[{"data":1,"prerenderedAt":7541},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-5530":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":323,"related":326},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T11:49:05.682Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T11:47:56.369Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":105,"unknownLicensePackageCount":32,"advisoryIds":106,"advisoryCount":321,"providers":322},"opencode:5530","opencode-5530",5530,"GSA Extraction","uba-ki-lab\u002Fgsa-extraction","information extraction and summarization; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, GSA","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fcommit\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba","2025-07-08T06:55:06.033Z","2025-07-08T06:55:00.000Z",{"complete":91,"entryCount":37,"truncated":46},true,[93],{"path":55,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":86,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","766ab3a9e501607f926b430b6937368e9157d2bb2417294c81529c0b0de9999a",681172,"parsed",193,189,[103],"pypi",10,22,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320],"GHSA-248v-346w-9cwc","GHSA-27jp-wm6q-gp25","GHSA-29pf-2h5f-8g72","GHSA-29vq-49wr-vm6x","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g68-c3qc-8985","GHSA-2h4p-vjrc-8xpq","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3j69-69wj-xqx2","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-42h5-h8qh-vv9v","GHSA-469j-vmhf-r6v7","GHSA-46r5-x6jq-v8g6","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4w7r-h757-3r74","GHSA-4x5p-f36r-mxxr","GHSA-4xh5-x5gv-qwph","GHSA-4xpc-pv4p-pm3w","GHSA-5239-wwwm-4pmq","GHSA-53mr-6c8q-9789","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-58qw-9mgm-455v","GHSA-59p9-h35m-wg4g","GHSA-5qmp-p3c4-72qj","GHSA-5rjg-fvgr-3xxf","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65h7-c7c4-mghx","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-68rp-wp8r-4726","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-69x8-hrgq-fjj8","GHSA-6jhg-hg63-jvvf","GHSA-6mq8-rvhq-8wgg","GHSA-6rvg-6v2m-4j46","GHSA-6vgw-5pg2-w6jp","GHSA-7545-fcxq-7j24","GHSA-75cm-x2w3-8mgf","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7p94-766c-hgjp","GHSA-7qhf-v65m-g5f3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-87hc-h4r5-73f7","GHSA-887c-mr87-cxwp","GHSA-8c7q-86fq-vvmh","GHSA-8qvm-5x2c-j2w7","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c38f-wx89-p2xg","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c8rr-9gxc-jprv","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2m9-wcf4-cwwx","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-f9vj-2wh5-fj8j","GHSA-fgcw-684q-jj6r","GHSA-fh2c-86xm-pm2x","GHSA-fh55-r93g-j68g","GHSA-fh64-r2vc-xvhr","GHSA-fhff-qmm8-h2fp","GHSA-fjcf-3j3r-78rp","GHSA-fpwr-67px-3qhx","GHSA-g35p-px32-whv6","GHSA-g3cq-j2xw-wf74","GHSA-g6pg-52vf-843h","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gq3w-7jj3-x7gr","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgf8-39gv-g3f2","GHSA-hpj7-wq8m-9hgp","GHSA-hxxf-235m-72v3","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjhc-v7c2-5hh6","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jp4c-xjxw-mgf9","GHSA-jp82-jpqv-5vv3","GHSA-jr27-m4p2-rc6r","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgf9-4vpg-hj56","GHSA-mq26-g339-26xf","GHSA-mqqc-3gqh-h2x8","GHSA-mv93-w799-cj2w","GHSA-mwh4-6h8g-pg8w","GHSA-p4gq-832x-fm9v","GHSA-p998-jp59-783m","GHSA-pgqp-8h46-6x4j","GHSA-phhr-52qp-3mj4","GHSA-pq67-6m6q-mj2v","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2r8-vmq7-fpx2","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qrc4-49gv-mv9m","GHSA-qxrp-vhvm-j765","GHSA-r23q-823p-vmf7","GHSA-r5m9-wm49-959f","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rvhj-8chj-8v3c","GHSA-v87r-6q3f-2j67","GHSA-v92g-xgxw-vvmm","GHSA-vgrw-7cvw-pwgx","GHSA-vhcx-3pq2-4fvc","GHSA-vqfr-h8mv-ghfj","GHSA-vvw2-h478-xwr3","GHSA-w2fm-2cpv-w7v5","GHSA-w5xq-c4pf-ghq7","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wf7f-8fxf-xfxc","GHSA-wf93-45jw-7689","GHSA-wgvc-ghv9-3pmm","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wpfp-gwwc-vwq6","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x2qx-6953-8485","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xch3-2f9x-wh9f","GHSA-xf7x-x43h-rpqh","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-265","PYSEC-2025-266","PYSEC-2025-267","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-2286","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453","PYSEC-2026-597","PYSEC-2026-99",214,[],{"files":324,"occurrenceCount":100},[325],{"path":55,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":86,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":327,"vulnerabilities":2043},[328,341,353,364,373,383,392,402,412,421,430,440,449,461,471,480,489,498,508,517,527,536,547,557,566,577,586,595,605,615,624,633,641,650,659,668,677,686,695,704,713,722,732,741,751,760,769,778,787,796,805,814,823,832,841,850,859,868,877,886,895,903,912,921,930,939,948,957,966,975,984,993,1001,1010,1019,1028,1037,1046,1054,1063,1072,1081,1090,1099,1108,1119,1128,1137,1146,1155,1164,1172,1181,1190,1200,1208,1216,1225,1234,1243,1252,1261,1270,1279,1288,1296,1305,1314,1323,1332,1340,1348,1357,1366,1375,1384,1394,1403,1412,1421,1429,1438,1447,1456,1465,1474,1483,1492,1501,1510,1518,1527,1536,1544,1553,1562,1572,1580,1589,1597,1606,1615,1624,1633,1642,1651,1660,1669,1678,1687,1696,1704,1713,1722,1731,1740,1749,1758,1767,1777,1786,1794,1803,1812,1820,1830,1839,1848,1858,1867,1875,1884,1893,1902,1910,1918,1927,1936,1945,1954,1963,1972,1980,1989,1998,2007,2016,2025,2034],{"id":329,"slug":330,"identity":331,"label":332,"aiRelevant":91,"provider":333,"advisoryCount":70,"licenseExpressions":336,"versions":338,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":340},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":334,"label":335},"hugging-face","Hugging Face",[337],"Apache-2.0",[339],"4.53.1",[55],{"id":342,"slug":343,"identity":344,"label":345,"aiRelevant":91,"provider":346,"advisoryCount":347,"licenseExpressions":348,"versions":350,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":352},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[349],"BSD-3-Clause",[351],"2.7.1",[55],{"id":354,"slug":355,"identity":356,"label":357,"aiRelevant":91,"provider":346,"advisoryCount":358,"licenseExpressions":359,"versions":361,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":363},"package:pypi:litellm","litellm-e00b5c8b","pypi:litellm","LiteLLM",8,[360],"MIT",[362],"1.73.6.post1",[55],{"id":365,"slug":366,"identity":367,"label":368,"aiRelevant":91,"provider":346,"advisoryCount":32,"licenseExpressions":369,"versions":370,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":372},"package:pypi:dspy","dspy-70e56922","pypi:dspy","DSPy",[360],[371],"2.6.27",[55],{"id":374,"slug":375,"identity":376,"label":377,"aiRelevant":91,"provider":378,"advisoryCount":38,"licenseExpressions":379,"versions":380,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":382},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":334,"label":335},[337],[381],"3.6.0",[55],{"id":72,"slug":73,"identity":384,"label":74,"aiRelevant":91,"provider":385,"advisoryCount":38,"licenseExpressions":388,"versions":389,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":391},"pypi:openai",{"id":386,"label":387},"openai","OpenAI",[337],[390],"1.93.0",[55],{"id":393,"slug":394,"identity":395,"label":396,"aiRelevant":91,"provider":397,"advisoryCount":38,"licenseExpressions":398,"versions":399,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":401},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":334,"label":335},[337],[400],"5.0.0",[55],{"id":403,"slug":404,"identity":405,"label":406,"aiRelevant":91,"provider":346,"advisoryCount":38,"licenseExpressions":407,"versions":409,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":411},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[408],"non-standard",[410],"0.21.2",[55],{"id":413,"slug":414,"identity":415,"label":416,"aiRelevant":91,"provider":346,"advisoryCount":38,"licenseExpressions":417,"versions":418,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":420},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[349,408],[419],"1.7.0",[55],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":91,"provider":346,"advisoryCount":38,"licenseExpressions":426,"versions":427,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":429},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[408],[428],"0.9.0",[55],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":46,"provider":346,"advisoryCount":30,"licenseExpressions":435,"versions":437,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":439},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[337,436],"Apache-2.0 AND MIT",[438],"3.12.13",[55],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":46,"provider":346,"advisoryCount":347,"licenseExpressions":445,"versions":446,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":448},"package:pypi:mlflow","mlflow-43f98b3c","pypi:mlflow","mlflow",[408],[447],"3.1.1",[55],{"id":450,"slug":451,"identity":452,"label":453,"aiRelevant":46,"provider":346,"advisoryCount":454,"licenseExpressions":455,"versions":458,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":460},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[456,457],"HPND","MIT-CMU",[459],"11.3.0",[55],{"id":462,"slug":463,"identity":464,"label":465,"aiRelevant":46,"provider":346,"advisoryCount":466,"licenseExpressions":467,"versions":468,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":470},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",11,[337],[469],"3.9.1",[55],{"id":472,"slug":473,"identity":474,"label":475,"aiRelevant":46,"provider":346,"advisoryCount":104,"licenseExpressions":476,"versions":477,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":479},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[337],[478],"6.5.1",[55],{"id":481,"slug":482,"identity":483,"label":484,"aiRelevant":46,"provider":346,"advisoryCount":358,"licenseExpressions":485,"versions":486,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":488},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[349],[487],"0.46.2",[55],{"id":490,"slug":491,"identity":492,"label":493,"aiRelevant":46,"provider":346,"advisoryCount":65,"licenseExpressions":494,"versions":495,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":497},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[360],[496],"2.5.0",[55],{"id":499,"slug":500,"identity":501,"label":502,"aiRelevant":46,"provider":346,"advisoryCount":503,"licenseExpressions":504,"versions":505,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":507},"package:pypi:pip","pip-2911c768","pypi:pip","pip",6,[360],[506],"25.1.1",[55],{"id":509,"slug":510,"identity":511,"label":512,"aiRelevant":46,"provider":346,"advisoryCount":503,"licenseExpressions":513,"versions":514,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":516},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[349,408],[515],"3.1.3",[55],{"id":518,"slug":519,"identity":520,"label":521,"aiRelevant":46,"provider":346,"advisoryCount":522,"licenseExpressions":523,"versions":524,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":526},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",5,[349],[525],"3.1.44",[55],{"id":528,"slug":529,"identity":530,"label":531,"aiRelevant":46,"provider":346,"advisoryCount":34,"licenseExpressions":532,"versions":533,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":535},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[349,408],[534],"3.1.6",[55],{"id":537,"slug":538,"identity":539,"label":540,"aiRelevant":46,"provider":346,"advisoryCount":34,"licenseExpressions":541,"versions":544,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":546},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[349,542,543],"BSD-3-Clause AND TCL","TCL",[545],"5.10.0",[55],{"id":548,"slug":549,"identity":550,"label":551,"aiRelevant":46,"provider":346,"advisoryCount":552,"licenseExpressions":553,"versions":554,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":556},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[337],[555],"2.32.4",[55],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":46,"provider":346,"advisoryCount":552,"licenseExpressions":562,"versions":563,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":565},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[360],[564],"80.9.0",[55],{"id":567,"slug":568,"identity":569,"label":570,"aiRelevant":46,"provider":346,"advisoryCount":571,"licenseExpressions":572,"versions":574,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":576},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[360,573],"Unlicense",[575],"3.18.0",[55],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":46,"provider":346,"advisoryCount":571,"licenseExpressions":582,"versions":583,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":585},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[360],[584],"1.3.10",[55],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":46,"provider":346,"advisoryCount":571,"licenseExpressions":591,"versions":592,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":594},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[349],[593],"6.31.1",[55],{"id":596,"slug":597,"identity":598,"label":599,"aiRelevant":46,"provider":346,"advisoryCount":571,"licenseExpressions":600,"versions":602,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":604},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",[601],"BSD-2-Clause",[603],"0.6.1",[55],{"id":606,"slug":607,"identity":608,"label":609,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":610,"versions":612,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":614},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[611],"MPL-2.0",[613],"2025.6.15",[55],{"id":616,"slug":617,"identity":618,"label":619,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":620,"versions":621,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":623},"package:pypi:click","click-ef97f731","pypi:click","click",[349,408],[622],"8.2.1",[55],{"id":625,"slug":626,"identity":627,"label":628,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":629,"versions":630,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":632},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[337],[631],"5.6.3",[55],{"id":634,"slug":635,"identity":636,"label":637,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":638,"versions":639,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":640},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[349,408],[447],[55],{"id":642,"slug":643,"identity":644,"label":645,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":646,"versions":647,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":649},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[360],[648],"4.58.5",[55],{"id":651,"slug":652,"identity":653,"label":654,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":655,"versions":656,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":658},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[360],[657],"0.16.0",[55],{"id":660,"slug":661,"identity":662,"label":663,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":664,"versions":665,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":667},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[349,408],[666],"3.10",[55],{"id":669,"slug":670,"identity":671,"label":672,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":673,"versions":674,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":676},"package:pypi:json-repair","json-repair-3bbcd372","pypi:json-repair","json-repair",[408],[675],"0.47.6",[55],{"id":678,"slug":679,"identity":680,"label":681,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":682,"versions":683,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":685},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[349,408],[684],"5.8.1",[55],{"id":687,"slug":688,"identity":689,"label":690,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":691,"versions":692,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":694},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[337,408],[693],"20.0.0",[55],{"id":696,"slug":697,"identity":698,"label":699,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":700,"versions":701,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":703},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[601],[702],"2.19.2",[55],{"id":705,"slug":706,"identity":707,"label":708,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":709,"versions":710,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":712},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[349],[711],"1.1.1",[55],{"id":714,"slug":715,"identity":716,"label":717,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":718,"versions":719,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":721},"package:pypi:sqlparse","sqlparse-96380dda","pypi:sqlparse","sqlparse",[408],[720],"0.5.3",[55],{"id":723,"slug":724,"identity":725,"label":726,"aiRelevant":46,"provider":346,"advisoryCount":32,"licenseExpressions":727,"versions":729,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":731},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[728],"MIT AND MPL-2.0",[730],"4.67.1",[55],{"id":733,"slug":734,"identity":735,"label":736,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":737,"versions":738,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":740},"package:pypi:absl-py","absl-py-50126725","pypi:absl-py","absl-py",[337],[739],"2.3.1",[55],{"id":742,"slug":743,"identity":744,"label":745,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":746,"versions":748,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":750},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[747],"PSF-2.0",[749],"2.6.1",[55],{"id":752,"slug":753,"identity":754,"label":755,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":756,"versions":757,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":759},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[337],[758],"1.4.0",[55],{"id":761,"slug":762,"identity":763,"label":764,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":765,"versions":766,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":768},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[360],[767],"1.16.2",[55],{"id":770,"slug":771,"identity":772,"label":773,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":774,"versions":775,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":777},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[360],[776],"0.7.0",[55],{"id":779,"slug":780,"identity":781,"label":782,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":783,"versions":784,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":786},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[408],[785],"4.9.3",[55],{"id":788,"slug":789,"identity":790,"label":791,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":792,"versions":793,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":795},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[360],[794],"4.9.0",[55],{"id":797,"slug":798,"identity":799,"label":800,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":801,"versions":802,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":804},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[408],[803],"0.1.4",[55],{"id":806,"slug":807,"identity":808,"label":809,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":810,"versions":811,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":813},"package:pypi:argilla","argilla-35b6bbbe","pypi:argilla","argilla",[337],[812],"2.8.0",[55],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":819,"versions":820,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":822},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[337],[821],"3.0.0",[55],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":828,"versions":829,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":831},"package:pypi:async-timeout","async-timeout-218334ed","pypi:async-timeout","async-timeout",[337],[830],"5.0.1",[55],{"id":833,"slug":834,"identity":835,"label":836,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":837,"versions":838,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":840},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[360],[839],"0.0.8",[55],{"id":842,"slug":843,"identity":844,"label":845,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":846,"versions":847,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":849},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[360],[848],"25.3.0",[55],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":855,"versions":856,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":858},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[360],[857],"2.2.1",[55],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":864,"versions":865,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":867},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[360],[866],"1.9.0",[55],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":873,"versions":874,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":876},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[360],[875],"5.5.2",[55],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":882,"versions":883,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":885},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[360],[884],"1.17.1",[55],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":891,"versions":892,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":894},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[360],[893],"3.4.2",[55],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":900,"versions":901,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":902},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[349],[447],[55],{"id":904,"slug":905,"identity":906,"label":907,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":908,"versions":909,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":911},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[408],[910],"0.4.6",[55],{"id":913,"slug":914,"identity":915,"label":916,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":917,"versions":918,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":920},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[360],[919],"6.9.0",[55],{"id":922,"slug":923,"identity":924,"label":925,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":926,"versions":927,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":929},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[408],[928],"0.2.2",[55],{"id":931,"slug":932,"identity":933,"label":934,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":935,"versions":936,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":938},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[408],[937],"1.3.2",[55],{"id":940,"slug":941,"identity":942,"label":943,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":944,"versions":945,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":947},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[408],[946],"0.12.1",[55],{"id":949,"slug":950,"identity":951,"label":952,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":953,"versions":954,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":956},"package:pypi:databricks-sdk","databricks-sdk-26867d3a","pypi:databricks-sdk","databricks-sdk",[408],[955],"0.57.0",[55],{"id":958,"slug":959,"identity":960,"label":961,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":962,"versions":963,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":965},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[360],[964],"1.8.14",[55],{"id":967,"slug":968,"identity":969,"label":970,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":971,"versions":972,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":974},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[601,408],[973],"5.2.1",[55],{"id":976,"slug":977,"identity":978,"label":979,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":980,"versions":981,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":983},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[360],[982],"1.2.18",[55],{"id":985,"slug":986,"identity":987,"label":988,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":989,"versions":990,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":992},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[349],[991],"0.3.8",[55],{"id":994,"slug":995,"identity":996,"label":997,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":998,"versions":999,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1000},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[337],[866],[55],{"id":1002,"slug":1003,"identity":1004,"label":1005,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1006,"versions":1007,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1009},"package:pypi:docker","docker-fa61cb72","pypi:docker","docker",[337],[1008],"7.1.0",[55],{"id":1011,"slug":1012,"identity":1013,"label":1014,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1015,"versions":1016,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1018},"package:pypi:evaluate","evaluate-18162fdd","pypi:evaluate","evaluate",[337],[1017],"0.4.4",[55],{"id":1020,"slug":1021,"identity":1022,"label":1023,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1024,"versions":1025,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1027},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[360],[1026],"1.3.0",[55],{"id":1029,"slug":1030,"identity":1031,"label":1032,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1033,"versions":1034,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1036},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[360],[1035],"2.2.0",[55],{"id":1038,"slug":1039,"identity":1040,"label":1041,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1042,"versions":1043,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1045},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[360],[1044],"0.115.14",[55],{"id":1047,"slug":1048,"identity":1049,"label":1050,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1051,"versions":1052,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1053},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[337],[419],[55],{"id":1055,"slug":1056,"identity":1057,"label":1058,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1059,"versions":1060,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1062},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[349,408],[1061],"2025.3.0",[55],{"id":1064,"slug":1065,"identity":1066,"label":1067,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1068,"versions":1069,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1071},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[408],[1070],"4.0.12",[55],{"id":1073,"slug":1074,"identity":1075,"label":1076,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1077,"versions":1078,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1080},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[337],[1079],"2.40.3",[55],{"id":1082,"slug":1083,"identity":1084,"label":1085,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1086,"versions":1087,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1089},"package:pypi:graphene","graphene-e89251f5","pypi:graphene","graphene",[360],[1088],"3.4.3",[55],{"id":1091,"slug":1092,"identity":1093,"label":1094,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1095,"versions":1096,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1098},"package:pypi:graphql-core","graphql-core-6d217145","pypi:graphql-core","graphql-core",[360],[1097],"3.2.6",[55],{"id":1100,"slug":1101,"identity":1102,"label":1103,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1104,"versions":1105,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1107},"package:pypi:graphql-relay","graphql-relay-f4584f38","pypi:graphql-relay","graphql-relay",[360],[1106],"3.2.0",[55],{"id":1109,"slug":1110,"identity":1111,"label":1112,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1113,"versions":1116,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1118},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[360,1114,1115],"MIT AND PSF-2.0","MIT AND Python-2.0",[1117],"3.2.3",[55],{"id":1120,"slug":1121,"identity":1122,"label":1123,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1124,"versions":1125,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1127},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[360],[1126],"23.0.0",[55],{"id":1129,"slug":1130,"identity":1131,"label":1132,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1133,"versions":1134,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1136},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[337],[1135],"1.1.5",[55],{"id":1138,"slug":1139,"identity":1140,"label":1141,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1142,"versions":1143,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1145},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[349],[1144],"1.0.9",[55],{"id":1147,"slug":1148,"identity":1149,"label":1150,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1151,"versions":1152,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1154},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[349],[1153],"0.28.1",[55],{"id":1156,"slug":1157,"identity":1158,"label":1159,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1160,"versions":1161,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1163},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[337,408],[1162],"0.33.2",[55],{"id":1165,"slug":1166,"identity":1167,"label":1168,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1169,"versions":1170,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1171},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[360],[937],[55],{"id":1173,"slug":1174,"identity":1175,"label":1176,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1177,"versions":1178,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1180},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[337,408],[1179],"8.7.0",[55],{"id":1182,"slug":1183,"identity":1184,"label":1185,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1186,"versions":1187,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1189},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[349,408],[1188],"6.29.5",[55],{"id":1191,"slug":1192,"identity":1193,"label":1194,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1195,"versions":1196,"dossier":46,"occurrenceCount":571,"directOccurrenceCount":38,"evidenceFiles":1199},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[349],[1197,1198],"8.37.0","9.3.0",[55],{"id":1201,"slug":1202,"identity":1203,"label":1204,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1205,"versions":1206,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1207},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[408],[711],[55],{"id":1209,"slug":1210,"identity":1211,"label":1212,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1213,"versions":1214,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1215},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[349,408],[1035],[55],{"id":1217,"slug":1218,"identity":1219,"label":1220,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1221,"versions":1222,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1224},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[360],[1223],"0.19.2",[55],{"id":1226,"slug":1227,"identity":1228,"label":1229,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1230,"versions":1231,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1233},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[360],[1232],"0.10.0",[55],{"id":1235,"slug":1236,"identity":1237,"label":1238,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1239,"versions":1240,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1242},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[349],[1241],"1.5.1",[55],{"id":1244,"slug":1245,"identity":1246,"label":1247,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1248,"versions":1249,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1251},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[360],[1250],"4.24.0",[55],{"id":1253,"slug":1254,"identity":1255,"label":1256,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1257,"versions":1258,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1260},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[360],[1259],"2025.4.1",[55],{"id":1262,"slug":1263,"identity":1264,"label":1265,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1266,"versions":1267,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1269},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[408],[1268],"8.6.3",[55],{"id":1271,"slug":1272,"identity":1273,"label":1274,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1275,"versions":1276,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1278},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[408],[1277],"1.4.8",[55],{"id":1280,"slug":1281,"identity":1282,"label":1283,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1284,"versions":1285,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1287},"package:pypi:magicattr","magicattr-40bff089","pypi:magicattr","magicattr",[360],[1286],"0.1.6",[55],{"id":1289,"slug":1290,"identity":1291,"label":1292,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1293,"versions":1294,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1295},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[360],[821],[55],{"id":1297,"slug":1298,"identity":1299,"label":1300,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1301,"versions":1302,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1304},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[349,408],[1303],"3.0.2",[55],{"id":1306,"slug":1307,"identity":1308,"label":1309,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1310,"versions":1311,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1313},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[408],[1312],"3.10.3",[55],{"id":1315,"slug":1316,"identity":1317,"label":1318,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1319,"versions":1320,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1322},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[408],[1321],"0.1.7",[55],{"id":1324,"slug":1325,"identity":1326,"label":1327,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1328,"versions":1329,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1331},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[360],[1330],"0.1.2",[55],{"id":1333,"slug":1334,"identity":1335,"label":1336,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1337,"versions":1338,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1339},"package:pypi:mlflow-skinny","mlflow-skinny-05e8b169","pypi:mlflow-skinny","mlflow-skinny",[408],[447],[55],{"id":1341,"slug":1342,"identity":1343,"label":1344,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1345,"versions":1346,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1347},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[408],[1026],[55],{"id":1349,"slug":1350,"identity":1351,"label":1352,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1353,"versions":1354,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1356},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[337],[1355],"6.6.3",[55],{"id":1358,"slug":1359,"identity":1360,"label":1361,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1362,"versions":1363,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1365},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[349],[1364],"0.70.16",[55],{"id":1367,"slug":1368,"identity":1369,"label":1370,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1371,"versions":1372,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1374},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[408],[1373],"1.6.0",[55],{"id":1376,"slug":1377,"identity":1378,"label":1379,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1380,"versions":1381,"dossier":46,"occurrenceCount":571,"directOccurrenceCount":38,"evidenceFiles":1383},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[349,408],[893,1382],"3.5",[55],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1389,"versions":1391,"dossier":46,"occurrenceCount":571,"directOccurrenceCount":38,"evidenceFiles":1393},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1390,408],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1392,739],"2.2.6",[55],{"id":1395,"slug":1396,"identity":1397,"label":1398,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1399,"versions":1400,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1402},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[408],[1401],"12.6.4.1",[55],{"id":1404,"slug":1405,"identity":1406,"label":1407,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1408,"versions":1409,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1411},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[408],[1410],"12.6.80",[55],{"id":1413,"slug":1414,"identity":1415,"label":1416,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1417,"versions":1418,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1420},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[408],[1419],"12.6.77",[55],{"id":1422,"slug":1423,"identity":1424,"label":1425,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1426,"versions":1427,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1428},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[408],[1419],[55],{"id":1430,"slug":1431,"identity":1432,"label":1433,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1434,"versions":1435,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1437},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[408],[1436],"9.5.1.17",[55],{"id":1439,"slug":1440,"identity":1441,"label":1442,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1443,"versions":1444,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1446},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[408],[1445],"11.3.0.4",[55],{"id":1448,"slug":1449,"identity":1450,"label":1451,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1452,"versions":1453,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1455},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[408],[1454],"1.11.1.6",[55],{"id":1457,"slug":1458,"identity":1459,"label":1460,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1461,"versions":1462,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1464},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[408],[1463],"10.3.7.77",[55],{"id":1466,"slug":1467,"identity":1468,"label":1469,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1470,"versions":1471,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1473},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[408],[1472],"11.7.1.2",[55],{"id":1475,"slug":1476,"identity":1477,"label":1478,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1479,"versions":1480,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1482},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[408],[1481],"12.5.4.2",[55],{"id":1484,"slug":1485,"identity":1486,"label":1487,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1488,"versions":1489,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1491},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[408],[1490],"0.6.3",[55],{"id":1493,"slug":1494,"identity":1495,"label":1496,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1497,"versions":1498,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1500},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[349,408],[1499],"2.26.2",[55],{"id":1502,"slug":1503,"identity":1504,"label":1505,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1506,"versions":1507,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1509},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[408],[1508],"12.6.85",[55],{"id":1511,"slug":1512,"identity":1513,"label":1514,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1515,"versions":1516,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1517},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[337,408],[1419],[55],{"id":1519,"slug":1520,"identity":1521,"label":1522,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1523,"versions":1524,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1526},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[349],[1525],"2.3.0",[55],{"id":1528,"slug":1529,"identity":1530,"label":1531,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1532,"versions":1533,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1535},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[337],[1534],"1.34.1",[55],{"id":1537,"slug":1538,"identity":1539,"label":1540,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1541,"versions":1542,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1543},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[337],[1534],[55],{"id":1545,"slug":1546,"identity":1547,"label":1548,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1549,"versions":1550,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1552},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[337],[1551],"0.55b1",[55],{"id":1554,"slug":1555,"identity":1556,"label":1557,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1558,"versions":1559,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1561},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[349,360],[1560],"4.4.0",[55],{"id":1563,"slug":1564,"identity":1565,"label":1566,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1567,"versions":1569,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1571},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1568,408],"Apache-2.0 OR BSD-2-Clause",[1570],"25.0",[55],{"id":1573,"slug":1574,"identity":1575,"label":1576,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1577,"versions":1578,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1579},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[408],[1525],[55],{"id":1581,"slug":1582,"identity":1583,"label":1584,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1585,"versions":1586,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1588},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[360],[1587],"0.8.4",[55],{"id":1590,"slug":1591,"identity":1592,"label":1593,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1594,"versions":1595,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1596},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[408],[794],[55],{"id":1598,"slug":1599,"identity":1600,"label":1601,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1602,"versions":1603,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1605},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[360],[1604],"4.3.8",[55],{"id":1607,"slug":1608,"identity":1609,"label":1610,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1611,"versions":1612,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1614},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[349,408],[1613],"3.0.51",[55],{"id":1616,"slug":1617,"identity":1618,"label":1619,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1620,"versions":1621,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1623},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[337],[1622],"0.3.2",[55],{"id":1625,"slug":1626,"identity":1627,"label":1628,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1629,"versions":1630,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1632},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[349],[1631],"7.0.0",[55],{"id":1634,"slug":1635,"identity":1636,"label":1637,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1638,"versions":1639,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1641},"package:pypi:psycopg2","psycopg2-65dfcce0","pypi:psycopg2","psycopg2",[408],[1640],"2.9.10",[55],{"id":1643,"slug":1644,"identity":1645,"label":1646,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1647,"versions":1649,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1650},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1648],"ISC",[776],[55],{"id":1652,"slug":1653,"identity":1654,"label":1655,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1656,"versions":1657,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1659},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[360],[1658],"0.2.3",[55],{"id":1661,"slug":1662,"identity":1663,"label":1664,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1665,"versions":1666,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1668},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[408],[1667],"0.4.2",[55],{"id":1670,"slug":1671,"identity":1672,"label":1673,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1674,"versions":1675,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1677},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[349],[1676],"2.22",[55],{"id":1679,"slug":1680,"identity":1681,"label":1682,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1683,"versions":1684,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1686},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[360],[1685],"2.11.7",[55],{"id":1688,"slug":1689,"identity":1690,"label":1691,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1692,"versions":1693,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1695},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[360],[1694],"2.33.2",[55],{"id":1697,"slug":1698,"identity":1699,"label":1700,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1701,"versions":1702,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1703},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[360],[1117],[55],{"id":1705,"slug":1706,"identity":1707,"label":1708,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1709,"versions":1710,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1712},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[408],[1711],"2.9.0.post0",[55],{"id":1714,"slug":1715,"identity":1716,"label":1717,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1718,"versions":1719,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1721},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[360],[1720],"2025.2",[55],{"id":1723,"slug":1724,"identity":1725,"label":1726,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1727,"versions":1728,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1730},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[1729],"310",[55],{"id":1732,"slug":1733,"identity":1734,"label":1735,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1736,"versions":1737,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1739},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[360],[1738],"6.0.2",[55],{"id":1741,"slug":1742,"identity":1743,"label":1744,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1745,"versions":1746,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1748},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[408],[1747],"27.0.0",[55],{"id":1750,"slug":1751,"identity":1752,"label":1753,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1754,"versions":1755,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1757},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[360],[1756],"6.2.0",[55],{"id":1759,"slug":1760,"identity":1761,"label":1762,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1763,"versions":1764,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1766},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[360],[1765],"0.36.2",[55],{"id":1768,"slug":1769,"identity":1770,"label":1771,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1772,"versions":1774,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1776},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1773,408],"Apache-2.0 AND CNRI-Python",[1775],"2024.11.6",[55],{"id":1778,"slug":1779,"identity":1780,"label":1781,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1782,"versions":1783,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1785},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[360],[1784],"14.0.0",[55],{"id":1787,"slug":1788,"identity":1789,"label":1790,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1791,"versions":1792,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1793},"package:pypi:rouge-score","rouge-score-2585384e","pypi:rouge-score","rouge-score",[408],[1330],[55],{"id":1795,"slug":1796,"identity":1797,"label":1798,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1799,"versions":1800,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1802},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[360],[1801],"0.26.0",[55],{"id":1804,"slug":1805,"identity":1806,"label":1807,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1808,"versions":1809,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1811},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[337],[1810],"4.9.1",[55],{"id":1813,"slug":1814,"identity":1815,"label":1816,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1817,"versions":1818,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1819},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[408],[720],[55],{"id":1821,"slug":1822,"identity":1823,"label":1824,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1825,"versions":1826,"dossier":46,"occurrenceCount":571,"directOccurrenceCount":38,"evidenceFiles":1829},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[408],[1827,1828],"1.15.3","1.16.0",[55],{"id":1831,"slug":1832,"identity":1833,"label":1834,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1835,"versions":1836,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1838},"package:pypi:six","six-3c3888bd","pypi:six","six",[360],[1837],"1.17.0",[55],{"id":1840,"slug":1841,"identity":1842,"label":1843,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1844,"versions":1845,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1847},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[349],[1846],"5.0.2",[55],{"id":1849,"slug":1850,"identity":1851,"label":1852,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1853,"versions":1855,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1857},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[1854],"Apache-2.0 OR MIT",[1856],"1.3.1",[55],{"id":1859,"slug":1860,"identity":1861,"label":1862,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1863,"versions":1864,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1866},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[360],[1865],"2.0.41",[55],{"id":1868,"slug":1869,"identity":1870,"label":1871,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1872,"versions":1873,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1874},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[360],[1490],[55],{"id":1876,"slug":1877,"identity":1878,"label":1879,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1880,"versions":1881,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1883},"package:pypi:standardwebhooks","standardwebhooks-9da13670","pypi:standardwebhooks","standardwebhooks",[360],[1882],"1.0.0",[55],{"id":1885,"slug":1886,"identity":1887,"label":1888,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1889,"versions":1890,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1892},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[408],[1891],"1.14.0",[55],{"id":1894,"slug":1895,"identity":1896,"label":1897,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1898,"versions":1899,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1901},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[337],[1900],"9.1.2",[55],{"id":1903,"slug":1904,"identity":1905,"label":1906,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1907,"versions":1908,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1909},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[349],[381],[55],{"id":1911,"slug":1912,"identity":1913,"label":1914,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1915,"versions":1916,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1917},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[360],[857],[55],{"id":1919,"slug":1920,"identity":1921,"label":1922,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1923,"versions":1924,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1926},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[408],[1925],"5.14.3",[55],{"id":1928,"slug":1929,"identity":1930,"label":1931,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1932,"versions":1933,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1935},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[360],[1934],"3.3.1",[55],{"id":1937,"slug":1938,"identity":1939,"label":1940,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1941,"versions":1942,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1944},"package:pypi:types-deprecated","types-deprecated-ad3f077c","pypi:types-deprecated","types-deprecated",[337],[1943],"1.2.15.20250304",[55],{"id":1946,"slug":1947,"identity":1948,"label":1949,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1950,"versions":1951,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1953},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[337],[1952],"2.9.0.20250516",[55],{"id":1955,"slug":1956,"identity":1957,"label":1958,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1959,"versions":1960,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1962},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[747,408],[1961],"4.14.0",[55],{"id":1964,"slug":1965,"identity":1966,"label":1967,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1968,"versions":1969,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1971},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[360],[1970],"0.4.1",[55],{"id":1973,"slug":1974,"identity":1975,"label":1976,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1977,"versions":1978,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1979},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[337],[1720],[55],{"id":1981,"slug":1982,"identity":1983,"label":1984,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1985,"versions":1986,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1988},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[349],[1987],"0.35.0",[55],{"id":1990,"slug":1991,"identity":1992,"label":1993,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":1994,"versions":1996,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1997},"package:pypi:waitress","waitress-e47950e2","pypi:waitress","waitress",[1995],"ZPL-2.1",[1303],[55],{"id":1999,"slug":2000,"identity":2001,"label":2002,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":2003,"versions":2004,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2006},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[360],[2005],"0.2.13",[55],{"id":2008,"slug":2009,"identity":2010,"label":2011,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":2012,"versions":2013,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2015},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[408],[2014],"1.17.2",[55],{"id":2017,"slug":2018,"identity":2019,"label":2020,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":2021,"versions":2022,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2024},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[408],[2023],"3.5.0",[55],{"id":2026,"slug":2027,"identity":2028,"label":2029,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":2030,"versions":2031,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2033},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[337],[2032],"1.20.1",[55],{"id":2035,"slug":2036,"identity":2037,"label":2038,"aiRelevant":46,"provider":346,"advisoryCount":38,"licenseExpressions":2039,"versions":2040,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":2042},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[360],[2041],"3.23.0",[55],[2044,2083,2105,2137,2168,2200,2231,2264,2296,2321,2353,2380,2423,2449,2475,2503,2526,2555,2585,2621,2655,2681,2701,2719,2745,2770,2804,2844,2882,2904,2929,2954,2980,3003,3041,3076,3105,3132,3151,3185,3209,3235,3260,3290,3313,3340,3355,3378,3401,3424,3450,3477,3501,3532,3561,3586,3617,3656,3685,3707,3725,3774,3798,3837,3869,3901,3926,3950,3973,4007,4037,4057,4081,4106,4138,4166,4223,4255,4279,4311,4336,4370,4395,4423,4457,4483,4507,4538,4565,4589,4612,4643,4662,4685,4718,4743,4770,4793,4816,4844,4872,4905,4932,4954,4976,5000,5020,5050,5082,5105,5127,5152,5181,5207,5229,5256,5280,5299,5321,5351,5372,5415,5438,5455,5477,5505,5527,5554,5579,5603,5618,5644,5668,5690,5717,5751,5771,5807,5833,5865,5892,5929,5956,5982,6007,6036,6063,6077,6107,6127,6159,6186,6206,6232,6260,6284,6311,6337,6360,6383,6413,6438,6460,6511,6539,6591,6614,6647,6681,6706,6729,6761,6780,6799,6826,6846,6873,6893,6910,6929,6946,6967,6983,6998,7015,7030,7047,7064,7081,7094,7107,7120,7133,7146,7159,7172,7185,7203,7220,7236,7258,7271,7304,7323,7340,7357,7375,7398,7427,7454,7475,7495,7515,7528],{"id":107,"slug":2045,"dossier":46,"summary":2046,"aliases":2047,"sourceIds":2050,"published":2051,"modified":2052,"checkedAt":7,"severity":2053,"references":2057,"versionKeys":2081,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2048,2049],"CVE-2024-39689","PYSEC-2024-230",[107,2049],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2054],{"type":2055,"score":2056},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2058,2061,2063,2066,2069,2072,2075,2077,2079],{"type":2059,"url":2060},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2059,"url":2062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2064,"url":2065},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2067,"url":2068},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2070,"url":2071},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2073,"url":2074},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2070,"url":2076},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2059,"url":2078},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2059,"url":2080},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2082],"pypi:certifi@2024.6.2",{"id":108,"slug":2084,"dossier":46,"summary":2085,"aliases":2086,"sourceIds":2087,"published":2088,"modified":2089,"checkedAt":7,"severity":2090,"references":2094,"versionKeys":2103,"packageCount":32,"repositoryCount":571},"ghsa-27jp-wm6q-gp25-5ce03f88","sqlparse: formatting list of tuples leads to denial of service",[],[108],"2026-02-13T16:16:11Z","2026-02-19T02:59:07.083683Z",[2091],{"type":2092,"score":2093},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2095,2097,2099,2101],{"type":2070,"url":2096},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fsecurity\u002Fadvisories\u002FGHSA-27jp-wm6q-gp25",{"type":2070,"url":2098},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Fcommit\u002F40ed3aa958657fa4a82055927fa9de70ab903360",{"type":2067,"url":2100},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse",{"type":2070,"url":2102},"https:\u002F\u002Fgithub.com\u002Fandialbrecht\u002Fsqlparse\u002Freleases\u002Ftag\u002F0.5.4",[2104],"pypi:sqlparse@0.5.3",{"id":109,"slug":2106,"dossier":46,"summary":2107,"aliases":2108,"sourceIds":2111,"published":2112,"modified":2113,"checkedAt":7,"severity":2114,"references":2117,"versionKeys":2129,"packageCount":32,"repositoryCount":358},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2109,2110],"CVE-2026-4372","PYSEC-2026-2289",[109,2110],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2115],{"type":2055,"score":2116},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2118,2120,2122,2124,2127],{"type":2059,"url":2119},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2064,"url":2121},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2067,"url":2123},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2125,"url":2126},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2059,"url":2128},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2130,2131,2132,2133,2134,2135,2136],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":110,"slug":2138,"dossier":46,"summary":2139,"aliases":2140,"sourceIds":2143,"published":2144,"modified":2145,"checkedAt":7,"severity":2146,"references":2151,"versionKeys":2162,"packageCount":32,"repositoryCount":503},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2141,2142],"CVE-2026-27199","PYSEC-2026-2320",[110,2142],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[2147,2149],{"type":2092,"score":2148},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2055,"score":2150},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2152,2154,2156,2158,2160],{"type":2059,"url":2153},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2059,"url":2155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2064,"url":2157},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2067,"url":2159},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2059,"url":2161},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2163,2164,2165,2166,2167],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":111,"slug":2169,"dossier":46,"summary":2170,"aliases":2171,"sourceIds":2174,"published":2175,"modified":2176,"checkedAt":7,"severity":2177,"references":2179,"versionKeys":2196,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2172,2173],"CVE-2025-54121","PYSEC-2026-1941",[111,2173],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2178],{"type":2055,"score":2150},[2180,2182,2184,2186,2188,2190,2192,2194],{"type":2070,"url":2181},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2059,"url":2183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2064,"url":2185},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2067,"url":2187},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2070,"url":2189},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2070,"url":2191},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2067,"url":2193},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2059,"url":2195},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2197,2198,2199],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":112,"slug":2201,"dossier":46,"summary":2202,"aliases":2203,"sourceIds":2206,"published":2207,"modified":2208,"checkedAt":7,"severity":2209,"references":2214,"versionKeys":2221,"packageCount":32,"repositoryCount":2230},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2204,2205],"CVE-2026-54279","PYSEC-2026-2112",[112,2205],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2210,2212],{"type":2092,"score":2211},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2055,"score":2213},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2215,2217,2219],{"type":2059,"url":2216},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2067,"url":2218},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2064,"url":2220},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2222,2223,2224,2225,2226,2227,2228,2229],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":113,"slug":2232,"dossier":46,"summary":2233,"aliases":2234,"sourceIds":2237,"published":2238,"modified":2239,"checkedAt":7,"severity":2240,"references":2243,"versionKeys":2263,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2235,2236],"CVE-2024-34069","PYSEC-2026-2043",[113,2236],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[2241],{"type":2055,"score":2242},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2244,2246,2248,2250,2251,2253,2255,2257,2259,2261],{"type":2070,"url":2245},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2059,"url":2247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2070,"url":2249},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2067,"url":2159},{"type":2070,"url":2252},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2070,"url":2254},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2070,"url":2256},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2070,"url":2258},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2067,"url":2260},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2059,"url":2262},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2163],{"id":114,"slug":2265,"dossier":46,"summary":2266,"aliases":2267,"sourceIds":2270,"published":2271,"modified":2272,"checkedAt":7,"severity":2273,"references":2276,"versionKeys":2293,"packageCount":32,"repositoryCount":522},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2268,2269],"CVE-2026-44307","PYSEC-2026-2617",[114,2269],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2274],{"type":2092,"score":2275},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2277,2279,2281,2283,2285,2287,2289,2291],{"type":2070,"url":2278},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2059,"url":2280},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2070,"url":2282},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2070,"url":2284},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2067,"url":2286},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2070,"url":2288},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2067,"url":2290},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2059,"url":2292},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2294,2295],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":115,"slug":2297,"dossier":46,"summary":2298,"aliases":2299,"sourceIds":2302,"published":2303,"modified":2304,"checkedAt":7,"severity":2305,"references":2310,"versionKeys":2320,"packageCount":32,"repositoryCount":2230},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2300,2301],"CVE-2026-34514","PYSEC-2026-2096",[115,2301],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2306,2308],{"type":2092,"score":2307},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2055,"score":2309},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2311,2313,2315,2317,2318],{"type":2064,"url":2312},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2059,"url":2314},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2064,"url":2316},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2067,"url":2218},{"type":2059,"url":2319},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2222,2223,2224,2225,2226,2227,2228,2229],{"id":116,"slug":2322,"dossier":91,"summary":2323,"aliases":2324,"sourceIds":2327,"published":2328,"modified":2329,"checkedAt":7,"severity":2330,"references":2333,"versionKeys":2346,"packageCount":32,"repositoryCount":2352},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2325,2326],"CVE-2025-66471","PYSEC-2026-1994",[116,2326],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2331],{"type":2092,"score":2332},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2334,2336,2338,2340,2342,2344],{"type":2070,"url":2335},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2059,"url":2337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2064,"url":2339},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2067,"url":2341},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2067,"url":2343},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2059,"url":2345},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2347,2348,2349,2350,2351],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":117,"slug":2354,"dossier":46,"summary":2355,"aliases":2356,"sourceIds":2359,"published":2360,"modified":2361,"checkedAt":7,"severity":2362,"references":2365,"versionKeys":2378,"packageCount":32,"repositoryCount":571},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[2357,2358],"CVE-2025-30167","PYSEC-2026-1477",[117,2358],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[2363],{"type":2055,"score":2364},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2366,2368,2370,2372,2374,2376],{"type":2070,"url":2367},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":2059,"url":2369},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":2070,"url":2371},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":2067,"url":2373},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":2067,"url":2375},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":2059,"url":2377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[2379],"pypi:jupyter-core@5.7.2",{"id":118,"slug":2381,"dossier":46,"summary":2382,"aliases":2383,"sourceIds":2387,"published":2388,"modified":2389,"checkedAt":7,"severity":2390,"references":2397,"versionKeys":2419,"packageCount":32,"repositoryCount":552},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2384,2385,2386],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[118,2386],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2391,2393,2395],{"type":2055,"score":2392},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2092,"score":2394},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2055,"score":2396},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2398,2400,2403,2405,2407,2409,2411,2413,2415,2417],{"type":2059,"url":2399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2401,"url":2402},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2401,"url":2404},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2070,"url":2406},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2067,"url":2408},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2070,"url":2410},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2401,"url":2412},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2059,"url":2414},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2059,"url":2416},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2059,"url":2418},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2420,2421,2422],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":119,"slug":2424,"dossier":46,"summary":2425,"aliases":2426,"sourceIds":2429,"published":2430,"modified":2431,"checkedAt":7,"severity":2432,"references":2434,"versionKeys":2448,"packageCount":32,"repositoryCount":571},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2427,2428],"CVE-2025-3933","PYSEC-2026-1977",[119,2428],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2433],{"type":2055,"score":2150},[2435,2437,2439,2441,2442,2444,2446],{"type":2059,"url":2436},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2070,"url":2438},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2070,"url":2440},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2067,"url":2123},{"type":2070,"url":2443},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2067,"url":2445},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2059,"url":2447},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2130,2131],{"id":120,"slug":2450,"dossier":91,"summary":2451,"aliases":2452,"sourceIds":2455,"published":2456,"modified":2457,"checkedAt":7,"severity":2458,"references":2461,"versionKeys":2474,"packageCount":32,"repositoryCount":2352},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2453,2454],"CVE-2026-21441","PYSEC-2026-1996",[120,2454],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2459,2460],{"type":2055,"score":2213},{"type":2092,"score":2332},[2462,2464,2466,2468,2469,2471,2472],{"type":2070,"url":2463},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2059,"url":2465},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2064,"url":2467},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2067,"url":2341},{"type":2070,"url":2470},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2067,"url":2343},{"type":2059,"url":2473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2347,2348,2349,2350,2351],{"id":121,"slug":2476,"dossier":46,"summary":2477,"aliases":2478,"sourceIds":2481,"published":2482,"modified":2483,"checkedAt":7,"severity":2484,"references":2487,"versionKeys":2500,"packageCount":32,"repositoryCount":522},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[2479,2480],"CVE-2026-54911","PYSEC-2026-2294",[121,2480],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[2485],{"type":2055,"score":2486},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2488,2490,2492,2494,2496,2498],{"type":2064,"url":2489},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":2059,"url":2491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":2064,"url":2493},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":2070,"url":2495},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":2067,"url":2497},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":2059,"url":2499},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[2501,2502],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",{"id":122,"slug":2504,"dossier":46,"summary":2505,"aliases":2506,"sourceIds":2509,"published":2510,"modified":2511,"checkedAt":7,"severity":2512,"references":2516,"versionKeys":2525,"packageCount":32,"repositoryCount":2230},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2507,2508],"CVE-2026-34517","PYSEC-2026-2099",[122,2508],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[2513,2515],{"type":2092,"score":2514},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2055,"score":2150},[2517,2519,2521,2523,2524],{"type":2064,"url":2518},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2059,"url":2520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2064,"url":2522},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":123,"slug":2527,"dossier":46,"summary":2528,"aliases":2529,"sourceIds":2532,"published":2533,"modified":2534,"checkedAt":7,"severity":2535,"references":2538,"versionKeys":2549,"packageCount":32,"repositoryCount":503},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[2530,2531],"CVE-2026-49853","PYSEC-2026-3387",[123,2531],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[2536],{"type":2055,"score":2537},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[2539,2541,2543,2545,2547],{"type":2070,"url":2540},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2067,"url":2542},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":2067,"url":2544},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":2059,"url":2546},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2059,"url":2548},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[2550,2551,2552,2553,2554],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":124,"slug":2556,"dossier":46,"summary":2557,"aliases":2558,"sourceIds":2562,"published":2563,"modified":2564,"checkedAt":7,"severity":2565,"references":2568,"versionKeys":2581,"packageCount":32,"repositoryCount":552},"ghsa-42h5-h8qh-vv9v-4d35a1ef","MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem",[2559,2560,2561],"BIT-mlflow-2026-2614","CVE-2026-2614","PYSEC-2026-2654",[124,2561],"2026-05-11T21:31:35Z","2026-07-13T16:42:45.636199436Z",[2566],{"type":2055,"score":2567},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2569,2571,2573,2575,2577,2579],{"type":2059,"url":2570},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2614",{"type":2070,"url":2572},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6e801f4259d96804c73107315b24cef0f6aa115a",{"type":2067,"url":2574},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow",{"type":2070,"url":2576},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F19380271-3fbf-4beb-987e-6fd7069c55e6",{"type":2067,"url":2578},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmlflow",{"type":2059,"url":2580},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-42h5-h8qh-vv9v",[2582,2583,2584],"pypi:mlflow@3.1.1","pypi:mlflow@3.4.0","pypi:mlflow@3.8.1",{"id":125,"slug":2586,"dossier":46,"summary":2587,"aliases":2588,"sourceIds":2591,"published":2592,"modified":2593,"checkedAt":7,"severity":2594,"references":2597,"versionKeys":2618,"packageCount":32,"repositoryCount":552},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[2589,2590],"CVE-2026-33236","PYSEC-2026-2237",[125,2590],"2026-03-19T12:42:42Z","2026-07-13T07:26:54.270611709Z",[2595],{"type":2055,"score":2596},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2598,2600,2602,2604,2606,2608,2610,2612,2614,2616],{"type":2125,"url":2599},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":2059,"url":2601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":2064,"url":2603},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":2067,"url":2605},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":2070,"url":2607},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":2070,"url":2609},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":2059,"url":2611},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2059,"url":2613},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2059,"url":2615},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2401,"url":2617},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[2619,2620],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":126,"slug":2622,"dossier":46,"summary":2623,"aliases":2624,"sourceIds":2628,"published":2629,"modified":2630,"checkedAt":7,"severity":2631,"references":2636,"versionKeys":2654,"packageCount":32,"repositoryCount":552},"ghsa-46r5-x6jq-v8g6-fda1ffbe","MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint",[2625,2626,2627],"BIT-mlflow-2026-33866","CVE-2026-33866","PYSEC-2026-94",[126,2627],"2026-04-07T13:16:47Z","2026-06-10T17:02:20.749690187Z",[2632,2634],{"type":2055,"score":2633},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2092,"score":2635},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2637,2639,2641,2643,2645,2647,2648,2650,2652],{"type":2059,"url":2638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33866",{"type":2064,"url":2640},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21708",{"type":2070,"url":2642},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F005b959cacda05d1423356cfcbd9ebeda8ff96a7",{"type":2125,"url":2644},"https:\u002F\u002Fafine.com\u002Fblogs\u002Fattacking-mlflow-how-ml-artifacts-become-attack-vectors",{"type":2070,"url":2646},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865",{"type":2067,"url":2574},{"type":2070,"url":2649},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-94.yaml",{"type":2059,"url":2651},"https:\u002F\u002Fcert.pl\u002Fen\u002Fposts\u002F2026\u002F04\u002FCVE-2026-33865\u002F",{"type":2059,"url":2653},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-46r5-x6jq-v8g6",[2582,2583,2584],{"id":127,"slug":2656,"dossier":46,"summary":2657,"aliases":2658,"sourceIds":2661,"published":2662,"modified":2663,"checkedAt":7,"severity":2664,"references":2667,"versionKeys":2680,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2659,2660],"CVE-2025-50182","PYSEC-2026-1997",[127,2660],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2665],{"type":2055,"score":2666},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2668,2670,2672,2674,2675,2677,2678],{"type":2070,"url":2669},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2059,"url":2671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2064,"url":2673},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2067,"url":2341},{"type":2070,"url":2676},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2067,"url":2343},{"type":2059,"url":2679},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2347,2348,2349,2350],{"id":128,"slug":2682,"dossier":46,"summary":2683,"aliases":2684,"sourceIds":2687,"published":2688,"modified":2689,"checkedAt":7,"severity":2690,"references":2694,"versionKeys":2700,"packageCount":32,"repositoryCount":2230},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2685,2686],"CVE-2026-54273","PYSEC-2026-2107",[128,2686],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2691,2693],{"type":2092,"score":2692},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2055,"score":2213},[2695,2697,2699],{"type":2059,"url":2696},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2064,"url":2698},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2067,"url":2218},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":129,"slug":2702,"dossier":46,"summary":2703,"aliases":2704,"sourceIds":2707,"published":2708,"modified":2709,"checkedAt":7,"severity":2710,"references":2714,"versionKeys":2718,"packageCount":32,"repositoryCount":2230},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2705,2706],"CVE-2026-54275","PYSEC-2026-237",[129,2706],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2711,2713],{"type":2092,"score":2712},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2055,"score":2213},[2715,2717],{"type":2059,"url":2716},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2067,"url":2218},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":130,"slug":2720,"dossier":46,"summary":2721,"aliases":2722,"sourceIds":2725,"published":2726,"modified":2727,"checkedAt":7,"severity":2728,"references":2731,"versionKeys":2744,"packageCount":32,"repositoryCount":571},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2723,2724],"CVE-2025-6921","PYSEC-2026-1980",[130,2724],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2729],{"type":2055,"score":2730},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2732,2734,2736,2738,2739,2741,2742],{"type":2059,"url":2733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2070,"url":2735},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2070,"url":2737},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2067,"url":2123},{"type":2070,"url":2740},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2067,"url":2445},{"type":2059,"url":2743},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2130,2131],{"id":131,"slug":2746,"dossier":46,"summary":2747,"aliases":2748,"sourceIds":2752,"published":2753,"modified":2754,"checkedAt":7,"severity":2755,"references":2758,"versionKeys":2769,"packageCount":32,"repositoryCount":32},"ghsa-4x5p-f36r-mxxr-f02b9eff","mlflow Creates of Temporary File in Directory with Insecure Permissions",[2749,2750,2751],"BIT-mlflow-2025-10279","CVE-2025-10279","PYSEC-2026-1639",[131,2751],"2026-02-02T12:31:14Z","2026-07-07T17:56:10.135090160Z",[2756],{"type":2055,"score":2757},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2759,2761,2763,2764,2766,2767],{"type":2059,"url":2760},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-10279",{"type":2070,"url":2762},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a",{"type":2067,"url":2574},{"type":2070,"url":2765},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F01d3b81e-13d1-43aa-b91a-443aec68bdc8",{"type":2067,"url":2578},{"type":2059,"url":2768},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4x5p-f36r-mxxr",[2582],{"id":132,"slug":2771,"dossier":46,"summary":2772,"aliases":2773,"sourceIds":2776,"published":2777,"modified":2778,"checkedAt":7,"severity":2779,"references":2782,"versionKeys":2801,"packageCount":32,"repositoryCount":552},"ghsa-4xh5-x5gv-qwph-bdb101cb","pip's fallback tar extraction doesn't check symbolic links point to extraction directory",[2774,2775],"CVE-2025-8869","PYSEC-2026-1795",[132,2775],"2025-09-24T15:31:14Z","2026-07-07T17:57:29.434622137Z",[2780],{"type":2092,"score":2781},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2783,2785,2787,2789,2791,2793,2795,2797,2799],{"type":2059,"url":2784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8869",{"type":2070,"url":2786},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13550",{"type":2064,"url":2788},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Ff2b92314da012b9fffa36b3f3e67748a37ef464a",{"type":2067,"url":2790},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip",{"type":2070,"url":2792},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00028.html",{"type":2070,"url":2794},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FIF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN",{"type":2070,"url":2796},"https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Fnews\u002F#v25-2",{"type":2067,"url":2798},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpip",{"type":2059,"url":2800},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xh5-x5gv-qwph",[2802,2803],"pypi:pip@22.0.2","pypi:pip@25.1.1",{"id":133,"slug":2805,"dossier":46,"summary":2806,"aliases":2807,"sourceIds":2810,"published":2811,"modified":2812,"checkedAt":7,"severity":2813,"references":2818,"versionKeys":2839,"packageCount":32,"repositoryCount":34},"ghsa-4xpc-pv4p-pm3w-c72dbf83","LiteLLM: Authentication Bypass via Host Header Injection",[2808,2809],"CVE-2026-49468","PYSEC-2026-388",[133,2809],"2026-06-16T23:38:26Z","2026-07-18T17:30:30.617013067Z",[2814,2816],{"type":2055,"score":2815},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2092,"score":2817},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[2819,2821,2823,2825,2827,2829,2831,2833,2835,2837],{"type":2070,"url":2820},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2059,"url":2822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49468",{"type":2070,"url":2824},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49468",{"type":2070,"url":2826},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491520",{"type":2067,"url":2828},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm",{"type":2070,"url":2830},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.84.0",{"type":2059,"url":2832},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2070,"url":2834},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flitellm\u002FPYSEC-2026-388.yaml",{"type":2067,"url":2836},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flitellm",{"type":2070,"url":2838},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49468.json",[2840,2841,2842,2843],"pypi:litellm@1.53.7","pypi:litellm@1.67.4.dev1","pypi:litellm@1.68.0","pypi:litellm@1.73.6.post1",{"id":134,"slug":2845,"dossier":91,"summary":2846,"aliases":2847,"sourceIds":2850,"published":2851,"modified":2852,"checkedAt":7,"severity":2853,"references":2856,"versionKeys":2879,"packageCount":32,"repositoryCount":2352},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2848,2849],"CVE-2026-4539","PYSEC-2026-2987",[134,2849],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2854,2855],{"type":2055,"score":2392},{"type":2092,"score":2394},[2857,2859,2861,2863,2865,2867,2869,2871,2873,2875,2877],{"type":2059,"url":2858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2070,"url":2860},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2070,"url":2862},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2070,"url":2864},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2067,"url":2866},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2070,"url":2868},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2070,"url":2870},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2070,"url":2872},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2070,"url":2874},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2067,"url":2876},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2059,"url":2878},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2880,2881],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":135,"slug":2883,"dossier":46,"summary":2884,"aliases":2885,"sourceIds":2888,"published":2889,"modified":2890,"checkedAt":7,"severity":2891,"references":2894,"versionKeys":2903,"packageCount":32,"repositoryCount":34},"ghsa-53mr-6c8q-9789-034179e7","LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint",[2886,2887],"CVE-2026-35029","PYSEC-2026-2597",[135,2887],"2026-04-03T21:59:31Z","2026-07-13T16:43:01.087747831Z",[2892],{"type":2092,"score":2893},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:L\u002FSI:L\u002FSA:N",[2895,2897,2899,2900,2901],{"type":2070,"url":2896},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",{"type":2059,"url":2898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35029",{"type":2067,"url":2828},{"type":2067,"url":2836},{"type":2059,"url":2902},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",[2840,2841,2842,2843],{"id":136,"slug":2905,"dossier":46,"summary":2906,"aliases":2907,"sourceIds":2911,"published":2912,"modified":2913,"checkedAt":7,"severity":2914,"references":2918,"versionKeys":2928,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[2908,2909,2910],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[136,2910],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[2915,2917],{"type":2092,"score":2916},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2055,"score":2815},[2919,2921,2923,2925,2927],{"type":2059,"url":2920},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2059,"url":2922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2070,"url":2924},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2070,"url":2926},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2067,"url":2408},[2420],{"id":137,"slug":2930,"dossier":46,"summary":2931,"aliases":2932,"sourceIds":2935,"published":2936,"modified":2937,"checkedAt":7,"severity":2938,"references":2941,"versionKeys":2953,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[2933,2934],"CVE-2025-69226","PYSEC-2026-1097",[137,2934],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[2939],{"type":2092,"score":2940},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2942,2944,2946,2948,2949,2951],{"type":2070,"url":2943},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2059,"url":2945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2064,"url":2947},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2067,"url":2218},{"type":2067,"url":2950},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2059,"url":2952},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2222,2223,2224,2225,2226,2227,2228],{"id":138,"slug":2955,"dossier":46,"summary":2956,"aliases":2957,"sourceIds":2960,"published":2961,"modified":2962,"checkedAt":7,"severity":2963,"references":2966,"versionKeys":2979,"packageCount":32,"repositoryCount":552},"ghsa-58qw-9mgm-455v-d690efaf","pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files",[2958,2959],"CVE-2026-3219","PYSEC-2026-2875",[138,2959],"2026-04-20T18:31:48Z","2026-07-13T16:43:17.083270258Z",[2964],{"type":2092,"score":2965},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2967,2969,2971,2973,2974,2976,2977],{"type":2059,"url":2968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3219",{"type":2070,"url":2970},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F13867",{"type":2070,"url":2972},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13870",{"type":2067,"url":2790},{"type":2070,"url":2975},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FQAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ",{"type":2067,"url":2798},{"type":2059,"url":2978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58qw-9mgm-455v",[2802,2803],{"id":139,"slug":2981,"dossier":46,"summary":2982,"aliases":2983,"sourceIds":2986,"published":2987,"modified":2988,"checkedAt":7,"severity":2989,"references":2991,"versionKeys":3002,"packageCount":32,"repositoryCount":571},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[2984,2985],"CVE-2025-6638","PYSEC-2026-1981",[139,2985],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[2990],{"type":2055,"score":2730},[2992,2994,2995,2996,2997,2999,3000],{"type":2059,"url":2993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2070,"url":2735},{"type":2070,"url":2737},{"type":2067,"url":2123},{"type":2070,"url":2998},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2067,"url":2445},{"type":2059,"url":3001},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2130,2131],{"id":140,"slug":3004,"dossier":46,"summary":3005,"aliases":3006,"sourceIds":3010,"published":3011,"modified":3012,"checkedAt":7,"severity":3013,"references":3020,"versionKeys":3040,"packageCount":32,"repositoryCount":552},"ghsa-5qmp-p3c4-72qj-0f202987","MLflow: Deterministic sampling in dataset digest enables predictable collisions",[3007,3008,3009],"BIT-mlflow-2026-10803","CVE-2026-10803","PYSEC-2026-195",[140,3009],"2026-06-04T12:16:24.440Z","2026-07-15T18:11:16.191752741Z",[3014,3016,3018],{"type":2055,"score":3015},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2092,"score":3017},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2092,"score":3019},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3021,3023,3025,3027,3028,3030,3032,3034,3036,3038],{"type":2059,"url":3022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10803",{"type":2401,"url":3024},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fissues\u002F22419",{"type":2401,"url":3026},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F22420",{"type":2067,"url":2574},{"type":2070,"url":3029},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-195.yaml",{"type":2059,"url":3031},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10803",{"type":2059,"url":3033},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831462",{"type":2059,"url":3035},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252",{"type":2401,"url":3037},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368252\u002Fcti",{"type":2070,"url":3039},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002F",[2582,2583,2584],{"id":141,"slug":3042,"dossier":46,"summary":3043,"aliases":3044,"sourceIds":3048,"published":3049,"modified":3050,"checkedAt":7,"severity":3051,"references":3056,"versionKeys":3073,"packageCount":32,"repositoryCount":571},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3045,3046,3047],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[141,3047],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3052,3054],{"type":2092,"score":3053},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2055,"score":3055},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3057,3059,3061,3063,3065,3067,3069,3071],{"type":2125,"url":3058},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2059,"url":3060},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2401,"url":3062},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2064,"url":3064},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2070,"url":3066},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2067,"url":3068},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2070,"url":3070},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2073,"url":3072},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3074,3075],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":142,"slug":3077,"dossier":46,"summary":3078,"aliases":3079,"sourceIds":3083,"published":3084,"modified":3085,"checkedAt":7,"severity":3086,"references":3090,"versionKeys":3099,"packageCount":32,"repositoryCount":104},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3080,3081,3082],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[142,3082],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3087,3088],{"type":2055,"score":2396},{"type":2092,"score":3089},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3091,3093,3095,3097],{"type":2059,"url":3092},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2059,"url":3094},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2067,"url":3096},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2059,"url":3098},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3100,3101,3102,3103,3104],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":143,"slug":3106,"dossier":46,"summary":3107,"aliases":3108,"sourceIds":3111,"published":3112,"modified":3113,"checkedAt":7,"severity":3114,"references":3120,"versionKeys":3131,"packageCount":32,"repositoryCount":2230},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[3109,3110],"CVE-2026-34520","PYSEC-2026-2102",[143,3110],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[3115,3117,3118],{"type":2055,"score":3116},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2092,"score":2307},{"type":2092,"score":3119},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3121,3123,3125,3127,3128,3129],{"type":2064,"url":3122},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2059,"url":3124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2064,"url":3126},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2067,"url":2218},{"type":2059,"url":2319},{"type":2070,"url":3130},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2222,2223,2224,2225,2226,2227,2228,2229],{"id":144,"slug":3133,"dossier":46,"summary":3134,"aliases":3135,"sourceIds":3138,"published":3139,"modified":3140,"checkedAt":7,"severity":3141,"references":3144,"versionKeys":3150,"packageCount":32,"repositoryCount":2230},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[3136,3137],"CVE-2026-54277","PYSEC-2026-2110",[144,3137],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[3142,3143],{"type":2092,"score":2692},{"type":2055,"score":2213},[3145,3147,3149],{"type":2059,"url":3146},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2064,"url":3148},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2067,"url":2218},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":145,"slug":3152,"dossier":46,"summary":3153,"aliases":3154,"sourceIds":3157,"published":3158,"modified":3159,"checkedAt":7,"severity":3160,"references":3162,"versionKeys":3183,"packageCount":32,"repositoryCount":65},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[3155,3156],"CVE-2026-23490","PYSEC-2026-1810",[145,3156],"2026-01-16T19:19:25Z","2026-07-07T17:56:27.705413895Z",[3161],{"type":2055,"score":2213},[3163,3165,3167,3169,3171,3173,3175,3177,3179,3181],{"type":2070,"url":3164},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2059,"url":3166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2070,"url":3168},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2070,"url":3170},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2067,"url":3172},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2070,"url":3174},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2070,"url":3176},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2070,"url":3178},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",{"type":2067,"url":3180},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyasn1",{"type":2059,"url":3182},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",[3184],"pypi:pyasn1@0.6.1",{"id":146,"slug":3186,"dossier":46,"summary":3187,"aliases":3188,"sourceIds":3192,"published":3193,"modified":3194,"checkedAt":7,"severity":3195,"references":3198,"versionKeys":3208,"packageCount":32,"repositoryCount":552},"ghsa-65h7-c7c4-mghx-fc09466d","MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability",[3189,3190,3191],"BIT-mlflow-2026-2393","CVE-2026-2393","PYSEC-2026-2219",[146,3191],"2026-05-11T18:16:31.500Z","2026-07-13T16:45:08.114491424Z",[3196],{"type":2055,"score":3197},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3199,3201,3203,3204,3206],{"type":2059,"url":3200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2393",{"type":2064,"url":3202},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F64aa0ab7207f9c649b59ba1a5f40d82196817389",{"type":2067,"url":2574},{"type":2125,"url":3205},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F04ef100d-06b5-4a70-95b1-b7be23aa8150",{"type":2059,"url":3207},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-65h7-c7c4-mghx",[2582,2583,2584],{"id":147,"slug":3210,"dossier":91,"summary":3211,"aliases":3212,"sourceIds":3215,"published":3216,"modified":3217,"checkedAt":7,"severity":3218,"references":3222,"versionKeys":3231,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3213,3214],"CVE-2026-45409","PYSEC-2026-215",[147,3214],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3219,3220],{"type":2055,"score":2150},{"type":2092,"score":3221},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3223,3225,3227,3229],{"type":2059,"url":3224},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2059,"url":3226},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2067,"url":3228},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2070,"url":3230},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3232,3233,3234],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":148,"slug":3236,"dossier":46,"summary":3237,"aliases":3238,"sourceIds":3241,"published":3242,"modified":3243,"checkedAt":7,"severity":3244,"references":3249,"versionKeys":3259,"packageCount":32,"repositoryCount":552},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[3239,3240],"CVE-2026-0847","PYSEC-2026-98",[148,3240],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[3245,3247],{"type":2055,"score":3246},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":2055,"score":3248},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3250,3252,3253,3255,3257],{"type":2059,"url":3251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":2067,"url":2605},{"type":2070,"url":3254},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":2125,"url":3256},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":2059,"url":3258},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[2619,2620],{"id":149,"slug":3261,"dossier":46,"summary":3262,"aliases":3263,"sourceIds":3266,"published":3267,"modified":3268,"checkedAt":7,"severity":3269,"references":3274,"versionKeys":3285,"packageCount":32,"repositoryCount":503},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[3264,3265],"CVE-2026-27205","PYSEC-2026-2151",[149,3265],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[3270,3272],{"type":2092,"score":3271},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2055,"score":3273},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3275,3277,3279,3281,3283],{"type":2059,"url":3276},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":2059,"url":3278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":2064,"url":3280},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":2067,"url":3282},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":2059,"url":3284},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[3286,3287,3288,3289],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":150,"slug":3291,"dossier":46,"summary":3292,"aliases":3293,"sourceIds":3296,"published":3297,"modified":3298,"checkedAt":7,"severity":3299,"references":3301,"versionKeys":3312,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[3294,3295],"CVE-2025-69224","PYSEC-2026-1099",[150,3295],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[3300],{"type":2092,"score":2307},[3302,3304,3306,3308,3309,3310],{"type":2070,"url":3303},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2059,"url":3305},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2064,"url":3307},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":3311},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2222,2223,2224,2225,2226,2227,2228],{"id":151,"slug":3314,"dossier":46,"summary":3315,"aliases":3316,"sourceIds":3319,"published":3320,"modified":3321,"checkedAt":7,"severity":3322,"references":3327,"versionKeys":3339,"packageCount":32,"repositoryCount":358},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3317,3318],"CVE-2026-1839","PYSEC-2026-2288",[151,3318],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[3323,3325],{"type":2055,"score":3324},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2055,"score":3326},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3328,3330,3332,3333,3335,3337],{"type":2059,"url":3329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2064,"url":3331},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2067,"url":2123},{"type":2070,"url":3334},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2125,"url":3336},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2059,"url":3338},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2130,2131,2132,2133,2134,2135,2136],{"id":152,"slug":3341,"dossier":46,"summary":3342,"aliases":3343,"sourceIds":3344,"published":3345,"modified":3346,"checkedAt":7,"severity":3347,"references":3350,"versionKeys":3354,"packageCount":32,"repositoryCount":34},"ghsa-69x8-hrgq-fjj8-13befa28","LiteLLM: Password hash exposure and pass-the-hash authentication bypass",[],[152],"2026-04-08T00:04:12Z","2026-04-17T01:29:14.845270912Z",[3348],{"type":2092,"score":3349},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3351,3353],{"type":2070,"url":3352},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-69x8-hrgq-fjj8",{"type":2067,"url":2828},[2840,2841,2842,2843],{"id":153,"slug":3356,"dossier":46,"summary":3357,"aliases":3358,"sourceIds":3361,"published":3362,"modified":3363,"checkedAt":7,"severity":3364,"references":3366,"versionKeys":3377,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3359,3360],"CVE-2025-69228","PYSEC-2026-1100",[153,3360],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[3365],{"type":2092,"score":2692},[3367,3369,3371,3373,3374,3375],{"type":2070,"url":3368},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2059,"url":3370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2064,"url":3372},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":3376},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2222,2223,2224,2225,2226,2227,2228],{"id":154,"slug":3379,"dossier":46,"summary":3380,"aliases":3381,"sourceIds":3384,"published":3385,"modified":3386,"checkedAt":7,"severity":3387,"references":3389,"versionKeys":3400,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[3382,3383],"CVE-2025-69223","PYSEC-2026-1101",[154,3383],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[3388],{"type":2055,"score":2213},[3390,3392,3394,3396,3397,3398],{"type":2070,"url":3391},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2059,"url":3393},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2064,"url":3395},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":3399},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2222,2223,2224,2225,2226,2227,2228],{"id":155,"slug":3402,"dossier":46,"summary":3403,"aliases":3404,"sourceIds":3407,"published":3408,"modified":3409,"checkedAt":7,"severity":3410,"references":3412,"versionKeys":3423,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3405,3406],"CVE-2024-12720","PYSEC-2026-1982",[155,3406],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3411],{"type":2055,"score":2730},[3413,3415,3417,3418,3420,3421],{"type":2059,"url":3414},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2070,"url":3416},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2067,"url":2123},{"type":2070,"url":3419},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2067,"url":2445},{"type":2059,"url":3422},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2130],{"id":156,"slug":3425,"dossier":46,"summary":3426,"aliases":3427,"sourceIds":3430,"published":3431,"modified":3432,"checkedAt":7,"severity":3433,"references":3436,"versionKeys":3449,"packageCount":32,"repositoryCount":552},"ghsa-6vgw-5pg2-w6jp-57c7d3f5","pip Path Traversal vulnerability",[3428,3429],"CVE-2026-1703","PYSEC-2026-1796",[156,3429],"2026-02-02T15:30:34Z","2026-07-07T17:56:16.480954738Z",[3434],{"type":2092,"score":3435},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3437,3439,3441,3443,3444,3446,3447],{"type":2059,"url":3438},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1703",{"type":2070,"url":3440},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13777",{"type":2070,"url":3442},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F8e227a9be4faa9594e05d02ca05a413a2a4e7735",{"type":2067,"url":2790},{"type":2070,"url":3445},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FWIEA34D4TABF2UNQJAOMXKCICSPBE2DJ",{"type":2067,"url":2798},{"type":2059,"url":3448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6vgw-5pg2-w6jp",[2802,2803],{"id":157,"slug":3451,"dossier":46,"summary":3452,"aliases":3453,"sourceIds":3456,"published":3457,"modified":3458,"checkedAt":7,"severity":3459,"references":3464,"versionKeys":3473,"packageCount":32,"repositoryCount":34},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[3454,3455],"CVE-2026-44243","PYSEC-2026-2162",[157,3455],"2026-05-06T19:38:48Z","2026-07-13T07:26:30.186818349Z",[3460,3462],{"type":2055,"score":3461},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2092,"score":3463},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3465,3467,3469,3471],{"type":2125,"url":3466},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":2059,"url":3468},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":2067,"url":3470},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":2064,"url":3472},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[3474,3475,3476],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",{"id":158,"slug":3478,"dossier":46,"summary":3479,"aliases":3480,"sourceIds":3484,"published":3485,"modified":3486,"checkedAt":7,"severity":3487,"references":3490,"versionKeys":3500,"packageCount":32,"repositoryCount":552},"ghsa-75cm-x2w3-8mgf-213b4d71","MLflow: unauthenticated access to certain FastAPI routes",[3481,3482,3483],"BIT-mlflow-2026-2652","CVE-2026-2652","PYSEC-2026-2221",[158,3483],"2026-05-15T03:16:23.127Z","2026-07-13T16:45:09.381556404Z",[3488],{"type":2055,"score":3489},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[3491,3493,3495,3496,3498],{"type":2059,"url":3492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2652",{"type":2064,"url":3494},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fbb62e773263c14e9ba4d1a82fe72d0de2442c6aa",{"type":2067,"url":2574},{"type":2125,"url":3497},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F5aeff5f0-49c7-4180-b5cb-c9a046f16756",{"type":2059,"url":3499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-75cm-x2w3-8mgf",[2582,2583,2584],{"id":159,"slug":3502,"dossier":46,"summary":3503,"aliases":3504,"sourceIds":3507,"published":3508,"modified":3509,"checkedAt":7,"severity":3510,"references":3513,"versionKeys":3526,"packageCount":32,"repositoryCount":503},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[3505,3506],"CVE-2025-66034","PYSEC-2026-1389",[159,3506],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[3511],{"type":2055,"score":3512},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[3514,3516,3518,3520,3522,3524],{"type":2070,"url":3515},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2059,"url":3517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2070,"url":3519},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2067,"url":3521},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2067,"url":3523},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2059,"url":3525},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[3527,3528,3529,3530,3531],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":160,"slug":3533,"dossier":46,"summary":3534,"aliases":3535,"sourceIds":3539,"published":3540,"modified":3541,"checkedAt":7,"severity":3542,"references":3548,"versionKeys":3560,"packageCount":32,"repositoryCount":503},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[3536,3537,3538],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[160,3537,3538],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[3543,3545,3547],{"type":2055,"score":3544},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":2055,"score":3546},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2055,"score":2309},[3549,3551,3553,3554,3556,3558],{"type":2059,"url":3550},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":2070,"url":3552},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":2067,"url":2542},{"type":2070,"url":3555},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":2059,"url":3557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":2059,"url":3559},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[2550,2551,2552,2553],{"id":161,"slug":3562,"dossier":46,"summary":3563,"aliases":3564,"sourceIds":3567,"published":3568,"modified":3569,"checkedAt":7,"severity":3570,"references":3572,"versionKeys":3585,"packageCount":32,"repositoryCount":571},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[3565,3566],"CVE-2025-47287","PYSEC-2026-1974",[161,3566],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[3571],{"type":2055,"score":2213},[3573,3575,3577,3579,3580,3582,3583],{"type":2070,"url":3574},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":2059,"url":3576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":2070,"url":3578},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":2067,"url":2542},{"type":2070,"url":3581},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":2067,"url":2544},{"type":2059,"url":3584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[2550],{"id":162,"slug":3587,"dossier":46,"summary":3588,"aliases":3589,"sourceIds":3592,"published":3593,"modified":3594,"checkedAt":7,"severity":3595,"references":3597,"versionKeys":3614,"packageCount":32,"repositoryCount":522},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3590,3591],"CVE-2025-62727","PYSEC-2026-1942",[162,3591],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3596],{"type":2055,"score":2213},[3598,3600,3602,3604,3607,3609,3611,3612],{"type":2070,"url":3599},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2059,"url":3601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2064,"url":3603},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3605,"url":3606},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2067,"url":3608},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2070,"url":3610},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2067,"url":2193},{"type":2059,"url":3613},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2198,2199,3615,3616],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":163,"slug":3618,"dossier":46,"summary":3619,"aliases":3620,"sourceIds":3623,"published":3624,"modified":3625,"checkedAt":7,"severity":3626,"references":3629,"versionKeys":3646,"packageCount":32,"repositoryCount":104},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3621,3622],"CVE-2026-0994","PYSEC-2026-1805",[163,3622],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3627],{"type":2092,"score":3628},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3630,3632,3634,3636,3638,3640,3642,3644],{"type":2059,"url":3631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2070,"url":3633},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2070,"url":3635},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2070,"url":3637},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2070,"url":3639},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2067,"url":3641},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2067,"url":3643},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2059,"url":3645},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3647,3648,3649,3650,3651,3652,3653,3654,3655],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":164,"slug":3657,"dossier":46,"summary":3658,"aliases":3659,"sourceIds":3662,"published":3663,"modified":3664,"checkedAt":7,"severity":3665,"references":3668,"versionKeys":3684,"packageCount":32,"repositoryCount":552},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[3660,3661],"CVE-2025-14009","PYSEC-2026-96",[164,3661],"2026-02-18T18:24:19.410Z","2026-06-10T17:02:23.646726882Z",[3666],{"type":2055,"score":3667},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3669,3671,3673,3675,3676,3678,3680,3682],{"type":2059,"url":3670},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":2070,"url":3672},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":2070,"url":3674},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":2067,"url":2605},{"type":2070,"url":3677},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":2070,"url":3679},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":2125,"url":3681},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":2059,"url":3683},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[2619,2620],{"id":165,"slug":3686,"dossier":46,"summary":3687,"aliases":3688,"sourceIds":3691,"published":3692,"modified":3693,"checkedAt":7,"severity":3694,"references":3697,"versionKeys":3706,"packageCount":32,"repositoryCount":552},"ghsa-7qhf-v65m-g5f3-235f2d72","mlflow: FastAPI job endpoints under `\u002Fajax-api\u002F3.0\u002Fjobs\u002F*` are not protected by authentication or authorization",[3689,3690],"CVE-2026-0545","PYSEC-2026-419",[165,3690],"2026-04-03T18:31:23Z","2026-07-01T20:22:58.301401Z",[3695],{"type":2055,"score":3696},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3698,3700,3701,3703,3704],{"type":2059,"url":3699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0545",{"type":2067,"url":2574},{"type":2070,"url":3702},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fb2e5b028-9541-4d29-8703-a76f1a3734d8",{"type":2067,"url":2578},{"type":2059,"url":3705},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7qhf-v65m-g5f3",[2582,2583,2584],{"id":166,"slug":3708,"dossier":46,"summary":3709,"aliases":3710,"sourceIds":3713,"published":3714,"modified":3715,"checkedAt":7,"severity":3716,"references":3718,"versionKeys":3722,"packageCount":32,"repositoryCount":358},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[3711,3712],"CVE-2026-54283","PYSEC-2026-249",[166,3712],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[3717],{"type":2055,"score":2213},[3719,3721],{"type":2059,"url":3720},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2067,"url":3608},[2197,2198,2199,3615,3616,3723,3724],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":167,"slug":3726,"dossier":46,"summary":3727,"aliases":3728,"sourceIds":3732,"published":3733,"modified":3734,"checkedAt":7,"severity":3735,"references":3737,"versionKeys":3773,"packageCount":32,"repositoryCount":358},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[3729,3730,3731],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[167,3730],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[3736],{"type":2055,"score":2486},[3738,3740,3742,3744,3746,3748,3750,3752,3754,3756,3757,3759,3762,3764,3765,3767,3769,3771],{"type":2059,"url":3739},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2059,"url":3741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2064,"url":3743},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2070,"url":3745},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2073,"url":3747},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2070,"url":3749},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2070,"url":3751},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2070,"url":3753},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2070,"url":3755},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2067,"url":3608},{"type":2070,"url":3758},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":3760,"url":3761},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2070,"url":3763},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2070,"url":2615},{"type":2070,"url":3766},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":2070,"url":3768},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":2073,"url":3770},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2059,"url":3772},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2197,2198,2199,3615,3616,3723,3724],{"id":168,"slug":3775,"dossier":46,"summary":3776,"aliases":3777,"sourceIds":3780,"published":3781,"modified":3782,"checkedAt":7,"severity":3783,"references":3786,"versionKeys":3797,"packageCount":32,"repositoryCount":522},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[3778,3779],"CVE-2026-21860","PYSEC-2026-2044",[168,3779],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[3784,3785],{"type":2055,"score":2150},{"type":2092,"score":2148},[3787,3789,3791,3793,3794,3795],{"type":2070,"url":3788},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2059,"url":3790},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2070,"url":3792},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2067,"url":2159},{"type":2067,"url":2260},{"type":2059,"url":3796},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2163,2164,2165,2166],{"id":169,"slug":3799,"dossier":46,"summary":3800,"aliases":3801,"sourceIds":3805,"published":3806,"modified":3807,"checkedAt":7,"severity":3808,"references":3812,"versionKeys":3834,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[3802,3803,3804],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[169,3804],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[3809,3810],{"type":2055,"score":2392},{"type":2092,"score":3811},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3813,3815,3817,3819,3821,3823,3824,3826,3828,3830,3832],{"type":2059,"url":3814},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2070,"url":3816},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2070,"url":3818},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2070,"url":3820},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2070,"url":3822},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2067,"url":2408},{"type":2070,"url":3825},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2070,"url":3827},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2070,"url":3829},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2067,"url":3831},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2059,"url":3833},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2420,2421,2422,3835,3836],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":170,"slug":3838,"dossier":46,"summary":3839,"aliases":3840,"sourceIds":3844,"published":3845,"modified":3846,"checkedAt":7,"severity":3847,"references":3852,"versionKeys":3868,"packageCount":32,"repositoryCount":552},"ghsa-8c7q-86fq-vvmh-be4df9cc","MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled",[3841,3842,3843],"BIT-mlflow-2026-2651","CVE-2026-2651","PYSEC-2026-2220",[170,3843],"2026-05-25T07:16:15.100Z","2026-07-14T05:30:20.380332392Z",[3848,3850],{"type":2055,"score":3849},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"type":2055,"score":3851},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3853,3855,3857,3859,3861,3862,3864,3866],{"type":2059,"url":3854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2651",{"type":2064,"url":3856},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fd7290811d8f3c95366d80109424edc1fb1ad966f",{"type":2070,"url":3858},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-2651",{"type":2401,"url":3860},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481117",{"type":2067,"url":2574},{"type":2125,"url":3863},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F65beb119-d3e0-4e03-af2f-fa98f78f83dc",{"type":2070,"url":3865},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-2651.json",{"type":2059,"url":3867},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8c7q-86fq-vvmh",[2582,2583,2584],{"id":171,"slug":3870,"dossier":46,"summary":3871,"aliases":3872,"sourceIds":3875,"published":3876,"modified":3877,"checkedAt":7,"severity":3878,"references":3881,"versionKeys":3900,"packageCount":32,"repositoryCount":552},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[3873,3874],"CVE-2025-4565","PYSEC-2026-1806",[171,3874],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[3879],{"type":2092,"score":3880},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3882,3884,3886,3888,3890,3891,3893,3895,3897,3898],{"type":2070,"url":3883},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2070,"url":3885},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2059,"url":3887},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2070,"url":3889},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2067,"url":3641},{"type":2070,"url":3892},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2070,"url":3894},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2070,"url":3896},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2067,"url":3643},{"type":2059,"url":3899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3647,3649,3650],{"id":172,"slug":3902,"dossier":46,"summary":3903,"aliases":3904,"sourceIds":3907,"published":3908,"modified":3909,"checkedAt":7,"severity":3910,"references":3912,"versionKeys":3925,"packageCount":32,"repositoryCount":571},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3905,3906],"CVE-2025-5197","PYSEC-2026-1983",[172,3906],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[3911],{"type":2055,"score":2730},[3913,3915,3917,3919,3920,3922,3923],{"type":2059,"url":3914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2070,"url":3916},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2070,"url":3918},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2067,"url":2123},{"type":2070,"url":3921},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2067,"url":2445},{"type":2059,"url":3924},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2130,2131],{"id":173,"slug":3927,"dossier":46,"summary":3928,"aliases":3929,"sourceIds":3932,"published":3933,"modified":3934,"checkedAt":7,"severity":3935,"references":3938,"versionKeys":3949,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[3930,3931],"CVE-2025-53643","PYSEC-2026-1104",[173,3931],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[3936],{"type":2092,"score":3937},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3939,3941,3943,3945,3946,3947],{"type":2070,"url":3940},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2059,"url":3942},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2064,"url":3944},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":3948},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2222,2223,2224,2225],{"id":174,"slug":3951,"dossier":46,"summary":3952,"aliases":3953,"sourceIds":3956,"published":3957,"modified":3958,"checkedAt":7,"severity":3959,"references":3963,"versionKeys":3972,"packageCount":32,"repositoryCount":2230},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[3954,3955],"CVE-2026-34518","PYSEC-2026-2100",[174,3955],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[3960,3962],{"type":2055,"score":3961},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2092,"score":2940},[3964,3966,3968,3970,3971],{"type":2064,"url":3965},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2059,"url":3967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2064,"url":3969},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":175,"slug":3974,"dossier":46,"summary":3975,"aliases":3976,"sourceIds":3979,"published":3980,"modified":3981,"checkedAt":7,"severity":3982,"references":3985,"versionKeys":4004,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[3977,3978],"CVE-2024-47081","PYSEC-2026-1872",[175,3978],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[3983],{"type":2055,"score":3984},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3986,3988,3990,3992,3994,3996,3998,4000,4002],{"type":2070,"url":3987},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2059,"url":3989},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2070,"url":3991},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2064,"url":3993},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2067,"url":3995},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2070,"url":3997},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2070,"url":3999},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2067,"url":4001},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2059,"url":4003},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[4005,4006],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":176,"slug":4008,"dossier":46,"summary":4009,"aliases":4010,"sourceIds":4013,"published":4014,"modified":4015,"checkedAt":7,"severity":4016,"references":4019,"versionKeys":4036,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4011,4012],"CVE-2024-35195","PYSEC-2026-1873",[176,4012],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[4017],{"type":2055,"score":4018},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4020,4022,4024,4026,4028,4029,4031,4033,4034],{"type":2070,"url":4021},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2059,"url":4023},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2070,"url":4025},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2064,"url":4027},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2067,"url":3995},{"type":2070,"url":4030},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2070,"url":4032},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2067,"url":4001},{"type":2059,"url":4035},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4005],{"id":177,"slug":4038,"dossier":46,"summary":4039,"aliases":4040,"sourceIds":4043,"published":4044,"modified":4045,"checkedAt":7,"severity":4046,"references":4050,"versionKeys":4056,"packageCount":32,"repositoryCount":2230},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[4041,4042],"CVE-2026-54280","PYSEC-2026-2113",[177,4042],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[4047,4049],{"type":2092,"score":4048},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2055,"score":2213},[4051,4053,4055],{"type":2059,"url":4052},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2064,"url":4054},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2067,"url":2218},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":178,"slug":4058,"dossier":46,"summary":4059,"aliases":4060,"sourceIds":4063,"published":4064,"modified":4065,"checkedAt":7,"severity":4066,"references":4070,"versionKeys":4080,"packageCount":32,"repositoryCount":522},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[4061,4062],"CVE-2026-44660","PYSEC-2026-2293",[178,4062],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[4067,4068],{"type":2055,"score":2213},{"type":2092,"score":4069},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4071,4073,4075,4077,4078],{"type":2064,"url":4072},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":2059,"url":4074},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":2064,"url":4076},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":2067,"url":2497},{"type":2059,"url":4079},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[2501,2502],{"id":179,"slug":4082,"dossier":46,"summary":4083,"aliases":4084,"sourceIds":4087,"published":4088,"modified":4089,"checkedAt":7,"severity":4090,"references":4094,"versionKeys":4105,"packageCount":32,"repositoryCount":2230},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[4085,4086],"CVE-2026-34525","PYSEC-2026-2103",[179,4086],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[4091,4093],{"type":2092,"score":4092},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2055,"score":2309},[4095,4097,4099,4101,4103,4104],{"type":2064,"url":4096},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2059,"url":4098},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2064,"url":4100},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2064,"url":4102},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":180,"slug":4107,"dossier":46,"summary":4108,"aliases":4109,"sourceIds":4113,"published":4114,"modified":4115,"checkedAt":7,"severity":4116,"references":4121,"versionKeys":4137,"packageCount":32,"repositoryCount":571},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4110,4111,4112],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[180],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4117,4119],{"type":2055,"score":4118},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2092,"score":4120},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4122,4124,4126,4128,4129,4131,4133,4135],{"type":2059,"url":4123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2070,"url":4125},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2070,"url":4127},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2067,"url":2408},{"type":2070,"url":4130},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2070,"url":4132},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2070,"url":4134},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2070,"url":4136},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2420,2421],{"id":181,"slug":4139,"dossier":46,"summary":4140,"aliases":4141,"sourceIds":4144,"published":4145,"modified":4146,"checkedAt":7,"severity":4147,"references":4149,"versionKeys":4165,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[4142,4143],"CVE-2026-32875","PYSEC-2026-2292",[181,4143],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[4148],{"type":2055,"score":2213},[4150,4152,4154,4156,4158,4159,4161,4163],{"type":2125,"url":4151},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":2059,"url":4153},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":2401,"url":4155},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":2064,"url":4157},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":2067,"url":2497},{"type":2070,"url":4160},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":2070,"url":4162},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":2401,"url":4164},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[2501],{"id":182,"slug":4167,"dossier":46,"summary":4168,"aliases":4169,"sourceIds":4173,"published":4174,"modified":4175,"checkedAt":7,"severity":4176,"references":4180,"versionKeys":4218,"packageCount":32,"repositoryCount":4222},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4170,4171,4172],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[182,4172],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4177,4179],{"type":2092,"score":4178},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2055,"score":2213},[4181,4183,4185,4187,4189,4191,4192,4194,4196,4198,4199,4201,4203,4205,4206,4208,4210,4212,4214,4216],{"type":2070,"url":4182},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2059,"url":4184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2070,"url":4186},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2070,"url":4188},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2070,"url":4190},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2067,"url":3096},{"type":2070,"url":4193},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2070,"url":4195},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2070,"url":4197},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2059,"url":2611},{"type":2059,"url":4200},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2059,"url":4202},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2059,"url":4204},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2059,"url":2613},{"type":2059,"url":4207},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2059,"url":4209},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2059,"url":4211},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2059,"url":4213},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2059,"url":4215},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2059,"url":4217},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4219,4220,4221,3100,3101,3102,3103],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":183,"slug":4224,"dossier":46,"summary":4225,"aliases":4226,"sourceIds":4229,"published":4230,"modified":4231,"checkedAt":7,"severity":4232,"references":4235,"versionKeys":4252,"packageCount":32,"repositoryCount":571},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4227,4228],"CVE-2025-27516","PYSEC-2026-1471",[183,4228],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4233],{"type":2092,"score":4234},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4236,4238,4240,4242,4244,4246,4248,4250],{"type":2070,"url":4237},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2059,"url":4239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2064,"url":4241},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2067,"url":4243},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2070,"url":4245},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2070,"url":4247},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2067,"url":4249},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2059,"url":4251},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4253,4254],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":184,"slug":4256,"dossier":46,"summary":4257,"aliases":4258,"sourceIds":4261,"published":4262,"modified":4263,"checkedAt":7,"severity":4264,"references":4267,"versionKeys":4278,"packageCount":32,"repositoryCount":503},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[4259,4260],"CVE-2026-49854","PYSEC-2026-3388",[184,4260],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[4265],{"type":2055,"score":4266},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4268,4270,4271,4273,4274,4276],{"type":2070,"url":4269},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2067,"url":2542},{"type":2070,"url":4272},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":2067,"url":2544},{"type":2059,"url":4275},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2059,"url":4277},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[2550,2551,2552,2553,2554],{"id":185,"slug":4280,"dossier":46,"summary":4281,"aliases":4282,"sourceIds":4286,"published":4287,"modified":4288,"checkedAt":7,"severity":4289,"references":4294,"versionKeys":4310,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4283,4284,4285],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[185,4285],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4290,4292],{"type":2055,"score":4291},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2092,"score":4293},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4295,4297,4299,4301,4302,4304,4306,4308],{"type":2059,"url":4296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2070,"url":4298},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2070,"url":4300},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2067,"url":3068},{"type":2070,"url":4303},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2070,"url":4305},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2067,"url":4307},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2059,"url":4309},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3074],{"id":186,"slug":4312,"dossier":46,"summary":4313,"aliases":4314,"sourceIds":4318,"published":4319,"modified":4320,"checkedAt":7,"severity":4321,"references":4323,"versionKeys":4335,"packageCount":32,"repositoryCount":552},"ghsa-f2m9-wcf4-cwwx-e7c3cfb2","MLFlow Creates a Temporary File With Insecure Permissions",[4315,4316,4317],"BIT-mlflow-2026-4137","CVE-2026-4137","PYSEC-2026-2655",[186,4317],"2026-05-18T21:31:53Z","2026-07-13T16:43:33.416174314Z",[4322],{"type":2055,"score":2757},[4324,4326,4328,4329,4330,4332,4333],{"type":2059,"url":4325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4137",{"type":2070,"url":4327},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F1dcbb0c2fbd1f446c328830e601ca13a28219b8a",{"type":2059,"url":2768},{"type":2067,"url":2574},{"type":2070,"url":4331},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F648dc30b-76c7-4433-86b8-f43d926fd8d6",{"type":2067,"url":2578},{"type":2059,"url":4334},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2m9-wcf4-cwwx",[2582,2583,2584],{"id":187,"slug":4337,"dossier":46,"summary":4338,"aliases":4339,"sourceIds":4343,"published":4344,"modified":4345,"checkedAt":7,"severity":4346,"references":4351,"versionKeys":4369,"packageCount":32,"repositoryCount":571},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[4340,4341,4342],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[187],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[4347,4349],{"type":2055,"score":4348},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2092,"score":4350},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4352,4354,4356,4358,4360,4362,4363,4365,4367],{"type":2059,"url":4353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2070,"url":4355},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2070,"url":4357},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2070,"url":4359},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2070,"url":4361},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2067,"url":2408},{"type":2070,"url":4364},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2070,"url":4366},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2070,"url":4368},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2420,2421],{"id":188,"slug":4371,"dossier":46,"summary":4372,"aliases":4373,"sourceIds":4376,"published":4377,"modified":4378,"checkedAt":7,"severity":4379,"references":4383,"versionKeys":4394,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[4374,4375],"CVE-2024-47874","PYSEC-2026-1943",[188,4375],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[4380,4382],{"type":2055,"score":4381},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2092,"score":4069},[4384,4386,4388,4390,4391,4392],{"type":2070,"url":4385},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2059,"url":4387},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2064,"url":4389},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2067,"url":2187},{"type":2067,"url":2193},{"type":2059,"url":4393},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2197],{"id":189,"slug":4396,"dossier":46,"summary":4397,"aliases":4398,"sourceIds":4401,"published":4402,"modified":4403,"checkedAt":7,"severity":4404,"references":4407,"versionKeys":4422,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[4399,4400],"CVE-2024-49766","PYSEC-2026-2045",[189,4400],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[4405],{"type":2092,"score":4406},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4408,4410,4412,4414,4415,4417,4419,4420],{"type":2070,"url":4409},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2059,"url":4411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2064,"url":4413},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2067,"url":2159},{"type":2070,"url":4416},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2070,"url":4418},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2067,"url":2260},{"type":2059,"url":4421},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2163],{"id":190,"slug":4424,"dossier":46,"summary":4425,"aliases":4426,"sourceIds":4429,"published":4430,"modified":4431,"checkedAt":7,"severity":4432,"references":4437,"versionKeys":4456,"packageCount":32,"repositoryCount":358},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[4427,4428],"CVE-2026-5241","PYSEC-2026-2290",[190,4428],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[4433,4435],{"type":2055,"score":4434},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2055,"score":4436},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4438,4440,4442,4444,4445,4447,4449,4450,4452,4454],{"type":2059,"url":4439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2064,"url":4441},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2059,"url":4443},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2059,"url":2615},{"type":2070,"url":4446},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2401,"url":4448},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2067,"url":2123},{"type":2070,"url":4451},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2125,"url":4453},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2070,"url":4455},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[2130,2131,2132,2133,2134,2135,2136],{"id":191,"slug":4458,"dossier":46,"summary":4459,"aliases":4460,"sourceIds":4463,"published":4464,"modified":4465,"checkedAt":7,"severity":4466,"references":4469,"versionKeys":4482,"packageCount":32,"repositoryCount":32},"ghsa-fh2c-86xm-pm2x-ff1ac9ef","LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request",[4461,4462],"CVE-2024-8984","PYSEC-2026-1545",[191,4462],"2025-03-20T12:32:49Z","2026-07-07T17:56:56.562714379Z",[4467],{"type":2055,"score":4468},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[4470,4472,4474,4475,4477,4479,4480],{"type":2059,"url":4471},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8984",{"type":2070,"url":4473},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61",{"type":2067,"url":2828},{"type":2070,"url":4476},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fblob\u002F8c5ff150f6142608ffe968e4e68429f978fda187\u002Flitellm\u002Ftests\u002Ftest_spend_logs.py#L242",{"type":2070,"url":4478},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F554fc76b-3097-4223-b4cf-110b853e9355",{"type":2067,"url":2836},{"type":2059,"url":4481},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh2c-86xm-pm2x",[2840],{"id":192,"slug":4484,"dossier":46,"summary":4485,"aliases":4486,"sourceIds":4489,"published":4490,"modified":4491,"checkedAt":7,"severity":4492,"references":4495,"versionKeys":4506,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[4487,4488],"CVE-2025-69230","PYSEC-2026-1105",[192,4488],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[4493],{"type":2092,"score":4494},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4496,4498,4500,4502,4503,4504],{"type":2070,"url":4497},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2059,"url":4499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2064,"url":4501},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":4505},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2222,2223,2224,2225,2226,2227,2228],{"id":193,"slug":4508,"dossier":46,"summary":4509,"aliases":4510,"sourceIds":4514,"published":4515,"modified":4516,"checkedAt":7,"severity":4517,"references":4522,"versionKeys":4537,"packageCount":32,"repositoryCount":552},"ghsa-fh64-r2vc-xvhr-8b7ea4aa","MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface",[4511,4512,4513],"BIT-mlflow-2026-33865","CVE-2026-33865","PYSEC-2026-93",[193,4513],"2026-04-07T13:16:46.840Z","2026-06-10T17:02:20.155874108Z",[4518,4520],{"type":2055,"score":4519},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2092,"score":4521},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:P\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",[4523,4525,4527,4529,4530,4531,4532,4534,4535],{"type":2059,"url":4524},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33865",{"type":2064,"url":4526},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F21435",{"type":2070,"url":4528},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Faca4dd0ec88a12f7655155c224371280e9b45dda",{"type":2125,"url":2644},{"type":2070,"url":2646},{"type":2067,"url":2574},{"type":2070,"url":4533},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlflow\u002FPYSEC-2026-93.yaml",{"type":2059,"url":2651},{"type":2059,"url":4536},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh64-r2vc-xvhr",[2582,2583,2584],{"id":194,"slug":4539,"dossier":46,"summary":4540,"aliases":4541,"sourceIds":4545,"published":4546,"modified":4547,"checkedAt":7,"severity":4548,"references":4551,"versionKeys":4564,"packageCount":32,"repositoryCount":552},"ghsa-fhff-qmm8-h2fp-244bab2b","Arbitrary file write via tar traversal in mlflow",[4542,4543,4544],"BIT-mlflow-2025-15031","CVE-2025-15031","PYSEC-2026-2656",[194,4544],"2026-03-19T00:30:20Z","2026-07-13T16:43:21.433539748Z",[4549],{"type":2055,"score":4550},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4552,4554,4556,4557,4559,4561,4562],{"type":2059,"url":4553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15031",{"type":2070,"url":4555},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346",{"type":2067,"url":2574},{"type":2070,"url":4558},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Ffe4d9be330426904283401f1d2ed914238b6fc37\u002Fmlflow\u002Fpyfunc\u002Fdbconnect_artifact_cache.py#L140",{"type":2070,"url":4560},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F09856f77-f968-446f-a930-657d126efe4e",{"type":2067,"url":2578},{"type":2059,"url":4563},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fhff-qmm8-h2fp",[2582,2583,2584],{"id":195,"slug":4566,"dossier":46,"summary":4567,"aliases":4568,"sourceIds":4571,"published":4572,"modified":4573,"checkedAt":7,"severity":4574,"references":4577,"versionKeys":4588,"packageCount":32,"repositoryCount":32},"ghsa-fjcf-3j3r-78rp-3506a50a","LiteLLM Has an Improper Authorization Vulnerability",[4569,4570],"CVE-2025-0628","PYSEC-2026-1546",[195,4570],"2025-03-20T12:32:52Z","2026-07-07T17:56:36.033233141Z",[4575],{"type":2055,"score":4576},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4578,4580,4582,4583,4585,4586],{"type":2059,"url":4579},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-0628",{"type":2070,"url":4581},"https:\u002F\u002Fgithub.com\u002Fberriai\u002Flitellm\u002Fcommit\u002F566d9354aab4215091b2e51ad0333e948125fa1b",{"type":2067,"url":2828},{"type":2070,"url":4584},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6c0e2f75-2d03-42f9-9530-e16a973317fc",{"type":2067,"url":2836},{"type":2059,"url":4587},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjcf-3j3r-78rp",[2840],{"id":196,"slug":4590,"dossier":46,"summary":3403,"aliases":4591,"sourceIds":4594,"published":4595,"modified":4596,"checkedAt":7,"severity":4597,"references":4600,"versionKeys":4611,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[4592,4593],"CVE-2025-1194","PYSEC-2026-1984",[196,4593],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[4598],{"type":2055,"score":4599},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4601,4603,4605,4606,4608,4609],{"type":2059,"url":4602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2070,"url":4604},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2067,"url":2123},{"type":2070,"url":4607},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2067,"url":2445},{"type":2059,"url":4610},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2130],{"id":197,"slug":4613,"dossier":46,"summary":4614,"aliases":4615,"sourceIds":4619,"published":4620,"modified":4621,"checkedAt":7,"severity":4622,"references":4626,"versionKeys":4642,"packageCount":32,"repositoryCount":552},"ghsa-g35p-px32-whv6-8b66e41b","MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration",[4616,4617,4618],"BIT-mlflow-2026-4035","CVE-2026-4035","PYSEC-2026-2222",[197,4618],"2026-06-03T09:16:13.083Z","2026-07-13T16:45:04.877817766Z",[4623,4625],{"type":2055,"score":4624},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:L",{"type":2055,"score":2537},[4627,4629,4631,4633,4635,4636,4638,4640],{"type":2059,"url":4628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4035",{"type":2064,"url":4630},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F4a3f2f720cb4f058c9e0c5b883e0acc9ab64a7f3",{"type":2070,"url":4632},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-4035",{"type":2401,"url":4634},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484318",{"type":2067,"url":2574},{"type":2125,"url":4637},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff8e591a0-0f19-4910-b82e-16c9956f2233",{"type":2070,"url":4639},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-4035.json",{"type":2059,"url":4641},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g35p-px32-whv6",[2582,2583,2584],{"id":198,"slug":4644,"dossier":46,"summary":4645,"aliases":4646,"sourceIds":4649,"published":4650,"modified":4651,"checkedAt":7,"severity":4652,"references":4655,"versionKeys":4661,"packageCount":32,"repositoryCount":2230},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[4647,4648],"CVE-2026-54278","PYSEC-2026-2111",[198,4648],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[4653,4654],{"type":2092,"score":2692},{"type":2055,"score":2213},[4656,4658,4659],{"type":2059,"url":4657},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2067,"url":2218},{"type":2064,"url":4660},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2222,2223,2224,2225,2226,2227,2228,2229],{"id":199,"slug":4663,"dossier":46,"summary":4664,"aliases":4665,"sourceIds":4668,"published":4669,"modified":4670,"checkedAt":7,"severity":4671,"references":4673,"versionKeys":4684,"packageCount":32,"repositoryCount":552},"ghsa-g6pg-52vf-843h-da352526","MLFlow allows Tracing + Assessments Access",[4666,4667],"CVE-2025-15381","PYSEC-2026-2657",[199,4667],"2026-03-27T18:31:27Z","2026-07-13T16:43:42.935139106Z",[4672],{"type":2055,"score":4576},[4674,4676,4677,4679,4681,4682],{"type":2059,"url":4675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15381",{"type":2067,"url":2574},{"type":2070,"url":4678},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fblob\u002Fb569ebc74c14af593c326143bee2df44a5d59edf\u002Fmlflow\u002Fserver\u002Fauth\u002F__init__.py#L752",{"type":2070,"url":4680},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F149fb2f9-ef4b-4136-a25c-20563451904c",{"type":2067,"url":2578},{"type":2059,"url":4683},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6pg-52vf-843h",[2582,2583,2584],{"id":200,"slug":4686,"dossier":46,"summary":4687,"aliases":4688,"sourceIds":4691,"published":4692,"modified":4693,"checkedAt":7,"severity":4694,"references":4697,"versionKeys":4716,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[4689,4690],"CVE-2024-34062","PYSEC-2026-1976",[200,4690],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[4695],{"type":2055,"score":4696},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4698,4700,4702,4704,4706,4708,4710,4712,4714],{"type":2070,"url":4699},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2059,"url":4701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2070,"url":4703},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2067,"url":4705},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2070,"url":4707},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2070,"url":4709},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2070,"url":4711},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2067,"url":4713},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2059,"url":4715},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[4717],"pypi:tqdm@4.66.2",{"id":201,"slug":4719,"dossier":46,"summary":4720,"aliases":4721,"sourceIds":4724,"published":4725,"modified":4726,"checkedAt":7,"severity":4727,"references":4729,"versionKeys":4742,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[4722,4723],"CVE-2025-69229","PYSEC-2026-1106",[201,4723],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[4728],{"type":2092,"score":2692},[4730,4732,4734,4736,4738,4739,4740],{"type":2070,"url":4731},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2059,"url":4733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2070,"url":4735},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2070,"url":4737},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":4741},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2222,2223,2224,2225,2226,2227,2228],{"id":202,"slug":4744,"dossier":91,"summary":4745,"aliases":4746,"sourceIds":4749,"published":4750,"modified":4751,"checkedAt":7,"severity":4752,"references":4757,"versionKeys":4767,"packageCount":32,"repositoryCount":454},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[4747,4748],"CVE-2026-25645","PYSEC-2026-2275",[202,4748],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[4753,4755],{"type":2055,"score":4754},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2055,"score":4756},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4758,4760,4762,4764,4765],{"type":2059,"url":4759},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2059,"url":4761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2064,"url":4763},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2067,"url":3995},{"type":2059,"url":4766},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4005,4006,4768,4769],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":203,"slug":4771,"dossier":46,"summary":4772,"aliases":4773,"sourceIds":4776,"published":4777,"modified":4778,"checkedAt":7,"severity":4779,"references":4782,"versionKeys":4792,"packageCount":32,"repositoryCount":552},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[4774,4775],"CVE-2026-33230","PYSEC-2026-2235",[203,4775],"2026-03-18T20:23:33Z","2026-07-13T07:26:40.492720011Z",[4780],{"type":2055,"score":4781},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[4783,4785,4787,4789,4791],{"type":2125,"url":4784},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":2059,"url":4786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":2064,"url":4788},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":2064,"url":4790},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":2067,"url":2605},[2619,2620],{"id":204,"slug":4794,"dossier":91,"summary":4795,"aliases":4796,"sourceIds":4799,"published":4800,"modified":4801,"checkedAt":7,"severity":4802,"references":4804,"versionKeys":4815,"packageCount":32,"repositoryCount":2352},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[4797,4798],"CVE-2025-66418","PYSEC-2026-1998",[204,4798],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[4803],{"type":2092,"score":2332},[4805,4807,4809,4811,4812,4813],{"type":2070,"url":4806},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2059,"url":4808},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2064,"url":4810},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2067,"url":2341},{"type":2067,"url":2343},{"type":2059,"url":4814},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2347,2348,2349,2350,2351],{"id":205,"slug":4817,"dossier":46,"summary":4818,"aliases":4819,"sourceIds":4822,"published":4823,"modified":4824,"checkedAt":7,"severity":4825,"references":4828,"versionKeys":4843,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[4820,4821],"CVE-2024-56201","PYSEC-2026-1472",[205,4821],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[4826,4827],{"type":2055,"score":3055},{"type":2092,"score":4234},[4829,4831,4833,4835,4837,4838,4840,4841],{"type":2070,"url":4830},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2059,"url":4832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2070,"url":4834},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2064,"url":4836},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2067,"url":4243},{"type":2070,"url":4839},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2067,"url":4249},{"type":2059,"url":4842},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4253],{"id":206,"slug":4845,"dossier":46,"summary":4846,"aliases":4847,"sourceIds":4850,"published":4851,"modified":4852,"checkedAt":7,"severity":4853,"references":4856,"versionKeys":4871,"packageCount":32,"repositoryCount":571},"ghsa-gq3w-7jj3-x7gr-f80b7f86","MLflow Use of Default Password Authentication Bypass Vulnerability",[4848,4849],"CVE-2026-2635","PYSEC-2026-421",[206,4849],"2026-02-21T00:31:43Z","2026-07-01T20:22:58.325967Z",[4854],{"type":2055,"score":4855},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4857,4859,4861,4863,4864,4866,4868,4869],{"type":2059,"url":4858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2635",{"type":2070,"url":4860},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19260",{"type":2070,"url":4862},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F5bf2ec2bd4222a18d78631183ac7f6b752afe8a4",{"type":2067,"url":2574},{"type":2070,"url":4865},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Freleases\u002Ftag\u002Fv3.8.0rc0",{"type":2070,"url":4867},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-111",{"type":2067,"url":2578},{"type":2059,"url":4870},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gq3w-7jj3-x7gr",[2582,2583],{"id":207,"slug":4873,"dossier":46,"summary":4874,"aliases":4875,"sourceIds":4878,"published":4879,"modified":4880,"checkedAt":7,"severity":4881,"references":4883,"versionKeys":4904,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[4876,4877],"CVE-2024-34064","PYSEC-2026-1474",[207,4877],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[4882],{"type":2055,"score":3544},[4884,4886,4888,4890,4891,4893,4895,4897,4899,4901,4902],{"type":2070,"url":4885},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2059,"url":4887},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2064,"url":4889},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2067,"url":4243},{"type":2070,"url":4892},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2070,"url":4894},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2070,"url":4896},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2070,"url":4898},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2070,"url":4900},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2067,"url":4249},{"type":2059,"url":4903},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4253],{"id":208,"slug":4906,"dossier":46,"summary":4907,"aliases":4908,"sourceIds":4911,"published":4912,"modified":4913,"checkedAt":7,"severity":4914,"references":4917,"versionKeys":4931,"packageCount":32,"repositoryCount":552},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[4909,4910],"CVE-2026-0846","PYSEC-2026-97",[208,4910],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[4915,4916],{"type":2055,"score":3246},{"type":2055,"score":3248},[4918,4920,4922,4924,4925,4927,4929],{"type":2059,"url":4919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":2070,"url":4921},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":2070,"url":4923},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":2067,"url":2605},{"type":2070,"url":4926},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":2125,"url":4928},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":2059,"url":4930},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[2619,2620],{"id":209,"slug":4933,"dossier":46,"summary":4934,"aliases":4935,"sourceIds":4938,"published":4939,"modified":4940,"checkedAt":7,"severity":4941,"references":4944,"versionKeys":4953,"packageCount":32,"repositoryCount":2230},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[4936,4937],"CVE-2026-34513","PYSEC-2026-2095",[209,4937],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[4942,4943],{"type":2092,"score":2514},{"type":2055,"score":2213},[4945,4947,4949,4951,4952],{"type":2064,"url":4946},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2059,"url":4948},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2064,"url":4950},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":210,"slug":4955,"dossier":46,"summary":4956,"aliases":4957,"sourceIds":4960,"published":4961,"modified":4962,"checkedAt":7,"severity":4963,"references":4967,"versionKeys":4975,"packageCount":32,"repositoryCount":2230},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[4958,4959],"CVE-2026-47265","PYSEC-2026-2105",[210,4959],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[4964,4966],{"type":2092,"score":4965},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2055,"score":3248},[4968,4970,4972,4974],{"type":2064,"url":4969},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2059,"url":4971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2064,"url":4973},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2067,"url":2218},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":211,"slug":4977,"dossier":46,"summary":2139,"aliases":4978,"sourceIds":4981,"published":4982,"modified":4983,"checkedAt":7,"severity":4984,"references":4986,"versionKeys":4999,"packageCount":32,"repositoryCount":522},"ghsa-hgf8-39gv-g3f2-0469b394",[4979,4980],"CVE-2025-66221","PYSEC-2026-2046",[211,4980],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[4985],{"type":2092,"score":2148},[4987,4989,4991,4993,4994,4996,4997],{"type":2070,"url":4988},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2059,"url":4990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2070,"url":4992},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2067,"url":2159},{"type":2070,"url":4995},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2067,"url":2260},{"type":2059,"url":4998},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2163,2164,2165,2166],{"id":212,"slug":5001,"dossier":46,"summary":5002,"aliases":5003,"sourceIds":5006,"published":5007,"modified":5008,"checkedAt":7,"severity":5009,"references":5013,"versionKeys":5019,"packageCount":32,"repositoryCount":2230},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[5004,5005],"CVE-2026-54276","PYSEC-2026-2109",[212,5005],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[5010,5012],{"type":2092,"score":5011},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2055,"score":4781},[5014,5016,5018],{"type":2059,"url":5015},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2064,"url":5017},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2067,"url":2218},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":213,"slug":5021,"dossier":46,"summary":5022,"aliases":5023,"sourceIds":5026,"published":5027,"modified":5028,"checkedAt":7,"severity":5029,"references":5033,"versionKeys":5049,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[5024,5025],"CVE-2024-11394","PYSEC-2024-229",[213,5025],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[5030,5032],{"type":2055,"score":5031},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2055,"score":4291},[5034,5036,5038,5040,5041,5043,5045,5047],{"type":2059,"url":5035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2070,"url":5037},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2070,"url":5039},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2067,"url":2123},{"type":2070,"url":5042},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2070,"url":5044},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2059,"url":5046},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2059,"url":5048},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2130],{"id":214,"slug":5051,"dossier":46,"summary":5052,"aliases":5053,"sourceIds":5056,"published":5057,"modified":5058,"checkedAt":7,"severity":5059,"references":5063,"versionKeys":5081,"packageCount":32,"repositoryCount":2230},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[5054,5055],"CVE-2026-34993","PYSEC-2026-2104",[214,5055],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[5060,5062],{"type":2055,"score":5061},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2055,"score":2364},[5064,5066,5068,5070,5071,5073,5075,5077,5078,5079],{"type":2064,"url":5065},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2059,"url":5067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2064,"url":5069},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2067,"url":2218},{"type":2070,"url":5072},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2070,"url":5074},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2059,"url":5076},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2059,"url":4443},{"type":2059,"url":2615},{"type":2401,"url":5080},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2222,2223,2224,2225,2226,2227,2228,2229],{"id":215,"slug":5083,"dossier":46,"summary":5084,"aliases":5085,"sourceIds":5088,"published":5089,"modified":5090,"checkedAt":7,"severity":5091,"references":5093,"versionKeys":5104,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[5086,5087],"CVE-2025-69227","PYSEC-2026-1107",[215,5087],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[5092],{"type":2092,"score":2692},[5094,5096,5098,5100,5101,5102],{"type":2070,"url":5095},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2059,"url":5097},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2070,"url":5099},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":5103},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2222,2223,2224,2225,2226,2227,2228],{"id":216,"slug":5106,"dossier":46,"summary":5107,"aliases":5108,"sourceIds":5111,"published":5112,"modified":5113,"checkedAt":7,"severity":5114,"references":5117,"versionKeys":5126,"packageCount":32,"repositoryCount":34},"ghsa-jjhc-v7c2-5hh6-5d2c89e6","LiteLLM: Authentication bypass via OIDC userinfo cache key collision",[5109,5110],"CVE-2026-35030","PYSEC-2026-390",[216,5110],"2026-04-03T21:59:50Z","2026-07-01T20:22:56.400828Z",[5115],{"type":2092,"score":5116},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[5118,5120,5122,5123,5124],{"type":2070,"url":5119},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",{"type":2059,"url":5121},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35030",{"type":2067,"url":2828},{"type":2067,"url":2836},{"type":2059,"url":5125},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",[2840,2841,2842,2843],{"id":217,"slug":5128,"dossier":46,"summary":5129,"aliases":5130,"sourceIds":5133,"published":5134,"modified":5135,"checkedAt":7,"severity":5136,"references":5138,"versionKeys":5151,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[5131,5132],"CVE-2025-3264","PYSEC-2026-1985",[217,5132],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[5137],{"type":2055,"score":2730},[5139,5141,5143,5145,5146,5148,5149],{"type":2059,"url":5140},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2070,"url":5142},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2070,"url":5144},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2067,"url":2123},{"type":2070,"url":5147},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2067,"url":2445},{"type":2059,"url":5150},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2130],{"id":218,"slug":5153,"dossier":46,"summary":5154,"aliases":5155,"sourceIds":5158,"published":5159,"modified":5160,"checkedAt":7,"severity":5161,"references":5163,"versionKeys":5180,"packageCount":32,"repositoryCount":552},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[5156,5157],"CVE-2026-33231","PYSEC-2026-2236",[218,5157],"2026-03-19T12:42:20Z","2026-07-13T07:26:55.331693381Z",[5162],{"type":2055,"score":2213},[5164,5166,5168,5170,5171,5173,5175,5176,5177,5178],{"type":2125,"url":5165},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":2059,"url":5167},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":2064,"url":5169},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":2067,"url":2605},{"type":2070,"url":5172},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":2070,"url":5174},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":2059,"url":2613},{"type":2059,"url":5076},{"type":2059,"url":2615},{"type":2401,"url":5179},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[2619,2620],{"id":219,"slug":5182,"dossier":46,"summary":5183,"aliases":5184,"sourceIds":5187,"published":5188,"modified":5189,"checkedAt":7,"severity":5190,"references":5193,"versionKeys":5206,"packageCount":32,"repositoryCount":552},"ghsa-jp4c-xjxw-mgf9-e780c8d6","pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere",[5185,5186],"CVE-2026-6357","PYSEC-2026-2876",[219,5186],"2026-04-27T15:30:52Z","2026-07-13T16:43:01.316339792Z",[5191],{"type":2092,"score":5192},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5194,5196,5198,5200,5201,5203,5204],{"type":2059,"url":5195},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6357",{"type":2070,"url":5197},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13923",{"type":2070,"url":5199},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Fb369bfc96cc524e00c267e1693290e6599c36bad",{"type":2067,"url":2790},{"type":2070,"url":5202},"https:\u002F\u002Fichard26.github.io\u002Fblog\u002F2026\u002F04\u002Fwhats-new-in-pip-26.1\u002F#security-fixes",{"type":2067,"url":2798},{"type":2059,"url":5205},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp4c-xjxw-mgf9",[2802,2803],{"id":220,"slug":5208,"dossier":46,"summary":5209,"aliases":5210,"sourceIds":5213,"published":5214,"modified":5215,"checkedAt":7,"severity":5216,"references":5220,"versionKeys":5228,"packageCount":32,"repositoryCount":358},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[5211,5212],"CVE-2026-54282","PYSEC-2026-248",[220,5212],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[5217,5219],{"type":2055,"score":5218},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2055,"score":2309},[5221,5223,5225,5226],{"type":2059,"url":5222},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2059,"url":5224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2067,"url":3608},{"type":2070,"url":5227},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2197,2198,2199,3615,3616,3723,3724],{"id":221,"slug":5230,"dossier":46,"summary":5231,"aliases":5232,"sourceIds":5235,"published":5236,"modified":5237,"checkedAt":7,"severity":5238,"references":5241,"versionKeys":5255,"packageCount":32,"repositoryCount":65},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[5233,5234],"CVE-2026-30922","PYSEC-2026-2263",[221,5234],"2026-03-17T16:17:33Z","2026-07-13T07:26:46.403932690Z",[5239,5240],{"type":2055,"score":4468},{"type":2055,"score":2213},[5242,5244,5246,5248,5250,5251,5253],{"type":2125,"url":5243},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2059,"url":5245},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2064,"url":5247},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2070,"url":5249},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2067,"url":3172},{"type":2070,"url":5252},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.3",{"type":2070,"url":5254},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[3184],{"id":222,"slug":5257,"dossier":46,"summary":5258,"aliases":5259,"sourceIds":5262,"published":5263,"modified":5264,"checkedAt":7,"severity":5265,"references":5270,"versionKeys":5279,"packageCount":32,"repositoryCount":2230},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[5260,5261],"CVE-2026-34516","PYSEC-2026-2098",[222,5261],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[5266,5267,5268],{"type":2055,"score":2213},{"type":2092,"score":2692},{"type":2092,"score":5269},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5271,5273,5275,5277,5278],{"type":2064,"url":5272},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2059,"url":5274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2064,"url":5276},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":223,"slug":5281,"dossier":46,"summary":5282,"aliases":5283,"sourceIds":5286,"published":5287,"modified":5288,"checkedAt":7,"severity":5289,"references":5292,"versionKeys":5298,"packageCount":32,"repositoryCount":2230},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[5284,5285],"CVE-2026-50269","PYSEC-2026-2106",[223,5285],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[5290,5291],{"type":2092,"score":2307},{"type":2055,"score":2213},[5293,5295,5297],{"type":2059,"url":5294},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2064,"url":5296},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2067,"url":2218},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":224,"slug":5300,"dossier":46,"summary":5301,"aliases":5302,"sourceIds":5305,"published":5306,"modified":5307,"checkedAt":7,"severity":5308,"references":5311,"versionKeys":5319,"packageCount":32,"repositoryCount":552},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[5303,5304],"CVE-2026-44432","PYSEC-2026-142",[224,5304],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[5309,5310],{"type":2055,"score":2213},{"type":2092,"score":2332},[5312,5314,5316,5318],{"type":2059,"url":5313},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2059,"url":5315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2070,"url":5317},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2067,"url":2341},[5320],"pypi:urllib3@2.6.3",{"id":225,"slug":5322,"dossier":46,"summary":5323,"aliases":5324,"sourceIds":5327,"published":5328,"modified":5329,"checkedAt":7,"severity":5330,"references":5333,"versionKeys":5346,"packageCount":32,"repositoryCount":466},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[5325,5326],"CVE-2026-28684","PYSEC-2026-2270",[225,5326],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[5331],{"type":2055,"score":5332},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5334,5336,5338,5340,5342,5344],{"type":2064,"url":5335},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2059,"url":5337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2064,"url":5339},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2070,"url":5341},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2067,"url":5343},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2059,"url":5345},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[5347,5348,5349,5350],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":226,"slug":5352,"dossier":46,"summary":5353,"aliases":5354,"sourceIds":5357,"published":5358,"modified":5359,"checkedAt":7,"severity":5360,"references":5362,"versionKeys":5371,"packageCount":32,"repositoryCount":503},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[5355,5356],"CVE-2026-49855","PYSEC-2026-3389",[226,5356],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[5361],{"type":2055,"score":2213},[5363,5365,5366,5367,5369],{"type":2070,"url":5364},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2067,"url":2542},{"type":2067,"url":2544},{"type":2059,"url":5368},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2059,"url":5370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[2550,2551,2552,2553,2554],{"id":227,"slug":5373,"dossier":46,"summary":5374,"aliases":5375,"sourceIds":5378,"published":5379,"modified":5380,"checkedAt":7,"severity":5381,"references":5387,"versionKeys":5414,"packageCount":32,"repositoryCount":32},"ghsa-mq26-g339-26xf-ed024c7e","Command Injection in pip when used with Mercurial",[5376,5377],"CVE-2023-5752","PYSEC-2023-228",[227,5377],"2023-10-25T18:17:00Z","2026-06-10T17:01:27.606909654Z",[5382,5383,5385],{"type":2055,"score":4756},{"type":2092,"score":5384},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2055,"score":5386},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[5388,5390,5392,5394,5396,5397,5398,5400,5402,5404,5406,5408,5410,5412],{"type":2059,"url":5389},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-5752",{"type":2064,"url":5391},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F12306",{"type":2070,"url":5393},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F389cb799d0da9a840749fcd14878928467ed49b4",{"type":2070,"url":5395},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2023-228.yaml",{"type":2067,"url":2790},{"type":2070,"url":2792},{"type":2070,"url":5399},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F622OZXWG72ISQPLM5Y57YCVIMWHD4C3U",{"type":2070,"url":5401},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH",{"type":2070,"url":5403},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFXUVMJM25PUAZRQZBF54OFVKTY3MINPW",{"type":2070,"url":5405},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E",{"type":2070,"url":5407},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ",{"type":2070,"url":5409},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL",{"type":2059,"url":5411},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL\u002F",{"type":2059,"url":5413},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq26-g339-26xf",[2802],{"id":228,"slug":5416,"dossier":46,"summary":5417,"aliases":5418,"sourceIds":5421,"published":5422,"modified":5423,"checkedAt":7,"severity":5424,"references":5426,"versionKeys":5437,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[5419,5420],"CVE-2025-69225","PYSEC-2026-1109",[228,5420],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[5425],{"type":2092,"score":2307},[5427,5429,5431,5433,5434,5435],{"type":2070,"url":5428},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2059,"url":5430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2064,"url":5432},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2067,"url":2218},{"type":2067,"url":2950},{"type":2059,"url":5436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2222,2223,2224,2225,2226,2227,2228],{"id":229,"slug":5439,"dossier":46,"summary":5440,"aliases":5441,"sourceIds":5442,"published":5443,"modified":5444,"checkedAt":7,"severity":5445,"references":5448,"versionKeys":5454,"packageCount":32,"repositoryCount":34},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[],[229],"2026-05-08T23:19:02Z","2026-05-10T04:44:28.835923654Z",[5446],{"type":2055,"score":5447},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5449,5451,5453],{"type":2070,"url":5450},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":2059,"url":5452},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2067,"url":3470},[3474,3475,3476],{"id":230,"slug":5456,"dossier":46,"summary":5457,"aliases":5458,"sourceIds":5461,"published":5462,"modified":5463,"checkedAt":7,"severity":5464,"references":5467,"versionKeys":5476,"packageCount":32,"repositoryCount":2230},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[5459,5460],"CVE-2026-34519","PYSEC-2026-2101",[230,5460],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[5465,5466],{"type":2092,"score":2307},{"type":2055,"score":2309},[5468,5470,5472,5474,5475],{"type":2064,"url":5469},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2059,"url":5471},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2064,"url":5473},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":231,"slug":5478,"dossier":46,"summary":5479,"aliases":5480,"sourceIds":5483,"published":5484,"modified":5485,"checkedAt":7,"severity":5486,"references":5488,"versionKeys":5504,"packageCount":32,"repositoryCount":552},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[5481,5482],"CVE-2026-54293","PYSEC-2026-2078",[231,5482],"2026-06-16T14:34:15Z","2026-07-16T21:46:12.649844268Z",[5487],{"type":2055,"score":3248},[5489,5491,5493,5495,5497,5499,5500,5502],{"type":2125,"url":5490},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":2059,"url":5492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":2064,"url":5494},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":2070,"url":5496},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":2401,"url":5498},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":2067,"url":2605},{"type":2070,"url":5501},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":2070,"url":5503},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[2619,2620],{"id":232,"slug":5506,"dossier":46,"summary":5507,"aliases":5508,"sourceIds":5511,"published":5512,"modified":5513,"checkedAt":7,"severity":5514,"references":5517,"versionKeys":5526,"packageCount":32,"repositoryCount":2230},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[5509,5510],"CVE-2026-34515","PYSEC-2026-2097",[232,5510],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[5515,5516],{"type":2092,"score":4965},{"type":2055,"score":3248},[5518,5520,5522,5524,5525],{"type":2064,"url":5519},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2059,"url":5521},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2064,"url":5523},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":233,"slug":5528,"dossier":46,"summary":5529,"aliases":5530,"sourceIds":5534,"published":5535,"modified":5536,"checkedAt":7,"severity":5537,"references":5540,"versionKeys":5553,"packageCount":32,"repositoryCount":571},"ghsa-pgqp-8h46-6x4j-303ca0ec","MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation",[5531,5532,5533],"BIT-mlflow-2025-14279","CVE-2025-14279","PYSEC-2026-1656",[233,5533],"2026-01-12T09:30:31Z","2026-07-07T17:56:18.060826978Z",[5538],{"type":2055,"score":5539},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5541,5543,5545,5547,5548,5550,5551],{"type":2059,"url":5542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14279",{"type":2070,"url":5544},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F17910",{"type":2070,"url":5546},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fb0ffd289e9b0d0cc32c9e3a9b9f3843ae83dbec3",{"type":2067,"url":2574},{"type":2070,"url":5549},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fef478f72-2e4f-44dc-8055-fc06bef03108",{"type":2067,"url":2578},{"type":2059,"url":5552},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pgqp-8h46-6x4j",[2582,2583],{"id":234,"slug":5555,"dossier":46,"summary":5556,"aliases":5557,"sourceIds":5560,"published":5134,"modified":5561,"checkedAt":7,"severity":5562,"references":5565,"versionKeys":5578,"packageCount":32,"repositoryCount":571},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[5558,5559],"CVE-2025-3777","PYSEC-2026-1986",[234,5559],"2026-07-07T17:56:47.225461188Z",[5563],{"type":2055,"score":5564},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5566,5568,5570,5571,5573,5575,5576],{"type":2059,"url":5567},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2070,"url":5569},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2067,"url":2123},{"type":2070,"url":5572},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2070,"url":5574},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2067,"url":2445},{"type":2059,"url":5577},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2130,2131],{"id":235,"slug":5580,"dossier":46,"summary":5581,"aliases":5582,"sourceIds":5585,"published":5586,"modified":5587,"checkedAt":7,"severity":5588,"references":5590,"versionKeys":5602,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[5583,5584],"CVE-2025-50181","PYSEC-2026-1999",[235,5584],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[5589],{"type":2055,"score":2666},[5591,5593,5595,5597,5598,5599,5600],{"type":2070,"url":5592},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2059,"url":5594},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2064,"url":5596},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2067,"url":2341},{"type":2070,"url":2676},{"type":2067,"url":2343},{"type":2059,"url":5601},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2347,2348,2349,2350],{"id":236,"slug":5604,"dossier":46,"summary":5605,"aliases":5606,"sourceIds":5607,"published":5608,"modified":5609,"checkedAt":7,"severity":5610,"references":5613,"versionKeys":5617,"packageCount":32,"repositoryCount":503},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[236],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[5611],{"type":2055,"score":5612},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5614,5616],{"type":2070,"url":5615},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":2067,"url":2542},[2550,2551,2552,2553,2554],{"id":237,"slug":5619,"dossier":91,"summary":5620,"aliases":5621,"sourceIds":5625,"published":5626,"modified":5627,"checkedAt":7,"severity":5628,"references":5631,"versionKeys":5643,"packageCount":32,"repositoryCount":2352},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[5622,5623,5624],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[237,5624],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[5629,5630],{"type":2092,"score":4178},{"type":2055,"score":3326},[5632,5633,5635,5637,5639,5641,5642],{"type":2070,"url":4182},{"type":2064,"url":5634},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2059,"url":5636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2064,"url":5638},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2064,"url":5640},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2067,"url":3096},{"type":2059,"url":3098},[4219,4220,4221,3100,3101,3102,3103,3104],{"id":238,"slug":5645,"dossier":46,"summary":5646,"aliases":5647,"sourceIds":5650,"published":4851,"modified":5651,"checkedAt":7,"severity":5652,"references":5655,"versionKeys":5667,"packageCount":32,"repositoryCount":571},"ghsa-q2r8-vmq7-fpx2-63c75ef0","MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability",[5648,5649],"CVE-2026-2033","PYSEC-2026-2658",[238,5649],"2026-07-13T16:43:16.528255849Z",[5653],{"type":2055,"score":5654},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5656,5658,5659,5660,5661,5662,5664,5665],{"type":2059,"url":5657},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2033",{"type":2070,"url":4860},{"type":2070,"url":4862},{"type":2067,"url":2574},{"type":2070,"url":4865},{"type":2070,"url":5663},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-26-105",{"type":2067,"url":2578},{"type":2059,"url":5666},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2r8-vmq7-fpx2",[2582,2583],{"id":239,"slug":5669,"dossier":46,"summary":5670,"aliases":5671,"sourceIds":5674,"published":5134,"modified":5675,"checkedAt":7,"severity":5676,"references":5678,"versionKeys":5689,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[5672,5673],"CVE-2025-3263","PYSEC-2026-1987",[239,5673],"2026-07-07T17:56:57.889099913Z",[5677],{"type":2055,"score":2730},[5679,5681,5682,5683,5684,5686,5687],{"type":2059,"url":5680},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2070,"url":5142},{"type":2070,"url":5144},{"type":2067,"url":2123},{"type":2070,"url":5685},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2067,"url":2445},{"type":2059,"url":5688},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2130],{"id":240,"slug":5691,"dossier":46,"summary":5692,"aliases":5693,"sourceIds":5696,"published":5697,"modified":5698,"checkedAt":7,"severity":5699,"references":5703,"versionKeys":5716,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[5694,5695],"CVE-2024-56326","PYSEC-2026-1475",[240,5695],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[5700,5702],{"type":2055,"score":5701},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2092,"score":4234},[5704,5706,5708,5710,5711,5712,5713,5714],{"type":2070,"url":5705},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2059,"url":5707},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2064,"url":5709},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2067,"url":4243},{"type":2070,"url":4839},{"type":2070,"url":4245},{"type":2067,"url":4249},{"type":2059,"url":5715},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4253],{"id":241,"slug":5718,"dossier":46,"summary":5719,"aliases":5720,"sourceIds":5724,"published":5725,"modified":5726,"checkedAt":7,"severity":5727,"references":5730,"versionKeys":5750,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[5721,5722,5723],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[241,5723],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[5728,5729],{"type":2055,"score":2213},{"type":2092,"score":3221},[5731,5733,5735,5737,5739,5741,5743,5744,5745,5747,5748],{"type":2070,"url":5732},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2059,"url":5734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2070,"url":5736},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2070,"url":5738},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2070,"url":5740},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2070,"url":5742},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2067,"url":2159},{"type":2070,"url":4416},{"type":2070,"url":5746},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2067,"url":2260},{"type":2059,"url":5749},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2163],{"id":242,"slug":5752,"dossier":91,"summary":5753,"aliases":5754,"sourceIds":5757,"published":5758,"modified":5759,"checkedAt":7,"severity":5760,"references":5764,"versionKeys":5770,"packageCount":32,"repositoryCount":454},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[5755,5756],"CVE-2026-44431","PYSEC-2026-141",[242,5756],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[5761,5762],{"type":2055,"score":3961},{"type":2092,"score":5763},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5765,5767,5769],{"type":2059,"url":5766},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2059,"url":5768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2067,"url":2341},[2347,2348,2349,2350,2351,5320],{"id":243,"slug":5772,"dossier":46,"summary":5773,"aliases":5774,"sourceIds":5778,"published":5779,"modified":5780,"checkedAt":7,"severity":5781,"references":5785,"versionKeys":5803,"packageCount":32,"repositoryCount":2230},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[5775,5776,5777],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[243],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[5782,5783],{"type":2055,"score":4348},{"type":2092,"score":5784},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5786,5788,5790,5792,5794,5796,5797,5799,5801],{"type":2059,"url":5787},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2070,"url":5789},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2070,"url":5791},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2070,"url":5793},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2070,"url":5795},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2067,"url":2408},{"type":2070,"url":5798},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2070,"url":5800},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2070,"url":5802},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2420,2421,2422,3835,3836,5804,5805,5806],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":244,"slug":5808,"dossier":46,"summary":5809,"aliases":5810,"sourceIds":5813,"published":5814,"modified":5815,"checkedAt":7,"severity":5816,"references":5819,"versionKeys":5832,"packageCount":32,"repositoryCount":503},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[5811,5812],"CVE-2026-31958","PYSEC-2026-140",[244,5812],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[5817,5818],{"type":2055,"score":2213},{"type":2092,"score":4069},[5820,5822,5824,5826,5828,5829,5830],{"type":2059,"url":5821},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":2059,"url":5823},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":2070,"url":5825},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":2070,"url":5827},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":2067,"url":2542},{"type":2070,"url":3555},{"type":2070,"url":5831},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[2550,2551,2552,2553],{"id":245,"slug":5834,"dossier":46,"summary":5835,"aliases":5836,"sourceIds":5839,"published":5840,"modified":5841,"checkedAt":7,"severity":5842,"references":5845,"versionKeys":5860,"packageCount":32,"repositoryCount":104},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[5837,5838],"CVE-2026-22701","PYSEC-2026-1374",[245,5838],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[5843],{"type":2055,"score":5844},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5846,5848,5850,5852,5854,5856,5858],{"type":2070,"url":5847},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2059,"url":5849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2070,"url":5851},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2070,"url":5853},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2067,"url":5855},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2067,"url":5857},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2059,"url":5859},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[5861,5862,5863,5864],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":246,"slug":5866,"dossier":46,"summary":5867,"aliases":5868,"sourceIds":5871,"published":5872,"modified":5873,"checkedAt":7,"severity":5874,"references":5877,"versionKeys":5891,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[5869,5870],"CVE-2025-2099","PYSEC-2025-40",[246,5870],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[5875,5876],{"type":2055,"score":2730},{"type":2055,"score":2213},[5878,5880,5882,5884,5885,5887,5889],{"type":2059,"url":5879},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2070,"url":5881},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2064,"url":5883},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2067,"url":2123},{"type":2070,"url":5886},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2070,"url":5888},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2059,"url":5890},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2130],{"id":247,"slug":5893,"dossier":46,"summary":5894,"aliases":5895,"sourceIds":5898,"published":5899,"modified":5900,"checkedAt":7,"severity":5901,"references":5905,"versionKeys":5928,"packageCount":32,"repositoryCount":34},"ghsa-qrc4-49gv-mv9m-c7358be2","LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit",[5896,5897],"CVE-2026-47101","PYSEC-2026-2598",[247,5897],"2026-05-21T21:30:36Z","2026-07-13T16:42:56.741599701Z",[5902,5903],{"type":2055,"score":3055},{"type":2092,"score":5904},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5906,5908,5910,5912,5914,5916,5917,5919,5921,5923,5925,5926],{"type":2059,"url":5907},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47101",{"type":2070,"url":5909},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F2220f3076ac89bd2a2e3439acf57dcfbec2434c9",{"type":2070,"url":5911},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F5190bd07eb23a037745d86328096f54378f1614a",{"type":2070,"url":5913},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fd910a95661fce3cdd36f3b06c03ecf9c46c6457c",{"type":2070,"url":5915},"https:\u002F\u002Fgist.github.com\u002F13ph03nix\u002F9ec616e1fdc77b3673509c60206e827f",{"type":2067,"url":2828},{"type":2070,"url":5918},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.14-stable",{"type":2070,"url":5920},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8e75edfb-ff05-4e63-bfca-2d93d03fb3b9",{"type":2070,"url":5922},"https:\u002F\u002Fwww.obsidiansecurity.com\u002Fblog\u002Flitellm-privilege-escalation-rce",{"type":2070,"url":5924},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-api-key-generation",{"type":2067,"url":2836},{"type":2059,"url":5927},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qrc4-49gv-mv9m",[2840,2841,2842,2843],{"id":248,"slug":5930,"dossier":46,"summary":5022,"aliases":5931,"sourceIds":5934,"published":5935,"modified":5936,"checkedAt":7,"severity":5937,"references":5941,"versionKeys":5955,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[5932,5933],"CVE-2024-11392","PYSEC-2024-227",[248,5933],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[5938,5940],{"type":2055,"score":5939},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2055,"score":4291},[5942,5944,5945,5946,5947,5949,5951,5953],{"type":2059,"url":5943},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2070,"url":5037},{"type":2070,"url":5039},{"type":2067,"url":2123},{"type":2070,"url":5948},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2070,"url":5950},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2059,"url":5952},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2059,"url":5954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2130],{"id":249,"slug":5957,"dossier":46,"summary":5958,"aliases":5959,"sourceIds":5963,"published":5964,"modified":5965,"checkedAt":7,"severity":5966,"references":5968,"versionKeys":5981,"packageCount":32,"repositoryCount":571},"ghsa-r23q-823p-vmf7-9a5ef709","MLflow Command Injection vulnerability",[5960,5961,5962],"BIT-mlflow-2025-15379","CVE-2025-15379","PYSEC-2026-423",[249,5962],"2026-03-30T09:31:28Z","2026-07-01T20:22:58.350388Z",[5967],{"type":2055,"score":3667},[5969,5971,5973,5975,5976,5978,5979],{"type":2059,"url":5970},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15379",{"type":2070,"url":5972},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F361b6f620adf98385c6721e384fb5ef9a30bb05e",{"type":2070,"url":5974},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fa22ce7157f646bdce4c95106fc38ccc9ca289205",{"type":2067,"url":2574},{"type":2070,"url":5977},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdc9c1c20-7879-4050-87df-4d095fe5ca75",{"type":2067,"url":2578},{"type":2059,"url":5980},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r23q-823p-vmf7",[2582,2583],{"id":250,"slug":5983,"dossier":46,"summary":5984,"aliases":5985,"sourceIds":5989,"published":5990,"modified":5991,"checkedAt":7,"severity":5992,"references":5995,"versionKeys":6006,"packageCount":32,"repositoryCount":552},"ghsa-r5m9-wm49-959f-62964e46","MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions",[5986,5987,5988],"BIT-mlflow-2026-3198","CVE-2026-3198","PYSEC-2026-2659",[250,5988],"2026-06-02T06:30:26Z","2026-07-13T16:42:37.733340178Z",[5993],{"type":2055,"score":5994},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5996,5998,6000,6001,6003,6004],{"type":2059,"url":5997},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3198",{"type":2070,"url":5999},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F6989066af33fdcb03588fd71a1a67f8fc5ef12c9",{"type":2067,"url":2574},{"type":2070,"url":6002},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fe57db731-97d3-40c3-a429-831ee959807f",{"type":2067,"url":2578},{"type":2059,"url":6005},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r5m9-wm49-959f",[2582,2583,2584],{"id":251,"slug":6008,"dossier":91,"summary":6009,"aliases":6010,"sourceIds":6014,"published":6015,"modified":6016,"checkedAt":7,"severity":6017,"references":6020,"versionKeys":6035,"packageCount":32,"repositoryCount":2352},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[6011,6012,6013],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[251,6013],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[6018,6019],{"type":2055,"score":2396},{"type":2092,"score":3089},[6021,6023,6025,6027,6029,6030,6031,6033],{"type":2070,"url":6022},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2059,"url":6024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2070,"url":6026},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2070,"url":6028},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2067,"url":3096},{"type":2070,"url":3098},{"type":2067,"url":6032},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2059,"url":6034},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":252,"slug":6037,"dossier":46,"summary":6038,"aliases":6039,"sourceIds":6042,"published":6043,"modified":6044,"checkedAt":7,"severity":6045,"references":6047,"versionKeys":6062,"packageCount":32,"repositoryCount":571},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[6040,6041],"CVE-2025-6051","PYSEC-2026-1988",[252,6041],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[6046],{"type":2055,"score":2730},[6048,6050,6052,6054,6056,6057,6059,6060],{"type":2059,"url":6049},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2070,"url":6051},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2070,"url":6053},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2070,"url":6055},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2067,"url":2123},{"type":2070,"url":6058},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2067,"url":2445},{"type":2059,"url":6061},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2130,2131],{"id":253,"slug":6064,"dossier":46,"summary":6065,"aliases":6066,"sourceIds":6067,"published":6068,"modified":6069,"checkedAt":7,"severity":6070,"references":6072,"versionKeys":6076,"packageCount":32,"repositoryCount":552},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[],[253],"2026-03-18T20:17:43Z","2026-03-25T23:29:13.324989Z",[6071],{"type":2092,"score":3089},[6073,6075],{"type":2070,"url":6074},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":2067,"url":2605},[2619,2620],{"id":254,"slug":6078,"dossier":46,"summary":6079,"aliases":6080,"sourceIds":6083,"published":6084,"modified":6085,"checkedAt":7,"severity":6086,"references":6089,"versionKeys":6102,"packageCount":32,"repositoryCount":104},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[6081,6082],"CVE-2026-25087","PYSEC-2026-113",[254,6082],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[6087],{"type":2055,"score":6088},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[6090,6092,6094,6096,6098,6100],{"type":2059,"url":6091},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2064,"url":6093},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2067,"url":6095},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2070,"url":6097},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2059,"url":6099},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2059,"url":6101},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[6103,6104,6105,6106],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":255,"slug":6108,"dossier":46,"summary":6109,"aliases":6110,"sourceIds":6113,"published":6114,"modified":6115,"checkedAt":7,"severity":6116,"references":6118,"versionKeys":6126,"packageCount":32,"repositoryCount":34},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[6111,6112],"CVE-2026-42215","PYSEC-2026-2160",[255,6112],"2026-04-25T23:42:16Z","2026-07-13T07:26:42.486885613Z",[6117],{"type":2055,"score":3055},[6119,6121,6123,6124],{"type":2125,"url":6120},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":2059,"url":6122},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":2067,"url":3470},{"type":2064,"url":6125},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[3474,3475,3476],{"id":256,"slug":6128,"dossier":46,"summary":6129,"aliases":6130,"sourceIds":6134,"published":4344,"modified":6135,"checkedAt":7,"severity":6136,"references":6139,"versionKeys":6157,"packageCount":32,"repositoryCount":104},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[6131,6132,6133],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[256],"2026-07-17T17:15:51.452848951Z",[6137,6138],{"type":2055,"score":4348},{"type":2092,"score":5784},[6140,6142,6144,6146,6148,6150,6151,6153,6155],{"type":2059,"url":6141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2070,"url":6143},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2070,"url":6145},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2070,"url":6147},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2070,"url":6149},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2067,"url":2408},{"type":2070,"url":6152},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2070,"url":6154},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2070,"url":6156},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[6158,2420,2421,2422,3835,3836,5804,5805,5806],"pypi:torch@2.10.0",{"id":257,"slug":6160,"dossier":46,"summary":6161,"aliases":6162,"sourceIds":6166,"published":6167,"modified":6168,"checkedAt":7,"severity":6169,"references":6172,"versionKeys":6185,"packageCount":32,"repositoryCount":552},"ghsa-rvhj-8chj-8v3c-edfd1899","Mlflow: Command Injection when serving models with enable_mlserver=True",[6163,6164,6165],"BIT-mlflow-2026-0596","CVE-2026-0596","PYSEC-2026-424",[257,6165],"2026-03-31T15:31:56Z","2026-07-01T20:22:58.365246Z",[6170],{"type":2055,"score":6171},"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6173,6175,6177,6179,6180,6182,6183],{"type":2059,"url":6174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0596",{"type":2070,"url":6176},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19738",{"type":2070,"url":6178},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F202fac4c83ccc8544c087c142b80196d0e60695c",{"type":2067,"url":2574},{"type":2070,"url":6181},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F2e905add-f9f5-4309-a3db-b17de5981285",{"type":2067,"url":2578},{"type":2059,"url":6184},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rvhj-8chj-8v3c",[2582,2583,2584],{"id":258,"slug":6187,"dossier":46,"summary":6188,"aliases":6189,"sourceIds":6192,"published":6193,"modified":6194,"checkedAt":7,"severity":6195,"references":6197,"versionKeys":6205,"packageCount":32,"repositoryCount":34},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[6190,6191],"CVE-2026-44244","PYSEC-2026-2163",[258,6191],"2026-05-06T21:58:00Z","2026-07-13T07:26:38.585123077Z",[6196],{"type":2055,"score":5701},[6198,6200,6202,6203],{"type":2125,"url":6199},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":2059,"url":6201},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":2067,"url":3470},{"type":2064,"url":6204},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[3474,3475,3476],{"id":259,"slug":6207,"dossier":46,"summary":6208,"aliases":6209,"sourceIds":6212,"published":6213,"modified":6214,"checkedAt":7,"severity":6215,"references":6219,"versionKeys":6231,"packageCount":32,"repositoryCount":522},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[6210,6211],"CVE-2026-41205","PYSEC-2026-88",[259,6211],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[6216,6217],{"type":2055,"score":3248},{"type":2092,"score":6218},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6220,6222,6224,6226,6228,6229],{"type":2059,"url":6221},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2059,"url":6223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2070,"url":6225},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2070,"url":6227},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2067,"url":2286},{"type":2070,"url":6230},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2294,2295],{"id":260,"slug":6233,"dossier":46,"summary":6234,"aliases":6235,"sourceIds":6239,"published":4344,"modified":6240,"checkedAt":7,"severity":6241,"references":6244,"versionKeys":6259,"packageCount":32,"repositoryCount":358},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[6236,6237,6238],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[260],"2026-06-10T17:41:15.774477397Z",[6242,6243],{"type":2055,"score":4348},{"type":2092,"score":4350},[6245,6247,6248,6249,6250,6252,6253,6255,6257],{"type":2059,"url":6246},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2070,"url":4355},{"type":2070,"url":4357},{"type":2070,"url":4359},{"type":2070,"url":6251},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2067,"url":2408},{"type":2070,"url":6254},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2070,"url":6256},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2070,"url":6258},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2420,2421,2422,3835,3836,5804],{"id":261,"slug":6261,"dossier":46,"summary":6262,"aliases":6263,"sourceIds":6267,"published":6268,"modified":6269,"checkedAt":7,"severity":6270,"references":6273,"versionKeys":6283,"packageCount":32,"repositoryCount":552},"ghsa-vhcx-3pq2-4fvc-4147c43c","MLFlow path traversal vulnerability",[6264,6265,6266],"BIT-mlflow-2025-15036","CVE-2025-15036","PYSEC-2026-425",[261,6266],"2026-03-30T03:30:19Z","2026-07-01T20:22:58.380148Z",[6271],{"type":2055,"score":6272},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6274,6276,6277,6278,6280,6281],{"type":2059,"url":6275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-15036",{"type":2070,"url":4555},{"type":2067,"url":2574},{"type":2070,"url":6279},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0",{"type":2067,"url":2578},{"type":2059,"url":6282},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vhcx-3pq2-4fvc",[2582,2583,2584],{"id":262,"slug":6285,"dossier":46,"summary":6286,"aliases":6287,"sourceIds":6290,"published":6291,"modified":6292,"checkedAt":7,"severity":6293,"references":6296,"versionKeys":6309,"packageCount":32,"repositoryCount":552},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[6288,6289],"CVE-2025-43859","PYSEC-2026-348",[262,6289],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[6294],{"type":2055,"score":6295},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6297,6299,6301,6303,6305,6307],{"type":2070,"url":6298},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2059,"url":6300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2070,"url":6302},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2067,"url":6304},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2067,"url":6306},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2059,"url":6308},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[6310],"pypi:h11@0.14.0",{"id":263,"slug":6312,"dossier":46,"summary":6313,"aliases":6314,"sourceIds":6317,"published":6318,"modified":6319,"checkedAt":7,"severity":6320,"references":6322,"versionKeys":6333,"packageCount":32,"repositoryCount":552},"ghsa-vvw2-h478-xwr3-e8568ce6","DSPy does not properly restrict file reads",[6315,6316],"CVE-2025-12695","PYSEC-2026-1318",[263,6316],"2025-11-04T15:31:35Z","2026-07-07T17:57:24.503135806Z",[6321],{"type":2055,"score":5612},[6323,6325,6327,6329,6331],{"type":2059,"url":6324},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12695",{"type":2067,"url":6326},"https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdspy",{"type":2070,"url":6328},"https:\u002F\u002Fresearch.jfrog.com\u002Fvulnerabilities\u002Fdspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652",{"type":2067,"url":6330},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdspy",{"type":2059,"url":6332},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvw2-h478-xwr3",[6334,6335,6336],"pypi:dspy@2.5.43","pypi:dspy@2.6.23","pypi:dspy@2.6.27",{"id":264,"slug":6338,"dossier":46,"summary":6339,"aliases":6340,"sourceIds":6343,"published":6344,"modified":6345,"checkedAt":7,"severity":6346,"references":6350,"versionKeys":6359,"packageCount":32,"repositoryCount":2230},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[6341,6342],"CVE-2026-22815","PYSEC-2026-2094",[264,6342],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[6347,6348],{"type":2092,"score":3221},{"type":2092,"score":6349},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6351,6353,6355,6357,6358],{"type":2064,"url":6352},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2059,"url":6354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2064,"url":6356},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2067,"url":2218},{"type":2059,"url":2319},[2222,2223,2224,2225,2226,2227,2228,2229],{"id":265,"slug":6361,"dossier":46,"summary":6362,"aliases":6363,"sourceIds":6367,"published":6368,"modified":6369,"checkedAt":7,"severity":6370,"references":6372,"versionKeys":6382,"packageCount":32,"repositoryCount":552},"ghsa-w5xq-c4pf-ghq7-a926672a","MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks",[6364,6365,6366],"BIT-mlflow-2026-2734","CVE-2026-2734","PYSEC-2026-2660",[265,6366],"2026-05-21T06:31:31Z","2026-07-13T16:43:34.965176091Z",[6371],{"type":2055,"score":5994},[6373,6375,6376,6377,6379,6380],{"type":2059,"url":6374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-2734",{"type":2070,"url":5999},{"type":2067,"url":2574},{"type":2070,"url":6378},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd632f783-b2c7-4a3b-af5e-1d693e841c08",{"type":2067,"url":2578},{"type":2059,"url":6381},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w5xq-c4pf-ghq7",[2582,2583,2584],{"id":266,"slug":6384,"dossier":46,"summary":6385,"aliases":6386,"sourceIds":6389,"published":6390,"modified":6391,"checkedAt":7,"severity":6392,"references":6395,"versionKeys":6412,"packageCount":32,"repositoryCount":104},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[6387,6388],"CVE-2025-68146","PYSEC-2026-1375",[266,6388],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[6393],{"type":2055,"score":6394},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6396,6398,6400,6401,6403,6405,6407,6408,6410],{"type":2070,"url":6397},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2070,"url":6399},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2067,"url":5855},{"type":2070,"url":6402},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2070,"url":6404},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2070,"url":6406},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2067,"url":5857},{"type":2059,"url":6409},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2059,"url":6411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[5861,5862,5863,5864],{"id":267,"slug":6414,"dossier":46,"summary":6415,"aliases":6416,"sourceIds":6419,"published":6420,"modified":6421,"checkedAt":7,"severity":6422,"references":6425,"versionKeys":6436,"packageCount":32,"repositoryCount":503},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[6417,6418],"CVE-2025-69872","PYSEC-2026-2447",[267,6418],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[6423],{"type":2092,"score":6424},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6426,6428,6430,6432,6434],{"type":2059,"url":6427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2070,"url":6429},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2067,"url":6431},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2067,"url":6433},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2059,"url":6435},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[6437],"pypi:diskcache@5.6.3",{"id":268,"slug":6439,"dossier":46,"summary":6440,"aliases":6441,"sourceIds":6445,"published":6446,"modified":6447,"checkedAt":7,"severity":6448,"references":6450,"versionKeys":6459,"packageCount":32,"repositoryCount":571},"ghsa-wf7f-8fxf-xfxc-07509bf2","MLFlow unsafe deserialization",[6442,6443,6444],"BIT-mlflow-2024-37059","CVE-2024-37059","PYSEC-2026-1660",[268,6444],"2024-06-04T12:31:05Z","2026-07-07T17:56:49.672624556Z",[6449],{"type":2055,"score":4291},[6451,6453,6454,6456,6457],{"type":2059,"url":6452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-37059",{"type":2067,"url":2574},{"type":2070,"url":6455},"https:\u002F\u002Fhiddenlayer.com\u002Fsai-security-advisory\u002Fmlflow-june2024",{"type":2067,"url":2578},{"type":2059,"url":6458},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf7f-8fxf-xfxc",[2582,2583],{"id":269,"slug":6461,"dossier":46,"summary":6462,"aliases":6463,"sourceIds":6466,"published":6467,"modified":6468,"checkedAt":7,"severity":6469,"references":6475,"versionKeys":6510,"packageCount":32,"repositoryCount":552},"ghsa-wf93-45jw-7689-98dc514d","pip: Path traversal in console_scripts\u002Fgui_scripts entry point names allows installing scripts outside of target directory",[6464,6465],"CVE-2026-8643","PYSEC-2026-196",[269,6465],"2026-06-01T17:17:35.770Z","2026-07-14T02:29:29.982772188Z",[6470,6472,6474],{"type":2055,"score":6471},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2092,"score":6473},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2055,"score":4756},[6476,6478,6480,6482,6484,6486,6488,6490,6492,6494,6496,6497,6499,6501,6503,6505,6506,6508],{"type":2059,"url":6477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8643",{"type":2064,"url":6479},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14000",{"type":2070,"url":6481},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:33313",{"type":2070,"url":6483},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34776",{"type":2070,"url":6485},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34777",{"type":2070,"url":6487},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34778",{"type":2070,"url":6489},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34780",{"type":2070,"url":6491},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34891",{"type":2070,"url":6493},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36193",{"type":2070,"url":6495},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36315",{"type":2070,"url":2615},{"type":2070,"url":6498},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37283",{"type":2070,"url":6500},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8643",{"type":2070,"url":6502},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2460927",{"type":2070,"url":6504},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-196.yaml",{"type":2067,"url":2790},{"type":2059,"url":6507},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FYV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ\u002F",{"type":2059,"url":6509},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf93-45jw-7689",[2802,2803],{"id":270,"slug":6512,"dossier":46,"summary":6513,"aliases":6514,"sourceIds":6517,"published":6518,"modified":6519,"checkedAt":7,"severity":6520,"references":6522,"versionKeys":6538,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[6515,6516],"CVE-2026-32874","PYSEC-2026-2291",[270,6516],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[6521],{"type":2055,"score":2213},[6523,6525,6527,6529,6530,6532,6534,6536],{"type":2059,"url":6524},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":2059,"url":6526},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":2064,"url":6528},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":2067,"url":2497},{"type":2059,"url":6531},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":2070,"url":6533},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":2070,"url":6535},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":2401,"url":6537},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[2501],{"id":271,"slug":6540,"dossier":91,"summary":6541,"aliases":6542,"sourceIds":6546,"published":6547,"modified":6548,"checkedAt":7,"severity":6549,"references":6552,"versionKeys":6590,"packageCount":32,"repositoryCount":2352},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[6543,6544,6545],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[271,6545],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[6550,6551],{"type":2055,"score":2213},{"type":2092,"score":4069},[6553,6555,6557,6559,6561,6562,6564,6566,6568,6570,6572,6574,6575,6577,6579,6581,6582,6584,6586,6588],{"type":2070,"url":6554},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2059,"url":6556},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2070,"url":6558},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2070,"url":6560},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2067,"url":3096},{"type":2070,"url":6563},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2070,"url":6565},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2070,"url":6567},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2059,"url":6569},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2059,"url":6571},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2059,"url":6573},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2059,"url":4204},{"type":2059,"url":6576},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2059,"url":6578},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2059,"url":6580},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2059,"url":2613},{"type":2059,"url":6583},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2059,"url":6585},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2059,"url":6587},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2059,"url":6589},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":272,"slug":6592,"dossier":91,"summary":6593,"aliases":6594,"sourceIds":6598,"published":6599,"modified":6600,"checkedAt":7,"severity":6601,"references":6604,"versionKeys":6613,"packageCount":32,"repositoryCount":2352},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[6595,6596,6597],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[272,6597],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[6602,6603],{"type":2055,"score":2396},{"type":2092,"score":3089},[6605,6607,6609,6611,6612],{"type":2059,"url":6606},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2059,"url":6608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2070,"url":6610},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2067,"url":3096},{"type":2059,"url":3098},[4219,4220,4221,3100,3101,3102,3103,3104],{"id":273,"slug":6615,"dossier":46,"summary":6616,"aliases":6617,"sourceIds":6620,"published":6621,"modified":6622,"checkedAt":7,"severity":6623,"references":6626,"versionKeys":6646,"packageCount":32,"repositoryCount":34},"ghsa-wpfp-gwwc-vwq6-53d5ec36","LiteLLM allows a user to modify their own user_role via the \u002Fuser\u002Fupdate endpoint",[6618,6619],"CVE-2026-47102","PYSEC-2026-2600",[273,6619],"2026-05-21T21:30:37Z","2026-07-13T16:43:25.135559552Z",[6624,6625],{"type":2055,"score":3055},{"type":2092,"score":5904},[6627,6629,6631,6633,6635,6636,6637,6639,6640,6641,6643,6644],{"type":2059,"url":6628},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47102",{"type":2070,"url":6630},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25541",{"type":2070,"url":6632},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F128d32d2494b759c5d15da3452452af4c6a34c01",{"type":2070,"url":6634},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe6f18ce75b111c9b93dc15c72894cbdeb53177ce",{"type":2070,"url":5915},{"type":2067,"url":2828},{"type":2070,"url":6638},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.10-stable",{"type":2070,"url":5920},{"type":2070,"url":5922},{"type":2070,"url":6642},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-user-update",{"type":2067,"url":2836},{"type":2059,"url":6645},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wpfp-gwwc-vwq6",[2840,2841,2842,2843],{"id":274,"slug":6648,"dossier":46,"summary":6649,"aliases":6650,"sourceIds":6653,"published":6654,"modified":6655,"checkedAt":7,"severity":6656,"references":6658,"versionKeys":6680,"packageCount":32,"repositoryCount":358},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[6651,6652],"CVE-2026-48818","PYSEC-2026-2281",[274,6652],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[6657],{"type":2055,"score":3248},[6659,6661,6662,6664,6666,6668,6670,6672,6674,6676,6678],{"type":2059,"url":6660},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2067,"url":3608},{"type":2070,"url":6663},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2070,"url":6665},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2059,"url":6667},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2059,"url":6669},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2059,"url":6671},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2059,"url":6673},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2401,"url":6675},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2064,"url":6677},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2064,"url":6679},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2197,2198,2199,3615,3616,3723,3724],{"id":275,"slug":6682,"dossier":46,"summary":5022,"aliases":6683,"sourceIds":6686,"published":5027,"modified":6687,"checkedAt":7,"severity":6688,"references":6691,"versionKeys":6705,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[6684,6685],"CVE-2024-11393","PYSEC-2024-228",[275,6685],"2026-06-10T17:00:13.252500033Z",[6689,6690],{"type":2055,"score":5031},{"type":2055,"score":4291},[6692,6694,6695,6696,6697,6699,6701,6703],{"type":2059,"url":6693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2070,"url":5037},{"type":2070,"url":5039},{"type":2067,"url":2123},{"type":2070,"url":6698},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2070,"url":6700},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2059,"url":6702},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2059,"url":6704},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2130],{"id":276,"slug":6707,"dossier":46,"summary":6708,"aliases":6709,"sourceIds":6712,"published":6713,"modified":6714,"checkedAt":7,"severity":6715,"references":6719,"versionKeys":6728,"packageCount":32,"repositoryCount":34},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[6710,6711],"CVE-2026-42284","PYSEC-2026-2161",[276,6711],"2026-04-25T23:41:49Z","2026-07-13T07:26:44.494568822Z",[6716,6718],{"type":2055,"score":6717},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2055,"score":2815},[6720,6722,6724,6725,6726],{"type":2125,"url":6721},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":2059,"url":6723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":2067,"url":3470},{"type":2064,"url":6125},{"type":2070,"url":6727},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[3474,3475,3476],{"id":277,"slug":6730,"dossier":46,"summary":6731,"aliases":6732,"sourceIds":6736,"published":6737,"modified":6738,"checkedAt":7,"severity":6739,"references":6744,"versionKeys":6760,"packageCount":32,"repositoryCount":571},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[6733,6734,6735],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[277],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[6740,6742],{"type":2055,"score":6741},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2092,"score":6743},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6745,6747,6749,6751,6753,6754,6756,6758],{"type":2059,"url":6746},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2070,"url":6748},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2070,"url":6750},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2070,"url":6752},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2067,"url":2408},{"type":2070,"url":6755},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2070,"url":6757},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2070,"url":6759},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2420,2421],{"id":278,"slug":6762,"dossier":46,"summary":6763,"aliases":6764,"sourceIds":6767,"published":6768,"modified":6769,"checkedAt":7,"severity":6770,"references":6772,"versionKeys":6779,"packageCount":32,"repositoryCount":358},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[6765,6766],"CVE-2026-48817","PYSEC-2026-2280",[278,6766],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[6771],{"type":2055,"score":2309},[6773,6775,6777,6778],{"type":2059,"url":6774},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2059,"url":6776},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2067,"url":3608},{"type":2059,"url":6673},[2197,2198,2199,3615,3616,3723,3724],{"id":279,"slug":6781,"dossier":46,"summary":6782,"aliases":6783,"sourceIds":6786,"published":6787,"modified":6788,"checkedAt":7,"severity":6789,"references":6792,"versionKeys":6798,"packageCount":32,"repositoryCount":2230},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[6784,6785],"CVE-2026-54274","PYSEC-2026-2108",[279,6785],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[6790,6791],{"type":2092,"score":2692},{"type":2055,"score":2213},[6793,6795,6796],{"type":2059,"url":6794},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2067,"url":2218},{"type":2064,"url":6797},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2222,2223,2224,2225,2226,2227,2228,2229],{"id":280,"slug":6800,"dossier":46,"summary":6801,"aliases":6802,"sourceIds":6806,"published":6807,"modified":6808,"checkedAt":7,"severity":6809,"references":6811,"versionKeys":6825,"packageCount":32,"repositoryCount":571},"ghsa-xch3-2f9x-wh9f-70e88660","MLflow has a command injection in mlflow\u002Fsagemaker\u002F__init__.py",[6803,6804,6805],"BIT-mlflow-2025-14287","CVE-2025-14287","PYSEC-2026-2661",[280,6805],"2026-03-16T15:30:41Z","2026-07-13T16:42:49.591762139Z",[6810],{"type":2055,"score":5939},[6812,6814,6816,6818,6819,6820,6822,6823],{"type":2059,"url":6813},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14287",{"type":2070,"url":6815},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fpull\u002F19277",{"type":2070,"url":6817},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002F8b8792a7034fb33a14b0b31cabcaa9b912d3485f",{"type":2067,"url":2574},{"type":2070,"url":4865},{"type":2070,"url":6821},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F229cd526-41aa-4819-b6f0-e2d0371c89e3",{"type":2067,"url":2578},{"type":2059,"url":6824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xch3-2f9x-wh9f",[2582,2583],{"id":281,"slug":6827,"dossier":46,"summary":6828,"aliases":6829,"sourceIds":6830,"published":6831,"modified":6832,"checkedAt":7,"severity":6833,"references":6835,"versionKeys":6842,"packageCount":32,"repositoryCount":552},"ghsa-xf7x-x43h-rpqh-c5648b04","json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS",[],[281],"2026-07-13T23:41:39Z","2026-07-13T23:45:11.773964507Z",[6834],{"type":2055,"score":2213},[6836,6838,6840],{"type":2070,"url":6837},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Fsecurity\u002Fadvisories\u002FGHSA-xf7x-x43h-rpqh",{"type":2067,"url":6839},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair",{"type":2070,"url":6841},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Freleases\u002Ftag\u002Fv0.60.1",[6843,6844,6845],"pypi:json-repair@0.35.0","pypi:json-repair@0.44.1","pypi:json-repair@0.47.6",{"id":282,"slug":6847,"dossier":46,"summary":6848,"aliases":6849,"sourceIds":6853,"published":6854,"modified":6855,"checkedAt":7,"severity":6856,"references":6858,"versionKeys":6872,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[6850,6851,6852],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[282,6852],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[6857],{"type":2055,"score":3461},[6859,6861,6863,6865,6867,6869,6870],{"type":2059,"url":6860},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2059,"url":6862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2070,"url":6864},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2064,"url":6866},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2070,"url":6868},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2067,"url":3096},{"type":2070,"url":6871},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3100],{"id":283,"slug":6874,"dossier":46,"summary":346,"aliases":6875,"sourceIds":6878,"published":6879,"modified":6880,"checkedAt":7,"severity":6881,"references":6883,"versionKeys":6892,"packageCount":32,"repositoryCount":571},"pysec-2025-198-62b25ed4",[6876,6877],"BIT-pytorch-2025-46148","CVE-2025-46148",[283],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[6882],{"type":2055,"score":3961},[6884,6886,6888,6890],{"type":2059,"url":6885},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2059,"url":6887},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2401,"url":6889},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2064,"url":6891},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2420,2421],{"id":284,"slug":6894,"dossier":46,"summary":346,"aliases":6895,"sourceIds":6898,"published":6899,"modified":6900,"checkedAt":7,"severity":6901,"references":6903,"versionKeys":6909,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[6896,6897],"BIT-pytorch-2025-46149","CVE-2025-46149",[284],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[6902],{"type":2055,"score":3961},[6904,6905,6907],{"type":2059,"url":6885},{"type":2401,"url":6906},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2064,"url":6908},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2421],{"id":285,"slug":6911,"dossier":46,"summary":346,"aliases":6912,"sourceIds":6915,"published":6916,"modified":6917,"checkedAt":7,"severity":6918,"references":6920,"versionKeys":6928,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[6913,6914],"BIT-pytorch-2025-46150","CVE-2025-46150",[285],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[6919],{"type":2055,"score":3961},[6921,6922,6924,6926],{"type":2059,"url":6885},{"type":2401,"url":6923},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2401,"url":6925},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2064,"url":6927},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2421],{"id":286,"slug":6930,"dossier":46,"summary":346,"aliases":6931,"sourceIds":6934,"published":6935,"modified":6936,"checkedAt":7,"severity":6937,"references":6939,"versionKeys":6945,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[6932,6933],"BIT-pytorch-2025-46152","CVE-2025-46152",[286],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[6938],{"type":2055,"score":2150},[6940,6941,6943],{"type":2059,"url":6885},{"type":2401,"url":6942},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2064,"url":6944},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2421],{"id":287,"slug":6947,"dossier":46,"summary":346,"aliases":6948,"sourceIds":6951,"published":6952,"modified":6953,"checkedAt":7,"severity":6954,"references":6956,"versionKeys":6966,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[6949,6950],"BIT-pytorch-2025-46153","CVE-2025-46153",[287],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[6955],{"type":2055,"score":3961},[6957,6959,6960,6962,6964],{"type":2070,"url":6958},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2059,"url":6885},{"type":2059,"url":6961},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2401,"url":6963},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2064,"url":6965},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2421],{"id":288,"slug":6968,"dossier":46,"summary":346,"aliases":6969,"sourceIds":6972,"published":6973,"modified":6974,"checkedAt":7,"severity":6975,"references":6977,"versionKeys":6982,"packageCount":32,"repositoryCount":358},"pysec-2025-203-2febb201",[6970,6971],"BIT-pytorch-2025-55551","CVE-2025-55551",[288],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[6976],{"type":2055,"score":2213},[6978,6980],{"type":2059,"url":6979},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2401,"url":6981},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2420,2421,2422,3835,3836,5804],{"id":289,"slug":6984,"dossier":46,"summary":346,"aliases":6985,"sourceIds":6988,"published":6989,"modified":6990,"checkedAt":7,"severity":6991,"references":6993,"versionKeys":6997,"packageCount":32,"repositoryCount":358},"pysec-2025-204-cdae47da",[6986,6987],"BIT-pytorch-2025-55552","CVE-2025-55552",[289],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[6992],{"type":2055,"score":2213},[6994,6995],{"type":2059,"url":6979},{"type":2401,"url":6996},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2420,2421,2422,3835,3836,5804],{"id":290,"slug":6999,"dossier":46,"summary":346,"aliases":7000,"sourceIds":7003,"published":7004,"modified":7005,"checkedAt":7,"severity":7006,"references":7008,"versionKeys":7014,"packageCount":32,"repositoryCount":552},"pysec-2025-205-fd5e58fd",[7001,7002],"BIT-pytorch-2025-55553","CVE-2025-55553",[290],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[7007],{"type":2055,"score":2213},[7009,7010,7012],{"type":2059,"url":6979},{"type":2401,"url":7011},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2064,"url":7013},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2420,2421,2422],{"id":291,"slug":7016,"dossier":46,"summary":346,"aliases":7017,"sourceIds":7020,"published":7021,"modified":7022,"checkedAt":7,"severity":7023,"references":7025,"versionKeys":7029,"packageCount":32,"repositoryCount":358},"pysec-2025-206-58322476",[7018,7019],"BIT-pytorch-2025-55554","CVE-2025-55554",[291],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[7024],{"type":2055,"score":2150},[7026,7027],{"type":2059,"url":6979},{"type":2401,"url":7028},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2420,2421,2422,3835,3836,5804],{"id":292,"slug":7031,"dossier":46,"summary":346,"aliases":7032,"sourceIds":7035,"published":7036,"modified":7037,"checkedAt":7,"severity":7038,"references":7040,"versionKeys":7046,"packageCount":32,"repositoryCount":552},"pysec-2025-207-2abef3fc",[7033,7034],"BIT-pytorch-2025-55557","CVE-2025-55557",[292],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[7039],{"type":2055,"score":2213},[7041,7042,7044],{"type":2059,"url":6979},{"type":2401,"url":7043},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2064,"url":7045},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2420,2421,2422],{"id":293,"slug":7048,"dossier":46,"summary":346,"aliases":7049,"sourceIds":7052,"published":7053,"modified":7054,"checkedAt":7,"severity":7055,"references":7057,"versionKeys":7063,"packageCount":32,"repositoryCount":552},"pysec-2025-208-6e93fe9d",[7050,7051],"BIT-pytorch-2025-55558","CVE-2025-55558",[293],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[7056],{"type":2055,"score":2213},[7058,7059,7061],{"type":2059,"url":6979},{"type":2401,"url":7060},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2064,"url":7062},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2420,2421,2422],{"id":294,"slug":7065,"dossier":46,"summary":346,"aliases":7066,"sourceIds":7069,"published":7070,"modified":7071,"checkedAt":7,"severity":7072,"references":7074,"versionKeys":7080,"packageCount":32,"repositoryCount":552},"pysec-2025-209-e6f352b0",[7067,7068],"BIT-pytorch-2025-55560","CVE-2025-55560",[294],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[7073],{"type":2055,"score":2213},[7075,7076,7078],{"type":2059,"url":6979},{"type":2401,"url":7077},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2064,"url":7079},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2420,2421,2422],{"id":295,"slug":7082,"dossier":46,"summary":346,"aliases":7083,"sourceIds":7085,"published":7086,"modified":7087,"checkedAt":7,"severity":7088,"references":7090,"versionKeys":7093,"packageCount":32,"repositoryCount":552},"pysec-2025-211-d8bd15de",[7084],"CVE-2025-14920",[295],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[7089],{"type":2055,"score":2116},[7091],{"type":2059,"url":7092},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2130,2131,2132],{"id":296,"slug":7095,"dossier":46,"summary":346,"aliases":7096,"sourceIds":7098,"published":7099,"modified":7100,"checkedAt":7,"severity":7101,"references":7103,"versionKeys":7106,"packageCount":32,"repositoryCount":552},"pysec-2025-212-a011b97d",[7097],"CVE-2025-14921",[296],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[7102],{"type":2055,"score":2116},[7104],{"type":2059,"url":7105},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2130,2131,2132],{"id":297,"slug":7108,"dossier":46,"summary":346,"aliases":7109,"sourceIds":7111,"published":7112,"modified":7113,"checkedAt":7,"severity":7114,"references":7116,"versionKeys":7119,"packageCount":32,"repositoryCount":552},"pysec-2025-213-9043dc9b",[7110],"CVE-2025-14924",[297],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[7115],{"type":2055,"score":2116},[7117],{"type":2059,"url":7118},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2130,2131,2132],{"id":298,"slug":7121,"dossier":46,"summary":346,"aliases":7122,"sourceIds":7124,"published":7125,"modified":7126,"checkedAt":7,"severity":7127,"references":7129,"versionKeys":7132,"packageCount":32,"repositoryCount":552},"pysec-2025-214-eb241255",[7123],"CVE-2025-14926",[298],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[7128],{"type":2055,"score":2116},[7130],{"type":2059,"url":7131},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2130,2131,2132],{"id":299,"slug":7134,"dossier":46,"summary":346,"aliases":7135,"sourceIds":7137,"published":7138,"modified":7139,"checkedAt":7,"severity":7140,"references":7142,"versionKeys":7145,"packageCount":32,"repositoryCount":552},"pysec-2025-215-6064f491",[7136],"CVE-2025-14927",[299],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[7141],{"type":2055,"score":2116},[7143],{"type":2059,"url":7144},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2130,2131,2132],{"id":300,"slug":7147,"dossier":46,"summary":346,"aliases":7148,"sourceIds":7150,"published":7151,"modified":7152,"checkedAt":7,"severity":7153,"references":7155,"versionKeys":7158,"packageCount":32,"repositoryCount":552},"pysec-2025-216-5708ed01",[7149],"CVE-2025-14928",[300],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[7154],{"type":2055,"score":2116},[7156],{"type":2059,"url":7157},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2130,2131,2132],{"id":301,"slug":7160,"dossier":46,"summary":346,"aliases":7161,"sourceIds":7163,"published":7164,"modified":7165,"checkedAt":7,"severity":7166,"references":7168,"versionKeys":7171,"packageCount":32,"repositoryCount":358},"pysec-2025-217-2c1ad388",[7162],"CVE-2025-14929",[301],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[7167],{"type":2055,"score":2116},[7169],{"type":2059,"url":7170},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2130,2131,2132,2133,2134,2135,2136],{"id":302,"slug":7173,"dossier":46,"summary":346,"aliases":7174,"sourceIds":7176,"published":7177,"modified":7178,"checkedAt":7,"severity":7179,"references":7181,"versionKeys":7184,"packageCount":32,"repositoryCount":522},"pysec-2025-218-39811fc3",[7175],"CVE-2025-14930",[302],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[7180],{"type":2055,"score":2116},[7182],{"type":2059,"url":7183},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2130,2131,2132,2133],{"id":303,"slug":7186,"dossier":46,"summary":346,"aliases":7187,"sourceIds":7190,"published":7191,"modified":7192,"checkedAt":7,"severity":7193,"references":7195,"versionKeys":7202,"packageCount":32,"repositoryCount":522},"pysec-2025-265-33beac08",[7188,7189],"CVE-2025-67724","GHSA-pr2v-jx2c-wg9f",[303],"2025-12-12T06:15:41.213Z","2026-07-13T07:15:44.068555841Z",[7194],{"type":2055,"score":4781},[7196,7198,7200],{"type":2059,"url":7197},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",{"type":2059,"url":7199},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":2064,"url":7201},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",[2550,2551,2552],{"id":304,"slug":7204,"dossier":46,"summary":346,"aliases":7205,"sourceIds":7208,"published":7209,"modified":7210,"checkedAt":7,"severity":7211,"references":7213,"versionKeys":7219,"packageCount":32,"repositoryCount":522},"pysec-2025-266-c9802ae6",[7206,7207],"CVE-2025-67725","GHSA-c98p-7wgm-6p64",[304],"2025-12-12T06:15:41.380Z","2026-07-13T07:15:44.064352714Z",[7212],{"type":2055,"score":2213},[7214,7215,7217],{"type":2059,"url":7197},{"type":2059,"url":7216},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":2064,"url":7218},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",[2550,2551,2552],{"id":305,"slug":7221,"dossier":46,"summary":346,"aliases":7222,"sourceIds":7225,"published":7226,"modified":7227,"checkedAt":7,"severity":7228,"references":7230,"versionKeys":7235,"packageCount":32,"repositoryCount":522},"pysec-2025-267-ca9685ba",[7223,7224],"CVE-2025-67726","GHSA-jhmp-mqwm-3gq8",[305],"2025-12-12T07:15:44.920Z","2026-07-13T07:15:45.375541292Z",[7229],{"type":2055,"score":2213},[7231,7232,7234],{"type":2059,"url":7197},{"type":2059,"url":7233},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":2064,"url":7218},[2550,2551,2552],{"id":306,"slug":7237,"dossier":46,"summary":346,"aliases":7238,"sourceIds":7241,"published":7242,"modified":7243,"checkedAt":7,"severity":7244,"references":7246,"versionKeys":7257,"packageCount":32,"repositoryCount":104},"pysec-2026-139-96951ff6",[7239,7240],"BIT-pytorch-2026-4538","CVE-2026-4538",[306],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[7245],{"type":2055,"score":5701},[7247,7249,7251,7253,7255],{"type":2070,"url":7248},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2059,"url":7250},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2059,"url":7252},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2401,"url":7254},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2064,"url":7256},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[6158,2420,2421,2422,3835,3836,5804,5805,5806],{"id":307,"slug":7259,"dossier":46,"summary":346,"aliases":7260,"sourceIds":7262,"published":7263,"modified":7264,"checkedAt":7,"severity":7265,"references":7267,"versionKeys":7270,"packageCount":32,"repositoryCount":552},"pysec-2026-2085-e081ac1d",[7261],"CVE-2026-12252",[307],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[7266],{"type":2055,"score":2116},[7268],{"type":2125,"url":7269},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[2619,2620],{"id":308,"slug":7272,"dossier":91,"summary":346,"aliases":7273,"sourceIds":7276,"published":7277,"modified":7278,"checkedAt":7,"severity":7279,"references":7282,"versionKeys":7297,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[7274,7275],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[308],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[7280],{"type":2055,"score":7281},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[7283,7285,7287,7289,7291,7293,7295],{"type":2070,"url":7284},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2070,"url":7286},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2059,"url":7288},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2059,"url":7290},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2401,"url":7292},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2064,"url":7294},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2125,"url":7296},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[7298,7299,7300,7301,7302,7303],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":309,"slug":7305,"dossier":91,"summary":346,"aliases":7306,"sourceIds":7310,"published":7311,"modified":7312,"checkedAt":7,"severity":7313,"references":7315,"versionKeys":7322,"packageCount":32,"repositoryCount":2352},"pysec-2026-2253-e1ccf3df",[7307,7308,7309],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[309],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[7314],{"type":2055,"score":2213},[7316,7318,7320],{"type":2059,"url":7317},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":2064,"url":7319},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2125,"url":7321},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":310,"slug":7324,"dossier":91,"summary":346,"aliases":7325,"sourceIds":7329,"published":7330,"modified":7331,"checkedAt":7,"severity":7332,"references":7334,"versionKeys":7339,"packageCount":32,"repositoryCount":2352},"pysec-2026-2254-a1ed1fd2",[7326,7327,7328],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[310],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[7333],{"type":2055,"score":2213},[7335,7336,7337],{"type":2059,"url":7317},{"type":2064,"url":7319},{"type":2125,"url":7338},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":311,"slug":7341,"dossier":91,"summary":346,"aliases":7342,"sourceIds":7346,"published":7347,"modified":7348,"checkedAt":7,"severity":7349,"references":7351,"versionKeys":7356,"packageCount":32,"repositoryCount":2352},"pysec-2026-2255-d0951b98",[7343,7344,7345],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[311],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[7350],{"type":2055,"score":2213},[7352,7353,7354],{"type":2059,"url":7317},{"type":2064,"url":7319},{"type":2125,"url":7355},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":312,"slug":7358,"dossier":91,"summary":346,"aliases":7359,"sourceIds":7363,"published":7364,"modified":7365,"checkedAt":7,"severity":7366,"references":7368,"versionKeys":7374,"packageCount":32,"repositoryCount":2352},"pysec-2026-2256-0f333f0b",[7360,7361,7362],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[312],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[7367],{"type":2055,"score":2213},[7369,7370,7372],{"type":2059,"url":7317},{"type":2064,"url":7371},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2125,"url":7373},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":313,"slug":7376,"dossier":91,"summary":346,"aliases":7377,"sourceIds":7381,"published":7382,"modified":7383,"checkedAt":7,"severity":7384,"references":7387,"versionKeys":7397,"packageCount":32,"repositoryCount":2352},"pysec-2026-2257-bcbe5d79",[7378,7379,7380],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[313],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[7385],{"type":2055,"score":7386},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[7388,7389,7391,7393,7395],{"type":2059,"url":7317},{"type":2064,"url":7390},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2064,"url":7392},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2064,"url":7394},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2125,"url":7396},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":314,"slug":7399,"dossier":46,"summary":346,"aliases":7400,"sourceIds":7405,"published":7406,"modified":7407,"checkedAt":7,"severity":7408,"references":7410,"versionKeys":7426,"packageCount":32,"repositoryCount":2230},"pysec-2026-2286-8795b007",[7401,7402,7403,7404],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[314],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[7409],{"type":2055,"score":4291},[7411,7413,7415,7416,7418,7420,7422,7424],{"type":2070,"url":7412},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2070,"url":7414},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2059,"url":5076},{"type":2059,"url":7417},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2059,"url":7419},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2401,"url":7421},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2401,"url":7423},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2064,"url":7425},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2420,2421,2422,3835,3836,5804,5805,5806],{"id":315,"slug":7428,"dossier":91,"summary":346,"aliases":7429,"sourceIds":7433,"published":7434,"modified":7435,"checkedAt":7,"severity":7436,"references":7439,"versionKeys":7446,"packageCount":32,"repositoryCount":2352},"pysec-2026-3447-df031425",[7430,7431,7432],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[315],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[7437],{"type":2055,"score":7438},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[7440,7442,7444],{"type":2059,"url":7441},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":2064,"url":7443},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2125,"url":7445},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[3074,3075,7447,7448,7449,7450,7451,7452,7453],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":316,"slug":7455,"dossier":91,"summary":346,"aliases":7456,"sourceIds":7460,"published":7461,"modified":7462,"checkedAt":7,"severity":7463,"references":7465,"versionKeys":7474,"packageCount":32,"repositoryCount":2352},"pysec-2026-3451-3e5eac34",[7457,7458,7459],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[316],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[7464],{"type":2055,"score":2213},[7466,7468,7470,7472],{"type":2059,"url":7467},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2064,"url":7469},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2064,"url":7471},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2125,"url":7473},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":317,"slug":7476,"dossier":46,"summary":346,"aliases":7477,"sourceIds":7481,"published":7482,"modified":7483,"checkedAt":7,"severity":7484,"references":7486,"versionKeys":7494,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[7478,7479,7480],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[317],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[7485],{"type":2055,"score":2213},[7487,7488,7490,7492],{"type":2059,"url":7467},{"type":2064,"url":7489},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2064,"url":7491},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2125,"url":7493},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[3102,3103,3104],{"id":318,"slug":7496,"dossier":91,"summary":346,"aliases":7497,"sourceIds":7501,"published":7502,"modified":7503,"checkedAt":7,"severity":7504,"references":7506,"versionKeys":7514,"packageCount":32,"repositoryCount":2352},"pysec-2026-3453-83974725",[7498,7499,7500],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[318],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[7505],{"type":2055,"score":2213},[7507,7508,7510,7512],{"type":2059,"url":7467},{"type":2064,"url":7509},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2064,"url":7511},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2125,"url":7513},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[4219,4220,4221,3100,3101,3102,3103,3104],{"id":319,"slug":7516,"dossier":46,"summary":346,"aliases":7517,"sourceIds":7519,"published":7520,"modified":7521,"checkedAt":7,"severity":7522,"references":7524,"versionKeys":7527,"packageCount":32,"repositoryCount":552},"pysec-2026-597-f85c09cd",[7518],"CVE-2026-12243",[319],"2026-06-30T01:16:29.063Z","2026-07-01T18:15:06.027046365Z",[7523],{"type":2055,"score":2567},[7525],{"type":2125,"url":7526},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",[2619,2620],{"id":320,"slug":7529,"dossier":46,"summary":346,"aliases":7530,"sourceIds":7532,"published":7533,"modified":7534,"checkedAt":7,"severity":7535,"references":7537,"versionKeys":7540,"packageCount":32,"repositoryCount":552},"pysec-2026-99-2c63e84f",[7531],"CVE-2026-0848",[320],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[7536],{"type":2055,"score":3667},[7538],{"type":2125,"url":7539},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[2619,2620],1784548465848]