[{"data":1,"prerenderedAt":5264},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7811":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":253,"related":256},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T11:49:05.682Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T11:47:56.369Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":101,"artifactResolvedComponentCount":101,"exactManifestPinCount":38,"packageCount":101,"ecosystems":102,"aiPackageCount":104,"licenseExpressionCount":105,"unknownLicensePackageCount":32,"advisoryIds":106,"advisoryCount":251,"providers":252},"opencode:7811","opencode-7811",7811,"Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation","collecting human feedback of retrieval results; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, Argilla, Semantic Search","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation","f64bf528432908908d92b8263d6933301033bb7f","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fcommit\u002Ff64bf528432908908d92b8263d6933301033bb7f","2025-11-26T09:10:11.202Z","2025-11-17T10:23:51.000Z",{"complete":91,"entryCount":92,"truncated":46},true,19,[94],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","2b93eec49931aff00a2c694c2c913da38d615033ab4eb9432fdb647839db6dc5",408810,"parsed",150,[103],"pypi",12,21,[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-428g-f7cq-pgp5","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4w7r-h757-3r74","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59p9-h35m-wg4g","GHSA-5rjg-fvgr-3xxf","GHSA-5wmx-573v-2qwq","GHSA-5xmw-vc9v-4wf2","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6jhg-hg63-jvvf","GHSA-6mq8-rvhq-8wgg","GHSA-6rvg-6v2m-4j46","GHSA-7gcm-g887-7qv7","GHSA-7p94-766c-hgjp","GHSA-836r-79rf-4m37","GHSA-887c-mr87-cxwp","GHSA-8qvm-5x2c-j2w7","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gphh-9q3h-jgpp","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jr27-m4p2-rc6r","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p4gq-832x-fm9v","GHSA-p998-jp59-783m","GHSA-phhr-52qp-3mj4","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vqfr-h8mv-ghfj","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2132","PYSEC-2026-2253","PYSEC-2026-2254","PYSEC-2026-2255","PYSEC-2026-2256","PYSEC-2026-2257","PYSEC-2026-2286","PYSEC-2026-3447","PYSEC-2026-3451","PYSEC-2026-3452","PYSEC-2026-3453","PYSEC-2026-597","PYSEC-2026-99",144,[],{"files":254,"occurrenceCount":101},[255],{"path":55,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":257,"vulnerabilities":1632},[258,271,283,296,306,318,325,335,344,353,362,371,380,390,402,412,421,430,440,449,460,469,479,488,497,507,516,525,534,543,552,561,572,581,590,599,608,618,627,637,646,655,664,673,682,691,700,709,718,727,736,745,754,763,772,781,789,798,807,816,825,834,843,852,861,872,882,891,899,908,917,926,935,944,952,961,970,979,988,997,1006,1015,1025,1034,1043,1052,1061,1070,1079,1088,1097,1106,1115,1125,1134,1143,1152,1160,1169,1178,1187,1196,1205,1214,1223,1232,1240,1249,1257,1266,1275,1285,1294,1303,1312,1321,1330,1339,1347,1356,1365,1374,1383,1392,1401,1410,1420,1429,1438,1447,1456,1465,1473,1482,1491,1500,1509,1518,1527,1536,1545,1554,1563,1572,1580,1588,1597,1606,1615,1623],{"id":259,"slug":260,"identity":261,"label":262,"aiRelevant":91,"provider":263,"advisoryCount":70,"licenseExpressions":266,"versions":268,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":270},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":264,"label":265},"hugging-face","Hugging Face",[267],"Apache-2.0",[269],"4.57.1",[55],{"id":272,"slug":273,"identity":274,"label":275,"aiRelevant":91,"provider":276,"advisoryCount":277,"licenseExpressions":278,"versions":280,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":282},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[279],"BSD-3-Clause",[281],"2.9.1",[55],{"id":284,"slug":285,"identity":286,"label":287,"aiRelevant":91,"provider":288,"advisoryCount":38,"licenseExpressions":291,"versions":293,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":295},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":289,"label":290},"anthropic","Anthropic",[292],"MIT",[294],"0.46.0",[55],{"id":297,"slug":298,"identity":299,"label":300,"aiRelevant":91,"provider":301,"advisoryCount":38,"licenseExpressions":302,"versions":303,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":305},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":264,"label":265},[267],[304],"4.4.1",[55],{"id":307,"slug":308,"identity":309,"label":310,"aiRelevant":91,"provider":311,"advisoryCount":38,"licenseExpressions":314,"versions":315,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":317},"package:pypi:llama-index-embeddings-openai-like","llama-index-embeddings-openai-like-28b6dcf5","pypi:llama-index-embeddings-openai-like","LlamaIndex · Embeddings OpenAI Like",{"id":312,"label":313},"openai","OpenAI",[292],[316],"0.2.2",[55],{"id":72,"slug":73,"identity":319,"label":74,"aiRelevant":91,"provider":320,"advisoryCount":38,"licenseExpressions":321,"versions":322,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":324},"pypi:openai",{"id":312,"label":313},[267],[323],"1.109.1",[55],{"id":326,"slug":327,"identity":328,"label":329,"aiRelevant":91,"provider":276,"advisoryCount":38,"licenseExpressions":330,"versions":332,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":334},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[331],"non-standard",[333],"0.22.1",[55],{"id":336,"slug":337,"identity":338,"label":339,"aiRelevant":91,"provider":276,"advisoryCount":38,"licenseExpressions":340,"versions":341,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":343},"package:pypi:llama-index-core","llama-index-core-6f097879","pypi:llama-index-core","LlamaIndex · Core",[292],[342],"0.14.8",[55],{"id":345,"slug":346,"identity":347,"label":348,"aiRelevant":91,"provider":276,"advisoryCount":38,"licenseExpressions":349,"versions":350,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":352},"package:pypi:llama-index-vector-stores-milvus","llama-index-vector-stores-milvus-729b70f8","pypi:llama-index-vector-stores-milvus","LlamaIndex · Vector Stores Milvus",[292],[351],"0.9.3",[55],{"id":354,"slug":355,"identity":356,"label":357,"aiRelevant":91,"provider":276,"advisoryCount":38,"licenseExpressions":358,"versions":359,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":361},"package:pypi:pymilvus","pymilvus-b77631af","pypi:pymilvus","Milvus Client",[331],[360],"2.6.3",[55],{"id":363,"slug":364,"identity":365,"label":366,"aiRelevant":91,"provider":276,"advisoryCount":38,"licenseExpressions":367,"versions":368,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":370},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[279,331],[369],"1.7.2",[55],{"id":372,"slug":373,"identity":374,"label":375,"aiRelevant":91,"provider":276,"advisoryCount":38,"licenseExpressions":376,"versions":377,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":379},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[331],[378],"0.12.0",[55],{"id":381,"slug":382,"identity":383,"label":384,"aiRelevant":46,"provider":276,"advisoryCount":30,"licenseExpressions":385,"versions":387,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":389},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",[267,386],"Apache-2.0 AND MIT",[388],"3.13.2",[55],{"id":391,"slug":392,"identity":393,"label":394,"aiRelevant":46,"provider":276,"advisoryCount":395,"licenseExpressions":396,"versions":399,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":401},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",15,[397,398],"HPND","MIT-CMU",[400],"10.4.0",[55],{"id":403,"slug":404,"identity":405,"label":406,"aiRelevant":46,"provider":276,"advisoryCount":407,"licenseExpressions":408,"versions":409,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":411},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",11,[267],[410],"3.9.2",[55],{"id":413,"slug":414,"identity":415,"label":416,"aiRelevant":46,"provider":276,"advisoryCount":65,"licenseExpressions":417,"versions":418,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":420},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[292],[419],"2.5.0",[55],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":46,"provider":276,"advisoryCount":34,"licenseExpressions":426,"versions":427,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":429},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[279,331],[428],"3.1.6",[55],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":46,"provider":276,"advisoryCount":435,"licenseExpressions":436,"versions":437,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":439},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[267],[438],"2.32.5",[55],{"id":441,"slug":442,"identity":443,"label":444,"aiRelevant":46,"provider":276,"advisoryCount":435,"licenseExpressions":445,"versions":446,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":448},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[292],[447],"80.9.0",[55],{"id":450,"slug":451,"identity":452,"label":453,"aiRelevant":46,"provider":276,"advisoryCount":454,"licenseExpressions":455,"versions":457,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":459},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[292,456],"Unlicense",[458],"3.20.0",[55],{"id":461,"slug":462,"identity":463,"label":464,"aiRelevant":46,"provider":276,"advisoryCount":454,"licenseExpressions":465,"versions":466,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":468},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[279],[467],"6.33.1",[55],{"id":470,"slug":471,"identity":472,"label":473,"aiRelevant":46,"provider":276,"advisoryCount":454,"licenseExpressions":474,"versions":476,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":478},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",[475],"BSD-2-Clause",[477],"0.6.1",[55],{"id":480,"slug":481,"identity":482,"label":483,"aiRelevant":46,"provider":276,"advisoryCount":454,"licenseExpressions":484,"versions":485,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":487},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[292],[486],"2.8",[55],{"id":489,"slug":490,"identity":491,"label":492,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":493,"versions":494,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":496},"package:pypi:banks","banks-f10f5e94","pypi:banks","banks",[292],[495],"2.2.0",[55],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":502,"versions":504,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":506},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[503],"MPL-2.0",[505],"2025.11.12",[55],{"id":508,"slug":509,"identity":510,"label":511,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":512,"versions":513,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":515},"package:pypi:click","click-ef97f731","pypi:click","click",[279,331],[514],"8.3.1",[55],{"id":517,"slug":518,"identity":519,"label":520,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":521,"versions":522,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":524},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[292],[523],"0.16.0",[55],{"id":526,"slug":527,"identity":528,"label":529,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":530,"versions":531,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":533},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[279,331],[532],"3.11",[55],{"id":535,"slug":536,"identity":537,"label":538,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":539,"versions":540,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":542},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[279],[541],"6.0.2",[55],{"id":544,"slug":545,"identity":546,"label":547,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":548,"versions":549,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":551},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[279],[550],"3.10",[55],{"id":553,"slug":554,"identity":555,"label":556,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":557,"versions":558,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":560},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[292],[559],"3.26.1",[55],{"id":562,"slug":563,"identity":564,"label":565,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":566,"versions":569,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":571},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[567,568],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[570],"3.11.4",[55],{"id":573,"slug":574,"identity":575,"label":576,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":577,"versions":578,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":580},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[267,331],[579],"22.0.0",[55],{"id":582,"slug":583,"identity":584,"label":585,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":586,"versions":587,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":589},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[292],[588],"2.12.0",[55],{"id":591,"slug":592,"identity":593,"label":594,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":595,"versions":596,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":598},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[475],[597],"2.19.2",[55],{"id":600,"slug":601,"identity":602,"label":603,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":604,"versions":605,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":607},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[279],[606],"1.2.1",[55],{"id":609,"slug":610,"identity":611,"label":612,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":613,"versions":615,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":617},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[614],"MIT AND MPL-2.0",[616],"4.67.1",[55],{"id":619,"slug":620,"identity":621,"label":622,"aiRelevant":46,"provider":276,"advisoryCount":32,"licenseExpressions":623,"versions":624,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":626},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[292],[625],"20.35.4",[55],{"id":628,"slug":629,"identity":630,"label":631,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":632,"versions":634,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":636},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[633],"PSF-2.0",[635],"2.6.1",[55],{"id":638,"slug":639,"identity":640,"label":641,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":642,"versions":643,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":645},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[267],[644],"1.4.0",[55],{"id":647,"slug":648,"identity":649,"label":650,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":651,"versions":652,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":654},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[292],[653],"0.21.0",[55],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":660,"versions":661,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":663},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[292],[662],"0.7.0",[55],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":669,"versions":670,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":672},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[331],[671],"4.9.3",[55],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":678,"versions":679,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":681},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[292],[680],"4.11.0",[55],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":687,"versions":688,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":690},"package:pypi:argilla","argilla-35b6bbbe","pypi:argilla","argilla",[267],[689],"2.8.0",[55],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":696,"versions":697,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":699},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[292],[698],"25.4.0",[55],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":705,"versions":706,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":708},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[292],[707],"4.14.2",[55],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":714,"versions":715,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":717},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[292],[716],"6.2.2",[55],{"id":719,"slug":720,"identity":721,"label":722,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":723,"versions":724,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":726},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[292],[725],"3.4.0",[55],{"id":728,"slug":729,"identity":730,"label":731,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":732,"versions":733,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":735},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[292],[734],"3.4.4",[55],{"id":737,"slug":738,"identity":739,"label":740,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":741,"versions":742,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":744},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[331],[743],"0.4.6",[55],{"id":746,"slug":747,"identity":748,"label":749,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":750,"versions":751,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":753},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[292],[752],"0.6.7",[55],{"id":755,"slug":756,"identity":757,"label":758,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":759,"versions":760,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":762},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[292],[761],"1.3.1",[55],{"id":764,"slug":765,"identity":766,"label":767,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":768,"versions":769,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":771},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[279],[770],"0.4.0",[55],{"id":773,"slug":774,"identity":775,"label":776,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":777,"versions":778,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":780},"package:pypi:dirtyjson","dirtyjson-e423c509","pypi:dirtyjson","dirtyjson",[292],[779],"1.0.8",[55],{"id":782,"slug":783,"identity":784,"label":785,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":786,"versions":787,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":788},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[633],[770],[55],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":794,"versions":795,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":797},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[267],[796],"1.9.0",[55],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":803,"versions":804,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":806},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[292],[805],"0.8.1",[55],{"id":808,"slug":809,"identity":810,"label":811,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":812,"versions":813,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":815},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[292],[814],"1.2.0",[55],{"id":817,"slug":818,"identity":819,"label":820,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":821,"versions":822,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":824},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[267],[823],"1.8.0",[55],{"id":826,"slug":827,"identity":828,"label":829,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":830,"versions":831,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":833},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[279,331],[832],"2025.10.0",[55],{"id":835,"slug":836,"identity":837,"label":838,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":839,"versions":840,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":842},"package:pypi:ftfy","ftfy-b3100e16","pypi:ftfy","ftfy",[267],[841],"6.3.1",[55],{"id":844,"slug":845,"identity":846,"label":847,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":848,"versions":849,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":851},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[267],[850],"2.43.0",[55],{"id":853,"slug":854,"identity":855,"label":856,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":857,"versions":858,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":860},"package:pypi:google-genai","google-genai-4ef56ea2","pypi:google-genai","google-genai",[267],[859],"1.50.1",[55],{"id":862,"slug":863,"identity":864,"label":865,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":866,"versions":869,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":871},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[292,867,868],"MIT AND PSF-2.0","MIT AND Python-2.0",[870],"3.2.4",[55],{"id":873,"slug":874,"identity":875,"label":876,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":877,"versions":879,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":881},"package:pypi:griffe","griffe-3cc58065","pypi:griffe","griffe",[878],"ISC",[880],"1.15.0",[55],{"id":883,"slug":884,"identity":885,"label":886,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":887,"versions":888,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":890},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[267],[889],"1.76.0",[55],{"id":892,"slug":893,"identity":894,"label":895,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":896,"versions":897,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":898},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[267],[814],[55],{"id":900,"slug":901,"identity":902,"label":903,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":904,"versions":905,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":907},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[279],[906],"1.0.9",[55],{"id":909,"slug":910,"identity":911,"label":912,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":913,"versions":914,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":916},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[279],[915],"0.28.1",[55],{"id":918,"slug":919,"identity":920,"label":921,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":922,"versions":923,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":925},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[267,331],[924],"0.36.0",[55],{"id":927,"slug":928,"identity":929,"label":930,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":931,"versions":932,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":934},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[292],[933],"1.3.2",[55],{"id":936,"slug":937,"identity":938,"label":939,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":940,"versions":941,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":943},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[292],[942],"2.6.15",[55],{"id":945,"slug":946,"identity":947,"label":948,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":949,"versions":950,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":951},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[292],[378],[55],{"id":953,"slug":954,"identity":955,"label":956,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":957,"versions":958,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":960},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[279],[959],"1.5.2",[55],{"id":962,"slug":963,"identity":964,"label":965,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":966,"versions":967,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":969},"package:pypi:llama-index-embeddings-openai","llama-index-embeddings-openai-b4ccbb6b","pypi:llama-index-embeddings-openai","llama-index-embeddings-openai",[292],[968],"0.5.1",[55],{"id":971,"slug":972,"identity":973,"label":974,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":975,"versions":976,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":978},"package:pypi:llama-index-instrumentation","llama-index-instrumentation-abea2496","pypi:llama-index-instrumentation","llama-index-instrumentation",[292],[977],"0.4.2",[55],{"id":980,"slug":981,"identity":982,"label":983,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":984,"versions":985,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":987},"package:pypi:llama-index-workflows","llama-index-workflows-a24215fc","pypi:llama-index-workflows","llama-index-workflows",[292],[986],"2.11.1",[55],{"id":989,"slug":990,"identity":991,"label":992,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":993,"versions":994,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":996},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[292],[995],"4.0.0",[55],{"id":998,"slug":999,"identity":1000,"label":1001,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1002,"versions":1003,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1005},"package:pypi:markdown2","markdown2-6999cefd","pypi:markdown2","markdown2",[292],[1004],"2.5.4",[55],{"id":1007,"slug":1008,"identity":1009,"label":1010,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1011,"versions":1012,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1014},"package:pypi:markdownify","markdownify-f49bbc0a","pypi:markdownify","markdownify",[292],[1013],"1.2.2",[55],{"id":1016,"slug":1017,"identity":1018,"label":1019,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1020,"versions":1022,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1024},"package:pypi:marker-pdf","marker-pdf-6e4f313f","pypi:marker-pdf","marker-pdf",[1021],"GPL-3.0-or-later",[1023],"1.10.1",[55],{"id":1026,"slug":1027,"identity":1028,"label":1029,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1030,"versions":1031,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1033},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[279,331],[1032],"3.0.3",[55],{"id":1035,"slug":1036,"identity":1037,"label":1038,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1039,"versions":1040,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1042},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[292],[1041],"0.1.2",[55],{"id":1044,"slug":1045,"identity":1046,"label":1047,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1048,"versions":1049,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1051},"package:pypi:milvus-lite","milvus-lite-f807c8ab","pypi:milvus-lite","milvus-lite",[],[1050],"2.5.1",[55],{"id":1053,"slug":1054,"identity":1055,"label":1056,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1057,"versions":1058,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1060},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[331],[1059],"1.3.0",[55],{"id":1062,"slug":1063,"identity":1064,"label":1065,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1066,"versions":1067,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1069},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[267],[1068],"6.7.0",[55],{"id":1071,"slug":1072,"identity":1073,"label":1074,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1075,"versions":1076,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1078},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[279],[1077],"0.70.18",[55],{"id":1080,"slug":1081,"identity":1082,"label":1083,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1084,"versions":1085,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1087},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[292],[1086],"1.1.0",[55],{"id":1089,"slug":1090,"identity":1091,"label":1092,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1093,"versions":1094,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1096},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[331],[1095],"1.6.0",[55],{"id":1098,"slug":1099,"identity":1100,"label":1101,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1102,"versions":1103,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1105},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[279,331],[1104],"3.5",[55],{"id":1107,"slug":1108,"identity":1109,"label":1110,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1111,"versions":1112,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1114},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[331],[1113],"1.9.1",[55],{"id":1116,"slug":1117,"identity":1118,"label":1119,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1120,"versions":1122,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1124},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1121,331],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1123],"2.3.5",[55],{"id":1126,"slug":1127,"identity":1128,"label":1129,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1130,"versions":1131,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1133},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[331],[1132],"12.8.4.1",[55],{"id":1135,"slug":1136,"identity":1137,"label":1138,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1139,"versions":1140,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1142},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[331],[1141],"12.8.90",[55],{"id":1144,"slug":1145,"identity":1146,"label":1147,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1148,"versions":1149,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1151},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[331],[1150],"12.8.93",[55],{"id":1153,"slug":1154,"identity":1155,"label":1156,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1157,"versions":1158,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1159},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[331],[1141],[55],{"id":1161,"slug":1162,"identity":1163,"label":1164,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1165,"versions":1166,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1168},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[331],[1167],"9.10.2.21",[55],{"id":1170,"slug":1171,"identity":1172,"label":1173,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1174,"versions":1175,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1177},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[331],[1176],"11.3.3.83",[55],{"id":1179,"slug":1180,"identity":1181,"label":1182,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1183,"versions":1184,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1186},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[331],[1185],"1.13.1.3",[55],{"id":1188,"slug":1189,"identity":1190,"label":1191,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1192,"versions":1193,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1195},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[331],[1194],"10.3.9.90",[55],{"id":1197,"slug":1198,"identity":1199,"label":1200,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1201,"versions":1202,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1204},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[331],[1203],"11.7.3.90",[55],{"id":1206,"slug":1207,"identity":1208,"label":1209,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1210,"versions":1211,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1213},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[331],[1212],"12.5.8.93",[55],{"id":1215,"slug":1216,"identity":1217,"label":1218,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1219,"versions":1220,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1222},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[331],[1221],"0.7.1",[55],{"id":1224,"slug":1225,"identity":1226,"label":1227,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1228,"versions":1229,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1231},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[279,331],[1230],"2.27.5",[55],{"id":1233,"slug":1234,"identity":1235,"label":1236,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1237,"versions":1238,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1239},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[331],[1150],[55],{"id":1241,"slug":1242,"identity":1243,"label":1244,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1245,"versions":1246,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1248},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[279,331],[1247],"3.3.20",[55],{"id":1250,"slug":1251,"identity":1252,"label":1253,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1254,"versions":1255,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1256},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[267,331],[1141],[55],{"id":1258,"slug":1259,"identity":1260,"label":1261,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1262,"versions":1263,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1265},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[279],[1264],"2.3.0",[55],{"id":1267,"slug":1268,"identity":1269,"label":1270,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1271,"versions":1272,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1274},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[267],[1273],"4.11.0.86",[55],{"id":1276,"slug":1277,"identity":1278,"label":1279,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1280,"versions":1282,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1284},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1281,331],"Apache-2.0 OR BSD-2-Clause",[1283],"25.0",[55],{"id":1286,"slug":1287,"identity":1288,"label":1289,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1290,"versions":1291,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1293},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[331],[1292],"2.3.3",[55],{"id":1295,"slug":1296,"identity":1297,"label":1298,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1299,"versions":1300,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1302},"package:pypi:pdftext","pdftext-f30905cf","pypi:pdftext","pdftext",[267],[1301],"0.6.3",[55],{"id":1304,"slug":1305,"identity":1306,"label":1307,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1308,"versions":1309,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1311},"package:pypi:pikepdf","pikepdf-9b0a0b6c","pypi:pikepdf","pikepdf",[503],[1310],"10.0.2",[55],{"id":1313,"slug":1314,"identity":1315,"label":1316,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1317,"versions":1318,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1320},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[292],[1319],"4.5.0",[55],{"id":1322,"slug":1323,"identity":1324,"label":1325,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1326,"versions":1327,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1329},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[292],[1328],"4.4.0",[55],{"id":1331,"slug":1332,"identity":1333,"label":1334,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1335,"versions":1336,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1338},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[267],[1337],"0.4.1",[55],{"id":1340,"slug":1341,"identity":1342,"label":1343,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1344,"versions":1345,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1346},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[331],[977],[55],{"id":1348,"slug":1349,"identity":1350,"label":1351,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1352,"versions":1353,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1355},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[292],[1354],"2.12.4",[55],{"id":1357,"slug":1358,"identity":1359,"label":1360,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1361,"versions":1362,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1364},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[292],[1363],"2.41.5",[55],{"id":1366,"slug":1367,"identity":1368,"label":1369,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1370,"versions":1371,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1373},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[331],[1372],"4.30.0",[55],{"id":1375,"slug":1376,"identity":1377,"label":1378,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1379,"versions":1380,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1382},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[331],[1381],"2.9.0.post0",[55],{"id":1384,"slug":1385,"identity":1386,"label":1387,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1388,"versions":1389,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1391},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[292],[1390],"2025.2",[55],{"id":1393,"slug":1394,"identity":1395,"label":1396,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1397,"versions":1398,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1400},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[292],[1399],"6.0.3",[55],{"id":1402,"slug":1403,"identity":1404,"label":1405,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1406,"versions":1407,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1409},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[292],[1408],"3.14.3",[55],{"id":1411,"slug":1412,"identity":1413,"label":1414,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1415,"versions":1417,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1419},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1416,331],"Apache-2.0 AND CNRI-Python",[1418],"2024.11.6",[55],{"id":1421,"slug":1422,"identity":1423,"label":1424,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1425,"versions":1426,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1428},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[292],[1427],"14.2.0",[55],{"id":1430,"slug":1431,"identity":1432,"label":1433,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1434,"versions":1435,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1437},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[267],[1436],"4.9.1",[55],{"id":1439,"slug":1440,"identity":1441,"label":1442,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1443,"versions":1444,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1446},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[331],[1445],"0.6.2",[55],{"id":1448,"slug":1449,"identity":1450,"label":1451,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1452,"versions":1453,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1455},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[331],[1454],"1.16.3",[55],{"id":1457,"slug":1458,"identity":1459,"label":1460,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1461,"versions":1462,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1464},"package:pypi:six","six-3c3888bd","pypi:six","six",[292],[1463],"1.17.0",[55],{"id":1466,"slug":1467,"identity":1468,"label":1469,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1470,"versions":1471,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1472},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[567],[761],[55],{"id":1474,"slug":1475,"identity":1476,"label":1477,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1478,"versions":1479,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1481},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[292],[1480],"2.0.44",[55],{"id":1483,"slug":1484,"identity":1485,"label":1486,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1487,"versions":1488,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1490},"package:pypi:standardwebhooks","standardwebhooks-9da13670","pypi:standardwebhooks","standardwebhooks",[292],[1489],"1.0.0",[55],{"id":1492,"slug":1493,"identity":1494,"label":1495,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1496,"versions":1497,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1499},"package:pypi:surya-ocr","surya-ocr-8616b94f","pypi:surya-ocr","surya-ocr",[1021],[1498],"0.17.0",[55],{"id":1501,"slug":1502,"identity":1503,"label":1504,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1505,"versions":1506,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1508},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[331],[1507],"1.14.0",[55],{"id":1510,"slug":1511,"identity":1512,"label":1513,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1514,"versions":1515,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1517},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[267],[1516],"9.1.2",[55],{"id":1519,"slug":1520,"identity":1521,"label":1522,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1523,"versions":1524,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1526},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[279],[1525],"3.6.0",[55],{"id":1528,"slug":1529,"identity":1530,"label":1531,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1532,"versions":1533,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1535},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[292],[1534],"3.5.1",[55],{"id":1537,"slug":1538,"identity":1539,"label":1540,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1541,"versions":1542,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1544},"package:pypi:types-deprecated","types-deprecated-ad3f077c","pypi:types-deprecated","types-deprecated",[267],[1543],"1.3.1.20251101",[55],{"id":1546,"slug":1547,"identity":1548,"label":1549,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1550,"versions":1551,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1553},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[267],[1552],"2.9.0.20251115",[55],{"id":1555,"slug":1556,"identity":1557,"label":1558,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1559,"versions":1560,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1562},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[633,331],[1561],"4.15.0",[55],{"id":1564,"slug":1565,"identity":1566,"label":1567,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1568,"versions":1569,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1571},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[292],[1570],"0.9.0",[55],{"id":1573,"slug":1574,"identity":1575,"label":1576,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1577,"versions":1578,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1579},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[292],[977],[55],{"id":1581,"slug":1582,"identity":1583,"label":1584,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1585,"versions":1586,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1587},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[267],[1390],[55],{"id":1589,"slug":1590,"identity":1591,"label":1592,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1593,"versions":1594,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1596},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[292],[1595],"0.2.14",[55],{"id":1598,"slug":1599,"identity":1600,"label":1601,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1602,"versions":1603,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1605},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[279],[1604],"15.0.1",[55],{"id":1607,"slug":1608,"identity":1609,"label":1610,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1611,"versions":1612,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1614},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[331],[1613],"2.0.1",[55],{"id":1616,"slug":1617,"identity":1618,"label":1619,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1620,"versions":1621,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1622},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[331],[1525],[55],{"id":1624,"slug":1625,"identity":1626,"label":1627,"aiRelevant":46,"provider":276,"advisoryCount":38,"licenseExpressions":1628,"versions":1629,"dossier":46,"occurrenceCount":32,"directOccurrenceCount":38,"evidenceFiles":1631},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[267],[1630],"1.22.0",[55],[1633,1672,1705,1737,1762,1788,1820,1863,1890,1916,1939,1966,2002,2028,2048,2066,2092,2110,2148,2174,2199,2233,2256,2291,2321,2351,2378,2397,2431,2457,2482,2505,2532,2555,2578,2601,2640,2669,2690,2729,2761,2786,2810,2833,2867,2897,2917,2942,2974,3030,3062,3094,3127,3161,3185,3208,3227,3260,3285,3312,3335,3358,3386,3413,3447,3474,3496,3518,3538,3573,3603,3636,3659,3684,3713,3741,3765,3784,3806,3836,3859,3881,3909,3931,3956,3980,4006,4028,4055,4075,4111,4143,4170,4197,4226,4253,4267,4297,4329,4358,4386,4413,4436,4466,4519,4542,4567,4599,4618,4646,4666,4683,4702,4719,4740,4756,4771,4788,4803,4820,4837,4854,4867,4880,4893,4906,4919,4932,4945,4958,4980,4993,5026,5045,5062,5079,5097,5120,5149,5176,5197,5217,5237,5251],{"id":107,"slug":1634,"dossier":46,"summary":1635,"aliases":1636,"sourceIds":1639,"published":1640,"modified":1641,"checkedAt":7,"severity":1642,"references":1646,"versionKeys":1670,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1637,1638],"CVE-2024-39689","PYSEC-2024-230",[107,1638],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[1643],{"type":1644,"score":1645},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1647,1650,1652,1655,1658,1661,1664,1666,1668],{"type":1648,"url":1649},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1648,"url":1651},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1653,"url":1654},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1656,"url":1657},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1659,"url":1660},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1662,"url":1663},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1659,"url":1665},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1648,"url":1667},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1648,"url":1669},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1671],"pypi:certifi@2024.6.2",{"id":108,"slug":1673,"dossier":46,"summary":1674,"aliases":1675,"sourceIds":1678,"published":1679,"modified":1680,"checkedAt":7,"severity":1681,"references":1684,"versionKeys":1696,"packageCount":32,"repositoryCount":1704},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1676,1677],"CVE-2026-4372","PYSEC-2026-2289",[108,1677],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[1682],{"type":1644,"score":1683},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1685,1687,1689,1691,1694],{"type":1648,"url":1686},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1653,"url":1688},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1656,"url":1690},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1692,"url":1693},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1648,"url":1695},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1697,1698,1699,1700,1701,1702,1703],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",8,{"id":109,"slug":1706,"dossier":46,"summary":1707,"aliases":1708,"sourceIds":1711,"published":1712,"modified":1713,"checkedAt":7,"severity":1714,"references":1720,"versionKeys":1727,"packageCount":32,"repositoryCount":1736},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1709,1710],"CVE-2026-54279","PYSEC-2026-2112",[109,1710],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[1715,1718],{"type":1716,"score":1717},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1644,"score":1719},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1721,1723,1725],{"type":1648,"url":1722},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1656,"url":1724},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1653,"url":1726},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[1728,1729,1730,1731,1732,1733,1734,1735],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":110,"slug":1738,"dossier":46,"summary":1739,"aliases":1740,"sourceIds":1743,"published":1744,"modified":1745,"checkedAt":7,"severity":1746,"references":1751,"versionKeys":1761,"packageCount":32,"repositoryCount":1736},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[1741,1742],"CVE-2026-34514","PYSEC-2026-2096",[110,1742],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[1747,1749],{"type":1716,"score":1748},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1644,"score":1750},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1752,1754,1756,1758,1759],{"type":1653,"url":1753},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1648,"url":1755},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1653,"url":1757},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1656,"url":1724},{"type":1648,"url":1760},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[1728,1729,1730,1731,1732,1733,1734,1735],{"id":111,"slug":1763,"dossier":46,"summary":1764,"aliases":1765,"sourceIds":1768,"published":1769,"modified":1770,"checkedAt":7,"severity":1771,"references":1773,"versionKeys":1784,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[1766,1767],"CVE-2026-49476","PYSEC-2026-3071",[111,1767],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[1772],{"type":1644,"score":1719},[1774,1776,1778,1780,1782],{"type":1659,"url":1775},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1656,"url":1777},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":1656,"url":1779},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":1648,"url":1781},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1648,"url":1783},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[1785,1786,1787],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":112,"slug":1789,"dossier":91,"summary":1790,"aliases":1791,"sourceIds":1794,"published":1795,"modified":1796,"checkedAt":7,"severity":1797,"references":1800,"versionKeys":1813,"packageCount":32,"repositoryCount":1819},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1792,1793],"CVE-2025-66471","PYSEC-2026-1994",[112,1793],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[1798],{"type":1716,"score":1799},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1801,1803,1805,1807,1809,1811],{"type":1659,"url":1802},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1648,"url":1804},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1653,"url":1806},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1656,"url":1808},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1656,"url":1810},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1648,"url":1812},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1814,1815,1816,1817,1818],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":113,"slug":1821,"dossier":46,"summary":1822,"aliases":1823,"sourceIds":1827,"published":1828,"modified":1829,"checkedAt":7,"severity":1830,"references":1837,"versionKeys":1859,"packageCount":32,"repositoryCount":435},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1824,1825,1826],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[113,1826],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[1831,1833,1835],{"type":1644,"score":1832},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1716,"score":1834},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1644,"score":1836},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1838,1840,1843,1845,1847,1849,1851,1853,1855,1857],{"type":1648,"url":1839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1841,"url":1842},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1841,"url":1844},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1659,"url":1846},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1656,"url":1848},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1659,"url":1850},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1841,"url":1852},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1648,"url":1854},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1648,"url":1856},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1648,"url":1858},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1860,1861,1862],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":114,"slug":1864,"dossier":46,"summary":1865,"aliases":1866,"sourceIds":1869,"published":1870,"modified":1871,"checkedAt":7,"severity":1872,"references":1875,"versionKeys":1889,"packageCount":32,"repositoryCount":454},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[1867,1868],"CVE-2025-3933","PYSEC-2026-1977",[114,1868],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[1873],{"type":1644,"score":1874},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1876,1878,1880,1882,1883,1885,1887],{"type":1648,"url":1877},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1659,"url":1879},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1659,"url":1881},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1656,"url":1690},{"type":1659,"url":1884},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1656,"url":1886},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1648,"url":1888},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1697,1698],{"id":115,"slug":1891,"dossier":91,"summary":1892,"aliases":1893,"sourceIds":1896,"published":1897,"modified":1898,"checkedAt":7,"severity":1899,"references":1902,"versionKeys":1915,"packageCount":32,"repositoryCount":1819},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1894,1895],"CVE-2026-21441","PYSEC-2026-1996",[115,1895],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1900,1901],{"type":1644,"score":1719},{"type":1716,"score":1799},[1903,1905,1907,1909,1910,1912,1913],{"type":1659,"url":1904},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1648,"url":1906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1653,"url":1908},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1656,"url":1808},{"type":1659,"url":1911},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1656,"url":1810},{"type":1648,"url":1914},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1814,1815,1816,1817,1818],{"id":116,"slug":1917,"dossier":46,"summary":1918,"aliases":1919,"sourceIds":1922,"published":1923,"modified":1924,"checkedAt":7,"severity":1925,"references":1929,"versionKeys":1938,"packageCount":32,"repositoryCount":1736},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1920,1921],"CVE-2026-34517","PYSEC-2026-2099",[116,1921],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[1926,1928],{"type":1716,"score":1927},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1644,"score":1874},[1930,1932,1934,1936,1937],{"type":1653,"url":1931},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1648,"url":1933},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1653,"url":1935},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":117,"slug":1940,"dossier":46,"summary":1941,"aliases":1942,"sourceIds":1945,"published":1946,"modified":1947,"checkedAt":7,"severity":1948,"references":1950,"versionKeys":1963,"packageCount":32,"repositoryCount":454},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[1943,1944],"CVE-2025-68480","PYSEC-2026-1605",[117,1944],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[1949],{"type":1644,"score":1874},[1951,1953,1955,1957,1959,1961],{"type":1659,"url":1952},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":1648,"url":1954},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":1659,"url":1956},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":1656,"url":1958},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":1656,"url":1960},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":1648,"url":1962},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[1964,1965],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":118,"slug":1967,"dossier":46,"summary":1968,"aliases":1969,"sourceIds":1972,"published":1973,"modified":1974,"checkedAt":7,"severity":1975,"references":1978,"versionKeys":1999,"packageCount":32,"repositoryCount":435},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[1970,1971],"CVE-2026-33236","PYSEC-2026-2237",[118,1971],"2026-03-19T12:42:42Z","2026-07-13T07:26:54.270611709Z",[1976],{"type":1644,"score":1977},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[1979,1981,1983,1985,1987,1989,1991,1993,1995,1997],{"type":1692,"url":1980},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":1648,"url":1982},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":1653,"url":1984},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":1656,"url":1986},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":1659,"url":1988},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":1659,"url":1990},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":1648,"url":1992},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1648,"url":1994},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1648,"url":1996},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1841,"url":1998},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[2000,2001],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":119,"slug":2003,"dossier":46,"summary":2004,"aliases":2005,"sourceIds":2008,"published":2009,"modified":2010,"checkedAt":7,"severity":2011,"references":2014,"versionKeys":2027,"packageCount":32,"repositoryCount":65},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2006,2007],"CVE-2025-50182","PYSEC-2026-1997",[119,2007],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2012],{"type":1644,"score":2013},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2015,2017,2019,2021,2022,2024,2025],{"type":1659,"url":2016},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1648,"url":2018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1653,"url":2020},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1656,"url":1808},{"type":1659,"url":2023},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1656,"url":1810},{"type":1648,"url":2026},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1814,1815,1816,1817],{"id":120,"slug":2029,"dossier":46,"summary":2030,"aliases":2031,"sourceIds":2034,"published":2035,"modified":2036,"checkedAt":7,"severity":2037,"references":2041,"versionKeys":2047,"packageCount":32,"repositoryCount":1736},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2032,2033],"CVE-2026-54273","PYSEC-2026-2107",[120,2033],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2038,2040],{"type":1716,"score":2039},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1644,"score":1719},[2042,2044,2046],{"type":1648,"url":2043},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1653,"url":2045},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1656,"url":1724},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":121,"slug":2049,"dossier":46,"summary":2050,"aliases":2051,"sourceIds":2054,"published":2055,"modified":2056,"checkedAt":7,"severity":2057,"references":2061,"versionKeys":2065,"packageCount":32,"repositoryCount":1736},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2052,2053],"CVE-2026-54275","PYSEC-2026-237",[121,2053],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2058,2060],{"type":1716,"score":2059},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1644,"score":1719},[2062,2064],{"type":1648,"url":2063},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1656,"url":1724},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":122,"slug":2067,"dossier":46,"summary":2068,"aliases":2069,"sourceIds":2072,"published":2073,"modified":2074,"checkedAt":7,"severity":2075,"references":2078,"versionKeys":2091,"packageCount":32,"repositoryCount":454},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2070,2071],"CVE-2025-6921","PYSEC-2026-1980",[122,2071],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2076],{"type":1644,"score":2077},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2079,2081,2083,2085,2086,2088,2089],{"type":1648,"url":2080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1659,"url":2082},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1659,"url":2084},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1656,"url":1690},{"type":1659,"url":2087},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1656,"url":1886},{"type":1648,"url":2090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1697,1698],{"id":123,"slug":2093,"dossier":46,"summary":2094,"aliases":2095,"sourceIds":2097,"published":2098,"modified":2099,"checkedAt":7,"severity":2100,"references":2103,"versionKeys":2108,"packageCount":32,"repositoryCount":454},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[2096],"CVE-2026-58203",[123],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[2101],{"type":1644,"score":2102},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2104,2106],{"type":1659,"url":2105},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":1656,"url":2107},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[2109],"pypi:pydantic-settings@2.12.0",{"id":124,"slug":2111,"dossier":91,"summary":2112,"aliases":2113,"sourceIds":2116,"published":2117,"modified":2118,"checkedAt":7,"severity":2119,"references":2122,"versionKeys":2145,"packageCount":32,"repositoryCount":1819},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2114,2115],"CVE-2026-4539","PYSEC-2026-2987",[124,2115],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2120,2121],{"type":1644,"score":1832},{"type":1716,"score":1834},[2123,2125,2127,2129,2131,2133,2135,2137,2139,2141,2143],{"type":1648,"url":2124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1659,"url":2126},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1659,"url":2128},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1659,"url":2130},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1656,"url":2132},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1659,"url":2134},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1659,"url":2136},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1659,"url":2138},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1659,"url":2140},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1656,"url":2142},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1648,"url":2144},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2146,2147],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":125,"slug":2149,"dossier":46,"summary":2150,"aliases":2151,"sourceIds":2155,"published":2156,"modified":2157,"checkedAt":7,"severity":2158,"references":2163,"versionKeys":2173,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[2152,2153,2154],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[125,2154],"2025-04-18T15:19:28Z","2026-02-04T02:38:45.601605Z",[2159,2161],{"type":1716,"score":2160},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1644,"score":2162},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2164,2166,2168,2170,2172],{"type":1648,"url":2165},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1648,"url":2167},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1659,"url":2169},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1659,"url":2171},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1656,"url":1848},[1860],{"id":126,"slug":2175,"dossier":46,"summary":2176,"aliases":2177,"sourceIds":2180,"published":2181,"modified":2182,"checkedAt":7,"severity":2183,"references":2186,"versionKeys":2198,"packageCount":32,"repositoryCount":65},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[2178,2179],"CVE-2025-69226","PYSEC-2026-1097",[126,2179],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[2184],{"type":1716,"score":2185},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2187,2189,2191,2193,2194,2196],{"type":1659,"url":2188},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1648,"url":2190},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1653,"url":2192},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1656,"url":1724},{"type":1656,"url":2195},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1648,"url":2197},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[1728,1729,1730,1731,1732,1733,1734],{"id":127,"slug":2200,"dossier":46,"summary":2201,"aliases":2202,"sourceIds":2206,"published":2207,"modified":2208,"checkedAt":7,"severity":2209,"references":2212,"versionKeys":2227,"packageCount":32,"repositoryCount":2232},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[2203,2204,2205],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[127,2205],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[2210],{"type":1644,"score":2211},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2213,2215,2217,2219,2221,2223,2225],{"type":1659,"url":2214},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":1648,"url":2216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":1659,"url":2218},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":1653,"url":2220},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":1656,"url":2222},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":1656,"url":2224},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":1648,"url":2226},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[2228,2229,2230,2231],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",6,{"id":128,"slug":2234,"dossier":46,"summary":2235,"aliases":2236,"sourceIds":2239,"published":2240,"modified":2241,"checkedAt":7,"severity":2242,"references":2244,"versionKeys":2255,"packageCount":32,"repositoryCount":454},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[2237,2238],"CVE-2025-6638","PYSEC-2026-1981",[128,2238],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[2243],{"type":1644,"score":2077},[2245,2247,2248,2249,2250,2252,2253],{"type":1648,"url":2246},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1659,"url":2082},{"type":1659,"url":2084},{"type":1656,"url":1690},{"type":1659,"url":2251},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1656,"url":1886},{"type":1648,"url":2254},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1697,1698],{"id":129,"slug":2257,"dossier":46,"summary":2258,"aliases":2259,"sourceIds":2263,"published":2264,"modified":2265,"checkedAt":7,"severity":2266,"references":2271,"versionKeys":2288,"packageCount":32,"repositoryCount":454},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[2260,2261,2262],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[129,2262],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[2267,2269],{"type":1716,"score":2268},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1644,"score":2270},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2272,2274,2276,2278,2280,2282,2284,2286],{"type":1692,"url":2273},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1648,"url":2275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1841,"url":2277},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1653,"url":2279},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1659,"url":2281},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1656,"url":2283},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1659,"url":2285},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1662,"url":2287},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[2289,2290],"pypi:setuptools@69.2.0","pypi:setuptools@75.8.0",{"id":130,"slug":2292,"dossier":46,"summary":2293,"aliases":2294,"sourceIds":2297,"published":2298,"modified":2299,"checkedAt":7,"severity":2300,"references":2304,"versionKeys":2319,"packageCount":32,"repositoryCount":454},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[2295,2296],"CVE-2025-69534","PYSEC-2026-89",[130,2296],"2026-03-05T15:16:11.243Z","2026-06-10T17:02:03.742572395Z",[2301,2302],{"type":1644,"score":1719},{"type":1716,"score":2303},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2305,2307,2309,2311,2313,2315,2317],{"type":1648,"url":2306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":1841,"url":2308},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":1659,"url":2310},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":1656,"url":2312},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":1659,"url":2314},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":1659,"url":2316},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":1648,"url":2318},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[2320],"pypi:markdown@3.8",{"id":131,"slug":2322,"dossier":46,"summary":2323,"aliases":2324,"sourceIds":2328,"published":2329,"modified":2330,"checkedAt":7,"severity":2331,"references":2335,"versionKeys":2344,"packageCount":32,"repositoryCount":2350},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[2325,2326,2327],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[131,2327],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[2332,2333],{"type":1644,"score":1836},{"type":1716,"score":2334},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2336,2338,2340,2342],{"type":1648,"url":2337},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1648,"url":2339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1656,"url":2341},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1648,"url":2343},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2345,2346,2347,2348,2349],"pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",10,{"id":132,"slug":2352,"dossier":46,"summary":2353,"aliases":2354,"sourceIds":2357,"published":2358,"modified":2359,"checkedAt":7,"severity":2360,"references":2366,"versionKeys":2377,"packageCount":32,"repositoryCount":1736},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2355,2356],"CVE-2026-34520","PYSEC-2026-2102",[132,2356],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[2361,2363,2364],{"type":1644,"score":2362},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1716,"score":1748},{"type":1716,"score":2365},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2367,2369,2371,2373,2374,2375],{"type":1653,"url":2368},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1648,"url":2370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1653,"url":2372},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1656,"url":1724},{"type":1648,"url":1760},{"type":1659,"url":2376},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[1728,1729,1730,1731,1732,1733,1734,1735],{"id":133,"slug":2379,"dossier":46,"summary":2380,"aliases":2381,"sourceIds":2384,"published":2385,"modified":2386,"checkedAt":7,"severity":2387,"references":2390,"versionKeys":2396,"packageCount":32,"repositoryCount":1736},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2382,2383],"CVE-2026-54277","PYSEC-2026-2110",[133,2383],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[2388,2389],{"type":1716,"score":2039},{"type":1644,"score":1719},[2391,2393,2395],{"type":1648,"url":2392},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1653,"url":2394},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1656,"url":1724},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":134,"slug":2398,"dossier":46,"summary":2399,"aliases":2400,"sourceIds":2403,"published":2404,"modified":2405,"checkedAt":7,"severity":2406,"references":2408,"versionKeys":2429,"packageCount":32,"repositoryCount":65},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[2401,2402],"CVE-2026-23490","PYSEC-2026-1810",[134,2402],"2026-01-16T19:19:25Z","2026-07-07T17:56:27.705413895Z",[2407],{"type":1644,"score":1719},[2409,2411,2413,2415,2417,2419,2421,2423,2425,2427],{"type":1659,"url":2410},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":1648,"url":2412},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":1659,"url":2414},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":1659,"url":2416},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":1656,"url":2418},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":1659,"url":2420},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":1659,"url":2422},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":1659,"url":2424},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",{"type":1656,"url":2426},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpyasn1",{"type":1648,"url":2428},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",[2430],"pypi:pyasn1@0.6.1",{"id":135,"slug":2432,"dossier":91,"summary":2433,"aliases":2434,"sourceIds":2437,"published":2438,"modified":2439,"checkedAt":7,"severity":2440,"references":2444,"versionKeys":2453,"packageCount":32,"repositoryCount":33},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2435,2436],"CVE-2026-45409","PYSEC-2026-215",[135,2436],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[2441,2442],{"type":1644,"score":1874},{"type":1716,"score":2443},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2445,2447,2449,2451],{"type":1648,"url":2446},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1648,"url":2448},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1656,"url":2450},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1659,"url":2452},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2454,2455,2456],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",{"id":136,"slug":2458,"dossier":46,"summary":2459,"aliases":2460,"sourceIds":2463,"published":2464,"modified":2465,"checkedAt":7,"severity":2466,"references":2471,"versionKeys":2481,"packageCount":32,"repositoryCount":435},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[2461,2462],"CVE-2026-0847","PYSEC-2026-98",[136,2462],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[2467,2469],{"type":1644,"score":2468},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":1644,"score":2470},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2472,2474,2475,2477,2479],{"type":1648,"url":2473},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":1656,"url":1986},{"type":1659,"url":2476},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":1692,"url":2478},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":1648,"url":2480},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[2000,2001],{"id":137,"slug":2483,"dossier":46,"summary":2484,"aliases":2485,"sourceIds":2488,"published":2489,"modified":2490,"checkedAt":7,"severity":2491,"references":2493,"versionKeys":2504,"packageCount":32,"repositoryCount":65},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2486,2487],"CVE-2025-69224","PYSEC-2026-1099",[137,2487],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[2492],{"type":1716,"score":1748},[2494,2496,2498,2500,2501,2502],{"type":1659,"url":2495},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1648,"url":2497},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1653,"url":2499},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":2503},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[1728,1729,1730,1731,1732,1733,1734],{"id":138,"slug":2506,"dossier":46,"summary":2507,"aliases":2508,"sourceIds":2511,"published":2512,"modified":2513,"checkedAt":7,"severity":2514,"references":2519,"versionKeys":2531,"packageCount":32,"repositoryCount":1704},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2509,2510],"CVE-2026-1839","PYSEC-2026-2288",[138,2510],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[2515,2517],{"type":1644,"score":2516},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1644,"score":2518},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2520,2522,2524,2525,2527,2529],{"type":1648,"url":2521},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1653,"url":2523},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1656,"url":1690},{"type":1659,"url":2526},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1692,"url":2528},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1648,"url":2530},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1697,1698,1699,1700,1701,1702,1703],{"id":139,"slug":2533,"dossier":46,"summary":2534,"aliases":2535,"sourceIds":2538,"published":2539,"modified":2540,"checkedAt":7,"severity":2541,"references":2543,"versionKeys":2554,"packageCount":32,"repositoryCount":65},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[2536,2537],"CVE-2025-69228","PYSEC-2026-1100",[139,2537],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[2542],{"type":1716,"score":2039},[2544,2546,2548,2550,2551,2552],{"type":1659,"url":2545},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1648,"url":2547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1653,"url":2549},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":2553},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[1728,1729,1730,1731,1732,1733,1734],{"id":140,"slug":2556,"dossier":46,"summary":2557,"aliases":2558,"sourceIds":2561,"published":2562,"modified":2563,"checkedAt":7,"severity":2564,"references":2566,"versionKeys":2577,"packageCount":32,"repositoryCount":65},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[2559,2560],"CVE-2025-69223","PYSEC-2026-1101",[140,2560],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[2565],{"type":1644,"score":1719},[2567,2569,2571,2573,2574,2575],{"type":1659,"url":2568},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1648,"url":2570},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1653,"url":2572},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":2576},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[1728,1729,1730,1731,1732,1733,1734],{"id":141,"slug":2579,"dossier":46,"summary":2580,"aliases":2581,"sourceIds":2584,"published":2585,"modified":2586,"checkedAt":7,"severity":2587,"references":2589,"versionKeys":2600,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2582,2583],"CVE-2024-12720","PYSEC-2026-1982",[141,2583],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[2588],{"type":1644,"score":2077},[2590,2592,2594,2595,2597,2598],{"type":1648,"url":2591},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1659,"url":2593},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1656,"url":1690},{"type":1659,"url":2596},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1656,"url":1886},{"type":1648,"url":2599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1697],{"id":142,"slug":2602,"dossier":46,"summary":2603,"aliases":2604,"sourceIds":2607,"published":2608,"modified":2609,"checkedAt":7,"severity":2610,"references":2613,"versionKeys":2630,"packageCount":32,"repositoryCount":2350},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[2605,2606],"CVE-2026-0994","PYSEC-2026-1805",[142,2606],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[2611],{"type":1716,"score":2612},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[2614,2616,2618,2620,2622,2624,2626,2628],{"type":1648,"url":2615},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":1659,"url":2617},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":1659,"url":2619},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":1659,"url":2621},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":1659,"url":2623},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":1656,"url":2625},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":1656,"url":2627},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":1648,"url":2629},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[2631,2632,2633,2634,2635,2636,2637,2638,2639],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":143,"slug":2641,"dossier":46,"summary":2642,"aliases":2643,"sourceIds":2646,"published":2647,"modified":2648,"checkedAt":7,"severity":2649,"references":2652,"versionKeys":2668,"packageCount":32,"repositoryCount":435},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[2644,2645],"CVE-2025-14009","PYSEC-2026-96",[143,2645],"2026-02-18T18:24:19.410Z","2026-06-10T17:02:23.646726882Z",[2650],{"type":1644,"score":2651},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2653,2655,2657,2659,2660,2662,2664,2666],{"type":1648,"url":2654},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":1659,"url":2656},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":1659,"url":2658},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":1656,"url":1986},{"type":1659,"url":2661},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":1659,"url":2663},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":1692,"url":2665},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":1648,"url":2667},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[2000,2001],{"id":144,"slug":2670,"dossier":46,"summary":2671,"aliases":2672,"sourceIds":2675,"published":2676,"modified":2677,"checkedAt":7,"severity":2678,"references":2680,"versionKeys":2689,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[2673,2674],"CVE-2026-49477","PYSEC-2026-3072",[144,2674],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[2679],{"type":1644,"score":1719},[2681,2683,2684,2685,2687],{"type":1659,"url":2682},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1656,"url":1777},{"type":1656,"url":1779},{"type":1648,"url":2686},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1648,"url":2688},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[1785,1786,1787],{"id":145,"slug":2691,"dossier":46,"summary":2692,"aliases":2693,"sourceIds":2697,"published":2698,"modified":2699,"checkedAt":7,"severity":2700,"references":2704,"versionKeys":2726,"packageCount":32,"repositoryCount":65},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[2694,2695,2696],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[145,2696],"2025-04-16T21:30:59Z","2026-07-14T16:44:12.813190902Z",[2701,2702],{"type":1644,"score":1832},{"type":1716,"score":2703},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2705,2707,2709,2711,2713,2715,2716,2718,2720,2722,2724],{"type":1648,"url":2706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1659,"url":2708},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1659,"url":2710},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1659,"url":2712},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1659,"url":2714},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1656,"url":1848},{"type":1659,"url":2717},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1659,"url":2719},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1659,"url":2721},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1656,"url":2723},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1648,"url":2725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1860,1861,1862,2727,2728],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":146,"slug":2730,"dossier":46,"summary":2731,"aliases":2732,"sourceIds":2735,"published":2736,"modified":2737,"checkedAt":7,"severity":2738,"references":2741,"versionKeys":2760,"packageCount":32,"repositoryCount":435},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[2733,2734],"CVE-2025-4565","PYSEC-2026-1806",[146,2734],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[2739],{"type":1716,"score":2740},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2742,2744,2746,2748,2750,2751,2753,2755,2757,2758],{"type":1659,"url":2743},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":1659,"url":2745},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":1648,"url":2747},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":1659,"url":2749},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":1656,"url":2625},{"type":1659,"url":2752},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":1659,"url":2754},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":1659,"url":2756},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":1656,"url":2627},{"type":1648,"url":2759},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[2631,2633,2634],{"id":147,"slug":2762,"dossier":46,"summary":2763,"aliases":2764,"sourceIds":2767,"published":2768,"modified":2769,"checkedAt":7,"severity":2770,"references":2772,"versionKeys":2785,"packageCount":32,"repositoryCount":454},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2765,2766],"CVE-2025-5197","PYSEC-2026-1983",[147,2766],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[2771],{"type":1644,"score":2077},[2773,2775,2777,2779,2780,2782,2783],{"type":1648,"url":2774},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1659,"url":2776},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1659,"url":2778},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1656,"url":1690},{"type":1659,"url":2781},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1656,"url":1886},{"type":1648,"url":2784},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1697,1698],{"id":148,"slug":2787,"dossier":46,"summary":2788,"aliases":2789,"sourceIds":2792,"published":2793,"modified":2794,"checkedAt":7,"severity":2795,"references":2798,"versionKeys":2809,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[2790,2791],"CVE-2025-53643","PYSEC-2026-1104",[148,2791],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[2796],{"type":1716,"score":2797},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2799,2801,2803,2805,2806,2807],{"type":1659,"url":2800},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1648,"url":2802},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1653,"url":2804},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":2808},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[1728,1729,1730,1731],{"id":149,"slug":2811,"dossier":46,"summary":2812,"aliases":2813,"sourceIds":2816,"published":2817,"modified":2818,"checkedAt":7,"severity":2819,"references":2823,"versionKeys":2832,"packageCount":32,"repositoryCount":1736},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[2814,2815],"CVE-2026-34518","PYSEC-2026-2100",[149,2815],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[2820,2822],{"type":1644,"score":2821},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1716,"score":2185},[2824,2826,2828,2830,2831],{"type":1653,"url":2825},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1648,"url":2827},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1653,"url":2829},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":150,"slug":2834,"dossier":46,"summary":2835,"aliases":2836,"sourceIds":2839,"published":2840,"modified":2841,"checkedAt":7,"severity":2842,"references":2845,"versionKeys":2864,"packageCount":32,"repositoryCount":65},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2837,2838],"CVE-2024-47081","PYSEC-2026-1872",[150,2838],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[2843],{"type":1644,"score":2844},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2846,2848,2850,2852,2854,2856,2858,2860,2862],{"type":1659,"url":2847},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1648,"url":2849},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1659,"url":2851},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1653,"url":2853},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1656,"url":2855},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1659,"url":2857},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1659,"url":2859},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1656,"url":2861},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1648,"url":2863},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2865,2866],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":151,"slug":2868,"dossier":46,"summary":2869,"aliases":2870,"sourceIds":2873,"published":2874,"modified":2875,"checkedAt":7,"severity":2876,"references":2879,"versionKeys":2896,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2871,2872],"CVE-2024-35195","PYSEC-2026-1873",[151,2872],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[2877],{"type":1644,"score":2878},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2880,2882,2884,2886,2888,2889,2891,2893,2894],{"type":1659,"url":2881},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1648,"url":2883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1659,"url":2885},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1653,"url":2887},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1656,"url":2855},{"type":1659,"url":2890},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1659,"url":2892},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1656,"url":2861},{"type":1648,"url":2895},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2865],{"id":152,"slug":2898,"dossier":46,"summary":2899,"aliases":2900,"sourceIds":2903,"published":2904,"modified":2905,"checkedAt":7,"severity":2906,"references":2910,"versionKeys":2916,"packageCount":32,"repositoryCount":1736},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[2901,2902],"CVE-2026-54280","PYSEC-2026-2113",[152,2902],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[2907,2909],{"type":1716,"score":2908},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1644,"score":1719},[2911,2913,2915],{"type":1648,"url":2912},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1653,"url":2914},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1656,"url":1724},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":153,"slug":2918,"dossier":46,"summary":2919,"aliases":2920,"sourceIds":2923,"published":2924,"modified":2925,"checkedAt":7,"severity":2926,"references":2930,"versionKeys":2941,"packageCount":32,"repositoryCount":1736},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[2921,2922],"CVE-2026-34525","PYSEC-2026-2103",[153,2922],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[2927,2929],{"type":1716,"score":2928},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1644,"score":1750},[2931,2933,2935,2937,2939,2940],{"type":1653,"url":2932},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1648,"url":2934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1653,"url":2936},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1653,"url":2938},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":154,"slug":2943,"dossier":46,"summary":2944,"aliases":2945,"sourceIds":2949,"published":2950,"modified":2951,"checkedAt":7,"severity":2952,"references":2957,"versionKeys":2973,"packageCount":32,"repositoryCount":454},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[2946,2947,2948],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[154],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[2953,2955],{"type":1644,"score":2954},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1716,"score":2956},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2958,2960,2962,2964,2965,2967,2969,2971],{"type":1648,"url":2959},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1659,"url":2961},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1659,"url":2963},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1656,"url":1848},{"type":1659,"url":2966},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1659,"url":2968},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1659,"url":2970},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1659,"url":2972},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1860,1861],{"id":155,"slug":2975,"dossier":46,"summary":2976,"aliases":2977,"sourceIds":2981,"published":2982,"modified":2983,"checkedAt":7,"severity":2984,"references":2988,"versionKeys":3026,"packageCount":32,"repositoryCount":104},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2978,2979,2980],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[155,2980],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[2985,2987],{"type":1716,"score":2986},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1644,"score":1719},[2989,2991,2993,2995,2997,2999,3000,3002,3004,3006,3007,3009,3011,3013,3014,3016,3018,3020,3022,3024],{"type":1659,"url":2990},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1648,"url":2992},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1659,"url":2994},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1659,"url":2996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1659,"url":2998},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1656,"url":2341},{"type":1659,"url":3001},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1659,"url":3003},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1659,"url":3005},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1648,"url":1992},{"type":1648,"url":3008},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1648,"url":3010},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1648,"url":3012},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1648,"url":1994},{"type":1648,"url":3015},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1648,"url":3017},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1648,"url":3019},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1648,"url":3021},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1648,"url":3023},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1648,"url":3025},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[3027,3028,3029,2345,2346,2347,2348],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0",{"id":156,"slug":3031,"dossier":46,"summary":3032,"aliases":3033,"sourceIds":3036,"published":3037,"modified":3038,"checkedAt":7,"severity":3039,"references":3042,"versionKeys":3059,"packageCount":32,"repositoryCount":454},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[3034,3035],"CVE-2025-27516","PYSEC-2026-1471",[156,3035],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[3040],{"type":1716,"score":3041},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3043,3045,3047,3049,3051,3053,3055,3057],{"type":1659,"url":3044},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1648,"url":3046},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1653,"url":3048},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1656,"url":3050},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1659,"url":3052},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1659,"url":3054},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1656,"url":3056},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1648,"url":3058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[3060,3061],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":157,"slug":3063,"dossier":46,"summary":3064,"aliases":3065,"sourceIds":3069,"published":3070,"modified":3071,"checkedAt":7,"severity":3072,"references":3077,"versionKeys":3093,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[3066,3067,3068],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[157,3068],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[3073,3075],{"type":1644,"score":3074},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1716,"score":3076},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3078,3080,3082,3084,3085,3087,3089,3091],{"type":1648,"url":3079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1659,"url":3081},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1659,"url":3083},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1656,"url":2283},{"type":1659,"url":3086},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1659,"url":3088},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1656,"url":3090},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1648,"url":3092},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[2289],{"id":158,"slug":3095,"dossier":46,"summary":3096,"aliases":3097,"sourceIds":3101,"published":3102,"modified":3103,"checkedAt":7,"severity":3104,"references":3108,"versionKeys":3126,"packageCount":32,"repositoryCount":454},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[3098,3099,3100],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[158],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[3105,3106],{"type":1644,"score":2102},{"type":1716,"score":3107},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3109,3111,3113,3115,3117,3119,3120,3122,3124],{"type":1648,"url":3110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1659,"url":3112},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1659,"url":3114},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1659,"url":3116},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1659,"url":3118},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1656,"url":1848},{"type":1659,"url":3121},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1659,"url":3123},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1659,"url":3125},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1860,1861],{"id":159,"slug":3128,"dossier":46,"summary":3129,"aliases":3130,"sourceIds":3133,"published":3134,"modified":3135,"checkedAt":7,"severity":3136,"references":3141,"versionKeys":3160,"packageCount":32,"repositoryCount":1704},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[3131,3132],"CVE-2026-5241","PYSEC-2026-2290",[159,3132],"2026-06-03T14:16:46.337Z","2026-07-16T23:59:26.091024755Z",[3137,3139],{"type":1644,"score":3138},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1644,"score":3140},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3142,3144,3146,3148,3149,3151,3153,3154,3156,3158],{"type":1648,"url":3143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1653,"url":3145},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1648,"url":3147},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1648,"url":1996},{"type":1659,"url":3150},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":1841,"url":3152},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1656,"url":1690},{"type":1659,"url":3155},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1692,"url":3157},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1659,"url":3159},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",[1697,1698,1699,1700,1701,1702,1703],{"id":160,"slug":3162,"dossier":46,"summary":3163,"aliases":3164,"sourceIds":3167,"published":3168,"modified":3169,"checkedAt":7,"severity":3170,"references":3173,"versionKeys":3184,"packageCount":32,"repositoryCount":65},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[3165,3166],"CVE-2025-69230","PYSEC-2026-1105",[160,3166],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[3171],{"type":1716,"score":3172},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3174,3176,3178,3180,3181,3182],{"type":1659,"url":3175},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1648,"url":3177},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1653,"url":3179},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":3183},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[1728,1729,1730,1731,1732,1733,1734],{"id":161,"slug":3186,"dossier":46,"summary":2580,"aliases":3187,"sourceIds":3190,"published":3191,"modified":3192,"checkedAt":7,"severity":3193,"references":3196,"versionKeys":3207,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[3188,3189],"CVE-2025-1194","PYSEC-2026-1984",[161,3189],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[3194],{"type":1644,"score":3195},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3197,3199,3201,3202,3204,3205],{"type":1648,"url":3198},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1659,"url":3200},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1656,"url":1690},{"type":1659,"url":3203},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1656,"url":1886},{"type":1648,"url":3206},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1697],{"id":162,"slug":3209,"dossier":46,"summary":3210,"aliases":3211,"sourceIds":3214,"published":3215,"modified":3216,"checkedAt":7,"severity":3217,"references":3220,"versionKeys":3226,"packageCount":32,"repositoryCount":1736},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[3212,3213],"CVE-2026-54278","PYSEC-2026-2111",[162,3213],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[3218,3219],{"type":1716,"score":2039},{"type":1644,"score":1719},[3221,3223,3224],{"type":1648,"url":3222},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1656,"url":1724},{"type":1653,"url":3225},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[1728,1729,1730,1731,1732,1733,1734,1735],{"id":163,"slug":3228,"dossier":46,"summary":3229,"aliases":3230,"sourceIds":3233,"published":3234,"modified":3235,"checkedAt":7,"severity":3236,"references":3239,"versionKeys":3258,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[3231,3232],"CVE-2024-34062","PYSEC-2026-1976",[163,3232],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[3237],{"type":1644,"score":3238},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3240,3242,3244,3246,3248,3250,3252,3254,3256],{"type":1659,"url":3241},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1648,"url":3243},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1659,"url":3245},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1656,"url":3247},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1659,"url":3249},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1659,"url":3251},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1659,"url":3253},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1656,"url":3255},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1648,"url":3257},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[3259],"pypi:tqdm@4.66.2",{"id":164,"slug":3261,"dossier":46,"summary":3262,"aliases":3263,"sourceIds":3266,"published":3267,"modified":3268,"checkedAt":7,"severity":3269,"references":3271,"versionKeys":3284,"packageCount":32,"repositoryCount":65},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[3264,3265],"CVE-2025-69229","PYSEC-2026-1106",[164,3265],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[3270],{"type":1716,"score":2039},[3272,3274,3276,3278,3280,3281,3282],{"type":1659,"url":3273},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1648,"url":3275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1659,"url":3277},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1659,"url":3279},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":3283},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[1728,1729,1730,1731,1732,1733,1734],{"id":165,"slug":3286,"dossier":91,"summary":3287,"aliases":3288,"sourceIds":3291,"published":3292,"modified":3293,"checkedAt":7,"severity":3294,"references":3299,"versionKeys":3309,"packageCount":32,"repositoryCount":395},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3289,3290],"CVE-2026-25645","PYSEC-2026-2275",[165,3290],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[3295,3297],{"type":1644,"score":3296},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1644,"score":3298},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3300,3302,3304,3306,3307],{"type":1648,"url":3301},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1648,"url":3303},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1653,"url":3305},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1656,"url":2855},{"type":1648,"url":3308},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2865,2866,3310,3311],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":166,"slug":3313,"dossier":46,"summary":3314,"aliases":3315,"sourceIds":3318,"published":3319,"modified":3320,"checkedAt":7,"severity":3321,"references":3324,"versionKeys":3334,"packageCount":32,"repositoryCount":435},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[3316,3317],"CVE-2026-33230","PYSEC-2026-2235",[166,3317],"2026-03-18T20:23:33Z","2026-07-13T07:26:40.492720011Z",[3322],{"type":1644,"score":3323},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3325,3327,3329,3331,3333],{"type":1692,"url":3326},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":1648,"url":3328},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":1653,"url":3330},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":1653,"url":3332},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":1656,"url":1986},[2000,2001],{"id":167,"slug":3336,"dossier":91,"summary":3337,"aliases":3338,"sourceIds":3341,"published":3342,"modified":3343,"checkedAt":7,"severity":3344,"references":3346,"versionKeys":3357,"packageCount":32,"repositoryCount":1819},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3339,3340],"CVE-2025-66418","PYSEC-2026-1998",[167,3340],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[3345],{"type":1716,"score":1799},[3347,3349,3351,3353,3354,3355],{"type":1659,"url":3348},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1648,"url":3350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1653,"url":3352},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1656,"url":1808},{"type":1656,"url":1810},{"type":1648,"url":3356},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1814,1815,1816,1817,1818],{"id":168,"slug":3359,"dossier":46,"summary":3360,"aliases":3361,"sourceIds":3364,"published":3365,"modified":3366,"checkedAt":7,"severity":3367,"references":3370,"versionKeys":3385,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3362,3363],"CVE-2024-56201","PYSEC-2026-1472",[168,3363],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[3368,3369],{"type":1644,"score":2270},{"type":1716,"score":3041},[3371,3373,3375,3377,3379,3380,3382,3383],{"type":1659,"url":3372},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1648,"url":3374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1659,"url":3376},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1653,"url":3378},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1656,"url":3050},{"type":1659,"url":3381},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1656,"url":3056},{"type":1648,"url":3384},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[3060],{"id":169,"slug":3387,"dossier":46,"summary":3388,"aliases":3389,"sourceIds":3392,"published":3393,"modified":3394,"checkedAt":7,"severity":3395,"references":3398,"versionKeys":3411,"packageCount":32,"repositoryCount":32},"ghsa-gphh-9q3h-jgpp-606af12e","banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI",[3390,3391],"CVE-2026-44209","PYSEC-2026-2390",[169,3391],"2026-05-08T20:36:22Z","2026-07-13T16:42:52.498372734Z",[3396],{"type":1644,"score":3397},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3399,3401,3403,3405,3407,3409],{"type":1659,"url":3400},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",{"type":1648,"url":3402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44209",{"type":1659,"url":3404},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F74",{"type":1656,"url":3406},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks",{"type":1656,"url":3408},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbanks",{"type":1648,"url":3410},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",[3412],"pypi:banks@2.2.0",{"id":170,"slug":3414,"dossier":46,"summary":3415,"aliases":3416,"sourceIds":3419,"published":3420,"modified":3421,"checkedAt":7,"severity":3422,"references":3425,"versionKeys":3446,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3417,3418],"CVE-2024-34064","PYSEC-2026-1474",[170,3418],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[3423],{"type":1644,"score":3424},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3426,3428,3430,3432,3433,3435,3437,3439,3441,3443,3444],{"type":1659,"url":3427},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1648,"url":3429},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1653,"url":3431},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1656,"url":3050},{"type":1659,"url":3434},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1659,"url":3436},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1659,"url":3438},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1659,"url":3440},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1659,"url":3442},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1656,"url":3056},{"type":1648,"url":3445},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[3060],{"id":171,"slug":3448,"dossier":46,"summary":3449,"aliases":3450,"sourceIds":3453,"published":3454,"modified":3455,"checkedAt":7,"severity":3456,"references":3459,"versionKeys":3473,"packageCount":32,"repositoryCount":435},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[3451,3452],"CVE-2026-0846","PYSEC-2026-97",[171,3452],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[3457,3458],{"type":1644,"score":2468},{"type":1644,"score":2470},[3460,3462,3464,3466,3467,3469,3471],{"type":1648,"url":3461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":1659,"url":3463},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":1659,"url":3465},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":1656,"url":1986},{"type":1659,"url":3468},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":1692,"url":3470},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":1648,"url":3472},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[2000,2001],{"id":172,"slug":3475,"dossier":46,"summary":3476,"aliases":3477,"sourceIds":3480,"published":3481,"modified":3482,"checkedAt":7,"severity":3483,"references":3486,"versionKeys":3495,"packageCount":32,"repositoryCount":1736},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[3478,3479],"CVE-2026-34513","PYSEC-2026-2095",[172,3479],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[3484,3485],{"type":1716,"score":1927},{"type":1644,"score":1719},[3487,3489,3491,3493,3494],{"type":1653,"url":3488},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1648,"url":3490},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1653,"url":3492},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":173,"slug":3497,"dossier":46,"summary":3498,"aliases":3499,"sourceIds":3502,"published":3503,"modified":3504,"checkedAt":7,"severity":3505,"references":3509,"versionKeys":3517,"packageCount":32,"repositoryCount":1736},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[3500,3501],"CVE-2026-47265","PYSEC-2026-2105",[173,3501],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[3506,3508],{"type":1716,"score":3507},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1644,"score":2470},[3510,3512,3514,3516],{"type":1653,"url":3511},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1648,"url":3513},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1653,"url":3515},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1656,"url":1724},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":174,"slug":3519,"dossier":46,"summary":3520,"aliases":3521,"sourceIds":3524,"published":3525,"modified":3526,"checkedAt":7,"severity":3527,"references":3531,"versionKeys":3537,"packageCount":32,"repositoryCount":1736},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[3522,3523],"CVE-2026-54276","PYSEC-2026-2109",[174,3523],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[3528,3530],{"type":1716,"score":3529},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1644,"score":3323},[3532,3534,3536],{"type":1648,"url":3533},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1653,"url":3535},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1656,"url":1724},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":175,"slug":3539,"dossier":46,"summary":3540,"aliases":3541,"sourceIds":3544,"published":3545,"modified":3546,"checkedAt":7,"severity":3547,"references":3551,"versionKeys":3568,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[3542,3543],"CVE-2025-67221","PYSEC-2026-107",[175,3543],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[3548,3550],{"type":1716,"score":3549},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1644,"score":1719},[3552,3554,3556,3558,3560,3562,3564,3566],{"type":1648,"url":3553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":1659,"url":3555},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":1659,"url":3557},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":1659,"url":3559},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":1656,"url":3561},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":1692,"url":3563},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":1659,"url":3565},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":1648,"url":3567},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[3569,3570,3571,3572],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":176,"slug":3574,"dossier":46,"summary":3575,"aliases":3576,"sourceIds":3579,"published":3580,"modified":3581,"checkedAt":7,"severity":3582,"references":3586,"versionKeys":3602,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[3577,3578],"CVE-2024-11394","PYSEC-2024-229",[176,3578],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[3583,3585],{"type":1644,"score":3584},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1644,"score":3074},[3587,3589,3591,3593,3594,3596,3598,3600],{"type":1648,"url":3588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1659,"url":3590},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1659,"url":3592},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1656,"url":1690},{"type":1659,"url":3595},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1659,"url":3597},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1648,"url":3599},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1648,"url":3601},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1697],{"id":177,"slug":3604,"dossier":46,"summary":3605,"aliases":3606,"sourceIds":3609,"published":3610,"modified":3611,"checkedAt":7,"severity":3612,"references":3617,"versionKeys":3635,"packageCount":32,"repositoryCount":1736},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[3607,3608],"CVE-2026-34993","PYSEC-2026-2104",[177,3608],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[3613,3615],{"type":1644,"score":3614},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1644,"score":3616},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3618,3620,3622,3624,3625,3627,3629,3631,3632,3633],{"type":1653,"url":3619},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1648,"url":3621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1653,"url":3623},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1656,"url":1724},{"type":1659,"url":3626},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1659,"url":3628},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1648,"url":3630},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1648,"url":3147},{"type":1648,"url":1996},{"type":1841,"url":3634},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[1728,1729,1730,1731,1732,1733,1734,1735],{"id":178,"slug":3637,"dossier":46,"summary":3638,"aliases":3639,"sourceIds":3642,"published":3643,"modified":3644,"checkedAt":7,"severity":3645,"references":3647,"versionKeys":3658,"packageCount":32,"repositoryCount":65},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[3640,3641],"CVE-2025-69227","PYSEC-2026-1107",[178,3641],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[3646],{"type":1716,"score":2039},[3648,3650,3652,3654,3655,3656],{"type":1659,"url":3649},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1648,"url":3651},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1659,"url":3653},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":3657},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[1728,1729,1730,1731,1732,1733,1734],{"id":179,"slug":3660,"dossier":46,"summary":3661,"aliases":3662,"sourceIds":3665,"published":3666,"modified":3667,"checkedAt":7,"severity":3668,"references":3670,"versionKeys":3683,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[3663,3664],"CVE-2025-3264","PYSEC-2026-1985",[179,3664],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[3669],{"type":1644,"score":2077},[3671,3673,3675,3677,3678,3680,3681],{"type":1648,"url":3672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1659,"url":3674},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1659,"url":3676},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1656,"url":1690},{"type":1659,"url":3679},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1656,"url":1886},{"type":1648,"url":3682},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1697],{"id":180,"slug":3685,"dossier":46,"summary":3686,"aliases":3687,"sourceIds":3690,"published":3691,"modified":3692,"checkedAt":7,"severity":3693,"references":3695,"versionKeys":3712,"packageCount":32,"repositoryCount":435},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[3688,3689],"CVE-2026-33231","PYSEC-2026-2236",[180,3689],"2026-03-19T12:42:20Z","2026-07-13T07:26:55.331693381Z",[3694],{"type":1644,"score":1719},[3696,3698,3700,3702,3703,3705,3707,3708,3709,3710],{"type":1692,"url":3697},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":1648,"url":3699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":1653,"url":3701},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":1656,"url":1986},{"type":1659,"url":3704},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":1659,"url":3706},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":1648,"url":1994},{"type":1648,"url":3630},{"type":1648,"url":1996},{"type":1841,"url":3711},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[2000,2001],{"id":181,"slug":3714,"dossier":46,"summary":3715,"aliases":3716,"sourceIds":3719,"published":3720,"modified":3721,"checkedAt":7,"severity":3722,"references":3726,"versionKeys":3740,"packageCount":32,"repositoryCount":65},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[3717,3718],"CVE-2026-30922","PYSEC-2026-2263",[181,3718],"2026-03-17T16:17:33Z","2026-07-13T07:26:46.403932690Z",[3723,3725],{"type":1644,"score":3724},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":1644,"score":1719},[3727,3729,3731,3733,3735,3736,3738],{"type":1692,"url":3728},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":1648,"url":3730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":1653,"url":3732},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":1659,"url":3734},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":1656,"url":2418},{"type":1659,"url":3737},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.3",{"type":1659,"url":3739},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[2430],{"id":182,"slug":3742,"dossier":46,"summary":3743,"aliases":3744,"sourceIds":3747,"published":3748,"modified":3749,"checkedAt":7,"severity":3750,"references":3755,"versionKeys":3764,"packageCount":32,"repositoryCount":1736},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[3745,3746],"CVE-2026-34516","PYSEC-2026-2098",[182,3746],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[3751,3752,3753],{"type":1644,"score":1719},{"type":1716,"score":2039},{"type":1716,"score":3754},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3756,3758,3760,3762,3763],{"type":1653,"url":3757},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1648,"url":3759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1653,"url":3761},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":183,"slug":3766,"dossier":46,"summary":3767,"aliases":3768,"sourceIds":3771,"published":3772,"modified":3773,"checkedAt":7,"severity":3774,"references":3777,"versionKeys":3783,"packageCount":32,"repositoryCount":1736},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[3769,3770],"CVE-2026-50269","PYSEC-2026-2106",[183,3770],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[3775,3776],{"type":1716,"score":1748},{"type":1644,"score":1719},[3778,3780,3782],{"type":1648,"url":3779},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1653,"url":3781},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1656,"url":1724},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":184,"slug":3785,"dossier":46,"summary":3786,"aliases":3787,"sourceIds":3790,"published":3791,"modified":3792,"checkedAt":7,"severity":3793,"references":3796,"versionKeys":3804,"packageCount":32,"repositoryCount":435},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[3788,3789],"CVE-2026-44432","PYSEC-2026-142",[184,3789],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[3794,3795],{"type":1644,"score":1719},{"type":1716,"score":1799},[3797,3799,3801,3803],{"type":1648,"url":3798},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1648,"url":3800},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1659,"url":3802},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1656,"url":1808},[3805],"pypi:urllib3@2.6.3",{"id":185,"slug":3807,"dossier":46,"summary":3808,"aliases":3809,"sourceIds":3812,"published":3813,"modified":3814,"checkedAt":7,"severity":3815,"references":3818,"versionKeys":3831,"packageCount":32,"repositoryCount":407},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[3810,3811],"CVE-2026-28684","PYSEC-2026-2270",[185,3811],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[3816],{"type":1644,"score":3817},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3819,3821,3823,3825,3827,3829],{"type":1653,"url":3820},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1648,"url":3822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1653,"url":3824},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1659,"url":3826},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1656,"url":3828},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1648,"url":3830},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[3832,3833,3834,3835],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":186,"slug":3837,"dossier":46,"summary":3838,"aliases":3839,"sourceIds":3842,"published":3843,"modified":3844,"checkedAt":7,"severity":3845,"references":3847,"versionKeys":3858,"packageCount":32,"repositoryCount":65},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[3840,3841],"CVE-2025-69225","PYSEC-2026-1109",[186,3841],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[3846],{"type":1716,"score":1748},[3848,3850,3852,3854,3855,3856],{"type":1659,"url":3849},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1648,"url":3851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1653,"url":3853},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1656,"url":1724},{"type":1656,"url":2195},{"type":1648,"url":3857},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[1728,1729,1730,1731,1732,1733,1734],{"id":187,"slug":3860,"dossier":46,"summary":3861,"aliases":3862,"sourceIds":3865,"published":3866,"modified":3867,"checkedAt":7,"severity":3868,"references":3871,"versionKeys":3880,"packageCount":32,"repositoryCount":1736},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[3863,3864],"CVE-2026-34519","PYSEC-2026-2101",[187,3864],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[3869,3870],{"type":1716,"score":1748},{"type":1644,"score":1750},[3872,3874,3876,3878,3879],{"type":1653,"url":3873},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1648,"url":3875},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1653,"url":3877},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":188,"slug":3882,"dossier":46,"summary":3883,"aliases":3884,"sourceIds":3887,"published":3888,"modified":3889,"checkedAt":7,"severity":3890,"references":3892,"versionKeys":3908,"packageCount":32,"repositoryCount":435},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[3885,3886],"CVE-2026-54293","PYSEC-2026-2078",[188,3886],"2026-06-16T14:34:15Z","2026-07-16T21:46:12.649844268Z",[3891],{"type":1644,"score":2470},[3893,3895,3897,3899,3901,3903,3904,3906],{"type":1692,"url":3894},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":1648,"url":3896},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":1653,"url":3898},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":1659,"url":3900},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":1841,"url":3902},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":1656,"url":1986},{"type":1659,"url":3905},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":1659,"url":3907},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[2000,2001],{"id":189,"slug":3910,"dossier":46,"summary":3911,"aliases":3912,"sourceIds":3915,"published":3916,"modified":3917,"checkedAt":7,"severity":3918,"references":3921,"versionKeys":3930,"packageCount":32,"repositoryCount":1736},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[3913,3914],"CVE-2026-34515","PYSEC-2026-2097",[189,3914],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[3919,3920],{"type":1716,"score":3507},{"type":1644,"score":2470},[3922,3924,3926,3928,3929],{"type":1653,"url":3923},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1648,"url":3925},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1653,"url":3927},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":190,"slug":3932,"dossier":46,"summary":3933,"aliases":3934,"sourceIds":3937,"published":3666,"modified":3938,"checkedAt":7,"severity":3939,"references":3942,"versionKeys":3955,"packageCount":32,"repositoryCount":454},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[3935,3936],"CVE-2025-3777","PYSEC-2026-1986",[190,3936],"2026-07-07T17:56:47.225461188Z",[3940],{"type":1644,"score":3941},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3943,3945,3947,3948,3950,3952,3953],{"type":1648,"url":3944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1659,"url":3946},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1656,"url":1690},{"type":1659,"url":3949},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1659,"url":3951},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1656,"url":1886},{"type":1648,"url":3954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1697,1698],{"id":191,"slug":3957,"dossier":46,"summary":3958,"aliases":3959,"sourceIds":3962,"published":3963,"modified":3964,"checkedAt":7,"severity":3965,"references":3967,"versionKeys":3979,"packageCount":32,"repositoryCount":65},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3960,3961],"CVE-2025-50181","PYSEC-2026-1999",[191,3961],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[3966],{"type":1644,"score":2013},[3968,3970,3972,3974,3975,3976,3977],{"type":1659,"url":3969},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1648,"url":3971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1653,"url":3973},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1656,"url":1808},{"type":1659,"url":2023},{"type":1656,"url":1810},{"type":1648,"url":3978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1814,1815,1816,1817],{"id":192,"slug":3981,"dossier":91,"summary":3982,"aliases":3983,"sourceIds":3987,"published":3988,"modified":3989,"checkedAt":7,"severity":3990,"references":3993,"versionKeys":4005,"packageCount":32,"repositoryCount":1819},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[3984,3985,3986],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[192,3986],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[3991,3992],{"type":1716,"score":2986},{"type":1644,"score":2518},[3994,3995,3997,3999,4001,4003,4004],{"type":1659,"url":2990},{"type":1653,"url":3996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1648,"url":3998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1653,"url":4000},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1653,"url":4002},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1656,"url":2341},{"type":1648,"url":2343},[3027,3028,3029,2345,2346,2347,2348,2349],{"id":193,"slug":4007,"dossier":46,"summary":4008,"aliases":4009,"sourceIds":4012,"published":3666,"modified":4013,"checkedAt":7,"severity":4014,"references":4016,"versionKeys":4027,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[4010,4011],"CVE-2025-3263","PYSEC-2026-1987",[193,4011],"2026-07-07T17:56:57.889099913Z",[4015],{"type":1644,"score":2077},[4017,4019,4020,4021,4022,4024,4025],{"type":1648,"url":4018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1659,"url":3674},{"type":1659,"url":3676},{"type":1656,"url":1690},{"type":1659,"url":4023},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1656,"url":1886},{"type":1648,"url":4026},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1697],{"id":194,"slug":4029,"dossier":46,"summary":4030,"aliases":4031,"sourceIds":4034,"published":4035,"modified":4036,"checkedAt":7,"severity":4037,"references":4041,"versionKeys":4054,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[4032,4033],"CVE-2024-56326","PYSEC-2026-1475",[194,4033],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[4038,4040],{"type":1644,"score":4039},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1716,"score":3041},[4042,4044,4046,4048,4049,4050,4051,4052],{"type":1659,"url":4043},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1648,"url":4045},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1653,"url":4047},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1656,"url":3050},{"type":1659,"url":3381},{"type":1659,"url":3052},{"type":1656,"url":3056},{"type":1648,"url":4053},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[3060],{"id":195,"slug":4056,"dossier":91,"summary":4057,"aliases":4058,"sourceIds":4061,"published":4062,"modified":4063,"checkedAt":7,"severity":4064,"references":4068,"versionKeys":4074,"packageCount":32,"repositoryCount":395},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[4059,4060],"CVE-2026-44431","PYSEC-2026-141",[195,4060],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[4065,4066],{"type":1644,"score":2821},{"type":1716,"score":4067},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4069,4071,4073],{"type":1648,"url":4070},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1648,"url":4072},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1656,"url":1808},[1814,1815,1816,1817,1818,3805],{"id":196,"slug":4076,"dossier":46,"summary":4077,"aliases":4078,"sourceIds":4082,"published":4083,"modified":4084,"checkedAt":7,"severity":4085,"references":4089,"versionKeys":4107,"packageCount":32,"repositoryCount":1736},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[4079,4080,4081],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[196],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[4086,4087],{"type":1644,"score":2102},{"type":1716,"score":4088},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4090,4092,4094,4096,4098,4100,4101,4103,4105],{"type":1648,"url":4091},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1659,"url":4093},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1659,"url":4095},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1659,"url":4097},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1659,"url":4099},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1656,"url":1848},{"type":1659,"url":4102},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1659,"url":4104},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1659,"url":4106},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1860,1861,1862,2727,2728,4108,4109,4110],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":197,"slug":4112,"dossier":46,"summary":4113,"aliases":4114,"sourceIds":4117,"published":4118,"modified":4119,"checkedAt":7,"severity":4120,"references":4123,"versionKeys":4138,"packageCount":32,"repositoryCount":2350},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[4115,4116],"CVE-2026-22701","PYSEC-2026-1374",[197,4116],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[4121],{"type":1644,"score":4122},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4124,4126,4128,4130,4132,4134,4136],{"type":1659,"url":4125},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1648,"url":4127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1659,"url":4129},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1659,"url":4131},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1656,"url":4133},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1656,"url":4135},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1648,"url":4137},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[4139,4140,4141,4142],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":198,"slug":4144,"dossier":46,"summary":4145,"aliases":4146,"sourceIds":4149,"published":4150,"modified":4151,"checkedAt":7,"severity":4152,"references":4155,"versionKeys":4169,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[4147,4148],"CVE-2025-2099","PYSEC-2025-40",[198,4148],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[4153,4154],{"type":1644,"score":2077},{"type":1644,"score":1719},[4156,4158,4160,4162,4163,4165,4167],{"type":1648,"url":4157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1659,"url":4159},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1653,"url":4161},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1656,"url":1690},{"type":1659,"url":4164},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1659,"url":4166},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1648,"url":4168},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1697],{"id":199,"slug":4171,"dossier":46,"summary":3575,"aliases":4172,"sourceIds":4175,"published":4176,"modified":4177,"checkedAt":7,"severity":4178,"references":4182,"versionKeys":4196,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[4173,4174],"CVE-2024-11392","PYSEC-2024-227",[199,4174],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[4179,4181],{"type":1644,"score":4180},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1644,"score":3074},[4183,4185,4186,4187,4188,4190,4192,4194],{"type":1648,"url":4184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1659,"url":3590},{"type":1659,"url":3592},{"type":1656,"url":1690},{"type":1659,"url":4189},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1659,"url":4191},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1648,"url":4193},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1648,"url":4195},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1697],{"id":200,"slug":4198,"dossier":91,"summary":4199,"aliases":4200,"sourceIds":4204,"published":4205,"modified":4206,"checkedAt":7,"severity":4207,"references":4210,"versionKeys":4225,"packageCount":32,"repositoryCount":1819},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[4201,4202,4203],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[200,4203],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[4208,4209],{"type":1644,"score":1836},{"type":1716,"score":2334},[4211,4213,4215,4217,4219,4220,4221,4223],{"type":1659,"url":4212},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1648,"url":4214},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1659,"url":4216},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1659,"url":4218},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1656,"url":2341},{"type":1659,"url":2343},{"type":1656,"url":4222},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1648,"url":4224},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":201,"slug":4227,"dossier":46,"summary":4228,"aliases":4229,"sourceIds":4232,"published":4233,"modified":4234,"checkedAt":7,"severity":4235,"references":4237,"versionKeys":4252,"packageCount":32,"repositoryCount":454},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[4230,4231],"CVE-2025-6051","PYSEC-2026-1988",[201,4231],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[4236],{"type":1644,"score":2077},[4238,4240,4242,4244,4246,4247,4249,4250],{"type":1648,"url":4239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1659,"url":4241},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1659,"url":4243},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1659,"url":4245},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1656,"url":1690},{"type":1659,"url":4248},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1656,"url":1886},{"type":1648,"url":4251},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1697,1698],{"id":202,"slug":4254,"dossier":46,"summary":4255,"aliases":4256,"sourceIds":4257,"published":4258,"modified":4259,"checkedAt":7,"severity":4260,"references":4262,"versionKeys":4266,"packageCount":32,"repositoryCount":435},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[],[202],"2026-03-18T20:17:43Z","2026-03-25T23:29:13.324989Z",[4261],{"type":1716,"score":2334},[4263,4265],{"type":1659,"url":4264},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":1656,"url":1986},[2000,2001],{"id":203,"slug":4268,"dossier":46,"summary":4269,"aliases":4270,"sourceIds":4273,"published":4274,"modified":4275,"checkedAt":7,"severity":4276,"references":4279,"versionKeys":4292,"packageCount":32,"repositoryCount":2350},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[4271,4272],"CVE-2026-25087","PYSEC-2026-113",[203,4272],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[4277],{"type":1644,"score":4278},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[4280,4282,4284,4286,4288,4290],{"type":1648,"url":4281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1653,"url":4283},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1656,"url":4285},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1659,"url":4287},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1648,"url":4289},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1648,"url":4291},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[4293,4294,4295,4296],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":204,"slug":4298,"dossier":46,"summary":4299,"aliases":4300,"sourceIds":4304,"published":3102,"modified":4305,"checkedAt":7,"severity":4306,"references":4309,"versionKeys":4327,"packageCount":32,"repositoryCount":2350},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[4301,4302,4303],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[204],"2026-07-17T17:15:51.452848951Z",[4307,4308],{"type":1644,"score":2102},{"type":1716,"score":4088},[4310,4312,4314,4316,4318,4320,4321,4323,4325],{"type":1648,"url":4311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1659,"url":4313},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1659,"url":4315},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1659,"url":4317},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1659,"url":4319},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1656,"url":1848},{"type":1659,"url":4322},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1659,"url":4324},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1659,"url":4326},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[4328,1860,1861,1862,2727,2728,4108,4109,4110],"pypi:torch@2.10.0",{"id":205,"slug":4330,"dossier":46,"summary":4331,"aliases":4332,"sourceIds":4335,"published":4336,"modified":4337,"checkedAt":7,"severity":4338,"references":4340,"versionKeys":4353,"packageCount":32,"repositoryCount":4357},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[4333,4334],"CVE-2026-41066","PYSEC-2026-87",[205,4334],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[4339],{"type":1644,"score":2470},[4341,4343,4345,4347,4349,4351],{"type":1648,"url":4342},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":1648,"url":4344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":1841,"url":4346},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":1656,"url":4348},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":1659,"url":4350},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":1659,"url":4352},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[4354,4355,4356],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",5,{"id":206,"slug":4359,"dossier":46,"summary":4360,"aliases":4361,"sourceIds":4365,"published":3102,"modified":4366,"checkedAt":7,"severity":4367,"references":4370,"versionKeys":4385,"packageCount":32,"repositoryCount":1704},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[4362,4363,4364],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[206],"2026-06-10T17:41:15.774477397Z",[4368,4369],{"type":1644,"score":2102},{"type":1716,"score":3107},[4371,4373,4374,4375,4376,4378,4379,4381,4383],{"type":1648,"url":4372},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1659,"url":3112},{"type":1659,"url":3114},{"type":1659,"url":3116},{"type":1659,"url":4377},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1656,"url":1848},{"type":1659,"url":4380},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1659,"url":4382},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1659,"url":4384},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1860,1861,1862,2727,2728,4108],{"id":207,"slug":4387,"dossier":46,"summary":4388,"aliases":4389,"sourceIds":4392,"published":4393,"modified":4394,"checkedAt":7,"severity":4395,"references":4398,"versionKeys":4411,"packageCount":32,"repositoryCount":435},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[4390,4391],"CVE-2025-43859","PYSEC-2026-348",[207,4391],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[4396],{"type":1644,"score":4397},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4399,4401,4403,4405,4407,4409],{"type":1659,"url":4400},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1648,"url":4402},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1659,"url":4404},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1656,"url":4406},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1656,"url":4408},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1648,"url":4410},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[4412],"pypi:h11@0.14.0",{"id":208,"slug":4414,"dossier":46,"summary":4415,"aliases":4416,"sourceIds":4419,"published":4420,"modified":4421,"checkedAt":7,"severity":4422,"references":4426,"versionKeys":4435,"packageCount":32,"repositoryCount":1736},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[4417,4418],"CVE-2026-22815","PYSEC-2026-2094",[208,4418],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[4423,4424],{"type":1716,"score":2443},{"type":1716,"score":4425},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4427,4429,4431,4433,4434],{"type":1653,"url":4428},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1648,"url":4430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1653,"url":4432},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1656,"url":1724},{"type":1648,"url":1760},[1728,1729,1730,1731,1732,1733,1734,1735],{"id":209,"slug":4437,"dossier":46,"summary":4438,"aliases":4439,"sourceIds":4442,"published":4443,"modified":4444,"checkedAt":7,"severity":4445,"references":4448,"versionKeys":4465,"packageCount":32,"repositoryCount":2350},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[4440,4441],"CVE-2025-68146","PYSEC-2026-1375",[209,4441],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[4446],{"type":1644,"score":4447},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4449,4451,4453,4454,4456,4458,4460,4461,4463],{"type":1659,"url":4450},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1659,"url":4452},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1656,"url":4133},{"type":1659,"url":4455},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1659,"url":4457},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1659,"url":4459},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1656,"url":4135},{"type":1648,"url":4462},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1648,"url":4464},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[4139,4140,4141,4142],{"id":210,"slug":4467,"dossier":91,"summary":4468,"aliases":4469,"sourceIds":4473,"published":4474,"modified":4475,"checkedAt":7,"severity":4476,"references":4480,"versionKeys":4518,"packageCount":32,"repositoryCount":1819},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[4470,4471,4472],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[210,4472],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[4477,4478],{"type":1644,"score":1719},{"type":1716,"score":4479},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4481,4483,4485,4487,4489,4490,4492,4494,4496,4498,4500,4502,4503,4505,4507,4509,4510,4512,4514,4516],{"type":1659,"url":4482},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1648,"url":4484},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1659,"url":4486},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1659,"url":4488},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1656,"url":2341},{"type":1659,"url":4491},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1659,"url":4493},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1659,"url":4495},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1648,"url":4497},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1648,"url":4499},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1648,"url":4501},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1648,"url":3012},{"type":1648,"url":4504},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1648,"url":4506},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1648,"url":4508},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1648,"url":1994},{"type":1648,"url":4511},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1648,"url":4513},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1648,"url":4515},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1648,"url":4517},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":211,"slug":4520,"dossier":91,"summary":4521,"aliases":4522,"sourceIds":4526,"published":4527,"modified":4528,"checkedAt":7,"severity":4529,"references":4532,"versionKeys":4541,"packageCount":32,"repositoryCount":1819},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[4523,4524,4525],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[211,4525],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[4530,4531],{"type":1644,"score":1836},{"type":1716,"score":2334},[4533,4535,4537,4539,4540],{"type":1648,"url":4534},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1648,"url":4536},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1659,"url":4538},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1656,"url":2341},{"type":1648,"url":2343},[3027,3028,3029,2345,2346,2347,2348,2349],{"id":212,"slug":4543,"dossier":46,"summary":3575,"aliases":4544,"sourceIds":4547,"published":3580,"modified":4548,"checkedAt":7,"severity":4549,"references":4552,"versionKeys":4566,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[4545,4546],"CVE-2024-11393","PYSEC-2024-228",[212,4546],"2026-06-10T17:00:13.252500033Z",[4550,4551],{"type":1644,"score":3584},{"type":1644,"score":3074},[4553,4555,4556,4557,4558,4560,4562,4564],{"type":1648,"url":4554},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1659,"url":3590},{"type":1659,"url":3592},{"type":1656,"url":1690},{"type":1659,"url":4559},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1659,"url":4561},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1648,"url":4563},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1648,"url":4565},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1697],{"id":213,"slug":4568,"dossier":46,"summary":4569,"aliases":4570,"sourceIds":4574,"published":4575,"modified":4576,"checkedAt":7,"severity":4577,"references":4582,"versionKeys":4598,"packageCount":32,"repositoryCount":454},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[4571,4572,4573],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[213],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[4578,4580],{"type":1644,"score":4579},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1716,"score":4581},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4583,4585,4587,4589,4591,4592,4594,4596],{"type":1648,"url":4584},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1659,"url":4586},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1659,"url":4588},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1659,"url":4590},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1656,"url":1848},{"type":1659,"url":4593},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1659,"url":4595},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1659,"url":4597},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1860,1861],{"id":214,"slug":4600,"dossier":46,"summary":4601,"aliases":4602,"sourceIds":4605,"published":4606,"modified":4607,"checkedAt":7,"severity":4608,"references":4611,"versionKeys":4617,"packageCount":32,"repositoryCount":1736},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[4603,4604],"CVE-2026-54274","PYSEC-2026-2108",[214,4604],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[4609,4610],{"type":1716,"score":2039},{"type":1644,"score":1719},[4612,4614,4615],{"type":1648,"url":4613},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1656,"url":1724},{"type":1653,"url":4616},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[1728,1729,1730,1731,1732,1733,1734,1735],{"id":215,"slug":4619,"dossier":46,"summary":4620,"aliases":4621,"sourceIds":4625,"published":4626,"modified":4627,"checkedAt":7,"severity":4628,"references":4631,"versionKeys":4645,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[4622,4623,4624],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[215,4624],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[4629],{"type":1644,"score":4630},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4632,4634,4636,4638,4640,4642,4643],{"type":1648,"url":4633},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1648,"url":4635},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1659,"url":4637},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1653,"url":4639},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1659,"url":4641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1656,"url":2341},{"type":1659,"url":4644},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2345],{"id":216,"slug":4647,"dossier":46,"summary":276,"aliases":4648,"sourceIds":4651,"published":4652,"modified":4653,"checkedAt":7,"severity":4654,"references":4656,"versionKeys":4665,"packageCount":32,"repositoryCount":454},"pysec-2025-198-62b25ed4",[4649,4650],"BIT-pytorch-2025-46148","CVE-2025-46148",[216],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[4655],{"type":1644,"score":2821},[4657,4659,4661,4663],{"type":1648,"url":4658},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1648,"url":4660},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1841,"url":4662},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1653,"url":4664},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1860,1861],{"id":217,"slug":4667,"dossier":46,"summary":276,"aliases":4668,"sourceIds":4671,"published":4672,"modified":4673,"checkedAt":7,"severity":4674,"references":4676,"versionKeys":4682,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[4669,4670],"BIT-pytorch-2025-46149","CVE-2025-46149",[217],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[4675],{"type":1644,"score":2821},[4677,4678,4680],{"type":1648,"url":4658},{"type":1841,"url":4679},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1653,"url":4681},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1861],{"id":218,"slug":4684,"dossier":46,"summary":276,"aliases":4685,"sourceIds":4688,"published":4689,"modified":4690,"checkedAt":7,"severity":4691,"references":4693,"versionKeys":4701,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[4686,4687],"BIT-pytorch-2025-46150","CVE-2025-46150",[218],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[4692],{"type":1644,"score":2821},[4694,4695,4697,4699],{"type":1648,"url":4658},{"type":1841,"url":4696},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1841,"url":4698},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1653,"url":4700},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1861],{"id":219,"slug":4703,"dossier":46,"summary":276,"aliases":4704,"sourceIds":4707,"published":4708,"modified":4709,"checkedAt":7,"severity":4710,"references":4712,"versionKeys":4718,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[4705,4706],"BIT-pytorch-2025-46152","CVE-2025-46152",[219],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[4711],{"type":1644,"score":1874},[4713,4714,4716],{"type":1648,"url":4658},{"type":1841,"url":4715},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1653,"url":4717},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1861],{"id":220,"slug":4720,"dossier":46,"summary":276,"aliases":4721,"sourceIds":4724,"published":4725,"modified":4726,"checkedAt":7,"severity":4727,"references":4729,"versionKeys":4739,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[4722,4723],"BIT-pytorch-2025-46153","CVE-2025-46153",[220],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[4728],{"type":1644,"score":2821},[4730,4732,4733,4735,4737],{"type":1659,"url":4731},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1648,"url":4658},{"type":1648,"url":4734},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1841,"url":4736},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1653,"url":4738},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1861],{"id":221,"slug":4741,"dossier":46,"summary":276,"aliases":4742,"sourceIds":4745,"published":4746,"modified":4747,"checkedAt":7,"severity":4748,"references":4750,"versionKeys":4755,"packageCount":32,"repositoryCount":1704},"pysec-2025-203-2febb201",[4743,4744],"BIT-pytorch-2025-55551","CVE-2025-55551",[221],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[4749],{"type":1644,"score":1719},[4751,4753],{"type":1648,"url":4752},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1841,"url":4754},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1860,1861,1862,2727,2728,4108],{"id":222,"slug":4757,"dossier":46,"summary":276,"aliases":4758,"sourceIds":4761,"published":4762,"modified":4763,"checkedAt":7,"severity":4764,"references":4766,"versionKeys":4770,"packageCount":32,"repositoryCount":1704},"pysec-2025-204-cdae47da",[4759,4760],"BIT-pytorch-2025-55552","CVE-2025-55552",[222],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[4765],{"type":1644,"score":1719},[4767,4768],{"type":1648,"url":4752},{"type":1841,"url":4769},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1860,1861,1862,2727,2728,4108],{"id":223,"slug":4772,"dossier":46,"summary":276,"aliases":4773,"sourceIds":4776,"published":4777,"modified":4778,"checkedAt":7,"severity":4779,"references":4781,"versionKeys":4787,"packageCount":32,"repositoryCount":435},"pysec-2025-205-fd5e58fd",[4774,4775],"BIT-pytorch-2025-55553","CVE-2025-55553",[223],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[4780],{"type":1644,"score":1719},[4782,4783,4785],{"type":1648,"url":4752},{"type":1841,"url":4784},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1653,"url":4786},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1860,1861,1862],{"id":224,"slug":4789,"dossier":46,"summary":276,"aliases":4790,"sourceIds":4793,"published":4794,"modified":4795,"checkedAt":7,"severity":4796,"references":4798,"versionKeys":4802,"packageCount":32,"repositoryCount":1704},"pysec-2025-206-58322476",[4791,4792],"BIT-pytorch-2025-55554","CVE-2025-55554",[224],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[4797],{"type":1644,"score":1874},[4799,4800],{"type":1648,"url":4752},{"type":1841,"url":4801},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1860,1861,1862,2727,2728,4108],{"id":225,"slug":4804,"dossier":46,"summary":276,"aliases":4805,"sourceIds":4808,"published":4809,"modified":4810,"checkedAt":7,"severity":4811,"references":4813,"versionKeys":4819,"packageCount":32,"repositoryCount":435},"pysec-2025-207-2abef3fc",[4806,4807],"BIT-pytorch-2025-55557","CVE-2025-55557",[225],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[4812],{"type":1644,"score":1719},[4814,4815,4817],{"type":1648,"url":4752},{"type":1841,"url":4816},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1653,"url":4818},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1860,1861,1862],{"id":226,"slug":4821,"dossier":46,"summary":276,"aliases":4822,"sourceIds":4825,"published":4826,"modified":4827,"checkedAt":7,"severity":4828,"references":4830,"versionKeys":4836,"packageCount":32,"repositoryCount":435},"pysec-2025-208-6e93fe9d",[4823,4824],"BIT-pytorch-2025-55558","CVE-2025-55558",[226],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[4829],{"type":1644,"score":1719},[4831,4832,4834],{"type":1648,"url":4752},{"type":1841,"url":4833},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1653,"url":4835},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1860,1861,1862],{"id":227,"slug":4838,"dossier":46,"summary":276,"aliases":4839,"sourceIds":4842,"published":4843,"modified":4844,"checkedAt":7,"severity":4845,"references":4847,"versionKeys":4853,"packageCount":32,"repositoryCount":435},"pysec-2025-209-e6f352b0",[4840,4841],"BIT-pytorch-2025-55560","CVE-2025-55560",[227],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[4846],{"type":1644,"score":1719},[4848,4849,4851],{"type":1648,"url":4752},{"type":1841,"url":4850},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1653,"url":4852},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1860,1861,1862],{"id":228,"slug":4855,"dossier":46,"summary":276,"aliases":4856,"sourceIds":4858,"published":4859,"modified":4860,"checkedAt":7,"severity":4861,"references":4863,"versionKeys":4866,"packageCount":32,"repositoryCount":435},"pysec-2025-211-d8bd15de",[4857],"CVE-2025-14920",[228],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[4862],{"type":1644,"score":1683},[4864],{"type":1648,"url":4865},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1697,1698,1699],{"id":229,"slug":4868,"dossier":46,"summary":276,"aliases":4869,"sourceIds":4871,"published":4872,"modified":4873,"checkedAt":7,"severity":4874,"references":4876,"versionKeys":4879,"packageCount":32,"repositoryCount":435},"pysec-2025-212-a011b97d",[4870],"CVE-2025-14921",[229],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[4875],{"type":1644,"score":1683},[4877],{"type":1648,"url":4878},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1697,1698,1699],{"id":230,"slug":4881,"dossier":46,"summary":276,"aliases":4882,"sourceIds":4884,"published":4885,"modified":4886,"checkedAt":7,"severity":4887,"references":4889,"versionKeys":4892,"packageCount":32,"repositoryCount":435},"pysec-2025-213-9043dc9b",[4883],"CVE-2025-14924",[230],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[4888],{"type":1644,"score":1683},[4890],{"type":1648,"url":4891},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1697,1698,1699],{"id":231,"slug":4894,"dossier":46,"summary":276,"aliases":4895,"sourceIds":4897,"published":4898,"modified":4899,"checkedAt":7,"severity":4900,"references":4902,"versionKeys":4905,"packageCount":32,"repositoryCount":435},"pysec-2025-214-eb241255",[4896],"CVE-2025-14926",[231],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[4901],{"type":1644,"score":1683},[4903],{"type":1648,"url":4904},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1697,1698,1699],{"id":232,"slug":4907,"dossier":46,"summary":276,"aliases":4908,"sourceIds":4910,"published":4911,"modified":4912,"checkedAt":7,"severity":4913,"references":4915,"versionKeys":4918,"packageCount":32,"repositoryCount":435},"pysec-2025-215-6064f491",[4909],"CVE-2025-14927",[232],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[4914],{"type":1644,"score":1683},[4916],{"type":1648,"url":4917},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1697,1698,1699],{"id":233,"slug":4920,"dossier":46,"summary":276,"aliases":4921,"sourceIds":4923,"published":4924,"modified":4925,"checkedAt":7,"severity":4926,"references":4928,"versionKeys":4931,"packageCount":32,"repositoryCount":435},"pysec-2025-216-5708ed01",[4922],"CVE-2025-14928",[233],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[4927],{"type":1644,"score":1683},[4929],{"type":1648,"url":4930},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1697,1698,1699],{"id":234,"slug":4933,"dossier":46,"summary":276,"aliases":4934,"sourceIds":4936,"published":4937,"modified":4938,"checkedAt":7,"severity":4939,"references":4941,"versionKeys":4944,"packageCount":32,"repositoryCount":1704},"pysec-2025-217-2c1ad388",[4935],"CVE-2025-14929",[234],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[4940],{"type":1644,"score":1683},[4942],{"type":1648,"url":4943},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1697,1698,1699,1700,1701,1702,1703],{"id":235,"slug":4946,"dossier":46,"summary":276,"aliases":4947,"sourceIds":4949,"published":4950,"modified":4951,"checkedAt":7,"severity":4952,"references":4954,"versionKeys":4957,"packageCount":32,"repositoryCount":4357},"pysec-2025-218-39811fc3",[4948],"CVE-2025-14930",[235],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[4953],{"type":1644,"score":1683},[4955],{"type":1648,"url":4956},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1697,1698,1699,1700],{"id":236,"slug":4959,"dossier":46,"summary":276,"aliases":4960,"sourceIds":4963,"published":4964,"modified":4965,"checkedAt":7,"severity":4966,"references":4968,"versionKeys":4979,"packageCount":32,"repositoryCount":2350},"pysec-2026-139-96951ff6",[4961,4962],"BIT-pytorch-2026-4538","CVE-2026-4538",[236],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[4967],{"type":1644,"score":4039},[4969,4971,4973,4975,4977],{"type":1659,"url":4970},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1648,"url":4972},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1648,"url":4974},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1841,"url":4976},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1653,"url":4978},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[4328,1860,1861,1862,2727,2728,4108,4109,4110],{"id":237,"slug":4981,"dossier":46,"summary":276,"aliases":4982,"sourceIds":4984,"published":4985,"modified":4986,"checkedAt":7,"severity":4987,"references":4989,"versionKeys":4992,"packageCount":32,"repositoryCount":435},"pysec-2026-2085-e081ac1d",[4983],"CVE-2026-12252",[237],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[4988],{"type":1644,"score":1683},[4990],{"type":1692,"url":4991},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[2000,2001],{"id":238,"slug":4994,"dossier":91,"summary":276,"aliases":4995,"sourceIds":4998,"published":4999,"modified":5000,"checkedAt":7,"severity":5001,"references":5004,"versionKeys":5019,"packageCount":32,"repositoryCount":41},"pysec-2026-2132-627bf7c7",[4996,4997],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[238],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5002],{"type":1644,"score":5003},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5005,5007,5009,5011,5013,5015,5017],{"type":1659,"url":5006},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1659,"url":5008},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1648,"url":5010},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1648,"url":5012},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1841,"url":5014},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1653,"url":5016},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1692,"url":5018},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5020,5021,5022,5023,5024,5025],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":239,"slug":5027,"dossier":91,"summary":276,"aliases":5028,"sourceIds":5032,"published":5033,"modified":5034,"checkedAt":7,"severity":5035,"references":5037,"versionKeys":5044,"packageCount":32,"repositoryCount":1819},"pysec-2026-2253-e1ccf3df",[5029,5030,5031],"BIT-pillow-2026-54059","CVE-2026-54059","GHSA-8v84-f9pq-wr9x",[239],"2026-07-06T19:17:08.127Z","2026-07-13T07:26:49.281845979Z",[5036],{"type":1644,"score":1719},[5038,5040,5042],{"type":1648,"url":5039},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",{"type":1653,"url":5041},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1692,"url":5043},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":240,"slug":5046,"dossier":91,"summary":276,"aliases":5047,"sourceIds":5051,"published":5052,"modified":5053,"checkedAt":7,"severity":5054,"references":5056,"versionKeys":5061,"packageCount":32,"repositoryCount":1819},"pysec-2026-2254-a1ed1fd2",[5048,5049,5050],"BIT-pillow-2026-54060","CVE-2026-54060","GHSA-5x94-69rx-g8h2",[240],"2026-07-06T19:17:08.270Z","2026-07-13T07:26:56.196935469Z",[5055],{"type":1644,"score":1719},[5057,5058,5059],{"type":1648,"url":5039},{"type":1653,"url":5041},{"type":1692,"url":5060},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":241,"slug":5063,"dossier":91,"summary":276,"aliases":5064,"sourceIds":5068,"published":5069,"modified":5070,"checkedAt":7,"severity":5071,"references":5073,"versionKeys":5078,"packageCount":32,"repositoryCount":1819},"pysec-2026-2255-d0951b98",[5065,5066,5067],"BIT-pillow-2026-55379","CVE-2026-55379","GHSA-45hq-cxwh-f6vc",[241],"2026-07-06T19:17:08.577Z","2026-07-13T07:26:26.726353373Z",[5072],{"type":1644,"score":1719},[5074,5075,5076],{"type":1648,"url":5039},{"type":1653,"url":5041},{"type":1692,"url":5077},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":242,"slug":5080,"dossier":91,"summary":276,"aliases":5081,"sourceIds":5085,"published":5086,"modified":5087,"checkedAt":7,"severity":5088,"references":5090,"versionKeys":5096,"packageCount":32,"repositoryCount":1819},"pysec-2026-2256-0f333f0b",[5082,5083,5084],"BIT-pillow-2026-55380","CVE-2026-55380","GHSA-phj9-mv4w-65pm",[242],"2026-07-06T19:17:08.703Z","2026-07-13T07:26:17.085341343Z",[5089],{"type":1644,"score":1719},[5091,5092,5094],{"type":1648,"url":5039},{"type":1653,"url":5093},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1692,"url":5095},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":243,"slug":5098,"dossier":91,"summary":276,"aliases":5099,"sourceIds":5103,"published":5104,"modified":5105,"checkedAt":7,"severity":5106,"references":5109,"versionKeys":5119,"packageCount":32,"repositoryCount":1819},"pysec-2026-2257-bcbe5d79",[5100,5101,5102],"BIT-pillow-2026-55798","CVE-2026-55798","GHSA-4x4j-2g7c-83w6",[243],"2026-07-06T19:17:08.830Z","2026-07-13T07:26:48.229039344Z",[5107],{"type":1644,"score":5108},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[5110,5111,5113,5115,5117],{"type":1648,"url":5039},{"type":1653,"url":5112},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1653,"url":5114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1653,"url":5116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1692,"url":5118},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":244,"slug":5121,"dossier":46,"summary":276,"aliases":5122,"sourceIds":5127,"published":5128,"modified":5129,"checkedAt":7,"severity":5130,"references":5132,"versionKeys":5148,"packageCount":32,"repositoryCount":1736},"pysec-2026-2286-8795b007",[5123,5124,5125,5126],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[244],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[5131],{"type":1644,"score":3074},[5133,5135,5137,5138,5140,5142,5144,5146],{"type":1659,"url":5134},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1659,"url":5136},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1648,"url":3630},{"type":1648,"url":5139},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1648,"url":5141},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1841,"url":5143},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1841,"url":5145},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1653,"url":5147},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1860,1861,1862,2727,2728,4108,4109,4110],{"id":245,"slug":5150,"dossier":91,"summary":276,"aliases":5151,"sourceIds":5155,"published":5156,"modified":5157,"checkedAt":7,"severity":5158,"references":5161,"versionKeys":5168,"packageCount":32,"repositoryCount":1819},"pysec-2026-3447-df031425",[5152,5153,5154],"BIT-setuptools-2026-59890","CVE-2026-59890","GHSA-h35f-9h28-mq5c",[245],"2026-07-08T17:17:27.020Z","2026-07-14T10:56:37.948360943Z",[5159],{"type":1644,"score":5160},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[5162,5164,5166],{"type":1648,"url":5163},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",{"type":1653,"url":5165},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1692,"url":5167},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",[2289,2290,5169,5170,5171,5172,5173,5174,5175],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",{"id":246,"slug":5177,"dossier":91,"summary":276,"aliases":5178,"sourceIds":5182,"published":5183,"modified":5184,"checkedAt":7,"severity":5185,"references":5187,"versionKeys":5196,"packageCount":32,"repositoryCount":1819},"pysec-2026-3451-3e5eac34",[5179,5180,5181],"BIT-pillow-2026-59199","CVE-2026-59199","GHSA-6r8x-57c9-28j4",[246],"2026-07-14T16:17:01.937Z","2026-07-15T20:11:36.266805254Z",[5186],{"type":1644,"score":1719},[5188,5190,5192,5194],{"type":1648,"url":5189},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1653,"url":5191},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1653,"url":5193},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1692,"url":5195},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":247,"slug":5198,"dossier":46,"summary":276,"aliases":5199,"sourceIds":5203,"published":5204,"modified":5205,"checkedAt":7,"severity":5206,"references":5208,"versionKeys":5216,"packageCount":32,"repositoryCount":34},"pysec-2026-3452-0999fd2a",[5200,5201,5202],"BIT-pillow-2026-59203","CVE-2026-59203","GHSA-pg7v-jwj7-p798",[247],"2026-07-14T16:17:02.063Z","2026-07-15T20:11:27.953713427Z",[5207],{"type":1644,"score":1719},[5209,5210,5212,5214],{"type":1648,"url":5189},{"type":1653,"url":5211},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1653,"url":5213},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1692,"url":5215},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",[2347,2348,2349],{"id":248,"slug":5218,"dossier":91,"summary":276,"aliases":5219,"sourceIds":5223,"published":5224,"modified":5225,"checkedAt":7,"severity":5226,"references":5228,"versionKeys":5236,"packageCount":32,"repositoryCount":1819},"pysec-2026-3453-83974725",[5220,5221,5222],"BIT-pillow-2026-59205","CVE-2026-59205","GHSA-9hw9-ch79-4vh6",[248],"2026-07-14T16:17:02.370Z","2026-07-15T20:11:15.582336837Z",[5227],{"type":1644,"score":1719},[5229,5230,5232,5234],{"type":1648,"url":5189},{"type":1653,"url":5231},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1653,"url":5233},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1692,"url":5235},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",[3027,3028,3029,2345,2346,2347,2348,2349],{"id":249,"slug":5238,"dossier":46,"summary":276,"aliases":5239,"sourceIds":5241,"published":5242,"modified":5243,"checkedAt":7,"severity":5244,"references":5247,"versionKeys":5250,"packageCount":32,"repositoryCount":435},"pysec-2026-597-f85c09cd",[5240],"CVE-2026-12243",[249],"2026-06-30T01:16:29.063Z","2026-07-01T18:15:06.027046365Z",[5245],{"type":1644,"score":5246},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5248],{"type":1692,"url":5249},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",[2000,2001],{"id":250,"slug":5252,"dossier":46,"summary":276,"aliases":5253,"sourceIds":5255,"published":5256,"modified":5257,"checkedAt":7,"severity":5258,"references":5260,"versionKeys":5263,"packageCount":32,"repositoryCount":435},"pysec-2026-99-2c63e84f",[5254],"CVE-2026-0848",[250],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[5259],{"type":1644,"score":2651},[5261],{"type":1692,"url":5262},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[2000,2001],1784548466131]