[{"data":1,"prerenderedAt":6989},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7674":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":304,"related":307},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T11:49:05.682Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T11:47:56.369Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":105,"unknownLicensePackageCount":106,"advisoryIds":107,"advisoryCount":302,"providers":303},"opencode:7674","opencode-7674",7674,"Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation","Simulation of Coding Agents; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, Energiemessung","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fcommit\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32","2025-10-30T09:26:36.741Z","2025-10-30T09:25:27.000Z",{"complete":91,"entryCount":92,"truncated":46},true,31,[94],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","bd553a0a85987dc2e10ac8a15fdc2c60ccd7405408e5ff41ef47eca9399dda7f",758178,"parsed",173,[103],"pypi",8,23,3,[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2pc9-4j83-qjmr","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-38vq-g6vr-w8wf","GHSA-3c37-wwvx-h642","GHSA-3f6c-7fw2-ppm4","GHSA-3hh9-752g-5g22","GHSA-3mwp-wvh9-7528","GHSA-3wq7-rqq7-wx6j","GHSA-3ww4-5jv9-j5gm","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-4w7r-h757-3r74","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cmr-4px5-23pc","GHSA-5jv2-g5wq-cmr4","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69j4-grxj-j64p","GHSA-69w3-r845-3855","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6wgj-66m2-xxp2","GHSA-7972-pg2x-xr59","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7h4p-rffg-7823","GHSA-7rgv-gqhr-fxg3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-8qvm-5x2c-j2w7","GHSA-9356-575x-2w9m","GHSA-94f4-hr76-p5j6","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-98f3-hwg4-4rf7","GHSA-9hcf-v7m4-6m2j","GHSA-9hjg-9r4m-mvj7","GHSA-9pcc-gvx5-r5wm","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c65p-x677-fgj6","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-grg2-63fw-f2qr","GHSA-gx77-xgc2-4888","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgg8-fqqc-vfmw","GHSA-hpj7-wq8m-9hgp","GHSA-hpv8-x276-m59f","GHSA-hxxf-235m-72v3","GHSA-j828-28rj-hfhp","GHSA-j842-xgm4-wf88","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mcmc-2m55-j8jj","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mj87-hwqh-73pj","GHSA-mqqc-3gqh-h2x8","GHSA-mrw7-hf4f-83pf","GHSA-mw35-8rx3-xf9r","GHSA-mwh4-6h8g-pg8w","GHSA-p998-jp59-783m","GHSA-phhr-52qp-3mj4","GHSA-pmqf-x6x8-p7qw","GHSA-pp6c-gr5w-3c5g","GHSA-pq5c-rjhq-qp7p","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q279-jhrf-cc6v","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q5fh-2hc8-f6rq","GHSA-q8gq-377p-jq3r","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qh4c-xf7m-gxfc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vqfr-h8mv-ghfj","GHSA-vrq3-r879-7m65","GHSA-w2fm-2cpv-w7v5","GHSA-w6q7-j642-7c25","GHSA-w6vg-jg77-2qg6","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wcj4-jw5j-44wh","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqp7-x3pw-xc5r","GHSA-wr9h-g72x-mwhm","GHSA-wrfc-pvp9-mr9g","GHSA-x368-4g9h-fvv4","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2025-238","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-227","PYSEC-2026-2273","PYSEC-2026-2286","PYSEC-2026-2302","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453",194,[],{"files":305,"occurrenceCount":101},[306],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":308,"vulnerabilities":1880},[309,321,333,343,352,362,371,381,390,400,412,421,430,440,450,459,468,477,486,497,506,515,524,534,543,552,561,570,579,588,598,607,616,626,635,644,653,662,671,680,689,698,707,716,725,735,744,753,762,771,780,789,797,806,815,824,833,842,851,859,868,877,886,895,904,914,923,932,941,950,959,968,977,986,995,1004,1013,1022,1031,1040,1049,1058,1067,1076,1085,1094,1103,1112,1121,1129,1138,1146,1155,1164,1173,1182,1190,1199,1209,1218,1227,1236,1244,1253,1262,1271,1280,1289,1298,1306,1315,1324,1332,1340,1349,1357,1366,1375,1384,1394,1403,1412,1421,1431,1440,1449,1458,1467,1476,1486,1495,1504,1513,1522,1531,1539,1548,1557,1566,1575,1584,1594,1603,1612,1620,1629,1638,1647,1656,1665,1674,1683,1692,1702,1711,1720,1731,1740,1748,1757,1765,1774,1783,1792,1801,1810,1818,1827,1835,1844,1853,1862,1871],{"id":310,"slug":311,"identity":312,"label":313,"aiRelevant":91,"provider":314,"advisoryCount":315,"licenseExpressions":316,"versions":318,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":320},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","vLLM",null,39,[317],"Apache-2.0",[319],"0.11.0",[55],{"id":322,"slug":323,"identity":324,"label":325,"aiRelevant":91,"provider":326,"advisoryCount":70,"licenseExpressions":329,"versions":330,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":332},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":327,"label":328},"hugging-face","Hugging Face",[317],[331],"4.57.1",[55],{"id":334,"slug":335,"identity":336,"label":337,"aiRelevant":91,"provider":314,"advisoryCount":105,"licenseExpressions":338,"versions":340,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":342},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",[339],"BSD-3-Clause",[341],"2.8.0",[55],{"id":344,"slug":345,"identity":346,"label":347,"aiRelevant":91,"provider":314,"advisoryCount":32,"licenseExpressions":348,"versions":349,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":351},"package:pypi:lmcache","lmcache-924a3cee","pypi:lmcache","LMCache",[],[350],"0.3.8",[55],{"id":353,"slug":354,"identity":355,"label":356,"aiRelevant":91,"provider":357,"advisoryCount":38,"licenseExpressions":358,"versions":359,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":361},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":327,"label":328},[317],[360],"4.3.0",[55],{"id":72,"slug":73,"identity":363,"label":74,"aiRelevant":91,"provider":364,"advisoryCount":38,"licenseExpressions":367,"versions":368,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":370},"pypi:openai",{"id":365,"label":366},"openai","OpenAI",[317],[369],"2.6.1",[55],{"id":372,"slug":373,"identity":374,"label":375,"aiRelevant":91,"provider":314,"advisoryCount":38,"licenseExpressions":376,"versions":378,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":380},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[377],"non-standard",[379],"0.22.1",[55],{"id":382,"slug":383,"identity":384,"label":385,"aiRelevant":91,"provider":314,"advisoryCount":38,"licenseExpressions":386,"versions":387,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":389},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[377],[388],"0.12.0",[55],{"id":391,"slug":392,"identity":393,"label":394,"aiRelevant":46,"provider":314,"advisoryCount":30,"licenseExpressions":395,"versions":397,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":399},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[317,396],"Apache-2.0 AND MIT",[398],"3.13.1",[55],{"id":401,"slug":402,"identity":403,"label":404,"aiRelevant":46,"provider":314,"advisoryCount":405,"licenseExpressions":406,"versions":409,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":411},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[407,408],"HPND","MIT-CMU",[410],"12.0.0",[55],{"id":413,"slug":414,"identity":415,"label":416,"aiRelevant":46,"provider":314,"advisoryCount":104,"licenseExpressions":417,"versions":418,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":420},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",[317],[419],"0.0.20",[55],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":46,"provider":314,"advisoryCount":104,"licenseExpressions":426,"versions":427,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":429},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[339],[428],"0.49.0",[55],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":46,"provider":314,"advisoryCount":65,"licenseExpressions":435,"versions":437,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":439},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[436],"MIT",[438],"2.5.0",[55],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":46,"provider":314,"advisoryCount":445,"licenseExpressions":446,"versions":447,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":449},"package:pypi:ray","ray-f8b4a0d3","pypi:ray","ray",6,[317],[448],"2.50.1",[55],{"id":451,"slug":452,"identity":453,"label":454,"aiRelevant":46,"provider":314,"advisoryCount":34,"licenseExpressions":455,"versions":456,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":458},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[339,377],[457],"3.1.6",[55],{"id":460,"slug":461,"identity":462,"label":463,"aiRelevant":46,"provider":314,"advisoryCount":106,"licenseExpressions":464,"versions":465,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":467},"package:pypi:cbor2","cbor2-9a57866f","pypi:cbor2","cbor2",[436],[466],"5.7.1",[55],{"id":469,"slug":470,"identity":471,"label":472,"aiRelevant":46,"provider":314,"advisoryCount":106,"licenseExpressions":473,"versions":474,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":476},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[317],[475],"2.32.5",[55],{"id":478,"slug":479,"identity":480,"label":481,"aiRelevant":46,"provider":314,"advisoryCount":106,"licenseExpressions":482,"versions":483,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":485},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[436],[484],"79.0.1",[55],{"id":487,"slug":488,"identity":489,"label":490,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":492,"versions":494,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":496},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[436,493],"Unlicense",[495],"3.20.0",[55],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":502,"versions":503,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":505},"package:pypi:mlx","mlx-6c82b549","pypi:mlx","mlx",[436],[504],"0.29.3",[55],{"id":507,"slug":508,"identity":509,"label":510,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":511,"versions":512,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":514},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[339],[513],"6.33.0",[55],{"id":516,"slug":517,"identity":518,"label":519,"aiRelevant":46,"provider":314,"advisoryCount":491,"licenseExpressions":520,"versions":521,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":523},"package:pypi:xgrammar","xgrammar-5ebaef86","pypi:xgrammar","xgrammar",[317],[522],"0.1.25",[55],{"id":525,"slug":526,"identity":527,"label":528,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":529,"versions":531,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":533},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[530],"MPL-2.0",[532],"2025.10.5",[55],{"id":535,"slug":536,"identity":537,"label":538,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":539,"versions":540,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":542},"package:pypi:click","click-ef97f731","pypi:click","click",[339,377],[541],"8.2.1",[55],{"id":544,"slug":545,"identity":546,"label":547,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":548,"versions":549,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":551},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[317],[550],"5.6.3",[55],{"id":553,"slug":554,"identity":555,"label":556,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":557,"versions":558,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":560},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[436],[559],"0.16.0",[55],{"id":562,"slug":563,"identity":564,"label":565,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":566,"versions":567,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":569},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[339,377],[568],"3.11",[55],{"id":571,"slug":572,"identity":573,"label":574,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":575,"versions":576,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":578},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[317],[577],"1.1.2",[55],{"id":580,"slug":581,"identity":582,"label":583,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":584,"versions":585,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":587},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[317,377],[586],"22.0.0",[55],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":593,"versions":595,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":597},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[594],"BSD-2-Clause",[596],"2.19.2",[55],{"id":599,"slug":600,"identity":601,"label":602,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":603,"versions":604,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":606},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[339],[605],"1.2.1",[55],{"id":608,"slug":609,"identity":610,"label":611,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":612,"versions":613,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":615},"package:pypi:sentencepiece","sentencepiece-dda4c7df","pypi:sentencepiece","sentencepiece",[377],[614],"0.2.1",[55],{"id":617,"slug":618,"identity":619,"label":620,"aiRelevant":46,"provider":314,"advisoryCount":32,"licenseExpressions":621,"versions":623,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":625},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[622],"MIT AND MPL-2.0",[624],"4.67.1",[55],{"id":627,"slug":628,"identity":629,"label":630,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":631,"versions":632,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":634},"package:pypi:aiofile","aiofile-c591e038","pypi:aiofile","aiofile",[317],[633],"3.9.0",[55],{"id":636,"slug":637,"identity":638,"label":639,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":640,"versions":641,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":643},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[317],[642],"25.1.0",[55],{"id":645,"slug":646,"identity":647,"label":648,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":649,"versions":651,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":652},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[650],"PSF-2.0",[369],[55],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":658,"versions":659,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":661},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[317],[660],"1.4.0",[55],{"id":663,"slug":664,"identity":665,"label":666,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":667,"versions":668,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":670},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[436],[669],"0.0.3",[55],{"id":672,"slug":673,"identity":674,"label":675,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":676,"versions":677,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":679},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[436],[678],"0.7.0",[55],{"id":681,"slug":682,"identity":683,"label":684,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":685,"versions":686,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":688},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[377],[687],"4.9.3",[55],{"id":690,"slug":691,"identity":692,"label":693,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":694,"versions":695,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":697},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[436],[696],"4.11.0",[55],{"id":699,"slug":700,"identity":701,"label":702,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":703,"versions":704,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":706},"package:pypi:astor","astor-5ea47d9f","pypi:astor","astor",[339],[705],"0.8.1",[55],{"id":708,"slug":709,"identity":710,"label":711,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":712,"versions":713,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":715},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[436],[714],"25.4.0",[55],{"id":717,"slug":718,"identity":719,"label":720,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":721,"versions":722,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":724},"package:pypi:awscrt","awscrt-eab4958f","pypi:awscrt","awscrt",[317],[723],"0.28.2",[55],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":730,"versions":732,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":734},"package:pypi:blake3","blake3-71cab3aa","pypi:blake3","blake3",[731],"Apache-2.0 OR CC0-1.0",[733],"1.0.8",[55],{"id":736,"slug":737,"identity":738,"label":739,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":740,"versions":741,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":743},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[436],[742],"6.2.1",[55],{"id":745,"slug":746,"identity":747,"label":748,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":749,"versions":750,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":752},"package:pypi:caio","caio-c9c4d2d3","pypi:caio","caio",[317],[751],"0.9.24",[55],{"id":754,"slug":755,"identity":756,"label":757,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":758,"versions":759,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":761},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[436],[760],"2.0.0",[55],{"id":763,"slug":764,"identity":765,"label":766,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":767,"versions":768,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":770},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[436],[769],"3.4.4",[55],{"id":772,"slug":773,"identity":774,"label":775,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":776,"versions":777,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":779},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[339],[778],"3.1.1",[55],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":785,"versions":786,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":788},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[377],[787],"0.4.6",[55],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":794,"versions":795,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":796},"package:pypi:compressed-tensors","compressed-tensors-e8905144","pypi:compressed-tensors","compressed-tensors",[317],[319],[55],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":802,"versions":803,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":805},"package:pypi:cufile-python","cufile-python-feb114e2","pypi:cufile-python","cufile-python",[436],[804],"0.2.0",[55],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":811,"versions":812,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":814},"package:pypi:cupy-cuda12x","cupy-cuda12x-8ab55f02","pypi:cupy-cuda12x","cupy-cuda12x",[436],[813],"13.6.0",[55],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":820,"versions":821,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":823},"package:pypi:depyf","depyf-44ccc3bb","pypi:depyf","depyf",[436],[822],"0.19.0",[55],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":829,"versions":830,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":832},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[339],[831],"0.4.0",[55],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":838,"versions":839,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":841},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[317],[840],"1.9.0",[55],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":847,"versions":849,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":850},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[848],"ISC",[341],[55],{"id":852,"slug":853,"identity":854,"label":855,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":856,"versions":857,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":858},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[436],[705],[55],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":864,"versions":865,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":867},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[493],[866],"2.3.0",[55],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":873,"versions":874,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":876},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[436],[875],"0.120.1",[55],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":882,"versions":883,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":885},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[436],[884],"0.0.14",[55],{"id":887,"slug":888,"identity":889,"label":890,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":891,"versions":892,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":894},"package:pypi:fastapi-cloud-cli","fastapi-cloud-cli-9011df6b","pypi:fastapi-cloud-cli","fastapi-cloud-cli",[436],[893],"0.3.1",[55],{"id":896,"slug":897,"identity":898,"label":899,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":900,"versions":901,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":903},"package:pypi:fastrlock","fastrlock-0757e61e","pypi:fastrlock","fastrlock",[377],[902],"0.8.3",[55],{"id":905,"slug":906,"identity":907,"label":908,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":909,"versions":911,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":913},"package:pypi:frozendict","frozendict-423ee416","pypi:frozendict","frozendict",[910],"LGPL-3.0",[912],"2.4.6",[55],{"id":915,"slug":916,"identity":917,"label":918,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":919,"versions":920,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":922},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[317],[921],"1.8.0",[55],{"id":924,"slug":925,"identity":926,"label":927,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":928,"versions":929,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":931},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[339,377],[930],"2025.9.0",[55],{"id":933,"slug":934,"identity":935,"label":936,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":937,"versions":938,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":940},"package:pypi:gguf","gguf-828fa24b","pypi:gguf","gguf",[436],[939],"0.17.1",[55],{"id":942,"slug":943,"identity":944,"label":945,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":946,"versions":947,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":949},"package:pypi:h5py","h5py-b8fe3869","pypi:h5py","h5py",[339],[948],"3.15.1",[55],{"id":951,"slug":952,"identity":953,"label":954,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":955,"versions":956,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":958},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[317],[957],"1.2.0",[55],{"id":960,"slug":961,"identity":962,"label":963,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":964,"versions":965,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":967},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[339],[966],"1.0.9",[55],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":973,"versions":974,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":976},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[436],[975],"0.7.1",[55],{"id":978,"slug":979,"identity":980,"label":981,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":982,"versions":983,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":985},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[339],[984],"0.28.1",[55],{"id":987,"slug":988,"identity":989,"label":990,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":991,"versions":992,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":994},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[317,377],[993],"0.36.0",[55],{"id":996,"slug":997,"identity":998,"label":999,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1000,"versions":1001,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1003},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[436],[1002],"1.3.2",[55],{"id":1005,"slug":1006,"identity":1007,"label":1008,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1009,"versions":1010,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1012},"package:pypi:interegular","interegular-393a5327","pypi:interegular","interegular",[436],[1011],"0.3.3",[55],{"id":1014,"slug":1015,"identity":1016,"label":1017,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1018,"versions":1019,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1021},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[436],[1020],"0.11.1",[55],{"id":1023,"slug":1024,"identity":1025,"label":1026,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1027,"versions":1028,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1030},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[436],[1029],"4.25.1",[55],{"id":1032,"slug":1033,"identity":1034,"label":1035,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1036,"versions":1037,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1039},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[436],[1038],"2025.9.1",[55],{"id":1041,"slug":1042,"identity":1043,"label":1044,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1045,"versions":1046,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1048},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[436],[1047],"1.2.2",[55],{"id":1050,"slug":1051,"identity":1052,"label":1053,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1054,"versions":1055,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1057},"package:pypi:llguidance","llguidance-a18efde0","pypi:llguidance","llguidance",[436],[1056],"0.7.30",[55],{"id":1059,"slug":1060,"identity":1061,"label":1062,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1063,"versions":1064,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1066},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[377],[1065],"0.44.0",[55],{"id":1068,"slug":1069,"identity":1070,"label":1071,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1072,"versions":1073,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1075},"package:pypi:lm-format-enforcer","lm-format-enforcer-9e319c1b","pypi:lm-format-enforcer","lm-format-enforcer",[436],[1074],"0.11.3",[55],{"id":1077,"slug":1078,"identity":1079,"label":1080,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1081,"versions":1082,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1084},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[436],[1083],"4.0.0",[55],{"id":1086,"slug":1087,"identity":1088,"label":1089,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1090,"versions":1091,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1093},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[339,377],[1092],"3.0.3",[55],{"id":1095,"slug":1096,"identity":1097,"label":1098,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1099,"versions":1100,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1102},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[436],[1101],"0.1.2",[55],{"id":1104,"slug":1105,"identity":1106,"label":1107,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1108,"versions":1109,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1111},"package:pypi:mistral-common","mistral-common-038e1158","pypi:mistral-common","mistral-common",[317],[1110],"1.8.5",[55],{"id":1113,"slug":1114,"identity":1115,"label":1116,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1117,"versions":1118,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1120},"package:pypi:mlx-lm","mlx-lm-c2e88814","pypi:mlx-lm","mlx-lm",[436],[1119],"0.28.3",[55],{"id":1122,"slug":1123,"identity":1124,"label":1125,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1126,"versions":1127,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1128},"package:pypi:mlx-metal","mlx-metal-fdc0094a","pypi:mlx-metal","mlx-metal",[],[504],[55],{"id":1130,"slug":1131,"identity":1132,"label":1133,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1134,"versions":1135,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1137},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[377],[1136],"1.3.0",[55],{"id":1139,"slug":1140,"identity":1141,"label":1142,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1143,"versions":1144,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1145},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[339,377],[822],[55],{"id":1147,"slug":1148,"identity":1149,"label":1150,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1151,"versions":1152,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1154},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[317],[1153],"6.7.0",[55],{"id":1156,"slug":1157,"identity":1158,"label":1159,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1160,"versions":1161,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1163},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[339],[1162],"0.70.16",[55],{"id":1165,"slug":1166,"identity":1167,"label":1168,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1169,"versions":1170,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1172},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[339,377],[1171],"3.5",[55],{"id":1174,"slug":1175,"identity":1176,"label":1177,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1178,"versions":1179,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1181},"package:pypi:ninja","ninja-d45560ae","pypi:ninja","ninja",[377],[1180],"1.13.0",[55],{"id":1183,"slug":1184,"identity":1185,"label":1186,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1187,"versions":1188,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1189},"package:pypi:nixl","nixl-859842d2","pypi:nixl","nixl",[377],[678],[55],{"id":1191,"slug":1192,"identity":1193,"label":1194,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1195,"versions":1196,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1198},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[377],[1197],"0.61.2",[55],{"id":1200,"slug":1201,"identity":1202,"label":1203,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1204,"versions":1206,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1208},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1205,377],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1207],"2.2.0",[55],{"id":1210,"slug":1211,"identity":1212,"label":1213,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1214,"versions":1215,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1217},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[377],[1216],"12.8.4.1",[55],{"id":1219,"slug":1220,"identity":1221,"label":1222,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1223,"versions":1224,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1226},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[377],[1225],"12.8.90",[55],{"id":1228,"slug":1229,"identity":1230,"label":1231,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1232,"versions":1233,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1235},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[377],[1234],"12.8.93",[55],{"id":1237,"slug":1238,"identity":1239,"label":1240,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1241,"versions":1242,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1243},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[377],[1225],[55],{"id":1245,"slug":1246,"identity":1247,"label":1248,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1249,"versions":1250,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1252},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[377],[1251],"9.10.2.21",[55],{"id":1254,"slug":1255,"identity":1256,"label":1257,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1258,"versions":1259,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1261},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[377],[1260],"11.3.3.83",[55],{"id":1263,"slug":1264,"identity":1265,"label":1266,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1267,"versions":1268,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1270},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[377],[1269],"1.13.1.3",[55],{"id":1272,"slug":1273,"identity":1274,"label":1275,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1276,"versions":1277,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1279},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[377],[1278],"10.3.9.90",[55],{"id":1281,"slug":1282,"identity":1283,"label":1284,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1285,"versions":1286,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1288},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[377],[1287],"11.7.3.90",[55],{"id":1290,"slug":1291,"identity":1292,"label":1293,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1294,"versions":1295,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1297},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[377],[1296],"12.5.8.93",[55],{"id":1299,"slug":1300,"identity":1301,"label":1302,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1303,"versions":1304,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1305},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[377],[975],[55],{"id":1307,"slug":1308,"identity":1309,"label":1310,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1311,"versions":1312,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1314},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[377],[1313],"13.580.82",[55],{"id":1316,"slug":1317,"identity":1318,"label":1319,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1320,"versions":1321,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1323},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[339,377],[1322],"2.27.3",[55],{"id":1325,"slug":1326,"identity":1327,"label":1328,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1329,"versions":1330,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1331},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[377],[1234],[55],{"id":1333,"slug":1334,"identity":1335,"label":1336,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1337,"versions":1338,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1339},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[317,377],[1225],[55],{"id":1341,"slug":1342,"identity":1343,"label":1344,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1345,"versions":1346,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1348},"package:pypi:nvtx","nvtx-e0b64d25","pypi:nvtx","nvtx",[317],[1347],"0.2.13",[55],{"id":1350,"slug":1351,"identity":1352,"label":1353,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1354,"versions":1355,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1356},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[339],[866],[55],{"id":1358,"slug":1359,"identity":1360,"label":1361,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1362,"versions":1363,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1365},"package:pypi:openai-harmony","openai-harmony-030f1d71","pypi:openai-harmony","openai-harmony",[],[1364],"0.0.4",[55],{"id":1367,"slug":1368,"identity":1369,"label":1370,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1371,"versions":1372,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1374},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[317],[1373],"4.12.0.88",[55],{"id":1376,"slug":1377,"identity":1378,"label":1379,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1380,"versions":1381,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1383},"package:pypi:outlines-core","outlines-core-16063b2f","pypi:outlines-core","outlines-core",[317],[1382],"0.2.11",[55],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1389,"versions":1391,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1393},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1390,377],"Apache-2.0 OR BSD-2-Clause",[1392],"25.0",[55],{"id":1395,"slug":1396,"identity":1397,"label":1398,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1399,"versions":1400,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1402},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[377],[1401],"2.3.3",[55],{"id":1404,"slug":1405,"identity":1406,"label":1407,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1408,"versions":1409,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1411},"package:pypi:partial-json-parser","partial-json-parser-185436fc","pypi:partial-json-parser","partial-json-parser",[436],[1410],"0.2.1.1.post6",[55],{"id":1413,"slug":1414,"identity":1415,"label":1416,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1417,"versions":1418,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1420},"package:pypi:perun","perun-158f81f8","pypi:perun","perun",[377],[1419],"0.9.0",[55],{"id":1422,"slug":1423,"identity":1424,"label":1425,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1426,"versions":1428,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1430},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[317,1427],"Apache-2.0 AND BSD-2-Clause",[1429],"0.23.1",[55],{"id":1432,"slug":1433,"identity":1434,"label":1435,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1436,"versions":1437,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1439},"package:pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator-6b62ecc9","pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator",[848],[1438],"7.1.0",[55],{"id":1441,"slug":1442,"identity":1443,"label":1444,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1445,"versions":1446,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1448},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[317],[1447],"0.4.1",[55],{"id":1450,"slug":1451,"identity":1452,"label":1453,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1454,"versions":1455,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1457},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[339],[1456],"7.1.2",[55],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1463,"versions":1464,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1466},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[436],[1465],"9.0.0",[55],{"id":1468,"slug":1469,"identity":1470,"label":1471,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1472,"versions":1473,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1475},"package:pypi:pybase64","pybase64-d848d924","pypi:pybase64","pybase64",[594],[1474],"1.4.2",[55],{"id":1477,"slug":1478,"identity":1479,"label":1480,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1481,"versions":1483,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1485},"package:pypi:pycountry","pycountry-938c3061","pypi:pycountry","pycountry",[1482],"LGPL-2.1-only",[1484],"24.6.1",[55],{"id":1487,"slug":1488,"identity":1489,"label":1490,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1491,"versions":1492,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1494},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[339],[1493],"2.23",[55],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1500,"versions":1501,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1503},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[436],[1502],"2.12.3",[55],{"id":1505,"slug":1506,"identity":1507,"label":1508,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1509,"versions":1510,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1512},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[436],[1511],"2.41.4",[55],{"id":1514,"slug":1515,"identity":1516,"label":1517,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1518,"versions":1519,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1521},"package:pypi:pydantic-extra-types","pydantic-extra-types-dddc16ef","pypi:pydantic-extra-types","pydantic-extra-types",[436],[1520],"2.10.6",[55],{"id":1523,"slug":1524,"identity":1525,"label":1526,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1527,"versions":1528,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1530},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[377],[1529],"2.9.0.post0",[55],{"id":1532,"slug":1533,"identity":1534,"label":1535,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1536,"versions":1537,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1538},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[377],[1083],[55],{"id":1540,"slug":1541,"identity":1542,"label":1543,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1544,"versions":1545,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1547},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[436],[1546],"2025.2",[55],{"id":1549,"slug":1550,"identity":1551,"label":1552,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1553,"versions":1554,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1556},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[436],[1555],"6.0.3",[55],{"id":1558,"slug":1559,"identity":1560,"label":1561,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1562,"versions":1563,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1565},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[377],[1564],"27.1.0",[55],{"id":1567,"slug":1568,"identity":1569,"label":1570,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1571,"versions":1572,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1574},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[436],[1573],"7.0.1",[55],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1580,"versions":1581,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1583},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[436],[1582],"0.37.0",[55],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1589,"versions":1591,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1593},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1590,377],"Apache-2.0 AND CNRI-Python",[1592],"2025.10.23",[55],{"id":1595,"slug":1596,"identity":1597,"label":1598,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1599,"versions":1600,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1602},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[436],[1601],"14.2.0",[55],{"id":1604,"slug":1605,"identity":1606,"label":1607,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1608,"versions":1609,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1611},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[436],[1610],"0.15.1",[55],{"id":1613,"slug":1614,"identity":1615,"label":1616,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1617,"versions":1618,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1619},"package:pypi:rignore","rignore-bc5396c6","pypi:rignore","rignore",[436],[975],[55],{"id":1621,"slug":1622,"identity":1623,"label":1624,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1625,"versions":1626,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1628},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[436],[1627],"0.28.0",[55],{"id":1630,"slug":1631,"identity":1632,"label":1633,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1634,"versions":1635,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1637},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[377],[1636],"0.6.2",[55],{"id":1639,"slug":1640,"identity":1641,"label":1642,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1643,"versions":1644,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1646},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[377],[1645],"1.16.2",[55],{"id":1648,"slug":1649,"identity":1650,"label":1651,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1652,"versions":1653,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1655},"package:pypi:sentry-sdk","sentry-sdk-2727cc69","pypi:sentry-sdk","sentry-sdk",[436],[1654],"2.42.1",[55],{"id":1657,"slug":1658,"identity":1659,"label":1660,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1661,"versions":1662,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1664},"package:pypi:setproctitle","setproctitle-5acfd9d9","pypi:setproctitle","setproctitle",[339],[1663],"1.3.7",[55],{"id":1666,"slug":1667,"identity":1668,"label":1669,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1670,"versions":1671,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1673},"package:pypi:setuptools-scm","setuptools-scm-1cdc69e0","pypi:setuptools-scm","setuptools-scm",[377],[1672],"9.2.2",[55],{"id":1675,"slug":1676,"identity":1677,"label":1678,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1679,"versions":1680,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1682},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[377],[1681],"1.5.4",[55],{"id":1684,"slug":1685,"identity":1686,"label":1687,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1688,"versions":1689,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1691},"package:pypi:six","six-3c3888bd","pypi:six","six",[436],[1690],"1.17.0",[55],{"id":1693,"slug":1694,"identity":1695,"label":1696,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1697,"versions":1699,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1701},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[1698],"Apache-2.0 OR MIT",[1700],"1.3.1",[55],{"id":1703,"slug":1704,"identity":1705,"label":1706,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1707,"versions":1708,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1710},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[317],[1709],"2.4.0",[55],{"id":1712,"slug":1713,"identity":1714,"label":1715,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1716,"versions":1717,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1719},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[339],[1718],"0.13.1",[55],{"id":1721,"slug":1722,"identity":1723,"label":1724,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1725,"versions":1728,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1730},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[1726,1727],"LGPL-2.0-or-later","LGPL-2.1-or-later",[1729],"1.0.0",[55],{"id":1732,"slug":1733,"identity":1734,"label":1735,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1736,"versions":1737,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1739},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[377],[1738],"1.14.0",[55],{"id":1741,"slug":1742,"identity":1743,"label":1744,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1745,"versions":1746,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1747},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[436],[1419],[55],{"id":1749,"slug":1750,"identity":1751,"label":1752,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1753,"versions":1754,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1756},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[436],[1755],"0.13.3",[55],{"id":1758,"slug":1759,"identity":1760,"label":1761,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1762,"versions":1763,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1764},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[594,377],[341],[55],{"id":1766,"slug":1767,"identity":1768,"label":1769,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1770,"versions":1771,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1773},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[377],[1772],"0.23.0",[55],{"id":1775,"slug":1776,"identity":1777,"label":1778,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1779,"versions":1780,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1782},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[436],[1781],"3.4.0",[55],{"id":1784,"slug":1785,"identity":1786,"label":1787,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1788,"versions":1789,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1791},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[436],[1790],"0.20.0",[55],{"id":1793,"slug":1794,"identity":1795,"label":1796,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1797,"versions":1798,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1800},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[650,377],[1799],"4.15.0",[55],{"id":1802,"slug":1803,"identity":1804,"label":1805,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1806,"versions":1807,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1809},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[436],[1808],"0.4.2",[55],{"id":1811,"slug":1812,"identity":1813,"label":1814,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1815,"versions":1816,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1817},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[317],[1546],[55],{"id":1819,"slug":1820,"identity":1821,"label":1822,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1823,"versions":1824,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1826},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[339],[1825],"0.38.0",[55],{"id":1828,"slug":1829,"identity":1830,"label":1831,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1832,"versions":1833,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1834},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[436],[379],[55],{"id":1836,"slug":1837,"identity":1838,"label":1839,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1840,"versions":1841,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1843},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[436],[1842],"1.1.1",[55],{"id":1845,"slug":1846,"identity":1847,"label":1848,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1849,"versions":1850,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1852},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[339],[1851],"15.0.1",[55],{"id":1854,"slug":1855,"identity":1856,"label":1857,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1858,"versions":1859,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1861},"package:pypi:xformers","xformers-0f6528e3","pypi:xformers","xformers",[339],[1860],"0.0.32.post1",[55],{"id":1863,"slug":1864,"identity":1865,"label":1866,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1867,"versions":1868,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1870},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[377],[1869],"3.6.0",[55],{"id":1872,"slug":1873,"identity":1874,"label":1875,"aiRelevant":46,"provider":314,"advisoryCount":38,"licenseExpressions":1876,"versions":1877,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1879},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[317],[1878],"1.22.0",[55],[1881,1920,1952,1985,2017,2065,2090,2122,2165,2191,2217,2244,2272,2301,2333,2368,2391,2418,2444,2464,2482,2507,2548,2574,2612,2637,2662,2690,2713,2743,2773,2808,2832,2862,2889,2908,2934,2957,2988,3015,3044,3069,3092,3114,3137,3166,3192,3215,3238,3285,3335,3366,3405,3434,3470,3488,3538,3577,3605,3637,3669,3694,3731,3755,3778,3811,3835,3869,3897,3927,3947,3972,3997,4029,4085,4117,4148,4182,4207,4241,4265,4288,4307,4340,4365,4392,4415,4443,4468,4502,4536,4558,4580,4604,4625,4650,4680,4700,4724,4756,4779,4804,4825,4849,4868,4889,4911,4942,4965,4988,5015,5044,5066,5088,5113,5142,5163,5195,5219,5245,5279,5301,5328,5355,5388,5408,5444,5483,5515,5542,5569,5598,5625,5655,5687,5712,5739,5761,5784,5812,5839,5863,5886,5910,5936,5966,5991,6016,6068,6091,6117,6149,6178,6203,6239,6271,6290,6309,6337,6357,6374,6393,6410,6431,6447,6462,6479,6494,6511,6528,6545,6558,6571,6584,6597,6610,6623,6636,6649,6666,6688,6721,6740,6757,6774,6792,6815,6829,6852,6881,6901,6928,6949,6969],{"id":108,"slug":1882,"dossier":46,"summary":1883,"aliases":1884,"sourceIds":1887,"published":1888,"modified":1889,"checkedAt":7,"severity":1890,"references":1894,"versionKeys":1918,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1885,1886],"CVE-2024-39689","PYSEC-2024-230",[108,1886],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[1891],{"type":1892,"score":1893},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1895,1898,1900,1903,1906,1909,1912,1914,1916],{"type":1896,"url":1897},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1896,"url":1899},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1901,"url":1902},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1904,"url":1905},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1907,"url":1908},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1910,"url":1911},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1907,"url":1913},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1896,"url":1915},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1896,"url":1917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1919],"pypi:certifi@2024.6.2",{"id":109,"slug":1921,"dossier":46,"summary":1922,"aliases":1923,"sourceIds":1926,"published":1927,"modified":1928,"checkedAt":7,"severity":1929,"references":1932,"versionKeys":1944,"packageCount":32,"repositoryCount":104},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1924,1925],"CVE-2026-4372","PYSEC-2026-2289",[109,1925],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[1930],{"type":1892,"score":1931},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1933,1935,1937,1939,1942],{"type":1896,"url":1934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1901,"url":1936},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1904,"url":1938},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1940,"url":1941},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1896,"url":1943},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1945,1946,1947,1948,1949,1950,1951],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":110,"slug":1953,"dossier":46,"summary":1954,"aliases":1955,"sourceIds":1958,"published":1959,"modified":1960,"checkedAt":7,"severity":1961,"references":1964,"versionKeys":1981,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[1956,1957],"CVE-2025-54121","PYSEC-2026-1941",[110,1957],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[1962],{"type":1892,"score":1963},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1965,1967,1969,1971,1973,1975,1977,1979],{"type":1907,"url":1966},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":1896,"url":1968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":1901,"url":1970},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":1904,"url":1972},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":1907,"url":1974},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":1907,"url":1976},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":1904,"url":1978},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":1896,"url":1980},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[1982,1983,1984],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":111,"slug":1986,"dossier":46,"summary":1987,"aliases":1988,"sourceIds":1991,"published":1992,"modified":1993,"checkedAt":7,"severity":1994,"references":2000,"versionKeys":2007,"packageCount":32,"repositoryCount":2016},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1989,1990],"CVE-2026-54279","PYSEC-2026-2112",[111,1990],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[1995,1998],{"type":1996,"score":1997},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2001,2003,2005],{"type":1896,"url":2002},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1904,"url":2004},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1901,"url":2006},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2008,2009,2010,2011,2012,2013,2014,2015],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":112,"slug":2018,"dossier":46,"summary":2019,"aliases":2020,"sourceIds":2023,"published":2024,"modified":2025,"checkedAt":7,"severity":2026,"references":2029,"versionKeys":2062,"packageCount":32,"repositoryCount":491},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[2021,2022],"CVE-2026-22807","PYSEC-2026-2010",[112,2022],"2026-01-21T16:12:54Z","2026-07-17T16:30:29.025047931Z",[2027],{"type":1892,"score":2028},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2030,2032,2034,2036,2038,2040,2042,2044,2046,2048,2050,2052,2054,2056,2058,2060],{"type":1907,"url":2031},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":1896,"url":2033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":1907,"url":2035},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":1907,"url":2037},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":1907,"url":2039},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":1904,"url":2041},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":1907,"url":2043},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":1904,"url":2045},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"type":1907,"url":2047},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":1896,"url":2049},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":1907,"url":2051},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":1907,"url":2053},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":1907,"url":2055},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":1907,"url":2057},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":1907,"url":2059},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",{"type":1907,"url":2061},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",[2063,2064],"pypi:vllm@0.10.1.1","pypi:vllm@0.11.0",{"id":113,"slug":2066,"dossier":46,"summary":2067,"aliases":2068,"sourceIds":2071,"published":2072,"modified":2073,"checkedAt":7,"severity":2074,"references":2079,"versionKeys":2089,"packageCount":32,"repositoryCount":2016},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2069,2070],"CVE-2026-34514","PYSEC-2026-2096",[113,2070],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2075,2077],{"type":1996,"score":2076},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":2078},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2080,2082,2084,2086,2087],{"type":1901,"url":2081},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1896,"url":2083},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1901,"url":2085},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1904,"url":2004},{"type":1896,"url":2088},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":114,"slug":2091,"dossier":91,"summary":2092,"aliases":2093,"sourceIds":2096,"published":2097,"modified":2098,"checkedAt":7,"severity":2099,"references":2102,"versionKeys":2115,"packageCount":32,"repositoryCount":2121},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2094,2095],"CVE-2025-66471","PYSEC-2026-1994",[114,2095],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2100],{"type":1996,"score":2101},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2103,2105,2107,2109,2111,2113],{"type":1907,"url":2104},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1896,"url":2106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1901,"url":2108},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1904,"url":2110},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1904,"url":2112},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1896,"url":2114},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2116,2117,2118,2119,2120],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":115,"slug":2123,"dossier":46,"summary":2124,"aliases":2125,"sourceIds":2129,"published":2130,"modified":2131,"checkedAt":7,"severity":2132,"references":2139,"versionKeys":2161,"packageCount":32,"repositoryCount":106},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2126,2127,2128],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[115,2128],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2133,2135,2137],{"type":1892,"score":2134},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1996,"score":2136},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1892,"score":2138},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2140,2142,2145,2147,2149,2151,2153,2155,2157,2159],{"type":1896,"url":2141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2143,"url":2144},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2143,"url":2146},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1907,"url":2148},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1904,"url":2150},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1907,"url":2152},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2143,"url":2154},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1896,"url":2156},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1896,"url":2158},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1896,"url":2160},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2162,2163,2164],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":116,"slug":2166,"dossier":46,"summary":2167,"aliases":2168,"sourceIds":2171,"published":2172,"modified":2173,"checkedAt":7,"severity":2174,"references":2176,"versionKeys":2190,"packageCount":32,"repositoryCount":491},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2169,2170],"CVE-2025-3933","PYSEC-2026-1977",[116,2170],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2175],{"type":1892,"score":1963},[2177,2179,2181,2183,2184,2186,2188],{"type":1896,"url":2178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1907,"url":2180},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1907,"url":2182},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1904,"url":1938},{"type":1907,"url":2185},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1904,"url":2187},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1896,"url":2189},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1945,1946],{"id":117,"slug":2192,"dossier":91,"summary":2193,"aliases":2194,"sourceIds":2197,"published":2198,"modified":2199,"checkedAt":7,"severity":2200,"references":2203,"versionKeys":2216,"packageCount":32,"repositoryCount":2121},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2195,2196],"CVE-2026-21441","PYSEC-2026-1996",[117,2196],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2201,2202],{"type":1892,"score":1999},{"type":1996,"score":2101},[2204,2206,2208,2210,2211,2213,2214],{"type":1907,"url":2205},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1896,"url":2207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1901,"url":2209},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1904,"url":2110},{"type":1907,"url":2212},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1904,"url":2112},{"type":1896,"url":2215},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2116,2117,2118,2119,2120],{"id":118,"slug":2218,"dossier":46,"summary":2219,"aliases":2220,"sourceIds":2223,"published":2224,"modified":2225,"checkedAt":7,"severity":2226,"references":2229,"versionKeys":2242,"packageCount":32,"repositoryCount":32},"ghsa-38vq-g6vr-w8wf-91b7e775","Sentencepiece has a a heap overflow issue",[2221,2222],"CVE-2026-1260","PYSEC-2026-1909",[118,2222],"2026-01-22T18:30:39Z","2026-07-07T17:56:14.124737800Z",[2227],{"type":1996,"score":2228},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2230,2232,2234,2236,2238,2240],{"type":1896,"url":2231},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1260",{"type":1907,"url":2233},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Fcommit\u002Fd856b67fdb3492e035489abf9b3aaf486144b2c0",{"type":1904,"url":2235},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece",{"type":1907,"url":2237},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Freleases\u002Ftag\u002Fv0.2.1",{"type":1904,"url":2239},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsentencepiece",{"type":1896,"url":2241},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38vq-g6vr-w8wf",[2243],"pypi:sentencepiece@0.2.0",{"id":119,"slug":2245,"dossier":46,"summary":2246,"aliases":2247,"sourceIds":2250,"published":2251,"modified":2252,"checkedAt":7,"severity":2253,"references":2256,"versionKeys":2269,"packageCount":32,"repositoryCount":491},"ghsa-3c37-wwvx-h642-8520854e","cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads",[2248,2249],"CVE-2026-26209","PYSEC-2026-2123",[119,2249],"2026-03-23T19:16:39.530Z","2026-07-13T07:26:16.551981788Z",[2254],{"type":1892,"score":2255},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2257,2259,2261,2263,2265,2267],{"type":1940,"url":2258},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-3c37-wwvx-h642",{"type":1896,"url":2260},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26209",{"type":1901,"url":2262},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F275",{"type":1901,"url":2264},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Fe61a5f365ba610d5907a0ae1bc72769bba34294b",{"type":1904,"url":2266},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2",{"type":1896,"url":2268},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Freleases\u002Ftag\u002F5.9.0",[2270,2271],"pypi:cbor2@5.7.0","pypi:cbor2@5.7.1",{"id":120,"slug":2273,"dossier":46,"summary":2274,"aliases":2275,"sourceIds":2278,"published":2279,"modified":2280,"checkedAt":7,"severity":2281,"references":2284,"versionKeys":2299,"packageCount":32,"repositoryCount":491},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[2276,2277],"CVE-2025-6242","PYSEC-2026-2011",[120,2277],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[2282],{"type":1892,"score":2283},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[2285,2287,2289,2291,2293,2295,2296,2297],{"type":1907,"url":2286},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":1896,"url":2288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":1907,"url":2290},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":1907,"url":2292},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":1907,"url":2294},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":1904,"url":2045},{"type":1904,"url":2041},{"type":1896,"url":2298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[2063,2300],"pypi:vllm@0.8.5.post1",{"id":121,"slug":2302,"dossier":46,"summary":2303,"aliases":2304,"sourceIds":2306,"published":2307,"modified":2308,"checkedAt":7,"severity":2309,"references":2314,"versionKeys":2331,"packageCount":32,"repositoryCount":32},"ghsa-3hh9-752g-5g22-02d6de07","LMCache: 16-bit multimodal hash collision can poison KV cache entries",[2305],"CVE-2026-10813",[121],"2026-06-04T18:30:31Z","2026-07-15T22:30:42.987212579Z",[2310,2312],{"type":1892,"score":2311},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":1996,"score":2313},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2315,2317,2319,2321,2323,2325,2327,2329],{"type":1896,"url":2316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10813",{"type":1907,"url":2318},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache\u002Fissues\u002F3301",{"type":1907,"url":2320},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache\u002Fpull\u002F2932",{"type":1904,"url":2322},"https:\u002F\u002Fgithub.com\u002FLMCache\u002FLMCache",{"type":1907,"url":2324},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10813",{"type":1907,"url":2326},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831641",{"type":1907,"url":2328},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368261",{"type":1907,"url":2330},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368261\u002Fcti",[2332],"pypi:lmcache@0.3.8",{"id":122,"slug":2334,"dossier":46,"summary":2335,"aliases":2336,"sourceIds":2339,"published":2340,"modified":2341,"checkedAt":7,"severity":2342,"references":2345,"versionKeys":2367,"packageCount":32,"repositoryCount":106},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[2337,2338],"CVE-2026-34756","PYSEC-2026-2298",[122,2338],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[2343],{"type":1892,"score":2344},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2346,2348,2350,2352,2354,2356,2358,2360,2362,2364,2365],{"type":1901,"url":2347},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":1896,"url":2349},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":1901,"url":2351},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":1901,"url":2353},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":1896,"url":2355},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":1896,"url":2357},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":1907,"url":2359},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":2143,"url":2361},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":1907,"url":2363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":1904,"url":2045},{"type":1907,"url":2366},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[2063,2064,2300],{"id":123,"slug":2369,"dossier":46,"summary":2370,"aliases":2371,"sourceIds":2374,"published":2375,"modified":2376,"checkedAt":7,"severity":2377,"references":2381,"versionKeys":2390,"packageCount":32,"repositoryCount":2016},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2372,2373],"CVE-2026-34517","PYSEC-2026-2099",[123,2373],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[2378,2380],{"type":1996,"score":2379},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1963},[2382,2384,2386,2388,2389],{"type":1901,"url":2383},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1896,"url":2385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1901,"url":2387},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":124,"slug":2392,"dossier":46,"summary":2393,"aliases":2394,"sourceIds":2397,"published":2398,"modified":2399,"checkedAt":7,"severity":2400,"references":2403,"versionKeys":2417,"packageCount":32,"repositoryCount":106},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[2395,2396],"CVE-2026-47155","PYSEC-2026-2301",[124,2396],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[2401],{"type":1892,"score":2402},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[2404,2406,2408,2410,2412,2414,2415],{"type":1896,"url":2405},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":1896,"url":2407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":2143,"url":2409},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":1901,"url":2411},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":1907,"url":2413},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":1904,"url":2045},{"type":1896,"url":2416},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[2063,2064,2300],{"id":125,"slug":2419,"dossier":46,"summary":2420,"aliases":2421,"sourceIds":2424,"published":2425,"modified":2426,"checkedAt":7,"severity":2427,"references":2430,"versionKeys":2443,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2422,2423],"CVE-2025-50182","PYSEC-2026-1997",[125,2423],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2428],{"type":1892,"score":2429},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2431,2433,2435,2437,2438,2440,2441],{"type":1907,"url":2432},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1896,"url":2434},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1901,"url":2436},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1904,"url":2110},{"type":1907,"url":2439},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1904,"url":2112},{"type":1896,"url":2442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2116,2117,2118,2119],{"id":126,"slug":2445,"dossier":46,"summary":2446,"aliases":2447,"sourceIds":2450,"published":2451,"modified":2452,"checkedAt":7,"severity":2453,"references":2457,"versionKeys":2463,"packageCount":32,"repositoryCount":2016},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2448,2449],"CVE-2026-54273","PYSEC-2026-2107",[126,2449],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2454,2456],{"type":1996,"score":2455},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},[2458,2460,2462],{"type":1896,"url":2459},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1901,"url":2461},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":127,"slug":2465,"dossier":46,"summary":2466,"aliases":2467,"sourceIds":2470,"published":2471,"modified":2472,"checkedAt":7,"severity":2473,"references":2477,"versionKeys":2481,"packageCount":32,"repositoryCount":2016},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2468,2469],"CVE-2026-54275","PYSEC-2026-237",[127,2469],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2474,2476],{"type":1996,"score":2475},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},[2478,2480],{"type":1896,"url":2479},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":128,"slug":2483,"dossier":46,"summary":2484,"aliases":2485,"sourceIds":2488,"published":2489,"modified":2490,"checkedAt":7,"severity":2491,"references":2494,"versionKeys":2506,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[2486,2487],"CVE-2025-46570","PYSEC-2025-53",[128,2487],"2025-05-28T18:02:24Z","2026-02-04T03:48:23.274649Z",[2492],{"type":1892,"score":2493},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2495,2497,2499,2501,2503,2505],{"type":1896,"url":2496},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":1896,"url":2498},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":2143,"url":2500},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":1901,"url":2502},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":1907,"url":2504},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":1904,"url":2045},[2300],{"id":129,"slug":2508,"dossier":46,"summary":2509,"aliases":2510,"sourceIds":2513,"published":2514,"modified":2515,"checkedAt":7,"severity":2516,"references":2519,"versionKeys":2547,"packageCount":32,"repositoryCount":106},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[2511,2512],"CVE-2026-22778","PYSEC-2026-565",[129,2512],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[2517],{"type":1892,"score":2518},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2520,2522,2524,2526,2528,2530,2531,2533,2534,2536,2538,2540,2542,2543,2544,2545],{"type":1907,"url":2521},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":1896,"url":2523},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":1907,"url":2525},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":1907,"url":2527},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":1907,"url":2529},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":1904,"url":2041},{"type":1907,"url":2532},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":1904,"url":2045},{"type":1907,"url":2535},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":1896,"url":2537},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":1907,"url":2539},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":1907,"url":2541},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":1907,"url":2057},{"type":1907,"url":2059},{"type":1907,"url":2061},{"type":1907,"url":2546},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[2063,2064,2300],{"id":130,"slug":2549,"dossier":46,"summary":2550,"aliases":2551,"sourceIds":2554,"published":2555,"modified":2556,"checkedAt":7,"severity":2557,"references":2560,"versionKeys":2573,"packageCount":32,"repositoryCount":491},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2552,2553],"CVE-2025-6921","PYSEC-2026-1980",[130,2553],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2558],{"type":1892,"score":2559},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2561,2563,2565,2567,2568,2570,2571],{"type":1896,"url":2562},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1907,"url":2564},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1907,"url":2566},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1904,"url":1938},{"type":1907,"url":2569},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1904,"url":2187},{"type":1896,"url":2572},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1945,1946],{"id":131,"slug":2575,"dossier":91,"summary":2576,"aliases":2577,"sourceIds":2580,"published":2581,"modified":2582,"checkedAt":7,"severity":2583,"references":2586,"versionKeys":2609,"packageCount":32,"repositoryCount":2121},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2578,2579],"CVE-2026-4539","PYSEC-2026-2987",[131,2579],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2584,2585],{"type":1892,"score":2134},{"type":1996,"score":2136},[2587,2589,2591,2593,2595,2597,2599,2601,2603,2605,2607],{"type":1896,"url":2588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1907,"url":2590},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1907,"url":2592},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1907,"url":2594},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1904,"url":2596},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1907,"url":2598},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1907,"url":2600},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1907,"url":2602},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1907,"url":2604},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1904,"url":2606},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1896,"url":2608},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2610,2611],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":132,"slug":2613,"dossier":46,"summary":2614,"aliases":2615,"sourceIds":2619,"published":2620,"modified":2621,"checkedAt":7,"severity":2622,"references":2626,"versionKeys":2636,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[2616,2617,2618],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[132,2618],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[2623,2625],{"type":1996,"score":2624},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1892,"score":2518},[2627,2629,2631,2633,2635],{"type":1896,"url":2628},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1896,"url":2630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1907,"url":2632},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1907,"url":2634},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1904,"url":2150},[2162],{"id":133,"slug":2638,"dossier":46,"summary":2639,"aliases":2640,"sourceIds":2643,"published":2644,"modified":2645,"checkedAt":7,"severity":2646,"references":2649,"versionKeys":2661,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[2641,2642],"CVE-2025-69226","PYSEC-2026-1097",[133,2642],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[2647],{"type":1996,"score":2648},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2650,2652,2654,2656,2657,2659],{"type":1907,"url":2651},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1896,"url":2653},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1901,"url":2655},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1904,"url":2004},{"type":1904,"url":2658},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1896,"url":2660},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2008,2009,2010,2011,2012,2013,2014],{"id":134,"slug":2663,"dossier":46,"summary":2664,"aliases":2665,"sourceIds":2668,"published":2669,"modified":2670,"checkedAt":7,"severity":2671,"references":2675,"versionKeys":2688,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[2666,2667],"CVE-2024-53981","PYSEC-2026-1851",[134,2667],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[2672,2673],{"type":1892,"score":1999},{"type":1996,"score":2674},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2676,2678,2680,2682,2684,2686],{"type":1907,"url":2677},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":1896,"url":2679},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":1907,"url":2681},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":1904,"url":2683},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":1904,"url":2685},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":1896,"url":2687},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[2689],"pypi:python-multipart@0.0.9",{"id":135,"slug":2691,"dossier":46,"summary":2692,"aliases":2693,"sourceIds":2696,"published":2697,"modified":2698,"checkedAt":7,"severity":2699,"references":2701,"versionKeys":2712,"packageCount":32,"repositoryCount":491},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[2694,2695],"CVE-2025-6638","PYSEC-2026-1981",[135,2695],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[2700],{"type":1892,"score":2559},[2702,2704,2705,2706,2707,2709,2710],{"type":1896,"url":2703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1907,"url":2564},{"type":1907,"url":2566},{"type":1904,"url":1938},{"type":1907,"url":2708},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1904,"url":2187},{"type":1896,"url":2711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1945,1946],{"id":136,"slug":2714,"dossier":46,"summary":2715,"aliases":2716,"sourceIds":2719,"published":2720,"modified":2721,"checkedAt":7,"severity":2722,"references":2726,"versionKeys":2741,"packageCount":32,"repositoryCount":32},"ghsa-5cmr-4px5-23pc-6775b484","XGrammar affected by Denial of Service by infinite recursion grammars",[2717,2718],"CVE-2025-57809","PYSEC-2026-2054",[136,2718],"2025-08-25T20:43:45Z","2026-07-07T17:56:43.683032784Z",[2723,2724],{"type":1892,"score":1999},{"type":1996,"score":2725},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2727,2729,2731,2733,2735,2737,2739],{"type":1907,"url":2728},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",{"type":1896,"url":2730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57809",{"type":1907,"url":2732},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fissues\u002F250",{"type":1907,"url":2734},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fcommit\u002Fb943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",{"type":1904,"url":2736},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar",{"type":1904,"url":2738},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fxgrammar",{"type":1896,"url":2740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",[2742],"pypi:xgrammar@0.1.18",{"id":137,"slug":2744,"dossier":46,"summary":2745,"aliases":2746,"sourceIds":2749,"published":2750,"modified":2751,"checkedAt":7,"severity":2752,"references":2757,"versionKeys":2772,"packageCount":32,"repositoryCount":106},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[2747,2748],"CVE-2026-53923","PYSEC-2026-3403",[137,2748],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[2753,2755],{"type":1892,"score":2754},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1996,"score":2756},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2758,2760,2762,2764,2766,2768,2770,2771],{"type":1907,"url":2759},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":1896,"url":2761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":1907,"url":2763},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":1907,"url":2765},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":1896,"url":2767},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":1907,"url":2769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":138,"slug":2774,"dossier":46,"summary":2775,"aliases":2776,"sourceIds":2780,"published":2781,"modified":2782,"checkedAt":7,"severity":2783,"references":2788,"versionKeys":2805,"packageCount":32,"repositoryCount":491},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[2777,2778,2779],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[138,2779],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[2784,2786],{"type":1996,"score":2785},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1892,"score":2787},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2789,2791,2793,2795,2797,2799,2801,2803],{"type":1940,"url":2790},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1896,"url":2792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2143,"url":2794},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1901,"url":2796},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1907,"url":2798},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1904,"url":2800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1907,"url":2802},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1910,"url":2804},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[2806,2807],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":139,"slug":2809,"dossier":46,"summary":2810,"aliases":2811,"sourceIds":2814,"published":2815,"modified":2816,"checkedAt":7,"severity":2817,"references":2819,"versionKeys":2828,"packageCount":32,"repositoryCount":2831},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[2812,2813],"CVE-2026-53539","PYSEC-2026-3036",[139,2813],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[2818],{"type":1892,"score":1999},[2820,2822,2823,2824,2826],{"type":1907,"url":2821},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":2825},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":1896,"url":2827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[2829,2830,2689],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",5,{"id":140,"slug":2833,"dossier":46,"summary":2834,"aliases":2835,"sourceIds":2839,"published":2840,"modified":2841,"checkedAt":7,"severity":2842,"references":2846,"versionKeys":2855,"packageCount":32,"repositoryCount":2861},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[2836,2837,2838],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[140,2838],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[2843,2844],{"type":1892,"score":2138},{"type":1996,"score":2845},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2847,2849,2851,2853],{"type":1896,"url":2848},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1896,"url":2850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1904,"url":2852},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1896,"url":2854},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2856,2857,2858,2859,2860],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":141,"slug":2863,"dossier":46,"summary":2864,"aliases":2865,"sourceIds":2868,"published":2869,"modified":2870,"checkedAt":7,"severity":2871,"references":2877,"versionKeys":2888,"packageCount":32,"repositoryCount":2016},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2866,2867],"CVE-2026-34520","PYSEC-2026-2102",[141,2867],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[2872,2874,2875],{"type":1892,"score":2873},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1996,"score":2076},{"type":1996,"score":2876},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2878,2880,2882,2884,2885,2886],{"type":1901,"url":2879},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1896,"url":2881},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1901,"url":2883},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1904,"url":2004},{"type":1896,"url":2088},{"type":1907,"url":2887},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":142,"slug":2890,"dossier":46,"summary":2891,"aliases":2892,"sourceIds":2895,"published":2896,"modified":2897,"checkedAt":7,"severity":2898,"references":2901,"versionKeys":2907,"packageCount":32,"repositoryCount":2016},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2893,2894],"CVE-2026-54277","PYSEC-2026-2110",[142,2894],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[2899,2900],{"type":1996,"score":2455},{"type":1892,"score":1999},[2902,2904,2906],{"type":1896,"url":2903},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1901,"url":2905},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":143,"slug":2909,"dossier":91,"summary":2910,"aliases":2911,"sourceIds":2914,"published":2915,"modified":2916,"checkedAt":7,"severity":2917,"references":2921,"versionKeys":2930,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2912,2913],"CVE-2026-45409","PYSEC-2026-215",[143,2913],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[2918,2919],{"type":1892,"score":1963},{"type":1996,"score":2920},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2922,2924,2926,2928],{"type":1896,"url":2923},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1896,"url":2925},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1904,"url":2927},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1907,"url":2929},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2931,2932,2933],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":144,"slug":2935,"dossier":46,"summary":2936,"aliases":2937,"sourceIds":2940,"published":2941,"modified":2942,"checkedAt":7,"severity":2943,"references":2945,"versionKeys":2956,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2938,2939],"CVE-2025-69224","PYSEC-2026-1099",[144,2939],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[2944],{"type":1996,"score":2076},[2946,2948,2950,2952,2953,2954],{"type":1907,"url":2947},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1896,"url":2949},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1901,"url":2951},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":2955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2008,2009,2010,2011,2012,2013,2014],{"id":145,"slug":2958,"dossier":46,"summary":2959,"aliases":2960,"sourceIds":2963,"published":2964,"modified":2965,"checkedAt":7,"severity":2966,"references":2968,"versionKeys":2987,"packageCount":32,"repositoryCount":106},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[2961,2962],"CVE-2025-62426","PYSEC-2026-2012",[145,2962],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[2967],{"type":1892,"score":2344},[2969,2971,2973,2975,2977,2979,2981,2982,2984,2986],{"type":1907,"url":2970},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":1896,"url":2972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":1907,"url":2974},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":1907,"url":2976},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":1896,"url":2978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":1907,"url":2980},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":1904,"url":2045},{"type":1907,"url":2983},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":1907,"url":2985},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":1904,"url":2041},[2063,2064,2300],{"id":146,"slug":2989,"dossier":46,"summary":2990,"aliases":2991,"sourceIds":2994,"published":2995,"modified":2996,"checkedAt":7,"severity":2997,"references":3002,"versionKeys":3014,"packageCount":32,"repositoryCount":104},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2992,2993],"CVE-2026-1839","PYSEC-2026-2288",[146,2993],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[2998,3000],{"type":1892,"score":2999},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1892,"score":3001},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3003,3005,3007,3008,3010,3012],{"type":1896,"url":3004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1901,"url":3006},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1904,"url":1938},{"type":1907,"url":3009},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1940,"url":3011},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1896,"url":3013},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1945,1946,1947,1948,1949,1950,1951],{"id":147,"slug":3016,"dossier":46,"summary":3017,"aliases":3018,"sourceIds":3021,"published":3022,"modified":3023,"checkedAt":7,"severity":3024,"references":3029,"versionKeys":3043,"packageCount":32,"repositoryCount":106},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[3019,3020],"CVE-2026-34760","PYSEC-2026-2299",[147,3020],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[3025,3027],{"type":1892,"score":3026},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":1892,"score":3028},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[3030,3032,3034,3036,3038,3040,3041],{"type":1896,"url":3031},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":1896,"url":3033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":2143,"url":3035},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":1901,"url":3037},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":1907,"url":3039},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":1904,"url":2045},{"type":1896,"url":3042},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[2063,2064,2300],{"id":148,"slug":3045,"dossier":46,"summary":3046,"aliases":3047,"sourceIds":3050,"published":3051,"modified":3052,"checkedAt":7,"severity":3053,"references":3055,"versionKeys":3068,"packageCount":32,"repositoryCount":491},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[3048,3049],"CVE-2025-61620","PYSEC-2026-2013",[148,3049],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[3054],{"type":1892,"score":2344},[3056,3058,3060,3062,3063,3064,3066],{"type":1907,"url":3057},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":1907,"url":3059},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":1907,"url":3061},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":1904,"url":2045},{"type":1904,"url":2041},{"type":1896,"url":3065},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":1896,"url":3067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[2063,2300],{"id":149,"slug":3070,"dossier":46,"summary":3071,"aliases":3072,"sourceIds":3075,"published":3076,"modified":3077,"checkedAt":7,"severity":3078,"references":3080,"versionKeys":3091,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3073,3074],"CVE-2025-69228","PYSEC-2026-1100",[149,3074],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[3079],{"type":1996,"score":2455},[3081,3083,3085,3087,3088,3089],{"type":1907,"url":3082},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1896,"url":3084},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1901,"url":3086},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":3090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2008,2009,2010,2011,2012,2013,2014],{"id":150,"slug":3093,"dossier":46,"summary":3094,"aliases":3095,"sourceIds":3098,"published":3099,"modified":3100,"checkedAt":7,"severity":3101,"references":3104,"versionKeys":3113,"packageCount":32,"repositoryCount":2831},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[3096,3097],"CVE-2026-53538","PYSEC-2026-3037",[150,3097],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[3102],{"type":1892,"score":3103},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3105,3107,3108,3109,3111],{"type":1907,"url":3106},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":3110},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":1896,"url":3112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[2829,2830,2689],{"id":151,"slug":3115,"dossier":46,"summary":3116,"aliases":3117,"sourceIds":3120,"published":3121,"modified":3122,"checkedAt":7,"severity":3123,"references":3125,"versionKeys":3136,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[3118,3119],"CVE-2025-69223","PYSEC-2026-1101",[151,3119],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[3124],{"type":1892,"score":1999},[3126,3128,3130,3132,3133,3134],{"type":1907,"url":3127},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1896,"url":3129},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1901,"url":3131},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":3135},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2008,2009,2010,2011,2012,2013,2014],{"id":152,"slug":3138,"dossier":46,"summary":3139,"aliases":3140,"sourceIds":3143,"published":3144,"modified":3145,"checkedAt":7,"severity":3146,"references":3148,"versionKeys":3165,"packageCount":32,"repositoryCount":106},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[3141,3142],"CVE-2026-54233","PYSEC-2026-3404",[152,3142],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[3147],{"type":1892,"score":2344},[3149,3151,3153,3155,3157,3159,3161,3162,3164],{"type":1907,"url":3150},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":1896,"url":3152},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":1907,"url":3154},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":1907,"url":3156},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":1896,"url":3158},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":1907,"url":3160},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":1904,"url":2045},{"type":1907,"url":3163},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":1904,"url":2041},[2063,2064,2300],{"id":153,"slug":3167,"dossier":46,"summary":3168,"aliases":3169,"sourceIds":3172,"published":3173,"modified":3174,"checkedAt":7,"severity":3175,"references":3177,"versionKeys":3191,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[3170,3171],"CVE-2025-48942","PYSEC-2025-54",[153,3171],"2025-05-28T19:41:53Z","2026-02-04T02:16:15.150519Z",[3176],{"type":1892,"score":2344},[3178,3180,3182,3184,3186,3188,3190],{"type":1940,"url":3179},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":1896,"url":3181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":2143,"url":3183},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":2143,"url":3185},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":1901,"url":3187},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":1907,"url":3189},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":1904,"url":2045},[2300],{"id":154,"slug":3193,"dossier":46,"summary":3194,"aliases":3195,"sourceIds":3198,"published":3199,"modified":3200,"checkedAt":7,"severity":3201,"references":3203,"versionKeys":3214,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3196,3197],"CVE-2024-12720","PYSEC-2026-1982",[154,3197],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3202],{"type":1892,"score":2559},[3204,3206,3208,3209,3211,3212],{"type":1896,"url":3205},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1907,"url":3207},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1904,"url":1938},{"type":1907,"url":3210},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1904,"url":2187},{"type":1896,"url":3213},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1945],{"id":155,"slug":3216,"dossier":46,"summary":3217,"aliases":3218,"sourceIds":3220,"published":3221,"modified":3222,"checkedAt":7,"severity":3223,"references":3225,"versionKeys":3234,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[3219],"CVE-2026-57585",[155],"2026-06-19T21:42:55Z","2026-07-08T08:26:50.587609817Z",[3224],{"type":1892,"score":1999},[3226,3228,3230,3232],{"type":1907,"url":3227},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":1907,"url":3229},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":1904,"url":3231},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":1907,"url":3233},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[3235,3236,3237],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":156,"slug":3239,"dossier":46,"summary":3240,"aliases":3241,"sourceIds":3244,"published":3245,"modified":3246,"checkedAt":7,"severity":3247,"references":3249,"versionKeys":3282,"packageCount":32,"repositoryCount":491},"ghsa-6wgj-66m2-xxp2-37eb592b","Ray has arbitrary code execution via jobs submission API",[3242,3243],"CVE-2023-48022","PYSEC-2026-517",[156,3243],"2023-11-28T09:30:26Z","2026-07-01T20:23:03.600233Z",[3248],{"type":1892,"score":2518},[3250,3252,3254,3256,3258,3260,3262,3264,3266,3268,3270,3272,3274,3276,3278,3280],{"type":1896,"url":3251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-48022",{"type":1907,"url":3253},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F978947083b1e192dba61ef653c863b11d56b0936",{"type":1907,"url":3255},"https:\u002F\u002Fatlas.mitre.org\u002Fstudies\u002FAML.CS0023",{"type":1907,"url":3257},"https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fray-versions-2-6-3-2-8-0",{"type":1907,"url":3259},"https:\u002F\u002Fconsole.vulncheck.com\u002Fcve\u002FCVE-2023-48022",{"type":1907,"url":3261},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Findex.html",{"type":1907,"url":3263},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Ftoken-auth.html",{"type":1896,"url":3265},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xg2h-7cxj-3gvh",{"type":1907,"url":3267},"https:\u002F\u002Fgithub.com\u002Fhonysyang\u002FRay",{"type":1904,"url":3269},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray",{"type":1907,"url":3271},"https:\u002F\u002Fwww.anyscale.com\u002Fblog\u002Fupdate-on-ray-cve-2023-48022-new-verification-tooling-available",{"type":1907,"url":3273},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-attack-ai-workloads-actively-exploited-in-the-wild",{"type":1907,"url":3275},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fshadowray-cve-2023-48022-exploit",{"type":1907,"url":3277},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fthe-story-of-shadowray-cve-2023-48022",{"type":1907,"url":3279},"https:\u002F\u002Fwww.vulncheck.com\u002Fblog\u002Finitial-access-intelligence-august-2024",{"type":1904,"url":3281},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fray",[3283,3284],"pypi:ray@2.45.0","pypi:ray@2.49.1",{"id":157,"slug":3286,"dossier":46,"summary":3287,"aliases":3288,"sourceIds":3291,"published":3292,"modified":3293,"checkedAt":7,"severity":3294,"references":3296,"versionKeys":3334,"packageCount":32,"repositoryCount":491},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[3289,3290],"CVE-2026-27893","PYSEC-2026-2297",[157,3290],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[3295],{"type":1892,"score":2028},[3297,3299,3301,3303,3305,3307,3308,3310,3312,3314,3316,3318,3320,3322,3324,3326,3328,3330,3332],{"type":1896,"url":3298},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":1896,"url":3300},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":2143,"url":3302},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":1901,"url":3304},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":1907,"url":3306},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":1904,"url":2045},{"type":1907,"url":3309},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":2143,"url":3311},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":1907,"url":3313},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":1896,"url":3315},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":1896,"url":3317},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":1896,"url":3319},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":1896,"url":3321},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1896,"url":3323},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1896,"url":3325},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":1896,"url":3327},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":1896,"url":3329},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":1896,"url":3331},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":1896,"url":3333},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[2063,2064],{"id":158,"slug":3336,"dossier":46,"summary":3337,"aliases":3338,"sourceIds":3341,"published":3342,"modified":3343,"checkedAt":7,"severity":3344,"references":3346,"versionKeys":3363,"packageCount":32,"repositoryCount":2831},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3339,3340],"CVE-2025-62727","PYSEC-2026-1942",[158,3340],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3345],{"type":1892,"score":1999},[3347,3349,3351,3353,3356,3358,3360,3361],{"type":1907,"url":3348},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":1896,"url":3350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":1901,"url":3352},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3354,"url":3355},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":1904,"url":3357},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":1907,"url":3359},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":1904,"url":1978},{"type":1896,"url":3362},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[1983,1984,3364,3365],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":159,"slug":3367,"dossier":46,"summary":3368,"aliases":3369,"sourceIds":3372,"published":3373,"modified":3374,"checkedAt":7,"severity":3375,"references":3378,"versionKeys":3395,"packageCount":32,"repositoryCount":2861},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3370,3371],"CVE-2026-0994","PYSEC-2026-1805",[159,3371],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3376],{"type":1996,"score":3377},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3379,3381,3383,3385,3387,3389,3391,3393],{"type":1896,"url":3380},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":1907,"url":3382},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":1907,"url":3384},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":1907,"url":3386},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":1907,"url":3388},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":1904,"url":3390},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":1904,"url":3392},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":1896,"url":3394},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3396,3397,3398,3399,3400,3401,3402,3403,3404],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":160,"slug":3406,"dossier":46,"summary":3407,"aliases":3408,"sourceIds":3411,"published":3412,"modified":3413,"checkedAt":7,"severity":3414,"references":3418,"versionKeys":3433,"packageCount":32,"repositoryCount":106},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[3409,3410],"CVE-2026-54235","PYSEC-2026-3405",[160,3410],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[3415,3417],{"type":1892,"score":3416},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":1996,"score":2920},[3419,3421,3423,3425,3427,3429,3431,3432],{"type":1907,"url":3420},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":1896,"url":3422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":1907,"url":3424},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":1907,"url":3426},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":1896,"url":3428},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":1907,"url":3430},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":161,"slug":3435,"dossier":46,"summary":3436,"aliases":3437,"sourceIds":3440,"published":3441,"modified":3442,"checkedAt":7,"severity":3443,"references":3446,"versionKeys":3467,"packageCount":32,"repositoryCount":106},"ghsa-7rgv-gqhr-fxg3-3d33cce2","xgrammar vulnerable to DoS via multi-layer nesting",[3438,3439],"CVE-2026-25048","PYSEC-2026-2322",[161,3439],"2026-03-05T16:16:15.853Z","2026-07-13T07:26:24.793294058Z",[3444,3445],{"type":1996,"score":2674},{"type":1892,"score":1999},[3447,3449,3451,3452,3454,3456,3458,3459,3461,3463,3465],{"type":1940,"url":3448},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-7rgv-gqhr-fxg3",{"type":1896,"url":3450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25048",{"type":1904,"url":2736},{"type":1896,"url":3453},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Freleases\u002Ftag\u002Fv0.1.32",{"type":1907,"url":3455},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25048",{"type":1907,"url":3457},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25048.json",{"type":1896,"url":3323},{"type":1896,"url":3460},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5809",{"type":1896,"url":3462},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6761",{"type":1896,"url":3464},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6762",{"type":2143,"url":3466},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444840",[2742,3468,3469],"pypi:xgrammar@0.1.21","pypi:xgrammar@0.1.25",{"id":162,"slug":3471,"dossier":46,"summary":3472,"aliases":3473,"sourceIds":3476,"published":3477,"modified":3478,"checkedAt":7,"severity":3479,"references":3481,"versionKeys":3485,"packageCount":32,"repositoryCount":104},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[3474,3475],"CVE-2026-54283","PYSEC-2026-249",[162,3475],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[3480],{"type":1892,"score":1999},[3482,3484],{"type":1896,"url":3483},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":1904,"url":3357},[1982,1983,1984,3364,3365,3486,3487],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":163,"slug":3489,"dossier":46,"summary":3490,"aliases":3491,"sourceIds":3495,"published":3496,"modified":3497,"checkedAt":7,"severity":3498,"references":3501,"versionKeys":3537,"packageCount":32,"repositoryCount":104},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[3492,3493,3494],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[163,3493],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[3499],{"type":1892,"score":3500},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3502,3504,3506,3508,3510,3512,3514,3516,3518,3520,3521,3523,3526,3528,3529,3531,3533,3535],{"type":1896,"url":3503},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":1896,"url":3505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":1901,"url":3507},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":1907,"url":3509},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":1910,"url":3511},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":1907,"url":3513},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":1907,"url":3515},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":1907,"url":3517},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":1907,"url":3519},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":1904,"url":3357},{"type":1907,"url":3522},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":3524,"url":3525},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":1907,"url":3527},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":1907,"url":3321},{"type":1907,"url":3530},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":1907,"url":3532},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":1910,"url":3534},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":1896,"url":3536},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[1982,1983,1984,3364,3365,3486,3487],{"id":164,"slug":3539,"dossier":46,"summary":3540,"aliases":3541,"sourceIds":3545,"published":3546,"modified":3547,"checkedAt":7,"severity":3548,"references":3552,"versionKeys":3574,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[3542,3543,3544],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[164,3544],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[3549,3550],{"type":1892,"score":2134},{"type":1996,"score":3551},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3553,3555,3557,3559,3561,3563,3564,3566,3568,3570,3572],{"type":1896,"url":3554},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1907,"url":3556},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1907,"url":3558},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1907,"url":3560},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1907,"url":3562},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1904,"url":2150},{"type":1907,"url":3565},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1907,"url":3567},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1907,"url":3569},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1904,"url":3571},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1896,"url":3573},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2162,2163,2164,3575,3576],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":165,"slug":3578,"dossier":46,"summary":3579,"aliases":3580,"sourceIds":3583,"published":3584,"modified":3585,"checkedAt":7,"severity":3586,"references":3589,"versionKeys":3604,"packageCount":32,"repositoryCount":106},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[3581,3582],"CVE-2025-66448","PYSEC-2026-2015",[165,3582],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[3587],{"type":1892,"score":3588},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3590,3592,3594,3596,3598,3600,3602,3603],{"type":1907,"url":3591},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":1896,"url":3593},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":1907,"url":3595},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":1907,"url":3597},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":1896,"url":3599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":1907,"url":3601},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":166,"slug":3606,"dossier":46,"summary":3607,"aliases":3608,"sourceIds":3611,"published":3612,"modified":3613,"checkedAt":7,"severity":3614,"references":3617,"versionKeys":3636,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[3609,3610],"CVE-2026-12491","PYSEC-2026-3406",[166,3610],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[3615],{"type":1892,"score":3616},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[3618,3620,3622,3624,3626,3628,3630,3632,3634,3635],{"type":1907,"url":3619},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":1896,"url":3621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":1907,"url":3623},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":1907,"url":3625},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":1907,"url":3627},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":1907,"url":3629},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":1896,"url":3631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":1907,"url":3633},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2064],{"id":167,"slug":3638,"dossier":46,"summary":3639,"aliases":3640,"sourceIds":3643,"published":3644,"modified":3645,"checkedAt":7,"severity":3646,"references":3649,"versionKeys":3668,"packageCount":32,"repositoryCount":106},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[3641,3642],"CVE-2025-4565","PYSEC-2026-1806",[167,3642],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[3647],{"type":1996,"score":3648},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3650,3652,3654,3656,3658,3659,3661,3663,3665,3666],{"type":1907,"url":3651},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":1907,"url":3653},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":1896,"url":3655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":1907,"url":3657},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":1904,"url":3390},{"type":1907,"url":3660},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":1907,"url":3662},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":1907,"url":3664},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":1904,"url":3392},{"type":1896,"url":3667},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3396,3398,3399],{"id":168,"slug":3670,"dossier":46,"summary":3671,"aliases":3672,"sourceIds":3675,"published":3676,"modified":3677,"checkedAt":7,"severity":3678,"references":3680,"versionKeys":3693,"packageCount":32,"repositoryCount":491},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3673,3674],"CVE-2025-5197","PYSEC-2026-1983",[168,3674],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[3679],{"type":1892,"score":2559},[3681,3683,3685,3687,3688,3690,3691],{"type":1896,"url":3682},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1907,"url":3684},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1907,"url":3686},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1904,"url":1938},{"type":1907,"url":3689},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1904,"url":2187},{"type":1896,"url":3692},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1945,1946],{"id":169,"slug":3695,"dossier":46,"summary":3696,"aliases":3697,"sourceIds":3700,"published":3701,"modified":3702,"checkedAt":7,"severity":3703,"references":3706,"versionKeys":3730,"packageCount":32,"repositoryCount":106},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[3698,3699],"CVE-2026-48746","PYSEC-2026-226",[169,3699],"2026-06-16T17:36:41Z","2026-07-17T16:30:30.589294814Z",[3704],{"type":1892,"score":3705},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[3707,3709,3711,3713,3715,3717,3718,3719,3721,3723,3725,3726,3728],{"type":1896,"url":3708},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":1896,"url":3710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":2143,"url":3712},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":1907,"url":3714},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":1907,"url":3716},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":1907,"url":2355},{"type":1907,"url":2357},{"type":1907,"url":3720},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":1907,"url":3722},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":1907,"url":3724},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":1904,"url":2045},{"type":1907,"url":3727},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":1896,"url":3729},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",[2063,2064,2300],{"id":170,"slug":3732,"dossier":46,"summary":3733,"aliases":3734,"sourceIds":3737,"published":3738,"modified":3739,"checkedAt":7,"severity":3740,"references":3743,"versionKeys":3754,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[3735,3736],"CVE-2025-53643","PYSEC-2026-1104",[170,3736],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[3741],{"type":1996,"score":3742},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3744,3746,3748,3750,3751,3752],{"type":1907,"url":3745},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1896,"url":3747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1901,"url":3749},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":3753},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2008,2009,2010,2011],{"id":171,"slug":3756,"dossier":46,"summary":3757,"aliases":3758,"sourceIds":3761,"published":3762,"modified":3763,"checkedAt":7,"severity":3764,"references":3768,"versionKeys":3777,"packageCount":32,"repositoryCount":2016},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[3759,3760],"CVE-2026-34518","PYSEC-2026-2100",[171,3760],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[3765,3767],{"type":1892,"score":3766},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1996,"score":2648},[3769,3771,3773,3775,3776],{"type":1901,"url":3770},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1896,"url":3772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1901,"url":3774},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":172,"slug":3779,"dossier":46,"summary":3780,"aliases":3781,"sourceIds":3784,"published":3785,"modified":3786,"checkedAt":7,"severity":3787,"references":3791,"versionKeys":3810,"packageCount":32,"repositoryCount":106},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[3782,3783],"CVE-2026-9540","PYSEC-2026-3407",[172,3783],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[3788,3789],{"type":1892,"score":1963},{"type":1996,"score":3790},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3792,3794,3796,3798,3799,3801,3803,3805,3807,3808],{"type":1896,"url":3793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":1907,"url":3795},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":1907,"url":3797},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":1904,"url":2045},{"type":1907,"url":3800},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":1907,"url":3802},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":1907,"url":3804},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":1907,"url":3806},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":1904,"url":2041},{"type":1896,"url":3809},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[2063,2064,2300],{"id":173,"slug":3812,"dossier":46,"summary":3813,"aliases":3814,"sourceIds":3817,"published":3818,"modified":3819,"checkedAt":7,"severity":3820,"references":3822,"versionKeys":3834,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[3815,3816],"CVE-2025-48943","PYSEC-2025-55",[173,3816],"2025-05-28T19:42:12Z","2026-02-04T02:59:05.360205Z",[3821],{"type":1892,"score":2344},[3823,3825,3827,3829,3830,3831,3833],{"type":1896,"url":3824},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":1896,"url":3826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":2143,"url":3828},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":2143,"url":3185},{"type":1901,"url":3187},{"type":1907,"url":3832},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":1904,"url":2045},[2300],{"id":174,"slug":3836,"dossier":46,"summary":3837,"aliases":3838,"sourceIds":3841,"published":3842,"modified":3843,"checkedAt":7,"severity":3844,"references":3847,"versionKeys":3866,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[3839,3840],"CVE-2024-47081","PYSEC-2026-1872",[174,3840],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[3845],{"type":1892,"score":3846},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3848,3850,3852,3854,3856,3858,3860,3862,3864],{"type":1907,"url":3849},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1896,"url":3851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1907,"url":3853},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1901,"url":3855},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1904,"url":3857},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1907,"url":3859},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1907,"url":3861},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1904,"url":3863},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1896,"url":3865},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[3867,3868],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":175,"slug":3870,"dossier":46,"summary":3871,"aliases":3872,"sourceIds":3875,"published":3876,"modified":3877,"checkedAt":7,"severity":3878,"references":3881,"versionKeys":3896,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[3873,3874],"CVE-2025-30165","PYSEC-2026-2017",[175,3874],"2025-05-06T16:38:35Z","2026-07-17T16:30:32.007556436Z",[3879],{"type":1892,"score":3880},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3882,3884,3886,3888,3890,3891,3893,3895],{"type":1907,"url":3883},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":1896,"url":3885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":1896,"url":3887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":1907,"url":3889},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":1904,"url":2045},{"type":1907,"url":3892},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":1907,"url":3894},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":1904,"url":2041},[2300],{"id":176,"slug":3898,"dossier":46,"summary":3899,"aliases":3900,"sourceIds":3903,"published":3904,"modified":3905,"checkedAt":7,"severity":3906,"references":3909,"versionKeys":3926,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[3901,3902],"CVE-2024-35195","PYSEC-2026-1873",[176,3902],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[3907],{"type":1892,"score":3908},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3910,3912,3914,3916,3918,3919,3921,3923,3924],{"type":1907,"url":3911},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1896,"url":3913},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1907,"url":3915},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1901,"url":3917},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1904,"url":3857},{"type":1907,"url":3920},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1907,"url":3922},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1904,"url":3863},{"type":1896,"url":3925},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[3867],{"id":177,"slug":3928,"dossier":46,"summary":3929,"aliases":3930,"sourceIds":3933,"published":3934,"modified":3935,"checkedAt":7,"severity":3936,"references":3940,"versionKeys":3946,"packageCount":32,"repositoryCount":2016},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[3931,3932],"CVE-2026-54280","PYSEC-2026-2113",[177,3932],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[3937,3939],{"type":1996,"score":3938},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":1999},[3941,3943,3945],{"type":1896,"url":3942},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1901,"url":3944},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":178,"slug":3948,"dossier":46,"summary":3949,"aliases":3950,"sourceIds":3953,"published":3954,"modified":3955,"checkedAt":7,"severity":3956,"references":3960,"versionKeys":3971,"packageCount":32,"repositoryCount":2016},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[3951,3952],"CVE-2026-34525","PYSEC-2026-2103",[178,3952],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[3957,3959],{"type":1996,"score":3958},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1892,"score":2078},[3961,3963,3965,3967,3969,3970],{"type":1901,"url":3962},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1896,"url":3964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1901,"url":3966},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1901,"url":3968},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":179,"slug":3973,"dossier":46,"summary":3974,"aliases":3975,"sourceIds":3978,"published":3979,"modified":3980,"checkedAt":7,"severity":3981,"references":3984,"versionKeys":3996,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[3976,3977],"CVE-2025-46722","PYSEC-2025-43",[179,3977],"2025-05-28T18:03:41Z","2026-02-04T03:00:21.842092Z",[3982],{"type":1892,"score":3983},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[3985,3987,3989,3991,3993,3995],{"type":1896,"url":3986},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":1896,"url":3988},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":1907,"url":3990},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":1901,"url":3992},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":1907,"url":3994},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":1904,"url":2045},[2300],{"id":180,"slug":3998,"dossier":46,"summary":3999,"aliases":4000,"sourceIds":4004,"published":4005,"modified":4006,"checkedAt":7,"severity":4007,"references":4012,"versionKeys":4028,"packageCount":32,"repositoryCount":491},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4001,4002,4003],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[180],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4008,4010],{"type":1892,"score":4009},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1996,"score":4011},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4013,4015,4017,4019,4020,4022,4024,4026],{"type":1896,"url":4014},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1907,"url":4016},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1907,"url":4018},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1904,"url":2150},{"type":1907,"url":4021},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1907,"url":4023},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1907,"url":4025},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1907,"url":4027},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2162,2163],{"id":181,"slug":4030,"dossier":46,"summary":4031,"aliases":4032,"sourceIds":4036,"published":4037,"modified":4038,"checkedAt":7,"severity":4039,"references":4043,"versionKeys":4080,"packageCount":32,"repositoryCount":4084},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4033,4034,4035],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[181,4035],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4040,4042],{"type":1996,"score":4041},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1892,"score":1999},[4044,4046,4048,4050,4052,4054,4055,4057,4059,4061,4063,4065,4067,4069,4070,4072,4073,4074,4076,4078],{"type":1907,"url":4045},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1896,"url":4047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1907,"url":4049},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1907,"url":4051},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1907,"url":4053},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1904,"url":2852},{"type":1907,"url":4056},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1907,"url":4058},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1907,"url":4060},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1896,"url":4062},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1896,"url":4064},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1896,"url":4066},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1896,"url":4068},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1896,"url":3333},{"type":1896,"url":4071},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1896,"url":2546},{"type":1896,"url":2061},{"type":1896,"url":4075},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1896,"url":4077},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1896,"url":4079},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[4081,4082,4083,2856,2857,2858,2859],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",12,{"id":182,"slug":4086,"dossier":46,"summary":4087,"aliases":4088,"sourceIds":4091,"published":4092,"modified":4093,"checkedAt":7,"severity":4094,"references":4097,"versionKeys":4114,"packageCount":32,"repositoryCount":491},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[4089,4090],"CVE-2025-27516","PYSEC-2026-1471",[182,4090],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[4095],{"type":1996,"score":4096},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4098,4100,4102,4104,4106,4108,4110,4112],{"type":1907,"url":4099},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1896,"url":4101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1901,"url":4103},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1904,"url":4105},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1907,"url":4107},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1907,"url":4109},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1904,"url":4111},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1896,"url":4113},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[4115,4116],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":183,"slug":4118,"dossier":46,"summary":4119,"aliases":4120,"sourceIds":4124,"published":4125,"modified":4126,"checkedAt":7,"severity":4127,"references":4131,"versionKeys":4147,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[4121,4122,4123],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[183,4123],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[4128,4129],{"type":1892,"score":2028},{"type":1996,"score":4130},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4132,4134,4136,4138,4139,4141,4143,4145],{"type":1896,"url":4133},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1907,"url":4135},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1907,"url":4137},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1904,"url":2800},{"type":1907,"url":4140},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1907,"url":4142},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1904,"url":4144},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1896,"url":4146},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[2806],{"id":184,"slug":4149,"dossier":46,"summary":4150,"aliases":4151,"sourceIds":4155,"published":4156,"modified":4157,"checkedAt":7,"severity":4158,"references":4163,"versionKeys":4181,"packageCount":32,"repositoryCount":491},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[4152,4153,4154],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[184],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[4159,4161],{"type":1892,"score":4160},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1996,"score":4162},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4164,4166,4168,4170,4172,4174,4175,4177,4179],{"type":1896,"url":4165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1907,"url":4167},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1907,"url":4169},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1907,"url":4171},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1907,"url":4173},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1904,"url":2150},{"type":1907,"url":4176},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1907,"url":4178},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1907,"url":4180},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2162,2163],{"id":185,"slug":4183,"dossier":46,"summary":4184,"aliases":4185,"sourceIds":4188,"published":4189,"modified":4190,"checkedAt":7,"severity":4191,"references":4195,"versionKeys":4206,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[4186,4187],"CVE-2024-47874","PYSEC-2026-1943",[185,4187],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[4192,4194],{"type":1892,"score":4193},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":1996,"score":2674},[4196,4198,4200,4202,4203,4204],{"type":1907,"url":4197},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":1896,"url":4199},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":1901,"url":4201},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":1904,"url":1972},{"type":1904,"url":1978},{"type":1896,"url":4205},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[1982],{"id":186,"slug":4208,"dossier":46,"summary":4209,"aliases":4210,"sourceIds":4213,"published":4214,"modified":4215,"checkedAt":7,"severity":4216,"references":4221,"versionKeys":4240,"packageCount":32,"repositoryCount":104},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[4211,4212],"CVE-2026-5241","PYSEC-2026-2290",[186,4212],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[4217,4219],{"type":1892,"score":4218},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1892,"score":4220},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4222,4224,4226,4228,4229,4231,4233,4234,4236,4238],{"type":1896,"url":4223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1901,"url":4225},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1896,"url":4227},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1896,"url":3321},{"type":1907,"url":4230},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2143,"url":4232},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1904,"url":1938},{"type":1907,"url":4235},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1940,"url":4237},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1907,"url":4239},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[1945,1946,1947,1948,1949,1950,1951],{"id":187,"slug":4242,"dossier":46,"summary":4243,"aliases":4244,"sourceIds":4247,"published":4248,"modified":4249,"checkedAt":7,"severity":4250,"references":4253,"versionKeys":4264,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[4245,4246],"CVE-2025-69230","PYSEC-2026-1105",[187,4246],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[4251],{"type":1996,"score":4252},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4254,4256,4258,4260,4261,4262],{"type":1907,"url":4255},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1896,"url":4257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1901,"url":4259},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4263},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2008,2009,2010,2011,2012,2013,2014],{"id":188,"slug":4266,"dossier":46,"summary":3194,"aliases":4267,"sourceIds":4270,"published":4271,"modified":4272,"checkedAt":7,"severity":4273,"references":4276,"versionKeys":4287,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[4268,4269],"CVE-2025-1194","PYSEC-2026-1984",[188,4269],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[4274],{"type":1892,"score":4275},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4277,4279,4281,4282,4284,4285],{"type":1896,"url":4278},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1907,"url":4280},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1904,"url":1938},{"type":1907,"url":4283},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1904,"url":2187},{"type":1896,"url":4286},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1945],{"id":189,"slug":4289,"dossier":46,"summary":4290,"aliases":4291,"sourceIds":4294,"published":4295,"modified":4296,"checkedAt":7,"severity":4297,"references":4300,"versionKeys":4306,"packageCount":32,"repositoryCount":2016},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[4292,4293],"CVE-2026-54278","PYSEC-2026-2111",[189,4293],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[4298,4299],{"type":1996,"score":2455},{"type":1892,"score":1999},[4301,4303,4304],{"type":1896,"url":4302},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1904,"url":2004},{"type":1901,"url":4305},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":190,"slug":4308,"dossier":46,"summary":4309,"aliases":4310,"sourceIds":4313,"published":4314,"modified":4315,"checkedAt":7,"severity":4316,"references":4319,"versionKeys":4338,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[4311,4312],"CVE-2024-34062","PYSEC-2026-1976",[190,4312],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[4317],{"type":1892,"score":4318},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4320,4322,4324,4326,4328,4330,4332,4334,4336],{"type":1907,"url":4321},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1896,"url":4323},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1907,"url":4325},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1904,"url":4327},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1907,"url":4329},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1907,"url":4331},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1907,"url":4333},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1904,"url":4335},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1896,"url":4337},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[4339],"pypi:tqdm@4.66.2",{"id":191,"slug":4341,"dossier":46,"summary":4342,"aliases":4343,"sourceIds":4346,"published":4347,"modified":4348,"checkedAt":7,"severity":4349,"references":4351,"versionKeys":4364,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[4344,4345],"CVE-2025-69229","PYSEC-2026-1106",[191,4345],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[4350],{"type":1996,"score":2455},[4352,4354,4356,4358,4360,4361,4362],{"type":1907,"url":4353},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1896,"url":4355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1907,"url":4357},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1907,"url":4359},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4363},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2008,2009,2010,2011,2012,2013,2014],{"id":192,"slug":4366,"dossier":91,"summary":4367,"aliases":4368,"sourceIds":4371,"published":4372,"modified":4373,"checkedAt":7,"severity":4374,"references":4379,"versionKeys":4389,"packageCount":32,"repositoryCount":405},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[4369,4370],"CVE-2026-25645","PYSEC-2026-2275",[192,4370],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[4375,4377],{"type":1892,"score":4376},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1892,"score":4378},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[4380,4382,4384,4386,4387],{"type":1896,"url":4381},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1896,"url":4383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1901,"url":4385},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1904,"url":3857},{"type":1896,"url":4388},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[3867,3868,4390,4391],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":193,"slug":4393,"dossier":91,"summary":4394,"aliases":4395,"sourceIds":4398,"published":4399,"modified":4400,"checkedAt":7,"severity":4401,"references":4403,"versionKeys":4414,"packageCount":32,"repositoryCount":2121},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[4396,4397],"CVE-2025-66418","PYSEC-2026-1998",[193,4397],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[4402],{"type":1996,"score":2101},[4404,4406,4408,4410,4411,4412],{"type":1907,"url":4405},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1896,"url":4407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1901,"url":4409},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1904,"url":2110},{"type":1904,"url":2112},{"type":1896,"url":4413},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2116,2117,2118,2119,2120],{"id":194,"slug":4416,"dossier":46,"summary":4417,"aliases":4418,"sourceIds":4421,"published":4422,"modified":4423,"checkedAt":7,"severity":4424,"references":4427,"versionKeys":4442,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[4419,4420],"CVE-2024-56201","PYSEC-2026-1472",[194,4420],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[4425,4426],{"type":1892,"score":2787},{"type":1996,"score":4096},[4428,4430,4432,4434,4436,4437,4439,4440],{"type":1907,"url":4429},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1896,"url":4431},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1907,"url":4433},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1901,"url":4435},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1904,"url":4105},{"type":1907,"url":4438},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1904,"url":4111},{"type":1896,"url":4441},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[4115],{"id":195,"slug":4444,"dossier":46,"summary":4445,"aliases":4446,"sourceIds":4449,"published":4450,"modified":4451,"checkedAt":7,"severity":4452,"references":4455,"versionKeys":4467,"packageCount":32,"repositoryCount":106},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[4447,4448],"CVE-2026-22773","PYSEC-2026-143",[195,4448],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[4453,4454],{"type":1892,"score":2344},{"type":1892,"score":1999},[4456,4458,4460,4462,4464,4466],{"type":1940,"url":4457},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":1896,"url":4459},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":1907,"url":4461},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":1907,"url":4463},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":1907,"url":4465},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":1904,"url":2045},[2063,2064,2300],{"id":196,"slug":4469,"dossier":46,"summary":4470,"aliases":4471,"sourceIds":4474,"published":4475,"modified":4476,"checkedAt":7,"severity":4477,"references":4479,"versionKeys":4500,"packageCount":32,"repositoryCount":106},"ghsa-gx77-xgc2-4888-18e94d17","Ray's New Token Authentication is Disabled By Default",[4472,4473],"CVE-2025-34351","PYSEC-2026-518",[196,4473],"2025-11-27T03:30:26Z","2026-07-01T20:23:03.614509Z",[4478],{"type":1996,"score":2624},[4480,4482,4484,4485,4486,4488,4490,4492,4494,4495,4497,4498],{"type":1907,"url":4481},"https:\u002F\u002Fgithub.com\u002FJLLeitschuh\u002Fsecurity-research\u002Fsecurity\u002Fadvisories\u002FGHSA-w8vc-465m-jjw6",{"type":1896,"url":4483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-34351",{"type":1907,"url":3263},{"type":1904,"url":3269},{"type":1907,"url":4487},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.52.0",{"type":1907,"url":4489},"https:\u002F\u002Fwww.cve.org\u002Fresourcessupport\u002Fallresources\u002Fcnarules#section_4-1_Vulnerability_Determination",{"type":1907,"url":4491},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fjonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE",{"type":1907,"url":4493},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet",{"type":1907,"url":3273},{"type":1907,"url":4496},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fanyscale-ray-token-authentication-disabled-by-default-insecure-configuration",{"type":1904,"url":3281},{"type":1896,"url":4499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gx77-xgc2-4888",[3283,3284,4501],"pypi:ray@2.50.1",{"id":197,"slug":4503,"dossier":46,"summary":4504,"aliases":4505,"sourceIds":4508,"published":4509,"modified":4510,"checkedAt":7,"severity":4511,"references":4514,"versionKeys":4535,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[4506,4507],"CVE-2024-34064","PYSEC-2026-1474",[197,4507],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[4512],{"type":1892,"score":4513},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4515,4517,4519,4521,4522,4524,4526,4528,4530,4532,4533],{"type":1907,"url":4516},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1896,"url":4518},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1901,"url":4520},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1904,"url":4105},{"type":1907,"url":4523},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1907,"url":4525},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1907,"url":4527},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1907,"url":4529},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1907,"url":4531},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1904,"url":4111},{"type":1896,"url":4534},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[4115],{"id":198,"slug":4537,"dossier":46,"summary":4538,"aliases":4539,"sourceIds":4542,"published":4543,"modified":4544,"checkedAt":7,"severity":4545,"references":4548,"versionKeys":4557,"packageCount":32,"repositoryCount":2016},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[4540,4541],"CVE-2026-34513","PYSEC-2026-2095",[198,4541],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[4546,4547],{"type":1996,"score":2379},{"type":1892,"score":1999},[4549,4551,4553,4555,4556],{"type":1901,"url":4550},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1896,"url":4552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1901,"url":4554},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":199,"slug":4559,"dossier":46,"summary":4560,"aliases":4561,"sourceIds":4564,"published":4565,"modified":4566,"checkedAt":7,"severity":4567,"references":4571,"versionKeys":4579,"packageCount":32,"repositoryCount":2016},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[4562,4563],"CVE-2026-47265","PYSEC-2026-2105",[199,4563],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[4568,4570],{"type":1996,"score":4569},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1892,"score":2754},[4572,4574,4576,4578],{"type":1901,"url":4573},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1896,"url":4575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1901,"url":4577},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":200,"slug":4581,"dossier":46,"summary":4582,"aliases":4583,"sourceIds":4586,"published":4587,"modified":4588,"checkedAt":7,"severity":4589,"references":4590,"versionKeys":4603,"packageCount":32,"repositoryCount":106},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[4584,4585],"CVE-2026-54236","PYSEC-2026-3408",[200,4585],"2026-06-17T14:04:09Z","2026-07-13T16:43:51.584530905Z",[],[4591,4593,4595,4597,4598,4599,4601],{"type":1907,"url":4592},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":1907,"url":4594},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":1907,"url":4596},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":1904,"url":2045},{"type":1904,"url":2041},{"type":1896,"url":4600},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":1896,"url":4602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",[2063,2064,2300],{"id":201,"slug":4605,"dossier":46,"summary":4606,"aliases":4607,"sourceIds":4610,"published":4611,"modified":4612,"checkedAt":7,"severity":4613,"references":4618,"versionKeys":4624,"packageCount":32,"repositoryCount":2016},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[4608,4609],"CVE-2026-54276","PYSEC-2026-2109",[201,4609],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[4614,4616],{"type":1996,"score":4615},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1892,"score":4617},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[4619,4621,4623],{"type":1896,"url":4620},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1901,"url":4622},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":202,"slug":4626,"dossier":46,"summary":4627,"aliases":4628,"sourceIds":4631,"published":4632,"modified":4633,"checkedAt":7,"severity":4634,"references":4636,"versionKeys":4649,"packageCount":32,"repositoryCount":106},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[4629,4630],"CVE-2026-44222","PYSEC-2026-3409",[202,4630],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[4635],{"type":1892,"score":2344},[4637,4639,4641,4643,4645,4647,4648],{"type":1907,"url":4638},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":1896,"url":4640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":1907,"url":4642},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":1896,"url":4644},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":1907,"url":4646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":203,"slug":4651,"dossier":46,"summary":4652,"aliases":4653,"sourceIds":4656,"published":4657,"modified":4658,"checkedAt":7,"severity":4659,"references":4663,"versionKeys":4679,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[4654,4655],"CVE-2024-11394","PYSEC-2024-229",[203,4655],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[4660,4662],{"type":1892,"score":4661},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1892,"score":2028},[4664,4666,4668,4670,4671,4673,4675,4677],{"type":1896,"url":4665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1907,"url":4667},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1907,"url":4669},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1904,"url":1938},{"type":1907,"url":4672},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1907,"url":4674},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1896,"url":4676},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1896,"url":4678},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1945],{"id":204,"slug":4681,"dossier":46,"summary":4682,"aliases":4683,"sourceIds":4685,"published":4686,"modified":4687,"checkedAt":7,"severity":4688,"references":4691,"versionKeys":4699,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[4684],"CVE-2025-71379",[204],"2025-05-28T17:50:06Z","2026-07-08T07:35:38.046987158Z",[4689],{"type":1892,"score":4690},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[4692,4694,4696,4698],{"type":1907,"url":4693},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":1907,"url":4695},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":1907,"url":4697},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":1904,"url":2045},[2300],{"id":205,"slug":4701,"dossier":46,"summary":4702,"aliases":4703,"sourceIds":4706,"published":4707,"modified":4708,"checkedAt":7,"severity":4709,"references":4712,"versionKeys":4721,"packageCount":32,"repositoryCount":491},"ghsa-j842-xgm4-wf88-5ee5f9f5","MLX has Wild Pointer Dereference in load_gguf()",[4704,4705],"CVE-2025-62609","PYSEC-2025-139",[205,4705],"2025-11-21T18:03:20Z","2026-06-06T00:45:47.874274188Z",[4710,4711],{"type":1996,"score":3790},{"type":1892,"score":1999},[4713,4715,4717,4719],{"type":1940,"url":4714},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-j842-xgm4-wf88",{"type":1896,"url":4716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62609",{"type":1904,"url":4718},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx",{"type":1907,"url":4720},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-139.yaml",[4722,4723],"pypi:mlx@0.29.0","pypi:mlx@0.29.3",{"id":206,"slug":4725,"dossier":46,"summary":4726,"aliases":4727,"sourceIds":4730,"published":4731,"modified":4732,"checkedAt":7,"severity":4733,"references":4738,"versionKeys":4755,"packageCount":32,"repositoryCount":2016},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[4728,4729],"CVE-2026-34993","PYSEC-2026-2104",[206,4729],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[4734,4736],{"type":1892,"score":4735},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1892,"score":4737},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4739,4741,4743,4745,4746,4748,4750,4751,4752,4753],{"type":1901,"url":4740},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1896,"url":4742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1901,"url":4744},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1904,"url":2004},{"type":1907,"url":4747},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1907,"url":4749},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1896,"url":3323},{"type":1896,"url":4227},{"type":1896,"url":3321},{"type":2143,"url":4754},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":207,"slug":4757,"dossier":46,"summary":4758,"aliases":4759,"sourceIds":4762,"published":4763,"modified":4764,"checkedAt":7,"severity":4765,"references":4767,"versionKeys":4778,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[4760,4761],"CVE-2025-69227","PYSEC-2026-1107",[207,4761],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[4766],{"type":1996,"score":2455},[4768,4770,4772,4774,4775,4776],{"type":1907,"url":4769},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1896,"url":4771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1907,"url":4773},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4777},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2008,2009,2010,2011,2012,2013,2014],{"id":208,"slug":4780,"dossier":46,"summary":4781,"aliases":4782,"sourceIds":4785,"published":4786,"modified":4787,"checkedAt":7,"severity":4788,"references":4790,"versionKeys":4803,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[4783,4784],"CVE-2025-3264","PYSEC-2026-1985",[208,4784],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[4789],{"type":1892,"score":2559},[4791,4793,4795,4797,4798,4800,4801],{"type":1896,"url":4792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1907,"url":4794},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1907,"url":4796},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1904,"url":1938},{"type":1907,"url":4799},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1904,"url":2187},{"type":1896,"url":4802},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1945],{"id":209,"slug":4805,"dossier":46,"summary":4806,"aliases":4807,"sourceIds":4810,"published":4811,"modified":4812,"checkedAt":7,"severity":4813,"references":4816,"versionKeys":4824,"packageCount":32,"repositoryCount":104},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[4808,4809],"CVE-2026-54282","PYSEC-2026-248",[209,4809],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[4814,4815],{"type":1892,"score":3103},{"type":1892,"score":2078},[4817,4819,4821,4822],{"type":1896,"url":4818},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":1896,"url":4820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":1904,"url":3357},{"type":1907,"url":4823},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[1982,1983,1984,3364,3365,3486,3487],{"id":210,"slug":4826,"dossier":46,"summary":4827,"aliases":4828,"sourceIds":4831,"published":4832,"modified":4833,"checkedAt":7,"severity":4834,"references":4839,"versionKeys":4848,"packageCount":32,"repositoryCount":2016},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[4829,4830],"CVE-2026-34516","PYSEC-2026-2098",[210,4830],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[4835,4836,4837],{"type":1892,"score":1999},{"type":1996,"score":2455},{"type":1996,"score":4838},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4840,4842,4844,4846,4847],{"type":1901,"url":4841},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1896,"url":4843},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1901,"url":4845},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":211,"slug":4850,"dossier":46,"summary":4851,"aliases":4852,"sourceIds":4855,"published":4856,"modified":4857,"checkedAt":7,"severity":4858,"references":4861,"versionKeys":4867,"packageCount":32,"repositoryCount":2016},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[4853,4854],"CVE-2026-50269","PYSEC-2026-2106",[211,4854],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[4859,4860],{"type":1996,"score":2076},{"type":1892,"score":1999},[4862,4864,4866],{"type":1896,"url":4863},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1901,"url":4865},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1904,"url":2004},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":212,"slug":4869,"dossier":46,"summary":4870,"aliases":4871,"sourceIds":4874,"published":4875,"modified":4876,"checkedAt":7,"severity":4877,"references":4880,"versionKeys":4888,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[4872,4873],"CVE-2026-56340","PYSEC-2026-250",[212,4873],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[4878,4879],{"type":1892,"score":2787},{"type":1892,"score":1999},[4881,4883,4885,4886],{"type":1896,"url":4882},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":1907,"url":4884},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":1904,"url":2045},{"type":1896,"url":4887},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[2064],{"id":213,"slug":4890,"dossier":46,"summary":4891,"aliases":4892,"sourceIds":4895,"published":4896,"modified":4897,"checkedAt":7,"severity":4898,"references":4901,"versionKeys":4909,"packageCount":32,"repositoryCount":106},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[4893,4894],"CVE-2026-44432","PYSEC-2026-142",[213,4894],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[4899,4900],{"type":1892,"score":1999},{"type":1996,"score":2101},[4902,4904,4906,4908],{"type":1896,"url":4903},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1896,"url":4905},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1907,"url":4907},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1904,"url":2110},[4910],"pypi:urllib3@2.6.3",{"id":214,"slug":4912,"dossier":46,"summary":4913,"aliases":4914,"sourceIds":4917,"published":4918,"modified":4919,"checkedAt":7,"severity":4920,"references":4923,"versionKeys":4936,"packageCount":32,"repositoryCount":4941},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[4915,4916],"CVE-2026-28684","PYSEC-2026-2270",[214,4916],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[4921],{"type":1892,"score":4922},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4924,4926,4928,4930,4932,4934],{"type":1901,"url":4925},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1896,"url":4927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1901,"url":4929},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1907,"url":4931},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1904,"url":4933},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1896,"url":4935},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[4937,4938,4939,4940],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",11,{"id":215,"slug":4943,"dossier":46,"summary":4944,"aliases":4945,"sourceIds":4948,"published":4949,"modified":4950,"checkedAt":7,"severity":4951,"references":4953,"versionKeys":4964,"packageCount":32,"repositoryCount":2831},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[4946,4947],"CVE-2026-40347","PYSEC-2026-3038",[215,4947],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[4952],{"type":1892,"score":1963},[4954,4956,4958,4959,4961,4962],{"type":1907,"url":4955},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":1896,"url":4957},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":1904,"url":2683},{"type":1907,"url":4960},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":1904,"url":2685},{"type":1896,"url":4963},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[2829,2830,2689],{"id":216,"slug":4966,"dossier":46,"summary":4967,"aliases":4968,"sourceIds":4971,"published":4972,"modified":4973,"checkedAt":7,"severity":4974,"references":4976,"versionKeys":4987,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[4969,4970],"CVE-2025-69225","PYSEC-2026-1109",[216,4970],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[4975],{"type":1996,"score":2076},[4977,4979,4981,4983,4984,4985],{"type":1907,"url":4978},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1896,"url":4980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1901,"url":4982},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1904,"url":2004},{"type":1904,"url":2658},{"type":1896,"url":4986},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2008,2009,2010,2011,2012,2013,2014],{"id":217,"slug":4989,"dossier":46,"summary":4990,"aliases":4991,"sourceIds":4994,"published":4995,"modified":4996,"checkedAt":7,"severity":4997,"references":4999,"versionKeys":5014,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[4992,4993],"CVE-2025-62164","PYSEC-2026-2018",[217,4993],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[4998],{"type":1892,"score":2787},[5000,5002,5004,5006,5008,5010,5012,5013],{"type":1907,"url":5001},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":1896,"url":5003},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":1907,"url":5005},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":1907,"url":5007},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":1896,"url":5009},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":1907,"url":5011},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2064],{"id":218,"slug":5016,"dossier":46,"summary":5017,"aliases":5018,"sourceIds":5022,"published":5023,"modified":5024,"checkedAt":7,"severity":5025,"references":5029,"versionKeys":5043,"packageCount":32,"repositoryCount":106},"ghsa-mw35-8rx3-xf9r-5497861f","Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization",[5019,5020,5021],"CVE-2026-41486","PYSEC-2026-2272","PYSEC-2026-2296",[218,5020],"2026-04-24T16:15:00Z","2026-07-13T07:26:16.094513511Z",[5026,5028],{"type":1996,"score":5027},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":1892,"score":2028},[5030,5032,5034,5036,5038,5040,5041],{"type":1896,"url":5031},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-mw35-8rx3-xf9r",{"type":1896,"url":5033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41486",{"type":1907,"url":5035},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F54831",{"type":1901,"url":5037},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F62056",{"type":1901,"url":5039},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002Fc02bd31ae31996805868baa446a131a8d304525f",{"type":1904,"url":3269},{"type":1896,"url":5042},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.55.0",[3283,3284,4501],{"id":219,"slug":5045,"dossier":46,"summary":5046,"aliases":5047,"sourceIds":5050,"published":5051,"modified":5052,"checkedAt":7,"severity":5053,"references":5056,"versionKeys":5065,"packageCount":32,"repositoryCount":2016},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[5048,5049],"CVE-2026-34519","PYSEC-2026-2101",[219,5049],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[5054,5055],{"type":1996,"score":2076},{"type":1892,"score":2078},[5057,5059,5061,5063,5064],{"type":1901,"url":5058},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1896,"url":5060},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1901,"url":5062},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":220,"slug":5067,"dossier":46,"summary":5068,"aliases":5069,"sourceIds":5072,"published":5073,"modified":5074,"checkedAt":7,"severity":5075,"references":5078,"versionKeys":5087,"packageCount":32,"repositoryCount":2016},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[5070,5071],"CVE-2026-34515","PYSEC-2026-2097",[220,5071],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[5076,5077],{"type":1996,"score":4569},{"type":1892,"score":2754},[5079,5081,5083,5085,5086],{"type":1901,"url":5080},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1896,"url":5082},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1901,"url":5084},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":221,"slug":5089,"dossier":46,"summary":5090,"aliases":5091,"sourceIds":5094,"published":4786,"modified":5095,"checkedAt":7,"severity":5096,"references":5099,"versionKeys":5112,"packageCount":32,"repositoryCount":491},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[5092,5093],"CVE-2025-3777","PYSEC-2026-1986",[221,5093],"2026-07-07T17:56:47.225461188Z",[5097],{"type":1892,"score":5098},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5100,5102,5104,5105,5107,5109,5110],{"type":1896,"url":5101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1907,"url":5103},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1904,"url":1938},{"type":1907,"url":5106},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1907,"url":5108},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1904,"url":2187},{"type":1896,"url":5111},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1945,1946],{"id":222,"slug":5114,"dossier":46,"summary":5115,"aliases":5116,"sourceIds":5119,"published":5120,"modified":5121,"checkedAt":7,"severity":5122,"references":5126,"versionKeys":5141,"packageCount":32,"repositoryCount":106},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[5117,5118],"CVE-2025-62372","PYSEC-2026-2019",[222,5118],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[5123,5124],{"type":1892,"score":2344},{"type":1996,"score":5125},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[5127,5129,5131,5132,5134,5135,5137,5139,5140],{"type":1907,"url":5128},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":1896,"url":5130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":1907,"url":5005},{"type":1907,"url":5133},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":1907,"url":5007},{"type":1896,"url":5136},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":1907,"url":5138},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2063,2064,2300],{"id":223,"slug":5143,"dossier":46,"summary":5144,"aliases":5145,"sourceIds":5148,"published":5149,"modified":5150,"checkedAt":7,"severity":5151,"references":5153,"versionKeys":5162,"packageCount":32,"repositoryCount":2831},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[5146,5147],"CVE-2026-42561","PYSEC-2026-3039",[223,5147],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[5152],{"type":1892,"score":1999},[5154,5156,5158,5159,5160],{"type":1907,"url":5155},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":1896,"url":5157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":5161},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[2829,2830,2689],{"id":224,"slug":5164,"dossier":46,"summary":5165,"aliases":5166,"sourceIds":5169,"published":5170,"modified":5171,"checkedAt":7,"severity":5172,"references":5174,"versionKeys":5194,"packageCount":32,"repositoryCount":106},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[5167,5168],"CVE-2026-34755","PYSEC-2026-144",[224,5168],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[5173],{"type":1892,"score":2344},[5175,5177,5179,5181,5183,5184,5185,5187,5189,5191,5192],{"type":1901,"url":5176},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":1896,"url":5178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":1907,"url":5180},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":1907,"url":5182},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":1907,"url":2355},{"type":1907,"url":2357},{"type":1907,"url":5186},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":1907,"url":5188},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":1907,"url":5190},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":1904,"url":2045},{"type":1907,"url":5193},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[2063,2064,2300],{"id":225,"slug":5196,"dossier":46,"summary":5197,"aliases":5198,"sourceIds":5201,"published":5202,"modified":5203,"checkedAt":7,"severity":5204,"references":5206,"versionKeys":5218,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[5199,5200],"CVE-2025-50181","PYSEC-2026-1999",[225,5200],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[5205],{"type":1892,"score":2429},[5207,5209,5211,5213,5214,5215,5216],{"type":1907,"url":5208},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1896,"url":5210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1901,"url":5212},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1904,"url":2110},{"type":1907,"url":2439},{"type":1904,"url":2112},{"type":1896,"url":5217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2116,2117,2118,2119],{"id":226,"slug":5220,"dossier":91,"summary":5221,"aliases":5222,"sourceIds":5226,"published":5227,"modified":5228,"checkedAt":7,"severity":5229,"references":5232,"versionKeys":5244,"packageCount":32,"repositoryCount":2121},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[5223,5224,5225],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[226,5225],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[5230,5231],{"type":1996,"score":4041},{"type":1892,"score":3001},[5233,5234,5236,5238,5240,5242,5243],{"type":1907,"url":4045},{"type":1901,"url":5235},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1896,"url":5237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1901,"url":5239},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1901,"url":5241},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1904,"url":2852},{"type":1896,"url":2854},[4081,4082,4083,2856,2857,2858,2859,2860],{"id":227,"slug":5246,"dossier":46,"summary":5247,"aliases":5248,"sourceIds":5251,"published":5252,"modified":5253,"checkedAt":7,"severity":5254,"references":5257,"versionKeys":5278,"packageCount":32,"repositoryCount":106},"ghsa-q279-jhrf-cc6v-6a45143b","Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack",[5249,5250],"CVE-2025-62593","PYSEC-2026-520",[227,5250],"2025-11-26T19:35:23Z","2026-07-01T20:23:03.643178Z",[5255],{"type":1996,"score":5256},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[5258,5260,5262,5264,5266,5268,5270,5271,5273,5275,5276],{"type":1907,"url":5259},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",{"type":1896,"url":5261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62593",{"type":1907,"url":5263},"https:\u002F\u002Fgithub.com\u002Fnccgroup\u002Fsingularity\u002Fpull\u002F68",{"type":1907,"url":5265},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F70e7c72780bdec075dba6cad1afe0832772bfe09",{"type":1907,"url":5267},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Freleases-2.51.1\u002Fray-security\u002Findex.html",{"type":1907,"url":5269},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMalvertising",{"type":1904,"url":3269},{"type":1907,"url":5272},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Fe7889ae542bf0188610bc8b06d274cbf53790cbd\u002Fpython\u002Fray\u002Fdashboard\u002Fhttp_server_head.py#L184-L196",{"type":1907,"url":5274},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Ff39a860436dca3ed5b9dfae84bd867ac10c84dc6\u002Fpython\u002Fray\u002Fdashboard\u002Foptional_utils.py#L129-L155",{"type":1904,"url":3281},{"type":1896,"url":5277},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",[3283,3284,4501],{"id":228,"slug":5280,"dossier":46,"summary":5281,"aliases":5282,"sourceIds":5285,"published":4786,"modified":5286,"checkedAt":7,"severity":5287,"references":5289,"versionKeys":5300,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[5283,5284],"CVE-2025-3263","PYSEC-2026-1987",[228,5284],"2026-07-07T17:56:57.889099913Z",[5288],{"type":1892,"score":2559},[5290,5292,5293,5294,5295,5297,5298],{"type":1896,"url":5291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1907,"url":4794},{"type":1907,"url":4796},{"type":1904,"url":1938},{"type":1907,"url":5296},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1904,"url":2187},{"type":1896,"url":5299},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1945],{"id":229,"slug":5302,"dossier":46,"summary":5303,"aliases":5304,"sourceIds":5307,"published":5308,"modified":5309,"checkedAt":7,"severity":5310,"references":5314,"versionKeys":5327,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[5305,5306],"CVE-2024-56326","PYSEC-2026-1475",[229,5306],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[5311,5313],{"type":1892,"score":5312},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1996,"score":4096},[5315,5317,5319,5321,5322,5323,5324,5325],{"type":1907,"url":5316},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1896,"url":5318},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1901,"url":5320},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1904,"url":4105},{"type":1907,"url":4438},{"type":1907,"url":4107},{"type":1904,"url":4111},{"type":1896,"url":5326},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[4115],{"id":230,"slug":5329,"dossier":46,"summary":5330,"aliases":5331,"sourceIds":5334,"published":5335,"modified":5336,"checkedAt":7,"severity":5337,"references":5342,"versionKeys":5354,"packageCount":32,"repositoryCount":106},"ghsa-q5fh-2hc8-f6rq-8b758e91","Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown \u002F job deletion)",[5332,5333],"CVE-2026-27482","PYSEC-2026-2271",[230,5333],"2026-02-20T21:15:25Z","2026-07-13T07:26:45.034743516Z",[5338,5340],{"type":1892,"score":5339},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"type":1892,"score":5341},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5343,5345,5347,5349,5351,5352],{"type":1940,"url":5344},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q5fh-2hc8-f6rq",{"type":1896,"url":5346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27482",{"type":1901,"url":5348},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F60526",{"type":1901,"url":5350},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",{"type":1904,"url":3269},{"type":1896,"url":5353},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.54.0",[3283,3284,4501],{"id":231,"slug":5356,"dossier":46,"summary":5357,"aliases":5358,"sourceIds":5361,"published":5362,"modified":5363,"checkedAt":7,"severity":5364,"references":5367,"versionKeys":5387,"packageCount":32,"repositoryCount":106},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[5359,5360],"CVE-2026-41523","PYSEC-2026-2300",[231,5360],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[5365],{"type":1892,"score":5366},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5368,5370,5372,5374,5375,5376,5378,5380,5382,5383,5385],{"type":1940,"url":5369},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":1896,"url":5371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":1901,"url":5373},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":1896,"url":2355},{"type":1896,"url":2357},{"type":1907,"url":5377},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":2143,"url":5379},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":1907,"url":5381},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":1904,"url":2045},{"type":1896,"url":5384},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":1907,"url":5386},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[2063,2064,2300],{"id":232,"slug":5389,"dossier":91,"summary":5390,"aliases":5391,"sourceIds":5394,"published":5395,"modified":5396,"checkedAt":7,"severity":5397,"references":5401,"versionKeys":5407,"packageCount":32,"repositoryCount":405},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[5392,5393],"CVE-2026-44431","PYSEC-2026-141",[232,5393],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[5398,5399],{"type":1892,"score":3766},{"type":1996,"score":5400},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5402,5404,5406],{"type":1896,"url":5403},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1896,"url":5405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1904,"url":2110},[2116,2117,2118,2119,2120,4910],{"id":233,"slug":5409,"dossier":46,"summary":5410,"aliases":5411,"sourceIds":5415,"published":5416,"modified":5417,"checkedAt":7,"severity":5418,"references":5422,"versionKeys":5440,"packageCount":32,"repositoryCount":2016},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[5412,5413,5414],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[233],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[5419,5420],{"type":1892,"score":4160},{"type":1996,"score":5421},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5423,5425,5427,5429,5431,5433,5434,5436,5438],{"type":1896,"url":5424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1907,"url":5426},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1907,"url":5428},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1907,"url":5430},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1907,"url":5432},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1904,"url":2150},{"type":1907,"url":5435},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1907,"url":5437},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1907,"url":5439},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2162,2163,2164,3575,3576,5441,5442,5443],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":234,"slug":5445,"dossier":46,"summary":5446,"aliases":5447,"sourceIds":5450,"published":5451,"modified":5452,"checkedAt":7,"severity":5453,"references":5456,"versionKeys":5482,"packageCount":32,"repositoryCount":106},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[5448,5449],"CVE-2026-24779","PYSEC-2026-2020",[234,5449],"2026-01-28T16:14:28Z","2026-07-17T16:30:32.009053490Z",[5454],{"type":1892,"score":5455},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[5457,5459,5461,5463,5465,5467,5468,5469,5471,5473,5475,5477,5478,5479,5480,5481],{"type":1907,"url":5458},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":1896,"url":5460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":1907,"url":5462},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":1907,"url":5464},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":1907,"url":5466},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":1904,"url":2041},{"type":1904,"url":2045},{"type":1907,"url":5470},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":1896,"url":5472},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":1907,"url":5474},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":1907,"url":5476},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":1907,"url":2057},{"type":1907,"url":2061},{"type":1907,"url":2546},{"type":1907,"url":3716},{"type":1907,"url":3714},[2063,2064,2300],{"id":235,"slug":5484,"dossier":46,"summary":5485,"aliases":5486,"sourceIds":5489,"published":5490,"modified":5491,"checkedAt":7,"severity":5492,"references":5495,"versionKeys":5510,"packageCount":32,"repositoryCount":2861},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[5487,5488],"CVE-2026-22701","PYSEC-2026-1374",[235,5488],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[5493],{"type":1892,"score":5494},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5496,5498,5500,5502,5504,5506,5508],{"type":1907,"url":5497},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1896,"url":5499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1907,"url":5501},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1907,"url":5503},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1904,"url":5505},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1904,"url":5507},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1896,"url":5509},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[5511,5512,5513,5514],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":236,"slug":5516,"dossier":46,"summary":5517,"aliases":5518,"sourceIds":5521,"published":5522,"modified":5523,"checkedAt":7,"severity":5524,"references":5527,"versionKeys":5541,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[5519,5520],"CVE-2025-2099","PYSEC-2025-40",[236,5520],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[5525,5526],{"type":1892,"score":2559},{"type":1892,"score":1999},[5528,5530,5532,5534,5535,5537,5539],{"type":1896,"url":5529},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1907,"url":5531},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1901,"url":5533},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1904,"url":1938},{"type":1907,"url":5536},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1907,"url":5538},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1896,"url":5540},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1945],{"id":237,"slug":5543,"dossier":46,"summary":4652,"aliases":5544,"sourceIds":5547,"published":5548,"modified":5549,"checkedAt":7,"severity":5550,"references":5554,"versionKeys":5568,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[5545,5546],"CVE-2024-11392","PYSEC-2024-227",[237,5546],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[5551,5553],{"type":1892,"score":5552},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1892,"score":2028},[5555,5557,5558,5559,5560,5562,5564,5566],{"type":1896,"url":5556},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1907,"url":4667},{"type":1907,"url":4669},{"type":1904,"url":1938},{"type":1907,"url":5561},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1907,"url":5563},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1896,"url":5565},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1896,"url":5567},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1945],{"id":238,"slug":5570,"dossier":91,"summary":5571,"aliases":5572,"sourceIds":5576,"published":5577,"modified":5578,"checkedAt":7,"severity":5579,"references":5582,"versionKeys":5597,"packageCount":32,"repositoryCount":2121},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[5573,5574,5575],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[238,5575],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[5580,5581],{"type":1892,"score":2138},{"type":1996,"score":2845},[5583,5585,5587,5589,5591,5592,5593,5595],{"type":1907,"url":5584},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1896,"url":5586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1907,"url":5588},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1907,"url":5590},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1904,"url":2852},{"type":1907,"url":2854},{"type":1904,"url":5594},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1896,"url":5596},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":239,"slug":5599,"dossier":46,"summary":5600,"aliases":5601,"sourceIds":5604,"published":5605,"modified":5606,"checkedAt":7,"severity":5607,"references":5609,"versionKeys":5624,"packageCount":32,"repositoryCount":491},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[5602,5603],"CVE-2025-6051","PYSEC-2026-1988",[239,5603],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[5608],{"type":1892,"score":2559},[5610,5612,5614,5616,5618,5619,5621,5622],{"type":1896,"url":5611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1907,"url":5613},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1907,"url":5615},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1907,"url":5617},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1904,"url":1938},{"type":1907,"url":5620},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1904,"url":2187},{"type":1896,"url":5623},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1945,1946],{"id":240,"slug":5626,"dossier":46,"summary":5627,"aliases":5628,"sourceIds":5631,"published":5632,"modified":5633,"checkedAt":7,"severity":5634,"references":5637,"versionKeys":5650,"packageCount":32,"repositoryCount":2861},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[5629,5630],"CVE-2026-25087","PYSEC-2026-113",[240,5630],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[5635],{"type":1892,"score":5636},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[5638,5640,5642,5644,5646,5648],{"type":1896,"url":5639},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1901,"url":5641},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1904,"url":5643},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1907,"url":5645},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1896,"url":5647},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1896,"url":5649},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[5651,5652,5653,5654],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":241,"slug":5656,"dossier":46,"summary":5657,"aliases":5658,"sourceIds":5662,"published":4156,"modified":5663,"checkedAt":7,"severity":5664,"references":5667,"versionKeys":5685,"packageCount":32,"repositoryCount":2861},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[5659,5660,5661],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[241],"2026-07-17T17:15:51.452848951Z",[5665,5666],{"type":1892,"score":4160},{"type":1996,"score":5421},[5668,5670,5672,5674,5676,5678,5679,5681,5683],{"type":1896,"url":5669},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1907,"url":5671},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1907,"url":5673},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1907,"url":5675},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1907,"url":5677},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1904,"url":2150},{"type":1907,"url":5680},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1907,"url":5682},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1907,"url":5684},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[5686,2162,2163,2164,3575,3576,5441,5442,5443],"pypi:torch@2.10.0",{"id":242,"slug":5688,"dossier":46,"summary":5689,"aliases":5690,"sourceIds":5693,"published":5694,"modified":5695,"checkedAt":7,"severity":5696,"references":5699,"versionKeys":5711,"packageCount":32,"repositoryCount":106},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[5691,5692],"CVE-2026-55574","PYSEC-2026-2304",[242,5692],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[5697,5698],{"type":1892,"score":1999},{"type":1996,"score":2674},[5700,5702,5704,5706,5708,5710],{"type":1896,"url":5701},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":1896,"url":5703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":1901,"url":5705},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":1901,"url":5707},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":1907,"url":5709},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":1904,"url":2045},[2063,2064,2300],{"id":243,"slug":5713,"dossier":46,"summary":5714,"aliases":5715,"sourceIds":5718,"published":5719,"modified":5720,"checkedAt":7,"severity":5721,"references":5723,"versionKeys":5738,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[5716,5717],"CVE-2025-48956","PYSEC-2026-2021",[243,5717],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[5722],{"type":1892,"score":1999},[5724,5726,5728,5730,5732,5734,5736,5737],{"type":1907,"url":5725},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":1896,"url":5727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":1907,"url":5729},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":1907,"url":5731},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":1896,"url":5733},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":1907,"url":5735},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2300],{"id":244,"slug":5740,"dossier":46,"summary":5741,"aliases":5742,"sourceIds":5745,"published":5746,"modified":5747,"checkedAt":7,"severity":5748,"references":5751,"versionKeys":5760,"packageCount":32,"repositoryCount":2831},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[5743,5744],"CVE-2026-53540","PYSEC-2026-3040",[244,5744],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[5749],{"type":1892,"score":5750},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5752,5754,5755,5756,5758],{"type":1907,"url":5753},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1904,"url":2683},{"type":1904,"url":2685},{"type":1896,"url":5757},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":1896,"url":5759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[2829,2830,2689],{"id":245,"slug":5762,"dossier":46,"summary":5763,"aliases":5764,"sourceIds":5767,"published":5768,"modified":5769,"checkedAt":7,"severity":5770,"references":5772,"versionKeys":5783,"packageCount":32,"repositoryCount":2831},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[5765,5766],"CVE-2026-53537","PYSEC-2026-3041",[245,5766],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[5771],{"type":1892,"score":3103},[5773,5775,5777,5778,5780,5782],{"type":1907,"url":5774},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1896,"url":5776},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":1904,"url":2683},{"type":1896,"url":5779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":1907,"url":5781},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":1904,"url":2685},[2829,2830,2689],{"id":246,"slug":5785,"dossier":46,"summary":5786,"aliases":5787,"sourceIds":5791,"published":4156,"modified":5792,"checkedAt":7,"severity":5793,"references":5796,"versionKeys":5811,"packageCount":32,"repositoryCount":104},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[5788,5789,5790],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[246],"2026-06-10T17:41:15.774477397Z",[5794,5795],{"type":1892,"score":4160},{"type":1996,"score":4162},[5797,5799,5800,5801,5802,5804,5805,5807,5809],{"type":1896,"url":5798},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1907,"url":4167},{"type":1907,"url":4169},{"type":1907,"url":4171},{"type":1907,"url":5803},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1904,"url":2150},{"type":1907,"url":5806},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1907,"url":5808},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1907,"url":5810},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2162,2163,2164,3575,3576,5441],{"id":247,"slug":5813,"dossier":46,"summary":5814,"aliases":5815,"sourceIds":5818,"published":5819,"modified":5820,"checkedAt":7,"severity":5821,"references":5824,"versionKeys":5837,"packageCount":32,"repositoryCount":106},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[5816,5817],"CVE-2025-43859","PYSEC-2026-348",[247,5817],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[5822],{"type":1892,"score":5823},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5825,5827,5829,5831,5833,5835],{"type":1907,"url":5826},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1896,"url":5828},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1907,"url":5830},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1904,"url":5832},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1904,"url":5834},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1896,"url":5836},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[5838],"pypi:h11@0.14.0",{"id":248,"slug":5840,"dossier":46,"summary":5841,"aliases":5842,"sourceIds":5845,"published":5846,"modified":5847,"checkedAt":7,"severity":5848,"references":5850,"versionKeys":5862,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[5843,5844],"CVE-2025-48944","PYSEC-2026-2023",[248,5844],"2025-05-28T19:42:32Z","2026-07-17T16:30:29.005158547Z",[5849],{"type":1892,"score":2344},[5851,5853,5855,5856,5858,5860,5861],{"type":1907,"url":5852},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":1896,"url":5854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":1907,"url":3185},{"type":1896,"url":5857},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":1907,"url":5859},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":1904,"url":2045},{"type":1904,"url":2041},[2300],{"id":249,"slug":5864,"dossier":46,"summary":5865,"aliases":5866,"sourceIds":5869,"published":5870,"modified":5871,"checkedAt":7,"severity":5872,"references":5876,"versionKeys":5885,"packageCount":32,"repositoryCount":2016},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[5867,5868],"CVE-2026-22815","PYSEC-2026-2094",[249,5868],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[5873,5874],{"type":1996,"score":2920},{"type":1996,"score":5875},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5877,5879,5881,5883,5884],{"type":1901,"url":5878},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1896,"url":5880},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1901,"url":5882},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1904,"url":2004},{"type":1896,"url":2088},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":250,"slug":5887,"dossier":46,"summary":5888,"aliases":5889,"sourceIds":5892,"published":5893,"modified":5894,"checkedAt":7,"severity":5895,"references":5897,"versionKeys":5909,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[5890,5891],"CVE-2025-48887","PYSEC-2025-50",[250,5891],"2025-05-28T17:49:33Z","2026-06-10T17:14:19.371824623Z",[5896],{"type":1892,"score":2344},[5898,5900,5902,5903,5904,5906,5907],{"type":1940,"url":5899},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":1896,"url":5901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":2143,"url":4695},{"type":1901,"url":4697},{"type":1907,"url":5905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":1904,"url":2045},{"type":1896,"url":5908},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[2300],{"id":251,"slug":5911,"dossier":46,"summary":5912,"aliases":5913,"sourceIds":5916,"published":5917,"modified":5918,"checkedAt":7,"severity":5919,"references":5923,"versionKeys":5935,"packageCount":32,"repositoryCount":491},"ghsa-w6vg-jg77-2qg6-e819e20a","MLX has heap-buffer-overflow in load()",[5914,5915],"CVE-2025-62608","PYSEC-2025-138",[251,5915],"2025-11-21T18:02:38Z","2026-06-06T00:45:48.146084644Z",[5920,5922],{"type":1996,"score":5921},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1892,"score":3705},[5924,5926,5928,5930,5932,5933],{"type":1940,"url":5925},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fsecurity\u002Fadvisories\u002FGHSA-w6vg-jg77-2qg6",{"type":1896,"url":5927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62608",{"type":1901,"url":5929},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F1",{"type":1901,"url":5931},"https:\u002F\u002Fgithub.com\u002Fml-explore\u002Fmlx\u002Fpull\u002F2",{"type":1904,"url":4718},{"type":1907,"url":5934},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmlx\u002FPYSEC-2025-138.yaml",[4722,4723],{"id":252,"slug":5937,"dossier":46,"summary":5938,"aliases":5939,"sourceIds":5942,"published":5943,"modified":5944,"checkedAt":7,"severity":5945,"references":5948,"versionKeys":5965,"packageCount":32,"repositoryCount":2861},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[5940,5941],"CVE-2025-68146","PYSEC-2026-1375",[252,5941],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[5946],{"type":1892,"score":5947},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5949,5951,5953,5954,5956,5958,5960,5961,5963],{"type":1907,"url":5950},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1907,"url":5952},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1904,"url":5505},{"type":1907,"url":5955},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1907,"url":5957},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1907,"url":5959},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1904,"url":5507},{"type":1896,"url":5962},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1896,"url":5964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[5511,5512,5513,5514],{"id":253,"slug":5967,"dossier":46,"summary":5968,"aliases":5969,"sourceIds":5972,"published":5973,"modified":5974,"checkedAt":7,"severity":5975,"references":5978,"versionKeys":5989,"packageCount":32,"repositoryCount":445},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[5970,5971],"CVE-2025-69872","PYSEC-2026-2447",[253,5971],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[5976],{"type":1996,"score":5977},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5979,5981,5983,5985,5987],{"type":1896,"url":5980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":1907,"url":5982},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":1904,"url":5984},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":1904,"url":5986},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":1896,"url":5988},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[5990],"pypi:diskcache@5.6.3",{"id":254,"slug":5992,"dossier":46,"summary":5993,"aliases":5994,"sourceIds":5997,"published":5998,"modified":5999,"checkedAt":7,"severity":6000,"references":6003,"versionKeys":6015,"packageCount":32,"repositoryCount":491},"ghsa-wcj4-jw5j-44wh-9e6393c7","CBORDecoder reuse can leak shareable values across decode calls",[5995,5996],"CVE-2025-68131","PYSEC-2025-90",[254,5996],"2025-12-31T02:15:42.527Z","2026-06-05T14:30:11.179250820Z",[6001,6002],{"type":1996,"score":5921},{"type":1892,"score":2754},[6004,6006,6008,6010,6012,6013],{"type":1940,"url":6005},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fsecurity\u002Fadvisories\u002FGHSA-wcj4-jw5j-44wh",{"type":1896,"url":6007},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68131",{"type":1901,"url":6009},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F268",{"type":1907,"url":6011},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002Ff1d701cd2c411ee40bb1fe383afe7f365f35abf0",{"type":1904,"url":2266},{"type":1907,"url":6014},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcbor2\u002FPYSEC-2025-90.yaml",[2270,2271],{"id":255,"slug":6017,"dossier":91,"summary":6018,"aliases":6019,"sourceIds":6023,"published":6024,"modified":6025,"checkedAt":7,"severity":6026,"references":6029,"versionKeys":6067,"packageCount":32,"repositoryCount":2121},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[6020,6021,6022],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[255,6022],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[6027,6028],{"type":1892,"score":1999},{"type":1996,"score":2674},[6030,6032,6034,6036,6038,6039,6041,6043,6045,6047,6049,6051,6052,6054,6056,6058,6059,6061,6063,6065],{"type":1907,"url":6031},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1896,"url":6033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1907,"url":6035},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1907,"url":6037},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1904,"url":2852},{"type":1907,"url":6040},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1907,"url":6042},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1907,"url":6044},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1896,"url":6046},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1896,"url":6048},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1896,"url":6050},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1896,"url":4068},{"type":1896,"url":6053},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1896,"url":6055},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1896,"url":6057},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1896,"url":3333},{"type":1896,"url":6060},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1896,"url":6062},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1896,"url":6064},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1896,"url":6066},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":256,"slug":6069,"dossier":91,"summary":6070,"aliases":6071,"sourceIds":6075,"published":6076,"modified":6077,"checkedAt":7,"severity":6078,"references":6081,"versionKeys":6090,"packageCount":32,"repositoryCount":2121},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[6072,6073,6074],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[256,6074],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[6079,6080],{"type":1892,"score":2138},{"type":1996,"score":2845},[6082,6084,6086,6088,6089],{"type":1896,"url":6083},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1896,"url":6085},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1907,"url":6087},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1904,"url":2852},{"type":1896,"url":2854},[4081,4082,4083,2856,2857,2858,2859,2860],{"id":257,"slug":6092,"dossier":46,"summary":6093,"aliases":6094,"sourceIds":6097,"published":6098,"modified":6099,"checkedAt":7,"severity":6100,"references":6103,"versionKeys":6116,"packageCount":32,"repositoryCount":2831},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[6095,6096],"CVE-2026-24486","PYSEC-2026-1852",[257,6096],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[6101],{"type":1892,"score":6102},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[6104,6106,6108,6110,6111,6113,6114],{"type":1907,"url":6105},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":1896,"url":6107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":1907,"url":6109},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":1904,"url":2683},{"type":1907,"url":6112},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":1904,"url":2685},{"type":1896,"url":6115},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[2829,2830,2689],{"id":258,"slug":6118,"dossier":46,"summary":6119,"aliases":6120,"sourceIds":6123,"published":6124,"modified":6125,"checkedAt":7,"severity":6126,"references":6128,"versionKeys":6148,"packageCount":32,"repositoryCount":104},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[6121,6122],"CVE-2026-48818","PYSEC-2026-2281",[258,6122],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[6127],{"type":1892,"score":2754},[6129,6131,6132,6134,6136,6138,6139,6140,6142,6144,6146],{"type":1896,"url":6130},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":1904,"url":3357},{"type":1907,"url":6133},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":1907,"url":6135},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":1896,"url":6137},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":1896,"url":3714},{"type":1896,"url":3716},{"type":1896,"url":6141},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2143,"url":6143},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":1901,"url":6145},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":1901,"url":6147},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[1982,1983,1984,3364,3365,3486,3487],{"id":259,"slug":6150,"dossier":46,"summary":6151,"aliases":6152,"sourceIds":6155,"published":6156,"modified":6157,"checkedAt":7,"severity":6158,"references":6160,"versionKeys":6177,"packageCount":32,"repositoryCount":491},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[6153,6154],"CVE-2025-59425","PYSEC-2026-2026",[259,6154],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[6159],{"type":1892,"score":2754},[6161,6163,6165,6167,6169,6171,6172,6174,6176],{"type":1907,"url":6162},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":1896,"url":6164},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":1907,"url":6166},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":1896,"url":6168},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":1907,"url":6170},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":1904,"url":2045},{"type":1907,"url":6173},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":1907,"url":6175},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":1904,"url":2041},[2063,2300],{"id":260,"slug":6179,"dossier":46,"summary":4652,"aliases":6180,"sourceIds":6183,"published":4657,"modified":6184,"checkedAt":7,"severity":6185,"references":6188,"versionKeys":6202,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[6181,6182],"CVE-2024-11393","PYSEC-2024-228",[260,6182],"2026-06-10T17:00:13.252500033Z",[6186,6187],{"type":1892,"score":4661},{"type":1892,"score":2028},[6189,6191,6192,6193,6194,6196,6198,6200],{"type":1896,"url":6190},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1907,"url":4667},{"type":1907,"url":4669},{"type":1904,"url":1938},{"type":1907,"url":6195},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1907,"url":6197},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1896,"url":6199},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1896,"url":6201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1945],{"id":261,"slug":6204,"dossier":46,"summary":6205,"aliases":6206,"sourceIds":6209,"published":6210,"modified":6211,"checkedAt":7,"severity":6212,"references":6219,"versionKeys":6238,"packageCount":32,"repositoryCount":106},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[6207,6208],"CVE-2026-7141","PYSEC-2026-2306",[261,6208],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[6213,6215,6217],{"type":1892,"score":6214},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1996,"score":6216},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1996,"score":6218},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6220,6222,6224,6226,6228,6230,6232,6234,6236],{"type":1896,"url":6221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":2143,"url":6223},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":2143,"url":6225},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":1901,"url":6227},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":1901,"url":6229},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":1896,"url":6231},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":1896,"url":6233},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":2143,"url":6235},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":1896,"url":6237},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[2063,2064,2300],{"id":262,"slug":6240,"dossier":46,"summary":6241,"aliases":6242,"sourceIds":6246,"published":6247,"modified":6248,"checkedAt":7,"severity":6249,"references":6254,"versionKeys":6270,"packageCount":32,"repositoryCount":491},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[6243,6244,6245],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[262],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[6250,6252],{"type":1892,"score":6251},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1996,"score":6253},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6255,6257,6259,6261,6263,6264,6266,6268],{"type":1896,"url":6256},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1907,"url":6258},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1907,"url":6260},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1907,"url":6262},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1904,"url":2150},{"type":1907,"url":6265},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1907,"url":6267},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1907,"url":6269},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2162,2163],{"id":263,"slug":6272,"dossier":46,"summary":6273,"aliases":6274,"sourceIds":6277,"published":6278,"modified":6279,"checkedAt":7,"severity":6280,"references":6282,"versionKeys":6289,"packageCount":32,"repositoryCount":104},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[6275,6276],"CVE-2026-48817","PYSEC-2026-2280",[263,6276],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[6281],{"type":1892,"score":2078},[6283,6285,6287,6288],{"type":1896,"url":6284},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":1896,"url":6286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":1904,"url":3357},{"type":1896,"url":6141},[1982,1983,1984,3364,3365,3486,3487],{"id":264,"slug":6291,"dossier":46,"summary":6292,"aliases":6293,"sourceIds":6296,"published":6297,"modified":6298,"checkedAt":7,"severity":6299,"references":6302,"versionKeys":6308,"packageCount":32,"repositoryCount":2016},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[6294,6295],"CVE-2026-54274","PYSEC-2026-2108",[264,6295],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[6300,6301],{"type":1996,"score":2455},{"type":1892,"score":1999},[6303,6305,6306],{"type":1896,"url":6304},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1904,"url":2004},{"type":1901,"url":6307},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":265,"slug":6310,"dossier":46,"summary":6311,"aliases":6312,"sourceIds":6316,"published":6317,"modified":6318,"checkedAt":7,"severity":6319,"references":6322,"versionKeys":6336,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[6313,6314,6315],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[265,6315],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[6320],{"type":1892,"score":6321},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6323,6325,6327,6329,6331,6333,6334],{"type":1896,"url":6324},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1896,"url":6326},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1907,"url":6328},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1901,"url":6330},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1907,"url":6332},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1904,"url":2852},{"type":1907,"url":6335},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2856],{"id":266,"slug":6338,"dossier":46,"summary":314,"aliases":6339,"sourceIds":6342,"published":6343,"modified":6344,"checkedAt":7,"severity":6345,"references":6347,"versionKeys":6356,"packageCount":32,"repositoryCount":491},"pysec-2025-198-62b25ed4",[6340,6341],"BIT-pytorch-2025-46148","CVE-2025-46148",[266],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[6346],{"type":1892,"score":3766},[6348,6350,6352,6354],{"type":1896,"url":6349},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1896,"url":6351},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2143,"url":6353},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1901,"url":6355},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2162,2163],{"id":267,"slug":6358,"dossier":46,"summary":314,"aliases":6359,"sourceIds":6362,"published":6363,"modified":6364,"checkedAt":7,"severity":6365,"references":6367,"versionKeys":6373,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[6360,6361],"BIT-pytorch-2025-46149","CVE-2025-46149",[267],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[6366],{"type":1892,"score":3766},[6368,6369,6371],{"type":1896,"url":6349},{"type":2143,"url":6370},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1901,"url":6372},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2163],{"id":268,"slug":6375,"dossier":46,"summary":314,"aliases":6376,"sourceIds":6379,"published":6380,"modified":6381,"checkedAt":7,"severity":6382,"references":6384,"versionKeys":6392,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[6377,6378],"BIT-pytorch-2025-46150","CVE-2025-46150",[268],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[6383],{"type":1892,"score":3766},[6385,6386,6388,6390],{"type":1896,"url":6349},{"type":2143,"url":6387},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2143,"url":6389},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1901,"url":6391},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2163],{"id":269,"slug":6394,"dossier":46,"summary":314,"aliases":6395,"sourceIds":6398,"published":6399,"modified":6400,"checkedAt":7,"severity":6401,"references":6403,"versionKeys":6409,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[6396,6397],"BIT-pytorch-2025-46152","CVE-2025-46152",[269],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[6402],{"type":1892,"score":1963},[6404,6405,6407],{"type":1896,"url":6349},{"type":2143,"url":6406},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1901,"url":6408},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2163],{"id":270,"slug":6411,"dossier":46,"summary":314,"aliases":6412,"sourceIds":6415,"published":6416,"modified":6417,"checkedAt":7,"severity":6418,"references":6420,"versionKeys":6430,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[6413,6414],"BIT-pytorch-2025-46153","CVE-2025-46153",[270],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[6419],{"type":1892,"score":3766},[6421,6423,6424,6426,6428],{"type":1907,"url":6422},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1896,"url":6349},{"type":1896,"url":6425},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2143,"url":6427},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1901,"url":6429},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2163],{"id":271,"slug":6432,"dossier":46,"summary":314,"aliases":6433,"sourceIds":6436,"published":6437,"modified":6438,"checkedAt":7,"severity":6439,"references":6441,"versionKeys":6446,"packageCount":32,"repositoryCount":104},"pysec-2025-203-2febb201",[6434,6435],"BIT-pytorch-2025-55551","CVE-2025-55551",[271],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[6440],{"type":1892,"score":1999},[6442,6444],{"type":1896,"url":6443},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2143,"url":6445},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2162,2163,2164,3575,3576,5441],{"id":272,"slug":6448,"dossier":46,"summary":314,"aliases":6449,"sourceIds":6452,"published":6453,"modified":6454,"checkedAt":7,"severity":6455,"references":6457,"versionKeys":6461,"packageCount":32,"repositoryCount":104},"pysec-2025-204-cdae47da",[6450,6451],"BIT-pytorch-2025-55552","CVE-2025-55552",[272],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[6456],{"type":1892,"score":1999},[6458,6459],{"type":1896,"url":6443},{"type":2143,"url":6460},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2162,2163,2164,3575,3576,5441],{"id":273,"slug":6463,"dossier":46,"summary":314,"aliases":6464,"sourceIds":6467,"published":6468,"modified":6469,"checkedAt":7,"severity":6470,"references":6472,"versionKeys":6478,"packageCount":32,"repositoryCount":106},"pysec-2025-205-fd5e58fd",[6465,6466],"BIT-pytorch-2025-55553","CVE-2025-55553",[273],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[6471],{"type":1892,"score":1999},[6473,6474,6476],{"type":1896,"url":6443},{"type":2143,"url":6475},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1901,"url":6477},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2162,2163,2164],{"id":274,"slug":6480,"dossier":46,"summary":314,"aliases":6481,"sourceIds":6484,"published":6485,"modified":6486,"checkedAt":7,"severity":6487,"references":6489,"versionKeys":6493,"packageCount":32,"repositoryCount":104},"pysec-2025-206-58322476",[6482,6483],"BIT-pytorch-2025-55554","CVE-2025-55554",[274],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[6488],{"type":1892,"score":1963},[6490,6491],{"type":1896,"url":6443},{"type":2143,"url":6492},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2162,2163,2164,3575,3576,5441],{"id":275,"slug":6495,"dossier":46,"summary":314,"aliases":6496,"sourceIds":6499,"published":6500,"modified":6501,"checkedAt":7,"severity":6502,"references":6504,"versionKeys":6510,"packageCount":32,"repositoryCount":106},"pysec-2025-207-2abef3fc",[6497,6498],"BIT-pytorch-2025-55557","CVE-2025-55557",[275],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[6503],{"type":1892,"score":1999},[6505,6506,6508],{"type":1896,"url":6443},{"type":2143,"url":6507},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1901,"url":6509},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2162,2163,2164],{"id":276,"slug":6512,"dossier":46,"summary":314,"aliases":6513,"sourceIds":6516,"published":6517,"modified":6518,"checkedAt":7,"severity":6519,"references":6521,"versionKeys":6527,"packageCount":32,"repositoryCount":106},"pysec-2025-208-6e93fe9d",[6514,6515],"BIT-pytorch-2025-55558","CVE-2025-55558",[276],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[6520],{"type":1892,"score":1999},[6522,6523,6525],{"type":1896,"url":6443},{"type":2143,"url":6524},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1901,"url":6526},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2162,2163,2164],{"id":277,"slug":6529,"dossier":46,"summary":314,"aliases":6530,"sourceIds":6533,"published":6534,"modified":6535,"checkedAt":7,"severity":6536,"references":6538,"versionKeys":6544,"packageCount":32,"repositoryCount":106},"pysec-2025-209-e6f352b0",[6531,6532],"BIT-pytorch-2025-55560","CVE-2025-55560",[277],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[6537],{"type":1892,"score":1999},[6539,6540,6542],{"type":1896,"url":6443},{"type":2143,"url":6541},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1901,"url":6543},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2162,2163,2164],{"id":278,"slug":6546,"dossier":46,"summary":314,"aliases":6547,"sourceIds":6549,"published":6550,"modified":6551,"checkedAt":7,"severity":6552,"references":6554,"versionKeys":6557,"packageCount":32,"repositoryCount":106},"pysec-2025-211-d8bd15de",[6548],"CVE-2025-14920",[278],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[6553],{"type":1892,"score":1931},[6555],{"type":1896,"url":6556},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1945,1946,1947],{"id":279,"slug":6559,"dossier":46,"summary":314,"aliases":6560,"sourceIds":6562,"published":6563,"modified":6564,"checkedAt":7,"severity":6565,"references":6567,"versionKeys":6570,"packageCount":32,"repositoryCount":106},"pysec-2025-212-a011b97d",[6561],"CVE-2025-14921",[279],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[6566],{"type":1892,"score":1931},[6568],{"type":1896,"url":6569},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1945,1946,1947],{"id":280,"slug":6572,"dossier":46,"summary":314,"aliases":6573,"sourceIds":6575,"published":6576,"modified":6577,"checkedAt":7,"severity":6578,"references":6580,"versionKeys":6583,"packageCount":32,"repositoryCount":106},"pysec-2025-213-9043dc9b",[6574],"CVE-2025-14924",[280],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[6579],{"type":1892,"score":1931},[6581],{"type":1896,"url":6582},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1945,1946,1947],{"id":281,"slug":6585,"dossier":46,"summary":314,"aliases":6586,"sourceIds":6588,"published":6589,"modified":6590,"checkedAt":7,"severity":6591,"references":6593,"versionKeys":6596,"packageCount":32,"repositoryCount":106},"pysec-2025-214-eb241255",[6587],"CVE-2025-14926",[281],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[6592],{"type":1892,"score":1931},[6594],{"type":1896,"url":6595},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1945,1946,1947],{"id":282,"slug":6598,"dossier":46,"summary":314,"aliases":6599,"sourceIds":6601,"published":6602,"modified":6603,"checkedAt":7,"severity":6604,"references":6606,"versionKeys":6609,"packageCount":32,"repositoryCount":106},"pysec-2025-215-6064f491",[6600],"CVE-2025-14927",[282],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[6605],{"type":1892,"score":1931},[6607],{"type":1896,"url":6608},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1945,1946,1947],{"id":283,"slug":6611,"dossier":46,"summary":314,"aliases":6612,"sourceIds":6614,"published":6615,"modified":6616,"checkedAt":7,"severity":6617,"references":6619,"versionKeys":6622,"packageCount":32,"repositoryCount":106},"pysec-2025-216-5708ed01",[6613],"CVE-2025-14928",[283],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[6618],{"type":1892,"score":1931},[6620],{"type":1896,"url":6621},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1945,1946,1947],{"id":284,"slug":6624,"dossier":46,"summary":314,"aliases":6625,"sourceIds":6627,"published":6628,"modified":6629,"checkedAt":7,"severity":6630,"references":6632,"versionKeys":6635,"packageCount":32,"repositoryCount":104},"pysec-2025-217-2c1ad388",[6626],"CVE-2025-14929",[284],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[6631],{"type":1892,"score":1931},[6633],{"type":1896,"url":6634},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1945,1946,1947,1948,1949,1950,1951],{"id":285,"slug":6637,"dossier":46,"summary":314,"aliases":6638,"sourceIds":6640,"published":6641,"modified":6642,"checkedAt":7,"severity":6643,"references":6645,"versionKeys":6648,"packageCount":32,"repositoryCount":2831},"pysec-2025-218-39811fc3",[6639],"CVE-2025-14930",[285],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[6644],{"type":1892,"score":1931},[6646],{"type":1896,"url":6647},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1945,1946,1947,1948],{"id":286,"slug":6650,"dossier":46,"summary":314,"aliases":6651,"sourceIds":6653,"published":6654,"modified":6655,"checkedAt":7,"severity":6656,"references":6658,"versionKeys":6665,"packageCount":32,"repositoryCount":32},"pysec-2025-238-fe0347f8",[6652],"CVE-2025-64076",[286],"2025-11-18T18:16:14.263Z","2026-07-13T07:15:16.765464311Z",[6657],{"type":1892,"score":1999},[6659,6661,6663],{"type":2143,"url":6660},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fissues\u002F264",{"type":1901,"url":6662},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fcommit\u002F851473490281f82d82560b2368284ef33cf6e8f9",{"type":1901,"url":6664},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fcbor2\u002Fpull\u002F265",[2270],{"id":287,"slug":6667,"dossier":46,"summary":314,"aliases":6668,"sourceIds":6671,"published":6672,"modified":6673,"checkedAt":7,"severity":6674,"references":6676,"versionKeys":6687,"packageCount":32,"repositoryCount":2861},"pysec-2026-139-96951ff6",[6669,6670],"BIT-pytorch-2026-4538","CVE-2026-4538",[287],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[6675],{"type":1892,"score":5312},[6677,6679,6681,6683,6685],{"type":1907,"url":6678},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1896,"url":6680},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1896,"url":6682},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2143,"url":6684},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1901,"url":6686},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[5686,2162,2163,2164,3575,3576,5441,5442,5443],{"id":288,"slug":6689,"dossier":91,"summary":314,"aliases":6690,"sourceIds":6693,"published":6694,"modified":6695,"checkedAt":7,"severity":6696,"references":6699,"versionKeys":6714,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[6691,6692],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[288],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[6697],{"type":1892,"score":6698},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6700,6702,6704,6706,6708,6710,6712],{"type":1907,"url":6701},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1907,"url":6703},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1896,"url":6705},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1896,"url":6707},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2143,"url":6709},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1901,"url":6711},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1940,"url":6713},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[6715,6716,6717,6718,6719,6720],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":289,"slug":6722,"dossier":91,"summary":314,"aliases":6723,"sourceIds":6727,"published":6728,"modified":6729,"checkedAt":7,"severity":6730,"references":6732,"versionKeys":6739,"packageCount":32,"repositoryCount":2121},"pysec-2026-2253-e1ccf3df",[6724,6725,6726],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[289],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[6731],{"type":1892,"score":1999},[6733,6735,6737],{"type":1896,"url":6734},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":1901,"url":6736},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1940,"url":6738},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":290,"slug":6741,"dossier":91,"summary":314,"aliases":6742,"sourceIds":6746,"published":6747,"modified":6748,"checkedAt":7,"severity":6749,"references":6751,"versionKeys":6756,"packageCount":32,"repositoryCount":2121},"pysec-2026-2254-a1ed1fd2",[6743,6744,6745],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[290],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[6750],{"type":1892,"score":1999},[6752,6753,6754],{"type":1896,"url":6734},{"type":1901,"url":6736},{"type":1940,"url":6755},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":291,"slug":6758,"dossier":91,"summary":314,"aliases":6759,"sourceIds":6763,"published":6764,"modified":6765,"checkedAt":7,"severity":6766,"references":6768,"versionKeys":6773,"packageCount":32,"repositoryCount":2121},"pysec-2026-2255-d0951b98",[6760,6761,6762],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[291],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[6767],{"type":1892,"score":1999},[6769,6770,6771],{"type":1896,"url":6734},{"type":1901,"url":6736},{"type":1940,"url":6772},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":292,"slug":6775,"dossier":91,"summary":314,"aliases":6776,"sourceIds":6780,"published":6781,"modified":6782,"checkedAt":7,"severity":6783,"references":6785,"versionKeys":6791,"packageCount":32,"repositoryCount":2121},"pysec-2026-2256-0f333f0b",[6777,6778,6779],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[292],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[6784],{"type":1892,"score":1999},[6786,6787,6789],{"type":1896,"url":6734},{"type":1901,"url":6788},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1940,"url":6790},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":293,"slug":6793,"dossier":91,"summary":314,"aliases":6794,"sourceIds":6798,"published":6799,"modified":6800,"checkedAt":7,"severity":6801,"references":6804,"versionKeys":6814,"packageCount":32,"repositoryCount":2121},"pysec-2026-2257-bcbe5d79",[6795,6796,6797],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[293],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[6802],{"type":1892,"score":6803},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[6805,6806,6808,6810,6812],{"type":1896,"url":6734},{"type":1901,"url":6807},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1901,"url":6809},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1901,"url":6811},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1940,"url":6813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":294,"slug":6816,"dossier":46,"summary":314,"aliases":6817,"sourceIds":6820,"published":6821,"modified":6822,"checkedAt":7,"severity":6823,"references":6825,"versionKeys":6828,"packageCount":32,"repositoryCount":106},"pysec-2026-227-5f5a1d28",[6818,6819],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[294],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[6824],{"type":1892,"score":2028},[6826],{"type":1940,"url":6827},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[2063,2064,2300],{"id":295,"slug":6830,"dossier":46,"summary":314,"aliases":6831,"sourceIds":6834,"published":6835,"modified":6836,"checkedAt":7,"severity":6837,"references":6840,"versionKeys":6851,"packageCount":32,"repositoryCount":106},"pysec-2026-2273-c0c1a62e",[6832,6833],"CVE-2026-57516","GHSA-hhrp-gw25-jr43",[295],"2026-07-01T17:16:37.390Z","2026-07-13T07:15:44.097966037Z",[6838],{"type":1996,"score":6839},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6841,6843,6845,6847,6849],{"type":1896,"url":6842},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.56.0",{"type":1896,"url":6844},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fray-unsafe-deserialization-rce-via-webdataset-reader",{"type":1901,"url":6846},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63469",{"type":1901,"url":6848},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63470",{"type":1901,"url":6850},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-hhrp-gw25-jr43",[3283,3284,4501],{"id":296,"slug":6853,"dossier":46,"summary":314,"aliases":6854,"sourceIds":6859,"published":6860,"modified":6861,"checkedAt":7,"severity":6862,"references":6864,"versionKeys":6880,"packageCount":32,"repositoryCount":2016},"pysec-2026-2286-8795b007",[6855,6856,6857,6858],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[296],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[6863],{"type":1892,"score":2028},[6865,6867,6869,6870,6872,6874,6876,6878],{"type":1907,"url":6866},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1907,"url":6868},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1896,"url":3323},{"type":1896,"url":6871},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1896,"url":6873},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2143,"url":6875},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2143,"url":6877},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1901,"url":6879},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2162,2163,2164,3575,3576,5441,5442,5443],{"id":297,"slug":6882,"dossier":46,"summary":314,"aliases":6883,"sourceIds":6885,"published":6886,"modified":6887,"checkedAt":7,"severity":6888,"references":6890,"versionKeys":6900,"packageCount":32,"repositoryCount":106},"pysec-2026-2302-60c0b148",[6884],"CVE-2026-5497",[297],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[6889],{"type":1892,"score":1999},[6891,6893,6895,6897,6898],{"type":1907,"url":6892},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":1907,"url":6894},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":2143,"url":6896},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":1901,"url":5182},{"type":1940,"url":6899},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[2063,2064,2300],{"id":298,"slug":6902,"dossier":91,"summary":314,"aliases":6903,"sourceIds":6907,"published":6908,"modified":6909,"checkedAt":7,"severity":6910,"references":6913,"versionKeys":6920,"packageCount":32,"repositoryCount":2121},"pysec-2026-3447-df031425",[6904,6905,6906],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[298],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[6911],{"type":1892,"score":6912},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[6914,6916,6918],{"type":1896,"url":6915},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":1901,"url":6917},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1940,"url":6919},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[2806,2807,6921,6922,6923,6924,6925,6926,6927],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":299,"slug":6929,"dossier":91,"summary":314,"aliases":6930,"sourceIds":6934,"published":6935,"modified":6936,"checkedAt":7,"severity":6937,"references":6939,"versionKeys":6948,"packageCount":32,"repositoryCount":2121},"pysec-2026-3451-3e5eac34",[6931,6932,6933],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[299],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[6938],{"type":1892,"score":1999},[6940,6942,6944,6946],{"type":1896,"url":6941},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1901,"url":6943},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1901,"url":6945},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1940,"url":6947},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[4081,4082,4083,2856,2857,2858,2859,2860],{"id":300,"slug":6950,"dossier":46,"summary":314,"aliases":6951,"sourceIds":6955,"published":6956,"modified":6957,"checkedAt":7,"severity":6958,"references":6960,"versionKeys":6968,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[6952,6953,6954],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[300],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[6959],{"type":1892,"score":1999},[6961,6962,6964,6966],{"type":1896,"url":6941},{"type":1901,"url":6963},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1901,"url":6965},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1940,"url":6967},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[2858,2859,2860],{"id":301,"slug":6970,"dossier":91,"summary":314,"aliases":6971,"sourceIds":6975,"published":6976,"modified":6977,"checkedAt":7,"severity":6978,"references":6980,"versionKeys":6988,"packageCount":32,"repositoryCount":2121},"pysec-2026-3453-83974725",[6972,6973,6974],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[301],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[6979],{"type":1892,"score":1999},[6981,6982,6984,6986],{"type":1896,"url":6941},{"type":1901,"url":6983},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1901,"url":6985},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1940,"url":6987},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[4081,4082,4083,2856,2857,2858,2859,2860],1784548466074]