[{"data":1,"prerenderedAt":2748},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-6174":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":172,"related":175},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T11:49:05.682Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T11:47:56.369Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":105,"unknownLicensePackageCount":32,"advisoryIds":106,"advisoryCount":170,"providers":171},"opencode:6174","opencode-6174",6174,"Energieautarkes Wohnquartier - Backend","energieautarkes-wohnquartier\u002Fbackend","This Python-based REST API delivers energy simulation data for the “Energieautarkes Wohnquartier” project. It provides both precomputed results for various building and system configurations, as well as real-time predictions using a machine learning model trained on over 3,300 high-fidelity SimulationX simulations.\r\n\r\nThe API can be used alongside the separately developed React\u002FThree.js frontend to enable real-time evaluation of user-defined scenarios. Deterministic simulations and ML-based regression are combined to ensure fast and accurate responses, even for previously unseen configurations.","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend","fc7e24cd546449ac9fdee4ad78aab861e0c89666","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fcommit\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666","2026-04-15T13:18:54.254Z","2026-04-15T13:22:39.000Z",{"complete":91,"entryCount":92,"truncated":46},true,78,[94],{"path":56,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"poetry-lock","dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fblob\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666\u002Fpoetry.lock","6876a231ced00a8d5ac3f1a8fa53fd89e79d737091ef2925e25665b04e92e693",200089,"parsed",81,[103],"pypi",2,11,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169],"GHSA-248v-346w-9cwc","GHSA-29vq-49wr-vm6x","GHSA-2g68-c3qc-8985","GHSA-2xpw-w6gg-jr37","GHSA-36fq-jgmw-4r9c","GHSA-36rr-ww3j-vrjv","GHSA-38jv-5279-wg99","GHSA-3m4q-jmj6-r34q","GHSA-43qf-4rqw-9q2g","GHSA-48p4-8xcf-vxj5","GHSA-4f3f-g24h-fr8m","GHSA-5239-wwwm-4pmq","GHSA-5rjg-fvgr-3xxf","GHSA-5wmx-573v-2qwq","GHSA-5xmw-vc9v-4wf2","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-768j-98cg-p3fv","GHSA-7gcm-g887-7qv7","GHSA-7rxf-gvfg-47g4","GHSA-84pr-m4jr-85g5","GHSA-87hc-h4r5-73f7","GHSA-8qvm-5x2c-j2w7","GHSA-8rrh-rw8j-w5fx","GHSA-8vgw-p6qm-5gr7","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-c9rc-mg46-23w3","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f9vj-2wh5-fj8j","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h75v-3vvj-5mfj","GHSA-hgf8-39gv-g3f2","GHSA-hjqc-jx6g-rwp9","GHSA-hxwh-jpp2-84pm","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgx6-5cf9-rr43","GHSA-mq84-hjqx-cwf2","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-qccp-gfcp-xxvc","GHSA-r73j-pqj5-w3x7","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-xg8h-j46f-w952","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-2324","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",63,[],{"files":173,"occurrenceCount":101},[174],{"path":56,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":176,"vulnerabilities":917},[177,189,199,211,221,231,241,251,260,270,279,288,298,307,316,325,334,343,353,362,371,380,389,398,407,416,425,434,443,452,461,470,479,488,497,506,515,524,533,542,551,560,569,578,587,597,606,615,623,631,639,648,657,666,675,684,693,701,710,719,729,738,747,756,765,774,783,792,801,810,819,828,837,846,854,863,872,881,890,900,908],{"id":178,"slug":179,"identity":180,"label":181,"aiRelevant":91,"provider":182,"advisoryCount":38,"licenseExpressions":183,"versions":186,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":188},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",null,[184,185],"BSD-3-Clause","non-standard",[187],"1.6.1",[56],{"id":190,"slug":191,"identity":192,"label":193,"aiRelevant":91,"provider":182,"advisoryCount":38,"licenseExpressions":194,"versions":196,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":198},"package:pypi:tensorflow","tensorflow-b039ea09","pypi:tensorflow","TensorFlow",[195],"Apache-2.0",[197],"2.19.0",[56],{"id":200,"slug":201,"identity":202,"label":203,"aiRelevant":46,"provider":182,"advisoryCount":204,"licenseExpressions":205,"versions":208,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":210},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[206,207],"HPND","MIT-CMU",[209],"11.2.1",[56],{"id":212,"slug":213,"identity":214,"label":215,"aiRelevant":46,"provider":182,"advisoryCount":216,"licenseExpressions":217,"versions":218,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":220},"package:pypi:keras","keras-33e438c4","pypi:keras","keras",9,[195],[219],"3.9.2",[56],{"id":222,"slug":223,"identity":224,"label":225,"aiRelevant":46,"provider":182,"advisoryCount":65,"licenseExpressions":226,"versions":228,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":230},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[227],"MIT",[229],"2.4.0",[56],{"id":232,"slug":233,"identity":234,"label":235,"aiRelevant":46,"provider":182,"advisoryCount":236,"licenseExpressions":237,"versions":238,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":240},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",6,[184,185],[239],"3.1.3",[56],{"id":242,"slug":243,"identity":244,"label":245,"aiRelevant":46,"provider":182,"advisoryCount":246,"licenseExpressions":247,"versions":248,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":250},"package:pypi:flask-cors","flask-cors-348fb6bb","pypi:flask-cors","flask-cors",5,[227],[249],"5.0.1",[56],{"id":252,"slug":253,"identity":254,"label":255,"aiRelevant":46,"provider":182,"advisoryCount":34,"licenseExpressions":256,"versions":257,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":259},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[184,185],[258],"3.1.6",[56],{"id":261,"slug":262,"identity":263,"label":264,"aiRelevant":46,"provider":182,"advisoryCount":265,"licenseExpressions":266,"versions":267,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":269},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[195],[268],"2.32.3",[56],{"id":271,"slug":272,"identity":273,"label":274,"aiRelevant":46,"provider":182,"advisoryCount":265,"licenseExpressions":275,"versions":276,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":278},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[227],[277],"80.4.0",[56],{"id":280,"slug":281,"identity":282,"label":283,"aiRelevant":46,"provider":182,"advisoryCount":104,"licenseExpressions":284,"versions":285,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":287},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[184],[286],"5.29.4",[56],{"id":289,"slug":290,"identity":291,"label":292,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":293,"versions":295,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":297},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[294],"MPL-2.0",[296],"2025.4.26",[56],{"id":299,"slug":300,"identity":301,"label":302,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":303,"versions":304,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":306},"package:pypi:click","click-ef97f731","pypi:click","click",[184,185],[305],"8.2.0",[56],{"id":308,"slug":309,"identity":310,"label":311,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":312,"versions":313,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":315},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[184,185],[314],"3.1.1",[56],{"id":317,"slug":318,"identity":319,"label":320,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":321,"versions":322,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":324},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[227],[323],"4.58.0",[56],{"id":326,"slug":327,"identity":328,"label":329,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":330,"versions":331,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":333},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[184,185],[332],"3.10",[56],{"id":335,"slug":336,"identity":337,"label":338,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":339,"versions":340,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":342},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[184],[341],"3.8",[56],{"id":344,"slug":345,"identity":346,"label":347,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":348,"versions":350,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":352},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[349],"BSD-2-Clause",[351],"2.19.1",[56],{"id":354,"slug":355,"identity":356,"label":357,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":358,"versions":359,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":361},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[184],[360],"1.1.0",[56],{"id":363,"slug":364,"identity":365,"label":366,"aiRelevant":46,"provider":182,"advisoryCount":32,"licenseExpressions":367,"versions":368,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":370},"package:pypi:wheel","wheel-17857b9a","pypi:wheel","wheel",[227],[369],"0.45.1",[56],{"id":372,"slug":373,"identity":374,"label":375,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":376,"versions":377,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":379},"package:pypi:absl-py","absl-py-50126725","pypi:absl-py","absl-py",[195],[378],"2.2.2",[56],{"id":381,"slug":382,"identity":383,"label":384,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":385,"versions":386,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":388},"package:pypi:astunparse","astunparse-16fbaa64","pypi:astunparse","astunparse",[185],[387],"1.6.3",[56],{"id":390,"slug":391,"identity":392,"label":393,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":394,"versions":395,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":397},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[227],[396],"1.9.0",[56],{"id":399,"slug":400,"identity":401,"label":402,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":403,"versions":404,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":406},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[227],[405],"3.4.2",[56],{"id":408,"slug":409,"identity":410,"label":411,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":412,"versions":413,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":415},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[185],[414],"0.4.6",[56],{"id":417,"slug":418,"identity":419,"label":420,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":421,"versions":422,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":424},"package:pypi:compress-json","compress-json-58c09309","pypi:compress-json","compress-json",[227],[423],"1.1.1",[56],{"id":426,"slug":427,"identity":428,"label":429,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":430,"versions":431,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":433},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[185],[432],"1.3.2",[56],{"id":435,"slug":436,"identity":437,"label":438,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":439,"versions":440,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":442},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[185],[441],"0.12.1",[56],{"id":444,"slug":445,"identity":446,"label":447,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":448,"versions":449,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":451},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[195],[450],"25.2.10",[56],{"id":453,"slug":454,"identity":455,"label":456,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":457,"versions":458,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":460},"package:pypi:gast","gast-1c13a212","pypi:gast","gast",[184],[459],"0.6.0",[56],{"id":462,"slug":463,"identity":464,"label":465,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":466,"versions":467,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":469},"package:pypi:google-pasta","google-pasta-35d2f77c","pypi:google-pasta","google-pasta",[195],[468],"0.2.0",[56],{"id":471,"slug":472,"identity":473,"label":474,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":475,"versions":476,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":478},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[195],[477],"1.71.0",[56],{"id":480,"slug":481,"identity":482,"label":483,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":484,"versions":485,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":487},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[227],[486],"23.0.0",[56],{"id":489,"slug":490,"identity":491,"label":492,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":493,"versions":494,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":496},"package:pypi:h5py","h5py-b8fe3869","pypi:h5py","h5py",[184],[495],"3.13.0",[56],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":502,"versions":503,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":505},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[184,185],[504],"2.2.0",[56],{"id":507,"slug":508,"identity":509,"label":510,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":511,"versions":512,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":514},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[184],[513],"1.5.0",[56],{"id":516,"slug":517,"identity":518,"label":519,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":520,"versions":521,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":523},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[185],[522],"1.4.8",[56],{"id":525,"slug":526,"identity":527,"label":528,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":529,"versions":530,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":532},"package:pypi:libclang","libclang-2322c840","pypi:libclang","libclang",[195],[531],"18.1.1",[56],{"id":534,"slug":535,"identity":536,"label":537,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":538,"versions":539,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":541},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[227],[540],"3.0.0",[56],{"id":543,"slug":544,"identity":545,"label":546,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":547,"versions":548,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":550},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[184,185],[549],"3.0.2",[56],{"id":552,"slug":553,"identity":554,"label":555,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":556,"versions":557,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":559},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[185],[558],"3.10.3",[56],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":565,"versions":566,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":568},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[227],[567],"0.1.2",[56],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":574,"versions":575,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":577},"package:pypi:ml-dtypes","ml-dtypes-eed9ce80","pypi:ml-dtypes","ml-dtypes",[185],[576],"0.5.1",[56],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":583,"versions":584,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":586},"package:pypi:namex","namex-fd46fa7e","pypi:namex","namex",[],[585],"0.0.9",[56],{"id":588,"slug":589,"identity":590,"label":591,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":592,"versions":594,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":596},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[593,185],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[595],"2.1.3",[56],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":602,"versions":603,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":605},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[185],[604],"12.5.3.2",[56],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":611,"versions":612,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":614},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[185],[613],"12.5.82",[56],{"id":616,"slug":617,"identity":618,"label":619,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":620,"versions":621,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":622},"package:pypi:nvidia-cuda-nvcc-cu12","nvidia-cuda-nvcc-cu12-0e108124","pypi:nvidia-cuda-nvcc-cu12","nvidia-cuda-nvcc-cu12",[185],[613],[56],{"id":624,"slug":625,"identity":626,"label":627,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":628,"versions":629,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":630},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[185],[613],[56],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":636,"versions":637,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":638},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[185],[613],[56],{"id":640,"slug":641,"identity":642,"label":643,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":644,"versions":645,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":647},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[185],[646],"9.3.0.75",[56],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":653,"versions":654,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":656},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[185],[655],"11.2.3.61",[56],{"id":658,"slug":659,"identity":660,"label":661,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":662,"versions":663,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":665},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[185],[664],"10.3.6.82",[56],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":671,"versions":672,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":674},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[185],[673],"11.6.3.83",[56],{"id":676,"slug":677,"identity":678,"label":679,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":680,"versions":681,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":683},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[185],[682],"12.5.1.3",[56],{"id":685,"slug":686,"identity":687,"label":688,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":689,"versions":690,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":692},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[184,185],[691],"2.23.4",[56],{"id":694,"slug":695,"identity":696,"label":697,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":698,"versions":699,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":700},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[185],[613],[56],{"id":702,"slug":703,"identity":704,"label":705,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":706,"versions":707,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":709},"package:pypi:opt-einsum","opt-einsum-73c64c2e","pypi:opt-einsum","opt-einsum",[227],[708],"3.4.0",[56],{"id":711,"slug":712,"identity":713,"label":714,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":715,"versions":716,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":718},"package:pypi:optree","optree-0d91febb","pypi:optree","optree",[195],[717],"0.15.0",[56],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":724,"versions":726,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":728},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[725,185],"Apache-2.0 OR BSD-2-Clause",[727],"25.0",[56],{"id":730,"slug":731,"identity":732,"label":733,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":734,"versions":735,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":737},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[185],[736],"2.2.3",[56],{"id":739,"slug":740,"identity":741,"label":742,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":743,"versions":744,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":746},"package:pypi:plot-keras-history","plot-keras-history-fe86c5d6","pypi:plot-keras-history","plot-keras-history",[227],[745],"1.1.39",[56],{"id":748,"slug":749,"identity":750,"label":751,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":752,"versions":753,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":755},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[184],[754],"7.0.0",[56],{"id":757,"slug":758,"identity":759,"label":760,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":761,"versions":762,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":764},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[227],[763],"3.2.3",[56],{"id":766,"slug":767,"identity":768,"label":769,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":770,"versions":771,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":773},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[185],[772],"2.9.0.post0",[56],{"id":775,"slug":776,"identity":777,"label":778,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":779,"versions":780,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":782},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[227],[781],"0.4.27",[56],{"id":784,"slug":785,"identity":786,"label":787,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":788,"versions":789,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":791},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[227],[790],"2025.2",[56],{"id":793,"slug":794,"identity":795,"label":796,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":797,"versions":798,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":800},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[227],[799],"14.0.0",[56],{"id":802,"slug":803,"identity":804,"label":805,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":806,"versions":807,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":809},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[227],[808],"0.11.10",[56],{"id":811,"slug":812,"identity":813,"label":814,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":815,"versions":816,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":818},"package:pypi:sanitize-ml-labels","sanitize-ml-labels-c9346ff6","pypi:sanitize-ml-labels","sanitize-ml-labels",[227],[817],"1.1.4",[56],{"id":820,"slug":821,"identity":822,"label":823,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":824,"versions":825,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":827},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[185],[826],"1.15.3",[56],{"id":829,"slug":830,"identity":831,"label":832,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":833,"versions":834,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":836},"package:pypi:six","six-3c3888bd","pypi:six","six",[227],[835],"1.17.0",[56],{"id":838,"slug":839,"identity":840,"label":841,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":842,"versions":843,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":845},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[227],[844],"0.9.0",[56],{"id":847,"slug":848,"identity":849,"label":850,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":851,"versions":852,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":853},"package:pypi:tensorboard","tensorboard-f5e14cf1","pypi:tensorboard","tensorboard",[195],[197],[56],{"id":855,"slug":856,"identity":857,"label":858,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":859,"versions":860,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":862},"package:pypi:tensorboard-data-server","tensorboard-data-server-d2a4e5d5","pypi:tensorboard-data-server","tensorboard-data-server",[195],[861],"0.7.2",[56],{"id":864,"slug":865,"identity":866,"label":867,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":868,"versions":869,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":871},"package:pypi:tensorflow-io-gcs-filesystem","tensorflow-io-gcs-filesystem-1c9c0ea8","pypi:tensorflow-io-gcs-filesystem","tensorflow-io-gcs-filesystem",[195],[870],"0.37.1",[56],{"id":873,"slug":874,"identity":875,"label":876,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":877,"versions":878,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":880},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[227],[879],"3.1.0",[56],{"id":882,"slug":883,"identity":884,"label":885,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":886,"versions":887,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":889},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[184],[888],"3.6.0",[56],{"id":891,"slug":892,"identity":893,"label":894,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":895,"versions":897,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":899},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[896,185],"PSF-2.0",[898],"4.13.2",[56],{"id":901,"slug":902,"identity":903,"label":904,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":905,"versions":906,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":907},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[195],[790],[56],{"id":909,"slug":910,"identity":911,"label":912,"aiRelevant":46,"provider":182,"advisoryCount":38,"licenseExpressions":913,"versions":914,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":916},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[185],[915],"1.17.2",[56],[918,957,989,1022,1054,1085,1110,1137,1168,1200,1226,1252,1292,1328,1358,1389,1415,1445,1476,1515,1541,1569,1593,1625,1658,1684,1718,1748,1773,1832,1864,1895,1923,1950,1973,2001,2035,2059,2091,2132,2154,2184,2216,2245,2269,2296,2323,2357,2378,2407,2460,2483,2511,2544,2563,2580,2597,2615,2638,2660,2687,2708,2728],{"id":107,"slug":919,"dossier":46,"summary":920,"aliases":921,"sourceIds":924,"published":925,"modified":926,"checkedAt":7,"severity":927,"references":931,"versionKeys":955,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[922,923],"CVE-2024-39689","PYSEC-2024-230",[107,923],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[928],{"type":929,"score":930},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[932,935,937,940,943,946,949,951,953],{"type":933,"url":934},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":933,"url":936},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":938,"url":939},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":941,"url":942},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":944,"url":945},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":947,"url":948},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":944,"url":950},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":933,"url":952},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":933,"url":954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[956],"pypi:certifi@2024.6.2",{"id":108,"slug":958,"dossier":46,"summary":959,"aliases":960,"sourceIds":963,"published":964,"modified":965,"checkedAt":7,"severity":966,"references":972,"versionKeys":983,"packageCount":32,"repositoryCount":236},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[961,962],"CVE-2026-27199","PYSEC-2026-2320",[108,962],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[967,970],{"type":968,"score":969},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":929,"score":971},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[973,975,977,979,981],{"type":933,"url":974},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":933,"url":976},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":938,"url":978},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":941,"url":980},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":933,"url":982},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[984,985,986,987,988],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":109,"slug":990,"dossier":46,"summary":991,"aliases":992,"sourceIds":995,"published":996,"modified":997,"checkedAt":7,"severity":998,"references":1001,"versionKeys":1021,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[993,994],"CVE-2024-34069","PYSEC-2026-2043",[109,994],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[999],{"type":929,"score":1000},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1002,1004,1006,1008,1009,1011,1013,1015,1017,1019],{"type":944,"url":1003},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":933,"url":1005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":944,"url":1007},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":941,"url":980},{"type":944,"url":1010},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":944,"url":1012},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":944,"url":1014},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":944,"url":1016},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":941,"url":1018},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":933,"url":1020},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[984],{"id":110,"slug":1023,"dossier":91,"summary":1024,"aliases":1025,"sourceIds":1028,"published":1029,"modified":1030,"checkedAt":7,"severity":1031,"references":1034,"versionKeys":1047,"packageCount":32,"repositoryCount":1053},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1026,1027],"CVE-2025-66471","PYSEC-2026-1994",[110,1027],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[1032],{"type":968,"score":1033},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1035,1037,1039,1041,1043,1045],{"type":944,"url":1036},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":933,"url":1038},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":938,"url":1040},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":941,"url":1042},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":941,"url":1044},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":933,"url":1046},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1048,1049,1050,1051,1052],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":111,"slug":1055,"dossier":46,"summary":1056,"aliases":1057,"sourceIds":1060,"published":1061,"modified":1062,"checkedAt":7,"severity":1063,"references":1068,"versionKeys":1083,"packageCount":32,"repositoryCount":32},"ghsa-36fq-jgmw-4r9c-8dbce69b","Keras is vulnerable to Deserialization of Untrusted Data",[1058,1059],"CVE-2025-9906","PYSEC-2025-76",[111],"2025-09-19T09:31:14Z","2026-07-16T18:59:35.179790998Z",[1064,1066],{"type":929,"score":1065},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":968,"score":1067},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1069,1071,1073,1075,1077,1079,1081],{"type":933,"url":1070},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-9906",{"type":944,"url":1072},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21429",{"type":944,"url":1074},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F713172ab56b864e59e2aa79b1a51b0e728bba858",{"type":941,"url":1076},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras",{"type":944,"url":1078},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.11.0",{"type":944,"url":1080},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2025-76.yaml",{"type":944,"url":1082},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FCVE-2025-9906",[1084],"pypi:keras@3.9.2",{"id":112,"slug":1086,"dossier":46,"summary":1087,"aliases":1088,"sourceIds":1091,"published":1092,"modified":1093,"checkedAt":7,"severity":1094,"references":1098,"versionKeys":1109,"packageCount":32,"repositoryCount":32},"ghsa-36rr-ww3j-vrjv-6da4d3b0","The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`\u002F`.hdf5` file is loaded.",[1089,1090],"CVE-2025-9905","PYSEC-2025-123",[112,1090],"2025-09-19T09:15:36.033Z","2026-06-06T00:45:42.787604478Z",[1095,1097],{"type":968,"score":1096},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":929,"score":1065},[1099,1102,1104,1106,1107],{"type":1100,"url":1101},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-36rr-ww3j-vrjv",{"type":933,"url":1103},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-9905",{"type":938,"url":1105},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21602",{"type":941,"url":1076},{"type":944,"url":1108},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2025-123.yaml",[1084],{"id":113,"slug":1111,"dossier":91,"summary":1112,"aliases":1113,"sourceIds":1116,"published":1117,"modified":1118,"checkedAt":7,"severity":1119,"references":1123,"versionKeys":1136,"packageCount":32,"repositoryCount":1053},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1114,1115],"CVE-2026-21441","PYSEC-2026-1996",[113,1115],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1120,1122],{"type":929,"score":1121},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":968,"score":1033},[1124,1126,1128,1130,1131,1133,1134],{"type":944,"url":1125},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":933,"url":1127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":938,"url":1129},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":941,"url":1042},{"type":944,"url":1132},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":941,"url":1044},{"type":933,"url":1135},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1048,1049,1050,1051,1052],{"id":114,"slug":1138,"dossier":46,"summary":1139,"aliases":1140,"sourceIds":1143,"published":1144,"modified":1145,"checkedAt":7,"severity":1146,"references":1149,"versionKeys":1167,"packageCount":32,"repositoryCount":32},"ghsa-3m4q-jmj6-r34q-1cef6cd5","Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading",[1141,1142],"CVE-2026-1669","PYSEC-2026-2546",[114,1142],"2026-02-18T22:41:58Z","2026-07-13T16:42:53.746237646Z",[1147],{"type":929,"score":1148},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[1150,1152,1154,1156,1158,1159,1161,1163,1165],{"type":944,"url":1151},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-3m4q-jmj6-r34q",{"type":933,"url":1153},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1669",{"type":944,"url":1155},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22057",{"type":944,"url":1157},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F8a37f9dadd8e23fa4ee3f537eeb6413e75d12553",{"type":941,"url":1076},{"type":944,"url":1160},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.12.1",{"type":944,"url":1162},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.13.2",{"type":941,"url":1164},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fkeras",{"type":933,"url":1166},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3m4q-jmj6-r34q",[1084],{"id":115,"slug":1169,"dossier":46,"summary":1170,"aliases":1171,"sourceIds":1174,"published":1175,"modified":1176,"checkedAt":7,"severity":1177,"references":1180,"versionKeys":1197,"packageCount":32,"repositoryCount":104},"ghsa-43qf-4rqw-9q2g-2b94f083","Flask-CORS vulnerable to Improper Handling of Case Sensitivity",[1172,1173],"CVE-2024-6866","PYSEC-2026-1383",[115,1173],"2025-03-20T12:32:45Z","2026-07-07T17:57:18.348501785Z",[1178],{"type":929,"score":1179},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1181,1183,1185,1187,1189,1191,1193,1195],{"type":933,"url":1182},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6866",{"type":944,"url":1184},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Feb39516a3c96b90d0ae5f51293972395ec3ef358",{"type":941,"url":1186},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors",{"type":944,"url":1188},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fextension.py#L195",{"type":944,"url":1190},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F808c11af-faee-43a8-824b-b5ab4f62b9e6",{"type":944,"url":1192},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00049.html",{"type":941,"url":1194},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fflask-cors",{"type":933,"url":1196},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-43qf-4rqw-9q2g",[1198,1199],"pypi:flask-cors@4.0.0","pypi:flask-cors@5.0.1",{"id":116,"slug":1201,"dossier":46,"summary":1202,"aliases":1203,"sourceIds":1206,"published":1207,"modified":1208,"checkedAt":7,"severity":1209,"references":1212,"versionKeys":1225,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1204,1205],"CVE-2025-50182","PYSEC-2026-1997",[116,1205],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1210],{"type":929,"score":1211},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1213,1215,1217,1219,1220,1222,1223],{"type":944,"url":1214},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":933,"url":1216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":938,"url":1218},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":941,"url":1042},{"type":944,"url":1221},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":941,"url":1044},{"type":933,"url":1224},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1048,1049,1050,1051],{"id":117,"slug":1227,"dossier":46,"summary":1228,"aliases":1229,"sourceIds":1232,"published":1233,"modified":1234,"checkedAt":7,"severity":1235,"references":1238,"versionKeys":1251,"packageCount":32,"repositoryCount":32},"ghsa-4f3f-g24h-fr8m-024d3bd8","Keras has an untrusted deserialization vulnerability",[1230,1231],"CVE-2026-1462","PYSEC-2026-2547",[117,1231],"2026-04-13T15:31:42Z","2026-07-13T16:42:43.080773198Z",[1236],{"type":929,"score":1237},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1239,1241,1243,1245,1246,1248,1249],{"type":933,"url":1240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1462",{"type":944,"url":1242},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22035",{"type":944,"url":1244},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002Fb6773d3decaef1b05d8e794458e148cb362f163f",{"type":941,"url":1076},{"type":944,"url":1247},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7e78d6f1-6977-4300-b595-e81bdbda331c",{"type":941,"url":1164},{"type":933,"url":1250},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f3f-g24h-fr8m",[1084],{"id":118,"slug":1253,"dossier":91,"summary":1254,"aliases":1255,"sourceIds":1258,"published":1259,"modified":1260,"checkedAt":7,"severity":1261,"references":1266,"versionKeys":1289,"packageCount":32,"repositoryCount":1053},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1256,1257],"CVE-2026-4539","PYSEC-2026-2987",[118,1257],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[1262,1264],{"type":929,"score":1263},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":968,"score":1265},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1267,1269,1271,1273,1275,1277,1279,1281,1283,1285,1287],{"type":933,"url":1268},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":944,"url":1270},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":944,"url":1272},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":944,"url":1274},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":941,"url":1276},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":944,"url":1278},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":944,"url":1280},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":944,"url":1282},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":944,"url":1284},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":941,"url":1286},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":933,"url":1288},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1290,1291],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":119,"slug":1293,"dossier":46,"summary":1294,"aliases":1295,"sourceIds":1299,"published":1300,"modified":1301,"checkedAt":7,"severity":1302,"references":1307,"versionKeys":1325,"packageCount":32,"repositoryCount":104},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1296,1297,1298],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[119,1298],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[1303,1305],{"type":968,"score":1304},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":929,"score":1306},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1308,1310,1312,1315,1317,1319,1321,1323],{"type":1100,"url":1309},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":933,"url":1311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1313,"url":1314},"REPORT","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":938,"url":1316},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":944,"url":1318},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":941,"url":1320},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":944,"url":1322},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":947,"url":1324},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1326,1327],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":120,"slug":1329,"dossier":46,"summary":1330,"aliases":1331,"sourceIds":1334,"published":1335,"modified":1336,"checkedAt":7,"severity":1337,"references":1341,"versionKeys":1356,"packageCount":32,"repositoryCount":104},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[1332,1333],"CVE-2025-69534","PYSEC-2026-89",[120,1333],"2026-03-05T15:16:11.243Z","2026-06-10T17:02:03.742572395Z",[1338,1339],{"type":929,"score":1121},{"type":968,"score":1340},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1342,1344,1346,1348,1350,1352,1354],{"type":933,"url":1343},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":1313,"url":1345},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":944,"url":1347},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":941,"url":1349},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":944,"url":1351},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":944,"url":1353},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":933,"url":1355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[1357],"pypi:markdown@3.8",{"id":121,"slug":1359,"dossier":46,"summary":1360,"aliases":1361,"sourceIds":1365,"published":1366,"modified":1367,"checkedAt":7,"severity":1368,"references":1373,"versionKeys":1382,"packageCount":32,"repositoryCount":1388},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1362,1363,1364],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[121,1364],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[1369,1371],{"type":929,"score":1370},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":968,"score":1372},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1374,1376,1378,1380],{"type":933,"url":1375},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":933,"url":1377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":941,"url":1379},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":933,"url":1381},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1383,1384,1385,1386,1387],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":122,"slug":1390,"dossier":91,"summary":1391,"aliases":1392,"sourceIds":1395,"published":1396,"modified":1397,"checkedAt":7,"severity":1398,"references":1402,"versionKeys":1411,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1393,1394],"CVE-2026-45409","PYSEC-2026-215",[122,1394],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1399,1400],{"type":929,"score":971},{"type":968,"score":1401},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1403,1405,1407,1409],{"type":933,"url":1404},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":933,"url":1406},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":941,"url":1408},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":944,"url":1410},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1412,1413,1414],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":123,"slug":1416,"dossier":46,"summary":1417,"aliases":1418,"sourceIds":1421,"published":1422,"modified":1423,"checkedAt":7,"severity":1424,"references":1429,"versionKeys":1440,"packageCount":32,"repositoryCount":236},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[1419,1420],"CVE-2026-27205","PYSEC-2026-2151",[123,1420],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[1425,1427],{"type":968,"score":1426},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":929,"score":1428},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1430,1432,1434,1436,1438],{"type":933,"url":1431},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":933,"url":1433},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":938,"url":1435},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":941,"url":1437},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":933,"url":1439},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[1441,1442,1443,1444],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":124,"slug":1446,"dossier":46,"summary":1447,"aliases":1448,"sourceIds":1451,"published":1452,"modified":1453,"checkedAt":7,"severity":1454,"references":1457,"versionKeys":1470,"packageCount":32,"repositoryCount":236},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[1449,1450],"CVE-2025-66034","PYSEC-2026-1389",[124,1450],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[1455],{"type":929,"score":1456},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[1458,1460,1462,1464,1466,1468],{"type":944,"url":1459},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":933,"url":1461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":944,"url":1463},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":941,"url":1465},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":941,"url":1467},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":933,"url":1469},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[1471,1472,1473,1474,1475],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":125,"slug":1477,"dossier":46,"summary":1478,"aliases":1479,"sourceIds":1482,"published":1483,"modified":1484,"checkedAt":7,"severity":1485,"references":1488,"versionKeys":1505,"packageCount":32,"repositoryCount":1388},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[1480,1481],"CVE-2026-0994","PYSEC-2026-1805",[125,1481],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[1486],{"type":968,"score":1487},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[1489,1491,1493,1495,1497,1499,1501,1503],{"type":933,"url":1490},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":944,"url":1492},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":944,"url":1494},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":944,"url":1496},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":944,"url":1498},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":941,"url":1500},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":941,"url":1502},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":933,"url":1504},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[1506,1507,1508,1509,1510,1511,1512,1513,1514],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":126,"slug":1516,"dossier":46,"summary":1517,"aliases":1518,"sourceIds":1521,"published":1175,"modified":1522,"checkedAt":7,"severity":1523,"references":1526,"versionKeys":1540,"packageCount":32,"repositoryCount":104},"ghsa-7rxf-gvfg-47g4-171801e8","Flask-CORS improper regex path matching vulnerability",[1519,1520],"CVE-2024-6839","PYSEC-2026-1384",[126,1520],"2026-07-07T17:57:28.129199523Z",[1524],{"type":929,"score":1525},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1527,1529,1531,1532,1534,1536,1537,1538],{"type":933,"url":1528},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6839",{"type":944,"url":1530},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fe970988bea563e05e8b8f53fa7bcc134b5bf5c5f",{"type":941,"url":1186},{"type":944,"url":1533},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fcore.py#L73",{"type":944,"url":1535},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F403eb1fc-86f4-4820-8eba-0f3dfae9f2b4",{"type":944,"url":1192},{"type":941,"url":1194},{"type":933,"url":1539},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7rxf-gvfg-47g4",[1198,1199],{"id":127,"slug":1542,"dossier":46,"summary":1543,"aliases":1544,"sourceIds":1547,"published":1548,"modified":1549,"checkedAt":7,"severity":1550,"references":1555,"versionKeys":1568,"packageCount":32,"repositoryCount":32},"ghsa-84pr-m4jr-85g5-4a9795ee","flask-cors vulnerable to log injection when the log level is set to debug",[1545,1546],"CVE-2024-1681","PYSEC-2024-271",[127,1546],"2024-04-19T20:15:09.273Z","2026-06-10T17:01:16.365143709Z",[1551,1553],{"type":929,"score":1552},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":929,"score":1554},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1556,1558,1559,1561,1563,1565,1566],{"type":933,"url":1557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-1681",{"type":941,"url":1186},{"type":944,"url":1560},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F40acc8092332dfed4bb54d7a4f89a6d479466de7\u002Fflask_cors\u002Fextension.py#L194",{"type":944,"url":1562},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-271.yaml",{"type":1100,"url":1564},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25a7a0ba-9fa2-4777-acb6-03e5539bb644",{"type":944,"url":1192},{"type":933,"url":1567},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-84pr-m4jr-85g5",[1198],{"id":128,"slug":1570,"dossier":46,"summary":1571,"aliases":1572,"sourceIds":1575,"published":1576,"modified":1577,"checkedAt":7,"severity":1578,"references":1581,"versionKeys":1592,"packageCount":32,"repositoryCount":246},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[1573,1574],"CVE-2026-21860","PYSEC-2026-2044",[128,1574],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[1579,1580],{"type":929,"score":971},{"type":968,"score":969},[1582,1584,1586,1588,1589,1590],{"type":944,"url":1583},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":933,"url":1585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":944,"url":1587},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":941,"url":980},{"type":941,"url":1018},{"type":933,"url":1591},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[984,985,986,987],{"id":129,"slug":1594,"dossier":46,"summary":1595,"aliases":1596,"sourceIds":1599,"published":1600,"modified":1601,"checkedAt":7,"severity":1602,"references":1605,"versionKeys":1624,"packageCount":32,"repositoryCount":265},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[1597,1598],"CVE-2025-4565","PYSEC-2026-1806",[129,1598],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[1603],{"type":968,"score":1604},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1606,1608,1610,1612,1614,1615,1617,1619,1621,1622],{"type":944,"url":1607},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":944,"url":1609},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":933,"url":1611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":944,"url":1613},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":941,"url":1500},{"type":944,"url":1616},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":944,"url":1618},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":944,"url":1620},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":941,"url":1502},{"type":933,"url":1623},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[1506,1508,1509],{"id":130,"slug":1626,"dossier":46,"summary":1627,"aliases":1628,"sourceIds":1631,"published":1632,"modified":1633,"checkedAt":7,"severity":1634,"references":1637,"versionKeys":1655,"packageCount":32,"repositoryCount":104},"ghsa-8rrh-rw8j-w5fx-eadd80fb","Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack",[1629,1630],"CVE-2026-24049","PYSEC-2026-2047",[130,1630],"2026-01-22T18:02:56Z","2026-07-07T17:56:06.063831091Z",[1635],{"type":929,"score":1636},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[1638,1640,1642,1644,1647,1649,1651,1653],{"type":944,"url":1639},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fsecurity\u002Fadvisories\u002FGHSA-8rrh-rw8j-w5fx",{"type":933,"url":1641},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24049",{"type":938,"url":1643},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fcommit\u002F7a7d2de96b22a9adf9208afcc9547e1001569fef",{"type":1645,"url":1646},"INTRODUCED","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fcommit\u002F934fe177ff912c8e03d5ae951d3805e1fd90ba5e",{"type":941,"url":1648},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel",{"type":944,"url":1650},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Freleases\u002Ftag\u002F0.46.2",{"type":941,"url":1652},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwheel",{"type":933,"url":1654},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8rrh-rw8j-w5fx",[1656,1657],"pypi:wheel@0.43.0","pypi:wheel@0.45.1",{"id":131,"slug":1659,"dossier":46,"summary":1660,"aliases":1661,"sourceIds":1664,"published":1175,"modified":1665,"checkedAt":7,"severity":1666,"references":1669,"versionKeys":1683,"packageCount":32,"repositoryCount":104},"ghsa-8vgw-p6qm-5gr7-be25d449","Flask-CORS allows for inconsistent CORS matching",[1662,1663],"CVE-2024-6844","PYSEC-2026-1385",[131,1663],"2026-07-07T17:57:07.966932476Z",[1667],{"type":929,"score":1668},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1670,1672,1674,1675,1677,1679,1680,1681],{"type":933,"url":1671},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6844",{"type":944,"url":1673},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F35d875319621bd129a38b2b823abf4a2f6cda536",{"type":941,"url":1186},{"type":944,"url":1676},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002Fmain\u002Fflask_cors\u002Fextension.py#L193",{"type":944,"url":1678},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F731a6cd4-d05f-4fe6-8f5b-fe088d7b34e0",{"type":944,"url":1192},{"type":941,"url":1194},{"type":933,"url":1682},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8vgw-p6qm-5gr7",[1198,1199],{"id":132,"slug":1685,"dossier":46,"summary":1686,"aliases":1687,"sourceIds":1690,"published":1691,"modified":1692,"checkedAt":7,"severity":1693,"references":1696,"versionKeys":1715,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1688,1689],"CVE-2024-47081","PYSEC-2026-1872",[132,1689],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1694],{"type":929,"score":1695},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1697,1699,1701,1703,1705,1707,1709,1711,1713],{"type":944,"url":1698},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":933,"url":1700},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":944,"url":1702},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":938,"url":1704},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":941,"url":1706},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":944,"url":1708},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":944,"url":1710},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":941,"url":1712},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":933,"url":1714},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1716,1717],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":133,"slug":1719,"dossier":46,"summary":1720,"aliases":1721,"sourceIds":1724,"published":1725,"modified":1726,"checkedAt":7,"severity":1727,"references":1730,"versionKeys":1747,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1722,1723],"CVE-2024-35195","PYSEC-2026-1873",[133,1723],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1728],{"type":929,"score":1729},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1731,1733,1735,1737,1739,1740,1742,1744,1745],{"type":944,"url":1732},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":933,"url":1734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":944,"url":1736},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":938,"url":1738},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":941,"url":1706},{"type":944,"url":1741},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":944,"url":1743},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":941,"url":1712},{"type":933,"url":1746},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1716],{"id":134,"slug":1749,"dossier":46,"summary":1750,"aliases":1751,"sourceIds":1754,"published":1755,"modified":1756,"checkedAt":7,"severity":1757,"references":1760,"versionKeys":1772,"packageCount":32,"repositoryCount":32},"ghsa-c9rc-mg46-23w3-3ac3227d","Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality",[1752,1753],"CVE-2025-8747","PYSEC-2025-75",[134],"2025-08-12T19:33:07Z","2026-05-29T21:00:16.208455145Z",[1758],{"type":929,"score":1759},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1761,1763,1765,1766,1767,1768,1770],{"type":944,"url":1762},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-c9rc-mg46-23w3",{"type":933,"url":1764},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8747",{"type":944,"url":1072},{"type":944,"url":1074},{"type":941,"url":1076},{"type":944,"url":1769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2025-75.yaml",{"type":944,"url":1771},"https:\u002F\u002Fjfrog.com\u002Fblog\u002Fkeras-safe_mode-bypass-vulnerability",[1084],{"id":135,"slug":1774,"dossier":46,"summary":1775,"aliases":1776,"sourceIds":1780,"published":1781,"modified":1782,"checkedAt":7,"severity":1783,"references":1787,"versionKeys":1827,"packageCount":32,"repositoryCount":1831},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[1777,1778,1779],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[135,1779],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[1784,1786],{"type":968,"score":1785},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":929,"score":1121},[1788,1790,1792,1794,1796,1798,1799,1801,1803,1805,1807,1809,1811,1813,1815,1817,1819,1821,1823,1825],{"type":944,"url":1789},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":933,"url":1791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":944,"url":1793},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":944,"url":1795},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":944,"url":1797},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":941,"url":1379},{"type":944,"url":1800},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":944,"url":1802},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":944,"url":1804},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":933,"url":1806},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":933,"url":1808},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":933,"url":1810},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":933,"url":1812},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":933,"url":1814},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":933,"url":1816},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":933,"url":1818},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":933,"url":1820},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":933,"url":1822},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":933,"url":1824},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":933,"url":1826},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1828,1829,1830,1383,1384,1385,1386],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":136,"slug":1833,"dossier":46,"summary":1834,"aliases":1835,"sourceIds":1838,"published":1839,"modified":1840,"checkedAt":7,"severity":1841,"references":1844,"versionKeys":1861,"packageCount":32,"repositoryCount":104},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[1836,1837],"CVE-2025-27516","PYSEC-2026-1471",[136,1837],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[1842],{"type":968,"score":1843},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1845,1847,1849,1851,1853,1855,1857,1859],{"type":944,"url":1846},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":933,"url":1848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":938,"url":1850},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":941,"url":1852},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":944,"url":1854},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":944,"url":1856},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":941,"url":1858},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":933,"url":1860},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[1862,1863],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":137,"slug":1865,"dossier":46,"summary":1866,"aliases":1867,"sourceIds":1871,"published":1872,"modified":1873,"checkedAt":7,"severity":1874,"references":1878,"versionKeys":1894,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[1868,1869,1870],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[137,1870],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[1875,1876],{"type":929,"score":1759},{"type":968,"score":1877},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1879,1881,1883,1885,1886,1888,1890,1892],{"type":933,"url":1880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":944,"url":1882},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":944,"url":1884},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":941,"url":1320},{"type":944,"url":1887},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":944,"url":1889},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":941,"url":1891},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":933,"url":1893},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1326],{"id":138,"slug":1896,"dossier":46,"summary":1897,"aliases":1898,"sourceIds":1901,"published":1902,"modified":1903,"checkedAt":7,"severity":1904,"references":1907,"versionKeys":1922,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[1899,1900],"CVE-2024-49766","PYSEC-2026-2045",[138,1900],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[1905],{"type":968,"score":1906},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1908,1910,1912,1914,1915,1917,1919,1920],{"type":944,"url":1909},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":933,"url":1911},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":938,"url":1913},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":941,"url":980},{"type":944,"url":1916},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":944,"url":1918},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":941,"url":1018},{"type":933,"url":1921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[984],{"id":139,"slug":1924,"dossier":91,"summary":1925,"aliases":1926,"sourceIds":1929,"published":1930,"modified":1931,"checkedAt":7,"severity":1932,"references":1937,"versionKeys":1947,"packageCount":32,"repositoryCount":204},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[1927,1928],"CVE-2026-25645","PYSEC-2026-2275",[139,1928],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[1933,1935],{"type":929,"score":1934},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":929,"score":1936},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1938,1940,1942,1944,1945],{"type":933,"url":1939},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":933,"url":1941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":938,"url":1943},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":941,"url":1706},{"type":933,"url":1946},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1716,1717,1948,1949],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":140,"slug":1951,"dossier":91,"summary":1952,"aliases":1953,"sourceIds":1956,"published":1957,"modified":1958,"checkedAt":7,"severity":1959,"references":1961,"versionKeys":1972,"packageCount":32,"repositoryCount":1053},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[1954,1955],"CVE-2025-66418","PYSEC-2026-1998",[140,1955],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[1960],{"type":968,"score":1033},[1962,1964,1966,1968,1969,1970],{"type":944,"url":1963},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":933,"url":1965},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":938,"url":1967},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":941,"url":1042},{"type":941,"url":1044},{"type":933,"url":1971},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1048,1049,1050,1051,1052],{"id":141,"slug":1974,"dossier":46,"summary":1975,"aliases":1976,"sourceIds":1979,"published":1980,"modified":1981,"checkedAt":7,"severity":1982,"references":1985,"versionKeys":2000,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[1977,1978],"CVE-2024-56201","PYSEC-2026-1472",[141,1978],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[1983,1984],{"type":929,"score":1306},{"type":968,"score":1843},[1986,1988,1990,1992,1994,1995,1997,1998],{"type":944,"url":1987},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":933,"url":1989},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":944,"url":1991},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":938,"url":1993},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":941,"url":1852},{"type":944,"url":1996},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":941,"url":1858},{"type":933,"url":1999},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[1862],{"id":142,"slug":2002,"dossier":46,"summary":2003,"aliases":2004,"sourceIds":2007,"published":2008,"modified":2009,"checkedAt":7,"severity":2010,"references":2013,"versionKeys":2034,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[2005,2006],"CVE-2024-34064","PYSEC-2026-1474",[142,2006],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[2011],{"type":929,"score":2012},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2014,2016,2018,2020,2021,2023,2025,2027,2029,2031,2032],{"type":944,"url":2015},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":933,"url":2017},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":938,"url":2019},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":941,"url":1852},{"type":944,"url":2022},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":944,"url":2024},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":944,"url":2026},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":944,"url":2028},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":944,"url":2030},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":941,"url":1858},{"type":933,"url":2033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[1862],{"id":143,"slug":2036,"dossier":46,"summary":959,"aliases":2037,"sourceIds":2040,"published":2041,"modified":2042,"checkedAt":7,"severity":2043,"references":2045,"versionKeys":2058,"packageCount":32,"repositoryCount":246},"ghsa-hgf8-39gv-g3f2-0469b394",[2038,2039],"CVE-2025-66221","PYSEC-2026-2046",[143,2039],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[2044],{"type":968,"score":969},[2046,2048,2050,2052,2053,2055,2056],{"type":944,"url":2047},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":933,"url":2049},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":944,"url":2051},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":941,"url":980},{"type":944,"url":2054},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":941,"url":1018},{"type":933,"url":2057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[984,985,986,987],{"id":144,"slug":2060,"dossier":46,"summary":2061,"aliases":2062,"sourceIds":2065,"published":2066,"modified":2067,"checkedAt":7,"severity":2068,"references":2073,"versionKeys":2090,"packageCount":32,"repositoryCount":32},"ghsa-hjqc-jx6g-rwp9-e1daa1c5","Keras Directory Traversal Vulnerability",[2063,2064],"CVE-2025-12060","PYSEC-2026-1486",[144,2064],"2025-12-02T00:58:33Z","2026-07-07T17:57:31.462260108Z",[2069,2071],{"type":929,"score":2070},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":968,"score":2072},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[2074,2076,2078,2080,2082,2084,2085,2087,2088],{"type":944,"url":2075},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-hjqc-jx6g-rwp9",{"type":933,"url":2077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12060",{"type":933,"url":2079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12638",{"type":944,"url":2081},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21760",{"type":944,"url":2083},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F47fcb397ee4caffd5a75efd1fa3067559594e951",{"type":941,"url":1076},{"type":944,"url":2086},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff94f5beb-54d8-4e6a-8bac-86d9aee103f4",{"type":941,"url":1164},{"type":933,"url":2089},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hjqc-jx6g-rwp9",[1084],{"id":145,"slug":2092,"dossier":46,"summary":2093,"aliases":2094,"sourceIds":2097,"published":2098,"modified":2099,"checkedAt":7,"severity":2100,"references":2105,"versionKeys":2131,"packageCount":32,"repositoryCount":32},"ghsa-hxwh-jpp2-84pm-85ca3470","Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default",[2095,2096],"CVE-2024-6221","PYSEC-2024-71",[145,2096],"2024-08-18T19:15:00Z","2026-07-09T16:56:25.795378335Z",[2101,2103],{"type":929,"score":2102},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":968,"score":2104},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2106,2108,2110,2112,2114,2116,2118,2120,2121,2123,2125,2127,2129],{"type":933,"url":2107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6221",{"type":944,"url":2109},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fissues\u002F362",{"type":944,"url":2111},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F363",{"type":944,"url":2113},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F368",{"type":944,"url":2115},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F03aa3f8e2256437f7bad96422a747b98ab5e31bf",{"type":944,"url":2117},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F7ae310c56ac30e0b94fb42129aa377bf633256ec",{"type":944,"url":2119},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fc8514760cf03fcce16d77f6db7007aad429c4548",{"type":941,"url":1186},{"type":944,"url":2122},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Freleases",{"type":944,"url":2124},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-260.yaml",{"type":944,"url":2126},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-71.yaml",{"type":944,"url":2128},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa42935fc-6f57-4818-bca4-3d528235df4d",{"type":933,"url":2130},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxwh-jpp2-84pm",[1198],{"id":146,"slug":2133,"dossier":46,"summary":2134,"aliases":2135,"sourceIds":2138,"published":2139,"modified":2140,"checkedAt":7,"severity":2141,"references":2144,"versionKeys":2152,"packageCount":32,"repositoryCount":265},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2136,2137],"CVE-2026-44432","PYSEC-2026-142",[146,2137],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[2142,2143],{"type":929,"score":1121},{"type":968,"score":1033},[2145,2147,2149,2151],{"type":933,"url":2146},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":933,"url":2148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":944,"url":2150},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":941,"url":1042},[2153],"pypi:urllib3@2.6.3",{"id":147,"slug":2155,"dossier":46,"summary":2156,"aliases":2157,"sourceIds":2160,"published":2161,"modified":2162,"checkedAt":7,"severity":2163,"references":2166,"versionKeys":2179,"packageCount":32,"repositoryCount":105},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[2158,2159],"CVE-2026-28684","PYSEC-2026-2270",[147,2159],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[2164],{"type":929,"score":2165},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2167,2169,2171,2173,2175,2177],{"type":938,"url":2168},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":933,"url":2170},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":938,"url":2172},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":944,"url":2174},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":941,"url":2176},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":933,"url":2178},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[2180,2181,2182,2183],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":148,"slug":2185,"dossier":46,"summary":2186,"aliases":2187,"sourceIds":2190,"published":2191,"modified":2192,"checkedAt":7,"severity":2193,"references":2197,"versionKeys":2215,"packageCount":32,"repositoryCount":32},"ghsa-mgx6-5cf9-rr43-cc61e0fb","Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)",[2188,2189],"CVE-2026-0897","PYSEC-2026-73",[148,2189],"2026-01-15T14:16:26.890Z","2026-06-26T18:00:04.991061489Z",[2194,2196],{"type":968,"score":2195},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":929,"score":1121},[2198,2200,2202,2204,2206,2208,2210,2211,2213],{"type":944,"url":2199},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-mgx6-5cf9-rr43",{"type":933,"url":2201},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0897",{"type":938,"url":2203},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21880",{"type":944,"url":2205},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22081",{"type":944,"url":2207},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F7360d4f0d764fbb1fa9c6408fe53da41974dd4f6",{"type":944,"url":2209},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002Ff704c887bf459b42769bfc8a9182f838009afddb",{"type":941,"url":1076},{"type":944,"url":2212},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2026-73.yaml",{"type":933,"url":2214},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgx6-5cf9-rr43",[1084],{"id":149,"slug":2217,"dossier":46,"summary":2218,"aliases":2219,"sourceIds":2223,"published":2224,"modified":2225,"checkedAt":7,"severity":2226,"references":2229,"versionKeys":2244,"packageCount":32,"repositoryCount":32},"ghsa-mq84-hjqx-cwf2-572417f9","Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery",[2220,2221,2222],"CVE-2025-12058","GHSA-qg93-c7p6-gg7f","PYSEC-2026-1487",[149,2222],"2025-10-29T09:30:22Z","2026-07-07T17:57:32.006640385Z",[2227],{"type":968,"score":2228},"CVSS:4.0\u002FAV:A\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:H\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2230,2232,2234,2236,2238,2239,2241,2242],{"type":944,"url":2231},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-qg93-c7p6-gg7f",{"type":933,"url":2233},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12058",{"type":944,"url":2235},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21751",{"type":944,"url":2237},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F61ac8c1e51862c471dee7b49029c356f55531487",{"type":941,"url":1076},{"type":944,"url":2240},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2025-12058",{"type":941,"url":1164},{"type":933,"url":2243},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq84-hjqx-cwf2",[1084],{"id":150,"slug":2246,"dossier":46,"summary":2247,"aliases":2248,"sourceIds":2251,"published":2252,"modified":2253,"checkedAt":7,"severity":2254,"references":2256,"versionKeys":2268,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[2249,2250],"CVE-2025-50181","PYSEC-2026-1999",[150,2250],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[2255],{"type":929,"score":1211},[2257,2259,2261,2263,2264,2265,2266],{"type":944,"url":2258},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":933,"url":2260},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":938,"url":2262},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":941,"url":1042},{"type":944,"url":1221},{"type":941,"url":1044},{"type":933,"url":2267},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1048,1049,1050,1051],{"id":151,"slug":2270,"dossier":91,"summary":2271,"aliases":2272,"sourceIds":2276,"published":2277,"modified":2278,"checkedAt":7,"severity":2279,"references":2283,"versionKeys":2295,"packageCount":32,"repositoryCount":1053},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[2273,2274,2275],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[151,2275],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[2280,2281],{"type":968,"score":1785},{"type":929,"score":2282},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2284,2285,2287,2289,2291,2293,2294],{"type":944,"url":1789},{"type":938,"url":2286},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":933,"url":2288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":938,"url":2290},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":938,"url":2292},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":941,"url":1379},{"type":933,"url":1381},[1828,1829,1830,1383,1384,1385,1386,1387],{"id":152,"slug":2297,"dossier":46,"summary":2298,"aliases":2299,"sourceIds":2302,"published":2303,"modified":2304,"checkedAt":7,"severity":2305,"references":2309,"versionKeys":2322,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[2300,2301],"CVE-2024-56326","PYSEC-2026-1475",[152,2301],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[2306,2308],{"type":929,"score":2307},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":968,"score":1843},[2310,2312,2314,2316,2317,2318,2319,2320],{"type":944,"url":2311},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":933,"url":2313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":938,"url":2315},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":941,"url":1852},{"type":944,"url":1996},{"type":944,"url":1854},{"type":941,"url":1858},{"type":933,"url":2321},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[1862],{"id":153,"slug":2324,"dossier":46,"summary":2325,"aliases":2326,"sourceIds":2330,"published":2331,"modified":2332,"checkedAt":7,"severity":2333,"references":2336,"versionKeys":2356,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[2327,2328,2329],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[153,2329],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[2334,2335],{"type":929,"score":1121},{"type":968,"score":1401},[2337,2339,2341,2343,2345,2347,2349,2350,2351,2353,2354],{"type":944,"url":2338},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":933,"url":2340},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":944,"url":2342},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":944,"url":2344},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":944,"url":2346},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":944,"url":2348},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":941,"url":980},{"type":944,"url":1916},{"type":944,"url":2352},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":941,"url":1018},{"type":933,"url":2355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[984],{"id":154,"slug":2358,"dossier":91,"summary":2359,"aliases":2360,"sourceIds":2363,"published":2364,"modified":2365,"checkedAt":7,"severity":2366,"references":2371,"versionKeys":2377,"packageCount":32,"repositoryCount":204},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[2361,2362],"CVE-2026-44431","PYSEC-2026-141",[154,2362],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[2367,2369],{"type":929,"score":2368},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":968,"score":2370},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2372,2374,2376],{"type":933,"url":2373},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":933,"url":2375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":941,"url":1042},[1048,1049,1050,1051,1052,2153],{"id":155,"slug":2379,"dossier":91,"summary":2380,"aliases":2381,"sourceIds":2385,"published":2386,"modified":2387,"checkedAt":7,"severity":2388,"references":2391,"versionKeys":2406,"packageCount":32,"repositoryCount":1053},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[2382,2383,2384],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[155,2384],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[2389,2390],{"type":929,"score":1370},{"type":968,"score":1372},[2392,2394,2396,2398,2400,2401,2402,2404],{"type":944,"url":2393},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":933,"url":2395},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":944,"url":2397},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":944,"url":2399},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":941,"url":1379},{"type":944,"url":1381},{"type":941,"url":2403},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":933,"url":2405},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":156,"slug":2408,"dossier":91,"summary":2409,"aliases":2410,"sourceIds":2414,"published":2415,"modified":2416,"checkedAt":7,"severity":2417,"references":2421,"versionKeys":2459,"packageCount":32,"repositoryCount":1053},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[2411,2412,2413],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[156,2413],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[2418,2419],{"type":929,"score":1121},{"type":968,"score":2420},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2422,2424,2426,2428,2430,2431,2433,2435,2437,2439,2441,2443,2444,2446,2448,2450,2451,2453,2455,2457],{"type":944,"url":2423},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":933,"url":2425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":944,"url":2427},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":944,"url":2429},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":941,"url":1379},{"type":944,"url":2432},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":944,"url":2434},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":944,"url":2436},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":933,"url":2438},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":933,"url":2440},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":933,"url":2442},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":933,"url":1812},{"type":933,"url":2445},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":933,"url":2447},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":933,"url":2449},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":933,"url":1814},{"type":933,"url":2452},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":933,"url":2454},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":933,"url":2456},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":933,"url":2458},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":157,"slug":2461,"dossier":91,"summary":2462,"aliases":2463,"sourceIds":2467,"published":2468,"modified":2469,"checkedAt":7,"severity":2470,"references":2473,"versionKeys":2482,"packageCount":32,"repositoryCount":1053},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[2464,2465,2466],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[157,2466],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[2471,2472],{"type":929,"score":1370},{"type":968,"score":1372},[2474,2476,2478,2480,2481],{"type":933,"url":2475},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":933,"url":2477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":944,"url":2479},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":941,"url":1379},{"type":933,"url":1381},[1828,1829,1830,1383,1384,1385,1386,1387],{"id":158,"slug":2484,"dossier":46,"summary":2485,"aliases":2486,"sourceIds":2490,"published":2491,"modified":2492,"checkedAt":7,"severity":2493,"references":2496,"versionKeys":2510,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[2487,2488,2489],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[158,2489],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[2494],{"type":929,"score":2495},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2497,2499,2501,2503,2505,2507,2508],{"type":933,"url":2498},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":933,"url":2500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":944,"url":2502},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":938,"url":2504},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":944,"url":2506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":941,"url":1379},{"type":944,"url":2509},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1383],{"id":159,"slug":2512,"dossier":91,"summary":182,"aliases":2513,"sourceIds":2516,"published":2517,"modified":2518,"checkedAt":7,"severity":2519,"references":2522,"versionKeys":2537,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[2514,2515],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[159],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[2520],{"type":929,"score":2521},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2523,2525,2527,2529,2531,2533,2535],{"type":944,"url":2524},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":944,"url":2526},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":933,"url":2528},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":933,"url":2530},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1313,"url":2532},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":938,"url":2534},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1100,"url":2536},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[2538,2539,2540,2541,2542,2543],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":160,"slug":2545,"dossier":91,"summary":182,"aliases":2546,"sourceIds":2550,"published":2551,"modified":2552,"checkedAt":7,"severity":2553,"references":2555,"versionKeys":2562,"packageCount":32,"repositoryCount":1053},"pysec-2026-2253-e1ccf3df",[2547,2548,2549],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[160],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[2554],{"type":929,"score":1121},[2556,2558,2560],{"type":933,"url":2557},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":938,"url":2559},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1100,"url":2561},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":161,"slug":2564,"dossier":91,"summary":182,"aliases":2565,"sourceIds":2569,"published":2570,"modified":2571,"checkedAt":7,"severity":2572,"references":2574,"versionKeys":2579,"packageCount":32,"repositoryCount":1053},"pysec-2026-2254-a1ed1fd2",[2566,2567,2568],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[161],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[2573],{"type":929,"score":1121},[2575,2576,2577],{"type":933,"url":2557},{"type":938,"url":2559},{"type":1100,"url":2578},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":162,"slug":2581,"dossier":91,"summary":182,"aliases":2582,"sourceIds":2586,"published":2587,"modified":2588,"checkedAt":7,"severity":2589,"references":2591,"versionKeys":2596,"packageCount":32,"repositoryCount":1053},"pysec-2026-2255-d0951b98",[2583,2584,2585],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[162],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[2590],{"type":929,"score":1121},[2592,2593,2594],{"type":933,"url":2557},{"type":938,"url":2559},{"type":1100,"url":2595},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":163,"slug":2598,"dossier":91,"summary":182,"aliases":2599,"sourceIds":2603,"published":2604,"modified":2605,"checkedAt":7,"severity":2606,"references":2608,"versionKeys":2614,"packageCount":32,"repositoryCount":1053},"pysec-2026-2256-0f333f0b",[2600,2601,2602],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[163],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[2607],{"type":929,"score":1121},[2609,2610,2612],{"type":933,"url":2557},{"type":938,"url":2611},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1100,"url":2613},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":164,"slug":2616,"dossier":91,"summary":182,"aliases":2617,"sourceIds":2621,"published":2622,"modified":2623,"checkedAt":7,"severity":2624,"references":2627,"versionKeys":2637,"packageCount":32,"repositoryCount":1053},"pysec-2026-2257-bcbe5d79",[2618,2619,2620],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[164],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[2625],{"type":929,"score":2626},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2628,2629,2631,2633,2635],{"type":933,"url":2557},{"type":938,"url":2630},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":938,"url":2632},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":938,"url":2634},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1100,"url":2636},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":165,"slug":2639,"dossier":46,"summary":182,"aliases":2640,"sourceIds":2642,"published":2643,"modified":2644,"checkedAt":7,"severity":2645,"references":2648,"versionKeys":2659,"packageCount":32,"repositoryCount":32},"pysec-2026-2324-614c793b",[2641],"CVE-2026-11816",[165],"2026-06-11T14:16:26.557Z","2026-07-13T11:00:08.009375603Z",[2646],{"type":929,"score":2647},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2649,2651,2653,2655,2657],{"type":933,"url":2650},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-11816",{"type":933,"url":2652},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487912",{"type":933,"url":2654},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-11816.json",{"type":938,"url":2656},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F2465b6657b02c8eed308759b7e800e295ae01888",{"type":1100,"url":2658},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa07e3983-7158-4419-af2b-38f1dea01a4f",[1084],{"id":166,"slug":2661,"dossier":91,"summary":182,"aliases":2662,"sourceIds":2666,"published":2667,"modified":2668,"checkedAt":7,"severity":2669,"references":2672,"versionKeys":2679,"packageCount":32,"repositoryCount":1053},"pysec-2026-3447-df031425",[2663,2664,2665],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[166],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[2670],{"type":929,"score":2671},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2673,2675,2677],{"type":933,"url":2674},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":938,"url":2676},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1100,"url":2678},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[1326,1327,2680,2681,2682,2683,2684,2685,2686],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":167,"slug":2688,"dossier":91,"summary":182,"aliases":2689,"sourceIds":2693,"published":2694,"modified":2695,"checkedAt":7,"severity":2696,"references":2698,"versionKeys":2707,"packageCount":32,"repositoryCount":1053},"pysec-2026-3451-3e5eac34",[2690,2691,2692],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[167],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[2697],{"type":929,"score":1121},[2699,2701,2703,2705],{"type":933,"url":2700},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":938,"url":2702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":938,"url":2704},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1100,"url":2706},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[1828,1829,1830,1383,1384,1385,1386,1387],{"id":168,"slug":2709,"dossier":46,"summary":182,"aliases":2710,"sourceIds":2714,"published":2715,"modified":2716,"checkedAt":7,"severity":2717,"references":2719,"versionKeys":2727,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[2711,2712,2713],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[168],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[2718],{"type":929,"score":1121},[2720,2721,2723,2725],{"type":933,"url":2700},{"type":938,"url":2722},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":938,"url":2724},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1100,"url":2726},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[1385,1386,1387],{"id":169,"slug":2729,"dossier":91,"summary":182,"aliases":2730,"sourceIds":2734,"published":2735,"modified":2736,"checkedAt":7,"severity":2737,"references":2739,"versionKeys":2747,"packageCount":32,"repositoryCount":1053},"pysec-2026-3453-83974725",[2731,2732,2733],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[169],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[2738],{"type":929,"score":1121},[2740,2741,2743,2745],{"type":933,"url":2700},{"type":938,"url":2742},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":938,"url":2744},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1100,"url":2746},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[1828,1829,1830,1383,1384,1385,1386,1387],1784548466395]