[{"data":1,"prerenderedAt":2016},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7788":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":150,"related":153},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":41,"unknownLicensePackageCount":38,"advisoryIds":105,"advisoryCount":148,"providers":149},"opencode:7788","opencode-7788",7788,"Workshop Green LLM Usage","uba-ki-lab\u002Fworkshop-green-llm-usage","Green AI Workshop zu Energiemessung von LLM-Nutzung; Keywords: uba, umweltbundesamt, ki-lab, LLM, Energiemessung","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage","d72ec94b58729e8b5e32caa9484867ec13add189","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fcommit\u002Fd72ec94b58729e8b5e32caa9484867ec13add189","2025-11-10T11:11:40.478Z","2025-11-10T11:11:34.000Z",{"complete":91,"entryCount":92,"truncated":46},true,8,[94],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","bf2ad06a6324960d4a6a7a91340009e907848d0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fblob\u002Fd72ec94b58729e8b5e32caa9484867ec13add189\u002Fuv.lock","61957e618f66a37d9e215e1c3f28156669993991782385cff9bcc34a70d841ce",156416,"parsed",78,[103],"pypi",2,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147],"GHSA-248v-346w-9cwc","GHSA-2c2j-9gv5-cj73","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-38jv-5279-wg99","GHSA-3x9g-8vmp-wqvf","GHSA-48p4-8xcf-vxj5","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-65pc-fj4g-8rjx","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-cx3h-4qpv-8hc9","GHSA-f96h-pmfr-66vw","GHSA-fjrm-76x2-c4q4","GHSA-g7vv-2v7x-gj9p","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-h4gh-qq45-vh27","GHSA-jp82-jpqv-5vv3","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-p423-j2cm-9vmq","GHSA-pq67-6m6q-mj2v","GHSA-pw6j-qg29-8w7f","GHSA-qccp-gfcp-xxvc","GHSA-qjxf-f2mg-c6mc","GHSA-r6ph-v2qm-q3c2","GHSA-vqfr-h8mv-ghfj","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2025-265","PYSEC-2025-266","PYSEC-2025-267","PYSEC-2026-2132",42,[],{"files":151,"occurrenceCount":101},[152],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":154,"vulnerabilities":871},[155,165,176,186,196,205,216,226,236,246,255,264,273,282,292,302,311,320,329,338,347,356,365,374,383,392,401,410,419,428,437,446,455,464,473,482,491,500,509,518,527,536,545,554,564,573,583,592,601,610,619,629,638,647,656,664,673,682,691,700,709,718,727,736,745,754,763,772,782,791,800,809,817,827,836,844,853,862],{"id":72,"slug":73,"identity":156,"label":74,"aiRelevant":91,"provider":157,"advisoryCount":38,"licenseExpressions":160,"versions":162,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":164},"pypi:openai",{"id":158,"label":159},"openai","OpenAI",[161],"Apache-2.0",[163],"2.7.1",[55],{"id":166,"slug":167,"identity":168,"label":169,"aiRelevant":91,"provider":170,"advisoryCount":38,"licenseExpressions":171,"versions":173,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":175},"package:pypi:codecarbon","codecarbon-ee26b31e","pypi:codecarbon","CodeCarbon",null,[172],"MIT",[174],"3.0.8",[55],{"id":177,"slug":178,"identity":179,"label":180,"aiRelevant":46,"provider":170,"advisoryCount":181,"licenseExpressions":182,"versions":183,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":185},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",10,[161],[184],"6.5.2",[55],{"id":187,"slug":188,"identity":189,"label":190,"aiRelevant":46,"provider":170,"advisoryCount":92,"licenseExpressions":191,"versions":193,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":195},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[192],"BSD-3-Clause",[194],"0.49.3",[55],{"id":197,"slug":198,"identity":199,"label":200,"aiRelevant":46,"provider":170,"advisoryCount":65,"licenseExpressions":201,"versions":202,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":204},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[172],[203],"2.5.0",[55],{"id":206,"slug":207,"identity":208,"label":209,"aiRelevant":46,"provider":170,"advisoryCount":210,"licenseExpressions":211,"versions":213,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":215},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",6,[212],"Apache-2.0 OR BSD-3-Clause",[214],"46.0.3",[55],{"id":217,"slug":218,"identity":219,"label":220,"aiRelevant":46,"provider":170,"advisoryCount":221,"licenseExpressions":222,"versions":223,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":225},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[161],[224],"2.32.5",[55],{"id":227,"slug":228,"identity":229,"label":230,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":231,"versions":233,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":235},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[232],"MPL-2.0",[234],"2025.10.5",[55],{"id":237,"slug":238,"identity":239,"label":240,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":241,"versions":243,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":245},"package:pypi:click","click-ef97f731","pypi:click","click",[192,242],"non-standard",[244],"8.3.0",[55],{"id":247,"slug":248,"identity":249,"label":250,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":251,"versions":252,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":254},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[172],[253],"0.16.0",[55],{"id":256,"slug":257,"identity":258,"label":259,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":260,"versions":261,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":263},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[192,242],[262],"3.11",[55],{"id":265,"slug":266,"identity":267,"label":268,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":269,"versions":270,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":272},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[192,242],[271],"5.9.1",[55],{"id":274,"slug":275,"identity":276,"label":277,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":278,"versions":279,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":281},"package:pypi:jwcrypto","jwcrypto-5c3130dd","pypi:jwcrypto","jwcrypto",[242],[280],"1.5.6",[55],{"id":283,"slug":284,"identity":285,"label":286,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":287,"versions":289,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":291},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[288],"BSD-2-Clause",[290],"2.19.2",[55],{"id":293,"slug":294,"identity":295,"label":296,"aiRelevant":46,"provider":170,"advisoryCount":32,"licenseExpressions":297,"versions":299,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":301},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[298],"MIT AND MPL-2.0",[300],"4.67.1",[55],{"id":303,"slug":304,"identity":305,"label":306,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":307,"versions":308,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":310},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[172],[309],"0.0.3",[55],{"id":312,"slug":313,"identity":314,"label":315,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":316,"versions":317,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":319},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[172],[318],"0.7.0",[55],{"id":321,"slug":322,"identity":323,"label":324,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":325,"versions":326,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":328},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[172],[327],"4.11.0",[55],{"id":330,"slug":331,"identity":332,"label":333,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":334,"versions":335,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":337},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[242],[336],"0.1.4",[55],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":343,"versions":344,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":346},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[242],[345],"1.4.0",[55],{"id":348,"slug":349,"identity":350,"label":351,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":352,"versions":353,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":355},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[161],[354],"3.0.0",[55],{"id":357,"slug":358,"identity":359,"label":360,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":361,"versions":362,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":364},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[172],[363],"2.0.0",[55],{"id":366,"slug":367,"identity":368,"label":369,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":370,"versions":371,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":373},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[172],[372],"3.4.4",[55],{"id":375,"slug":376,"identity":377,"label":378,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":379,"versions":380,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":382},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[242],[381],"0.4.6",[55],{"id":384,"slug":385,"identity":386,"label":387,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":388,"versions":389,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":391},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[242],[390],"0.2.3",[55],{"id":393,"slug":394,"identity":395,"label":396,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":397,"versions":398,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":400},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[172],[399],"1.8.17",[55],{"id":402,"slug":403,"identity":404,"label":405,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":406,"versions":407,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":409},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[288,242],[408],"5.2.1",[55],{"id":411,"slug":412,"identity":413,"label":414,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":415,"versions":416,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":418},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[161],[417],"1.9.0",[55],{"id":420,"slug":421,"identity":422,"label":423,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":424,"versions":425,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":427},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[172],[426],"2.2.1",[55],{"id":429,"slug":430,"identity":431,"label":432,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":433,"versions":434,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":436},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[172],[435],"0.121.1",[55],{"id":438,"slug":439,"identity":440,"label":441,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":442,"versions":443,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":445},"package:pypi:fief-client","fief-client-da5c3c7d","pypi:fief-client","fief-client",[172],[444],"0.20.0",[55],{"id":447,"slug":448,"identity":449,"label":450,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":451,"versions":452,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":454},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[192],[453],"1.0.9",[55],{"id":456,"slug":457,"identity":458,"label":459,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":460,"versions":461,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":463},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[192],[462],"0.27.2",[55],{"id":465,"slug":466,"identity":467,"label":468,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":469,"versions":470,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":472},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[192,242],[471],"7.1.0",[55],{"id":474,"slug":475,"identity":476,"label":477,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":478,"versions":479,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":481},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[192],[480],"9.7.0",[55],{"id":483,"slug":484,"identity":485,"label":486,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":487,"versions":488,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":490},"package:pypi:ipython-pygments-lexers","ipython-pygments-lexers-6216051e","pypi:ipython-pygments-lexers","ipython-pygments-lexers",[242],[489],"1.1.1",[55],{"id":492,"slug":493,"identity":494,"label":495,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":496,"versions":497,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":499},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[172],[498],"0.19.2",[55],{"id":501,"slug":502,"identity":503,"label":504,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":505,"versions":506,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":508},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[172],[507],"0.12.0",[55],{"id":510,"slug":511,"identity":512,"label":513,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":514,"versions":515,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":517},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[242],[516],"8.6.3",[55],{"id":519,"slug":520,"identity":521,"label":522,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":523,"versions":524,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":526},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[172],[525],"4.0.0",[55],{"id":528,"slug":529,"identity":530,"label":531,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":532,"versions":533,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":535},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[242],[534],"0.2.1",[55],{"id":537,"slug":538,"identity":539,"label":540,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":541,"versions":542,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":544},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[172],[543],"0.1.2",[55],{"id":546,"slug":547,"identity":548,"label":549,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":550,"versions":551,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":553},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[242],[552],"1.6.0",[55],{"id":555,"slug":556,"identity":557,"label":558,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":559,"versions":561,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":563},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[560,242],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[562],"2.3.4",[55],{"id":565,"slug":566,"identity":567,"label":568,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":569,"versions":570,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":572},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[242],[571],"13.580.82",[55],{"id":574,"slug":575,"identity":576,"label":577,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":578,"versions":580,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":582},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[579,242],"Apache-2.0 OR BSD-2-Clause",[581],"25.0",[55],{"id":584,"slug":585,"identity":586,"label":587,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":588,"versions":589,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":591},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[242],[590],"2.3.3",[55],{"id":593,"slug":594,"identity":595,"label":596,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":597,"versions":598,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":600},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[172],[599],"0.8.5",[55],{"id":602,"slug":603,"identity":604,"label":605,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":606,"versions":607,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":609},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[242],[608],"4.9.0",[55],{"id":611,"slug":612,"identity":613,"label":614,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":615,"versions":616,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":618},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[172],[617],"4.5.0",[55],{"id":620,"slug":621,"identity":622,"label":623,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":624,"versions":626,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":628},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[161,625],"Apache-2.0 AND BSD-2-Clause",[627],"0.23.1",[55],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":634,"versions":635,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":637},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[192,242],[636],"3.0.52",[55],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":643,"versions":644,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":646},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[192],[645],"7.1.3",[55],{"id":648,"slug":649,"identity":650,"label":651,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":652,"versions":654,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":655},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[653],"ISC",[318],[55],{"id":657,"slug":658,"identity":659,"label":660,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":661,"versions":662,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":663},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[172],[390],[55],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":669,"versions":670,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":672},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[172],[671],"9.0.0",[55],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":678,"versions":679,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":681},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[192],[680],"2.23",[55],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":687,"versions":688,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":690},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[172],[689],"2.12.4",[55],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":696,"versions":697,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":699},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[172],[698],"2.41.5",[55],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":705,"versions":706,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":708},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[242],[707],"2.9.0.post0",[55],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":714,"versions":715,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":717},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[172],[716],"2025.2",[55],{"id":719,"slug":720,"identity":721,"label":722,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":723,"versions":724,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":726},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[242],[725],"27.1.0",[55],{"id":728,"slug":729,"identity":730,"label":731,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":732,"versions":733,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":735},"package:pypi:questionary","questionary-3aceb11d","pypi:questionary","questionary",[172],[734],"2.1.1",[55],{"id":737,"slug":738,"identity":739,"label":740,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":741,"versions":742,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":744},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[172],[743],"3.14.3",[55],{"id":746,"slug":747,"identity":748,"label":749,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":750,"versions":751,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":753},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[172],[752],"14.2.0",[55],{"id":755,"slug":756,"identity":757,"label":758,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":759,"versions":760,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":762},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[242],[761],"1.5.4",[55],{"id":764,"slug":765,"identity":766,"label":767,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":768,"versions":769,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":771},"package:pypi:six","six-3c3888bd","pypi:six","six",[172],[770],"1.17.0",[55],{"id":773,"slug":774,"identity":775,"label":776,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":777,"versions":779,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":781},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[778],"Apache-2.0 OR MIT",[780],"1.3.1",[55],{"id":783,"slug":784,"identity":785,"label":786,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":787,"versions":788,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":790},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[172],[789],"0.6.3",[55],{"id":792,"slug":793,"identity":794,"label":795,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":796,"versions":797,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":799},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[172],[798],"3.2.0",[55],{"id":801,"slug":802,"identity":803,"label":804,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":805,"versions":806,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":808},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[242],[807],"5.14.3",[55],{"id":810,"slug":811,"identity":812,"label":813,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":814,"versions":815,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":816},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[172],[444],[55],{"id":818,"slug":819,"identity":820,"label":821,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":822,"versions":824,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":826},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[823,242],"PSF-2.0",[825],"4.15.0",[55],{"id":828,"slug":829,"identity":830,"label":831,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":832,"versions":833,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":835},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[172],[834],"0.4.2",[55],{"id":837,"slug":838,"identity":839,"label":840,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":841,"versions":842,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":843},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[161],[716],[55],{"id":845,"slug":846,"identity":847,"label":848,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":849,"versions":850,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":852},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[192],[851],"0.38.0",[55],{"id":854,"slug":855,"identity":856,"label":857,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":858,"versions":859,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":861},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[172],[860],"0.2.14",[55],{"id":863,"slug":864,"identity":865,"label":866,"aiRelevant":46,"provider":170,"advisoryCount":38,"licenseExpressions":867,"versions":868,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":870},"package:pypi:yaspin","yaspin-3abe0201","pypi:yaspin","yaspin",[172],[869],"3.3.0",[55],[872,911,944,977,1004,1031,1060,1086,1126,1149,1175,1205,1233,1258,1290,1308,1359,1393,1423,1447,1473,1500,1533,1561,1584,1599,1621,1643,1665,1686,1708,1732,1747,1768,1794,1849,1876,1912,1931,1950,1967,1983],{"id":106,"slug":873,"dossier":46,"summary":874,"aliases":875,"sourceIds":878,"published":879,"modified":880,"checkedAt":7,"severity":881,"references":885,"versionKeys":909,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[876,877],"CVE-2024-39689","PYSEC-2024-230",[106,877],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[882],{"type":883,"score":884},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[886,889,891,894,897,900,903,905,907],{"type":887,"url":888},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":887,"url":890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":892,"url":893},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":895,"url":896},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":898,"url":899},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":901,"url":902},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":898,"url":904},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":887,"url":906},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":887,"url":908},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[910],"pypi:certifi@2024.6.2",{"id":107,"slug":912,"dossier":46,"summary":913,"aliases":914,"sourceIds":917,"published":918,"modified":919,"checkedAt":7,"severity":920,"references":923,"versionKeys":940,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[915,916],"CVE-2025-54121","PYSEC-2026-1941",[107,916],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[921],{"type":883,"score":922},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[924,926,928,930,932,934,936,938],{"type":898,"url":925},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":887,"url":927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":892,"url":929},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":895,"url":931},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":898,"url":933},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":898,"url":935},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":895,"url":937},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":887,"url":939},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[941,942,943],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":108,"slug":945,"dossier":91,"summary":946,"aliases":947,"sourceIds":950,"published":951,"modified":952,"checkedAt":7,"severity":953,"references":957,"versionKeys":970,"packageCount":32,"repositoryCount":976},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[948,949],"CVE-2025-66471","PYSEC-2026-1994",[108,949],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[954],{"type":955,"score":956},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[958,960,962,964,966,968],{"type":898,"url":959},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":887,"url":961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":892,"url":963},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":895,"url":965},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":895,"url":967},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":887,"url":969},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[971,972,973,974,975],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":109,"slug":978,"dossier":46,"summary":979,"aliases":980,"sourceIds":983,"published":984,"modified":985,"checkedAt":7,"severity":986,"references":989,"versionKeys":1002,"packageCount":32,"repositoryCount":104},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[981,982],"CVE-2025-30167","PYSEC-2026-1477",[109,982],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[987],{"type":883,"score":988},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[990,992,994,996,998,1000],{"type":898,"url":991},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":887,"url":993},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":898,"url":995},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":895,"url":997},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":895,"url":999},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":887,"url":1001},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[1003],"pypi:jupyter-core@5.7.2",{"id":110,"slug":1005,"dossier":91,"summary":1006,"aliases":1007,"sourceIds":1010,"published":1011,"modified":1012,"checkedAt":7,"severity":1013,"references":1017,"versionKeys":1030,"packageCount":32,"repositoryCount":976},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1008,1009],"CVE-2026-21441","PYSEC-2026-1996",[110,1009],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1014,1016],{"type":883,"score":1015},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":955,"score":956},[1018,1020,1022,1024,1025,1027,1028],{"type":898,"url":1019},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":887,"url":1021},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":892,"url":1023},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":895,"url":965},{"type":898,"url":1026},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":895,"url":967},{"type":887,"url":1029},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[971,972,973,974,975],{"id":111,"slug":1032,"dossier":46,"summary":1033,"aliases":1034,"sourceIds":1037,"published":1038,"modified":1039,"checkedAt":7,"severity":1040,"references":1043,"versionKeys":1054,"packageCount":32,"repositoryCount":210},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[1035,1036],"CVE-2026-49853","PYSEC-2026-3387",[111,1036],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[1041],{"type":883,"score":1042},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1044,1046,1048,1050,1052],{"type":898,"url":1045},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":895,"url":1047},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":895,"url":1049},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":887,"url":1051},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":887,"url":1053},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[1055,1056,1057,1058,1059],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":112,"slug":1061,"dossier":46,"summary":1062,"aliases":1063,"sourceIds":1066,"published":1067,"modified":1068,"checkedAt":7,"severity":1069,"references":1072,"versionKeys":1085,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1064,1065],"CVE-2025-50182","PYSEC-2026-1997",[112,1065],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1070],{"type":883,"score":1071},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1073,1075,1077,1079,1080,1082,1083],{"type":898,"url":1074},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":887,"url":1076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":892,"url":1078},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":895,"url":965},{"type":898,"url":1081},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":895,"url":967},{"type":887,"url":1084},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[971,972,973,974],{"id":113,"slug":1087,"dossier":91,"summary":1088,"aliases":1089,"sourceIds":1092,"published":1093,"modified":1094,"checkedAt":7,"severity":1095,"references":1100,"versionKeys":1123,"packageCount":32,"repositoryCount":976},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1090,1091],"CVE-2026-4539","PYSEC-2026-2987",[113,1091],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[1096,1098],{"type":883,"score":1097},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":955,"score":1099},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1101,1103,1105,1107,1109,1111,1113,1115,1117,1119,1121],{"type":887,"url":1102},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":898,"url":1104},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":898,"url":1106},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":898,"url":1108},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":895,"url":1110},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":898,"url":1112},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":898,"url":1114},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":898,"url":1116},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":898,"url":1118},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":895,"url":1120},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":887,"url":1122},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1124,1125],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":114,"slug":1127,"dossier":46,"summary":1128,"aliases":1129,"sourceIds":1130,"published":1131,"modified":1132,"checkedAt":7,"severity":1133,"references":1135,"versionKeys":1142,"packageCount":32,"repositoryCount":65},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[114],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[1134],{"type":883,"score":1015},[1136,1138,1140],{"type":898,"url":1137},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":895,"url":1139},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":898,"url":1141},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[1143,1144,1145,1146,1147,1148],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":115,"slug":1150,"dossier":91,"summary":1151,"aliases":1152,"sourceIds":1155,"published":1156,"modified":1157,"checkedAt":7,"severity":1158,"references":1162,"versionKeys":1171,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1153,1154],"CVE-2026-45409","PYSEC-2026-215",[115,1154],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1159,1160],{"type":883,"score":922},{"type":955,"score":1161},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1163,1165,1167,1169],{"type":887,"url":1164},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":887,"url":1166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":895,"url":1168},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":898,"url":1170},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1172,1173,1174],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":116,"slug":1176,"dossier":46,"summary":1177,"aliases":1178,"sourceIds":1182,"published":1183,"modified":1184,"checkedAt":7,"severity":1185,"references":1192,"versionKeys":1204,"packageCount":32,"repositoryCount":210},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[1179,1180,1181],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[116,1180,1181],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[1186,1188,1190],{"type":883,"score":1187},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":883,"score":1189},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":883,"score":1191},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1193,1195,1197,1198,1200,1202],{"type":887,"url":1194},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":898,"url":1196},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":895,"url":1047},{"type":898,"url":1199},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":887,"url":1201},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":887,"url":1203},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[1055,1056,1057,1058],{"id":117,"slug":1206,"dossier":46,"summary":1128,"aliases":1207,"sourceIds":1210,"published":1211,"modified":1212,"checkedAt":7,"severity":1213,"references":1214,"versionKeys":1232,"packageCount":32,"repositoryCount":221},"ghsa-79v4-65xg-pq4g-b911b371",[1208,1209],"CVE-2024-12797","PYSEC-2026-1284",[117,1209],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[1215,1217,1219,1221,1223,1225,1226,1228,1230],{"type":898,"url":1216},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":887,"url":1218},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":898,"url":1220},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":898,"url":1222},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":898,"url":1224},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":895,"url":1139},{"type":898,"url":1227},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":895,"url":1229},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":887,"url":1231},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[1143,1144,1145],{"id":118,"slug":1234,"dossier":46,"summary":1235,"aliases":1236,"sourceIds":1239,"published":1240,"modified":1241,"checkedAt":7,"severity":1242,"references":1244,"versionKeys":1257,"packageCount":32,"repositoryCount":104},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[1237,1238],"CVE-2025-47287","PYSEC-2026-1974",[118,1238],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[1243],{"type":883,"score":1015},[1245,1247,1249,1251,1252,1254,1255],{"type":898,"url":1246},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":887,"url":1248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":898,"url":1250},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":895,"url":1047},{"type":898,"url":1253},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":895,"url":1049},{"type":887,"url":1256},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[1055],{"id":119,"slug":1259,"dossier":46,"summary":1260,"aliases":1261,"sourceIds":1264,"published":1265,"modified":1266,"checkedAt":7,"severity":1267,"references":1269,"versionKeys":1286,"packageCount":32,"repositoryCount":1289},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[1262,1263],"CVE-2025-62727","PYSEC-2026-1942",[119,1263],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[1268],{"type":883,"score":1015},[1270,1272,1274,1276,1279,1281,1283,1284],{"type":898,"url":1271},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":887,"url":1273},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":892,"url":1275},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":1277,"url":1278},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":895,"url":1280},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":898,"url":1282},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":895,"url":937},{"type":887,"url":1285},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[942,943,1287,1288],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",5,{"id":120,"slug":1291,"dossier":46,"summary":1292,"aliases":1293,"sourceIds":1296,"published":1297,"modified":1298,"checkedAt":7,"severity":1299,"references":1301,"versionKeys":1305,"packageCount":32,"repositoryCount":92},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[1294,1295],"CVE-2026-54283","PYSEC-2026-249",[120,1295],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[1300],{"type":883,"score":1015},[1302,1304],{"type":887,"url":1303},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":895,"url":1280},[941,942,943,1287,1288,1306,1307],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":121,"slug":1309,"dossier":46,"summary":1310,"aliases":1311,"sourceIds":1315,"published":1316,"modified":1317,"checkedAt":7,"severity":1318,"references":1321,"versionKeys":1358,"packageCount":32,"repositoryCount":92},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[1312,1313,1314],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[121,1313],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[1319],{"type":883,"score":1320},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1322,1324,1326,1328,1330,1332,1334,1336,1338,1340,1341,1343,1346,1348,1350,1352,1354,1356],{"type":887,"url":1323},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":887,"url":1325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":892,"url":1327},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":898,"url":1329},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":901,"url":1331},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":898,"url":1333},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":898,"url":1335},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":898,"url":1337},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":898,"url":1339},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":895,"url":1280},{"type":898,"url":1342},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":1344,"url":1345},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":898,"url":1347},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":898,"url":1349},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":898,"url":1351},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":898,"url":1353},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":901,"url":1355},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":887,"url":1357},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[941,942,943,1287,1288,1306,1307],{"id":122,"slug":1360,"dossier":46,"summary":1361,"aliases":1362,"sourceIds":1365,"published":1366,"modified":1367,"checkedAt":7,"severity":1368,"references":1371,"versionKeys":1390,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1363,1364],"CVE-2024-47081","PYSEC-2026-1872",[122,1364],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1369],{"type":883,"score":1370},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1372,1374,1376,1378,1380,1382,1384,1386,1388],{"type":898,"url":1373},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":887,"url":1375},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":898,"url":1377},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":892,"url":1379},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":895,"url":1381},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":898,"url":1383},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":898,"url":1385},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":895,"url":1387},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":887,"url":1389},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1391,1392],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":123,"slug":1394,"dossier":46,"summary":1395,"aliases":1396,"sourceIds":1399,"published":1400,"modified":1401,"checkedAt":7,"severity":1402,"references":1405,"versionKeys":1422,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[1397,1398],"CVE-2024-35195","PYSEC-2026-1873",[123,1398],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[1403],{"type":883,"score":1404},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1406,1408,1410,1412,1414,1415,1417,1419,1420],{"type":898,"url":1407},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":887,"url":1409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":898,"url":1411},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":892,"url":1413},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":895,"url":1381},{"type":898,"url":1416},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":898,"url":1418},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":895,"url":1387},{"type":887,"url":1421},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1391],{"id":124,"slug":1424,"dossier":46,"summary":1425,"aliases":1426,"sourceIds":1429,"published":1430,"modified":1431,"checkedAt":7,"severity":1432,"references":1435,"versionKeys":1446,"packageCount":32,"repositoryCount":210},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[1427,1428],"CVE-2026-49854","PYSEC-2026-3388",[124,1428],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[1433],{"type":883,"score":1434},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1436,1438,1439,1441,1442,1444],{"type":898,"url":1437},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":895,"url":1047},{"type":898,"url":1440},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":895,"url":1049},{"type":887,"url":1443},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":887,"url":1445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[1055,1056,1057,1058,1059],{"id":125,"slug":1448,"dossier":46,"summary":1449,"aliases":1450,"sourceIds":1453,"published":1454,"modified":1455,"checkedAt":7,"severity":1456,"references":1461,"versionKeys":1472,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[1451,1452],"CVE-2024-47874","PYSEC-2026-1943",[125,1452],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[1457,1459],{"type":883,"score":1458},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":955,"score":1460},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1462,1464,1466,1468,1469,1470],{"type":898,"url":1463},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":887,"url":1465},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":892,"url":1467},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":895,"url":931},{"type":895,"url":937},{"type":887,"url":1471},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[941],{"id":126,"slug":1474,"dossier":46,"summary":1475,"aliases":1476,"sourceIds":1479,"published":1480,"modified":1481,"checkedAt":7,"severity":1482,"references":1484,"versionKeys":1498,"packageCount":32,"repositoryCount":221},"ghsa-fjrm-76x2-c4q4-c21dcb99","JWCrypto: JWE ZIP decompression bomb",[1477,1478],"CVE-2026-39373","PYSEC-2026-70",[126,1478],"2026-04-07T20:16:32.133Z","2026-06-06T00:30:08.711138560Z",[1483],{"type":883,"score":922},[1485,1488,1490,1492,1494,1496],{"type":1486,"url":1487},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fsecurity\u002Fadvisories\u002FGHSA-fjrm-76x2-c4q4",{"type":887,"url":1489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39373",{"type":898,"url":1491},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fcommit\u002F25db861d8b29434838669a94a843af03d29ea6ed",{"type":895,"url":1493},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto",{"type":898,"url":1495},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Freleases\u002Ftag\u002Fv1.5.7",{"type":898,"url":1497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjwcrypto\u002FPYSEC-2026-70.yaml",[1499],"pypi:jwcrypto@1.5.6",{"id":127,"slug":1501,"dossier":46,"summary":1502,"aliases":1503,"sourceIds":1506,"published":1507,"modified":1508,"checkedAt":7,"severity":1509,"references":1512,"versionKeys":1531,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[1504,1505],"CVE-2024-34062","PYSEC-2026-1976",[127,1505],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[1510],{"type":883,"score":1511},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1513,1515,1517,1519,1521,1523,1525,1527,1529],{"type":898,"url":1514},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":887,"url":1516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":898,"url":1518},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":895,"url":1520},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":898,"url":1522},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":898,"url":1524},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":898,"url":1526},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":895,"url":1528},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":887,"url":1530},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[1532],"pypi:tqdm@4.66.2",{"id":128,"slug":1534,"dossier":91,"summary":1535,"aliases":1536,"sourceIds":1539,"published":1540,"modified":1541,"checkedAt":7,"severity":1542,"references":1547,"versionKeys":1557,"packageCount":32,"repositoryCount":1560},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[1537,1538],"CVE-2026-25645","PYSEC-2026-2275",[128,1538],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[1543,1545],{"type":883,"score":1544},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":883,"score":1546},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1548,1550,1552,1554,1555],{"type":887,"url":1549},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":887,"url":1551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":892,"url":1553},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":895,"url":1381},{"type":887,"url":1556},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1391,1392,1558,1559],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":129,"slug":1562,"dossier":91,"summary":1563,"aliases":1564,"sourceIds":1567,"published":1568,"modified":1569,"checkedAt":7,"severity":1570,"references":1572,"versionKeys":1583,"packageCount":32,"repositoryCount":976},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[1565,1566],"CVE-2025-66418","PYSEC-2026-1998",[129,1566],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[1571],{"type":955,"score":956},[1573,1575,1577,1579,1580,1581],{"type":898,"url":1574},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":887,"url":1576},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":892,"url":1578},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":895,"url":965},{"type":895,"url":967},{"type":887,"url":1582},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[971,972,973,974,975],{"id":130,"slug":1585,"dossier":46,"summary":1586,"aliases":1587,"sourceIds":1588,"published":1589,"modified":1590,"checkedAt":7,"severity":1591,"references":1592,"versionKeys":1598,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[130],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[1593,1595,1596],{"type":898,"url":1594},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":895,"url":1139},{"type":898,"url":1597},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[1143],{"id":131,"slug":1600,"dossier":46,"summary":1601,"aliases":1602,"sourceIds":1605,"published":1606,"modified":1607,"checkedAt":7,"severity":1608,"references":1612,"versionKeys":1620,"packageCount":32,"repositoryCount":92},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[1603,1604],"CVE-2026-54282","PYSEC-2026-248",[131,1604],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[1609,1611],{"type":883,"score":1610},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":883,"score":1191},[1613,1615,1617,1618],{"type":887,"url":1614},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":887,"url":1616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":895,"url":1280},{"type":898,"url":1619},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[941,942,943,1287,1288,1306,1307],{"id":132,"slug":1622,"dossier":46,"summary":1623,"aliases":1624,"sourceIds":1627,"published":1628,"modified":1629,"checkedAt":7,"severity":1630,"references":1634,"versionKeys":1642,"packageCount":32,"repositoryCount":65},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[1625,1626],"CVE-2026-34073","PYSEC-2026-35",[132,1626],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[1631,1632],{"type":883,"score":1191},{"type":955,"score":1633},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[1635,1637,1639,1640],{"type":887,"url":1636},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":887,"url":1638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":895,"url":1139},{"type":898,"url":1641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[1143,1144,1145,1146,1147,1148],{"id":133,"slug":1644,"dossier":46,"summary":1645,"aliases":1646,"sourceIds":1649,"published":1650,"modified":1651,"checkedAt":7,"severity":1652,"references":1655,"versionKeys":1663,"packageCount":32,"repositoryCount":221},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[1647,1648],"CVE-2026-44432","PYSEC-2026-142",[133,1648],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[1653,1654],{"type":883,"score":1015},{"type":955,"score":956},[1656,1658,1660,1662],{"type":887,"url":1657},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":887,"url":1659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":898,"url":1661},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":895,"url":965},[1664],"pypi:urllib3@2.6.3",{"id":134,"slug":1666,"dossier":46,"summary":1667,"aliases":1668,"sourceIds":1671,"published":1672,"modified":1673,"checkedAt":7,"severity":1674,"references":1676,"versionKeys":1685,"packageCount":32,"repositoryCount":210},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[1669,1670],"CVE-2026-49855","PYSEC-2026-3389",[134,1670],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[1675],{"type":883,"score":1015},[1677,1679,1680,1681,1683],{"type":898,"url":1678},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":895,"url":1047},{"type":895,"url":1049},{"type":887,"url":1682},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":887,"url":1684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[1055,1056,1057,1058,1059],{"id":135,"slug":1687,"dossier":46,"summary":1688,"aliases":1689,"sourceIds":1692,"published":1693,"modified":1694,"checkedAt":7,"severity":1695,"references":1699,"versionKeys":1707,"packageCount":32,"repositoryCount":221},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[1690,1691],"CVE-2026-39892","PYSEC-2026-36",[135,1691],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[1696,1697],{"type":955,"score":1161},{"type":883,"score":1698},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1700,1702,1704,1705],{"type":887,"url":1701},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":887,"url":1703},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":895,"url":1139},{"type":898,"url":1706},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[1147,1148],{"id":136,"slug":1709,"dossier":46,"summary":1710,"aliases":1711,"sourceIds":1714,"published":1715,"modified":1716,"checkedAt":7,"severity":1717,"references":1719,"versionKeys":1731,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[1712,1713],"CVE-2025-50181","PYSEC-2026-1999",[136,1713],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[1718],{"type":883,"score":1071},[1720,1722,1724,1726,1727,1728,1729],{"type":898,"url":1721},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":887,"url":1723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":892,"url":1725},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":895,"url":965},{"type":898,"url":1081},{"type":895,"url":967},{"type":887,"url":1730},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[971,972,973,974],{"id":137,"slug":1733,"dossier":46,"summary":1734,"aliases":1735,"sourceIds":1736,"published":1737,"modified":1738,"checkedAt":7,"severity":1739,"references":1742,"versionKeys":1746,"packageCount":32,"repositoryCount":210},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[137],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[1740],{"type":883,"score":1741},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1743,1745],{"type":898,"url":1744},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":895,"url":1047},[1055,1056,1057,1058,1059],{"id":138,"slug":1748,"dossier":91,"summary":1749,"aliases":1750,"sourceIds":1753,"published":1754,"modified":1755,"checkedAt":7,"severity":1756,"references":1761,"versionKeys":1767,"packageCount":32,"repositoryCount":1560},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[1751,1752],"CVE-2026-44431","PYSEC-2026-141",[138,1752],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[1757,1759],{"type":883,"score":1758},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":955,"score":1760},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1762,1764,1766],{"type":887,"url":1763},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":887,"url":1765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":895,"url":965},[971,972,973,974,975,1664],{"id":139,"slug":1769,"dossier":46,"summary":1770,"aliases":1771,"sourceIds":1774,"published":1775,"modified":1776,"checkedAt":7,"severity":1777,"references":1780,"versionKeys":1793,"packageCount":32,"repositoryCount":210},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[1772,1773],"CVE-2026-31958","PYSEC-2026-140",[139,1773],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[1778,1779],{"type":883,"score":1015},{"type":955,"score":1460},[1781,1783,1785,1787,1789,1790,1791],{"type":887,"url":1782},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":887,"url":1784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":898,"url":1786},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":898,"url":1788},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":895,"url":1047},{"type":898,"url":1199},{"type":898,"url":1792},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[1055,1056,1057,1058],{"id":140,"slug":1795,"dossier":46,"summary":1796,"aliases":1797,"sourceIds":1800,"published":1801,"modified":1802,"checkedAt":7,"severity":1803,"references":1808,"versionKeys":1848,"packageCount":32,"repositoryCount":65},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[1798,1799],"CVE-2026-26007","PYSEC-2026-2141",[140,1799],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[1804,1806],{"type":955,"score":1805},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":883,"score":1807},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1809,1811,1813,1815,1816,1818,1820,1822,1824,1826,1828,1830,1832,1834,1836,1838,1840,1842,1844,1846],{"type":898,"url":1810},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":887,"url":1812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":898,"url":1814},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":895,"url":1139},{"type":898,"url":1817},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":898,"url":1819},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":898,"url":1821},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":887,"url":1823},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":887,"url":1825},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":887,"url":1827},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":887,"url":1829},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":887,"url":1831},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":887,"url":1833},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":887,"url":1835},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":887,"url":1837},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":887,"url":1839},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":887,"url":1841},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":887,"url":1843},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":887,"url":1845},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":887,"url":1847},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1143,1144,1145,1146,1147,1148],{"id":141,"slug":1850,"dossier":46,"summary":1851,"aliases":1852,"sourceIds":1855,"published":1856,"modified":1857,"checkedAt":7,"severity":1858,"references":1861,"versionKeys":1874,"packageCount":32,"repositoryCount":221},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[1853,1854],"CVE-2025-43859","PYSEC-2026-348",[141,1854],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[1859],{"type":883,"score":1860},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[1862,1864,1866,1868,1870,1872],{"type":898,"url":1863},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":887,"url":1865},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":898,"url":1867},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":895,"url":1869},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":895,"url":1871},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":887,"url":1873},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[1875],"pypi:h11@0.14.0",{"id":142,"slug":1877,"dossier":46,"summary":1878,"aliases":1879,"sourceIds":1882,"published":1883,"modified":1884,"checkedAt":7,"severity":1885,"references":1888,"versionKeys":1911,"packageCount":32,"repositoryCount":92},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[1880,1881],"CVE-2026-48818","PYSEC-2026-2281",[142,1881],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[1886],{"type":883,"score":1887},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1889,1891,1892,1894,1896,1898,1900,1902,1904,1907,1909],{"type":887,"url":1890},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":895,"url":1280},{"type":898,"url":1893},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":898,"url":1895},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":887,"url":1897},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":887,"url":1899},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":887,"url":1901},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":887,"url":1903},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":1905,"url":1906},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":892,"url":1908},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":892,"url":1910},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[941,942,943,1287,1288,1306,1307],{"id":143,"slug":1913,"dossier":46,"summary":1914,"aliases":1915,"sourceIds":1918,"published":1919,"modified":1920,"checkedAt":7,"severity":1921,"references":1923,"versionKeys":1930,"packageCount":32,"repositoryCount":92},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[1916,1917],"CVE-2026-48817","PYSEC-2026-2280",[143,1917],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[1922],{"type":883,"score":1191},[1924,1926,1928,1929],{"type":887,"url":1925},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":887,"url":1927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":895,"url":1280},{"type":887,"url":1903},[941,942,943,1287,1288,1306,1307],{"id":144,"slug":1932,"dossier":46,"summary":170,"aliases":1933,"sourceIds":1936,"published":1937,"modified":1938,"checkedAt":7,"severity":1939,"references":1942,"versionKeys":1949,"packageCount":32,"repositoryCount":1289},"pysec-2025-265-33beac08",[1934,1935],"CVE-2025-67724","GHSA-pr2v-jx2c-wg9f",[144],"2025-12-12T06:15:41.213Z","2026-07-13T07:15:44.068555841Z",[1940],{"type":883,"score":1941},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[1943,1945,1947],{"type":887,"url":1944},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",{"type":887,"url":1946},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":892,"url":1948},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",[1055,1056,1057],{"id":145,"slug":1951,"dossier":46,"summary":170,"aliases":1952,"sourceIds":1955,"published":1956,"modified":1957,"checkedAt":7,"severity":1958,"references":1960,"versionKeys":1966,"packageCount":32,"repositoryCount":1289},"pysec-2025-266-c9802ae6",[1953,1954],"CVE-2025-67725","GHSA-c98p-7wgm-6p64",[145],"2025-12-12T06:15:41.380Z","2026-07-13T07:15:44.064352714Z",[1959],{"type":883,"score":1015},[1961,1962,1964],{"type":887,"url":1944},{"type":887,"url":1963},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":892,"url":1965},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",[1055,1056,1057],{"id":146,"slug":1968,"dossier":46,"summary":170,"aliases":1969,"sourceIds":1972,"published":1973,"modified":1974,"checkedAt":7,"severity":1975,"references":1977,"versionKeys":1982,"packageCount":32,"repositoryCount":1289},"pysec-2025-267-ca9685ba",[1970,1971],"CVE-2025-67726","GHSA-jhmp-mqwm-3gq8",[146],"2025-12-12T07:15:44.920Z","2026-07-13T07:15:45.375541292Z",[1976],{"type":883,"score":1015},[1978,1979,1981],{"type":887,"url":1944},{"type":887,"url":1980},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":892,"url":1965},[1055,1056,1057],{"id":147,"slug":1984,"dossier":91,"summary":170,"aliases":1985,"sourceIds":1988,"published":1989,"modified":1990,"checkedAt":7,"severity":1991,"references":1994,"versionKeys":2009,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[1986,1987],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[147],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[1992],{"type":883,"score":1993},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[1995,1997,1999,2001,2003,2005,2007],{"type":898,"url":1996},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":898,"url":1998},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":887,"url":2000},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":887,"url":2002},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1905,"url":2004},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":892,"url":2006},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1486,"url":2008},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[2010,2011,2012,2013,2014,2015],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",1784558561639]