46153","CVE-2025-46153",[319],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[8409],{"type":2731,"score":4834},[8411,8413,8414,8416,8418],{"type":2738,"url":8412},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2741,"url":8339},{"type":2741,"url":8415},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":3105,"url":8417},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2776,"url":8419},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[3125],{"id":320,"slug":8422,"dossier":46,"summary":379,"aliases":8423,"sourceIds":8426,"published":8427,"modified":8428,"checkedAt":7,"severity":8429,"references":8431,"versionKeys":8436,"packageCount":32,"repositoryCount":391},"pysec-2025-203-2febb201",[8424,8425],"BIT-pytorch-2025-55551","CVE-2025-55551",[320],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[8430],{"type":2731,"score":2871},[8432,8434],{"type":2741,"url":8433},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":3105,"url":8435},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[3124,3125,3126,4740,4741,7133],{"id":321,"slug":8438,"dossier":46,"summary":379,"aliases":8439,"sourceIds":8442,"published":8443,"modified":8444,"checkedAt":7,"severity":8445,"references":8447,"versionKeys":8451,"packageCount":32,"repositoryCount":391},"pysec-2025-204-cdae47da",[8440,8441],"BIT-pytorch-2025-55552","CVE-2025-55552",[321],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[8446],{"type":2731,"score":2871},[8448,8449],{"type":2741,"url":8433},{"type":3105,"url":8450},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[3124,3125,3126,4740,4741,7133],{"id":322,"slug":8453,"dossier":46,"summary":379,"aliases":8454,"sourceIds":8457,"published":8458,"modified":8459,"checkedAt":7,"severity":8460,"references":8462,"versionKeys":8468,"packageCount":32,"repositoryCount":622},"pysec-2025-205-fd5e58fd",[8455,8456],"BIT-pytorch-2025-55553","CVE-2025-55553",[322],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[8461],{"type":2731,"score":2871},[8463,8464,8466],{"type":2741,"url":8433},{"type":3105,"url":8465},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2776,"url":8467},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[3124,3125,3126],{"id":323,"slug":8470,"dossier":46,"summary":379,"aliases":8471,"sourceIds":8474,"published":8475,"modified":8476,"checkedAt":7,"severity":8477,"references":8479,"versionKeys":8483,"packageCount":32,"repositoryCount":391},"pysec-2025-206-58322476",[8472,8473],"BIT-pytorch-2025-55554","CVE-2025-55554",[323],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[8478],{"type":2731,"score":2836},[8480,8481],{"type":2741,"url":8433},{"type":3105,"url":8482},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[3124,3125,3126,4740,4741,7133],{"id":324,"slug":8485,"dossier":46,"summary":379,"aliases":8486,"sourceIds":8489,"published":8490,"modified":8491,"checkedAt":7,"severity":8492,"references":8494,"versionKeys":8500,"packageCount":32,"repositoryCount":622},"pysec-2025-207-2abef3fc",[8487,8488],"BIT-pytorch-2025-55557","CVE-2025-55557",[324],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[8493],{"type":2731,"score":2871},[8495,8496,8498],{"type":2741,"url":8433},{"type":3105,"url":8497},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2776,"url":8499},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[3124,3125,3126],{"id":325,"slug":8502,"dossier":46,"summary":379,"aliases":8503,"sourceIds":8506,"published":8507,"modified":8508,"checkedAt":7,"severity":8509,"references":8511,"versionKeys":8517,"packageCount":32,"repositoryCount":622},"pysec-2025-208-6e93fe9d",[8504,8505],"BIT-pytorch-2025-55558","CVE-2025-55558",[325],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[8510],{"type":2731,"score":2871},[8512,8513,8515],{"type":2741,"url":8433},{"type":3105,"url":8514},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2776,"url":8516},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[3124,3125,3126],{"id":326,"slug":8519,"dossier":46,"summary":379,"aliases":8520,"sourceIds":8523,"published":8524,"modified":8525,"checkedAt":7,"severity":8526,"references":8528,"versionKeys":8534,"packageCount":32,"repositoryCount":622},"pysec-2025-209-e6f352b0",[8521,8522],"BIT-pytorch-2025-55560","CVE-2025-55560",[326],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[8527],{"type":2731,"score":2871},[8529,8530,8532],{"type":2741,"url":8433},{"type":3105,"url":8531},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2776,"url":8533},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[3124,3125,3126],{"id":327,"slug":8536,"dossier":46,"summary":379,"aliases":8537,"sourceIds":8539,"published":8540,"modified":8541,"checkedAt":7,"severity":8542,"references":8544,"versionKeys":8547,"packageCount":32,"repositoryCount":622},"pysec-2025-211-d8bd15de",[8538],"CVE-2025-14920",[327],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[8543],{"type":2731,"score":2804},[8545],{"type":2741,"url":8546},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2818,2819,2820],{"id":328,"slug":8549,"dossier":46,"summary":379,"aliases":8550,"sourceIds":8552,"published":8553,"modified":8554,"checkedAt":7,"severity":8555,"references":8557,"versionKeys":8560,"packageCount":32,"repositoryCount":622},"pysec-2025-212-a011b97d",[8551],"CVE-2025-14921",[328],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[8556],{"type":2731,"score":2804},[8558],{"type":2741,"url":8559},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2818,2819,2820],{"id":329,"slug":8562,"dossier":46,"summary":379,"aliases":8563,"sourceIds":8565,"published":8566,"modified":8567,"checkedAt":7,"severity":8568,"references":8570,"versionKeys":8573,"packageCount":32,"repositoryCount":622},"pysec-2025-213-9043dc9b",[8564],"CVE-2025-14924",[329],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[8569],{"type":2731,"score":2804},[8571],{"type":2741,"url":8572},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2818,2819,2820],{"id":330,"slug":8575,"dossier":46,"summary":379,"aliases":8576,"sourceIds":8578,"published":8579,"modified":8580,"checkedAt":7,"severity":8581,"references":8583,"versionKeys":8586,"packageCount":32,"repositoryCount":622},"pysec-2025-214-eb241255",[8577],"CVE-2025-14926",[330],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[8582],{"type":2731,"score":2804},[8584],{"type":2741,"url":8585},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2818,2819,2820],{"id":331,"slug":8588,"dossier":46,"summary":379,"aliases":8589,"sourceIds":8591,"published":8592,"modified":8593,"checkedAt":7,"severity":8594,"references":8596,"versionKeys":8599,"packageCount":32,"repositoryCount":622},"pysec-2025-215-6064f491",[8590],"CVE-2025-14927",[331],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[8595],{"type":2731,"score":2804},[8597],{"type":2741,"url":8598},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2818,2819,2820],{"id":332,"slug":8601,"dossier":46,"summary":379,"aliases":8602,"sourceIds":8604,"published":8605,"modified":8606,"checkedAt":7,"severity":8607,"references":8609,"versionKeys":8612,"packageCount":32,"repositoryCount":622},"pysec-2025-216-5708ed01",[8603],"CVE-2025-14928",[332],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[8608],{"type":2731,"score":2804},[8610],{"type":2741,"url":8611},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2818,2819,2820],{"id":333,"slug":8614,"dossier":46,"summary":379,"aliases":8615,"sourceIds":8617,"published":8618,"modified":8619,"checkedAt":7,"severity":8620,"references":8622,"versionKeys":8625,"packageCount":32,"repositoryCount":391},"pysec-2025-217-2c1ad388",[8616],"CVE-2025-14929",[333],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[8621],{"type":2731,"score":2804},[8623],{"type":2741,"url":8624},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2818,2819,2820,2821,2822,2823,2824],{"id":334,"slug":8627,"dossier":46,"summary":379,"aliases":8628,"sourceIds":8630,"published":8631,"modified":8632,"checkedAt":7,"severity":8633,"references":8635,"versionKeys":8638,"packageCount":32,"repositoryCount":2921},"pysec-2025-218-39811fc3",[8629],"CVE-2025-14930",[334],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[8634],{"type":2731,"score":2804},[8636],{"type":2741,"url":8637},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2818,2819,2820,2821],{"id":335,"slug":8640,"dossier":46,"summary":379,"aliases":8641,"sourceIds":8644,"published":8645,"modified":8646,"checkedAt":7,"severity":8647,"references":8649,"versionKeys":8656,"packageCount":32,"repositoryCount":2921},"pysec-2025-265-33beac08",[8642,8643],"CVE-2025-67724","GHSA-pr2v-jx2c-wg9f",[335],"2025-12-12T06:15:41.213Z","2026-07-13T07:15:44.068555841Z",[8648],{"type":2731,"score":5776},[8650,8652,8654],{"type":2741,"url":8651},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",{"type":2741,"url":8653},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":2776,"url":8655},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",[3315,3316,3317],{"id":336,"slug":8658,"dossier":46,"summary":379,"aliases":8659,"sourceIds":8662,"published":8663,"modified":8664,"checkedAt":7,"severity":8665,"references":8667,"versionKeys":8673,"packageCount":32,"repositoryCount":2921},"pysec-2025-266-c9802ae6",[8660,8661],"CVE-2025-67725","GHSA-c98p-7wgm-6p64",[336],"2025-12-12T06:15:41.380Z","2026-07-13T07:15:44.064352714Z",[8666],{"type":2731,"score":2871},[8668,8669,8671],{"type":2741,"url":8651},{"type":2741,"url":8670},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":2776,"url":8672},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",[3315,3316,3317],{"id":337,"slug":8675,"dossier":46,"summary":379,"aliases":8676,"sourceIds":8679,"published":8680,"modified":8681,"checkedAt":7,"severity":8682,"references":8684,"versionKeys":8689,"packageCount":32,"repositoryCount":2921},"pysec-2025-267-ca9685ba",[8677,8678],"CVE-2025-67726","GHSA-jhmp-mqwm-3gq8",[337],"2025-12-12T07:15:44.920Z","2026-07-13T07:15:45.375541292Z",[8683],{"type":2731,"score":2871},[8685,8686,8688],{"type":2741,"url":8651},{"type":2741,"url":8687},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":2776,"url":8672},[3315,3316,3317],{"id":338,"slug":8691,"dossier":46,"summary":379,"aliases":8692,"sourceIds":8695,"published":8696,"modified":8697,"checkedAt":7,"severity":8698,"references":8700,"versionKeys":8711,"packageCount":32,"repositoryCount":536},"pysec-2026-139-96951ff6",[8693,8694],"BIT-pytorch-2026-4538","CVE-2026-4538",[338],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[8699],{"type":2731,"score":5443},[8701,8703,8705,8707,8709],{"type":2738,"url":8702},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2741,"url":8704},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2741,"url":8706},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":3105,"url":8708},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2776,"url":8710},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[7494,3124,3125,3126,4740,4741,7133,7134,7135],{"id":339,"slug":8713,"dossier":46,"summary":379,"aliases":8714,"sourceIds":8716,"published":8717,"modified":8718,"checkedAt":7,"severity":8719,"references":8721,"versionKeys":8724,"packageCount":32,"repositoryCount":622},"pysec-2026-2085-e081ac1d",[8715],"CVE-2026-12252",[339],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[8720],{"type":2731,"score":2804},[8722],{"type":2813,"url":8723},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[3381,3382],{"id":340,"slug":8726,"dossier":91,"summary":379,"aliases":8727,"sourceIds":8730,"published":8731,"modified":8732,"checkedAt":7,"severity":8733,"references":8736,"versionKeys":8751,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[8728,8729],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[340],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[8734],{"type":2731,"score":8735},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[8737,8739,8741,8743,8745,8747,8749],{"type":2738,"url":8738},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2738,"url":8740},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2741,"url":8742},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2741,"url":8744},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":3105,"url":8746},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2776,"url":8748},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2813,"url":8750},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[8752,8753,8754,8755,8756,8757],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":341,"slug":8759,"dossier":46,"summary":379,"aliases":8760,"sourceIds":8764,"published":8765,"modified":8766,"checkedAt":7,"severity":8767,"references":8770,"versionKeys":8777,"packageCount":32,"repositoryCount":32},"pysec-2026-2248-0cc9a2d8",[8761,8762,8763],"CVE-2026-28231","GHSA-5gjj-6r7v-ph3x","PYSEC-2026-2258",[341],"2026-02-27T20:21:40.697Z","2026-07-13T07:26:30.359630077Z",[8768],{"type":2731,"score":8769},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[8771,8773,8775],{"type":2741,"url":8772},"https:\u002F\u002Fgithub.com\u002Fbigcat88\u002Fpillow_heif\u002Freleases\u002Ftag\u002Fv1.3.0",{"type":2776,"url":8774},"https:\u002F\u002Fgithub.com\u002Fbigcat88\u002Fpillow_heif\u002Fcommit\u002F8305a15d3780c533b762578cbe987d27a2c59c7a",{"type":2813,"url":8776},"https:\u002F\u002Fgithub.com\u002Fbigcat88\u002Fpillow_heif\u002Fsecurity\u002Fadvisories\u002FGHSA-5gjj-6r7v-ph3x",[8778],"pypi:pi-heif@0.21.0",{"id":342,"slug":8780,"dossier":91,"summary":379,"aliases":8781,"sourceIds":8785,"published":8786,"modified":8787,"checkedAt":7,"severity":8788,"references":8790,"versionKeys":8797,"packageCount":32,"repositoryCount":104},"pysec-2026-2253-e1ccf3df",[8782,8783,8784],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[342],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[8789],{"type":2731,"score":2871},[8791,8793,8795],{"type":2741,"url":8792},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":2776,"url":8794},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2813,"url":8796},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":343,"slug":8799,"dossier":91,"summary":379,"aliases":8800,"sourceIds":8804,"published":8805,"modified":8806,"checkedAt":7,"severity":8807,"references":8809,"versionKeys":8814,"packageCount":32,"repositoryCount":104},"pysec-2026-2254-a1ed1fd2",[8801,8802,8803],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[343],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[8808],{"type":2731,"score":2871},[8810,8811,8812],{"type":2741,"url":8792},{"type":2776,"url":8794},{"type":2813,"url":8813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":344,"slug":8816,"dossier":91,"summary":379,"aliases":8817,"sourceIds":8821,"published":8822,"modified":8823,"checkedAt":7,"severity":8824,"references":8826,"versionKeys":8831,"packageCount":32,"repositoryCount":104},"pysec-2026-2255-d0951b98",[8818,8819,8820],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[344],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[8825],{"type":2731,"score":2871},[8827,8828,8829],{"type":2741,"url":8792},{"type":2776,"url":8794},{"type":2813,"url":8830},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":345,"slug":8833,"dossier":91,"summary":379,"aliases":8834,"sourceIds":8838,"published":8839,"modified":8840,"checkedAt":7,"severity":8841,"references":8843,"versionKeys":8849,"packageCount":32,"repositoryCount":104},"pysec-2026-2256-0f333f0b",[8835,8836,8837],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[345],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[8842],{"type":2731,"score":2871},[8844,8845,8847],{"type":2741,"url":8792},{"type":2776,"url":8846},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2813,"url":8848},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":346,"slug":8851,"dossier":91,"summary":379,"aliases":8852,"sourceIds":8856,"published":8857,"modified":8858,"checkedAt":7,"severity":8859,"references":8862,"versionKeys":8872,"packageCount":32,"repositoryCount":104},"pysec-2026-2257-bcbe5d79",[8853,8854,8855],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[346],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[8860],{"type":2731,"score":8861},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[8863,8864,8866,8868,8870],{"type":2741,"url":8792},{"type":2776,"url":8865},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2776,"url":8867},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2776,"url":8869},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2813,"url":8871},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":347,"slug":8874,"dossier":46,"summary":379,"aliases":8875,"sourceIds":8880,"published":8881,"modified":8882,"checkedAt":7,"severity":8883,"references":8885,"versionKeys":8901,"packageCount":32,"repositoryCount":2888},"pysec-2026-2286-8795b007",[8876,8877,8878,8879],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[347],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[8884],{"type":2731,"score":5351},[8886,8888,8890,8891,8893,8895,8897,8899],{"type":2738,"url":8887},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2738,"url":8889},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2741,"url":3263},{"type":2741,"url":8892},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2741,"url":8894},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3105,"url":8896},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":3105,"url":8898},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2776,"url":8900},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[3124,3125,3126,4740,4741,7133,7134,7135],{"id":348,"slug":8903,"dossier":91,"summary":379,"aliases":8904,"sourceIds":8908,"published":8909,"modified":8910,"checkedAt":7,"severity":8911,"references":8914,"versionKeys":8921,"packageCount":32,"repositoryCount":104},"pysec-2026-3447-df031425",[8905,8906,8907],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[348],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[8912],{"type":2731,"score":8913},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[8915,8917,8919],{"type":2741,"url":8916},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":2776,"url":8918},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2813,"url":8920},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[3918,3919,8922,8923,8924,8925,8926,8927,8928],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":349,"slug":8930,"dossier":91,"summary":379,"aliases":8931,"sourceIds":8935,"published":8936,"modified":8937,"checkedAt":7,"severity":8938,"references":8940,"versionKeys":8949,"packageCount":32,"repositoryCount":104},"pysec-2026-3451-3e5eac34",[8932,8933,8934],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[349],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[8939],{"type":2731,"score":2871},[8941,8943,8945,8947],{"type":2741,"url":8942},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2776,"url":8944},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2776,"url":8946},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2813,"url":8948},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":350,"slug":8951,"dossier":46,"summary":379,"aliases":8952,"sourceIds":8956,"published":8957,"modified":8958,"checkedAt":7,"severity":8959,"references":8961,"versionKeys":8969,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[8953,8954,8955],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[350],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[8960],{"type":2731,"score":2871},[8962,8963,8965,8967],{"type":2741,"url":8942},{"type":2776,"url":8964},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2776,"url":8966},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2813,"url":8968},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[3968,3969,3970],{"id":351,"slug":8971,"dossier":91,"summary":379,"aliases":8972,"sourceIds":8976,"published":8977,"modified":8978,"checkedAt":7,"severity":8979,"references":8981,"versionKeys":8989,"packageCount":32,"repositoryCount":104},"pysec-2026-3453-83974725",[8973,8974,8975],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[351],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[8980],{"type":2731,"score":2871},[8982,8983,8985,8987],{"type":2741,"url":8942},{"type":2776,"url":8984},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2776,"url":8986},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2813,"url":8988},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[5192,5193,5194,3966,3967,3968,3969,3970],{"id":352,"slug":8991,"dossier":46,"summary":379,"aliases":8992,"sourceIds":8994,"published":8995,"modified":8996,"checkedAt":7,"severity":8997,"references":8999,"versionKeys":9002,"packageCount":32,"repositoryCount":622},"pysec-2026-597-f85c09cd",[8993],"CVE-2026-12243",[352],"2026-06-30T01:16:29.063Z","2026-07-01T18:15:06.027046365Z",[8998],{"type":2731,"score":4062},[9000],{"type":2813,"url":9001},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",[3381,3382],{"id":353,"slug":9004,"dossier":46,"summary":379,"aliases":9005,"sourceIds":9007,"published":9008,"modified":9009,"checkedAt":7,"severity":9010,"references":9012,"versionKeys":9015,"packageCount":32,"repositoryCount":622},"pysec-2026-99-2c63e84f",[9006],"CVE-2026-0848",[353],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[9011],{"type":2731,"score":4571},[9013],{"type":2813,"url":9014},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3381,3382],1784558560300]